Firewall/NAT

[EXISTING SITUATION:]

Hi there

I have a situation where I cannot find a solution for.

-> Pls check attached drawing

EXISTING SITUATION:

There are 2 networks connected through a wireless bridge. Clients from each network have their own internet access through their respective gateway. The clients can also access the other network's resources (through the wifi bridge). All this is perfectly working.

Here're the m0n0walls configurations:

m0n0wall 1 (static  route):
OPT    192.168.10.0/24    192.168.15.1

m0n0wall 1 (OPT firewall rule):
*    OPT net    *    *    *
*    192.168.10.0/24    *    *    *

m0n0wall 2 (static  route):
OPT    192.168.20.0/24    192.168.15.2

m0n0wall 1 (OPT firewall rule):
*    OPT net    *    *    *
*    192.168.20.0/24    *    *    *   

In network 2 there is a VoIP PBX with a few SIP phones. All these work fine (internal and external communication through the internet gateway on m0n0wall 2).

NEW SITUATION:

A new VoIP SIP phone is now connected to the network 1. It need to register on the VoIP PBX in network 2 and communicate with the other existing phones through the wifi bridge.

As all the existing VoIP PBX & phones do use the internet gateway on network 2, I think that I also need to use that gateway for the new VoIP phone 1 !?

And here I am stuck!

• What IP, mask, gateway for the new VoIP phone 1?
• Do I need to configure something extra on both m0n0wall?

Thanks a lot on advance,
Peter

the two networks should be separated in order to allow you to route only the traffic you need to the satellite site.

the two networks should be separated in order to allow you to route only the traffic you need to the satellite site.

Hi there

Thanks for your answer but can you elaborate a bit more please? What exactly do you mean by "networks should be separated"?

Thanks,
Peter

now that ive looked at your setup, the phone is the only thing that needs to be configured.

Just make sure it is set to register to the PBX's IP address and let it obtain its own IP address through dhcp.

The final solution that helped me can be found here: http://forums.askozia.com/index.php/topic,1445.0.html