On 6/17/11 9:35 AM, Jonathan Bennett wrote: > Phillip, > What would be the advantage of ipsec over OpenVPN? > > In my experience, if you have Asterisk deployed, the call is > routed through Asterisk, which handles the Nat traversal fairly well. > Are you describing a sip re-invite, where the local phone connects > directly to the remote end? > > ~Jonathan Bennett
Well, I know a lot of hotspots (hotels, airports, etc) that don't handle OpenVPN SSL... or even at all. Also, IPsec QoS marking is easier to handle than mixing several protocols over an SSL stream all with the same markings. One thing I like to use IPsec for is running SIP to my soft client on my laptop or even to my iPhone. As for Asterisk, it handles NAT fairly well *unless* Asterisk happens to be running on the machine providing NAT mapping itself (i.e. on your firewall appliance). Then... not so well. I'd like to see Asterisk punch holes for the media stream via ipt on-the-fly so that the phones don't actually have to be NAT-aware. _______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
