cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
442
Views
0
Helpful
5
Replies

Really need CUBE configuration?

israel.castillo
Beginner
Beginner

Hi there

 

I´m not really sure if I need CUBE configuration, we are going to connect via sip trunk to another site (another voice network), I already know their ip address where I set up in the sip trunk, as you might know we are going the use the TCP port 5060 which is the default.

As you might know signiling and RTP´s do not pass throught the same sip trunk, and as long as I know they travel separately. (correct me if I´m wrong)

So, the security team have told me that they cannot open ports for the RTP´s, so my voice team thought to configure CUBE for the RTP´s.  So my question is, if we are correct or if there´s another solution?  Let me know if you guys have questions. thanks. 

5 REPLIES 5

trevor240
Beginner
Beginner

May I ask how the two sites are getting connected? In terms of the layer 1 of the OSI Model.

Well
In terms of layer 1, let me doble check that, why would you like to know about conectiviy for layer 1?

This is how we are planing to connect.

 

- the other site will be able to connect from their public IP address to us T1 Prod public IP X.X.X.X over TCP port 5060.
- that ip address translates to our cucm
- For outbound connectivity we will create the SIP trunk to communicate to the other site over TCP port 5060.
- These outbound connections go to the Internet via Shared Services.
- When these connections go out, they will be translated to one of 4 ip address that will have.

 

So basically  I will only need to create the SIP trunk, but I know will only pass the signaling and I´m concern about the RTP´s. thanks. 

Philip D'Ath
Advisor
Advisor
Could you build a VPN between the two organisations (specifically the VoIP devices) to make your security people happy?

I wish but, but let me explain you, how is going to be:

 

- the other site will be able to connect from their public IP address to us T1 Prod public IP X.X.X.X over TCP port 5060.
- that ip address translates to our cucm
- For outbound connectivity we will create the SIP trunk to communicate to the other site over TCP port 5060.
- These outbound connections go to the Internet via Shared Services.
- When these connections go out, they will be translated to one of 4 ip address that will have.

Hi Israel,

I would not expose the CUCM to the Internet.

The CUBE is the best solution even because you would expose its public interface only (behind a firewall opening signaling and rtp ports) .

You could apply security restriction on the CUBE by allowing connetions by remote public and local internal IPs only.

 

 

 

HTH

 

 

Regards

 

 

Carlo

Please rate all helpful posts "The more you help the more you learn"
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: