SIP Phone over WAN to CME

[mileslevi89]

I have a 7965G with SIP frimware and a DN 1003 created for it on CME. The phone registers over lan and even from different VLANS. I would like to move this phone to a remote site, a employee home so any equipment added to that end isn't really an option. Im attempting to register the phone over the office public IP and forwarding 5060 to the CME, there is a firewall in front of it.

The phone and a destop SIP client will 408 timeout over the WAN IP but both will register over LAN.

Is this possible? If it is im leaning toward it being a firewall or routing issue? 

[Leonardo Santana]

Hi,

CME does not have a feature like MRA:

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X12-5/exwy_b_mra-expressway-deployment-guide/exwy_b_mra-expressway-deployment-guide_chapter_00.html

Even if you achieve this objective with CME, your SIP/RTP traffic will be exposed.

You should think in another solution like CUCM with Expressways or Webex Calling.

Its possible to establish a SSL VPN to the users in your firewall? So they can establish a vpn connection with the HQ and use Cisco Jabber as their softphones.

[mileslevi89 · Accepted solution]

Im with you about the security aspect of it. We have decided to get him a cheap VPN router for his house, this seems to make more sense.

[Roger Kallberg]

What type of WAN connection to you have to the remote site?