VOIP thru ASA for Hosted solution

[Christopher Tomlinson]

We are planning to use a VOIP vendor by the name of Livevox

They have sent out a questionair asking for information for the most part it is straightforward the last question has me a bit perplexed and thought I see what the community had to say

The plan is to just pass VOIP traffic from our internal network through ASA IPSEC tunnel to the LiveVox hosted solution

So here is the question from the vendor

VPNed Network Hosts

These can be the IP address for the

end hosts or the NAT or PAT IP address

Non RFC 1918 address needed

So when I questioned the Livevox engineer he stated that this need to be a public IP but not the PEER IP.

I was under the impression that I could  PAT my outside IP which also happens to be my PEER IP what am I missing ?

Thanks in advance

Christopher Tomlinson

[Federico Coto Fajardo]

Hi,

If you're sending VoIP traffic through the tunnel, then the traffic can flow from the real IPs of your local LAN of being NATed to external IPs.

You can definitely PAT the traffic prior sending it through the tunnel (and that PAT address could be the outside IP of the ASA) which in turn will be the peer address as you mentioned.

Sometimes, people use a separate IP from the same range of the outside IP of the ASA to NAT/PAT all the traffic. Maybe he's referring to this, but I don't see why it could not be the same IP of the ASA.

Federico.