Connecting outside of Network

[aemae]

Hello my name is Eric, and I have a problem. lol

I am trying to connect to my server and also the Agent / Timeclock / Administration screen (what is the screen called?) from my home. I am able to do it by using "teamview" a software that works just like remote desktop, allowing me to take over a computer in the network thus typing in my server ip in the browser which brings me to Agent / Timeclock / Admin screen. There is a small lag when I do this, and it is very annoying.

How do I connect directly to the screen from my home, as well as connect to the server so that I may remotely check my CLI i believe it is called. I am not sure but basically I want to be able to connect to EVERYTHING from my house without the means of remote desktop.

Thank you so much,
Eric

[williamconley]

1) Hi, Eric! LOL (Dialer anonymous? Hm.)

2) Newbie Hints:

when you post, please post your entire configuration including (but not limited to) your installation method and vicidial version with build.

this IS a requirement for posting along with reading the stickies (at the top of each forum) and the manager's manual (available on EFLO.net, both free and paid versions)

You should also post: Asterisk version, telephony hardware (model number is helpful here), cluster information if you have one, and whether any other software is installed in the box. If your installation method is "from scratch" you must post your operating system and should also post the .iso version from which you installed your original operating system. If your installation is "Hosted" list the site name of the host.

If this is a "Cloud" or "Virtual" server, please note the technology involved along with the version of that techology (ie: VMware Server Version 2.0.2). If it is not, merely stating the Motherboard model # and CPU would be helpful.

Similar to This:

Vicibox X.X from .iso | Vicidial X.X.X-XXX Build XXXXXX-XXXX | Asterisk X.X.X | Single Server | No Digium/Sangoma Hardware | No Extra Software After Installation | Intel DG35EC | Core2Quad Q6600

3) There are many different ways but usually it boils down to two possibilities: a) your server has an external IP, enter it and open the firewall on it to allow yourself in. Be careful with this and be sure to only open your individual home IP ... to avoid China hacks.

3) b) your server has a private IP on your office network. In this case you must "Forward" various ports through the firewall to the server. Ports: 5060 UDP(for SIP registration); 80 TCP (web browser); Range: 10000-25000 UDP (for SIP voice).

In this case, however, your individual router makes a huge difference. It is technically impossible to make SIP calls through two routers (the one at home and the one at the office ...) unless one of them has a special routine in it to allow this (luck helps) or unless you are prepared to configure both routers for a direct link to one machine on each side OR can set up a VPN connection through one of them. Usually it's simplest to just use Zoiper with IAX (no SIP!) and then forward port 4569 UDP instead of 5060. But that only matters if you actually want to use a phone.

3 c) If you merely want Web access ... Port 80 forwarded through the router resolves that .. but ANY port you open is a security flaw. Try to limit the port traffic to your home IP if possible. If not, you'll need to use the firewall in the Vicibox server (iptables) to limit access to avoid China Hacks. We install a $100 package calls Dynamic Good Guys for this purpose if you don't want to fight the battle or take chances. There is much less risk with port 80 open, but even then there is still risk unless phpMyAdmin is locked down or deleted. (It has security flaws.)

4) Happy Hunting!

[aemae]

when you say open the firewall to the server and the router ports, are you talking about doing this on the office connection, and the office router, or rather forward my home port to the server? Do you mean maybe do both, forward the ports specified to my home adress, and forward my home adress to here? Sorry for my ignorance lol

[williamconley]

at your house you should not require any changes. but more on that later.

at your office, you would forward the ports through the router to your vicidial server. your vicidial server also may have a built-in firewall active (depending on your installation) and the ports may also have to be opened there as well.

if you cannot complete a SIP call between office/house (sound in one direction or just no sound after you answer the call), it may be useful to modify your home router to point port 5060UDP and range 10000-25000UPD to your workstation (this would, of course, mean you could only have one workstation with this configuration). Most home-agents in this situation merely switch to IAX and do not need to open any ports at all in their home router.

[aemae]

Ok, my VOIP carrier is SIP only I believe, so for now I will have to deal. By one workstation do you mean it would not allow me to connect from ANY computer anywhere but just the home computer that I configured? It wouldn't interfere with the workstations at the office correct? I would like to be able to have full access to the server and ability to make calls from home WITHOUT interfering with the agents at the office.

[williamconley]

your carrier is not a part of this conversation. the connection between your agent and vicidial is in NO WAY related to outbound phone calls and/or carriers. IAX to agent and SIP to prospect is quite normal. as is SIP to agent and PSTN to prospect. That's what asterisk is, a connection system that will convert any audio stream to any other audio stream type to make communication possible.

None of this will "interfere" with anything other than using some bandwidth (which is inevitable)