SBC on VPN 'LAN'?

[dandenson]

Anyone tested running an SBC at a site that is VPN'd to a remote 3CX? I'm using VPNs to keep everything 'local' ie routed to avoid all NAT issues, but in doing this phone to phone media is traversing the VPN.

Thinking about using the SBC just to keep media local, and putting in the private IP of the 3CX system in the SBC's configs but I don't want to test this in production without some commentary from someone else who has done it.

 

[leejor]

If you have an SBC you could try installing it, with a few new test sets, at the server end. In theory, I can't see why this wouldn't work if everything is directed to the correct IP, the sets communicate with the SBC IP rather than the server IP. That said, there may be an unforeseen issue with auto provisioning.

 

[CentrexJ]

Why would your phones send the audio over the VPN when calling each other from the same site? Do you have them checked as ‘pbx delivers audio’? If so turn that off.

 

[eddv123]

If I ever use a VPN then I would use DHCP option 66 for provisioning and do away with the SBC idea: https://www.3cx.com/sip-phones/dhcp-option-66/

I get why you want to do this however unfortunately when using the VPN I have always had to enable "PBX delivers audio" on the extensions.

 

[YiannisH_3CX]

Hello @dandenson

Since you are using a VPN and the extensions are provisioned as local devices you should not need a SBC to keep the traffic local with calls between extensions. For provisioning you could use DHCP option 66 like @eddv123 suggested.