Objecive: get SIP phones working, where both TCP/UDP port 5060 to 5090 is blocked
To ensure voice quality:
- tunnelling is very straight forward now, easy task, except I don't know what is your call volumn. Can you imaging trying to rought all SIP + RTP into a tunnel, to maintain good quality voice call, that may cost you beyond. So below is the common commercial practice:
- connections to external (SIP route to tunnel, RTP route direct) :other 5060 parties, such as other companies, other voip providers, shall route thought the tunnels
- connections to internal (route direct): 5050 ports, phones that we can config, shall route direct without the tunnel, by using DNS infrastructures, which shall be as easy as using 5060
Software needed:
- OpenSSH
- SSHD, for me to connect in
- DNS server to support TXT records of _tls._tcp
- good tunnel, for VoIP with TLS/SSL, need 98kbps * 1.23 factors (assume using g711 (ulaw) codec + SIPS + SRTP)
- Remote Connect In technologies, for me to do the work:
- SSHD (if you are going to use Open Source OS)(you will need a remote control software for us to install, support to your PC, at the same time the RDP will also best to open as backup remote control method, teamviewer shall also be considered, just in case of connection)
- VNC+RDP (if you are going to use Microsoft OS)(you will need a remote control software for us to install, support to your PC, at the same time the RDP will also best to open as backup remote control method, teamviewer shall also be considered, just in case of connection)
Hardware needed:
- Router (capable of doing "port range" forwarding, note the range is important, or it may be become very difficult to forward RTP packets ports)(the Router shall also has QoS for VoIP, so that you voice don't trim off while your network is accessing other internet functions, a good firewall may also be considered down the track)
- Router (capible selective routing. If don't have one, can use your linux host iptables) - DTFM telephone handset (of course)
NOTE: my quote only include labors.
NOTE: My delivery time is based once you have the listed BOM ready
NOTE: there are many other un-identified suitable of your environment, normally we use better ways to implement after start getting working on it.
Look forward to do business with you.