0

Yeastar as internet gateway / firewall

John Bester

September 22, 2016 07:17

None

Follow

I have tried to use Yeastar MyPBX SOHO as gateway for LAN users to access the internet, but it seems this is not possible. My reasons for trying this are:

1. MyPBX has a WAN and LAN port

2. It has a firewall configuration

3. IP forwarding is enabled (checking via SSH) - so it should be possible

4. It has OpenVPN client, so it could be handy to link to small offices via VPN

I tested this (with firewall enabled and disabled), but no response (ping, tracepath, wget). The request is not blocked, it seems either the request or response packets are simply discarded. Is there a way (or plugin) which I can use to allow this? 

• Facebook
• Twitter
• LinkedIn

3 comments

• 0
  
  Oscar Colka September 22, 2016 13:21

  Hello John, to my past experience, this feature is not supported.

  I think it is good to have gateway/router features in a PBX system to have an all in one solution. But I am worrying if there are too many devices connect to the PBX with router features, the main PBX features would be affected. Personally, I would prefer to use a separated router. 

• 0
  
  Nawir Bu September 23, 2016 00:49

  Better focus Yeastar only as PABX, as suggested by Oscar.

  For firewall, I suggest using CheckPoint.

  The only firewall that pass my test.

  It can block

  -Internet Download Manager

  -Psiphon

  -ZenMate

  -Soft-Ether

  -Opera Turbo

  -Torrent

  -Tor Network

  -OpenProxy

  I already test PaloAlto, FortiGate, Cyberoam, SonicWall, Sangfor, WatchGuard, Mikrotik.

  None of them can block all my test

  Be sure your firewall must be voip savy.

  Need to disable SIP ALG in your firewall

   

   

• 0
  
  John Bester September 28, 2016 08:14

  You are missing a valuable point in being a PBX. Remember the MyPBX SOHO is specifically aimed small businesses. The kind that would typically have one DSL line and not too many users. With this in mind, your PBX might seem bad because of a single reason - other people might experience your voice breaking up and I can demonstrate it very easily. If I were to do remote support for such a company using teamviewer or anydesk their voices will break up because normally upload speeds is much lower than download speeds and there probably is no QOS configured on their ADSL router that gives VOIP higher priority than other traffic. If all traffic was routed through MyPBX SOHO, the MyPBX could do the QOS and you would have much better quality. If you have 30+ users, you would have more money to spend on internet infrastructure and would either have a second DSL line or a managed switch which you can use to set up QOS. But the name SOHO implies Small Office or Home Office. So it might frequently be used by companies with less than 10 employees. What you are basically saying is in the future I should recommend a FritzBox to my clients. Many of their devices have exactly this feature and even have DECT as well - all this at the same price (or even less if you need an FXO port as a failover). So all I have to do is to set up a different type of VPN to get all the functionality I want. The reason why I liked the Yeastar is because it uses Asterisk and could be used as an OpenVPN client, but the OpenVPN client part is of no use to me if I cannot use it by the network behind the Yeastar. And the QOS problem adds to the cost, because my client might have to install more hardware to tackle the problem.