VPN site to site (work / home)

Ciao papali,

If this is an Ethernet phone, the RED connection is the solution.  If you have a UTM with a free home-use license at home, you can build a UTM-to-UTM RED tunnel.

If this is a VoIP phone, you then can use one of the site-to-site VPNs.

Cheers - Bob

Hi Balfson, your proposal is valid, but I have to do the same thing for 10 users, that is to connect 10 voip phones to their home and I don't have the budget to buy 10 REDs or install computers with UTM with free home-use license. An alternative came to my mind, I ask for advice: Since most of the users to whom I have to connect a voip phone have a fixed public ip provided by their ISP, if I created a NAT destination from their home to the PBX by authorizing only that one. public IP address, would it be safe? Obviously then I have to put my hand to their ISP's router to configure a forwarding port.

Thanks in advance.

VoIP phones are not the same as Ethernet phones.  A single DNAT in your UTM should be all you need for your solution instead of worrying about the ISPs' routers:

{group of Hosts for employee IPs} -> {group of services needed for your phones} -> External (Address) : DNAT to {Host for PBX}

Any luck with that, or does your PBX also need to start a connection with your phones?

If the phones can VPN to your UTM or if the home routers can be configured to connect via VPN, you wouldn't need to open any ports to the outside,

Cheers - Bob

VoIP phones are not the same as Ethernet phones.  A single DNAT in your UTM should be all you need for your solution instead of worrying about the ISPs' routers:

{group of Hosts for employee IPs} -> {group of services needed for your phones} -> External (Address) : DNAT to {Host for PBX}

Any luck with that, or does your PBX also need to start a connection with your phones?

If the phones can VPN to your UTM or if the home routers can be configured to connect via VPN, you wouldn't need to open any ports to the outside,

Cheers - Bob