payman
join:2000-11-04
Bellevue, WA
| reply to boatman9
Re: [Packet8] Setting up a BPG510 on Router w/ Tomato Firmware
If there is an unreliable component in my setup which requires reboots every now and then, it's the BPG510. For this reason I am very hesitant to put it right after the cable modem, and put the WHR-HP-G54 in it's DMZ.
How about putting the BPG510 in WHR-HP-G54's DMZ? Any security risks here?
Thanks |
|
mazilo
From Mazilo
Premium
join:2002-05-30
Lilburn, GA
| said by payman  :How about putting the BPG510 in WHR-HP-G54's DMZ? Any security risks here? DMZ is meant for a test bed only, AFAIK. Why don't you post here your BPG510 configuration and who knows someone may recognize it and comes up with some fixes. Without your configuration, your guess is as good/bad as anyone's else. |
|
boatman9
join:2003-07-28
Portland, OR
| reply to payman
said by payman :If there is an unreliable component in my setup which requires reboots every now and then, it's the BPG510. The unreliable component could be the WHR-HP-G54 firmware. If the the WHR-HP-G54 failed to keep a NAT session open then inbound SIP packets would not reach the BPG510, consequently you would not receive inbound calls during that time. |
|
payman
join:2000-11-04
Bellevue, WA
4 edits | reply to mazilo
said by mazilo :
DMZ is meant for a test bed only, AFAIK. Why don't you post here your BPG510 configuration and who knows someone may recognize it and comes up with some fixes. Without your configuration, your guess is as good/bad as anyone's else. I am using the default factory configuration for the BPG510 - nothing has been changed. So I have:
Obtain WAN configuration dynamically; no PPPoE; no MAC Cloning; DHCP enabled; no static IP; dynamic routing disabled; default reserved ports of 68, 80, 49604, 8000-8019; no filtering; no DMZ; latest firmware (at least that's what Packet8 support tells me), ...
Thanks |
|
payman
join:2000-11-04
Bellevue, WA
| reply to boatman9
said by boatman9 :The unreliable component could be the WHR-HP-G54 firmware. If the the WHR-HP-G54 failed to keep a NAT session open then inbound SIP packets would not reach the BPG510, consequently you would not receive inbound calls during that time. This is true and I agree. However as best as I've been able to determine, the router keeps NAT sessions open for very long times (days) with no problems whatsoever. For example I've never seen a disconnected message from a SSH terminal which is open 24/7, and even when I am not receiving incoming calls, I can access the Internet fine (web/SSH/...). There is no need to reboot the router; only to reboot the adapter. |
|
