Hello:
I'm installing Mikrotik in our small office, and I want to know if is possible to do this..(I attach the picture, that explain it better than words )



The idea is, use the IP and the connection of the ISP2 for the Asterisk (with public IP address). And use the connection of the ISP1 only to the PCs in the network (via NAT), but that they can access from the LAN to the Asterisk Server (with the public IP and connected to the ISP2).

Is it possible? Is it very difficult?
Thanks
Best regards,

Hello:
I'm installing Mikrotik in our small office, and I want to know if is possible to do this..(I attach the picture, that explain it better than words )



The idea is, use the IP and the connection of the ISP2 for the Asterisk (with public IP address). And use the connection of the ISP1 only to the PCs in the network (via NAT), but that they can access from the LAN to the Asterisk Server (with the public IP and connected to the ISP2).

Is it possible? Is it very difficult?
Thanks
Best regards,

easy, just make a masquerade rule for wan ISP1 for the LAN , and another rule in firewall to drop destination address=asterisk server interface in=LAN and destination port= can be all or just 80 for GUI

This should be totally straight forward to achieve with routeros.

I guess I should ask you how many ports you have on your router?

You will probably want to use policy based routing to make this work nicely. Check in the wiki for an example.

I should add though that my own asterisk server worked much better when I added two network cards. This made sure that the only traffic on the interface with the public IP address was SIP TRUNK traffic.

All the load for the IP phones in the LAN was handled by another network card with a LAN ip address. My QOS and trunk performance was much better.

So, you can just take the ISP 2 link and plug it directly to the Asterisk box bypassing the mikrotik.....

Then you can plug the lan interface to the mikrotik and use this for QOS work in the LAN side.

Rgds

Alex

Can you redirect in Asterisk only the trunk via the public IP, and the local calls via the ethernet card 2, with private IP?

Best regards,

Yes of course.

In fact all you do is set the deault gateway for the asterisk to be the link to the dedicated ISP and the default gateway for the LAN ip phones to the mikrotik router that handles all other traffic.