Allworx thru PFSense



  • I have an allworx VOIP/SIP phone server in my office. We have two WAN connections, fiber, coax, coming into our pfsense box. Our pfsense box has 5 NICS.

    1. Fiber
    2. Coax
    3. General LAN (192.168.90.0/24)
    4. Wireless guest LAN (192.168.91.0/24)
    5. Phone system (192.168.92.0/24)

    Currently the allworx WAN port is plugged into the phone system interface and is bridged with the fiber interface. The config in the allworx is utilizing one of our public ip addresses, and all firewall rules are **** for the phone system and bridge interfaces. The phones work perfectly like this.

    However we want to utilize the dual wan on our phone system, so what I have tried to do is treat the phone system interface as I do #3 and #4 and give the allworx a local IP such as 192.168.92.1. What I've also done is setup an IP alias/virtual IP of that public IP address, and setup a 1:1 NAT corresponding from that public ip to 192.168.92.1.

    Now what happens is we can make calls in and out, but we get no voice on either end. Our allworx provider is saying it has something to do with the RTP stream not establishing a connection. Any idea how to solve this? It may have something to do with virtual IP's and outgoing packets, where the main fiber interface IP is (example) 1.1.1.1, but the allworx public ip needs to be 1.1.1.2, and all outgoing data is going out as 1.1.1.1. How would I solve that?



  • When you say that the Allworx WAN port is plugged into the phone system interface, what is the "phone system interface?"



  • I was just browsing this for a solution to my problem unrelated to your issue BUT I don't think Allworx can do WAN and LAN port at the same time regardless of what IP's you put on them.  I had this going on and it was a mess until we unplugged the WAN and all was well.  Supposedly the Allworx can be your router but I think it's a phone system not a router and thus, should do one thing and one thing well…phones!

    Moreover, even if you wanted to do dual WAN - the Allworx phones on the other end can't connect to multiple public IP's as their voice gateway...or whatever they call that option on their desk phones so doing dual WAN is a moot point.

    It has been a while since I touched one so all the above is from memory if it serves me right.



  • @pdrass:

    I was just browsing this for a solution to my problem unrelated to your issue BUT I don't think Allworx can do WAN and LAN port at the same time regardless of what IP's you put on them.  I had this going on and it was a mess until we unplugged the WAN and all was well.  Supposedly the Allworx can be your router but I think it's a phone system not a router and thus, should do one thing and one thing well…phones!

    Moreover, even if you wanted to do dual WAN - the Allworx phones on the other end can't connect to multiple public IP's as their voice gateway...or whatever they call that option on their desk phones so doing dual WAN is a moot point.

    It has been a while since I touched one so all the above is from memory if it serves me right.

    The provider says it's possible to dual WAN an allworx, but they said the only device that allows it is some device they sell. I've never seen it before and cannot remember the name.


Log in to reply