Problem with Mikrotik (CCR1016 -12G) and Asterisk (free-pbx)

Hi, this is my first post and I hope to be clear on the issue that I will raise below (btw, sorry for my english, it’s google translated):

I have two fiber optic internet channels (12 Mbps each), with a pool of 5 public IPs on each link; I used independent links, the first channel is for internet for the local network , mail with exchange server, TS and VoIP telephony (pc with elastix and free-pbx 2.9), and the second channel is for a separate wifi and vpn connections … some time before i was using two different routers for each channel but now i bought a mikrotik cloudcore CCR1016-12G and i included the two links on eth1 (eg IPs from 190.190.1.10 to 14) and eth2 ( eg IPs from 190.190.50.114 to 117), while LAN links put them in eth9 (VoIP server 192.168.0.100 ), ETH10 (local network 10.0.0.x ) and eth11 (AP for wifi). Obviously I made the bridge of local networks so I can see both computers on the local LAN eth10 as IP phones that are in the segment of eth9 .

The problem we currently have is in remote voIP extensions that connect from the internet to the asterisk (extensions on the local network run smoothly), so I create two NAT rules to allow complete traffic to pass out asterisk and vice versa, and reviewing in the asterisk it appears the public IP that using remote extensions to Sign in:

ip firewall nat add chain=dstnat action=dstnat to-addresses=192.168.0.100 dst-address=190.190.1.12
ip firewall nat add chain=srcnat action=srcnat to-addresses=190.190.1.12 src-address=192.168.0.100

And yet, although remote extensions are registered in the asterisk and can be dialed from any extension, when it answer the call is absolutely not hear anything but only in one way; I mean, if my local extension is 201 an i call to remote extension 550, whom answer the call on the 550 can hear but otherwise I do not hear anything … same happens if they call between remote extensions or make a call from remote to a local extension not heard anything …

The provider of the VoIP platform reviewed all of the asterisk/fee-pbx plant and tells me that there does not have to do anything, which is subject of the firewall or router, so as I am new to handle this cloudcore i don’t know what else to try to work the remote VoIP and that’s why I turn this issue to the community.

Thank you in advance for any help you can give me about it…

regards,

Diego

Hello Diego,

Thank you in advance for any help you can give me about it…

I would suggest to build a DMZ and than you could place the Asterisk appliance
inside, so it can be reached from the internet and from the local area network.