How to handle softphones when keeping voice and data on separate VLANs

[m1xed0s]

Hey,

The quetion I have is fairly simple, but I am struggling with a cost effective solution without potentially compromise security:

How to handle communication between softphone and ip phone, when they are on different VLANs? I prefer to not open 16384-32767 ports on router/firewall between 2 VLANs...I know TRP or CUBE can be useful but that requires extra hardware.

Any suggestion?

Thanks,

Shuai

[Dennis Mink]

here's is a good read on it:

http://www.ingate.com/files/Solving_Firewall-NAT_Traversal.pdf

I guess your deciscion will need to be based on what you already have in place. i.e. what firewall have you got and does it support SIP traversal. Having said that, If you are already running ip phones on your CUCM?CME?PBX? you might not neccesarily want an additional CUBE to manage.

=============================
Please remember to rate useful posts, by clicking on the stars below. 

=============================

[m1xed0s]

We have CUCM and CME running SRST. We do not have SIP, all SCCP.

[m1xed0s]

Still waiting experts to jump in...