Home Forums HAast (High Availability for Asterisk) Configuration & Optimization Single subnet for management NIC and VoIP NIC

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
  • Avatar photoCustomer Inquiry
    Post count: 201

    Due to some technical limitations we can only have a single NIC and single subnet (IP range) for both management and VoIP NIC’s. And we want HAAst to move a 3’rd IP address (on this subnet) between peers when control fails over from one node to the other. How do we do this?

    Avatar photoTelium Support Group
    Post count: 262

    I should start by saying that we don’t officially support this design because some of the steps involved are beyond the skill of an average administrator.

    If you are very comfortable with networking, iptables, and routing then the answer is YES this can be done. (But our support team cannot assist you further with this topic).

    Suppose you have

    • one NIC in each node
    • a single subnet (i.e. subnet) used by each NIC
    • Node A uses, and Node B uses

    and you wish to have HAAst add to the active node (while leaving the management IP accessible). The steps to do so are:

    • Setup the OS to assign the static address and to their respective nodes
    • Setup haast.conf to enable the VoIP NIC feature, and tell HAAst to use as the shared IP
    • Setup the HAAst pre-start event handler to add the following postrouting rules in the NAT chain to source-NAT all outgoing voice traffic (5060 + RTP ports) as the shared IP:
      iptables -A POSTROUTING -t nat -p udp –dport 5060 -j SNAT –to-source
      iptables -A POSTROUTING -t nat -p udp –dport 10000:32768 -j SNAT –to-source
    • Setup the HAAst post-stop event handler to remove the above rules.

    The end result will be that all voice related traffic will have their headers rewritten to show instead of (or Depending on the VoIP protocols you use, TCP vs UDP selection, and other socket services you offer you may have to expand on or customize these rules. But the above should be sufficient to show how to accomplish what you want.

Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.