I’m getting confused as to the typical setup for FreePBX
Please tell us about the application. New system? If so, why on-site, rather than in the cloud? If not, what are you replacing and why? Approximate size (number of extensions, number of simultaneous calls)? Any non-VoIP trunks (POTS, PRI, GSM gateway, etc.)?
Yes a new system, we already have a VM server on site, in order for me to start learning the system (and probably breaking it a few times) i have the ability to try and try again with an on site VM.
I’d say about 30 handsets on desks and 30 softphones with a single receptionist. No more than 5 simultaneous calls. no non voip trunks
Why is a single NIC connected to your existing LAN unsuitable?
because if the firewall is turned on that is a double firewall situation which isn’t recommended. if the firewall is turned off i’m having to set up quoite a few rules on our firewall and im still getting issues with calling but no audio between zulu for example
I want the wan nic to not go via our PFSense router
That implies either multiple public IP addresses or double NAT. Why do you want to do this? What equipment do you have now between the pfSense and your ISP(s)?
there’s only an edge switch between pfsense and isp.
At the moment it’s isp router --> edge switch --> pfsense --> freepbx --> softphones
but in that setup i’d be disabling either freepbx firewall or pfsense firewall.
every time i enable both NICs on FreePBX i get locked out of both WAN and LAN interfaces …
Is the machine virtual or physical? If virtual, which platform? If physical, can you connect a keyboard and monitor to it so you can troubleshoot when the network isn’t working?
virtual VMWARE EXSI and yes i can reboot and disable / enable nics very easily or rebuild from scratch, hence the reasons i prefer it on site.
so it boils down to. in a more traditional office setup with existing firewalls / vlans is it preferred to plug FREEPBX into a network switch port the same as a phone or computer and have clients contact it via an internal ip, or should it be wan facing and everything go out the building and back in again?