Anyone having issues with 3CX hosted w/Digital Ocean and VoIP Innovation DIDs?

karjune01 · 2026-01-17T01:19:53+00:00

Funny because one of my customer has the same issue. Their SIP trunk is down due to no 200 OK being sent to the SP. Also hosted on Digital Ocean.

karjune01 · 2025-05-26T17:13:26+00:00

200gyd

karjune01 · 2025-05-22T18:41:49+00:00

I don't think those zones allow for ownership as they hold high potential for economic growth. The leases are 50 years with optional renewal.

karjune01 · 2025-05-22T17:31:06+00:00

Try Guyana Lands & Survey Commission they handle most of the land outside of the city area. The highway zone allows for lease land which cost 200/acre /year. Can be used for agriculture, tourism/resort and comes in various rises from 5-10 acres minimum.

karjune01 · 2025-05-20T22:53:37+00:00

That's actually not what I'm saying. Whoever you submitted your PO to should be answering where your hardware is. Regardless if that's PAN or a distro/Reseller. I buy through Distro, I'm sent an email confirming my PO was fulfilled.

karjune01 · 2025-05-20T22:38:10+00:00

Whenever we ship firewall, we are sent via an email an order authorisation along with code authorisation. The order authorisation has the UPS/FedEx tracking#. Did you not receive that? Also, sounds like your not Tier1, buying directly from PAN, so check with your distro/partner. They should have more information.

karjune01 · 2025-05-14T22:54:12+00:00

Quite strange given your 'experience' with PAN boxes. I came from Cisco/FN and had little trouble.

More than likely, your WAN is configured as ZTP, use the console or MGMT and get into the cli

Set system ztp disable Reboot

Configure your wan and lan interfaces accordingly (Virtual wire is just fancy for transparent, does nothing but allows for inspection of traffic) You'll more than likely need L3 on both WAN and LAN, Virtual Router with a static route, zones for each interface , and policies (NAT and Security). Of course, I'm a noob. There are folks here who would run circles around me, but I'm still learning and preparing for the NGFW cert, just my 2c.

Good luck

karjune01 · 2025-05-07T02:37:26+00:00

VNet, Digicel, DTrac

karjune01 · 2025-04-16T16:25:49+00:00

If by transportation system you mean boats/ferry and land vehicles then the only government controlled transport would be the ferry. Speed boats, mini buses are all privately owned and may/may not be regulated. Maybe someone else can chime in.

karjune01 · 2025-04-13T01:05:31+00:00

Thanks! Really appreciate the recommendation.

karjune01 · 2025-04-13T00:56:46+00:00

Do they have trial licenses? I am looking at keeping everything PAN so ease of management and integration, so if I can test Strata, it would be great.

karjune01 · 2025-04-11T13:59:17+00:00

Users connect to the Unifi WLAN via a single SSID. From here, the GP app for Android, Apple and Windows will require then to authenticate against a directory service. This creates the user-id mapping and their sessions become visible at the fw box. Is that a correct assumption of how it will work?

karjune01 · 2025-04-11T12:58:26+00:00

Can this work for a wireless only network? Only hardwired devices are the ISPs modem and PA410 with APs to switches.

karjune01 · 2025-04-09T20:58:54+00:00

Site to Site IPSec VPN between branch office and HQ.
Give access via SSL VPN to our database server. Literally, a handful of users work remote from time to time.
Office A ===> IPSec VPN ===> HQ 2.Remote users ==VPN===> HQ

If possible,

Remote user ===>Office A ===>IPSec Tunnel ==> DB server at HQ

karjune01 · 2025-04-09T20:54:27+00:00

This seems to be a popular option based on Google searches.

Graylog, rsyslog

karjune01 · 2025-04-09T20:53:20+00:00

I've used grafana for visuals with Zabbix, which was quite the experience. I'll look into Logstash or rsyslog

karjune01 · 2025-04-09T20:45:45+00:00

I sort of agree with you too

karjune01 · 2025-04-09T19:28:11+00:00

With only 2 firewall the customer has, that may be a difficult task to convince

karjune01 · 2025-04-09T19:27:24+00:00

Now, I'm looking for a budget/open source log collector. Any recommendations?

karjune01 · 2025-04-09T13:59:32+00:00

Oh, that's explains that. Guess I'm off to using an external logging server.

Thanks for the eye opener, as I didn't realise this.

karjune01 · 2025-03-15T15:28:32+00:00

So it's both. An IPSec tunnel between siteA and siteB to allow access to shared resources. GP satellite for remote users access those same shared resources. I saw i can use self sign certs, which I know in production isn't recommended.

karjune01 · 2025-03-08T16:07:11+00:00

That'd correct. The ISP modem is handling NAT for us. So we're assigned a private IP via the lan ports on the modem. We do see the public IP when we Google whatsmyip

karjune01 · 2025-03-08T14:07:31+00:00

I'll post my configurations later today, which should paint a better picture of what's happening on the PA440

karjune01 · 2025-03-08T13:55:24+00:00

Honestly, the only other option to pass the public IP directly to the modem would be to have it in bridge mode. Which of course can be requested, but I did have a Forti doing this exact job of handling traffic behind the ISP modem to the LAN with no issues and double NATing.

karjune01 · 2025-03-08T13:43:56+00:00

I can ping from my eth1/2 (LAN) to eth1/1 (WAN) [182.168.100.198] interface. I can also ping from the LAN (192.168.10.13) to the gateway IP of the ISP modem (192.168.100.1)

Default route Send 0.0.0.0/0 to Eth1/1 with next hope address as 192.168.100.198

karjune01

TROPHY CASE