IPsec VPN
An IPsec VPN is a private tunnel between your firewall and Hams. Use it to connect a PBX that has no public IP address. Use it also to keep SIP and media traffic off the internet.
Hams support gives you the tunnel values. The values include the peer addresses, the encryption settings, the pre-shared key, and the hosts or subnets on each end. This page does not list them.
Traffic in the tunnel
Route these SIP and media ports through the tunnel, in both directions.
Limit the tunnel to these ports, between the Hams host and your PBX host.
Bring the tunnel up
Ask Hams support for a tunnel
Send the public IP address of your firewall and the address of your PBX to Hams support. Hams support sends you the tunnel values over a secure channel.
Set up your side
Create the tunnel on your firewall with the values from Hams support. Add the hosts or subnets from Hams support as the traffic selectors. Open the SIP and media ports in both directions.
Wait for Hams support
Hams support sets up the other end of the tunnel. Hams support tells you when the tunnel is ready.