Tunnelling to the Elastix Web interface

One of the other great things you can do with SSH tunnelling is tunnelling to the Elastix web interface. When you are using putty to login to your machine use this tunnelling rule.

Elastix uses https for its web interface. Https runs on port 443. So our source port will be 443 and the destination is going to the local loopback on the Elastix machine and port 443. 127.0.0.1 basically means just access itself on 443. Once this is added into your tunnelling rules then open the putty console and login to your machine.

Now go https://localhost

This should bring up the Elastix web interface.

Finding Phone IP Addresses

Another great feature is to login to your machine then find all the IP addresses of your phones. This can be done by using the following steps.

Once you are logged in type the command

asterisk -rvvvvvvvvvvvvvvv

This command takes you into the asterisk console. From here you can type “help” and it will show you all the commands. Make sure you type it without the “”.

To find the phone devices type

sip show peers

This will show you all the ip phones that are logged in. You can find out all the ip addresses and use what you have learnt in part 1 to access all your phones. You can also use the asterisk cli module in the Elastix web interface to do this. This is under PBX then go to tools. Once you are in the asterisk cli type

sip show peers

Conclusion

Now you have mastered SSH tunnelling you should be able to access all your devices in a much easier way.

Sometimes the best tools we can use are the simple ones. I have been an asterisk tech for over 4 years now and this is one of the tools I couldn’t have been able to live without. On most IP networks customers are splitting their voice and data networks. The phones are on a completely different network to the computers and the Elastix box will be the only device which connects to both networks. SSH tunnelling allows you to connect to the phones when you are on the data network. Another situation where tunnelling is great is when you have remote access to your Elastix machine but you only have access to port 22. SSH tunnelling allows you to connect to the Elastix machine then tunnel to any device on the Elastix network. SSH tunnelling is done through putty. Putty is a program that allows you to load the linux shell through your windows machine. You can grab putty from http://www.chiark.greenend.org.uk/~sgtatham/putty/.

Configuration

In this example I will connect to an Elastix box then I will tunnel to an IP phone on the network. Open putty and put in the ip address of the Elastix machine you want to connect to.

Now we need to add in our tunnel locations

First add in your source port. This will be the port that you use on your local machine to connect to the remote device. I am connecting to a linksys 942 which uses http. Http uses port 80. Next we will add in our destination. The ip of the phone is 192.168.1.101 and it is http so go to port 80. Once this is in add the tunnel to your list.

Once you have added it should show the tunnel in the list and now hit open to connect to the box. Plug in your credentials to authenticate yourself to the machine.

Now we are ready to open up the web interface on the linksys phone. Open up internet explorer and plug in the address http://localhost:80. This means connecting to your tunnel on local source port 80. This will push through to destination of 192.168.1.101:80.

Above you will see the interface for the Linksys 941 which I have SSH tunnelled through to. Here is an example where you have SSHed into your Elastix machine and you want to tunnel through to 10 of the phones on the network.

Example

Phones sit on ip addresses 192.168.1.101-110. They are all configurable by http which is port 80. The Elastix machine is on 110.110.110.110. Bring up putty and plug in the server address of 110.110.110.110. Then go to the tunnels section and add the following entries

Source 81 Destination 192.168.1.101:80         -    You can connect to this through internet explorer on http://localhost:81

Source 82 Destination 192.168.1.102:80         -    You can connect to this through internet explorer on http://localhost:82

Source 83 Destination 192.168.1.103:80         -    You can connect to this through internet explorer on http://localhost:83

Source 84 Destination 192.168.1.104:80         -    You can connect to this through internet explorer on http://localhost:84

Source 85 Destination 192.168.1.105:80         -    You can connect to this through internet explorer on http://localhost:85

Source 86 Destination 192.168.1.106:80         -    You can connect to this through internet explorer on http://localhost:86

Source 87 Destination 192.168.1.107:80         -    You can connect to this through internet explorer on http://localhost:87

Source 88 Destination 192.168.1.108:80         -    You can connect to this through internet explorer on http://localhost:88

Source 89 Destination 192.168.1.109:80         -    You can connect to this through internet explorer on http://localhost:89

Source 90 Destination 192.168.1.110:80         -    You can connect to this through internet explorer on http://localhost:90

Conclusion

SSH tunnelling is a great way to easily access your phones from outside the network. You only need one port forwarded on your router to get access to everything you need. Another way to access everything you need is through VPN. In my next article I will show you a very simple way of turning your Elastix box into a PPTP VPN server.