14.5.7.1. Important Information 
Originally there was no possibility to use “WAN Public IP” on
STMIX/STMIY as there was no option to define a dedicated WAN interface. Therefore
WPUBIP and USEWANIF parameters of CGWB AMO commands were dependent on
each other. Splitting the functionality into two independent parameters
brought us a benefit of employing Near-end NAT on STMIX/STMIY board (with limited
number of interfaces or as multiple-feature with local HFA subscribers
and SIP trunk) or on SoftGate. Near-end NAT is mainly requested in scenarios
with SIP trunk between OpenScape 4000 and PSTN provider.
WPUBIP is detached local IP address used for SIP protocol and
local media (= near-end destination NAT support).
USEWANIF activates additional firewall security (relevant for
Softgate only), enforcing subscriber security (CIPHER) and activating
support for far-end (home based) NAT bypass (SIP@Home subscribers)
Supported configurations:
- Dedicated STMIX/STMIY for SIP trunk connectivity to PSTN provider placed in local network or DMZ with (optional) near-end NAT to the internet. I. e. WPUBIP is (optionally) configured to public IP address visible from internet.
- MFS STMIX/STMIY configuration supporting SIP trunk connectivity to PSTN provider over (optional) DMZ firewall with near-end NAT and locally connected HFA subscribers. I.e. WPUBIP is configured. The STMIX/STMIY cannot support local SIP/UFIP subscribers and SIP trunk using Near-end NAT in parallel way because there is just one SIP interface bound to external public IP address.
- SIP@Home subscribers connected to STMIX/STMIY are NOT supported because USEWANIF=YES or NO is without any effect on STMIX/STMIY. Therefore additional security as well a far-end home base NAT support cannot be activated on STMIX/STMIY.
The feature does not define any new security requirements and does not
require any changes in supported LAN configuration on STMIX/STMIY. AMO commands
and interface between RMX and GW are not affected.
Original STMIX/STMIY/STMI/SoftGate configuration - Public IP is either in
local network or in DMZ:
