This is all it took for me.
I have used it over a decade and added the requirecalltoken = no for asl3
iax.conf
[iaxrpt]
type = user
context = iaxrpt
auth = md5
secret = secret
host = dynamic
disallow = all
allow = ulaw
;allow = adpcm
allow = gsm
transfer = no
requirecalltoken = no
extentions.conf
[iaxrpt]
exten => 48233,1,rpt(48233|X)
exten => 48234,1,rpt(48234|X)
Note: I do not use the var global logic for this.
I have to many private nodes to track and see no use for it. I like exact definition.
But if you use the stock stanza, you need to fill in a global var for node = xxxxx at the top of extentions.conf. Create a new one for a second node of a different variable name and add that to the stanza.
in iaxrpt program
Make sure your user = iaxrpt
“Account Name” becomes node#.
Don’t confuse this with “user”, which is the stanza name.
Anyway, that should clear up where I think many are in error.
EDIT:
For a followup
Do not describe a "username=" for your personal admin control stanza
(iaxrpt / iax.conf).
Use that for iax-clients you may give access to your system on a individual bases.
It is required in the iaxclient stanza.
And those are type ‘friend’ and not ‘user’. See the iaxclient stanza as you will match username and password for security.
This changes the security for access.
For clients connect as mode “P” - phone mode. Not “X”
iaxrpt connects using “X” will not be directly visible to you on allmon/supermon.
They are for admin use and transparent.
Take a peek at both the stanzas in extensions.conf and I think you will understand.
iax-clients will also require “requirecalltoken = no” in that stanza
You can always limit users with any number of IP/range limitations
permit=192.168.1.0/24
permit=75.150.0.0/16
permit=25.80.119.57
in the same stanza for additional security with some flexibility.
And I might even suggest that ‘where possible’ in the iaxrpt stanza.
But make it work first before adding any extra security.
I would also advise to comment out either of these stanza’s if you are not using them,
or at least change the default secret to something new and long.
I may post an example “iax client” stanza and iaxrpt setup for it when I have time.
But I think I have given the framework to understand iaxclients as well.