Softclients on the VPN and endpoints on your voice subnets are unable to exchange media directly with one another. Create a separate network region representing the VPN with direct media disabled. It should have a connection defined to the location containing the VPN gateway. This is typically a main/core location so it should have media resources available also. RTP streams to/from the VPN will remain anchored on a media resource that is reachable from both the VPN and non-VPN endpoints.
|