Network/VoIP Expert: Fix VPN, VPS, Minor WireGuard Tweaks & Yeastar S20 (Read Rules)

@ExpertNetworkEng

Hello, I’m a Senior Network & Security Engineer with 10+ years of hands-on experience designing, implementing, and migrating enterprise and service-provider networks. I specialize in Network Security, SD-WAN, routing & switching, enterprise wireless, and secure network architecture, helping companies modernize legacy networks, improve reliability, and reduce WAN costs. Core expertise: - Firewalls & Security: FortiGate, Palo Alto, Cisco ASA / Firepower IPsec & SSL VPN, site-to-site, remote access, policy design - Routing & Switching: Cisco ASR/ISR, Catalyst, Nexus, Juniper Routers (M10, MX 960) and SRX 500 (BGP, OSPF, EIGRP, IS-IS, MPLS, VLANs, STP, HSRP/VRRP) Enterprise LAN & campus design - LAN Switching (Multi-Vendor): Cisco, Juniper, Meraki, HP, Aruba, FortiSwitch Access/core design, redundancy, QoS, segmentation - Enterprise Wireless: Cisco WLC & APs, Cisco Meraki Wi-Fi, Ubiquiti, Aruba Wi-Fi, FortiAP Coverage design, roaming, security, troubleshooting - SD-WAN: Fortinet SD-WAN, Cisco SD-WAN (Viptela), Cisco Meraki (hub-and-spoke, MPLS + Internet, segmentation, HA, traffic steering) - Cloud & Hybrid Networking: AWS / Azure / GCP Site-to-site VPN, routing integration - Network Automation: Python Certifications: CCIE Enterprise Cisco Certified Specialist – Enterprise SD-WAN Implementation CCNP Data Center CCNP Security Juniper JNCIA-Junos, JNCIA-Cloud If you share your current setup and goal, I can propose a clear and practical solution. Best regards,

@softsolution2000

I have extensive hands-on experience with all the specific devices mentioned in the project requirements, including the Cudy P2 5G Router, DrayTek Vigor 2915 Router, and Yeastar S20 PBX. I am proficient in troubleshooting and optimizing site-to-site networks and VoIP infrastructures. My skills in advanced VPN configurations, Linux servers, Docker, and VoIP troubleshooting make me well-equipped to tackle the issues outlined in the project details. I am confident in my ability to reconfigure the VPS, adjust WireGuard settings, optimize VoIP codecs, set up client VPNs, and ensure proper router configurations. My expertise in system administration, Asterisk PBX, VoIP, and network administration align perfectly with the requirements of this project. See the above links please.

@longngoc2307

Hi, there. "VOIP VPN & YEASTAR S20 TROUBLESHOOTING" - you need the existing KSA-Egypt network stabilized without rebuilding the working WireGuard setup or handing over credentials. I’d work entirely through AnyDesk, first separating the Caddy 443 exposure from DrayTek SSL VPN, then validating Yeastar SIP/RTP reachability through the VPS. I’d check WireGuard MTU/MSS and PersistentKeepalive for the 5G CGNAT path, disable SIP ALG, and verify NAT, codec, registration, and RTP behavior before changing the remote-access VPN. I’d keep the existing infrastructure intact and make each change testable, especially the Linkus reconnect/audio issue and DrayTek remote access. Which Yeastar S20 firmware and Linkus version are currently installed? Looking forward to working with you.

@jonasdedzo

Hi there, I can help troubleshoot and clean up this VPN and VoIP setup remotely through AnyDesk, following your existing architecture rather than rebuilding what already works. I’ll first address the VPS/Caddy port 443 conflict and configure the required Yeastar S20 SIP, Linkus and RTP forwarding so mobile Linkus users can connect without keeping the client VPN active. I’ll then verify WireGuard MTU/MSS and PersistentKeepalive settings for the KSA 5G/CGNAT path, check SIP ALG and the Cudy-to-DrayTek DMZ arrangement, and review NAT/RTP behavior for the audio drops. On the Yeastar side, I’ll optimize the appropriate codecs and VoIP settings based on the actual network conditions. I’ll also reconfigure the DrayTek remote-access VPN for reliable internal-device access and test registration, calls, audio and connectivity after each change. Looking forward to work with you. Thanks

@bojans9

Hello, I have read the complete JD and understand the existing Cudy P2 + DrayTek Vigor 2915 + Yeastar S20 architecture. I can troubleshoot and implement the requested changes remotely via AnyDesk only: * Fix VPS/Docker/Caddy port 443 conflict * Configure Yeastar SIP, Linkus and RTP routing through the VPS * Tune WireGuard MTU/MSS and PersistentKeepalive * Optimize SIP/RTP NAT traversal and VoIP codecs * Reconfigure DrayTek remote VPN * Verify Cudy DMZ and disable SIP ALG * Test Linkus registration, calls, audio quality and VPN connectivity I understand you do not want tutorials or repeated questions about the existing setup. I will work directly against the stated scope and provide a concise completion report. Final bid: $120 fixed Timeline: 1-2 days

@elijahhmonreal

Hi there, I reviewed your project requirements and I am interested in working with you. I have extensive experience delivering VoIP, Network Security, VPN, Asterisk PBX, Network Engineering, System Admin, Network Administration, SIP, Docker and Linux. I focus on understanding the requirements clearly, providing a practical solution, and delivering accurate, well-documented work on schedule. I am available to begin immediately and would be glad to discuss the scope, timeline, and budget. Best regards, Elijah M.

@abhilashr53

I can deliver 'Network/VoIP Expert: Fix VPN, VPS, Minor WireGuard Tweaks & Yeastar S20 (Read Ru' end to end — clean architecture, tests, and deployment. I'll start with a short plan, share progress daily, and hand over production-ready code. Could you confirm your timeline and must-have features so I can lock the scope?

@dinobartolome

Your setup is well documented and the problems are clear. Port 443 conflict on the VPS blocking SSL VPN, TCP meltdown from tunneling VoIP inside a TCP VPN over WireGuard on 5G, and Linkus needing to register natively through the DDNS so users don't babysit a client VPN all day. I've dealt with similar relay architectures on Contabo and other VPS providers where Docker and Caddy sit in front of services that need specific port forwarding. I'll be straight with you though. I've done plenty of Linux server admin, Docker, Caddy and WireGuard MTU tuning on VPS relay setups. I've also configured VPN dial-in on enterprise routers and dealt with CGNAT traversal on cellular connections. But DrayTek Vigor 2915 and Yeastar S20 specifically are not devices I work with daily. The Cudy P2 DMZ config is straightforward. If you need someone who's configured dozens of Yeastar S20 PBXs and knows the Linkus port map from memory, I'm probably not your first pick. If you're OK with someone who understands the networking side cold and can work through the Yeastar config via AnyDesk with the manuals open, I can get this done. All remote via AnyDesk works fine for me. I can start today if you want to move quick.

@shivani0659

Hi, I’m an experienced Network/System Engineer specializing in Cudy P2, DrayTek Vigor 2915, and Yeastar S20, with strong hands-on expertise in WireGuard, IPsec/IKEv2, SIP/RTP, CGNAT, Linux, Docker, Caddy, and VoIP troubleshooting. I can resolve the 443 conflict, optimize WireGuard MTU/MSS and NAT, stabilize Linkus/VoIP, configure VPN access, and verify SIP ALG/DMZ settings—all remotely through AnyDesk as requested. I understand the existing setup and scope, and I’m ready to start immediately at my bid price.

@novatech2210

I’ve worked with this type of multi-site VPN/VoIP environment, and your diagnosis is technically sound: the priority is separating Linkus voice traffic from the client SSL-VPN path while preserving the existing WireGuard site-to-site tunnel. I’d start by resolving the VPS/Caddy 443 conflict, then expose only the required Yeastar SIP/Linkus/RTP services through controlled forwarding so mobile Linkus users can register directly via the DDNS endpoint. I’d then verify WireGuard MTU/MSS, PersistentKeepalive, SIP ALG status, and the Cudy→DrayTek DMZ path. For VoIP stability, I’d test RTP loss/jitter first, then tune codec policy and NAT traversal rather than masking the issue with more VPN layers. I’d also move DrayTek remote access away from SSL VPN to IKEv2/L2TP for internal-resource access. All work can be completed through AnyDesk only, with no direct credential handover required. Regards, Chris | Lead Developer | Novatech

@ayoubt14

Hi, I am an experienced Network and System Engineer with strong expertise in VPN, Linux servers, Docker, VoIP systems, and cloud infrastructure. I can troubleshoot and optimize your WireGuard, DrayTek, Yeastar S20, VPS, Caddy, and 5G CGNAT setup through AnyDesk while keeping downtime minimal. I have experience with SIP/RTP troubleshooting, NAT traversal, VPN tuning, codec optimization, and production network support. I will carefully resolve the current issues, improve reliability, and provide a stable configuration with clear documentation for future maintenance.

@PINESCRIPTERR

Only send this proposal if you genuinely have direct hands-on experience with all three specified devices. Hi, I confirm direct hands-on experience with the Cudy P2, DrayTek Vigor 2915, and Yeastar S20, and I’m comfortable completing the entire engagement through AnyDesk. I would keep the working WireGuard topology intact and make targeted changes only. The VPS would retain HTTPS cleanly on port 443, while SIP, Linkus, and RTP traffic would use explicit UDP/TCP forwarding through the WireGuard route rather than passing through Caddy as ordinary web traffic. I’ll verify return routing, firewall exposure, SIP ALG, PBX NAT settings, WireGuard MTU, MSS clamping, and PersistentKeepalive. I’ll also optimize the mutually supported codecs and reconfigure DrayTek remote access using IPsec/IKEv2 or L2TP/IPsec for internal-resource access. Three technical confirmations before the AnyDesk session: 1. What firmware versions are currently installed on the Cudy P2, Vigor 2915, and Yeastar S20? 2. Is the S20 using the local Linkus Server service or Yeastar’s cloud service? 3. Are SIP TLS and SRTP currently enabled, or is registration using standard SIP over UDP? Best regards, Houssame