<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Tahoma","sans-serif";
color:#0070C0;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1733044447;
mso-list-type:hybrid;
mso-list-template-ids:1758724832 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.1in;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'>Hi,<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'>I am using SIPml5 client and Kamailio 4.1.2 server integrated with FS 1.5. Both apps are installed on same virtual machine, Ubuntu 12.04, behind NAT box (IP 192.168.1.103). Kamailio and Freeswitch servers are integrated according to this tutorial: <a href="http://kb.asipto.com/freeswitch:kamailio-3.3.x-freeswitch-1.2.x-sbc">http://kb.asipto.com/freeswitch:kamailio-3.3.x-freeswitch-1.2.x-sbc</a> <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'>In case SIPml5 client has public IP, it can join to conference and get two-way audio.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'>In case SIPml5 client is behind NAT box, it can join to conference, but there is NO AUDIO ! <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'>What I noticed is that in second case STUN requests failed. I am getting ICMP messages instead of "Binding Response..." <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:Consolas;color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:.5in'><b><span style='font-family:Consolas;color:#0070C0'># tshark | egrep "STUN|ICMP|DTLS"<o:p></o:p></span></b></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'>Capturing on eth1<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'> 0.000000 192.168.1.103 -> 46.240.237.61 STUN 210 Binding Request user: zGCPKXKUmgWac67N:TICkBPVhZYHwJ0oz<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'> 0.629060 192.168.1.103 -> 46.240.237.61 STUN 210 Binding Request user: ahBT5zBSFNfFB7Xx:i2dyJzygCPRgMlpQ<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'> 0.662777 46.240.237.61 -> 192.168.1.103 </span><span style='font-family:Consolas;color:red'>ICMP 238 Destination unreachable (Port unreachable)</span><span style='font-family:Consolas;color:#0070C0'> <o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'> 1.000463 192.168.1.103 -> 46.240.237.61 STUN 210 Binding Request user: zGCPKXKUmgWac67N:TICkBPVhZYHwJ0oz<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'> 1.649064 192.168.1.103 -> 46.240.237.61 STUN 210 Binding Request user: ahBT5zBSFNfFB7Xx:i2dyJzygCPRgMlpQ<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'> 1.684495 46.240.237.61 -> 192.168.1.103 </span><span style='font-family:Consolas;color:red'>ICMP 238 Destination unreachable (Port unreachable)</span><span style='font-family:Consolas;color:#0070C0'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'> 2.020352 192.168.1.103 -> 46.240.237.61 STUN 210 Binding Request user: zGCPKXKUmgWac67N:TICkBPVhZYHwJ0oz<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'> 2.649471 192.168.1.103 -> 46.240.237.61 STUN 210 Binding Request user: ahBT5zBSFNfFB7Xx:i2dyJzygCPRgMlpQ<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'> 2.674532 46.240.237.61 -> 192.168.1.103 ICMP 238 Destination unreachable (Port unreachable)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'>In FreeSWITCH logs, next 5 lines are missing when there is no audio:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'>73d19284-d87c-11e3-9259-339370100fc8 2014-05-10 21:51:19.421954 [INFO] switch_rtp.c:2701 Changing audio DTLS state from HANDSHAKE to SETUP<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'>73d19284-d87c-11e3-9259-339370100fc8 2014-05-10 21:51:19.421954 [INFO] switch_rtp.c:2609 audio Fingerprint Verified.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'>73d19284-d87c-11e3-9259-339370100fc8 2014-05-10 21:51:19.421954 [INFO] switch_rtp.c:3151 Activating Audio Secure RTP SEND<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'>73d19284-d87c-11e3-9259-339370100fc8 2014-05-10 21:51:19.421954 [INFO] switch_rtp.c:3129 Activating Audio Secure RTP RECV<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas;color:#0070C0'>73d19284-d87c-11e3-9259-339370100fc8 2014-05-10 21:51:19.421954 [INFO] switch_rtp.c:2649 Changing audio DTLS state from SETUP to READY<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'>Also, I see 'ice not ready' alert messages for debug_level 10.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'>When SIPml5 client has public IP, everything works fine: In network traces I see that STUN negotiation is OK , DTLS is OK and audio is working. <o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:.5in'><b><span style='font-family:Consolas;color:#0070C0'># tshark | egrep "STUN|ICMP|DTLS"<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:Consolas'> </span><span style='font-family:Consolas'>29.637026 192.168.1.103 -> 46.240.237.61 STUN 210 Binding Request user: Zk/oQhC+x1sqfxan:12mOvSqfqyVZTtFl<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 29.674027 46.240.237.61 -> 192.168.1.103 STUN 106 <span style='background:yellow;mso-highlight:yellow'>Binding Success Response XOR-MAPPED-ADDRESS: 95.180.82.218:41721</span><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 29.685923 46.240.237.61 -> 192.168.1.103 STUN 158 Binding Request user: 12mOvSqfqyVZTtFl:Zk/oQhC+x1sqfxan<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 29.697067 192.168.1.103 -> 46.240.237.61 STUN 106 <span style='background:yellow;mso-highlight:yellow'>Binding Success Response XOR-MAPPED-ADDRESS: 46.240.237.61:44259</span><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 29.697461 192.168.1.103 -> 46.240.237.61 DTLSv1.0 243 Client Hello<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 29.730743 192.168.1.103 -> 46.240.237.61 STUN 210 Binding Request user: zGCPKXKUmgWac67N:TICkBPVhZYHwJ0oz<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 30.154973 46.240.237.61 -> 192.168.1.103 DTLSv1.0 877 Server Hello, Certificate, Server Key Exchange, Certificate Request, Server Hello Done<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 30.158308 192.168.1.103 -> 46.240.237.61 <span style='background:yellow;mso-highlight:yellow'>DTLSv1.0 856 Certificate, Client Key Exchange, Certificate Verify, Change Cipher Spec, Encrypted Handshake Message</span><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 30.231732 46.240.237.61 -> 192.168.1.103 DTLSv1.0 133 Change Cipher Spec, Encrypted Handshake Message<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 30.608204 46.240.237.61 -> 192.168.1.103 STUN 158 Binding Request user: 12mOvSqfqyVZTtFl:Zk/oQhC+x1sqfxan<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 30.616939 192.168.1.103 -> 46.240.237.61 STUN 106 Binding Success Response XOR-MAPPED-ADDRESS: 46.240.237.61:44259<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 30.656908 192.168.1.103 -> 46.240.237.61 STUN 210 Binding Request user: Zk/oQhC+x1sqfxan:12mOvSqfqyVZTtFl<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:Consolas'> 30.682214 46.240.237.61 -> 192.168.1.103 STUN 106 Binding Success Response XOR-MAPPED-ADDRESS: 95.180.82.218:41721<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'>Any suggestion how to make it working for clients behind NAT ?<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'>Thanks,<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'>Sasa<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p></div></body></html>