[Freeswitch-users] AASTRA Phones - NAT issue

Chris Tunbridge blasterjr at gmail.com
Fri Oct 17 02:23:43 MSD 2014


i have a deployment with 10x480i's 20x6730i's and 8x6757i's

i use <variable name="sip-force-contact"
value="NDLB-connectile-dysfunction"/>

and i have aggressive-nat-detection enabled, as well as some other NDLB
settings in my internal.xml

Brian mentioned rport, i don't personally use it with any of my stuff,
however i have seen it used in the past.

Here's the settings i have set, not sure if all of them are needed, but i
do have working 480i's with this configuration

<param name="aggressive-nat-detection" value="true"/>
<param name="NDLB-broken-auth-hash" value="true"/>
<param name="NDLB-sendrecv-in-session" value="true"/>
<param name="NDLB-received-in-nat-reg-contact" value="true"/>



On Thu, Oct 16, 2014 at 4:16 PM, Brian West <brian at freeswitch.org> wrote:

> And by rport I mean in the Aasstra phone.
>
> On Thu, Oct 16, 2014 at 5:15 PM, Brian West <brian at freeswitch.org> wrote:
>
>> Its because you don't have rport enabled, if you notice your register
>> says in the contact 71.121.183.4:5067 so thats where we send the 401,
>> chances are your phone doesn't get it because we are going to the contact.
>> In this case the phone never gets the 401 and we keep sending it.
>>
>> On Thu, Oct 16, 2014 at 4:57 PM, Sean Devoy <sdevoy at bizfocused.com>
>> wrote:
>>
>>>  Hi All,
>>>
>>>
>>>
>>> I am trying to get an AASTRA 480i working with FS.  I have other phones
>>> working just fine (Cisco and Polycom).  I have updated the firmware.  I can
>>> see in the “sofia global siptrace” the REGISTER request, the Unauthorized
>>> response, but it does not appear to be making it back to the phone.  That
>>> statement is based on my observation the CSEQ does not change.
>>>
>>>
>>>
>>> I have added and removed:
>>>
>>>   <variable name="sip-force-contact" value="NDLB-connectile-dysfunction"
>>> />
>>>
>>>
>>>
>>> I have tried many different option through the phones web interface, but
>>> no luck yet.
>>>
>>>
>>>
>>> Anyone have a working configuration (phone and FS) they could share)?
>>>
>>>
>>>
>>> The key siptrace packets are here (these happen to be from the attempt
>>> with both UDP and TCP):
>>>
>>> recv 811 bytes from udp/[71.121.183.4]:5060 at 19:28:05.468752:
>>>
>>>
>>> ------------------------------------------------------------------------
>>>
>>>    REGISTER sip:fs_bfis.bizfocused.com:5060 SIP/2.0
>>>
>>>    Via: SIP/2.0/UDP 71.121.183.4:5067;branch=z9hG4bKba321b220
>>>
>>>    Max-Forwards: 70
>>>
>>>    Content-Length: 0
>>>
>>>    To: 224 <sip:224 at fs_bfis.bizfocused.com:5060>
>>>
>>>    From: 224 <sip:224 at fs_bfis.bizfocused.com:5060>;tag=23c56ce0efc9c8d
>>>
>>>    Call-ID: 9fda297c6de44793402fc2f778f24fb0 at 71.121.183.4
>>>
>>>    CSeq: 7581459 REGISTER
>>>
>>>    Contact: 224 <sip:224 at 71.121.183.4:5067;srcadr=10.10.40.49:5060
>>> ;srcadr=10.10.40.49:5060>;expires=300
>>>
>>>    Contact: 224 <sip:224 at 71.121.183.4:5067
>>> ;transport=tcp;srcadr=10.10.40.49:5060;srcadr=10.10.40.49:5060
>>> >;expires=300
>>>
>>>    Proxy-Require: com.nortelnetworks.firewall
>>>
>>>    Allow-Events: talk,hold,conference
>>>
>>>    Allow:NOTIFY,REFER,OPTIONS,INVITE,ACK,CANCEL,BYE,INFO
>>>
>>>    Aastra-Mac:00085D03237F
>>>
>>>    Aastra-Line:1
>>>
>>>    User-Agent: Aastra 480i/1.4.0.1048 Brcm Callctrl/1.5.1.0
>>> MxSF/v3.2.6.26
>>>
>>>
>>>
>>>  ------------------------------------------------------------------------
>>>
>>> send 667 bytes to udp/[71.121.183.4]:5067 at 19:28:05.470167:
>>>
>>>
>>> ------------------------------------------------------------------------
>>>
>>>    SIP/2.0 401 Unauthorized
>>>
>>>   Via: SIP/2.0/UDP 71.121.183.4:5067;branch=z9hG4bKba321b220
>>>
>>>    From: 224 <sip:224 at fs_bfis.bizfocused.com:5060>;tag=23c56ce0efc9c8d
>>>
>>>    To: 224 <sip:224 at fs_bfis.bizfocused.com:5060>;tag=eKgtr8tcS78QH
>>>
>>>    Call-ID: 9fda297c6de44793402fc2f778f24fb0 at 71.121.183.4
>>>
>>>    CSeq: 7581459 REGISTER
>>>
>>>    User-Agent:
>>> FreeSWITCH-mod_sofia/1.2.22+git~20140309T212137Z~65fed130e5~64bit
>>>
>>>    Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE,
>>> REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
>>>
>>>    Supported: path, replaces
>>>
>>>    WWW-Authenticate: Digest realm="fs_bfis.bizfocused.com",
>>> nonce="33a7d4af-e832-4d75-a284-b7002edadfc5", algorithm=MD5, qop="auth"
>>>
>>>    Content-Length: 0
>>>
>>>
>>>
>>>  ------------------------------------------------------------------------
>>>
>>> recv 811 bytes from udp/[71.121.183.4]:5060 at 19:28:05.970923:
>>>
>>>
>>> ------------------------------------------------------------------------
>>>
>>>    REGISTER sip:fs_bfis.bizfocused.com:5060 SIP/2.0
>>>
>>>    Via: SIP/2.0/UDP 71.121.183.4:5067;branch=z9hG4bKba321b220
>>>
>>>    Max-Forwards: 70
>>>
>>>    Content-Length: 0
>>>
>>>    To: 224 <sip:224 at fs_bfis.bizfocused.com:5060>
>>>
>>>    From: 224 <sip:224 at fs_bfis.bizfocused.com:5060>;tag=23c56ce0efc9c8d
>>>
>>>    Call-ID: 9fda297c6de44793402fc2f778f24fb0 at 71.121.183.4
>>>
>>>    CSeq: 7581459 REGISTER
>>>
>>>    Contact: 224 <sip:224 at 71.121.183.4:5067;srcadr=10.10.40.49:5060
>>> ;srcadr=10.10.40.49:5060>;expires=300
>>>
>>>    Contact: 224 <sip:224 at 71.121.183.4:5067
>>> ;transport=tcp;srcadr=10.10.40.49:5060;srcadr=10.10.40.49:5060
>>> >;expires=300
>>>
>>>    Proxy-Require: com.nortelnetworks.firewall
>>>
>>>    Allow-Events: talk,hold,conference
>>>
>>>    Allow:NOTIFY,REFER,OPTIONS,INVITE,ACK,CANCEL,BYE,INFO
>>>
>>>    Aastra-Mac:00085D03237F
>>>
>>>    Aastra-Line:1
>>>
>>>    User-Agent: Aastra 480i/1.4.0.1048 Brcm Callctrl/1.5.1.0
>>> MxSF/v3.2.6.26
>>>
>>>
>>>
>>>  ------------------------------------------------------------------------
>>>
>>> send 667 bytes to udp/[71.121.183.4]:5067 at 19:28:05.971138:
>>>
>>> ------------------------------------------------------------------------
>>>
>>>    SIP/2.0 401 Unauthorized
>>>
>>>    Via: SIP/2.0/UDP 71.121.183.4:5067;branch=z9hG4bKba321b220
>>>
>>>    From: 224 <sip:224 at fs_bfis.bizfocused.com:5060>;tag=23c56ce0efc9c8d
>>>
>>>   To: 224 <sip:224 at fs_bfis.bizfocused.com:5060>;tag=eKgtr8tcS78QH
>>>
>>>    Call-ID: 9fda297c6de44793402fc2f778f24fb0 at 71.121.183.4
>>>
>>>    CSeq: 7581459 REGISTER
>>>
>>>    User-Agent:
>>> FreeSWITCH-mod_sofia/1.2.22+git~20140309T212137Z~65fed130e5~64bit
>>>
>>>    Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE,
>>> REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
>>>
>>>    Supported: path, replaces
>>>
>>>    WWW-Authenticate: Digest realm="fs_bfis.bizfocused.com",
>>> nonce="33a7d4af-e832-4d75-a284-b7002edadfc5", algorithm=MD5, qop="auth"
>>>
>>>    Content-Length: 0
>>>
>>>
>>>
>>> Thanks,
>>>
>>> Sean
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> 
>>> 
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>
>>
>>
>> --
>>
>> *Brian West*
>> brian at freeswitch.org
>>
>>
>> *Twitter: @FreeSWITCH , @briankwest*
>> http://www.freeswitchbook.com
>> http://www.freeswitchcookbook.com
>>
>> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378)
>> *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
>>
>
>
>
> --
>
> *Brian West*
> brian at freeswitch.org
>
>
> *Twitter: @FreeSWITCH , @briankwest*
> http://www.freeswitchbook.com
> http://www.freeswitchcookbook.com
>
> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378)
> *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> 
> 
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20141016/f5504bdb/attachment.html 


Join us at ClueCon 2016 Aug 8-12, 2016
More information about the FreeSWITCH-users mailing list