<div dir="ltr">If that doesn't work, check your mtu and/or make sure you aren't blocking icmp on your firewall if you want to do path-mtu discovery. I had a 31 second call drop problem and it was because my icmp unreachable (needs fragmentation) packets weren't getting all the way back to me (in my case it was a bad route) and so I my device wasn't adjusting my mtu and the call would drop exactly at 31 seconds in every single time.</div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Aug 1, 2013 at 5:13 PM, Paul <span dir="ltr"><<a href="mailto:pasha@prosperity4ever.com" target="_blank">pasha@prosperity4ever.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><br><br>On Thu, 1 Aug, 2013 at 1:47 PM, E.J.C. Lindner <<a href="mailto:office@fordior.net" target="_blank">office@fordior.net</a>> wrote:<br>
<blockquote type="cite"><div style="white-space:pre-wrap">Hi Paul,
I saw you emails regarding 30 seconds call drop. I have exactly the
same issue when I want to connect my client over OpenVPN to my FS
server, which is also the vpn server at the same time (server is
on a public IP).
All my calls are dropped after 32 seconds... very annoying and I can't
find the solution. So I'm constantly switching config for standard vs vpn
for my client and FS (the standard config is just connecting to the
public ip which is unencrypted).
Did you find a solution in the mean time? Please inform me, cause it's
really killing me. :=|
I hope you can inform me on a short term; really appreciated!
<div>--
</div>Yours sincerely,
E.J.C. Lindner
</div></blockquote><br></div><div>Yes I found a solution to my problem.</div><div><br></div><div>My case differs a little bit from yours in that my openvpn server is on the router, not on the PBX, in your case it's probably even a little simpler.</div>
<div><br></div><div>So here is what I can advise you,</div><div><br></div><div>1. Ensure NAT is working properly over openVPN, so to test that all you need to do is have 2 phones on the same PBX able to call each other internally (extension 100 to extension 101 for instance).</div>
<div><br></div><div>If that works then your VPN NAT is probably good.</div><div><br></div><div>2. Ensure that your PBX is reporting the correct external address to your vendor upstream (this is where it was messing me up).</div>
<div><br></div><div>For example, for me my PBX was 10.0.0.40 (itnernal address) which the router was NATing to 24.38.231.4 (just a sample external address) and the same on the way back, when a request would come in for 24.38.231
.4 it would translate it to 10.0.0.40.</div><div><br></div><div>Because my PBX was not aware of 24.38.231.4 as it's external address, it was only listening on 10.0.0.40, it wasn't responding to the SIP ACK packets correctly, and the call was being perceived as finished and therefore hung up.</div>
<div><br></div><div>To fix it in FreeSwitch I had to edit external.xml and insert the proper IP address for sip_ext_ip and rtp_ext_ip (this is from memory)</div><div><br></div><div>I hope this helps you out cuz it cost me hours of frustration :)</div>
<span class="HOEnZb"><font color="#888888"><div><br></div><div>Paul</div></font></span><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div>