<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>I was getting ready to implement this but I'm questioning
      something.  </p>
    <p>The PBX itself is not behind a NAT.  Why would I set the
      ext-sip-ip and ext-rtp-ip to use autonat?  <br>
    </p>
    <p>Presently thety are set to the below where private_rtp_ip is the
      RFC address space IP of the internal interface of the PBX.<br>
    </p>
    <p><param name="ext-rtp-ip" value="$${private_rtp_ip}"/><br>
      <param name="ext-sip-ip" value="$${private_rtp_ip}"/><br>
    </p>
    <p>Also, in the profile I have <param name="local-network-acl"
      value="localnet.auto"/> already. <br>
    </p>
    <p>thoughts?<br>
    </p>
    <div class="moz-cite-prefix">On 1/29/21 2:07 PM, Brian West wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CAEJMVkCT++8SLCn-c95pgJyFpxp8frS-hwW3iBv_-SP1v_YR3w@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">see local-network-acl and make sure to set the
        ext-rtp-ip and ext-sip-ip to the prefix of autonat:x.x.x.x</div>
      <br>
      <div class="gmail_quote">
        <div dir="ltr" class="gmail_attr">On Fri, Jan 29, 2021 at 1:06
          PM Jim Miller <<a href="mailto:jmiller@wndswp.net"
            moz-do-not-send="true">jmiller@wndswp.net</a>> wrote:<br>
        </div>
        <blockquote class="gmail_quote" style="margin:0px 0px 0px
          0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
          <div>
            <p>Let me try this.</p>
            <p>I have a public network interface connected to the
              external profile with ip <a href="http://1.1.1.1/24"
                target="_blank" moz-do-not-send="true">1.1.1.1/24</a> 
              (e.g. of course)  I have a private subnet attached to the
              internal profile on <a href="http://192.168.0.2/24"
                target="_blank" moz-do-not-send="true">192.168.0.2/24</a>.  
              I've got polycoms registering to 192.168.0.2 using TLS
              that show up as 192.168.0.1 given they are NAT'd behind
              this firewall.  It seems that if the devices try to
              register to .2 via an ip on the same subnet that NAT
              detection is not happy.  When the clients come from
              something totally different it works.  Any way to force
              this to work?<br>
            </p>
            <p>Jim<br>
            </p>
            <div>On 1/28/21 5:36 PM, Brian West wrote:<br>
            </div>
            <blockquote type="cite">
              <div dir="ltr">Without a full understanding of your
                network topology it's difficult to say.
                <div><br>
                </div>
              </div>
              <br>
              <div class="gmail_quote">
                <div dir="ltr" class="gmail_attr">On Thu, Jan 28, 2021
                  at 3:53 PM Jim Miller <<a
                    href="mailto:jmiller@wndswp.net" target="_blank"
                    moz-do-not-send="true">jmiller@wndswp.net</a>>
                  wrote:<br>
                </div>
                <blockquote class="gmail_quote" style="margin:0px 0px
                  0px 0.8ex;border-left:1px solid
                  rgb(204,204,204);padding-left:1ex">
                  <div>
                    <p>Brian</p>
                    <p>Not sure I 100% follow.  The clients are on the
                      same /24 as the "internal" profile interface is
                      on.  The only thing is they are behind a NAT.  <br>
                    </p>
                    <p>What led me to this was I had a previous
                      configuration whereby the internal and external
                      profiles were on the same interface IP. When the
                      clients connected to the internal profile via an
                      totally different public IP, but also behind a NAT
                      it worked (registrations showed fs_nat and a
                      fs_path properly).  However, for this
                      configuration when I put the clients on a NAT that
                      was on the same subnet as the internal and
                      external shared IP it wouldn't work.  I thought
                      maybe this was an issue with the profiles sharing
                      the same IP.  Thus I split it to the configuration
                      I documented below.  It makes me think that the
                      NAT issue is related to the fact that the profile
                      IP is on the same subnet as the NAT.   <br>
                    </p>
                    <p>Jim<br>
                    </p>
                    <div>On 1/28/21 10:51 AM, Brian West wrote:<br>
                    </div>
                    <blockquote type="cite">
                      <div dir="ltr">You will require one profile per
                        nat interface, you can't cross profiles between
                        transit providers without it.
                        <div><br>
                        </div>
                        <div>/b</div>
                        <div><br>
                        </div>
                      </div>
                      <br>
                      <div class="gmail_quote">
                        <div dir="ltr" class="gmail_attr">On Thu, Jan
                          28, 2021 at 7:25 AM Jim Miller <<a
                            href="mailto:jmiller@wndswp.net"
                            target="_blank" moz-do-not-send="true">jmiller@wndswp.net</a>>
                          wrote:<br>
                        </div>
                        <blockquote class="gmail_quote"
                          style="margin:0px 0px 0px
                          0.8ex;border-left:1px solid
                          rgb(204,204,204);padding-left:1ex">Hi Folks<br>
                          <br>
                          I'm running FreeSWITCH Version
                          1.10.3-release~64bit (-release 64bit) on<br>
                          a FreeBSD 12.1 box.<br>
                          <br>
                          The issue I'm having is related to NAT, I'm
                          sure no one has ever seen a<br>
                          post on this topic....<br>
                          <br>
                          My configuration is a box that is multi homed
                          with an Internet facing<br>
                          interface and a private IP LAN interface.  The
                          clients (Polycoms) are on<br>
                          the private LAN interface but behind a NAT
                          (pfsense) on this subnet.  If<br>
                          I have the clients route directly to the FS
                          box's private LAN without<br>
                          NAT I can make this work but as soon as I NAT
                          them (which I need to for<br>
                          other reasons) I don't see the registrations
                          show up with fs_path or the<br>
                          other variables like I might expect.<br>
                          <br>
                          I've fiddled with the apply-nat-acl variable
                          to no avail. <br>
                          <br>
                          Thoughts?<br>
                          <br>
                          Thanks<br>
                          <br>
                          Jim<br>
                          <br>
                          <br>
_________________________________________________________________________<br>
                          <br>
                          The FreeSWITCH project is sponsored by
                          SignalWire <a href="https://signalwire.com"
                            rel="noreferrer" target="_blank"
                            moz-do-not-send="true">https://signalwire.com</a><br>
                          Enhance your FreeSWITCH install with
                          disruptive priced SMS and PSTN services.<br>
                          Build your next product on our scalable cloud
                          platform.<br>
                          <br>
                          Join our online community to chat in real time
                          <a href="https://signalwire.community"
                            rel="noreferrer" target="_blank"
                            moz-do-not-send="true">https://signalwire.community</a><br>
                          <br>
                          Professional FreeSWITCH Services<br>
                          <a href="mailto:sales@freeswitch.com"
                            target="_blank" moz-do-not-send="true">sales@freeswitch.com</a><br>
                          <a href="https://freeswitch.com"
                            rel="noreferrer" target="_blank"
                            moz-do-not-send="true">https://freeswitch.com</a><br>
                          <br>
                          Official FreeSWITCH Sites<br>
                          <a href="https://freeswitch.com/oss"
                            rel="noreferrer" target="_blank"
                            moz-do-not-send="true">https://freeswitch.com/oss</a><br>
                          <a href="https://freeswitch.org/confluence"
                            rel="noreferrer" target="_blank"
                            moz-do-not-send="true">https://freeswitch.org/confluence</a><br>
                          <a href="https://cluecon.com" rel="noreferrer"
                            target="_blank" moz-do-not-send="true">https://cluecon.com</a><br>
                          <br>
                          FreeSWITCH-users mailing list<br>
                          <a
                            href="mailto:FreeSWITCH-users@lists.freeswitch.org"
                            target="_blank" moz-do-not-send="true">FreeSWITCH-users@lists.freeswitch.org</a><br>
                          <a
                            href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users"
                            rel="noreferrer" target="_blank"
                            moz-do-not-send="true">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
                          UNSUBSCRIBE:<a
                            href="http://lists.freeswitch.org/mailman/options/freeswitch-users"
                            rel="noreferrer" target="_blank"
                            moz-do-not-send="true">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
                          <a href="https://freeswitch.com"
                            rel="noreferrer" target="_blank"
                            moz-do-not-send="true">https://freeswitch.com</a></blockquote>
                      </div>
                      <br clear="all">
                      <div><br>
                      </div>
                      -- <br>
                      <div dir="ltr">
                        <div dir="ltr">
                          <div>
                            <div dir="ltr">
                              <div>
                                <div dir="ltr">
                                  <div dir="ltr">
                                    <div dir="ltr">
                                      <div dir="ltr">
                                        <div dir="ltr">
                                          <div dir="ltr">
                                            <div dir="ltr">
                                              <div
                                                style="font-size:12.8px"><font
                                                  color="#000000"><br>
                                                </font></div>
                                              <div
                                                style="font-size:12.8px">
                                                <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Brian West | Co-founder and Developer</font></span></p>
                                                <p
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Need Commercial support? email <a href="mailto:sales@freeswitch.com" target="_blank" moz-do-not-send="true">sales@freeswitch.com</a> </font></span></p>
                                                <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">FreeSWITCH Solutions | <a href="https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g" style="color:rgb(17,85,204)" target="_blank" moz-do-not-send="true">17345 Civic Drive #2531 Brookfield, WI 53045</a></font></span></p>
                                                <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><font
                                                    color="#000000"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Email: </span><span style="color:rgb(17,85,204);font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><a href="mailto:brian@freeswitch.com" target="_blank" moz-do-not-send="true">brian@freeswitch.com</a></span></font></p>
                                                <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Mobile: <span title="Call with Google Voice">918-424-9378</span></font></span></p>
                                                <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><font
                                                    color="#000000"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Website: </span><a
href="https://www.freeswitch.com/" style="color:rgb(17,85,204)"
                                                      target="_blank"
                                                      moz-do-not-send="true"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">https://www.FreeSWITCH.com</span></a></font></p>
                                                <p dir="ltr"
style="font-size:12.8px;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-size:9pt;font-family:Arial;color:rgb(0,0,0);vertical-align:baseline;white-space:pre-wrap"><a href="https://www.facebook.com/freeswitch" target="_blank" moz-do-not-send="true"><img alt="https://www.facebook.com/signalwireinc?src=email" src="https://lh6.googleusercontent.com/AYfRoSNaDNtMPRMevPn_GqcVEMd5NDRFi0GlluGUWzV6I5TAY_3T2-Tt0IuIXeUtEdYsgNsM8DOYKRKhjmrG_-n2Ga-LCnoNk46sO8VyEma1sBFYdiGJcLRUvkrD1CYHN79qimeg" style="border: none;" moz-do-not-send="true" width="31" height="31"></a> </span><span style="background-color:transparent;font-size:9pt;font-family:Tahoma;color:rgb(0,0,0);vertical-align:baseline;white-space:pre-wrap"><a href="https://twitter.com/freeswitch" target="_blank" moz-do-not-send="true"><img alt="https://twitter.com/freeswitch" src="https://lh3.googleusercontent.com/W4SqXyybH2qdAozvtoKjcz736qOjk9LHDwldvs1ahc-WVU0putVMSsUH474KDrJ32jsqi6JDjyUWxqeEkN5I1xSlC5ShYrd1b8NIMUkDzDrtbWQfa6A_90UcygqesBtRLgeFirKa" style="border: none;" moz-do-not-send="true" width="31" height="31"></a></span><br>
                                                </p>
                                              </div>
                                            </div>
                                          </div>
                                        </div>
                                      </div>
                                    </div>
                                  </div>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </blockquote>
                  </div>
                </blockquote>
              </div>
              <br clear="all">
              <div><br>
              </div>
              -- <br>
              <div dir="ltr">
                <div dir="ltr">
                  <div>
                    <div dir="ltr">
                      <div>
                        <div dir="ltr">
                          <div dir="ltr">
                            <div dir="ltr">
                              <div dir="ltr">
                                <div dir="ltr">
                                  <div dir="ltr">
                                    <div dir="ltr">
                                      <div style="font-size:12.8px"><font
                                          color="#000000"><br>
                                        </font></div>
                                      <div style="font-size:12.8px">
                                        <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Brian West | Co-founder and Developer</font></span></p>
                                        <p
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Need Commercial support? email <a href="mailto:sales@freeswitch.com" target="_blank" moz-do-not-send="true">sales@freeswitch.com</a> </font></span></p>
                                        <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">FreeSWITCH Solutions | <a href="https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g" style="color:rgb(17,85,204)" target="_blank" moz-do-not-send="true">17345 Civic Drive #2531 Brookfield, WI 53045</a></font></span></p>
                                        <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><font
                                            color="#000000"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Email: </span><span style="color:rgb(17,85,204);font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><a href="mailto:brian@freeswitch.com" target="_blank" moz-do-not-send="true">brian@freeswitch.com</a></span></font></p>
                                        <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Mobile: <span title="Call with Google Voice">918-424-9378</span></font></span></p>
                                        <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><font
                                            color="#000000"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Website: </span><a
href="https://www.freeswitch.com/" style="color:rgb(17,85,204)"
                                              target="_blank"
                                              moz-do-not-send="true"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">https://www.FreeSWITCH.com</span></a></font></p>
                                        <p dir="ltr"
style="font-size:12.8px;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-size:9pt;font-family:Arial;color:rgb(0,0,0);vertical-align:baseline;white-space:pre-wrap"><a href="https://www.facebook.com/freeswitch" target="_blank" moz-do-not-send="true"><img alt="https://www.facebook.com/signalwireinc?src=email" src="https://lh6.googleusercontent.com/AYfRoSNaDNtMPRMevPn_GqcVEMd5NDRFi0GlluGUWzV6I5TAY_3T2-Tt0IuIXeUtEdYsgNsM8DOYKRKhjmrG_-n2Ga-LCnoNk46sO8VyEma1sBFYdiGJcLRUvkrD1CYHN79qimeg" style="border: none;" moz-do-not-send="true" width="31" height="31"></a> </span><span style="background-color:transparent;font-size:9pt;font-family:Tahoma;color:rgb(0,0,0);vertical-align:baseline;white-space:pre-wrap"><a href="https://twitter.com/freeswitch" target="_blank" moz-do-not-send="true"><img alt="https://twitter.com/freeswitch" src="https://lh3.googleusercontent.com/W4SqXyybH2qdAozvtoKjcz736qOjk9LHDwldvs1ahc-WVU0putVMSsUH474KDrJ32jsqi6JDjyUWxqeEkN5I1xSlC5ShYrd1b8NIMUkDzDrtbWQfa6A_90UcygqesBtRLgeFirKa" style="border: none;" moz-do-not-send="true" width="31" height="31"></a></span><br>
                                        </p>
                                      </div>
                                    </div>
                                  </div>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </blockquote>
          </div>
        </blockquote>
      </div>
      <br clear="all">
      <div><br>
      </div>
      -- <br>
      <div dir="ltr" class="gmail_signature">
        <div dir="ltr">
          <div>
            <div dir="ltr">
              <div>
                <div dir="ltr">
                  <div dir="ltr">
                    <div dir="ltr">
                      <div dir="ltr">
                        <div dir="ltr">
                          <div dir="ltr">
                            <div dir="ltr">
                              <div style="font-size:12.8px"><font
                                  color="#000000"><br>
                                </font></div>
                              <div style="font-size:12.8px">
                                <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Brian West | Co-founder and Developer</font></span></p>
                                <p
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Need Commercial support? email <a href="mailto:sales@freeswitch.com" target="_blank" moz-do-not-send="true">sales@freeswitch.com</a> </font></span></p>
                                <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">FreeSWITCH Solutions | <a href="https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g" style="color:rgb(17,85,204)" target="_blank" moz-do-not-send="true">17345 Civic Drive #2531 Brookfield, WI 53045</a></font></span></p>
                                <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><font
                                    color="#000000"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Email: </span><span style="color:rgb(17,85,204);font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><a href="mailto:brian@freeswitch.com" target="_blank" moz-do-not-send="true">brian@freeswitch.com</a></span></font></p>
                                <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Mobile: <span title="Call with Google Voice">918-424-9378</span></font></span></p>
                                <p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><font
                                    color="#000000"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Website: </span><a
                                      href="https://www.freeswitch.com/"
                                      style="color:rgb(17,85,204)"
                                      target="_blank"
                                      moz-do-not-send="true"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">https://www.FreeSWITCH.com</span></a></font></p>
                                <p dir="ltr"
style="font-size:12.8px;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-size:9pt;font-family:Arial;color:rgb(0,0,0);vertical-align:baseline;white-space:pre-wrap"><a href="https://www.facebook.com/freeswitch" target="_blank" moz-do-not-send="true"><img alt="https://www.facebook.com/signalwireinc?src=email" src="https://lh6.googleusercontent.com/AYfRoSNaDNtMPRMevPn_GqcVEMd5NDRFi0GlluGUWzV6I5TAY_3T2-Tt0IuIXeUtEdYsgNsM8DOYKRKhjmrG_-n2Ga-LCnoNk46sO8VyEma1sBFYdiGJcLRUvkrD1CYHN79qimeg" style="border: none;" moz-do-not-send="true" width="31" height="31"></a> </span><span style="background-color:transparent;font-size:9pt;font-family:Tahoma;color:rgb(0,0,0);vertical-align:baseline;white-space:pre-wrap"><a href="https://twitter.com/freeswitch" target="_blank" moz-do-not-send="true"><img alt="https://twitter.com/freeswitch" src="https://lh3.googleusercontent.com/W4SqXyybH2qdAozvtoKjcz736qOjk9LHDwldvs1ahc-WVU0putVMSsUH474KDrJ32jsqi6JDjyUWxqeEkN5I1xSlC5ShYrd1b8NIMUkDzDrtbWQfa6A_90UcygqesBtRLgeFirKa" style="border: none;" moz-do-not-send="true" width="31" height="31"></a></span><br>
                                </p>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
  </body>
</html>