I am not an expert, you should get help from FS staff, but anyways, here is some info:
1. Do ports need to be opened on the firewall under all circumstances? UDP ports for RTP, for instance.
Yes. If you block the ports then nothing can get thru. For SIP/RTP, you need the SIP port open, and you need a range of ports open for RTP. See the configuration files for the port numbers. If you use WSS, then you need the WSS port open.
2. Is this always a good idea to enable in sip_profiles/internal.xml? <param name="nat-options-ping" value="true"/>
Maybe. Some software does not support OPTIONS messages. If it yours does then yeah use it. See https://freeswitch.org/confluence/display/FREESWITCH/NAT+Traversal
3. Is it necessary/recommended to have STUN enabled in vars.xml AND setup the nat-options-ping?
I guess here, if you or your client are behind an asymmetric NAT then you need a STUN server. If a symmetric NAT then you need TURN server. Keep in mind your clients might have all kinds of different situations.
4. my sip_profile/internal.xml has this: <param name="ext-rtp-ip" value="auto-nat"/> <param name="ext-sip-ip" value="auto-nat"/>
Is this an improvement over what's in confluence of: <param name="ext-rtp-ip" value="$${external_rtp_ip}"/>
Not sure, read up on it https://freeswitch.org/confluence/display/FREESWITCH/Auto+Nat
5. If the endpoints are configured to connect using TCP, does any of this change what's above?
Not sure, but my guess is no Robert -----Original Message----- From: FreeSWITCH-users [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of jungle boogie Sent: Tuesday, January 30, 2018 12:15 AM To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Subject: Re: [Freeswitch-users] FreeSWITCH behind NAT Hi All, Can anyone give me some advice? I'll update the docs, if it's needed. Thanks! Thus said Jungle Boogie on Sun, 28 Jan 2018 17:51:40 -0800
Hi All,
I have some questions about this page and what folks do when freeswitch is behind NAT: https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ffrees witch.org%2Fconfluence%2Fdisplay%2FFREESWITCH%2FNAT%2BTraversal&data=0 2%7C01%7Crmundkowsky%40ets.org%7C505306e6c453490da26708d567a0f5d5%7C0b a6e9b760b34fae92f37e6ddd9e9b65%7C0%7C0%7C636528863387947052&sdata=L91K SrefIPmwVZLdFSPioL6zcM7Be5MlgxPoyUOU70w%3D&reserved=0
1. Do ports need to be opened on the firewall under all circumstances? UDP ports for RTP, for instance.
2. Is this always a good idea to enable in sip_profiles/internal.xml? <param name="nat-options-ping" value="true"/>
3. Is it necessary/recommended to have STUN enabled in vars.xml AND setup the nat-options-ping?
4. my sip_profile/internal.xml has this: <param name="ext-rtp-ip" value="auto-nat"/> <param name="ext-sip-ip" value="auto-nat"/>
Is this an improvement over what's in confluence of: <param name="ext-rtp-ip" value="$${external_rtp_ip}"/>
5. If the endpoints are configured to connect using TCP, does any of this change what's above?
thanks!
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeswit... Official FreeSWITCH Sites https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeswit... https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fconfluence.f... https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.cluecon.... FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.freesw... UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeswit... ________________________________ This e-mail and any files transmitted with it may contain privileged or confidential information. It is solely for use by the individual for whom it is intended, even if addressed incorrectly. If you received this e-mail in error, please notify the sender; do not disclose, copy, distribute, or take any action in reliance on the contents of this information; and delete it from your system. Any other use of this e-mail is prohibited. Thank you for your compliance. ________________________________