Alex -
Check out the presense settings. Make sure both profiles are using the same DB:
On Monday 05 December 2011 08:19:33 Alex Crow wrote:
> On 05/12/11 13:04, Anthony Cosgrove wrote:
> > Alex,
> >
> > Does FS *have* to be behind a NAT? Are you doing a straight 1:1 from public to private (FS side)? What kind of router/firewall are you using on the FS side and endpoint sides? You'll will probably want to lower the endpoint registration times from the normal default of 1 hour to 180 seconds (3 minutes) or even lower depending on router/firewall. You may also want to turn on keep-alive packets to keep the data flowing in/out. What you are running into is either one or both sides are closing off 5060/udp early, FS is marking the registration as dead.
> >
>
> Anthony,
>
> No, it's definitely not that - the registration is alive and well. The
> issue is that FS sees that the user is not registered on the internal
> sip profile and doesn't check the doublenat profile.
>
> The router/firewall is iptables (shorewall) and I'm doing a DNAT of the
> relevant ports to the FS box.
>
> What I have found is that I can specify the dialstring for the external
> users in the directory entries, eg:
>
> <param name="dial-string"
> value="{sip_invite_domain=${domain_name},presence_id=${dialed_user}@${dialed_domain}}${sofia_contact(doublenat/${dialed_user}@${dialed_domain})}"/>
>
>
> > Best thing to do is to place FS in a DMZ or install a public facing SBC to take the registrations and forward them on to FS internally.
> >
>
> Yes, it would probably be better that way, but this is really mostly for
> internal use.
>
> Cheers
>
> Alex
>
> >
> > Anthony
> >
> > On Dec 5, 2011, at 7:09 AM, Alex Crow wrote:
> >
> >> Hi all,
> >>
> >> I have set up a new profile for phones behind NAT connecting to an FS
> >> box behind NAT. Calls in from a NAT'ed phone works fine, however calls
> >> out to one fail with USER_NOT_REGISTERED. All the phones are set up in
> >> /opt/freeswitch/conf/directory/default/<sip id>.
> >>
> >> I have added the following in the new profile config hoping it would
> >> resolve the issue but it does not:
> >>
> >> <param name="challenge-realm" value="$${domain}"/>
> >> <param name="force-subscription-domain" value="$${domain}"/>
> >> <param name="force-register-domain" value="$${domain}"/>
> >> <param name="force-register-db-domain" value="$${domain}"/>
> >>
> >> Any clues?
> >>
> >> Thanks
> >>
> >> Alex
> >>
> >> _________________________________________________________________________
> >> Professional FreeSWITCH Consulting Services:
> >> consulting@freeswitch.org
> >> http://www.freeswitchsolutions.com
> >>
> >> FreeSWITCH-powered IP PBX: The CudaTel Communication Server
> >> http://www.cudatel.com
> >>
> >> Official FreeSWITCH Sites
> >> http://www.freeswitch.org
> >> http://wiki.freeswitch.org
> >> http://www.cluecon.com
> >>
> >> FreeSWITCH-users mailing list
> >> FreeSWITCH-users@lists.freeswitch.org
> >> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> >> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> >> http://www.freeswitch.org
> >
> > _________________________________________________________________________
> > Professional FreeSWITCH Consulting Services:
> > consulting@freeswitch.org
> > http://www.freeswitchsolutions.com
> >
> > FreeSWITCH-powered IP PBX: The CudaTel Communication Server
> > http://www.cudatel.com
> >
> > Official FreeSWITCH Sites
> > http://www.freeswitch.org
> > http://wiki.freeswitch.org
> > http://www.cluecon.com
> >
> > FreeSWITCH-users mailing list
> > FreeSWITCH-users@lists.freeswitch.org
> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > http://www.freeswitch.org
> >
>
>
>