Alex, Does FS *have* to be behind a NAT? Are you doing a straight 1:1 from public to private (FS side)? What kind of router/firewall are you using on the FS side and endpoint sides? You'll will probably want to lower the endpoint registration times from the normal default of 1 hour to 180 seconds (3 minutes) or even lower depending on router/firewall. You may also want to turn on keep-alive packets to keep the data flowing in/out. What you are running into is either one or both sides are closing off 5060/udp early, FS is marking the registration as dead. Best thing to do is to place FS in a DMZ or install a public facing SBC to take the registrations and forward them on to FS internally. Anthony On Dec 5, 2011, at 7:09 AM, Alex Crow wrote:
Hi all,
I have set up a new profile for phones behind NAT connecting to an FS box behind NAT. Calls in from a NAT'ed phone works fine, however calls out to one fail with USER_NOT_REGISTERED. All the phones are set up in /opt/freeswitch/conf/directory/default/<sip id>.
I have added the following in the new profile config hoping it would resolve the issue but it does not:
<param name="challenge-realm" value="$${domain}"/> <param name="force-subscription-domain" value="$${domain}"/> <param name="force-register-domain" value="$${domain}"/> <param name="force-register-db-domain" value="$${domain}"/>
Any clues?
Thanks
Alex
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org