Let me try this. I have a public network interface connected to the external profile with ip 1.1.1.1/24 (e.g. of course) I have a private subnet attached to the internal profile on 192.168.0.2/24. I've got polycoms registering to 192.168.0.2 using TLS that show up as 192.168.0.1 given they are NAT'd behind this firewall. It seems that if the devices try to register to .2 via an ip on the same subnet that NAT detection is not happy. When the clients come from something totally different it works. Any way to force this to work? Jim On 1/28/21 5:36 PM, Brian West wrote:
Without a full understanding of your network topology it's difficult to say.
On Thu, Jan 28, 2021 at 3:53 PM Jim Miller <jmiller@wndswp.net <mailto:jmiller@wndswp.net>> wrote:
Brian
Not sure I 100% follow. The clients are on the same /24 as the "internal" profile interface is on. The only thing is they are behind a NAT.
What led me to this was I had a previous configuration whereby the internal and external profiles were on the same interface IP. When the clients connected to the internal profile via an totally different public IP, but also behind a NAT it worked (registrations showed fs_nat and a fs_path properly). However, for this configuration when I put the clients on a NAT that was on the same subnet as the internal and external shared IP it wouldn't work. I thought maybe this was an issue with the profiles sharing the same IP. Thus I split it to the configuration I documented below. It makes me think that the NAT issue is related to the fact that the profile IP is on the same subnet as the NAT.
Jim
On 1/28/21 10:51 AM, Brian West wrote:
You will require one profile per nat interface, you can't cross profiles between transit providers without it.
/b
On Thu, Jan 28, 2021 at 7:25 AM Jim Miller <jmiller@wndswp.net <mailto:jmiller@wndswp.net>> wrote:
Hi Folks
I'm running FreeSWITCH Version 1.10.3-release~64bit (-release 64bit) on a FreeBSD 12.1 box.
The issue I'm having is related to NAT, I'm sure no one has ever seen a post on this topic....
My configuration is a box that is multi homed with an Internet facing interface and a private IP LAN interface. The clients (Polycoms) are on the private LAN interface but behind a NAT (pfsense) on this subnet. If I have the clients route directly to the FS box's private LAN without NAT I can make this work but as soon as I NAT them (which I need to for other reasons) I don't see the registrations show up with fs_path or the other variables like I might expect.
I've fiddled with the apply-nat-acl variable to no avail.
Thoughts?
Thanks
Jim
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com <mailto:sales@freeswitch.com> https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
--
Brian West | Co-founder and Developer
Need Commercial support? email sales@freeswitch.com <mailto:sales@freeswitch.com>
FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g>
Email: brian@freeswitch.com <mailto:brian@freeswitch.com>
Mobile: 918-424-9378
Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/>
https://www.facebook.com/signalwireinc?src=email <https://www.facebook.com/freeswitch> https://twitter.com/freeswitch <https://twitter.com/freeswitch>
--
Brian West | Co-founder and Developer
Need Commercial support? email sales@freeswitch.com <mailto:sales@freeswitch.com>
FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g>
Email: brian@freeswitch.com <mailto:brian@freeswitch.com>
Mobile: 918-424-9378
Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/>
https://www.facebook.com/signalwireinc?src=email <https://www.facebook.com/freeswitch> https://twitter.com/freeswitch <https://twitter.com/freeswitch>