Hello, i have a problem using a innovaphone ip200 with freeswitch and tls/srtp. The freeswitch certificate is in the trust list of the phone and it works with tls for incomming calls. But outgoing calls were rejected to the mailbox. The freeswitch configuration is ok, because it works with a snom 320. Who can help me to confugure the IP200? Thanks NOx -- View this message in context: http://www.nabble.com/TLS-SRTP-with-Innovaphone-IP200-tp24823167p24823167.ht... Sent from the Freeswitch-users mailing list archive at Nabble.com.
Can you ship me a phone to test with? That's usually the missing element when testing this stuff is I just can't afford to buy every phone to test with. /b On Aug 5, 2009, at 3:52 AM, NOx-WHV wrote:
Hello,
i have a problem using a innovaphone ip200 with freeswitch and tls/ srtp. The freeswitch certificate is in the trust list of the phone and it works with tls for incomming calls. But outgoing calls were rejected to the mailbox. The freeswitch configuration is ok, because it works with a snom 320.
Who can help me to confugure the IP200?
Thanks
NOx --
Hi Brian, where i have to ship the phone? Maybe i can ship it to you. But i have first to ask the owner, because i also borrow it. Thanks for your help NOx Brian West-3 wrote:
Can you ship me a phone to test with? That's usually the missing element when testing this stuff is I just can't afford to buy every phone to test with.
/b
On Aug 5, 2009, at 3:52 AM, NOx-WHV wrote:
Hello,
i have a problem using a innovaphone ip200 with freeswitch and tls/ srtp. The freeswitch certificate is in the trust list of the phone and it works with tls for incomming calls. But outgoing calls were rejected to the mailbox. The freeswitch configuration is ok, because it works with a snom 320.
Who can help me to confugure the IP200?
Thanks
NOx --
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- View this message in context: http://www.nabble.com/TLS-SRTP-with-Innovaphone-IP200-tp24823167p24841078.ht... Sent from the Freeswitch-users mailing list archive at Nabble.com.
Hi NOx, Can you clarify the direction of the calls. When you say outgoing do you mean a call is terminating to the ip200? I have been down a similar path while testing Eyebeam. If the terminating phone sets an option to only accept secure calls and FS does not send Secure Descriptions in the INVITE, Eyebeam would respond with 415 response code and the call would fail. Depending on your diaplan this could send your call to voicemail. To fix it I added the following code to dialplan. <action application="set" data="continue_on_fail=79"/> <bridge blah blah blah> <action application="set" data="bypass_media=false"/> <action application="set" data="proxy_media=true"/> <action application="set" data="ringback=$${uk-ring}"/> <action application="pre_answer"/> <action application="export" data="sip_secure_media=true"/> <bridge blah blah blah> The continue on fail captures the 415 response code forces the call to continue to the next bridge while sip_secure_media forces the second invite to include security descriptors. The rest was required because I did not want to proxy media if the call was not secure, obviously if the call is secure on a point to point basis FS will have to proxy the media and this was the only way I could find for it to work. Hope this helps. Regards, On Wed, Aug 5, 2009 at 6:52 PM, NOx-WHV<enno.egbert@googlemail.com> wrote:
Hello,
i have a problem using a innovaphone ip200 with freeswitch and tls/srtp. The freeswitch certificate is in the trust list of the phone and it works with tls for incomming calls. But outgoing calls were rejected to the mailbox. The freeswitch configuration is ok, because it works with a snom 320.
Who can help me to confugure the IP200?
Thanks
NOx -- View this message in context: http://www.nabble.com/TLS-SRTP-with-Innovaphone-IP200-tp24823167p24823167.ht... Sent from the Freeswitch-users mailing list archive at Nabble.com.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Jim Burke Director Evolutiontel. http://www.evolutiontel.net
Jim, Just curious - could you document this use case on the wiki? Maybe you could create a page describing the setup and then link to it from the TLS page. Thanks, MC Sent from my iPhone On Aug 5, 2009, at 9:07 AM, Jim Burke <jim@evolutiontel.net> wrote:
Hi NOx,
Can you clarify the direction of the calls. When you say outgoing do you mean a call is terminating to the ip200?
I have been down a similar path while testing Eyebeam. If the terminating phone sets an option to only accept secure calls and FS does not send Secure Descriptions in the INVITE, Eyebeam would respond with 415 response code and the call would fail. Depending on your diaplan this could send your call to voicemail.
To fix it I added the following code to dialplan. <action application="set" data="continue_on_fail=79"/> <bridge blah blah blah> <action application="set" data="bypass_media=false"/> <action application="set" data="proxy_media=true"/> <action application="set" data="ringback=$${uk-ring}"/> <action application="pre_answer"/> <action application="export" data="sip_secure_media=true"/> <bridge blah blah blah>
The continue on fail captures the 415 response code forces the call to continue to the next bridge while sip_secure_media forces the second invite to include security descriptors. The rest was required because I did not want to proxy media if the call was not secure, obviously if the call is secure on a point to point basis FS will have to proxy the media and this was the only way I could find for it to work.
Hope this helps.
Regards,
On Wed, Aug 5, 2009 at 6:52 PM, NOx-WHV<enno.egbert@googlemail.com> wrote:
Hello,
i have a problem using a innovaphone ip200 with freeswitch and tls/ srtp. The freeswitch certificate is in the trust list of the phone and it works with tls for incomming calls. But outgoing calls were rejected to the mailbox. The freeswitch configuration is ok, because it works with a snom 320.
Who can help me to confugure the IP200?
Thanks
NOx -- View this message in context: http://www.nabble.com/TLS-SRTP-with-Innovaphone-IP200-tp24823167p24823167.ht... Sent from the Freeswitch-users mailing list archive at Nabble.com.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Jim Burke Director Evolutiontel. http://www.evolutiontel.net
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi Jim, yes! It´s possible to call the IP200 full encrypted for example from a SNOM or phonerlite. But when i try to call the SNOM from a innovaphone, the call fails and i only hear the mailbox. To modify the dialplan i am not so sure how i works. I don´t have any experience of configure freeswitch or working with xml files. :confused: In my dialplan i just modify a few lines. If you want, you can have a look on the file in the attachment. http://www.nabble.com/file/p24841050/default.xml default.xml Thanks for your help. =) NOx Jim Burke-2 wrote:
Hi NOx,
Can you clarify the direction of the calls. When you say outgoing do you mean a call is terminating to the ip200?
I have been down a similar path while testing Eyebeam. If the terminating phone sets an option to only accept secure calls and FS does not send Secure Descriptions in the INVITE, Eyebeam would respond with 415 response code and the call would fail. Depending on your diaplan this could send your call to voicemail.
To fix it I added the following code to dialplan. <action application="set" data="continue_on_fail=79"/> <bridge blah blah blah> <action application="set" data="bypass_media=false"/> <action application="set" data="proxy_media=true"/> <action application="set" data="ringback=$${uk-ring}"/> <action application="pre_answer"/> <action application="export" data="sip_secure_media=true"/> <bridge blah blah blah>
The continue on fail captures the 415 response code forces the call to continue to the next bridge while sip_secure_media forces the second invite to include security descriptors. The rest was required because I did not want to proxy media if the call was not secure, obviously if the call is secure on a point to point basis FS will have to proxy the media and this was the only way I could find for it to work.
Hope this helps.
Regards,
On Wed, Aug 5, 2009 at 6:52 PM, NOx-WHV<enno.egbert@googlemail.com> wrote:
Hello,
i have a problem using a innovaphone ip200 with freeswitch and tls/srtp. The freeswitch certificate is in the trust list of the phone and it works with tls for incomming calls. But outgoing calls were rejected to the mailbox. The freeswitch configuration is ok, because it works with a snom 320.
Who can help me to confugure the IP200?
Thanks
NOx -- View this message in context: http://www.nabble.com/TLS-SRTP-with-Innovaphone-IP200-tp24823167p24823167.ht... Sent from the Freeswitch-users mailing list archive at Nabble.com.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Jim Burke Director Evolutiontel. http://www.evolutiontel.net
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- View this message in context: http://www.nabble.com/TLS-SRTP-with-Innovaphone-IP200-tp24823167p24841050.ht... Sent from the Freeswitch-users mailing list archive at Nabble.com.
participants (4)
-
Brian West
-
Jim Burke
-
Michael S Collins
-
NOx-WHV