FreeSwitch running on VM. What all ports need to be forwarded.
Hi all, I am running FS on a Virtual Machine which in turn is running on Windows server. I want to know what all ports I need to forward from Windows server to VM apart from 1. Sip Port - 5060 2. WebRTC Port - 9066 [ Reason for asking this question <https://jira.freeswitch.org/browse/FS-6618?filter=-2> ] -- Anurag Rana http://newbie42.blogspot.in/ On the trampoline of life's experiences, Striving towards a saintly life in the midst of these materialistic turbulences.
https://confluence.freeswitch.org/display/FREESWITCH/Firewall Thanks, Moishe Grunstein Tornado Computer Systems, Inc. 212.400.7650 888.IPPBX.US Service Request Email: support@nysolutions.com<mailto:support@nysolutions.com> Polycom Certified VAR Microsoft Small Business Specialist, Cisco SMB Select Certified [cid:image001.jpg@01C72F94.9EE45D60]<http://www.nysolutions.com/> Computer Networking * Managed Services * IP Video Surveillance * Network Assessments * Web Solutions * Voice over IP * Disaster Recovery * Network Security * Site Surveys * CMS From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Anurag Rana Sent: Sunday, June 22, 2014 3:27 PM To: freeswitch-users@lists.freeswitch.org Subject: [Freeswitch-users] FreeSwitch running on VM. What all ports need to be forwarded. Hi all, I am running FS on a Virtual Machine which in turn is running on Windows server. I want to know what all ports I need to forward from Windows server to VM apart from 1. Sip Port - 5060 2. WebRTC Port - 9066 [ Reason for asking this question<https://jira.freeswitch.org/browse/FS-6618?filter=-2> ] -- Anurag Rana http://newbie42.blogspot.in/ On the trampoline of life's experiences, Striving towards a saintly life in the midst of these materialistic turbulences.
That'll depend on your configuration, but examples would be 5060 + 5080 for SIP, 8021 for ESL etc. You'll want to give the VM access to the Internet via NAT. RTP ports are assigned randomly (in a very wide port range). A stateful NAT should see the SIP SDP packets going through it and automatically open the RTP port mappings. That will *only* work if you're not using TLS, since for obvious reasons you can't read the SDP otherwise. If you are using TLS you could port forward an entire port range. You can manually set the port range RTP will use in switch.conf.xml. The SIP packets will want to include in the SDP the external IP where clients can send packets to. That's probably the IP of the Windows server. You can set it manually on the sofia profile(s) using ext-sip-ip and ext-rtp-ip, or use STUN. If you're going through multiple layers of NAT (ie the Windows server does not have a public IP) that can complicate matters. On 22 June 2014 20:27, Anurag Rana <anuragrana31189@gmail.com> wrote:
Hi all,
I am running FS on a Virtual Machine which in turn is running on Windows server. I want to know what all ports I need to forward from Windows server to VM apart from
1. Sip Port - 5060 2. WebRTC Port - 9066
[ Reason for asking this question <https://jira.freeswitch.org/browse/FS-6618?filter=-2> ]
-- Anurag Rana http://newbie42.blogspot.in/ On the trampoline of life's experiences, Striving towards a saintly life in the midst of these materialistic turbulences.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks for the help ! I did all that you guys mentioned. Forwarded all the ports,mentioned on this link <https://confluence.freeswitch.org/display/FREESWITCH/Firewall>, from windows server to VM. Window server have public IP, but for now we are testing/running system inside the LAN. Here is the scenario -> Two twinkle soft-phones running on two different machines and are connected to windows server (which also have public address but since we are using in LAN so Twinkles are connecting to server using server's local address) Twinkle user 1005 (192.168.XXX.181) -> Windows server ( 192.168.XXX.40) -> ports forwarded -> VM (192.168.XXX.145) Twinkle user 1007 (192.168.XXX.190) -> Windows server ( 192.168.XXX.40) -> ports forwarded -> VM (192.168.XXX.145) *What is happening ( Tracked using wireshark) :->* sip packets are going from 192.168.XXX.181 to 192.168.XXX.40 (as expected) sip packets are received from 192.168.XXX.40 to 192.168.XXX.181 (as expected) RTP packets going from 192.168.XXX.181 to 192.168.XXX.145 (*not expected*) sip packets are received from 192.168.XXX.40 to 192.168.XXX.181 (as expected) Also I have set these values <param name="ext-rtp-ip" value="$${external_rtp_ip}"/> <param name="ext-sip-ip" value="$${external_sip_ip}"/> where external_sip_ip and external_rtp_ip == 192.168.XXX.40 (windows servers address) *But still there is no sound.* *Am I still missing something?* Please let me know if more info/trace is required. On Mon, Jun 23, 2014 at 2:34 PM, Steven Ayre <steveayre@gmail.com> wrote:
That'll depend on your configuration, but examples would be 5060 + 5080 for SIP, 8021 for ESL etc.
You'll want to give the VM access to the Internet via NAT. RTP ports are assigned randomly (in a very wide port range). A stateful NAT should see the SIP SDP packets going through it and automatically open the RTP port mappings. That will *only* work if you're not using TLS, since for obvious reasons you can't read the SDP otherwise.
If you are using TLS you could port forward an entire port range. You can manually set the port range RTP will use in switch.conf.xml.
The SIP packets will want to include in the SDP the external IP where clients can send packets to. That's probably the IP of the Windows server. You can set it manually on the sofia profile(s) using ext-sip-ip and ext-rtp-ip, or use STUN.
If you're going through multiple layers of NAT (ie the Windows server does not have a public IP) that can complicate matters.
On 22 June 2014 20:27, Anurag Rana <anuragrana31189@gmail.com> wrote:
Hi all,
I am running FS on a Virtual Machine which in turn is running on Windows server. I want to know what all ports I need to forward from Windows server to VM apart from
1. Sip Port - 5060 2. WebRTC Port - 9066
[ Reason for asking this question <https://jira.freeswitch.org/browse/FS-6618?filter=-2> ]
-- Anurag Rana http://newbie42.blogspot.in/ On the trampoline of life's experiences, Striving towards a saintly life in the midst of these materialistic turbulences.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anurag Rana http://newbie42.blogspot.in/ On the trampoline of life's experiences, Striving towards a saintly life in the midst of these materialistic turbulences.
participants (3)
-
Anurag Rana
-
Moishe Grunstein
-
Steven Ayre