Hi. I have just installed my first FreeSwitch server on a virtual machine on my local network, and I'm playing with it and a couple of SIP phones on the same network, in order to learn about it. I've got the phones to register to the server (I've changed the default password in vars.xml), and my first test is simply to place a call between one phone and the other. I've discovered the "NAT feature" of FreeSwitch, where it finds out what the *external* IP address of my Internet router is (which has nothing to do with the FreeSwitch server or the phones I'm trying to work with here), and starts presenting that address to the telephones in the Invite messages (inlcuding the SDP negotiations). I've found https://freeswitch.org/confluence/display/FREESWITCH/Auto+Nat and https://freeswitch.org/confluence/display/FREESWITCH/NAT+Traversal which tell me that I need to use the "-nonat" command-line option to freeswitch to disable this. However, this doesn't work for me: # ps ax | grep freeswitch 3678 ? S<Lsl 0:02 /usr/bin/freeswitch -u freeswitch -ncwait -nonat
sofia status profile internal ================================================================================================= Name internal Domain Name N/A Auto-NAT false DBName sofia_reg_internal Pres Hosts 192.168.32.59,192.168.32.59 Dialplan XML Context public Challenge Realm auto_from RTP-IP 192.168.32.59 Ext-RTP-IP 198.51.100.21 SIP-IP 192.168.32.59 Ext-SIP-IP 198.51.100.21 URL sip:mod_sofia@198.51.100..21:5060 BIND-URL sip:mod_sofia@198.51.100.21:5060;maddr=192.168.32.59;transport=udp,tcp WS-BIND-URL sip:mod_sofia@192.168.32.59:5066;transport=ws WSS-BIND-URL sips:mod_sofia@192.168.32.59:7443;transport=wss
As you can see, my public IP address (represented here by 198.51.100.21) is still there, and it's still getting included in the Invite message and SDP negotiations between my telephones. So, how can I run FreeSwitch and two SIP telephones on a single internal network, without any reference to my public IP address? Thanks, Antony. -- "640 kilobytes (of RAM) should be enough for anybody." - Bill Gates Please reply to the list; please *don't* CC me.
My sip_profiles/internal.xml and external.xml have these lines: <param name="rtp-ip" value="$${local_ip_v4}"/> <param name="sip-ip" value="$${local_ip_v4}"/> <param name="ext-rtp-ip" value="auto-nat"/> <param name="ext-sip-ip" value="auto-nat"/> which magically "just works" between internal extensions as well as with a couple cloud SIP providers. This is with FreeSWITCH version 1.10.5 from about a year ago. Maybe try those settings and see if they help? BTW, I fell in love with FreeSWITCH when I installed it and configured a couple phones that were up and calling each other in my lab in about 10 minutes, so you shouldn't be too far off. They've really tried to make it easy to get a working system going quickly, then you can break things from there :-) Here are my ancient notes which might also be helpful: https://freeswitch.org/confluence/display/FREESWITCH/Debian+Post-Install+Tas... Hope this helps. John Boteler BnC Group U.S.A. -----Original Message----- From: FreeSWITCH-users <freeswitch-users-bounces@lists.freeswitch.org> On Behalf Of Antony Stone Sent: Friday, 20 August, 2021 11:38 To: freeswitch-users@lists.freeswitch.org Subject: [Freeswitch-users] nonat? Hi. I have just installed my first FreeSwitch server on a virtual machine on my local network, and I'm playing with it and a couple of SIP phones on the same network, in order to learn about it. I've got the phones to register to the server (I've changed the default password in vars.xml), and my first test is simply to place a call between one phone and the other. I've discovered the "NAT feature" of FreeSwitch, where it finds out what the *external* IP address of my Internet router is (which has nothing to do with the FreeSwitch server or the phones I'm trying to work with here), and starts presenting that address to the telephones in the Invite messages (inlcuding the SDP negotiations). I've found https://freeswitch.org/confluence/display/FREESWITCH/Auto+Nat and https://freeswitch.org/confluence/display/FREESWITCH/NAT+Traversal which tell me that I need to use the "-nonat" command-line option to freeswitch to disable this. However, this doesn't work for me: # ps ax | grep freeswitch 3678 ? S<Lsl 0:02 /usr/bin/freeswitch -u freeswitch -ncwait -nonat
sofia status profile internal ================================================================================================= Name internal Domain Name N/A Auto-NAT false DBName sofia_reg_internal Pres Hosts 192.168.32.59,192.168.32.59 Dialplan XML Context public Challenge Realm auto_from RTP-IP 192.168.32.59 Ext-RTP-IP 198.51.100.21 SIP-IP 192.168.32.59 Ext-SIP-IP 198.51.100.21 URL sip:mod_sofia@198.51.100..21:5060 BIND-URL sip:mod_sofia@198.51.100.21:5060;maddr=192.168.32.59;transport=udp,tcp WS-BIND-URL sip:mod_sofia@192.168.32.59:5066;transport=ws WSS-BIND-URL sips:mod_sofia@192.168.32.59:7443;transport=wss
As you can see, my public IP address (represented here by 198.51.100.21) is still there, and it's still getting included in the Invite message and SDP negotiations between my telephones. So, how can I run FreeSwitch and two SIP telephones on a single internal network, without any reference to my public IP address? Thanks, Antony. -- "640 kilobytes (of RAM) should be enough for anybody." - Bill Gates Please reply to the list; please *don't* CC me. _________________________________________________________________________ The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform. Join our online community to chat in real time https://signalwire.community Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
That only works if you have a NAT-PMP / UPNP router, for the ext-*-ip options, you can put your public IP in like "autonat:1.2.3.4" and set the local-network-acl and it will use that local-network-acl to determine when to use the external IP or internal IP. /b On Fri, Aug 20, 2021 at 2:10 PM Bote Man <botelist@gmail.com> wrote:
My sip_profiles/internal.xml and external.xml have these lines: <param name="rtp-ip" value="$${local_ip_v4}"/> <param name="sip-ip" value="$${local_ip_v4}"/> <param name="ext-rtp-ip" value="auto-nat"/> <param name="ext-sip-ip" value="auto-nat"/>
which magically "just works" between internal extensions as well as with a couple cloud SIP providers. This is with FreeSWITCH version 1.10.5 from about a year ago.
Maybe try those settings and see if they help?
BTW, I fell in love with FreeSWITCH when I installed it and configured a couple phones that were up and calling each other in my lab in about 10 minutes, so you shouldn't be too far off. They've really tried to make it easy to get a working system going quickly, then you can break things from there :-)
Here are my ancient notes which might also be helpful:
https://freeswitch.org/confluence/display/FREESWITCH/Debian+Post-Install+Tas...
Hope this helps.
John Boteler BnC Group U.S.A.
-----Original Message----- From: FreeSWITCH-users <freeswitch-users-bounces@lists.freeswitch.org> On Behalf Of Antony Stone Sent: Friday, 20 August, 2021 11:38 To: freeswitch-users@lists.freeswitch.org Subject: [Freeswitch-users] nonat?
Hi.
I have just installed my first FreeSwitch server on a virtual machine on my local network, and I'm playing with it and a couple of SIP phones on the same network, in order to learn about it.
I've got the phones to register to the server (I've changed the default password in vars.xml), and my first test is simply to place a call between one phone and the other.
I've discovered the "NAT feature" of FreeSwitch, where it finds out what the *external* IP address of my Internet router is (which has nothing to do with the FreeSwitch server or the phones I'm trying to work with here), and starts presenting that address to the telephones in the Invite messages (inlcuding the SDP negotiations).
I've found https://freeswitch.org/confluence/display/FREESWITCH/Auto+Nat and https://freeswitch.org/confluence/display/FREESWITCH/NAT+Traversal which tell me that I need to use the "-nonat" command-line option to freeswitch to disable this.
However, this doesn't work for me:
# ps ax | grep freeswitch 3678 ? S<Lsl 0:02 /usr/bin/freeswitch -u freeswitch -ncwait -nonat
sofia status profile internal
================================================================================================= Name internal Domain Name N/A Auto-NAT false DBName sofia_reg_internal Pres Hosts 192.168.32.59,192.168.32.59 Dialplan XML Context public Challenge Realm auto_from RTP-IP 192.168.32.59 Ext-RTP-IP 198.51.100.21 SIP-IP 192.168.32.59 Ext-SIP-IP 198.51.100.21 URL sip:mod_sofia@198.51.100..21:5060 BIND-URL sip:mod_sofia@198.51.100.21:5060;maddr=192.168.32.59;transport=udp,tcp WS-BIND-URL sip:mod_sofia@192.168.32.59:5066;transport=ws WSS-BIND-URL sips:mod_sofia@192.168.32.59:7443;transport=wss
As you can see, my public IP address (represented here by 198.51.100.21) is still there, and it's still getting included in the Invite message and SDP negotiations between my telephones.
So, how can I run FreeSwitch and two SIP telephones on a single internal network, without any reference to my public IP address?
Thanks,
Antony.
-- "640 kilobytes (of RAM) should be enough for anybody."
- Bill Gates
Please reply to the list; please *don't* CC me.
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
-- Brian West | Co-founder and Developer Need Commercial support? email sales@freeswitch.com FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> Email: brian@freeswitch.com Mobile: 918-424-9378 Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/> [image: https://www.facebook.com/signalwireinc?src=email] <https://www.facebook.com/freeswitch> [image: https://twitter.com/freeswitch] <https://twitter.com/freeswitch>
On Friday 20 August 2021 at 21:48:30, Brian West wrote:
That only works if you have a NAT-PMP / UPNP router,
Well, it seems that, whether I knew it or not, I have.
for the ext-*-ip options, you can put your public IP in like "autonat:1.2.3.4" and set the local-network-acl and it will use that local- network-acl to determine when to use the external IP or internal IP.
Thanks, however, my main question is "why does the option '-nonat' not work as documented?" Antony. -- I'm not impossible, just highly implausible. Please reply to the list; please *don't* CC me.
Well, it must be operating by F.M. here because I never enable UPNP and checking this UBNT EdgeRouter-X it shows zero packets handled by UPNP2. I must’ve stumbled upon a working configuration by chance, since I’ve never fully understood the ACL system in FreeSWITCH. I’ll have to do some more experimentation. Thanks for clarifying. Bote From: Brian West <brian@freeswitch.com> Sent: Friday, 20 August, 2021 15:49 To: botelist@gmail.com Cc: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Subject: Re: [Freeswitch-users] nonat? That only works if you have a NAT-PMP / UPNP router, for the ext-*-ip options, you can put your public IP in like "autonat:1.2.3.4" and set the local-network-acl and it will use that local-network-acl to determine when to use the external IP or internal IP. /b On Fri, Aug 20, 2021 at 2:10 PM Bote Man <botelist@gmail.com <mailto:botelist@gmail.com> > wrote: My sip_profiles/internal.xml and external.xml have these lines: <param name="rtp-ip" value="$${local_ip_v4}"/> <param name="sip-ip" value="$${local_ip_v4}"/> <param name="ext-rtp-ip" value="auto-nat"/> <param name="ext-sip-ip" value="auto-nat"/> which magically "just works" between internal extensions as well as with a couple cloud SIP providers. This is with FreeSWITCH version 1.10.5 from about a year ago. Maybe try those settings and see if they help? BTW, I fell in love with FreeSWITCH when I installed it and configured a couple phones that were up and calling each other in my lab in about 10 minutes, so you shouldn't be too far off. They've really tried to make it easy to get a working system going quickly, then you can break things from there :-) Here are my ancient notes which might also be helpful: https://freeswitch.org/confluence/display/FREESWITCH/Debian+Post-Install+Tas... Hope this helps. John Boteler BnC Group U.S.A. -----Original Message----- From: FreeSWITCH-users <freeswitch-users-bounces@lists.freeswitch.org <mailto:freeswitch-users-bounces@lists.freeswitch.org> > On Behalf Of Antony Stone Sent: Friday, 20 August, 2021 11:38 To: freeswitch-users@lists.freeswitch.org <mailto:freeswitch-users@lists.freeswitch.org> Subject: [Freeswitch-users] nonat? Hi. I have just installed my first FreeSwitch server on a virtual machine on my local network, and I'm playing with it and a couple of SIP phones on the same network, in order to learn about it. I've got the phones to register to the server (I've changed the default password in vars.xml), and my first test is simply to place a call between one phone and the other. I've discovered the "NAT feature" of FreeSwitch, where it finds out what the *external* IP address of my Internet router is (which has nothing to do with the FreeSwitch server or the phones I'm trying to work with here), and starts presenting that address to the telephones in the Invite messages (inlcuding the SDP negotiations). I've found https://freeswitch.org/confluence/display/FREESWITCH/Auto+Nat and https://freeswitch.org/confluence/display/FREESWITCH/NAT+Traversal which tell me that I need to use the "-nonat" command-line option to freeswitch to disable this. However, this doesn't work for me: # ps ax | grep freeswitch 3678 ? S<Lsl 0:02 /usr/bin/freeswitch -u freeswitch -ncwait -nonat
sofia status profile internal ================================================================================================= Name internal Domain Name N/A Auto-NAT false DBName sofia_reg_internal Pres Hosts 192.168.32.59,192.168.32.59 Dialplan XML Context public Challenge Realm auto_from RTP-IP 192.168.32.59 Ext-RTP-IP 198.51.100.21 SIP-IP 192.168.32.59 Ext-SIP-IP 198.51.100.21 URL sip:mod_sofia@198.51.100. <mailto:sip%3Amod_sofia@198.51.100.> .21:5060 BIND-URL sip:mod_sofia@198.51.100.21 <mailto:sip%3Amod_sofia@198.51.100.21> :5060;maddr=192.168.32.59;transport=udp,tcp WS-BIND-URL sip:mod_sofia@192.168.32.59 <mailto:sip%3Amod_sofia@192.168.32.59> :5066;transport=ws WSS-BIND-URL sips:mod_sofia@192.168.32.59 <mailto:sips%3Amod_sofia@192.168.32.59> :7443;transport=wss
As you can see, my public IP address (represented here by 198.51.100.21) is still there, and it's still getting included in the Invite message and SDP negotiations between my telephones. So, how can I run FreeSwitch and two SIP telephones on a single internal network, without any reference to my public IP address? Thanks, Antony. -- "640 kilobytes (of RAM) should be enough for anybody." - Bill Gates Please reply to the list; please *don't* CC me. _________________________________________________________________________ The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform. Join our online community to chat in real time https://signalwire.community Professional FreeSWITCH Services sales@freeswitch.com <mailto:sales@freeswitch.com> https://freeswitch.com Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com _________________________________________________________________________ The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform. Join our online community to chat in real time https://signalwire.community Professional FreeSWITCH Services sales@freeswitch.com <mailto:sales@freeswitch.com> https://freeswitch.com Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com -- Brian West | Co-founder and Developer Need Commercial support? email sales@freeswitch.com <mailto:sales@freeswitch.com> FreeSWITCH Solutions | <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> 17345 Civic Drive #2531 Brookfield, WI 53045 Email: brian@freeswitch.com <mailto:brian@freeswitch.com> Mobile: 918-424-9378 Website: <https://www.freeswitch.com/> https://www.FreeSWITCH.com <https://www.facebook.com/freeswitch> <https://twitter.com/freeswitch>
On Friday 20 August 2021 at 20:48:34, Bote Man wrote:
My sip_profiles/internal.xml and external.xml have these lines: <param name="rtp-ip" value="$${local_ip_v4}"/> <param name="sip-ip" value="$${local_ip_v4}"/> <param name="ext-rtp-ip" value="auto-nat"/> <param name="ext-sip-ip" value="auto-nat"/>
which magically "just works" between internal extensions as well as with a couple cloud SIP providers. This is with FreeSWITCH version 1.10.5 from about a year ago.
Yep, absolutely identical to what I have here with 1.10.6. My main question is "why does the option '-nonat' not work as documented?" Antony. -- I want to build a machine that will be proud of me. - Danny Hillis, creator of The Connection Machine Please reply to the list; please *don't* CC me.
participants (3)
-
Antony Stone
-
Bote Man
-
Brian West