Hey guys, We have just temporarily moved our office, so our phones are no longer just on the office LAN. They are on a remote lan, both sides behind NAT and I'm trying to get them working right but I am having trouble. I have things working to the point where I can call to the POTS or to an extension on the local network back home just fine. The problem is that the remote phones do not receive sip messages behind the nat. It seems to me that freeswitch is sending the messages to the sip port the phones are configured with, and not the NAT port that can be seen when viewing the registrations status. The nat ports are very high numbers. I suspect if FS was to send messages to those ports, it would get through the foreign nat and reach the phone. On the FS side, I am using pfsense as the firewall, and have port forwards set up to the fs box. I am using a dynamic ip with dyn-dns-like service and am using that domain name in the fs internal/external profiles for the ext-sip-ip and ext-rtp-ip variables. I have upnp turned off but it does not make any difference anyway. Strangely, I was actually able to place a call from one remote phone to another once earlier, but it must have been a fluke because I haven't had it working after that. What am I missing here? ******************************************* Brett Wilson IT Department Launch 3 Ventures, LLC 134 Myer Street Hackensack, NJ 07601 Phone: 877.878.9134 Fax: 646.536.3866 Email: Brett.Wilson@launch3.net AOL IM: Brett.Wilson@launch3.net <http://www.launch3.net/> www.Launch3.net <http://www.launch3telecom.com/> www.Launch3telecom.com ******************************************* <http://launch3telecom.blogspot.com/> Description: Description: Blogger-logo <http://www.facebook.com/pages/Launch-3-Telecom/165610820178720> Description: Description: FaceBook-Logo <https://twitter.com/launch3telecom> Description: Description: Twitter-Logo <https://plus.google.com/102713212642017290959> Description: Description: GPlus-Logo
Please attach a .pcap from the FS server with a failed call. -BDF On Apr 4, 2012 4:06 AM, "Brett Wilson" <brett@launch3.net> wrote:
Hey guys,****
We have just temporarily moved our office, so our phones are no longer just on the office LAN. They are on a remote lan, both sides behind NAT and I’m trying to get them working right but I am having trouble. I have things working to the point where I can call to the POTS or to an extension on the local network back home just fine. The problem is that the remote phones do not receive sip messages behind the nat. It seems to me that freeswitch is sending the messages to the sip port the phones are configured with, and not the NAT port that can be seen when viewing the registrations status. The nat ports are very high numbers. I suspect if FS was to send messages to those ports, it would get through the foreign nat and reach the phone.* ***
** **
On the FS side, I am using pfsense as the firewall, and have port forwards set up to the fs box. I am using a dynamic ip with dyn-dns-like service and am using that domain name in the fs internal/external profiles for the ext-sip-ip and ext-rtp-ip variables. I have upnp turned off but it does not make any difference anyway.****
** **
Strangely, I was actually able to place a call from one remote phone to another once earlier, but it must have been a fluke because I haven’t had it working after that.****
** **
What am I missing here?****
** **
******************************************* *Brett Wilson* *IT Department* *Launch 3 Ventures, LLC* 134 Myer Street Hackensack, NJ 07601 *Phone:* 877.878.9134 *Fax:* 646.536.3866 *Email:* Brett.Wilson@launch3.net *AOL IM:* Brett.Wilson@launch3.net www.Launch3.net <http://www.launch3.net/> *www.Launch3telecom.com <http://www.launch3telecom.com/>* ******************************************* [image: Description: Description: Blogger-logo]<http://launch3telecom.blogspot.com/>[image: Description: Description: FaceBook-Logo]<http://www.facebook.com/pages/Launch-3-Telecom/165610820178720>[image: Description: Description: Twitter-Logo]<https://twitter.com/launch3telecom>[image: Description: Description: GPlus-Logo]<https://plus.google.com/102713212642017290959> ****
** **
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Try to set NDLB-force-rport = true in your internal profile and see if that helps. NDLB-force-rport This will force FreeSWITCH to send SIP responses to the network port from which they were received. *Use at your own risk!* For more information see NAT Traversal <http://wiki.freeswitch.org/wiki/NAT_Traversal>. <param name="NDLB-force-rport" value="true|safe"/> http://wiki.freeswitch.org/wiki/Sofia_Configuration_Files#NDLB-force-rport Regards, Vitalie 2012/4/4 Brett Wilson <brett@launch3.net>
Hey guys,****
We have just temporarily moved our office, so our phones are no longer just on the office LAN. They are on a remote lan, both sides behind NAT and I’m trying to get them working right but I am having trouble. I have things working to the point where I can call to the POTS or to an extension on the local network back home just fine. The problem is that the remote phones do not receive sip messages behind the nat. It seems to me that freeswitch is sending the messages to the sip port the phones are configured with, and not the NAT port that can be seen when viewing the registrations status. The nat ports are very high numbers. I suspect if FS was to send messages to those ports, it would get through the foreign nat and reach the phone.* ***
** **
On the FS side, I am using pfsense as the firewall, and have port forwards set up to the fs box. I am using a dynamic ip with dyn-dns-like service and am using that domain name in the fs internal/external profiles for the ext-sip-ip and ext-rtp-ip variables. I have upnp turned off but it does not make any difference anyway.****
** **
Strangely, I was actually able to place a call from one remote phone to another once earlier, but it must have been a fluke because I haven’t had it working after that.****
** **
What am I missing here?****
** **
******************************************* *Brett Wilson* *IT Department* *Launch 3 Ventures, LLC* 134 Myer Street Hackensack, NJ 07601 *Phone:* 877.878.9134 *Fax:* 646.536.3866 *Email:* Brett.Wilson@launch3.net *AOL IM:* Brett.Wilson@launch3.net www.Launch3.net <http://www.launch3.net/> *www.Launch3telecom.com <http://www.launch3telecom.com/>* ******************************************* [image: Description: Description: Blogger-logo]<http://launch3telecom.blogspot.com/>[image: Description: Description: FaceBook-Logo]<http://www.facebook.com/pages/Launch-3-Telecom/165610820178720>[image: Description: Description: Twitter-Logo]<https://twitter.com/launch3telecom>[image: Description: Description: GPlus-Logo]<https://plus.google.com/102713212642017290959> ****
** **
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
Brett Wilson
-
Brian Foster
-
Vitalie Colosov