Hi All, I am really having Hard time with NAT, Can any one give me the steps witch already works for them, its Help for Many people who is having issue with NAT. Thanks in Advance.
There's lots of info on the wiki about NAT. And lots of automatic things in FreeSWITCH to deal with NAT. One common thing: Turn off SIP ALG, it probably gets in the way rather than helping. If you want anything more, you'll have to ask a much more specific question... -Avi On Fri, Jun 28, 2013 at 2:59 AM, johnthan123 <johnthan123@gmail.com> wrote:
Hi All,
I am really having Hard time with NAT,
Can any one give me the steps witch already works for them, its Help for Many people who is having issue with NAT.
Thanks in Advance.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
A comment about my experience with ALG. I have dual wan (1 status and 1 dynamic) for balancing and auto fall over. I had many issues getting it all working until I used SIP ALG which solved all my NAT problems. Been perfect for 2 years now. I plan to writeup the setup on the wiki to share my experience since so many people have nat issues at the beginning. Yes know most here hate ALG but for me it is a miracle worker. As Avi said, you probably will get more help if you describe what is happening. Mario On Jun 28, 2013, at 7:37 AM, Avi Marcus <avi@avimarcus.net> wrote:
There's lots of info on the wiki about NAT. And lots of automatic things in FreeSWITCH to deal with NAT.
One common thing: Turn off SIP ALG, it probably gets in the way rather than helping.
If you want anything more, you'll have to ask a much more specific question...
-Avi
On Fri, Jun 28, 2013 at 2:59 AM, johnthan123 <johnthan123@gmail.com> wrote: Hi All,
I am really having Hard time with NAT,
Can any one give me the steps witch already works for them, its Help for Many people who is having issue with NAT.
Thanks in Advance.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks mario and avi, I followed all wiki but still I am laking some where. My setupb is simple Public ip --- NAT-- freeswith(PRIVATEIP)---(PRIVATE IP) ASYERISK.. Vars.xml I cahnge the extern-rtp-ip and extern-sip-ip In sofia profiles I cange the nat-auto to extern-rtp-ip variable and also extern-sip-ip. Acl.xml I allow the cidr of the my provider and asterisk ip aswell. I can see the sofia status with my extern ip as my public ip but staill no voice. If I miss anything please letme know. Thanks in advance. John than. On 29 Jun 2013 00:58, "Mario M Guzman" <mario_fs@mgtech.com> wrote:
A comment about my experience with ALG. I have dual wan (1 status and 1 dynamic) for balancing and auto fall over. I had many issues getting it all working until I used SIP ALG which solved all my NAT problems. Been perfect for 2 years now. I plan to writeup the setup on the wiki to share my experience since so many people have nat issues at the beginning. Yes know most here hate ALG but for me it is a miracle worker.
As Avi said, you probably will get more help if you describe what is happening. Mario
On Jun 28, 2013, at 7:37 AM, Avi Marcus <avi@avimarcus.net> wrote:
There's lots of info on the wiki about NAT. And lots of automatic things in FreeSWITCH to deal with NAT.
One common thing: Turn off SIP ALG, it probably gets in the way rather than helping.
If you want anything more, you'll have to ask a much more specific question...
-Avi
On Fri, Jun 28, 2013 at 2:59 AM, johnthan123 <johnthan123@gmail.com>wrote:
Hi All,
I am really having Hard time with NAT,
Can any one give me the steps witch already works for them, its Help for Many people who is having issue with NAT.
Thanks in Advance.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
One problem with SIP ALG (apart from the varying implementations which mean some work much better than others) is that it absolutely cannot work with SIP TLS - for obvious reasons, it can't see inside or rewrite the encrypted data. Fair enough if that's the only way you found that worked for you, and if isn't broken don't fix it. :o) Still, I do suggest people at least try to get their SIP clients handling NAT traversal correctly first. Unfortunately there's no one true answer to getting NAT traversal working. The reason is that different SIP clients, NAT, firewall settings and implementations mean what works somewhere might not work elsewhere. That of course makes it harder to manage clients at multiple sites, roaming clients, etc. The first thing to try would be to disable SIP ALG (if your phone is handling NAT correctly some might then rewrite the correct packet breaking it) and enable STUN on your SIP client. STUN is a useful mechanism where you can talk to the STUN server from your internal address (IP+port) and it will tell you what your external address (IP+port) is. You can then use a trick called UDP hole punching whereby any server online can send to that external address and the NAT mapping will deliver it to your internal address. So your SIP client can learn its external SIP and RTP addresses and fill in the correct Contact header and SDP values. (Assuming SIP ALG is either disabled or intelligent enough not to then rewrite the correct values and break it). FreeSWITCH then has valid addresses it can send SIP responses and RTP media to. That makes some assumptions though: 1) Your SIP client supports STUN (not all do) 2) Your NAT implementation maps your internal address to the same external port talking to any server. Some don't, mapping to a different port for each server. 3) Your firewall will allow packets to that external port from servers it hasn't spoken to. Personally I have to reduce the security level of my home router's firewall (O2 Broadband) from '' to 'Standard'. I suspect this is why. This all applies to a number of protocols the same approach to traverse NAT. P2P clients, VoIP, VPNs (tinc), online gaming (eg Call of Duty) etc. If you can get CoD to tell you your NAT type is 'Open' you're probably ok. ;o) If you can't get the correct IPs in Contact & SDP, you have a few fallback options in FreeSWITCH. 1) NDLB-connectile-dysfunction will change the Contact to the address the INVITE came from. Probably correct in 99% of cases. 2) FreeSWITCH can auto-adjust its RTP address. It tells the client where to send RTP to, and when it receives it it changes the SDP address to send audio back to there. Again probably correct in 99% of cases, but with an unfortunate but unavoidable sideaffect that the caller will hear absolutely no audio until shortly after they send RTP. That probably won't be until the call is actually answered, so they will never hear ringback and the first second of the call might get lost. NAT devices have a limited number of ports and memory. As such old/unused mappings get removed from the table. You therefore need to make sure you keep the port mapping active. During a call you'll want to enable SIP keepalives to send a SIP request periodically to keep the port open, so that you can receive call state updates. When registering you'll periodically send REGISTER to keep your registration active, so that'll do it for you. In any case though you want to make sure they're sent frequently enough that your particular NAT router doesn't timeout the mapping. Every 30s should be fine. If absolutely all else fails, your other option is to use a VPN to bypass the NAT entirely. I find OpenVPN over UDP works very well for that, and is very easy to set up. If you want to save load/bandwidth on the VPN server you could also use bypass_media and tinc which is a P2P VPN - sites join any public node and using UDP hole punching can try to talk directly to one another even behind NAT, but if that fails can still route packets via the public nodes. -Steve On 28 June 2013 17:52, Mario M Guzman <mario_fs@mgtech.com> wrote:
A comment about my experience with ALG. I have dual wan (1 status and 1 dynamic) for balancing and auto fall over. I had many issues getting it all working until I used SIP ALG which solved all my NAT problems. Been perfect for 2 years now. I plan to writeup the setup on the wiki to share my experience since so many people have nat issues at the beginning. Yes know most here hate ALG but for me it is a miracle worker.
As Avi said, you probably will get more help if you describe what is happening. Mario
On Jun 28, 2013, at 7:37 AM, Avi Marcus <avi@avimarcus.net> wrote:
There's lots of info on the wiki about NAT. And lots of automatic things in FreeSWITCH to deal with NAT.
One common thing: Turn off SIP ALG, it probably gets in the way rather than helping.
If you want anything more, you'll have to ask a much more specific question...
-Avi
On Fri, Jun 28, 2013 at 2:59 AM, johnthan123 <johnthan123@gmail.com>wrote:
Hi All,
I am really having Hard time with NAT,
Can any one give me the steps witch already works for them, its Help for Many people who is having issue with NAT.
Thanks in Advance.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Wow, what a writeup, thanks! I see now why I spent 6 months on trying to get it to work before giving up and going ALG. It could have to do with 2 DSLs one being static and one dynamic. Right now FreeSwitch uses both, if I pull the plug on one SIP traffic automatically goes to the other, if I plug it back in and pull the other FS never has a hiccup, even recovers in the middle of a call. Without SIP ALG I had to get FS involved and could never get it to do this. I may give it another shot this year. If I ever get it working without ALG I will post it all to the wiki. Thanks again for the comprehensive response. Mario G On Jun 29, 2013, at 3:23 PM, Steven Ayre <steveayre@gmail.com> wrote:
One problem with SIP ALG (apart from the varying implementations which mean some work much better than others) is that it absolutely cannot work with SIP TLS - for obvious reasons, it can't see inside or rewrite the encrypted data.
Fair enough if that's the only way you found that worked for you, and if isn't broken don't fix it. :o)
Still, I do suggest people at least try to get their SIP clients handling NAT traversal correctly first.
Unfortunately there's no one true answer to getting NAT traversal working. The reason is that different SIP clients, NAT, firewall settings and implementations mean what works somewhere might not work elsewhere. That of course makes it harder to manage clients at multiple sites, roaming clients, etc.
The first thing to try would be to disable SIP ALG (if your phone is handling NAT correctly some might then rewrite the correct packet breaking it) and enable STUN on your SIP client.
STUN is a useful mechanism where you can talk to the STUN server from your internal address (IP+port) and it will tell you what your external address (IP+port) is. You can then use a trick called UDP hole punching whereby any server online can send to that external address and the NAT mapping will deliver it to your internal address. So your SIP client can learn its external SIP and RTP addresses and fill in the correct Contact header and SDP values. (Assuming SIP ALG is either disabled or intelligent enough not to then rewrite the correct values and break it). FreeSWITCH then has valid addresses it can send SIP responses and RTP media to.
That makes some assumptions though: 1) Your SIP client supports STUN (not all do) 2) Your NAT implementation maps your internal address to the same external port talking to any server. Some don't, mapping to a different port for each server. 3) Your firewall will allow packets to that external port from servers it hasn't spoken to. Personally I have to reduce the security level of my home router's firewall (O2 Broadband) from '' to 'Standard'. I suspect this is why.
This all applies to a number of protocols the same approach to traverse NAT. P2P clients, VoIP, VPNs (tinc), online gaming (eg Call of Duty) etc. If you can get CoD to tell you your NAT type is 'Open' you're probably ok. ;o)
If you can't get the correct IPs in Contact & SDP, you have a few fallback options in FreeSWITCH. 1) NDLB-connectile-dysfunction will change the Contact to the address the INVITE came from. Probably correct in 99% of cases. 2) FreeSWITCH can auto-adjust its RTP address. It tells the client where to send RTP to, and when it receives it it changes the SDP address to send audio back to there. Again probably correct in 99% of cases, but with an unfortunate but unavoidable sideaffect that the caller will hear absolutely no audio until shortly after they send RTP. That probably won't be until the call is actually answered, so they will never hear ringback and the first second of the call might get lost.
NAT devices have a limited number of ports and memory. As such old/unused mappings get removed from the table. You therefore need to make sure you keep the port mapping active. During a call you'll want to enable SIP keepalives to send a SIP request periodically to keep the port open, so that you can receive call state updates. When registering you'll periodically send REGISTER to keep your registration active, so that'll do it for you. In any case though you want to make sure they're sent frequently enough that your particular NAT router doesn't timeout the mapping. Every 30s should be fine.
If absolutely all else fails, your other option is to use a VPN to bypass the NAT entirely. I find OpenVPN over UDP works very well for that, and is very easy to set up. If you want to save load/bandwidth on the VPN server you could also use bypass_media and tinc which is a P2P VPN - sites join any public node and using UDP hole punching can try to talk directly to one another even behind NAT, but if that fails can still route packets via the public nodes.
-Steve
On 28 June 2013 17:52, Mario M Guzman <mario_fs@mgtech.com> wrote: A comment about my experience with ALG. I have dual wan (1 status and 1 dynamic) for balancing and auto fall over. I had many issues getting it all working until I used SIP ALG which solved all my NAT problems. Been perfect for 2 years now. I plan to writeup the setup on the wiki to share my experience since so many people have nat issues at the beginning. Yes know most here hate ALG but for me it is a miracle worker.
As Avi said, you probably will get more help if you describe what is happening. Mario
On Jun 28, 2013, at 7:37 AM, Avi Marcus <avi@avimarcus.net> wrote:
There's lots of info on the wiki about NAT. And lots of automatic things in FreeSWITCH to deal with NAT.
One common thing: Turn off SIP ALG, it probably gets in the way rather than helping.
If you want anything more, you'll have to ask a much more specific question...
-Avi
On Fri, Jun 28, 2013 at 2:59 AM, johnthan123 <johnthan123@gmail.com> wrote: Hi All,
I am really having Hard time with NAT,
Can any one give me the steps witch already works for them, its Help for Many people who is having issue with NAT.
Thanks in Advance.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Can someone get this on the wiki? Seems comprehensive and useful. On Jun 29, 2013, at 6:23 PM, Steven Ayre <steveayre@gmail.com> wrote:
One problem with SIP ALG (apart from the varying implementations which mean some work much better than others) is that it absolutely cannot work with SIP TLS - for obvious reasons, it can't see inside or rewrite the encrypted data.
Fair enough if that's the only way you found that worked for you, and if isn't broken don't fix it. :o)
Still, I do suggest people at least try to get their SIP clients handling NAT traversal correctly first.
Unfortunately there's no one true answer to getting NAT traversal working. The reason is that different SIP clients, NAT, firewall settings and implementations mean what works somewhere might not work elsewhere. That of course makes it harder to manage clients at multiple sites, roaming clients, etc.
The first thing to try would be to disable SIP ALG (if your phone is handling NAT correctly some might then rewrite the correct packet breaking it) and enable STUN on your SIP client.
STUN is a useful mechanism where you can talk to the STUN server from your internal address (IP+port) and it will tell you what your external address (IP+port) is. You can then use a trick called UDP hole punching whereby any server online can send to that external address and the NAT mapping will deliver it to your internal address. So your SIP client can learn its external SIP and RTP addresses and fill in the correct Contact header and SDP values. (Assuming SIP ALG is either disabled or intelligent enough not to then rewrite the correct values and break it). FreeSWITCH then has valid addresses it can send SIP responses and RTP media to.
That makes some assumptions though: 1) Your SIP client supports STUN (not all do) 2) Your NAT implementation maps your internal address to the same external port talking to any server. Some don't, mapping to a different port for each server. 3) Your firewall will allow packets to that external port from servers it hasn't spoken to. Personally I have to reduce the security level of my home router's firewall (O2 Broadband) from '' to 'Standard'. I suspect this is why.
This all applies to a number of protocols the same approach to traverse NAT. P2P clients, VoIP, VPNs (tinc), online gaming (eg Call of Duty) etc. If you can get CoD to tell you your NAT type is 'Open' you're probably ok. ;o)
If you can't get the correct IPs in Contact & SDP, you have a few fallback options in FreeSWITCH. 1) NDLB-connectile-dysfunction will change the Contact to the address the INVITE came from. Probably correct in 99% of cases. 2) FreeSWITCH can auto-adjust its RTP address. It tells the client where to send RTP to, and when it receives it it changes the SDP address to send audio back to there. Again probably correct in 99% of cases, but with an unfortunate but unavoidable sideaffect that the caller will hear absolutely no audio until shortly after they send RTP. That probably won't be until the call is actually answered, so they will never hear ringback and the first second of the call might get lost.
NAT devices have a limited number of ports and memory. As such old/unused mappings get removed from the table. You therefore need to make sure you keep the port mapping active. During a call you'll want to enable SIP keepalives to send a SIP request periodically to keep the port open, so that you can receive call state updates. When registering you'll periodically send REGISTER to keep your registration active, so that'll do it for you. In any case though you want to make sure they're sent frequently enough that your particular NAT router doesn't timeout the mapping. Every 30s should be fine.
If absolutely all else fails, your other option is to use a VPN to bypass the NAT entirely. I find OpenVPN over UDP works very well for that, and is very easy to set up. If you want to save load/bandwidth on the VPN server you could also use bypass_media and tinc which is a P2P VPN - sites join any public node and using UDP hole punching can try to talk directly to one another even behind NAT, but if that fails can still route packets via the public nodes.
-Steve
On 28 June 2013 17:52, Mario M Guzman <mario_fs@mgtech.com> wrote: A comment about my experience with ALG. I have dual wan (1 status and 1 dynamic) for balancing and auto fall over. I had many issues getting it all working until I used SIP ALG which solved all my NAT problems. Been perfect for 2 years now. I plan to writeup the setup on the wiki to share my experience since so many people have nat issues at the beginning. Yes know most here hate ALG but for me it is a miracle worker.
As Avi said, you probably will get more help if you describe what is happening. Mario
On Jun 28, 2013, at 7:37 AM, Avi Marcus <avi@avimarcus.net> wrote:
There's lots of info on the wiki about NAT. And lots of automatic things in FreeSWITCH to deal with NAT.
One common thing: Turn off SIP ALG, it probably gets in the way rather than helping.
If you want anything more, you'll have to ask a much more specific question...
-Avi
On Fri, Jun 28, 2013 at 2:59 AM, johnthan123 <johnthan123@gmail.com> wrote: Hi All,
I am really having Hard time with NAT,
Can any one give me the steps witch already works for them, its Help for Many people who is having issue with NAT.
On Mon, Jul 1, 2013 at 9:22 AM, Michael Jerris <mike@jerris.com> wrote:
Can someone get this on the wiki? Seems comprehensive and useful.
<http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> Done: http://wiki.freeswitch.org/wiki/NAT#Steve_Ayre.27s_Excellent_Writeup -MC -- Michael S Collins Twitter: @mercutioviz http://www.FreeSWITCH.org http://www.ClueCon.com http://www.OSTAG.org
Disclaimer: probably still doesn't cover everything that can go wrong ;) Nothing beats true end-to-end connectivity. -Steve On 1 July 2013 18:20, Michael Collins <msc@freeswitch.org> wrote:
On Mon, Jul 1, 2013 at 9:22 AM, Michael Jerris <mike@jerris.com> wrote:
Can someone get this on the wiki? Seems comprehensive and useful.
<http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> Done: http://wiki.freeswitch.org/wiki/NAT#Steve_Ayre.27s_Excellent_Writeup
-MC
-- Michael S Collins Twitter: @mercutioviz http://www.FreeSWITCH.org http://www.ClueCon.com http://www.OSTAG.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi All, I am really happy for the all answers, But the thing is No one giving me the assure for the NAT, i configured the NAT before and it was working, But with the same configuration and same networking i couldn't able to make it now, i have similor qustion with asterisk why asterisk works good behind the NAT why not Freeswitch, as a Freeswitch Lover i want to be overcome this issue still i am looking for some inputs for successful NAT in Freeswitch , if possible some one give for NAT. Thanks in Advance On Mon, Jul 1, 2013 at 1:26 PM, Steven Ayre <steveayre@gmail.com> wrote:
Disclaimer: probably still doesn't cover everything that can go wrong ;)
Nothing beats true end-to-end connectivity.
-Steve
On 1 July 2013 18:20, Michael Collins <msc@freeswitch.org> wrote:
On Mon, Jul 1, 2013 at 9:22 AM, Michael Jerris <mike@jerris.com> wrote:
Can someone get this on the wiki? Seems comprehensive and useful.
<http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> Done: http://wiki.freeswitch.org/wiki/NAT#Steve_Ayre.27s_Excellent_Writeup
-MC
-- Michael S Collins Twitter: @mercutioviz http://www.FreeSWITCH.org http://www.ClueCon.com http://www.OSTAG.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Provide a little more info about your setup and I am sure someone will help you overcome your NAT issues? What type of endpoints? See http://wiki.freeswitch.org/wiki/NDLB And http://wiki.freeswitch.org/wiki/Nat Thanks, Moishe Grunstein Tornado Computer Systems, Inc. 212.400.7650 888.IPPBX.US Service Request Email: support@nysolutions.com<mailto:support@nysolutions.com> Polycom Certified VAR Microsoft Small Business Specialist, Cisco SMB Select Certified [cid:image001.jpg@01C72F94.9EE45D60]<http://www.nysolutions.com/> Computer Networking * Managed Services * IP Video Surveillance * Network Assessments * Web Solutions * Voice over IP * Disaster Recovery * Network Security * Site Surveys * CMS From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of johnthan123 Sent: Monday, July 01, 2013 4:37 PM To: FreeSWITCH Users Help Subject: spam>spam>Re: [Freeswitch-users] Regarding Freeswicth Nat Hi All, I am really happy for the all answers, But the thing is No one giving me the assure for the NAT, i configured the NAT before and it was working, But with the same configuration and same networking i couldn't able to make it now, i have similor qustion with asterisk why asterisk works good behind the NAT why not Freeswitch, as a Freeswitch Lover i want to be overcome this issue still i am looking for some inputs for successful NAT in Freeswitch , if possible some one give for NAT. Thanks in Advance On Mon, Jul 1, 2013 at 1:26 PM, Steven Ayre <steveayre@gmail.com<mailto:steveayre@gmail.com>> wrote: Disclaimer: probably still doesn't cover everything that can go wrong ;) Nothing beats true end-to-end connectivity. -Steve On 1 July 2013 18:20, Michael Collins <msc@freeswitch.org<mailto:msc@freeswitch.org>> wrote: On Mon, Jul 1, 2013 at 9:22 AM, Michael Jerris <mike@jerris.com<mailto:mike@jerris.com>> wrote: Can someone get this on the wiki? Seems comprehensive and useful. Done: http://wiki.freeswitch.org/wiki/NAT#Steve_Ayre.27s_Excellent_Writeup -MC -- Michael S Collins Twitter: @mercutioviz http://www.FreeSWITCH.org http://www.ClueCon.com http://www.OSTAG.org _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
On Mon, Jul 1, 2013 at 1:37 PM, johnthan123 <johnthan123@gmail.com> wrote:
Hi All,
I am really happy for the all answers, But the thing is No one giving me the assure for the NAT,
i configured the NAT before and it was working, But with the same configuration and same networking i couldn't able to make it now, i have similor qustion with asterisk why asterisk works good behind the NAT why not Freeswitch, as a Freeswitch Lover i want to be overcome this issue
still i am looking for some inputs for successful NAT in Freeswitch , if possible some one give for NAT.
The short answer is this: something somewhere changed. If it was working with a previous version of FS and isn't working now then I would recommend looking for the commit where it broke. Install an older FS version where you are certain that it was working, and then go from there. Using git bisect can probably help cut down the time. I would also recommend getting SIP and RTP captures of working vs. non-working calls and compare them using Wireshark. See if you can figure out what is happening and then report back. Hopefully the gang here will help you figure out why it is happening and you can fix it. -MC
Hi All Finally i Figured Out the NAT issue My Setup is Like this DID(IP Authentication)---->Public IP----------> (Pfseance)(1:1)NAT --------> (Private IP) FreeSwicth------->(Private IP)Asterisk Cluster. i am not sure why its work for Me, Really :), Because with this same configuration its didn't work for me until yesterday. Here the Configurations is : First thing we need the set the variable for vars.xml /usr/local/freeswitch/conf/vars.xml =============================== XX.XX.XX.XX = your Public IP <X-PRE-PROCESS cmd="set" data="external_sip_ip=XX.XX.XX.XX"/> <X-PRE-PROCESS cmd="set" data="external_rtp_ip=XX.XX.XX.XX"/> Add the IP address of Your Provider to acl: /usr/local/freeswitch/conf/vars.xml =============================== YY.YY.YY.YY = Your Provider IP <node type="allow" cidr="YY.YY.YY.YY/32"/> Add the Dialplan Entry in Public : /usr/local/freeswitch/conf/dialplan/public/ipkall.xml ======================================== <include> <extension name="public_did"> <condition field="destination_number" expression="2064248436"> <action application="set" data="domain_name=$${domain}"/> <action application="bridge" data="sofia/gateway/VICI22/2064248436"/> </condition> </extension> </include> This is it i am Done, my Asterisk Cluster is reciving calls with two way AUDIO. May be this will Help For Some People to solve the NAT issue. Thanks On Mon, Jul 1, 2013 at 5:39 PM, Michael Collins <msc@freeswitch.org> wrote:
On Mon, Jul 1, 2013 at 1:37 PM, johnthan123 <johnthan123@gmail.com> wrote:
Hi All,
I am really happy for the all answers, But the thing is No one giving me the assure for the NAT,
i configured the NAT before and it was working, But with the same configuration and same networking i couldn't able to make it now, i have similor qustion with asterisk why asterisk works good behind the NAT why not Freeswitch, as a Freeswitch Lover i want to be overcome this issue
still i am looking for some inputs for successful NAT in Freeswitch , if possible some one give for NAT.
The short answer is this: something somewhere changed. If it was working with a previous version of FS and isn't working now then I would recommend looking for the commit where it broke. Install an older FS version where you are certain that it was working, and then go from there. Using git bisect can probably help cut down the time.
I would also recommend getting SIP and RTP captures of working vs. non-working calls and compare them using Wireshark. See if you can figure out what is happening and then report back. Hopefully the gang here will help you figure out why it is happening and you can fix it.
-MC
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (7)
-
Avi Marcus
-
johnthan123
-
Mario M Guzman
-
Michael Collins
-
Michael Jerris
-
Moishe Grunstein
-
Steven Ayre