This is not a direct FreeSWITCH question, but was hoping someone might have set up a similar configuration. Currently I have a FS server where SIP clients (Linphone) register to via a Cisco AnyConnect VPN. I have inbound-bypass-media set to true so that RTP traffic is peer to peer. If I tunnel all traffic, the SIP transport and RTP media works just fine. If I set up a VPN split tunnel that allows the subnets of the VPN client and the FS server, the SIP signalling is fine, but in the SDP, it specifies a non VPN address, eg: INVITE sips:1004@10.1.1.204;transport=udp SIP/2.0 Via: SIP/2.0 10.1.254.36:53036;branch=z9hG4bK.GRrzYXeCN;rport From: <sip:1001@10.1.1.204>;tag=cN83ZcmHw To: sip:1004@10.1.1.204 CSeq: 20 INVITE Call-ID: e7eEYxoML2 Max-Forwards: 70 Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO Content-Type: application/sdp Content-Length: 426 User-Agent: LinphoneAndroid/2.1.2-177-g015b83c (belle-sip/0.0.1) Contact: <sip:1001@10.1.254.36:53036 ;transport=udp>;+sip.instance="<urn:uuid:83c4b823-9c0d-4e02-b7f7-cdd3ae2f1259>" v=0 o=1001 3921 1865 IN IP4 [ISP address] s=Talk c=IN IP4 [ISP address] b=AS:380 t=0 0 m=audio 1031 RTP/SAVP 0 8 100 101 a=rtpmap:100 iLBC/8000 a=fmtp:100 mode=30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-11 a=rtcp:7079 IN IP4 [wireless IP address] I'm not very familiar with how the SDP is constructed, but I'm assuming that it's the SIP client that's responsible for offering it's IP addresses. Are there any FreeSWITCH settings that would affect the IP addresses in the SDP? Thanks Peter
http://wiki.freeswitch.org/wiki/Codec_negotiation#Rewriting_SDP maybe? On 9/5/13, Peter <eidevm5@gmail.com> wrote:
This is not a direct FreeSWITCH question, but was hoping someone might have set up a similar configuration.
Currently I have a FS server where SIP clients (Linphone) register to via a Cisco AnyConnect VPN. I have inbound-bypass-media set to true so that RTP traffic is peer to peer.
If I tunnel all traffic, the SIP transport and RTP media works just fine.
If I set up a VPN split tunnel that allows the subnets of the VPN client and the FS server, the SIP signalling is fine, but in the SDP, it specifies a non VPN address, eg:
INVITE sips:1004@10.1.1.204;transport=udp SIP/2.0 Via: SIP/2.0 10.1.254.36:53036;branch=z9hG4bK.GRrzYXeCN;rport From: <sip:1001@10.1.1.204>;tag=cN83ZcmHw To: sip:1004@10.1.1.204 CSeq: 20 INVITE Call-ID: e7eEYxoML2 Max-Forwards: 70 Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO Content-Type: application/sdp Content-Length: 426 User-Agent: LinphoneAndroid/2.1.2-177-g015b83c (belle-sip/0.0.1) Contact: <sip:1001@10.1.254.36:53036 ;transport=udp>;+sip.instance="<urn:uuid:83c4b823-9c0d-4e02-b7f7-cdd3ae2f1259>"
v=0 o=1001 3921 1865 IN IP4 [ISP address] s=Talk c=IN IP4 [ISP address] b=AS:380 t=0 0 m=audio 1031 RTP/SAVP 0 8 100 101 a=rtpmap:100 iLBC/8000 a=fmtp:100 mode=30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-11 a=rtcp:7079 IN IP4 [wireless IP address]
I'm not very familiar with how the SDP is constructed, but I'm assuming that it's the SIP client that's responsible for offering it's IP addresses.
Are there any FreeSWITCH settings that would affect the IP addresses in the SDP?
Thanks
Peter
if your talking about the media still hitting fs but through a different ip that isn't going through VPN, you should be able to work this out by adjusting rtp-ip param On Sep 5, 2013, at 7:52 AM, "Veniamin (Benjamin) Beskrovny" <beskrovny@gmail.com> wrote:
http://wiki.freeswitch.org/wiki/Codec_negotiation#Rewriting_SDP maybe?
On 9/5/13, Peter <eidevm5@gmail.com> wrote:
This is not a direct FreeSWITCH question, but was hoping someone might have set up a similar configuration.
Currently I have a FS server where SIP clients (Linphone) register to via a Cisco AnyConnect VPN. I have inbound-bypass-media set to true so that RTP traffic is peer to peer.
If I tunnel all traffic, the SIP transport and RTP media works just fine.
If I set up a VPN split tunnel that allows the subnets of the VPN client and the FS server, the SIP signalling is fine, but in the SDP, it specifies a non VPN address, eg:
INVITE sips:1004@10.1.1.204;transport=udp SIP/2.0 Via: SIP/2.0 10.1.254.36:53036;branch=z9hG4bK.GRrzYXeCN;rport From: <sip:1001@10.1.1.204>;tag=cN83ZcmHw To: sip:1004@10.1.1.204 CSeq: 20 INVITE Call-ID: e7eEYxoML2 Max-Forwards: 70 Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO Content-Type: application/sdp Content-Length: 426 User-Agent: LinphoneAndroid/2.1.2-177-g015b83c (belle-sip/0.0.1) Contact: <sip:1001@10.1.254.36:53036 ;transport=udp>;+sip.instance="<urn:uuid:83c4b823-9c0d-4e02-b7f7-cdd3ae2f1259>"
v=0 o=1001 3921 1865 IN IP4 [ISP address] s=Talk c=IN IP4 [ISP address] b=AS:380 t=0 0 m=audio 1031 RTP/SAVP 0 8 100 101 a=rtpmap:100 iLBC/8000 a=fmtp:100 mode=30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-11 a=rtcp:7079 IN IP4 [wireless IP address]
I'm not very familiar with how the SDP is constructed, but I'm assuming that it's the SIP client that's responsible for offering it's IP addresses.
Are there any FreeSWITCH settings that would affect the IP addresses in the SDP?
Thanks
Peter
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi Michael. I have rtp-ip set to the VPN IP address. Is there any other setting I can try? Thanks Peter On Fri, Sep 6, 2013 at 4:24 PM, Michael Jerris <mike@jerris.com> wrote:
if your talking about the media still hitting fs but through a different ip that isn't going through VPN, you should be able to work this out by adjusting rtp-ip param
On Sep 5, 2013, at 7:52 AM, "Veniamin (Benjamin) Beskrovny" <beskrovny@gmail.com> wrote:
http://wiki.freeswitch.org/wiki/Codec_negotiation#Rewriting_SDP maybe?
On 9/5/13, Peter <eidevm5@gmail.com> wrote:
This is not a direct FreeSWITCH question, but was hoping someone might have set up a similar configuration.
Currently I have a FS server where SIP clients (Linphone) register to via a Cisco AnyConnect VPN. I have inbound-bypass-media set to true so that RTP traffic is peer to peer.
If I tunnel all traffic, the SIP transport and RTP media works just fine.
If I set up a VPN split tunnel that allows the subnets of the VPN client and the FS server, the SIP signalling is fine, but in the SDP, it specifies a non VPN address, eg:
INVITE sips:1004@10.1.1.204;transport=udp SIP/2.0 Via: SIP/2.0 10.1.254.36:53036;branch=z9hG4bK.GRrzYXeCN;rport From: <sip:1001@10.1.1.204>;tag=cN83ZcmHw To: sip:1004@10.1.1.204 CSeq: 20 INVITE Call-ID: e7eEYxoML2 Max-Forwards: 70 Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO Content-Type: application/sdp Content-Length: 426 User-Agent: LinphoneAndroid/2.1.2-177-g015b83c (belle-sip/0.0.1) Contact: <sip:1001@10.1.254.36:53036
;transport=udp>;+sip.instance="<urn:uuid:83c4b823-9c0d-4e02-b7f7-cdd3ae2f1259>"
v=0 o=1001 3921 1865 IN IP4 [ISP address] s=Talk c=IN IP4 [ISP address] b=AS:380 t=0 0 m=audio 1031 RTP/SAVP 0 8 100 101 a=rtpmap:100 iLBC/8000 a=fmtp:100 mode=30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-11 a=rtcp:7079 IN IP4 [wireless IP address]
I'm not very familiar with how the SDP is constructed, but I'm assuming that it's the SIP client that's responsible for offering it's IP
addresses.
Are there any FreeSWITCH settings that would affect the IP addresses in
the
SDP?
Thanks
Peter
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
are you trying to send the media over the vpn now or peer to peer? do you still have inbound-bypass-media set to true? Peer to peer may never work depending on what is in the original sdp of the clients. On Sep 8, 2013, at 11:28 PM, Peter <eidevm5@gmail.com> wrote:
Hi Michael.
I have rtp-ip set to the VPN IP address. Is there any other setting I can try?
Thanks
Peter
On Fri, Sep 6, 2013 at 4:24 PM, Michael Jerris <mike@jerris.com> wrote: if your talking about the media still hitting fs but through a different ip that isn't going through VPN, you should be able to work this out by adjusting rtp-ip param
On Sep 5, 2013, at 7:52 AM, "Veniamin (Benjamin) Beskrovny" <beskrovny@gmail.com> wrote:
http://wiki.freeswitch.org/wiki/Codec_negotiation#Rewriting_SDP maybe?
On 9/5/13, Peter <eidevm5@gmail.com> wrote:
This is not a direct FreeSWITCH question, but was hoping someone might have set up a similar configuration.
Currently I have a FS server where SIP clients (Linphone) register to via a Cisco AnyConnect VPN. I have inbound-bypass-media set to true so that RTP traffic is peer to peer.
If I tunnel all traffic, the SIP transport and RTP media works just fine.
If I set up a VPN split tunnel that allows the subnets of the VPN client and the FS server, the SIP signalling is fine, but in the SDP, it specifies a non VPN address, eg:
INVITE sips:1004@10.1.1.204;transport=udp SIP/2.0 Via: SIP/2.0 10.1.254.36:53036;branch=z9hG4bK.GRrzYXeCN;rport From: <sip:1001@10.1.1.204>;tag=cN83ZcmHw To: sip:1004@10.1.1.204 CSeq: 20 INVITE Call-ID: e7eEYxoML2 Max-Forwards: 70 Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO Content-Type: application/sdp Content-Length: 426 User-Agent: LinphoneAndroid/2.1.2-177-g015b83c (belle-sip/0.0.1) Contact: <sip:1001@10.1.254.36:53036 ;transport=udp>;+sip.instance="<urn:uuid:83c4b823-9c0d-4e02-b7f7-cdd3ae2f1259>"
v=0 o=1001 3921 1865 IN IP4 [ISP address] s=Talk c=IN IP4 [ISP address] b=AS:380 t=0 0 m=audio 1031 RTP/SAVP 0 8 100 101 a=rtpmap:100 iLBC/8000 a=fmtp:100 mode=30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-11 a=rtcp:7079 IN IP4 [wireless IP address]
I'm not very familiar with how the SDP is constructed, but I'm assuming that it's the SIP client that's responsible for offering it's IP addresses.
Are there any FreeSWITCH settings that would affect the IP addresses in the SDP?
Thanks
Peter
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
My goal is to have SIP and media go over the split tunnel VPN, with the SIP traffic going through FS (which it does) and the RTP stream between the VPN IP addresses of the two endpoints. I have inbound-bypass-media set to true as I don't want the media to go via FS. Does that make sense? On Mon, Sep 9, 2013 at 10:09 PM, Michael Jerris <mike@jerris.com> wrote:
are you trying to send the media over the vpn now or peer to peer? do you still have inbound-bypass-media set to true? Peer to peer may never work depending on what is in the original sdp of the clients.
On Sep 8, 2013, at 11:28 PM, Peter <eidevm5@gmail.com> wrote:
Hi Michael.
I have rtp-ip set to the VPN IP address. Is there any other setting I can try?
Thanks
Peter
On Fri, Sep 6, 2013 at 4:24 PM, Michael Jerris <mike@jerris.com> wrote:
if your talking about the media still hitting fs but through a different ip that isn't going through VPN, you should be able to work this out by adjusting rtp-ip param
On Sep 5, 2013, at 7:52 AM, "Veniamin (Benjamin) Beskrovny" <beskrovny@gmail.com> wrote:
http://wiki.freeswitch.org/wiki/Codec_negotiation#Rewriting_SDP maybe?
On 9/5/13, Peter <eidevm5@gmail.com> wrote:
This is not a direct FreeSWITCH question, but was hoping someone might have set up a similar configuration.
Currently I have a FS server where SIP clients (Linphone) register to via a Cisco AnyConnect VPN. I have inbound-bypass-media set to true so that RTP traffic is peer to peer.
If I tunnel all traffic, the SIP transport and RTP media works just fine.
If I set up a VPN split tunnel that allows the subnets of the VPN client and the FS server, the SIP signalling is fine, but in the SDP, it specifies a non VPN address, eg:
INVITE sips:1004@10.1.1.204;transport=udp SIP/2.0 Via: SIP/2.0 10.1.254.36:53036;branch=z9hG4bK.GRrzYXeCN;rport From: <sip:1001@10.1.1.204>;tag=cN83ZcmHw To: sip:1004@10.1.1.204 CSeq: 20 INVITE Call-ID: e7eEYxoML2 Max-Forwards: 70 Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO Content-Type: application/sdp Content-Length: 426 User-Agent: LinphoneAndroid/2.1.2-177-g015b83c (belle-sip/0.0.1) Contact: <sip:1001@10.1.254.36:53036
;transport=udp>;+sip.instance="<urn:uuid:83c4b823-9c0d-4e02-b7f7-cdd3ae2f1259>"
v=0 o=1001 3921 1865 IN IP4 [ISP address] s=Talk c=IN IP4 [ISP address] b=AS:380 t=0 0 m=audio 1031 RTP/SAVP 0 8 100 101 a=rtpmap:100 iLBC/8000 a=fmtp:100 mode=30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-11 a=rtcp:7079 IN IP4 [wireless IP address]
I'm not very familiar with how the SDP is constructed, but I'm assuming that it's the SIP client that's responsible for offering it's IP
addresses.
Are there any FreeSWITCH settings that would affect the IP addresses
in the
SDP?
Thanks
Peter
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
It only makes sense if the endpoints are giving out the vpn addresses as their rtp addresses in the sdp. On Sep 9, 2013, at 10:15 PM, Peter <eidevm5@gmail.com> wrote:
My goal is to have SIP and media go over the split tunnel VPN, with the SIP traffic going through FS (which it does) and the RTP stream between the VPN IP addresses of the two endpoints.
I have inbound-bypass-media set to true as I don't want the media to go via FS.
Does that make sense?
On Mon, Sep 9, 2013 at 10:09 PM, Michael Jerris <mike@jerris.com> wrote: are you trying to send the media over the vpn now or peer to peer? do you still have inbound-bypass-media set to true? Peer to peer may never work depending on what is in the original sdp of the clients.
On Sep 8, 2013, at 11:28 PM, Peter <eidevm5@gmail.com> wrote:
Hi Michael.
I have rtp-ip set to the VPN IP address. Is there any other setting I can try?
Thanks
Peter
On Fri, Sep 6, 2013 at 4:24 PM, Michael Jerris <mike@jerris.com> wrote: if your talking about the media still hitting fs but through a different ip that isn't going through VPN, you should be able to work this out by adjusting rtp-ip param
On Sep 5, 2013, at 7:52 AM, "Veniamin (Benjamin) Beskrovny" <beskrovny@gmail.com> wrote:
http://wiki.freeswitch.org/wiki/Codec_negotiation#Rewriting_SDP maybe?
On 9/5/13, Peter <eidevm5@gmail.com> wrote:
This is not a direct FreeSWITCH question, but was hoping someone might have set up a similar configuration.
Currently I have a FS server where SIP clients (Linphone) register to via a Cisco AnyConnect VPN. I have inbound-bypass-media set to true so that RTP traffic is peer to peer.
If I tunnel all traffic, the SIP transport and RTP media works just fine.
If I set up a VPN split tunnel that allows the subnets of the VPN client and the FS server, the SIP signalling is fine, but in the SDP, it specifies a non VPN address, eg:
INVITE sips:1004@10.1.1.204;transport=udp SIP/2.0 Via: SIP/2.0 10.1.254.36:53036;branch=z9hG4bK.GRrzYXeCN;rport From: <sip:1001@10.1.1.204>;tag=cN83ZcmHw To: sip:1004@10.1.1.204 CSeq: 20 INVITE Call-ID: e7eEYxoML2 Max-Forwards: 70 Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO Content-Type: application/sdp Content-Length: 426 User-Agent: LinphoneAndroid/2.1.2-177-g015b83c (belle-sip/0.0.1) Contact: <sip:1001@10.1.254.36:53036 ;transport=udp>;+sip.instance="<urn:uuid:83c4b823-9c0d-4e02-b7f7-cdd3ae2f1259>"
v=0 o=1001 3921 1865 IN IP4 [ISP address] s=Talk c=IN IP4 [ISP address] b=AS:380 t=0 0 m=audio 1031 RTP/SAVP 0 8 100 101 a=rtpmap:100 iLBC/8000 a=fmtp:100 mode=30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-11 a=rtcp:7079 IN IP4 [wireless IP address]
I'm not very familiar with how the SDP is constructed, but I'm assuming that it's the SIP client that's responsible for offering it's IP addresses.
Are there any FreeSWITCH settings that would affect the IP addresses in the SDP?
Thanks
Peter
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Agreed that if the clients gave out the vpn addresses in the SDP, it would be fine. I tried with csipsimple, and it has a whole bunch of useful settings, including "Allow SDP NAT rewrite", which does: *Fix the address sent in the SDP to use the same interface address as the one in the REGISTER request.* Unfortunately Linphone doesn't have a similar setting, so the only way I can see to get it working is to rewrite the SDP in FreeSWITCH. Just need to work out how to do that. On Tue, Sep 10, 2013 at 10:00 PM, Michael Jerris <mike@jerris.com> wrote:
It only makes sense if the endpoints are giving out the vpn addresses as their rtp addresses in the sdp.
On Sep 9, 2013, at 10:15 PM, Peter <eidevm5@gmail.com> wrote:
My goal is to have SIP and media go over the split tunnel VPN, with the SIP traffic going through FS (which it does) and the RTP stream between the VPN IP addresses of the two endpoints.
I have inbound-bypass-media set to true as I don't want the media to go via FS.
Does that make sense?
On Mon, Sep 9, 2013 at 10:09 PM, Michael Jerris <mike@jerris.com> wrote:
are you trying to send the media over the vpn now or peer to peer? do you still have inbound-bypass-media set to true? Peer to peer may never work depending on what is in the original sdp of the clients.
On Sep 8, 2013, at 11:28 PM, Peter <eidevm5@gmail.com> wrote:
Hi Michael.
I have rtp-ip set to the VPN IP address. Is there any other setting I can try?
Thanks
Peter
On Fri, Sep 6, 2013 at 4:24 PM, Michael Jerris <mike@jerris.com> wrote:
if your talking about the media still hitting fs but through a different ip that isn't going through VPN, you should be able to work this out by adjusting rtp-ip param
On Sep 5, 2013, at 7:52 AM, "Veniamin (Benjamin) Beskrovny" <beskrovny@gmail.com> wrote:
http://wiki.freeswitch.org/wiki/Codec_negotiation#Rewriting_SDP maybe?
On 9/5/13, Peter <eidevm5@gmail.com> wrote:
This is not a direct FreeSWITCH question, but was hoping someone might have set up a similar configuration.
Currently I have a FS server where SIP clients (Linphone) register to via a Cisco AnyConnect VPN. I have inbound-bypass-media set to true so that RTP traffic is peer to peer.
If I tunnel all traffic, the SIP transport and RTP media works just fine.
If I set up a VPN split tunnel that allows the subnets of the VPN client and the FS server, the SIP signalling is fine, but in the SDP, it specifies a non VPN address, eg:
INVITE sips:1004@10.1.1.204;transport=udp SIP/2.0 Via: SIP/2.0 10.1.254.36:53036;branch=z9hG4bK.GRrzYXeCN;rport From: <sip:1001@10.1.1.204>;tag=cN83ZcmHw To: sip:1004@10.1.1.204 CSeq: 20 INVITE Call-ID: e7eEYxoML2 Max-Forwards: 70 Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO Content-Type: application/sdp Content-Length: 426 User-Agent: LinphoneAndroid/2.1.2-177-g015b83c (belle-sip/0.0.1) Contact: <sip:1001@10.1.254.36:53036
;transport=udp>;+sip.instance="<urn:uuid:83c4b823-9c0d-4e02-b7f7-cdd3ae2f1259>"
v=0 o=1001 3921 1865 IN IP4 [ISP address] s=Talk c=IN IP4 [ISP address] b=AS:380 t=0 0 m=audio 1031 RTP/SAVP 0 8 100 101 a=rtpmap:100 iLBC/8000 a=fmtp:100 mode=30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-11 a=rtcp:7079 IN IP4 [wireless IP address]
I'm not very familiar with how the SDP is constructed, but I'm
assuming
that it's the SIP client that's responsible for offering it's IP addresses.
Are there any FreeSWITCH settings that would affect the IP addresses in the SDP?
Thanks
Peter
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Does your client see each other can UDP traffic pass from one client to the other? You mentioned any connect so my guess is you have a cisco router/firewall before FS and all your problems reside there. We have very similar setup that actually works with bypass media true. On 9/10/2013 5:15 AM, Peter wrote:
My goal is to have SIP and media go over the split tunnel VPN, with the SIP traffic going through FS (which it does) and the RTP stream between the VPN IP addresses of the two endpoints.
I have inbound-bypass-media set to true as I don't want the media to go via FS.
Does that make sense?
On Mon, Sep 9, 2013 at 10:09 PM, Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>> wrote:
are you trying to send the media over the vpn now or peer to peer? do you still have inbound-bypass-media set to true? Peer to peer may never work depending on what is in the original sdp of the clients.
On Sep 8, 2013, at 11:28 PM, Peter <eidevm5@gmail.com <mailto:eidevm5@gmail.com>> wrote:
Hi Michael.
I have rtp-ip set to the VPN IP address. Is there any other setting I can try?
Thanks
Peter
On Fri, Sep 6, 2013 at 4:24 PM, Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>> wrote:
if your talking about the media still hitting fs but through a different ip that isn't going through VPN, you should be able to work this out by adjusting rtp-ip param
On Sep 5, 2013, at 7:52 AM, "Veniamin (Benjamin) Beskrovny" <beskrovny@gmail.com <mailto:beskrovny@gmail.com>> wrote:
> http://wiki.freeswitch.org/wiki/Codec_negotiation#Rewriting_SDP maybe? > > On 9/5/13, Peter <eidevm5@gmail.com <mailto:eidevm5@gmail.com>> wrote: >> This is not a direct FreeSWITCH question, but was hoping someone might have >> set up a similar configuration. >> >> Currently I have a FS server where SIP clients (Linphone) register to via a >> Cisco AnyConnect VPN. I have inbound-bypass-media set to true so that RTP >> traffic is peer to peer. >> >> >> If I tunnel all traffic, the SIP transport and RTP media works just fine. >> >> If I set up a VPN split tunnel that allows the subnets of the VPN client >> and the FS server, the SIP signalling is fine, but in the SDP, it specifies >> a non VPN address, eg: >> >> INVITE sips:1004@10.1.1.204 <mailto:sips%3A1004@10.1.1.204>;transport=udp SIP/2.0 >> Via: SIP/2.0 10.1.254.36:53036;branch=z9hG4bK.GRrzYXeCN;rport >> From: <sip:1001@10.1.1.204 <mailto:sip%3A1001@10.1.1.204>>;tag=cN83ZcmHw >> To: sip:1004@10.1.1.204 <mailto:sip%3A1004@10.1.1.204> >> CSeq: 20 INVITE >> Call-ID: e7eEYxoML2 >> Max-Forwards: 70 >> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, >> SUBSCRIBE, INFO >> Content-Type: application/sdp >> Content-Length: 426 >> User-Agent: LinphoneAndroid/2.1.2-177-g015b83c (belle-sip/0.0.1) >> Contact: <sip:1001@10.1.254.36:53036 <http://sip:1001@10.1.254.36:53036/> >> ;transport=udp>;+sip.instance="<urn:uuid:83c4b823-9c0d-4e02-b7f7-cdd3ae2f1259>" >> >> v=0 >> o=1001 3921 1865 IN IP4 [ISP address] >> s=Talk >> c=IN IP4 [ISP address] >> b=AS:380 >> t=0 0 >> m=audio 1031 RTP/SAVP 0 8 100 101 >> a=rtpmap:100 iLBC/8000 >> a=fmtp:100 mode=30 >> a=rtpmap:101 telephone-event/8000 >> a=fmtp:101 0-11 >> a=rtcp:7079 IN IP4 [wireless IP address] >> >> >> I'm not very familiar with how the SDP is constructed, but I'm assuming >> that it's the SIP client that's responsible for offering it's IP addresses. >> >> Are there any FreeSWITCH settings that would affect the IP addresses in the >> SDP? >> >> Thanks >> >> Peter > > _________________________________________________________________________ > Professional FreeSWITCH Consulting Services: > consulting@freeswitch.org <mailto:consulting@freeswitch.org> > http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/> > > FreeSWITCH-powered IP PBX: The CudaTel Communication Server > http://www.cudatel.com <http://www.cudatel.com/> > > Official FreeSWITCH Sites > http://www.freeswitch.org <http://www.freeswitch.org/> > http://wiki.freeswitch.org <http://wiki.freeswitch.org/> > http://www.cluecon.com <http://www.cluecon.com/> > > FreeSWITCH-users mailing list > FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users > http://www.freeswitch.org <http://www.freeswitch.org/>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com <http://www.cudatel.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://wiki.freeswitch.org <http://wiki.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org <http://www.freeswitch.org/>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (4)
-
Angel Sotirov
-
Michael Jerris
-
Peter
-
Veniamin (Benjamin) Beskrovny