Hi, guys. Sorry for posting suppose such a frequently asked question, but anyway it's still problem for me to handle Freeswitch on 3 different subnetworks. In fact i was able to run, but with one discfuntion - on one of the instances there was no sound in one direction. I know you say this problem is related to NAT and so on, but let me ask anyway. It should mentioned that first i was run Asterisk and it was fine with that setup. Another important thing is Freeswitch runs under guest OS Debian/Lenny in OpenVZ environment (kernel 2.6.18 with ovz patch) Network: venet0:0 192.168.1.128/24 venet0:1 public_ip + default route here eth2: 172.20.252.6/30 + route 172.20.252.0/24 via 172.20.252.5 (complete interface derived to guest OS, nothing to deal with HN) My peers is 192.168.1.1 (asterisk runs here, under my administration) 192.168.1.204 (gsm gateway, under my administration) x.x.x.x (remote peer under my administration) 172.20.252.2 (voip providers proxy, no authentication here, not under my administration) I successfully installed profiles belong to first 3 ones and everything was ok. I substituted external-sip external-rtp and others with my public ip. The internal ones - with my internal. The problem was with the last one. I have tried to force Freeswitch run on that one but have no luck. Finally i copied profile "internal.xml" to "internal-2.xml" (actually i tried the same with external.xml) in "sip_profiles" dir and change it to parse files from "sip_profiles/internal-2" dir. I have no idea is this right way, but anyway it works and Freeswitch start to listen on 172.20.252.6. I also used inbound-acl and proxy-acl to handle with no authorization. Freeswitch was able to handle incoming calls on 172.20.252.6 and even it was sound in both directions. But if you try to add a dialplan which will use 172.20.252.2 as an outbound proxy you will see that call is handled correctly but no voice there. I examined outgoing packets send by my phone to Freeswitch and from Freeswitch to 172.20.252.2 and found no rtp was transmitted over eth2 (from freeswitch to proxy) only from my phone to freeswitch. There is no FW on guest OS, i tried to stop in on HN but nothing changed. Packets come to venet0 ok, but then for some reasons are not transmitted to eth2. I'm sure that is something with nat-acl as far as 172.16/16 is also private space addresses, but i'm not sure. Please, help me with that and if you know the right way to handle such 3 subnets config correctly, tell me. Freeswitch was build from the git. Corresponding conf from Asterisk, works [172.20.252.2] type=friend context=*** canreinvite=no host=172.20.252.2 disallow=all allow=alaw videosupport=no outboundproxy=172.20.252.2 fromuser=*** from freeswitch (no audio during outgoing calls) http://www.privatepaste.com/bebc7e8988 sip_profiles/internal-2.xml and http://www.privatepaste.com/4df33fc7a5 sip_profiles/internal-2/int. xml
What device is 172.20.252.5? Also what are the route tables on each machines, vmachine, etc. Brian 2010/7/14 Тарас Гірник <taras.p.gyrnik@gmail.com>:
Hi, guys.
Sorry for posting suppose such a frequently asked question, but anyway it's still problem for me to handle Freeswitch on 3 different subnetworks. In fact i was able to run, but with one discfuntion - on one of the instances there was no sound in one direction. I know you say this problem is related to NAT and so on, but let me ask anyway. It should mentioned that first i was run Asterisk and it was fine with that setup. Another important thing is Freeswitch runs under guest OS Debian/Lenny in OpenVZ environment (kernel 2.6.18 with ovz patch) Network: venet0:0 192.168.1.128/24 venet0:1 public_ip + default route here eth2: 172.20.252.6/30 + route 172.20.252.0/24 via 172.20.252.5 (complete interface derived to guest OS, nothing to deal with HN)
My peers is 192.168.1.1 (asterisk runs here, under my administration) 192.168.1.204 (gsm gateway, under my administration) x.x.x.x (remote peer under my administration) 172.20.252.2 (voip providers proxy, no authentication here, not under my administration)
I successfully installed profiles belong to first 3 ones and everything was ok. I substituted external-sip external-rtp and others with my public ip. The internal ones - with my internal. The problem was with the last one. I have tried to force Freeswitch run on that one but have no luck. Finally i copied profile "internal.xml" to "internal-2.xml" (actually i tried the same with external.xml) in "sip_profiles" dir and change it to parse files from "sip_profiles/internal-2" dir. I have no idea is this right way, but anyway it works and Freeswitch start to listen on 172.20.252.6. I also used inbound-acl and proxy-acl to handle with no authorization. Freeswitch was able to handle incoming calls on 172.20.252.6 and even it was sound in both directions. But if you try to add a dialplan which will use 172.20.252.2 as an outbound proxy you will see that call is handled correctly but no voice there. I examined outgoing packets send by my phone to Freeswitch and from Freeswitch to 172.20.252.2 and found no rtp was transmitted over eth2 (from freeswitch to proxy) only from my phone to freeswitch. There is no FW on guest OS, i tried to stop in on HN but nothing changed. Packets come to venet0 ok, but then for some reasons are not transmitted to eth2. I'm sure that is something with nat-acl as far as 172.16/16 is also private space addresses, but i'm not sure.
Please, help me with that and if you know the right way to handle such 3 subnets config correctly, tell me. Freeswitch was build from the git. Corresponding conf from Asterisk, works
[172.20.252.2] type=friend context=*** canreinvite=no host=172.20.252.2 disallow=all allow=alaw videosupport=no outboundproxy=172.20.252.2 fromuser=***
from freeswitch (no audio during outgoing calls) http://www.privatepaste.com/bebc7e8988 sip_profiles/internal-2.xml and http://www.privatepaste.com/4df33fc7a5 sip_profiles/internal-2/int. xml _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
2010/7/14 broken dash <brokendash@gmail.com>
What device is 172.20.252.5? Also what are the route tables on each machines, vmachine, etc.
Subnet 192.168.1.0/24 is directly connected to machine on eth0 192.168.1.128 is on private venet device on vmachine and have it's complicated route through kernel. Public subnet /29 is located on dev eth1 on machine, 1 ip from that subnet is on same venet0 on Vmachine. Default route is also here. Complete interface eth2 is derived to Vmachine and have it's additional route to network 172.20.252.0/24 to 172.20.252.5 (as far as i can recognize it's just an DSL modem) The problem is actually that the routing seems to be ok, when i call something outside through peer 172.20.252.2 i see initial SIP packets routes ok but after that there's no rtp transmitted over eth2. In addition to this i'm not sure i handle 3 subnets configuration correctly with that internal-2 profile because i really don't find anything beside 2-nic examples and faqs.
are you doing any nat into the other subnets? virtual machines make things much more confusing... :-) do you mind busting out some ascii network diagramming action? 2010/7/15 Тарас Гірник <taras.p.gyrnik@gmail.com>:
2010/7/14 broken dash <brokendash@gmail.com>
What device is 172.20.252.5? Also what are the route tables on each machines, vmachine, etc.
Subnet 192.168.1.0/24 is directly connected to machine on eth0 192.168.1.128 is on private venet device on vmachine and have it's complicated route through kernel. Public subnet /29 is located on dev eth1 on machine, 1 ip from that subnet is on same venet0 on Vmachine. Default route is also here. Complete interface eth2 is derived to Vmachine and have it's additional route to network 172.20.252.0/24 to 172.20.252.5 (as far as i can recognize it's just an DSL modem) The problem is actually that the routing seems to be ok, when i call something outside through peer 172.20.252.2 i see initial SIP packets routes ok but after that there's no rtp transmitted over eth2. In addition to this i'm not sure i handle 3 subnets configuration correctly with that internal-2 profile because i really don't find anything beside 2-nic examples and faqs.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
2010/7/15 broken dash <brokendash@gmail.com>
are you doing any nat into the other subnets? virtual machines make things much more confusing... :-) do you mind busting out some ascii network diagramming action?
vmachine has two interface: vitual venet0 and "real" eth2 (via netdev_add) from machine. In machine interface eth2 completely dissapear and in vmachine it arises like it was a real one.
Network diagram eth0 eth1 eth2 192.168.1.0/128 x.x.x.x/29 172.20.252.6/30 | | | --------------------------------------------------------- | | machine | | --------------------------------------------------------- | | | venet0 | 192.168.1.128/32 | x.x.x.y/32 | | | --------------------------------------------------------------------------- | vmachine | --------------------------------------------------------------------------- default via x.x.x.z 192.168.1.0 directly via eth0 172.20.252.0/24 via 172.20.252.5 Hope this is much or less clear. The reason i use vm for the moment is because of i don't install X on machine (i'm using mod_skypopen). Unfortunatelly i cannot test freeswitch outside of vmachine for the same reason + over 172.20.252.2 it comes a lot of calls to Asterisk (installed on machine) for the moment and i can't do a lot of test in a daytime by bypassing interface to vmachine and playing around.
You can run asterisk and freeswitch on the same machine, configure FS to use port other than 5060. On Friday 16 July 2010, Тарас Гірник wrote:
2010/7/15 broken dash <brokendash@gmail.com>
are you doing any nat into the other subnets? virtual machines make things much more confusing... :-) do you mind busting out some ascii network diagramming action?
vmachine has two interface: vitual venet0 and "real" eth2 (via netdev_add)
from machine. In machine interface eth2 completely dissapear and in vmachine it arises like it was a real one.
Network diagram
eth0 eth1 eth2 192.168.1.0/128 x.x.x.x/29 172.20.252.6/30
--------------------------------------------------------- |
| machine | |
--------------------------------------------------------- |
venet0 | 192.168.1.128/32 | x.x.x.y/32 |
---------------------------------------------------------------------------
| vmachine |
--------------------------------------------------------------------------- default via x.x.x.z 192.168.1.0 directly via eth0 172.20.252.0/24 via 172.20.252.5
Hope this is much or less clear. The reason i use vm for the moment is because of i don't install X on machine (i'm using mod_skypopen). Unfortunatelly i cannot test freeswitch outside of vmachine for the same reason + over 172.20.252.2 it comes a lot of calls to Asterisk (installed on machine) for the moment and i can't do a lot of test in a daytime by bypassing interface to vmachine and playing around.
2010/7/16 Sergey Okhapkin <sos@sokhapkin.dyndns.org>
You can run asterisk and freeswitch on the same machine, configure FS to use port other than 5060.
Yes, but i actually can done this without disturbing community of freeswitch-users ;) Why should similar programs run on one machine instead while one of them i can completely remove? The only reason stopping me from uninstalling Asterisk is this problem with one way audio on int eth2.
participants (3)
-
broken dash
-
Sergey Okhapkin
-
Тарас Гірник