HI all, I have a NAT problem I can't seem to get past. The phone is NATed. From my location with a FIOS router it works fine. But the client recently upgraded to a new SonicWall router and splat, this device failed. There are about 10 Cisco phones at this location working fine. This phone is a Panasonic KX-TGP550. I have poured over the sip logs and identified the problem. The sip packets come from the router IP and port 15xxx but are returned to that IP and the phone's source port 5060 instead of 15xxx. I have tried every NDLB feature I can find, but not every combination. The responses always go back to the wrong port. Any help would be greatly appreciated. Thanks, Sean Sample sip dump: ------------------------------------------------------------------------ recv 492 bytes from udp/[98.204.241.22]:15183 at 23:16:33.764217: ------------------------------------------------------------------------ REGISTER sip:XYZ.bizfocused.com:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.2.109:5074;branch=z9hG4bKb6be703b Max-Forwards: 70 To: <sip:34@XYZ.bizfocused.com> From: <sip:34@XYZ.bizfocused.com>;tag=3263080642 Call-ID: 97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109<mailto:97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109> CSeq: 1 REGISTER Contact: <sip:34@192.168.2.109:5074> Expires: 3600 Allow: INVITE,ACK,CANCEL,BYE,OPTIONS,NOTIFY,REFER,UPDATE User-Agent: Panasonic_KX-TGP550T04/13.33 (0080f041d179) Content-Length: 0 ------------------------------------------------------------------------ send 669 bytes to udp/[98.204.241.22]:5074 at 23:16:33.764394: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized
Enable rport, The issue was from 15183 and we respond to 5074, so the device never receives the 401. Nat 101 /b On Sun, Feb 18, 2018 at 11:28 AM, Sean Devoy <sdevoy@bizfocused.com> wrote:
HI all,
I have a NAT problem I can’t seem to get past. The phone is NATed. From my location with a FIOS router it works fine. But the client recently upgraded to a new SonicWall router and splat, this device failed. There are about 10 Cisco phones at this location working fine. This phone is a Panasonic KX-TGP550.
I have poured over the sip logs and identified the problem. *The sip packets come from the router IP and port 15xxx but are returned to that IP and the phone’s source port 5060 instead of 15xxx.*
I have tried every NDLB feature I can find, but not every combination. The responses always go back to the wrong port.
Any help would be greatly appreciated.
Thanks,
Sean
Sample sip dump:
------------------------------------------------------------ ------------
recv 492 bytes from *udp/[98.204.241.22]:15183* at 23:16:33.764217:
------------------------------------------------------------ ------------
REGISTER sip:XYZ.bizfocused.com:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.2.109:5074;branch=z9hG4bKb6be703b
Max-Forwards: 70
To: <sip:34@XYZ.bizfocused.com>
From: <sip:34@XYZ.bizfocused.com>;tag=3263080642
Call-ID: 97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109
CSeq: 1 REGISTER
Contact: <sip:34@192.168.2.109:5074>
Expires: 3600
Allow: INVITE,ACK,CANCEL,BYE,OPTIONS,NOTIFY,REFER,UPDATE
User-Agent: Panasonic_KX-TGP550T04/13.33 (0080f041d179)
Content-Length: 0
-------------------------------------------------------- ----------------
send 669 bytes to *udp/[98.204.241.22]:5074* at 23:16:33.764394:
------------------------------------------------------------ ------------
SIP/2.0 401 Unauthorized
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Brian West | Co-founder and Developer Need Commercial support? email sales@freeswitch.com FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> Email: brian@freeswitch.com Mobile: 918-424-9378 Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/> [image: color-facebook-96.png] <https://www.facebook.com/freeswitch/>[image: color-twitter-96.png] <https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor>
Thanks Brian. I should have been more clear. That was exactly my diagnosis and attempted fix using this line: <param name="NDLB-force-rport" value="true"/> in the <param> section of the <user> in the Directory file has no effect. That means one of two things. I am putting it in the wrong file or I must bite the bullet and get FS up to the current version. Thanks again. From: FreeSWITCH-users [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian West Sent: Sunday, February 18, 2018 11:51 AM To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Subject: Re: [Freeswitch-users] NAT port problem Enable rport, The issue was from 15183 and we respond to 5074, so the device never receives the 401. Nat 101 /b On Sun, Feb 18, 2018 at 11:28 AM, Sean Devoy <sdevoy@bizfocused.com<mailto:sdevoy@bizfocused.com>> wrote: HI all, I have a NAT problem I can’t seem to get past. The phone is NATed. From my location with a FIOS router it works fine. But the client recently upgraded to a new SonicWall router and splat, this device failed. There are about 10 Cisco phones at this location working fine. This phone is a Panasonic KX-TGP550. I have poured over the sip logs and identified the problem. The sip packets come from the router IP and port 15xxx but are returned to that IP and the phone’s source port 5060 instead of 15xxx. I have tried every NDLB feature I can find, but not every combination. The responses always go back to the wrong port. Any help would be greatly appreciated. Thanks, Sean Sample sip dump: ------------------------------------------------------------------------ recv 492 bytes from udp/[98.204.241.22]:15183 at 23:16:33.764217: ------------------------------------------------------------------------ REGISTER sip:XYZ.bizfocused.com:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.2.109:5074;branch=z9hG4bKb6be703b Max-Forwards: 70 To: <sip:34@XYZ.bizfocused.com> From: <sip:34@XYZ.bizfocused.com>;tag=3263080642 Call-ID: 97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109<mailto:97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109> CSeq: 1 REGISTER Contact: <sip:34@192.168.2.109:5074> Expires: 3600 Allow: INVITE,ACK,CANCEL,BYE,OPTIONS,NOTIFY,REFER,UPDATE User-Agent: Panasonic_KX-TGP550T04/13.33 (0080f041d179) Content-Length: 0 ------------------------------------------------------------------------ send 669 bytes to udp/[98.204.241.22]:5074 at 23:16:33.764394: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- [https://docs.google.com/uc?export=download&id=1xswZRZyVDo0WQhaemK47pU266yzDR...] Brian West | Co-founder and Developer Need Commercial support? email sales@freeswitch.com<mailto:sales@freeswitch.com> FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045<https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> Email: brian@freeswitch.com<mailto:brian@freeswitch.com> Mobile: 918-424-9378 Website: https://www.FreeSWITCH.com<https://www.freeswitch.com/> [color-facebook-96.png]<https://www.facebook.com/freeswitch/>[color-twitter-96.png]<https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor>
It can be an ALG problem ( https://www.voip-info.org/wiki/view/Routers+SIP+ALG). Try running another sip profile with a different sip port, 5070 for example, and register the phone using this port. 2018-02-18 19:43 GMT-03:00 Sean Devoy <sdevoy@bizfocused.com>:
Thanks Brian. I should have been more clear. That was exactly my diagnosis and attempted fix using this line:
<param name="NDLB-force-rport" value="true"/>
in the <param> section of the <user> in the Directory file has no effect.
That means one of two things. I am putting it in the wrong file or I must bite the bullet and get FS up to the current version.
Thanks again.
*From:* FreeSWITCH-users [mailto:freeswitch-users- bounces@lists.freeswitch.org] *On Behalf Of *Brian West *Sent:* Sunday, February 18, 2018 11:51 AM *To:* FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> *Subject:* Re: [Freeswitch-users] NAT port problem
Enable rport, The issue was from 15183 and we respond to 5074, so the device never receives the 401.
Nat 101
/b
On Sun, Feb 18, 2018 at 11:28 AM, Sean Devoy <sdevoy@bizfocused.com> wrote:
HI all,
I have a NAT problem I can’t seem to get past. The phone is NATed. From my location with a FIOS router it works fine. But the client recently upgraded to a new SonicWall router and splat, this device failed. There are about 10 Cisco phones at this location working fine. This phone is a Panasonic KX-TGP550.
I have poured over the sip logs and identified the problem. *The sip packets come from the router IP and port 15xxx but are returned to that IP and the phone’s source port 5060 instead of 15xxx.*
I have tried every NDLB feature I can find, but not every combination. The responses always go back to the wrong port.
Any help would be greatly appreciated.
Thanks,
Sean
Sample sip dump:
------------------------------------------------------------ ------------
recv 492 bytes from *udp/[98.204.241.22]:15183* at 23:16:33.764217:
------------------------------------------------------------ ------------
REGISTER sip:XYZ.bizfocused.com:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.2.109:5074;branch=z9hG4bKb6be703b
Max-Forwards: 70
To: <sip:34@XYZ.bizfocused.com>
From: <sip:34@XYZ.bizfocused.com>;tag=3263080642 <(32)%206308-0642>
Call-ID: 97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109
CSeq: 1 REGISTER
Contact: <sip:34@192.168.2.109:5074>
Expires: 3600
Allow: INVITE,ACK,CANCEL,BYE,OPTIONS,NOTIFY,REFER,UPDATE
User-Agent: Panasonic_KX-TGP550T04/13.33 (0080f041d179)
Content-Length: 0
-------------------------------------------------------- ----------------
send 669 bytes to * udp/[98.204.241.22]:5074* at 23:16:33.764394:
------------------------------------------------------------ ------------
SIP/2.0 401 Unauthorized
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Brian West | Co-founder and Developer
Need Commercial support? email sales@freeswitch.com
FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g>
Email: brian@freeswitch.com
Mobile: 918-424-9378
Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/>
[image: color-facebook-96.png] <https://www.facebook.com/freeswitch/>[image: color-twitter-96.png] <https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Carlos E. Wagner* *Tecnólogo em Telecomunicações, OCP, dCAA* *E-mail:* *kaduww@gmail.com <kaduww@gmail.com>* *Fone:* +55 48 9981-0894 *Skype:* carlos.e.wagner www.blogdovoip.com
In this case its probably not an ALG, you should enable rport in your device and NOT force it with the NDLB param, if your device doesn't support it, throw that device in the trash or take a hammer to it, and buy a device from a manufacture that actually made an effort to implement SIP. /b On Mon, Feb 19, 2018 at 6:10 AM, Carlos Eduardo <kaduww@gmail.com> wrote:
It can be an ALG problem (https://www.voip-info.org/ wiki/view/Routers+SIP+ALG). Try running another sip profile with a different sip port, 5070 for example, and register the phone using this port.
2018-02-18 19:43 GMT-03:00 Sean Devoy <sdevoy@bizfocused.com>:
Thanks Brian. I should have been more clear. That was exactly my diagnosis and attempted fix using this line:
<param name="NDLB-force-rport" value="true"/>
in the <param> section of the <user> in the Directory file has no effect.
That means one of two things. I am putting it in the wrong file or I must bite the bullet and get FS up to the current version.
Thanks again.
*From:* FreeSWITCH-users [mailto:freeswitch-users-bounc es@lists.freeswitch.org] *On Behalf Of *Brian West *Sent:* Sunday, February 18, 2018 11:51 AM *To:* FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> *Subject:* Re: [Freeswitch-users] NAT port problem
Enable rport, The issue was from 15183 and we respond to 5074, so the device never receives the 401.
Nat 101
/b
On Sun, Feb 18, 2018 at 11:28 AM, Sean Devoy <sdevoy@bizfocused.com> wrote:
HI all,
I have a NAT problem I can’t seem to get past. The phone is NATed. From my location with a FIOS router it works fine. But the client recently upgraded to a new SonicWall router and splat, this device failed. There are about 10 Cisco phones at this location working fine. This phone is a Panasonic KX-TGP550.
I have poured over the sip logs and identified the problem. *The sip packets come from the router IP and port 15xxx but are returned to that IP and the phone’s source port 5060 instead of 15xxx.*
I have tried every NDLB feature I can find, but not every combination. The responses always go back to the wrong port.
Any help would be greatly appreciated.
Thanks,
Sean
Sample sip dump:
------------------------------------------------------------ ------------
recv 492 bytes from *udp/[98.204.241.22]:15183* at 23:16:33.764217:
------------------------------------------------------------ ------------
REGISTER sip:XYZ.bizfocused.com:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.2.109:5074;branch=z9hG4bKb6be703b
Max-Forwards: 70
To: <sip:34@XYZ.bizfocused.com>
From: <sip:34@XYZ.bizfocused.com>;tag=3263080642 <(32)%206308-0642>
Call-ID: 97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109
CSeq: 1 REGISTER
Contact: <sip:34@192.168.2.109:5074>
Expires: 3600
Allow: INVITE,ACK,CANCEL,BYE,OPTIONS,NOTIFY,REFER,UPDATE
User-Agent: Panasonic_KX-TGP550T04/13.33 (0080f041d179)
Content-Length: 0
-------------------------------------------------------- ----------------
send 669 bytes to * udp/[98.204.241.22]:5074* at 23:16:33.764394:
------------------------------------------------------------ ------------
SIP/2.0 401 Unauthorized
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Brian West | Co-founder and Developer
Need Commercial support? email sales@freeswitch.com
FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g>
Email: brian@freeswitch.com
Mobile: 918-424-9378 <(918)%20424-9378>
Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/>
[image: color-facebook-96.png] <https://www.facebook.com/freeswitch/>[image: color-twitter-96.png] <https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Carlos E. Wagner* *Tecnólogo em Telecomunicações, OCP, dCAA*
*E-mail:* *kaduww@gmail.com <kaduww@gmail.com>* *Fone:* +55 48 9981-0894 <+55%2048%209981-0894> *Skype:* carlos.e.wagner www.blogdovoip.com
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Brian West | Co-founder and Developer Need Commercial support? email sales@freeswitch.com FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> Email: brian@freeswitch.com Mobile: 918-424-9378 Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/> [image: color-facebook-96.png] <https://www.facebook.com/freeswitch/>[image: color-twitter-96.png] <https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor>
LOL! Exactly. This device is, shall we say, VERY BASIC. It worked with the old router. When they upgraded to a SONICWALL I cannot get it to work. I have learned my lesson. In the future I will only allow a quality ATA and DECT phone for this type of solution. For the record this is a Panasonic KX-TGP550. I tried alternate local port numbers. I tried all the ALG settings on the SonicWALL. I am upgrading from 1.2 <hangs head in shame> to 1.6 in hopes that NDLB rport will fix it. Thanks to all who replied. From: FreeSWITCH-users [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian West Sent: Monday, February 19, 2018 8:08 AM To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Subject: Re: [Freeswitch-users] NAT port problem In this case its probably not an ALG, you should enable rport in your device and NOT force it with the NDLB param, if your device doesn't support it, throw that device in the trash or take a hammer to it, and buy a device from a manufacture that actually made an effort to implement SIP. /b On Mon, Feb 19, 2018 at 6:10 AM, Carlos Eduardo <kaduww@gmail.com<mailto:kaduww@gmail.com>> wrote: It can be an ALG problem (https://www.voip-info.org/wiki/view/Routers+SIP+ALG). Try running another sip profile with a different sip port, 5070 for example, and register the phone using this port. 2018-02-18 19:43 GMT-03:00 Sean Devoy <sdevoy@bizfocused.com<mailto:sdevoy@bizfocused.com>>: Thanks Brian. I should have been more clear. That was exactly my diagnosis and attempted fix using this line: <param name="NDLB-force-rport" value="true"/> in the <param> section of the <user> in the Directory file has no effect. That means one of two things. I am putting it in the wrong file or I must bite the bullet and get FS up to the current version. Thanks again. From: FreeSWITCH-users [mailto:freeswitch-users-bounces@lists.freeswitch.org<mailto:freeswitch-users-bounces@lists.freeswitch.org>] On Behalf Of Brian West Sent: Sunday, February 18, 2018 11:51 AM To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org<mailto:freeswitch-users@lists.freeswitch.org>> Subject: Re: [Freeswitch-users] NAT port problem Enable rport, The issue was from 15183 and we respond to 5074, so the device never receives the 401. Nat 101 /b On Sun, Feb 18, 2018 at 11:28 AM, Sean Devoy <sdevoy@bizfocused.com<mailto:sdevoy@bizfocused.com>> wrote: HI all, I have a NAT problem I can’t seem to get past. The phone is NATed. From my location with a FIOS router it works fine. But the client recently upgraded to a new SonicWall router and splat, this device failed. There are about 10 Cisco phones at this location working fine. This phone is a Panasonic KX-TGP550. I have poured over the sip logs and identified the problem. The sip packets come from the router IP and port 15xxx but are returned to that IP and the phone’s source port 5060 instead of 15xxx. I have tried every NDLB feature I can find, but not every combination. The responses always go back to the wrong port. Any help would be greatly appreciated. Thanks, Sean Sample sip dump: ------------------------------------------------------------------------ recv 492 bytes from udp/[98.204.241.22]:15183 at 23:16:33.764217: ------------------------------------------------------------------------ REGISTER sip:XYZ.bizfocused.com:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.2.109:5074;branch=z9hG4bKb6be703b Max-Forwards: 70 To: <sip:34@XYZ.bizfocused.com> From: <sip:34@XYZ.bizfocused.com>;tag=3263080642<tel:(32)%206308-0642> Call-ID: 97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109<mailto:97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109> CSeq: 1 REGISTER Contact: <sip:34@192.168.2.109:5074> Expires: 3600 Allow: INVITE,ACK,CANCEL,BYE,OPTIONS,NOTIFY,REFER,UPDATE User-Agent: Panasonic_KX-TGP550T04/13.33 (0080f041d179) Content-Length: 0 ------------------------------------------------------------------------ send 669 bytes to udp/[98.204.241.22]:5074 at 23:16:33.764394: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- [https://docs.google.com/uc?export=download&id=1xswZRZyVDo0WQhaemK47pU266yzDR...] Brian West | Co-founder and Developer Need Commercial support? email sales@freeswitch.com<mailto:sales@freeswitch.com> FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045<https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> Email: brian@freeswitch.com<mailto:brian@freeswitch.com> Mobile: 918-424-9378<tel:(918)%20424-9378> Website: https://www.FreeSWITCH.com<https://www.freeswitch.com/> [color-facebook-96.png]<https://www.facebook.com/freeswitch/>[color-twitter-96.png]<https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor> _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- Carlos E. Wagner Tecnólogo em Telecomunicações, OCP, dCAA E-mail: kaduww@gmail.com<mailto:kaduww@gmail.com> Fone: +55 48 9981-0894<tel:+55%2048%209981-0894> Skype: carlos.e.wagner www.blogdovoip.com<http://www.blogdovoip.com> _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- [https://docs.google.com/uc?export=download&id=1xswZRZyVDo0WQhaemK47pU266yzDR...] Brian West | Co-founder and Developer Need Commercial support? email sales@freeswitch.com<mailto:sales@freeswitch.com> FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045<https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> Email: brian@freeswitch.com<mailto:brian@freeswitch.com> Mobile: 918-424-9378 Website: https://www.FreeSWITCH.com<https://www.freeswitch.com/> [color-facebook-96.png]<https://www.facebook.com/freeswitch/>[color-twitter-96.png]<https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor>
We had this exact problem with these Panasonic phones. We had a customer with 2 units that seemed identical to me, and one had this behavior and one didn’t. I tried resets, firmware updates, etc., but no hope for the one unit. If it helps, the unit that is still actually working at their office shows useragent string of Panasonic_KX-TGP550T04/12.58. -Evan From: FreeSWITCH-users [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Sean Devoy Sent: Tuesday, February 20, 2018 12:20 PM To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Subject: Re: [Freeswitch-users] NAT port problem LOL! Exactly. This device is, shall we say, VERY BASIC. It worked with the old router. When they upgraded to a SONICWALL I cannot get it to work. I have learned my lesson. In the future I will only allow a quality ATA and DECT phone for this type of solution. For the record this is a Panasonic KX-TGP550. I tried alternate local port numbers. I tried all the ALG settings on the SonicWALL. I am upgrading from 1.2 <hangs head in shame> to 1.6 in hopes that NDLB rport will fix it. Thanks to all who replied. From: FreeSWITCH-users [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian West Sent: Monday, February 19, 2018 8:08 AM To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org<mailto:freeswitch-users@lists.freeswitch.org>> Subject: Re: [Freeswitch-users] NAT port problem In this case its probably not an ALG, you should enable rport in your device and NOT force it with the NDLB param, if your device doesn't support it, throw that device in the trash or take a hammer to it, and buy a device from a manufacture that actually made an effort to implement SIP. /b On Mon, Feb 19, 2018 at 6:10 AM, Carlos Eduardo <kaduww@gmail.com<mailto:kaduww@gmail.com>> wrote: It can be an ALG problem (https://www.voip-info.org/wiki/view/Routers+SIP+ALG). Try running another sip profile with a different sip port, 5070 for example, and register the phone using this port. 2018-02-18 19:43 GMT-03:00 Sean Devoy <sdevoy@bizfocused.com<mailto:sdevoy@bizfocused.com>>: Thanks Brian. I should have been more clear. That was exactly my diagnosis and attempted fix using this line: <param name="NDLB-force-rport" value="true"/> in the <param> section of the <user> in the Directory file has no effect. That means one of two things. I am putting it in the wrong file or I must bite the bullet and get FS up to the current version. Thanks again. From: FreeSWITCH-users [mailto:freeswitch-users-bounces@lists.freeswitch.org<mailto:freeswitch-users-bounces@lists.freeswitch.org>] On Behalf Of Brian West Sent: Sunday, February 18, 2018 11:51 AM To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org<mailto:freeswitch-users@lists.freeswitch.org>> Subject: Re: [Freeswitch-users] NAT port problem Enable rport, The issue was from 15183 and we respond to 5074, so the device never receives the 401. Nat 101 /b On Sun, Feb 18, 2018 at 11:28 AM, Sean Devoy <sdevoy@bizfocused.com<mailto:sdevoy@bizfocused.com>> wrote: HI all, I have a NAT problem I can’t seem to get past. The phone is NATed. From my location with a FIOS router it works fine. But the client recently upgraded to a new SonicWall router and splat, this device failed. There are about 10 Cisco phones at this location working fine. This phone is a Panasonic KX-TGP550. I have poured over the sip logs and identified the problem. The sip packets come from the router IP and port 15xxx but are returned to that IP and the phone’s source port 5060 instead of 15xxx. I have tried every NDLB feature I can find, but not every combination. The responses always go back to the wrong port. Any help would be greatly appreciated. Thanks, Sean Sample sip dump: ------------------------------------------------------------------------ recv 492 bytes from udp/[98.204.241.22]:15183 at 23:16:33.764217: ------------------------------------------------------------------------ REGISTER sip:XYZ.bizfocused.com:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.2.109:5074;branch=z9hG4bKb6be703b Max-Forwards: 70 To: <sip:34@XYZ.bizfocused.com> From: <sip:34@XYZ.bizfocused.com>;tag=3263080642<tel:(32)%206308-0642> Call-ID: 97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109<mailto:97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109> CSeq: 1 REGISTER Contact: <sip:34@192.168.2.109:5074> Expires: 3600 Allow: INVITE,ACK,CANCEL,BYE,OPTIONS,NOTIFY,REFER,UPDATE User-Agent: Panasonic_KX-TGP550T04/13.33 (0080f041d179) Content-Length: 0 ------------------------------------------------------------------------ send 669 bytes to udp/[98.204.241.22]:5074 at 23:16:33.764394: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- [https://docs.google.com/uc?export=download&id=1xswZRZyVDo0WQhaemK47pU266yzDR...] Brian West | Co-founder and Developer Need Commercial support? email sales@freeswitch.com<mailto:sales@freeswitch.com> FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045<https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> Email: brian@freeswitch.com<mailto:brian@freeswitch.com> Mobile: 918-424-9378<tel:(918)%20424-9378> Website: https://www.FreeSWITCH.com<https://www.freeswitch.com/> [color-facebook-96.png]<https://www.facebook.com/freeswitch/>[color-twitter-96.png]<https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor> _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- Carlos E. Wagner Tecnólogo em Telecomunicações, OCP, dCAA E-mail: kaduww@gmail.com<mailto:kaduww@gmail.com> Fone: +55 48 9981-0894<tel:+55%2048%209981-0894> Skype: carlos.e.wagner www.blogdovoip.com<http://www.blogdovoip.com> _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- [https://docs.google.com/uc?export=download&id=1xswZRZyVDo0WQhaemK47pU266yzDR...] Brian West | Co-founder and Developer Need Commercial support? email sales@freeswitch.com<mailto:sales@freeswitch.com> FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045<https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> Email: brian@freeswitch.com<mailto:brian@freeswitch.com> Mobile: 918-424-9378 Website: https://www.FreeSWITCH.com<https://www.freeswitch.com/> [color-facebook-96.png]<https://www.facebook.com/freeswitch/>[color-twitter-96.png]<https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor>
That device is far from basic, the admin manual is like a dictionary, you may not see the settings in the UI but I know that device has tons of options. /b On Tue, Feb 20, 2018 at 2:19 PM, Sean Devoy <sdevoy@bizfocused.com> wrote:
LOL! Exactly. This device is, shall we say, VERY BASIC. It worked with the old router. When they upgraded to a SONICWALL I cannot get it to work. I have learned my lesson. In the future I will only allow a quality ATA and DECT phone for this type of solution. For the record this is a Panasonic KX-TGP550.
I tried alternate local port numbers. I tried all the ALG settings on the SonicWALL. I am upgrading from 1.2 <hangs head in shame> to 1.6 in hopes that NDLB rport will fix it.
Thanks to all who replied.
*From:* FreeSWITCH-users [mailto:freeswitch-users- bounces@lists.freeswitch.org] *On Behalf Of *Brian West *Sent:* Monday, February 19, 2018 8:08 AM
*To:* FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> *Subject:* Re: [Freeswitch-users] NAT port problem
In this case its probably not an ALG, you should enable rport in your device and NOT force it with the NDLB param, if your device doesn't support it, throw that device in the trash or take a hammer to it, and buy a device from a manufacture that actually made an effort to implement SIP.
/b
On Mon, Feb 19, 2018 at 6:10 AM, Carlos Eduardo <kaduww@gmail.com> wrote:
It can be an ALG problem (https://www.voip-info.org/ wiki/view/Routers+SIP+ALG). Try running another sip profile with a different sip port, 5070 for example, and register the phone using this port.
2018-02-18 19:43 GMT-03:00 Sean Devoy <sdevoy@bizfocused.com>:
Thanks Brian. I should have been more clear. That was exactly my diagnosis and attempted fix using this line:
<param name="NDLB-force-rport" value="true"/>
in the <param> section of the <user> in the Directory file has no effect.
That means one of two things. I am putting it in the wrong file or I must bite the bullet and get FS up to the current version.
Thanks again.
*From:* FreeSWITCH-users [mailto:freeswitch-users- bounces@lists.freeswitch.org] *On Behalf Of *Brian West *Sent:* Sunday, February 18, 2018 11:51 AM *To:* FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> *Subject:* Re: [Freeswitch-users] NAT port problem
Enable rport, The issue was from 15183 and we respond to 5074, so the device never receives the 401.
Nat 101
/b
On Sun, Feb 18, 2018 at 11:28 AM, Sean Devoy <sdevoy@bizfocused.com> wrote:
HI all,
I have a NAT problem I can’t seem to get past. The phone is NATed. From my location with a FIOS router it works fine. But the client recently upgraded to a new SonicWall router and splat, this device failed. There are about 10 Cisco phones at this location working fine. This phone is a Panasonic KX-TGP550.
I have poured over the sip logs and identified the problem. *The sip packets come from the router IP and port 15xxx but are returned to that IP and the phone’s source port 5060 instead of 15xxx.*
I have tried every NDLB feature I can find, but not every combination. The responses always go back to the wrong port.
Any help would be greatly appreciated.
Thanks,
Sean
Sample sip dump:
------------------------------------------------------------ ------------
recv 492 bytes from *udp/[98.204.241.22]:15183* at 23:16:33.764217:
------------------------------------------------------------ ------------
REGISTER sip:XYZ.bizfocused.com:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.2.109:5074;branch=z9hG4bKb6be703b
Max-Forwards: 70
To: <sip:34@XYZ.bizfocused.com>
From: <sip:34@XYZ.bizfocused.com>;tag=3263080642 <(32)%206308-0642>
Call-ID: 97742e94-d1dc14228bad9baadd810080f041d179@192.168.2.109
CSeq: 1 REGISTER
Contact: <sip:34@192.168.2.109:5074>
Expires: 3600
Allow: INVITE,ACK,CANCEL,BYE,OPTIONS,NOTIFY,REFER,UPDATE
User-Agent: Panasonic_KX-TGP550T04/13.33 (0080f041d179)
Content-Length: 0
-------------------------------------------------------- ----------------
send 669 bytes to * udp/[98.204.241.22]:5074* at 23:16:33.764394:
------------------------------------------------------------ ------------
SIP/2.0 401 Unauthorized
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Brian West | Co-founder and Developer
Need Commercial support? email sales@freeswitch.com
FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g>
Email: brian@freeswitch.com
Mobile: 918-424-9378 <(918)%20424-9378>
Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/>
[image: color-facebook-96.png] <https://www.facebook.com/freeswitch/>[image: color-twitter-96.png] <https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*Carlos E. Wagner*
*Tecnólogo em Telecomunicações, OCP, dCAA*
*E-mail:* *kaduww@gmail.com <kaduww@gmail.com>*
*Fone:* +55 48 9981-0894 <+55%2048%209981-0894> *Skype:* carlos.e.wagner
www.blogdovoip.com
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Brian West | Co-founder and Developer
Need Commercial support? email sales@freeswitch.com
FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g>
Email: brian@freeswitch.com
Mobile: 918-424-9378 <(918)%20424-9378>
Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/>
[image: color-facebook-96.png] <https://www.facebook.com/freeswitch/>[image: color-twitter-96.png] <https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Brian West | Co-founder and Developer Need Commercial support? email sales@freeswitch.com FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> Email: brian@freeswitch.com Mobile: 918-424-9378 Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/> [image: color-facebook-96.png] <https://www.facebook.com/freeswitch/>[image: color-twitter-96.png] <https://twitter.com/freeswitch?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor>
participants (4)
-
Brian West
-
Carlos Eduardo
-
Evan P. Hall
-
Sean Devoy