issue with media on two internal gateways
I don't want FS1 who talks to FS2 to try to use the PUBLIC rtp port. but I can't seem to see how. FS1: 192.168.0.3 (public ip 204.89.241.135) listeing for trunk calls on 5060 FS2: 192.168.0.2 (public ip 204.89.241.150) listening for trunk calls on 5080 FS1 -> FS2 in Inivite: (then it tries to bind media to public ip, i get one way audio, and no DTMF) Contact: <sip:gw+secnap.com@204.89.241.135:5060;transport=udp> Contact Binding: <sip:gw+secnap.com@204.89.241.135:5060;transport=udp> URI: <sip:gw+secnap.com@204.89.241.135:5060;transport=udp> SIP contact address: sip:gw+secnap.com@204.89.241.135:5060 (204.89.241.135 is the public ip, but these two boxes are internal) FS2 listens on port 5080, FS1 listens on port 5060. FS2-> FS1 (what is fair is FAIR..) Contact: <sip:gw+secnap.com@204.89.241.150:5080;transport=udp> Contact Binding: <sip:gw+secnap.com@204.89.241.150:5080;transport=udp> URI: <sip:gw+secnap.com@204.89.241.150:5080;transport=udp> SIP contact address: sip:gw+secnap.com@204.89.241.150:5080 if tried so far: put outbound-proxy in secnap.com.xml <param name="rtp-ip" value="192.168.0.3"/> <param name="sip-ip" value="192.168.0.3"/> in sofia.conf.xml (noop) in acl.conf.xml: <node type="allow" cidr="192.168.0.2/32"/> no.. internal xml: --> <param name="ext-rtp-ip" value="auto-nat"/> <param name="ext-sip-ip" value="auto-nat"/> --> <param name="ext-rtp-ip" value="auto"/> <param name="ext-sip-ip" value="auto"/> in external.xml also making lots of calls from my cell phone.. watching traffic. -- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 ISN: 1259*1300
*| *SECNAP Network Security Corporation
* Certified SNORT Integrator * 2008-9 Hot Company Award Winner, World Executive Alliance * Five-Star Partner Program 2009, VARBusiness * Best in Email Security,2010: Network Products Guide * King of Spam Filters, SC Magazine 2008 ______________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/ ______________________________________________________________________
More info: Two things: found the great diagnostics information at <http://wiki.freeswitch.org/wiki/Auto_NAT> wiki don't mention you need to use fs_cli for this.. anyway, this one says: sofia status gateway secnap.com ================================================================================================= Name secnap.com Scheme Digest Realm 10.72.0.2:5080 Username username Password yes From <sip:fromuser@192.168.0.2;transport=udp> Contact <sip:gw+secnap.com@204.89.241.135:5060;transport=udp> (note: this is just wrong. the public ip is 204.89.241.151.. but still.. I want secnap.com, internal, to Contact me back at 192.168.0.2 Exten username To sip:username@192.168.0.2:5080 Proxy sip:192.168.0.2:5080 Context public Expires 600 Freq 600 Ping 0 PingFreq 0 State NOREG Status UP CallsIN 0 CallsOUT 0 ================================================================================================= On 8/26/10 5:47 PM, Michael Scheidell wrote:
I don't want FS1 who talks to FS2 to try to use the PUBLIC rtp port. but I can't seem to see how.
-- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 ISN: 1259*1300
*| *SECNAP Network Security Corporation
* Certified SNORT Integrator * 2008-9 Hot Company Award Winner, World Executive Alliance * Five-Star Partner Program 2009, VARBusiness * Best in Email Security,2010: Network Products Guide * King of Spam Filters, SC Magazine 2008 ______________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/ ______________________________________________________________________
Then you need to preface the ip's in ext-sip-ip and ext-rtp-ip with autonat: /b On Aug 26, 2010, at 4:58 PM, Michael Scheidell wrote:
More info:
Two things:
found the great diagnostics information at <http://wiki.freeswitch.org/wiki/Auto_NAT> wiki don't mention you need to use fs_cli for this..
anyway, this one says:
sofia status gateway secnap.com ================================================================================================= Name secnap.com Scheme Digest Realm 10.72.0.2:5080 Username username Password yes From <sip:fromuser@192.168.0.2;transport=udp> Contact <sip:gw+secnap.com@204.89.241.135:5060;transport=udp>
(note: this is just wrong. the public ip is 204.89.241.151.. but still.. I want secnap.com, internal, to Contact me back at 192.168.0.2
Exten username To sip:username@192.168.0.2:5080 Proxy sip:192.168.0.2:5080 Context public Expires 600 Freq 600 Ping 0 PingFreq 0 State NOREG Status UP CallsIN 0 CallsOUT 0 =================================================================================================
pretend I am stupid (this is my 6th phone system, 4th VOIP based) still trying to find my way around: Freeswitch is BY FAR, the most feature rich of anything I have ever seen. (and if natting worked, would it get the REAL public address of 204.89.241.151? for outbound? some background, this is the freeswitch. package (not the NEW one on your web site with fusionpbx) but the one that you can install on pfsense. yes, the WAN address is 204.89.241.135. I assume some process is doing an outbound call to something to try to find the public ip. But still for calls from an internal freeswich, to an internal sip switch. internal.xml and xml was this: was this: --> <param name="ext-rtp-ip" value="auto-nat"/> <param name="ext-sip-ip" value="auto-nat"/> are you saying: (what, ?) --> <param name="ext-rtp-ip" value="auto-nat:"/> <param name="ext-sip-ip" value="auto-nat"/> On 8/26/10 6:04 PM, Brian West wrote:
Then you need to preface the ip's in ext-sip-ip and ext-rtp-ip with autonat:
-- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 ISN: 1259*1300
*| *SECNAP Network Security Corporation
* Certified SNORT Integrator * 2008-9 Hot Company Award Winner, World Executive Alliance * Five-Star Partner Program 2009, VARBusiness * Best in Email Security,2010: Network Products Guide * King of Spam Filters, SC Magazine 2008 ______________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/ ______________________________________________________________________
*found it.* increadable diagnostics. sofia status gateway secnap.com ================================================================================================= Name secnap.com Scheme Digest Realm 192.168.0.2:5080 Username username Password yes From <sip:fromuser@192.168.0.2;transport=udp> Contact <sip:gw+secnap.com@[autonat:192.168.0.3]:5060;transport=udp> On 8/26/10 6:04 PM, Brian West wrote:
Then you need to preface the ip's in ext-sip-ip and ext-rtp-ip with autonat:
/b
-- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 ISN: 1259*1300
*| *SECNAP Network Security Corporation
* Certified SNORT Integrator * 2008-9 Hot Company Award Winner, World Executive Alliance * Five-Star Partner Program 2009, VARBusiness * Best in Email Security,2010: Network Products Guide * King of Spam Filters, SC Magazine 2008 ______________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/ ______________________________________________________________________
participants (2)
-
Brian West
-
Michael Scheidell