PBXes » English » Feature Requests » RE: nat=no
Print Page | Recommend to Friend | Add Thread to Favorites
Post New Thread Post Reply
Author
Post « Previous Thread | Next Thread »
baz


Registration Date: 01.01.1970
Posts:

nat=no Post Reply with Quote Edit/Delete Post Report Post to a Moderator       IP Information Go to the top of this page

any chance of being able to configure the nat option for some extensions?

Or, if you're feeling generous, just set my extension 103 to be "no" smile
26.01.2013 17:01 bazmercer is offline Search for Posts by bazmercer Add bazmercer to your Buddy List
i-p
Super Moderator


Registration Date: 14.01.2006
Posts: 4782
RE: nat=no Post Reply with Quote Edit/Delete Post Report Post to a Moderator       IP Information Go to the top of this page

What would be the benefit of that?
27.01.2013 22:05 i-p-tel is offline Search for Posts by i-p-tel Add i-p-tel to your Buddy List
baz


Registration Date: 01.01.1970
Posts:

RE: nat=no Post Reply with Quote Edit/Delete Post Report Post to a Moderator       IP Information Go to the top of this page

I think it'll disable the symmetric NAT won't it? So that asterisk will then respect the contact header instead of replying to the same port the packet was sent on. Trying to get my cisco phone to work...

edit:
well, asper the rfcs it should disable it. I've set up a freepbx on amazons cloud and have successfully got my cisco to register and make and receive calls. both devices are behind natted, extensions is "nat=no"

This post has been edited 1 time(s), it was last edited by baz on 29.01.2013 at 20:01.
27.01.2013 23:12 bazmercer is offline Search for Posts by bazmercer Add bazmercer to your Buddy List
i-p
Super Moderator


Registration Date: 14.01.2006
Posts: 4782
RE: nat=no Post Reply with Quote Edit/Delete Post Report Post to a Moderator       IP Information Go to the top of this page

I have set it on extension 103 for you to try. Change any other settings and press the red bar to bring the change into effect.

To restore the default value please re-save extension 103.
29.01.2013 23:47 i-p-tel is offline Search for Posts by i-p-tel Add i-p-tel to your Buddy List
baz


Registration Date: 01.01.1970
Posts:

RE: nat=no Post Reply with Quote Edit/Delete Post Report Post to a Moderator       IP Information Go to the top of this page

Great thanks. It almost works, I'm getting responses from you on the right port now, but I'm getting a 401 when i try to register.

SEP0024C442AFCB.52859 > www1.pbxes.com.5060: SIP, length: 981 REGISTER sip:188.40.65.170 SIP/2.0
www3.pbxes.com.27570 > SEP0024C442AFCB.5060: SIP, length: 457
SIP/2.0 100 Trying
www3.pbxes.com.27570 > SEP0024C442AFCB.5060: SIP, length: 572
SIP/2.0 401 Unauthorized

I've checked the config and it looks ok... but it's pretty late so who knows!

This post has been edited 1 time(s), it was last edited by baz on 30.01.2013 at 01:26.
30.01.2013 01:18 bazmercer is offline Search for Posts by bazmercer Add bazmercer to your Buddy List
i-p
Super Moderator


Registration Date: 14.01.2006
Posts: 4782
RE: nat=no Post Reply with Quote Edit/Delete Post Report Post to a Moderator       IP Information Go to the top of this page

You could activate SIP trace in System Log to find out more.
30.01.2013 09:34 i-p-tel is offline Search for Posts by i-p-tel Add i-p-tel to your Buddy List
baz


Registration Date: 01.01.1970
Posts:

RE: nat=no Post Reply with Quote Edit/Delete Post Report Post to a Moderator       IP Information Go to the top of this page

Anything obvious other than the 401? Would the nat change have made it 401 for any reason? I'll double check the config when I'm back at the phone but it looked ok


Jan 30 09:25:14 VERBOSE[33711] logger.c:
<-- SIP read
REGISTER sip:188.40.65.170 SIP/2.0
Via: SIP/2.0/UDP 86.152.69.250:5060;branch=z9hG4bKf8c5e7ff
From: <sip:[email protected]>;tag=0024c442afcb006690b72be5-f3af97a3
To: <sip:[email protected]>
Call-ID: [email protected]
Max-Forwards: 70
Date: Wed, 30 Jan 2013 09:25:01 GMT
CSeq: 199 REGISTER
User-Agent: Cisco-CP7945G/9.3.1
Contact: <sip:[email protected]:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0024c442afcb>";+u.sip!devicename.ccm.cisco.com="SEP0024C442AFCB";+u.sip!model.ccm.cisco.com="435"
Supported: replaces,join,sdp-anat,norefersub,resource-priority,extended-refer,X-cisco-callinfo,X-cisco-serviceuri,X-cisco-escapecodes,X-cisco-service-control,X-cisco-srtp-fallback,X-cisco-monrec,X-cisco-config,X-cisco-sis-6.0.0,X-cisco-xsi-8.5.1
Content-Length: 0
Reason: SIP;cause=200;text="cisco-alarm:20 Name=SEP0024C442AFCB Load=SIP45.9-3-1SR1-1S Last=phone-keypad"
Expires: 600

Jan 30 09:25:14 VERBOSE[33711] logger.c: --- (14 headers 0 lines)Jan 30 09:25:14 VERBOSE[33711] logger.c: --- (14 headers 0 lines)---
Jan 30 09:25:14 VERBOSE[33711] logger.c: Using latest REGISTER request as basis request
Jan 30 09:25:14 VERBOSE[33711] logger.c: Transmitting (no NAT)
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 86.152.69.250:5060;branch=z9hG4bKf8c5e7ff;received=88.198.69.250
From: <sip:[email protected]>;tag=0024c442afcb006690b72be5-f3af97a3
To: <sip:[email protected]>
Call-ID: [email protected]
CSeq: 199 REGISTER
User-Agent: PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Contact: <sip:[email protected]:27570>
Content-Length: 0


---
Jan 30 09:25:14 VERBOSE[33711] logger.c: Transmitting (no NAT)
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 86.152.69.250:5060;branch=z9hG4bKf8c5e7ff;received=88.198.69.250
From: <sip:[email protected]>;tag=0024c442afcb006690b72be5-f3af97a3
To: <sip:[email protected]>;tag=as09a399ac
Call-ID: [email protected]
CSeq: 199 REGISTER
User-Agent: PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Contact: <sip:[email protected]:27570>
WWW-Authenticate: Digest realm="pbxes.org", nonce="4da247670d1077b622e66a7262e748292e4bf08d"
Content-Length: 0
30.01.2013 10:34 bazmercer is offline Search for Posts by bazmercer Add bazmercer to your Buddy List
i-p
Super Moderator


Registration Date: 14.01.2006
Posts: 4782
RE: nat=no Post Reply with Quote Edit/Delete Post Report Post to a Moderator       IP Information Go to the top of this page

It's the correct response, providing a nonce for encrypted authentication. Your phone probably does not receive the reply. You could do a test without a password and see what happens. For this test you would need to set nat=no again. I suggest you sign up for a PRO account which is free for 14 days. Then you can edit the option under Source View >> sip.conf.
30.01.2013 12:01 i-p-tel is offline Search for Posts by i-p-tel Add i-p-tel to your Buddy List
baz


Registration Date: 01.01.1970
Posts:

RE: nat=no Post Reply with Quote Edit/Delete Post Report Post to a Moderator       IP Information Go to the top of this page

Hm, strange. I'm seeing this:

22:47:30.260577 IP 192.168.1.108.51791 > www1.pbxes.com.5060: SIP, length: 981
22:47:30.379100 IP www3.pbxes.com.27570 > 192.168.1.108.5060: SIP, length: 457
22:47:30.393256 IP www3.pbxes.com.27570 > 192.168.1.108.5060: SIP, length: 572
22:47:30.932572 IP www1.pbxes.com.5060 > 192.168.1.108.52082: SIP, length: 4
22:47:30.932663 IP www1.pbxes.com.5060 > 192.168.1.108.52146: SIP, length: 4
22:47:30.932705 IP www1.pbxes.com.5060 > 192.168.1.108.52061: SIP, length: 4


So I thought "Why does www1 not reply to the right port?" So, I specified www3.pbxes.com and not pbxes.com as the proxy. Are they configured the same? Is my nat=no not set on www1? Either way, we have registration with the impossible Cisco 7945 using www3 smile

edit: but i can't make calls unglücklich

edit 2:
More curious, you only reply on 506 for the initial registration request. Then you seem to revert to the (incorrect for UDP) behavior of replying symetrically.

registration stuff
23:13:28.127162 IP SEP0024C442AFCB.52736 > www3.pbxes.com.5060: SIP, length: 981
23:13:28.230148 IP www3.pbxes.com.27570 > SEP0024C442AFCB.5060: SIP, length: 457
23:13:28.244327 IP www3.pbxes.com.27570 > SEP0024C442AFCB.5060: SIP, length: 572
23:13:28.256626 IP SEP0024C442AFCB.51218 > www3.pbxes.com.5060: SIP, length: 1178
23:13:28.346176 IP www3.pbxes.com.27570 > SEP0024C442AFCB.5060: SIP, length: 457
23:13:28.361915 IP www3.pbxes.com.27570 > SEP0024C442AFCB.5060SIP, length: 544
23:13:28.715275 IP SEP0024C442AFCB.52832 > www3.pbxes.com.5060: SIP, length: 640
23:13:28.743531 IP SEP0024C442AFCB.51669 > www3.pbxes.com.5060: SIP, length: 1352

making a call (part of)
23:15:55.162948 IP (tos 0x78, ttl 45, id 0, offset 0, flags [DF], proto UDP (17), length 906)
www3.pbxes.com.5060 > SEP0024C442AFCB.51738: SIP, length: 878
SIP/2.0 404 Not Found

this isn't right. https://issues.asterisk.org/jira/browse/ASTERISK-17535 maybe?

This post has been edited 4 time(s), it was last edited by baz on 30.01.2013 at 23:21.
30.01.2013 22:54 bazmercer is offline Search for Posts by bazmercer Add bazmercer to your Buddy List
 
Post New Thread Post Reply
Go to:

Powered by Burning Board Lite 1.0.2 © 2001-2004 WoltLab GmbH
English Translation by Satelk