IPv6 UA Registration results in ICMPv6 port unreachable msg

[mkanada]

1. Brekeke Product Name and Version:
Brekeke SIP Server, 3.5.3.0/424

2. Java version:
1.8.0_86

3. OS type and the version:
Windows 7 Professional, SP1

4. UA (phone), gateway or other hardware/software involved:
Spirent TestCenter SIP emulation

5. Your problem:
I am able to register IPv4 UAs but when I try to register IPv6 UAs the SIP server sends an ICMPv6 Destination Unreachable (Port Unreachable) message. However I am able to ping from the IPv6 UA to the SIP server and vice versa. I have a Wireshark pcap to show the above.

As far as I know, the Windows Firewall is turned off.

For the SIP server configuration I have
a. sip server -> configuration -> system -> ipv6 = on, RFC 3484's ... = off
b. sip server -> configuration -> sip -> thru registration = off
c. I just installed the SIP server and so have not configured User Authentication, Dial Plan, Aliases, Domains

What else should I check or try?

Thanks,
Mike

[snuyzm]

Can you see IPv6 IP address in the SIP Server's status page?

[mkanada]

Hi snuyzm, thank you for your response.
------------------------------------------------------------
Here is what SIP Server -> System -> Status shows:
------------------------------------------------------------
Status Summary
Status: Active
Interface: 192.168.1.2
2001:db8:238:40:2:0:0:202 <----------- this is the address that the REGISTER message is targeting
and receiving the Port Unreachable response.

2001:db8:238:40:48f7:a670:f0d2:4606
2001:db8:238:40:70ed:ab9d:fa3f:c611
fe80:0:0:0:48f7:a670:f0d2:4606%11
fe80:0:0:0:34d2:625a:ee31:58c5%eth3
fe80:0:0:0:507f:9297:dc47:265c%eth6
fe80:0:0:0:ac21:832:3967:a785%eth7
Local Port: 5060
Active Sessions: 0
Multiple Domains: No
------------------------------------------------------------
------------------------------------------------------------
This is what "ipconfig /all" shows for the active NICs:
For "Ethernet adapter Local Area Connection 2":
- the 1st IPv6 address is what is configured via Control Panel.
- I'm not sure where the 2nd IPv6 address is from.
- I am using a 64-bit prefix length
------------------------------------------------------------
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 PT Dual Port Server Adapter #2
Physical Address. . . . . . . . . : 00-15-17-00-43-85
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:db8:238:40:2::202(Preferred)
IPv6 Address. . . . . . . . . . . : 2001:db8:238:40:48f7:a670:f0d2:4606(Preferred)
Temporary IPv6 Address. . . . . . : 2001:db8:238:40:70ed:ab9d:fa3f:c611(Preferred)
Link-local IPv6 Address . . . . . : fe80::48f7:a670:f0d2:4606%11(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : fe80::207:ecff:febd:2406%11
2001:db8:238:40:2::1
192.168.1.1
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
Physical Address. . . . . . . . . : 00-04-23-C6-F7-88
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.108.1.50(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.240.0
Default Gateway . . . . . . . . . : 10.108.0.1
DNS Servers . . . . . . . . . . . : 10.108.0.12
10.8.50.20
10.8.50.21
8.8.8.8
NetBIOS over Tcpip. . . . . . . . : Disabled

[Tata]

Does the SIP UA send SIP packets to the port 5060 over IPv6?

Can you execute the SIP UA on the same PC what the SIP Server is running?

Are there any other firewall software running on the SIP Server's PC?

Have you tried to use another IPv6 IP address what ipconfig shows?

[mkanada]

Hi Tata,

Thank you for the reply.

Does the SIP UA send SIP packets to the port 5060 over IPv6?
Yes the REGISTER packets are using UDP ports (src and dst) 5060.

Can you execute the SIP UA on the same PC what the SIP Server is running?
I do not have any other SIP UAs to try on the same PC. I will look around for one that I can install.

Are there any other firewall software running on the SIP Server's PC?
I checked Windows firewall and it is off. Also to verify I am able to register IPv4 UAs and when i turn the firewall on I no longer can verify the same IPv4 UAs. So AFAIK it is off.

Have you tried to use another IPv6 IP address what ipconfig shows?
I tried but I get the same result....ICMPv6 Port Unreachable.

[Tata]

Can you capture packets at the SIP Server's PC?
So.. did the REGISTER packet reach the port 5060?

To get the SIP Server's log, select "Listener" and "Registrar" at the [Diagnostics]>[Debug Logs] page, and reproduce the problem.

[Tata]

I can register Linphone to my Brekeke SIP Server (ver 3.5.3.0) over UDP/IPv6 without any issues. The SIP Server sends "200 OK" back, and the Registered Clients page shows the Linphone account with its remote IPv6 address.

I'm running my Brekeke SIP Server on Ubuntu.

[mkanada]

Hi Tata,

I couldn't figure out how to attach a file to my forum post so I've provided a download link below.

https://spirent.box.com/s/o8mte0vhycmyzxqczqd8feugv2n3kg3t

This pcap shows an IPv4 UA successfully registering, then ping from the IPv6 UA to the SIP Server and vice versa, and finally the IPv6 UA's unsuccessful registration attempts which results in the ICMPv6 port unreachable message.

Thanks,
Mike

[Tata]

Your SIP packet looks no problem.

Can you access to the SIP Server with the IPv6 address?
http://[2001:db8:238:40:2::202]:8080/sip/
or http://[2001:db8:238:40:2::202]:18080/sip/

Can you try TCP instead of UDP for SIP?

If possible, try Linux instead of Linux.

[mkanada]

Hi Tata,
I'm sorry for the delay. I will try that tomorrow.
Thanks for your help,
Mike

[mkanada]

Hi Tata,

Using TCP for SIP as well as HTTP both resulted in the TCP connection not opening. The SYN was always responded to with a RST, ACK.

I did find a data point that might yield some clues using the netstat command. It shows that port 5060 is associated only with "... ::ffff:192.168.1.2 ..." (see last line of the netstat output below). I'm not sure what that means exactly but I guess it should show something similar to what is listed for the IPv4 side of the SIP Server namely "... 0.0.0.0:5060 ..."

C:\Windows\system32>netstat -an

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3389 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5357 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8081 0.0.0.0:0 LISTENING
<snips>
TCP 127.0.0.1:50081 127.0.0.1:9001 ESTABLISHED
TCP 127.0.0.1:50082 127.0.0.1:9001 ESTABLISHED
TCP 192.168.1.2:139 0.0.0.0:0 LISTENING
TCP 192.168.1.2:5060 0.0.0.0:0 LISTENING
TCP [::]:135 [::]:0 LISTENING
TCP [::]:445 [::]:0 LISTENING
TCP [::]:3389 [::]:0 LISTENING
TCP [::]:5357 [::]:0 LISTENING
<snips>
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:4500 *:*
UDP 0.0.0.0:5060 *:*
UDP 0.0.0.0:5355 *:*
UDP 0.0.0.0:8082 *:*
<snips>
UDP [::]:4500 *:*
UDP [::]:5355 *:*
UDP [::]:8082 *:*
UDP [::]:9962 *:*
UDP [::]:57435 *:*
UDP [::ffff:192.168.1.2]:5060 *:*

Thanks,
Mike

[Tata]

ok.. I enabled IPv6 on my another Brekeke SIP Server running on Windows 2012.

And I could connect Linphone to this SIP Sever over IPv6 successfully.
I found this line in the result of netstat -an
UDP [::]:5060 *:*


How did you assign the IP address 2001:db8:238:40:2::202 to the Windows?
Can you reboot the Brekeke SIP Server and try again?
or can you try another Windows machine?

[mkanada]

Hi Tata,

Thank you for all your help. Although I didn't try on another machine your idea led me to uninstalling and reinstalling the SIP Server and now...
Netstat -an shows:
UDP [::]:5060
and I am able to register my IPv6 SIP UA! YES!!

Thank you so much for your help. I really appreciate it.
Mike

[Tata]

Great!