Author |
Message |
mkanada Brekeke Junior Member
Joined: 30 Dec 2015 Posts: 7
|
Posted: Thu Dec 31, 2015 12:57 pm Post subject: IPv6 UA Registration results in ICMPv6 port unreachable msg |
|
|
1. Brekeke Product Name and Version:
Brekeke SIP Server, 3.5.3.0/424
2. Java version:
1.8.0_86
3. OS type and the version:
Windows 7 Professional, SP1
4. UA (phone), gateway or other hardware/software involved:
Spirent TestCenter SIP emulation
5. Your problem:
I am able to register IPv4 UAs but when I try to register IPv6 UAs the SIP server sends an ICMPv6 Destination Unreachable (Port Unreachable) message. However I am able to ping from the IPv6 UA to the SIP server and vice versa. I have a Wireshark pcap to show the above.
As far as I know, the Windows Firewall is turned off.
For the SIP server configuration I have
a. sip server -> configuration -> system -> ipv6 = on, RFC 3484's ... = off
b. sip server -> configuration -> sip -> thru registration = off
c. I just installed the SIP server and so have not configured User Authentication, Dial Plan, Aliases, Domains
What else should I check or try?
Thanks,
Mike |
|
Back to top |
|
snuyzm Brekeke Talented
Joined: 11 Feb 2015 Posts: 97
|
Posted: Fri Jan 01, 2016 4:16 pm Post subject: |
|
|
Can you see IPv6 IP address in the SIP Server's status page? |
|
Back to top |
|
mkanada Brekeke Junior Member
Joined: 30 Dec 2015 Posts: 7
|
Posted: Mon Jan 04, 2016 10:45 am Post subject: |
|
|
Hi snuyzm, thank you for your response.
------------------------------------------------------------
Here is what SIP Server -> System -> Status shows:
------------------------------------------------------------
Status Summary
Status: Active
Interface: 192.168.1.2
2001:db8:238:40:2:0:0:202 <----------- this is the address that the REGISTER message is targeting
and receiving the Port Unreachable response.
2001:db8:238:40:48f7:a670:f0d2:4606
2001:db8:238:40:70ed:ab9d:fa3f:c611
fe80:0:0:0:48f7:a670:f0d2:4606%11
fe80:0:0:0:34d2:625a:ee31:58c5%eth3
fe80:0:0:0:507f:9297:dc47:265c%eth6
fe80:0:0:0:ac21:832:3967:a785%eth7
Local Port: 5060
Active Sessions: 0
Multiple Domains: No
------------------------------------------------------------
------------------------------------------------------------
This is what "ipconfig /all" shows for the active NICs:
For "Ethernet adapter Local Area Connection 2":
- the 1st IPv6 address is what is configured via Control Panel.
- I'm not sure where the 2nd IPv6 address is from.
- I am using a 64-bit prefix length
------------------------------------------------------------
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 PT Dual Port Server Adapter #2
Physical Address. . . . . . . . . : 00-15-17-00-43-85
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:db8:238:40:2::202(Preferred)
IPv6 Address. . . . . . . . . . . : 2001:db8:238:40:48f7:a670:f0d2:4606(Preferred)
Temporary IPv6 Address. . . . . . : 2001:db8:238:40:70ed:ab9d:fa3f:c611(Preferred)
Link-local IPv6 Address . . . . . : fe80::48f7:a670:f0d2:4606%11(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : fe80::207:ecff:febd:2406%11
2001:db8:238:40:2::1
192.168.1.1
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
Physical Address. . . . . . . . . : 00-04-23-C6-F7-88
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.108.1.50(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.240.0
Default Gateway . . . . . . . . . : 10.108.0.1
DNS Servers . . . . . . . . . . . : 10.108.0.12
10.8.50.20
10.8.50.21
8.8.8.8
NetBIOS over Tcpip. . . . . . . . : Disabled |
|
Back to top |
|
Tata Brekeke Master Guru
Joined: 27 Jan 2008 Posts: 223
|
Posted: Thu Jan 07, 2016 11:14 am Post subject: |
|
|
Does the SIP UA send SIP packets to the port 5060 over IPv6?
Can you execute the SIP UA on the same PC what the SIP Server is running?
Are there any other firewall software running on the SIP Server's PC?
Have you tried to use another IPv6 IP address what ipconfig shows? |
|
Back to top |
|
mkanada Brekeke Junior Member
Joined: 30 Dec 2015 Posts: 7
|
Posted: Thu Jan 07, 2016 7:32 pm Post subject: |
|
|
Hi Tata,
Thank you for the reply.
Does the SIP UA send SIP packets to the port 5060 over IPv6?
Yes the REGISTER packets are using UDP ports (src and dst) 5060.
Can you execute the SIP UA on the same PC what the SIP Server is running?
I do not have any other SIP UAs to try on the same PC. I will look around for one that I can install.
Are there any other firewall software running on the SIP Server's PC?
I checked Windows firewall and it is off. Also to verify I am able to register IPv4 UAs and when i turn the firewall on I no longer can verify the same IPv4 UAs. So AFAIK it is off.
Have you tried to use another IPv6 IP address what ipconfig shows?
I tried but I get the same result....ICMPv6 Port Unreachable. |
|
Back to top |
|
Tata Brekeke Master Guru
Joined: 27 Jan 2008 Posts: 223
|
Posted: Thu Jan 07, 2016 8:16 pm Post subject: |
|
|
Can you capture packets at the SIP Server's PC?
So.. did the REGISTER packet reach the port 5060?
To get the SIP Server's log, select "Listener" and "Registrar" at the [Diagnostics]>[Debug Logs] page, and reproduce the problem. |
|
Back to top |
|
Tata Brekeke Master Guru
Joined: 27 Jan 2008 Posts: 223
|
Posted: Thu Jan 07, 2016 10:12 pm Post subject: |
|
|
I can register Linphone to my Brekeke SIP Server (ver 3.5.3.0) over UDP/IPv6 without any issues. The SIP Server sends "200 OK" back, and the Registered Clients page shows the Linphone account with its remote IPv6 address.
I'm running my Brekeke SIP Server on Ubuntu. |
|
Back to top |
|
mkanada Brekeke Junior Member
Joined: 30 Dec 2015 Posts: 7
|
Posted: Fri Jan 08, 2016 1:15 pm Post subject: |
|
|
Hi Tata,
I couldn't figure out how to attach a file to my forum post so I've provided a download link below.
https://spirent.box.com/s/o8mte0vhycmyzxqczqd8feugv2n3kg3t
This pcap shows an IPv4 UA successfully registering, then ping from the IPv6 UA to the SIP Server and vice versa, and finally the IPv6 UA's unsuccessful registration attempts which results in the ICMPv6 port unreachable message.
Thanks,
Mike |
|
Back to top |
|
Tata Brekeke Master Guru
Joined: 27 Jan 2008 Posts: 223
|
|
Back to top |
|
mkanada Brekeke Junior Member
Joined: 30 Dec 2015 Posts: 7
|
Posted: Tue Jan 12, 2016 7:05 pm Post subject: |
|
|
Hi Tata,
I'm sorry for the delay. I will try that tomorrow.
Thanks for your help,
Mike |
|
Back to top |
|
mkanada Brekeke Junior Member
Joined: 30 Dec 2015 Posts: 7
|
Posted: Wed Jan 13, 2016 7:20 pm Post subject: |
|
|
Hi Tata,
Using TCP for SIP as well as HTTP both resulted in the TCP connection not opening. The SYN was always responded to with a RST, ACK.
I did find a data point that might yield some clues using the netstat command. It shows that port 5060 is associated only with "... ::ffff:192.168.1.2 ..." (see last line of the netstat output below). I'm not sure what that means exactly but I guess it should show something similar to what is listed for the IPv4 side of the SIP Server namely "... 0.0.0.0:5060 ..."
C:\Windows\system32>netstat -an
Active Connections
Proto Local Address Foreign Address State
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3389 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5357 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8081 0.0.0.0:0 LISTENING
<snips>
TCP 127.0.0.1:50081 127.0.0.1:9001 ESTABLISHED
TCP 127.0.0.1:50082 127.0.0.1:9001 ESTABLISHED
TCP 192.168.1.2:139 0.0.0.0:0 LISTENING
TCP 192.168.1.2:5060 0.0.0.0:0 LISTENING
TCP [::]:135 [::]:0 LISTENING
TCP [::]:445 [::]:0 LISTENING
TCP [::]:3389 [::]:0 LISTENING
TCP [::]:5357 [::]:0 LISTENING
<snips>
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:4500 *:*
UDP 0.0.0.0:5060 *:*
UDP 0.0.0.0:5355 *:*
UDP 0.0.0.0:8082 *:*
<snips>
UDP [::]:4500 *:*
UDP [::]:5355 *:*
UDP [::]:8082 *:*
UDP [::]:9962 *:*
UDP [::]:57435 *:*
UDP [::ffff:192.168.1.2]:5060 *:*
Thanks,
Mike |
|
Back to top |
|
Tata Brekeke Master Guru
Joined: 27 Jan 2008 Posts: 223
|
Posted: Thu Jan 14, 2016 12:56 pm Post subject: |
|
|
ok.. I enabled IPv6 on my another Brekeke SIP Server running on Windows 2012.
And I could connect Linphone to this SIP Sever over IPv6 successfully.
I found this line in the result of netstat -an
UDP [::]:5060 *:*
How did you assign the IP address 2001:db8:238:40:2::202 to the Windows?
Can you reboot the Brekeke SIP Server and try again?
or can you try another Windows machine? |
|
Back to top |
|
mkanada Brekeke Junior Member
Joined: 30 Dec 2015 Posts: 7
|
Posted: Thu Jan 14, 2016 3:58 pm Post subject: |
|
|
Hi Tata,
Thank you for all your help. Although I didn't try on another machine your idea led me to uninstalling and reinstalling the SIP Server and now...
Netstat -an shows:
UDP [::]:5060
and I am able to register my IPv6 SIP UA! YES!!
Thank you so much for your help. I really appreciate it.
Mike |
|
Back to top |
|
Tata Brekeke Master Guru
Joined: 27 Jan 2008 Posts: 223
|
Posted: Thu Jan 14, 2016 5:27 pm Post subject: |
|
|
Great! |
|
Back to top |
|
|