NAT Traversal issue again

Yehudah_Panzer · Post by **Yehudah_Panzer** » Thu May 20, 2010 7:33 am

1. Brekeke Product Name and version:
Brekeke PBX ver. 2.4.4.8 Pro

2. Java version:

3. OS type and the version:
Linux Ubuntu 9.04

4. UA (phone), gateway or other hardware/software involved:
IPphones : VigorPhone 350; Cisco SPA5xxG; AudioCodes MP-118

5. Select your network pattern from http://www.brekeke-sip.com/bbs/network/ ... terns.html :
Pattern 8

6. Your problem:
There is PBX installed into LAN behind NAT. LAN subnet is 192.168.x.x. Internet (public) IP address of border router is 10.0.0.20, and there FW disabled on it. PAT (Port Address Translation) is configured correctly as described in the manual :
incoming UDP packages to port 5060 as well as to port range 10000-11000 are redirected to PBX.
All suggested configurations within ARS and SIP Proxy has been done, mentioned in manual and on forum as well.
Additionally, the PBX has (must has) two interconnections with public telephony network :
PSTN through VoIP MGW - works tolerantly (it's another story);
to ITSP's SoftSwitch through NAT

The issue : The PBX doesn't even try to send REGISTER to ITSP's SS. I have the sniffer installed in PBX's server so I can monitor all protocol transactions. There is nothing even when I manually press [Register] button within appropriate ARS rule.

SIP Proxy Server's status shows two IP addresses on PBX status page : LAN IP address of assigned to server NIC; and public IP address of border router (here 10.0.0.20).

Sometimes I'm observing the following phenomenon :
On PBX status window the message appears :
"Registered successfully - 10.0.0.20@192.168.x.x" - where right IP address is equal to PBX's local IP address. The correspondent registration note appears in Registred Clients list of SIP Proxy.

Is there some ideas what I did wrongly ?

P.S. : Outbound calls from PBX to ITSP are passing without problem. However, somebody may to call to my PBX from ITS only when registration of PBX on ITSP's SS to be done. Authentication parameters for interconnection with ITSP has been checked more times (All above located in lab

)

hope · Post by **hope** » Thu May 20, 2010 9:25 am

do you mean 10.0.0.20 is the global ip address of the router which your pbx server connect to?
i think both 10.x.x.x and 192.168.x.x are for private ip addresses

Yehudah_Panzer · Post by **Yehudah_Panzer** » Thu May 20, 2010 1:59 pm

Correct, both mentioned IP addresses are private. All described complex deployed in laboratory. PBX must register on ITSP SS (deployed in a lab too). The connection to PSTN through VoIP MGW is real and using for outgoing calls from an office.
However, I want to check NAT Traversal in lab trial before field deployment.

So, you should not pay your attention to IP addresses. The target is the issue

hope · Post by **hope** » Fri May 21, 2010 12:51 pm

what is your ARS like for this itsp?

Yehudah_Panzer · Post by **Yehudah_Panzer** » Tue May 25, 2010 1:46 am

The ARS for interconnection with ITSP is :

Register URI : 10.0.0.1
Proxy address : 10.0.0.1
User : 445550000
Password : *******
Register Expire : 3600
Register update : 90

Patterns
Pattern - OUT

[Matching patterns]

To : sip:(44.{7})@

[Deploy patterns]

From : sip:445550000@
To : $1@10.0.0.1:5060

[Parameters]

RTP relay : on
Block SIP INFO : no
Next route on failure : no

Remaining parameters within this pattern are with default values.

10.0.0.1 is IP address of ITSP's softswitch (SS), listening port of SS is default - 5060. Phone numbers are presented on National format according E.164.
Within Deploy pattern I'm putting sip:44555000 to From field. It's DOD.

hope · Post by **hope** » Tue May 25, 2010 11:40 am

try Register URI : sip:445550000@10.0.0.1

Yehudah_Panzer · Post by **Yehudah_Panzer** » Wed May 26, 2010 1:35 pm

I did it. There is nothing has changed. Sniffer shows the PBX doesn't still sends REGISTER request to ITSP's softswitch.

Upper and Thru Registration options are OFF within SIP Proxy.

Are there any ideas else?

Harold · Post by **Harold** » Thu May 27, 2010 11:15 am

Set "On" at the Thru Registration.

Yehudah_Panzer · Post by **Yehudah_Panzer** » Fri May 28, 2010 12:37 am

Owo ! It's working ! Let me resume :
In my case described above, PBX registered in ITSP's SoftSwitch with following configuration :

1. SIP Proxy -> Configuration -> SIP -> Thru registration = ON

2. PBX -> ARS -> [appropriate rule for ITSP] ->
-> Register URI = sip:445550000@10.0.0.1 (ITSP's softswitch public IP. It's registering in this manner only)

-> [appropriate data within User & Password fields]

Outcome

1. The Registration Status is "Registered" in corresponding ARS of PBX
2. In Proxy -> Registered clients there are two recordings appeared :

User = 10.0.0.1 (ITSP's SoftSwitch public IP address)
Contact URI = sip:10.0.0.1:5060

AND

User = 445550000
Contact URI = sip:445550000@127.0.1.1:5060

Into details field of both above recordings shown :

User Agent : Brekeke PBX
Requester : <my_PBX_local_IP_address>:15060

Must above two recordings exist within Registration table ? Is it correct ?

Another one thing regarding NAT Traversal shell be an issue, I thought. During tracing incoming calls from ITSP's public network I observed that PBX informs remote UA with wrong RTP destination port number (for further RTP transmission TO PBX). PBX placed the value of port number to the range : 11000 and above. It looks the following within SDP message body of SIP response "200 OK" :

For instance, SDP message :

(c) : 10.0.0.20 (it's my border router's public IP)
(s) : audio 11996 RTP/AVP 8 101 (I prefer to use G.711a in lab test)

However, I partially found the answer for my question here : http://wiki.brekeke.com/wiki/Using-Brek ... a-firewall

I would like to ask : where is described port ranges defined within Proxy and PBX configuration ? I find only defined RTP ports range within Proxy configuration (Configuration -> RTP).

hope and Harold - thank you for your help !

hope · Post by **hope** » Fri May 28, 2010 9:43 am

Must above two recordings exist within Registration table ? Is it correct ?

normally, only 445550000 one shown at registered clients.
are the both the same registration time in the detail column?
if delete both registration record and register ARS again, are both showing?

where is described port ranges defined within Proxy and PBX configuration ?

sip server rtp port defined at sip server side/configuration/rtp
pbx rtp ports defined at pbx side/Options/settings
there are fields "min port" and "max port" at "PBX system settings" and "Media Server system settings"

Yehudah_Panzer · Post by **Yehudah_Panzer** » Mon May 31, 2010 12:07 pm

hope wrote: normally, only 445550000 one shown at registered clients.
are the both the same registration time in the detail column?
if delete both registration record and register ARS again, are both showing?

I'm re-registering as you have suggested above. Exactly, there is only registration of 445550000 appeared :

User = 445550000
Contact URI = sip:445550000@127.0.1.1:15060