Dears; It seems my service provider is requesting a complicated settings to allow me to send from behind NAT. What they said: "It shouldn't matter as long as you are handling the NAT correctly your end. We do not fix NAT so if you're sending internal addresses in your INVITEs or SDP then things will fail but if you're handling it correctly, we shouldn't tell the difference". Really, I did not understand what exactly they need. But maybe what they need is to see my public IP address without the private IP address (this what I understood if I am right). I tried to use the following in the [general] settings in the sip.conf localnet=192.168.10.2/255.255.255.254 externadd =196.40.164.239 But even, the calls are drop .. so what I have to do? The following what I get when I enabled the sip debug: <--- SIP read from UDP:194.0.220.220:5060 ---> SIP/2.0 403 UA behind NAT not accepted here Via: SIP/2.0/UDP 192.168.10.2:5060;branch=z9hG4bK123c8781;rport=5060;received=196.40.164.239 From: "asterisk" <sip:gwbilalkwpbx at 192.168.10.2>;tag=as45d7c63b To: <sip:9617565116 at outbound.exxs.com:5060>;tag=84f31a80f7bc633204d0bd8d76e9cb24.53a5 Call-ID: 6f68f414109ba1ff596726c74a0cb5ac at 192.168.10.2:5060 CSeq: 102 INVITE P-Behind-NAT: source Server: Service Provider Global Proxy v2 Content-Length: 0 So what could resolve my problem? Regards Bilal
Dear Bilal, I understood correctly that the problem is that calls drops? What router are you using? Eliezer On 11/13/2012 11:16 PM, bilal ghayyad wrote:> Dears; > > It seems my service provider is requesting a complicated settings to allow me to send from behind NAT. > > What they said: > > "It shouldn't matter as long as you are handling the NAT correctly your end. We do not fix NAT so if you're sending internal addresses in your INVITEs or SDP then things will fail but if you're handling it correctly, we shouldn't tell the difference". > > > Really, I did not understand what exactly they need. But maybe what they need is to see my public IP address without the private IP address (this what I understood if I am right). > > I tried to use the following in the [general] settings in the sip.conf > > localnet=192.168.10.2/255.255.255.254 > externadd =196.40.164.239 > > But even, the calls are drop .. so what I have to do? > > The following what I get when I enabled the sip debug: > > > <--- SIP read from UDP:194.0.220.220:5060 ---> > SIP/2.0 403 UA behind NAT not accepted here > Via: SIP/2.0/UDP 192.168.10.2:5060;branch=z9hG4bK123c8781;rport=5060;received=196.40.164.239 > From: "asterisk"<sip:gwbilalkwpbx at 192.168.10.2>;tag=as45d7c63b > To:<sip:9617565116 at outbound.exxs.com:5060>;tag=84f31a80f7bc633204d0bd8d76e9cb24.53a5 > Call-ID:6f68f414109ba1ff596726c74a0cb5ac at 192.168.10.2:5060 > CSeq: 102 INVITE > P-Behind-NAT: source > Server: Service Provider Global Proxy v2 > Content-Length: 0 > > So what could resolve my problem? > > Regards > Bilal-- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer <at> ngtech.co.il
On 14/11/2012, at 10:16 AM, bilal ghayyad <bilmar_gh at yahoo.com> wrote:> Dears; > > It seems my service provider is requesting a complicated settings to allow me to send from behind NAT. > > What they said: > > "It shouldn't matter as long as you are handling the NAT correctly your end. We do not fix NAT so if you're sending internal addresses in your INVITEs or SDP then things will fail but if you're handling it correctly, we shouldn't tell the difference". > > > Really, I did not understand what exactly they need. But maybe what they need is to see my public IP address without the private IP address (this what I understood if I am right). > > I tried to use the following in the [general] settings in the sip.conf > > localnet=192.168.10.2/255.255.255.254 > externadd =196.40.164.239 >This should be externip not externadd You are still sending them your local address Cheers Duncan
It looks like you need to enable the sip application layer gateway or ALG on your router. The problem is not exactly a Nat issue. The problem is most likely with the sip header keeping the private IP address, the ALG when enabled will change this to your public On 13 Nov 2012, at 21:17, "bilal ghayyad" <bilmar_gh at yahoo.com> wrote:> Dears; > > It seems my service provider is requesting a complicated settings to allow me to send from behind NAT. > > What they said: > > "It shouldn't matter as long as you are handling the NAT correctly your end. We do not fix NAT so if you're sending internal addresses in your INVITEs or SDP then things will fail but if you're handling it correctly, we shouldn't tell the difference". > > > Really, I did not understand what exactly they need. But maybe what they need is to see my public IP address without the private IP address (this what I understood if I am right). > > I tried to use the following in the [general] settings in the sip.conf > > localnet=192.168.10.2/255.255.255.254 > externadd =196.40.164.239 > > But even, the calls are drop .. so what I have to do? > > The following what I get when I enabled the sip debug: > > > <--- SIP read from UDP:194.0.220.220:5060 ---> > SIP/2.0 403 UA behind NAT not accepted here > Via: SIP/2.0/UDP 192.168.10.2:5060;branch=z9hG4bK123c8781;rport=5060;received=196.40.164.239 > From: "asterisk" <sip:gwbilalkwpbx at 192.168.10.2>;tag=as45d7c63b > To: <sip:9617565116 at outbound.exxs.com:5060>;tag=84f31a80f7bc633204d0bd8d76e9cb24.53a5 > Call-ID: 6f68f414109ba1ff596726c74a0cb5ac at 192.168.10.2:5060 > CSeq: 102 INVITE > P-Behind-NAT: source > Server: Service Provider Global Proxy v2 > Content-Length: 0 > > So what could resolve my problem? > > Regards > Bilal > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > New to Asterisk? Join us for a live introductory webinar every Thurs: > http://www.asterisk.org/hello > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >
On 12-11-13 01:16 PM, bilal ghayyad wrote:> Dears; > > It seems my service provider is requesting a complicated settings to allow me to send from behind NAT. > > What they said: > > "It shouldn't matter as long as you are handling the NAT correctly your end. We do not fix NAT so if you're sending internal addresses in your INVITEs or SDP then things will fail but if you're handling it correctly, we shouldn't tell the difference". > > > Really, I did not understand what exactly they need. But maybe what they need is to see my public IP address without the private IP address (this what I understood if I am right). > > I tried to use the following in the [general] settings in the sip.conf > > localnet=192.168.10.2/255.255.255.254 > externadd =196.40.164.239 >I think these setting are all wrong: 1. local network should be something like: 192.168.10.0 2. Subnetmask cant' be 255.255.255.254 ! 3. externip=x.x.x.x (Not "externadd") Jian> But even, the calls are drop .. so what I have to do? > > The following what I get when I enabled the sip debug: > > > <--- SIP read from UDP:194.0.220.220:5060 ---> > SIP/2.0 403 UA behind NAT not accepted here > Via: SIP/2.0/UDP 192.168.10.2:5060;branch=z9hG4bK123c8781;rport=5060;received=196.40.164.239 > From: "asterisk" <sip:gwbilalkwpbx at 192.168.10.2>;tag=as45d7c63b > To: <sip:9617565116 at outbound.exxs.com:5060>;tag=84f31a80f7bc633204d0bd8d76e9cb24.53a5 > Call-ID: 6f68f414109ba1ff596726c74a0cb5ac at 192.168.10.2:5060 > CSeq: 102 INVITE > P-Behind-NAT: source > Server: Service Provider Global Proxy v2 > Content-Length: 0 > > So what could resolve my problem? > > Regards > Bilal > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > New to Asterisk? Join us for a live introductory webinar every Thurs: > http://www.asterisk.org/hello > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >--
Dears; What Jian said is the right and it worked. But I have the following questions: Why 192.168.10.2 is wrong and I have to use 192.168.10.0? Also, do I have to set the localnet or it is enough to set the externip?
Possibly Parallel Threads
- What is the best softphone work with Asterisk
- [FORGED] Generating random data with non-linear correlation between two variables
- Fring: Open VPN client to be installed on the mobile, which mobile?
- asterisk-gui: read/write in the conf files or db
- Sending SMS from asterisk