Hi, I have two Asterisks identically installed on two computers. One of them is directly connected to the Internet, the other one through a NAT router (Netgear MR314). On the one behind the router I have an X100P card installed for PSTN connections. In the local LAN of each PBX they are several hardware IP phones (Cisco 7960 and 7940 with SIP images, firmware image P0S3-04-4-00.bin). I have defined the following extension in the one behind the NAT: exten => _3XX,1,Dial(IAX/apbx@x.y.z.u/${EXTEN}) exten => _3XX,2,Hangup exten => _3XX,102,Hangup where x.y.z.u is the IP address of the PBX directly connected to the internet. apbx is the IAX user defined on that PBX in iax.conf file like that: [apbx] type=user username=apbx auth=plaintext permit=n.n.n.n/255.255.255.0 ; n.n.n.n external NAT router address host=dynamic context=fullaccess ;allow=all In this way, I can call any 3XX extension using an IAX connection between the two PBX's. It works perfect. Now, on the other PBX I have the following in extensions.conf exten => _1XX,1,Dial(IAX/pspbx@n.n.n.n/${EXTEN}) exten => _1XX,2,Hangup exten => _1XX,102,Hangup where n.n.n.n is the external IP address of the NAT router. pspbx is the IAX user defined on the PBX behind the router, in iax.conf file like that: [pspbx] type=user username=pspbx auth=plaintext permit=0.0.0.0/0.0.0.0 host=dynamic context=fullaccess ;allow=all When I try to call extension 103, I get on the local PBX console (the one connected directly to the internet): -- Executing Dial("SIP/351-d7ca", "IAX/pspbx@n.n.n.n/103") in new stack -- Calling using options 'exten=103;callerid="MyOffice"<351>;language=en;username=pspbx;formats=2;cap ability=65283;version=1;adsicpe=2' -- Called pspbx@n.n.n.n/103 == No one is available to answer at this time -- Hungup 'IAX[n.n.n.n:5036]/46' -- Executing Hangup("SIP/351-d7ca", "") in new stack == Spawn extension (fullaccess, 103, 2) exited non-zero on 'SIP/351-d7ca' and a busy tone. Nothing one the console of the other PBX. The PBX behind the NAT is in DMZ (so completely exposed to the internet). Making a VPN connection between the two PBX (using PPTP) it works in both direction, so this is only a NAT related issue. I have missed something in configuring the system? Thanks and best regards, Dan
dtoma@fx.ro ("Dan") writes: [snip]> Now, on the other PBX I have the following in extensions.conf > > exten => _1XX,1,Dial(IAX/pspbx@n.n.n.n/${EXTEN}) > exten => _1XX,2,Hangup > exten => _1XX,102,Hangup > > where n.n.n.n is the external IP address of the NAT router. > pspbx is the IAX user defined on the PBX behind the router, in iax.conf file > like that: > > [pspbx] > type=user > username=pspbx > auth=plaintext > permit=0.0.0.0/0.0.0.0 > host=dynamic > context=fullaccess > ;allow=all > > When I try to call extension 103, I get on the local PBX console (the one > connected directly to the internet): > > -- Executing Dial("SIP/351-d7ca", "IAX/pspbx@n.n.n.n/103") in new stack > -- Calling using options > 'exten=103;callerid="MyOffice"<351>;language=en;username=pspbx;formats=2;cap > ability=65283;version=1;adsicpe=2' > -- Called pspbx@n.n.n.n/103 > == No one is available to answer at this time > -- Hungup 'IAX[n.n.n.n:5036]/46' > -- Executing Hangup("SIP/351-d7ca", "") in new stack > == Spawn extension (fullaccess, 103, 2) exited non-zero on 'SIP/351-d7ca' > > and a busy tone. > Nothing one the console of the other PBX. > > The PBX behind the NAT is in DMZ (so completely exposed to the internet). > Making a VPN connection between the two PBX (using PPTP) it works in both > direction, so this is only a NAT related issue.Is your firewall redirecting incoming connections on n.n.n.n:5036 to the Internal Asterisk instance? If you don't see any messages on the inside Asterisk box it's unlikely. The best thing to do is probably do a tcpdump -n -i eth0 host n.n.n.n and host x.y.z.u (or similar) and try and diagnose what is actually being sent over the wire. Simon
I may be wrong here but wouldn't a register line in the iax.conf on the systems behind the NAT keep the port open so connections couyld be made to it??> Hi, > > I have two Asterisks identically installed on two computers. > One of them is directly connected to the Internet, the other one through a > NAT router (Netgear MR314). > On the one behind the router I have an X100P card installed for PSTN > connections. > In the local LAN of each PBX they are several hardware IP phones (Cisco 7960 > and 7940 with SIP images, firmware image P0S3-04-4-00.bin). > > I have defined the following extension in the one behind the NAT: > > exten => _3XX,1,Dial(IAX/apbx@x.y.z.u/${EXTEN}) > exten => _3XX,2,Hangup > exten => _3XX,102,Hangup > > where x.y.z.u is the IP address of the PBX directly connected to the > internet. > apbx is the IAX user defined on that PBX in iax.conf file like that: > > [apbx] > type=user > username=apbx > auth=plaintext > permit=n.n.n.n/255.255.255.0 ; n.n.n.n external NAT router address > host=dynamic > context=fullaccess > ;allow=all > > In this way, I can call any 3XX extension using an IAX connection between > the two PBX's. > It works perfect. > > Now, on the other PBX I have the following in extensions.conf > > exten => _1XX,1,Dial(IAX/pspbx@n.n.n.n/${EXTEN}) > exten => _1XX,2,Hangup > exten => _1XX,102,Hangup > > where n.n.n.n is the external IP address of the NAT router. > pspbx is the IAX user defined on the PBX behind the router, in iax.conf file > like that: > > [pspbx] > type=user > username=pspbx > auth=plaintext > permit=0.0.0.0/0.0.0.0 > host=dynamic > context=fullaccess > ;allow=all > > When I try to call extension 103, I get on the local PBX console (the one > connected directly to the internet): > > -- Executing Dial("SIP/351-d7ca", "IAX/pspbx@n.n.n.n/103") in new stack > -- Calling using options > 'exten=103;callerid="MyOffice"<351>;language=en;username=pspbx;formats=2;cap > ability=65283;version=1;adsicpe=2' > -- Called pspbx@n.n.n.n/103 > == No one is available to answer at this time > -- Hungup 'IAX[n.n.n.n:5036]/46' > -- Executing Hangup("SIP/351-d7ca", "") in new stack > == Spawn extension (fullaccess, 103, 2) exited non-zero on 'SIP/351-d7ca' > > and a busy tone. > Nothing one the console of the other PBX. > > The PBX behind the NAT is in DMZ (so completely exposed to the internet). > Making a VPN connection between the two PBX (using PPTP) it works in both > direction, so this is only a NAT related issue. > > I have missed something in configuring the system? > > > Thanks and best regards, > Dan > > > > > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users-- ______________________________________________ http://www.linuxmail.org/ Now with e-mail forwarding for only US$5.95/yr Powered by Outblaze
REMOVE ----- Original Message ----- From: "Dan" <dtoma@fx.ro> To: <Asterisk-Users@lists.digium.com> Sent: Thursday, June 26, 2003 7:38 AM Subject: [Asterisk-Users] Asterisk, IAX and NAT issue> Hi, > > I have two Asterisks identically installed on two computers. > One of them is directly connected to the Internet, the other one through a > NAT router (Netgear MR314). > On the one behind the router I have an X100P card installed for PSTN > connections. > In the local LAN of each PBX they are several hardware IP phones (Cisco7960> and 7940 with SIP images, firmware image P0S3-04-4-00.bin). > > I have defined the following extension in the one behind the NAT: > > exten => _3XX,1,Dial(IAX/apbx@x.y.z.u/${EXTEN}) > exten => _3XX,2,Hangup > exten => _3XX,102,Hangup > > where x.y.z.u is the IP address of the PBX directly connected to the > internet. > apbx is the IAX user defined on that PBX in iax.conf file like that: > > [apbx] > type=user > username=apbx > auth=plaintext > permit=n.n.n.n/255.255.255.0 ; n.n.n.n external NAT router address > host=dynamic > context=fullaccess > ;allow=all > > In this way, I can call any 3XX extension using an IAX connection between > the two PBX's. > It works perfect. > > Now, on the other PBX I have the following in extensions.conf > > exten => _1XX,1,Dial(IAX/pspbx@n.n.n.n/${EXTEN}) > exten => _1XX,2,Hangup > exten => _1XX,102,Hangup > > where n.n.n.n is the external IP address of the NAT router. > pspbx is the IAX user defined on the PBX behind the router, in iax.conffile> like that: > > [pspbx] > type=user > username=pspbx > auth=plaintext > permit=0.0.0.0/0.0.0.0 > host=dynamic > context=fullaccess > ;allow=all > > When I try to call extension 103, I get on the local PBX console (the one > connected directly to the internet): > > -- Executing Dial("SIP/351-d7ca", "IAX/pspbx@n.n.n.n/103") in newstack> -- Calling using options >'exten=103;callerid="MyOffice"<351>;language=en;username=pspbx;formats=2;cap> ability=65283;version=1;adsicpe=2' > -- Called pspbx@n.n.n.n/103 > == No one is available to answer at this time > -- Hungup 'IAX[n.n.n.n:5036]/46' > -- Executing Hangup("SIP/351-d7ca", "") in new stack > == Spawn extension (fullaccess, 103, 2) exited non-zero on'SIP/351-d7ca'> > and a busy tone. > Nothing one the console of the other PBX. > > The PBX behind the NAT is in DMZ (so completely exposed to the internet). > Making a VPN connection between the two PBX (using PPTP) it works in both > direction, so this is only a NAT related issue. > > I have missed something in configuring the system? > > > Thanks and best regards, > Dan > > > > > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users >
Thanks, Dan ----- Original Message ----- From: "Simon J Mudd" <sjmudd@pobox.com> To: <asterisk-users@lists.digium.com> Sent: Sunday, June 29, 2003 1:15 PM Subject: Re: [Asterisk-Users] Asterisk, IAX and NAT issue> dtoma@fx.ro ("Dan") writes: > > > It is solved now.... It was a problem at the ISP level..... some UDPpackets> > filtered.. > > Pleased you have managed to solve the problem. > > Simon > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users > >