I have an * box behind a NAT router (static NAT, port ACLs set up correctly) Most of the SIP users are on the local subnet with the * box, they work fine Take one of the same users off of the local subnet and come in through the NAT router and these results; The remote user can register The remote user can receive calls The remote user can get into voicemail ???? not sure why The remote user can not place calls The trace shows 407, proxy authentication required Asterisk shows failed to authenticate user. This is clearly NAT related as the same user works fine inside the NAT with no config changes Is there are a way to connect to an Asterisk server that sits behind NAT without breaking the ability to connect form the local non-NATed subnet? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20050714/99348623/attachment.htm
> Asterisk shows failed to authenticate user. > > This is clearly NAT related as the same user works fine inside the NAT with > no config changesWhat phone? How is the server and proxy info configured? There is no problem witht he setup assuming ports are set up properly. Sounds more like a wrong entry in the phone for outgoing proxy, or something.
> -----Original Message----- > From: asterisk-users-bounces@lists.digium.com [mailto:asterisk-users- > bounces@lists.digium.com] On Behalf Of Wilson Pickett > Sent: Friday, July 15, 2005 1:25 AM > To: Asterisk Users Mailing List - Non-Commercial Discussion > Subject: Re: [Asterisk-Users] * behind NAT and local subnet > > > Asterisk shows failed to authenticate user. > > > > This is clearly NAT related as the same user works fine inside theNAT> with > > no config changes > > What phone? How is the server and proxy info configured? There is no > problem witht he setup assuming ports are set up properly. Sounds more > like a wrong entry in the phone for outgoing proxy, or something.Snom 190 phone Registrar is set to the public IP address side of the NAT in front of the * box. Under advanced line settings outbound proxy is null Phone registers, and can receive calls.
Have you set correctly the externip and localnet keywords in sip.conf? Julian. On 7/15/05, Damon Estep <damon@suburbanbroadband.net> wrote:> I have an * box behind a NAT router (static NAT, port ACLs set up correctly) > > Most of the SIP users are on the local subnet with the * box, they work fine > > Take one of the same users off of the local subnet and come in through the > NAT router and these results;
Thanks for your help, I think setting the externip breaks non NATd clients because it mangles the SIP headers by spoofing the source IP of SIP messages, correct? I was able to resolve this issue by upgrading the Cisco router IOS to 12.3-15 which apparently does a better job with SIP header NAT.> -----Original Message----- > From: asterisk-users-bounces@lists.digium.com [mailto:asterisk-users- > bounces@lists.digium.com] On Behalf Of Julian J. M. > Sent: Friday, July 15, 2005 12:01 PM > To: Asterisk Users Mailing List - Non-Commercial Discussion > Subject: Re: [Asterisk-Users] * behind NAT and local subnet > > Have you set correctly the externip and localnet keywords in sip.conf? > > Julian. > > On 7/15/05, Damon Estep <damon@suburbanbroadband.net> wrote: > > I have an * box behind a NAT router (static NAT, port ACLs set up > correctly) > > > > Most of the SIP users are on the local subnet with the * box, theywork> fine > > > > Take one of the same users off of the local subnet and come inthrough> the > > NAT router and these results; > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users