I have an Asterisk 1.4.19.1 server that is behind a Fortinet firewall. Localnet is 192.168.2.0/255.255.255.0 and all external sip devices look as if they are on the same local network because the Fortinet rewrites the incoming IP as its own address. The problem I have is that when I set "externip=148.XXX.XXX.XXX" it is being ignored and I can see SDP packets that have the internal network number of the server (192.168.2.24). Since the SPA3102 has symmetric RTP it simply ignores the internal IP address and sends the rtp back to the same address it received it from they work fine. The problem is the PAP2T that receives the internal address and tries to send rtp there and obviously fails. I have nat=yes and canreinvite=no on all devices, both on the global sip.conf and on each device. If I set "externhost" and remove the localnet I can get the PAP2T to work but the SPA3102 goes crazy. This is a NAT issue. This is the first time I deal with a firewall that rewrites the incoming address so I am guessing that may be the problem. Is there a work around for this situation? -- Telecomunicaciones Abiertas de M?xico S.A. de C.V. Carlos Ch?vez Prats Director de Tecnolog?a +52-55-91169161 ext 2001 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.digium.com/pipermail/asterisk-users/attachments/20080512/04cd46bf/attachment-0001.pgp