asterisk users - Nov 2010 - Nat Issue - I think

Hi,

I'm using qualify= on my asterisk server that provides outgoing pstn calls
to a few companies.

I've got one client in particular that has their own asterisk server which
is connected to my server.

This client seems to be having a nat issue. It's not a connectivity issue as
i've tried constant pings and the line is up constantly.

I'm getting the following:

[2010-11-13 17:56:27] NOTICE[26082] chan_sip.c: Peer 'client_201' is now
UNREACHABLE!  Last qualify: 29
[2010-11-13 17:56:37] NOTICE[26082] chan_sip.c: Peer 'client _201' is
now Reachable. (26ms / 5000ms)
[2010-11-13 17:58:12] NOTICE[26082] chan_sip.c: Peer 'client _201' is
now UNREACHABLE!  Last qualify: 28
[2010-11-13 17:58:22] NOTICE[26082] chan_sip.c: Peer 'client _201' is
now Reachable. (27ms / 5000ms)
[2010-11-13 17:59:58] NOTICE[26082] chan_sip.c: Peer 'client _201' is
now UNREACHABLE!  Last qualify: 27
[2010-11-13 18:00:08] NOTICE[26082] chan_sip.c: Peer 'client _201' is
now Reachable. (27ms / 5000ms)
[2010-11-13 18:01:43] NOTICE[26082] chan_sip.c: Peer 'client _201' is
now UNREACHABLE!  Last qualify: 29
[2010-11-13 18:01:53] NOTICE[26082] chan_sip.c: Peer 'client _201' is
now Reachable. (28ms / 5000ms)

Looking at the sip log, on the client's server, the sip OPTIONS packets
arent being received. Then suddenly the sip packets start being received again.
(without sending out a new packet to open up the nat mapping). I've tried
replacing the router because I thought it was faulty.

Here is the SIP log from my server: http://pastebin.com/ZbDYGG9R

Finally, I tried mapping port 5060 so to avoid NAT issues, but that didnt help.
Could there be an ISP problem?

Any assistance would be appreciated.
Many thanks
Dan
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.digium.com/pipermail/asterisk-users/attachments/20101113/56f25279/attachment.htm

On Sat, 2010-11-13 at 13:43 -0500, Dan Journo wrote:
> Hi,
> 
>  
> 
> I'm using qualify= on my asterisk server that provides outgoing pstn
> calls to a few companies.
> 
>  
> 
> I've got one client in particular that has their own asterisk server
> which is connected to my server.
> 
>  
> 
> This client seems to be having a nat issue. It's not a connectivity
> issue as i've tried constant pings and the line is up constantly.
> 
>  
> 
> I'm getting the following:
> 
>  
> 
> [2010-11-13 17:56:27] NOTICE[26082] chan_sip.c: Peer 'client_201'
is
> now UNREACHABLE!  Last qualify: 29
> 
> [2010-11-13 17:56:37] NOTICE[26082] chan_sip.c: Peer 'client _201'
is
> now Reachable. (26ms / 5000ms)
> 
> [2010-11-13 17:58:12] NOTICE[26082] chan_sip.c: Peer 'client _201'
is
> now UNREACHABLE!  Last qualify: 28
> 
> [2010-11-13 17:58:22] NOTICE[26082] chan_sip.c: Peer 'client _201'
is
> now Reachable. (27ms / 5000ms)
> 
> [2010-11-13 17:59:58] NOTICE[26082] chan_sip.c: Peer 'client _201'
is
> now UNREACHABLE!  Last qualify: 27
> 
> [2010-11-13 18:00:08] NOTICE[26082] chan_sip.c: Peer 'client _201'
is
> now Reachable. (27ms / 5000ms)
> 
> [2010-11-13 18:01:43] NOTICE[26082] chan_sip.c: Peer 'client _201'
is
> now UNREACHABLE!  Last qualify: 29
> 
> [2010-11-13 18:01:53] NOTICE[26082] chan_sip.c: Peer 'client _201'
is
> now Reachable. (28ms / 5000ms)
> 
>  
> 
> Looking at the sip log, on the client's server, the sip OPTIONS
> packets arent being received. Then suddenly the sip packets start
> being received again. (without sending out a new packet to open up the
> nat mapping). I've tried replacing the router because I thought it was
> faulty.
> 
>  
> 
> Here is the SIP log from my server: http://pastebin.com/ZbDYGG9R
> 
>  
> 
> Finally, I tried mapping port 5060 so to avoid NAT issues, but that
> didnt help. Could there be an ISP problem?
> 
>  
> 
> Any assistance would be appreciated.
> 
> Many thanks
> 
> Dan
> 
These are always loads of fun to try and fix...

Check if the router has a sip ALG than needs disabling such as on XyZel
routers.

Try specifying a port on the phone if possible and forwarding it through
the router.

If you have the resources you could try creating a proxy server that
handles the natting

Ish
-- 
Ishfaq Malik
Software Developer
PackNet Ltd

Office:   0161 660 3062