Hi all, I've got a bunch of Polycom 301's at a site that sits behind a Sonicwall firewall. What I'm seeing is that the phones are constantly becoming unavailable, followed shortly by becoming available again. The phones register just fine and sound great on out-bound calls. The phones are configured NAT=yes and type=friend, as I do with all my Polycoms. A sniffer trace indicates that Asterisk is sending an OPTIONS request to the phones but no reply is being sent... most of the time. I'm thinking it's a firewall/NAT timeout issue. Has anyone seen this? Has anyone fixed it? Any ideas, otherwise? TIA. -- Take care and have fun, Mike Diehl.
Patrick Lists
2011-Oct-13 16:47 UTC
[asterisk-users] Phones flapping with * and Sonicwall.
On 10/13/2011 06:21 PM, Mike Diehl wrote:> I'm thinking it's a firewall/NAT timeout issue. Has anyone seen this? Has > anyone fixed it? Any ideas, otherwise?Did you try turning off the SIP ALG on the Sonicwall? Regards, Patrick
Have you tried adding 'qualify=no' in the peer definition? Are all the natted phones using port 5060 as their SIP port? I don't know how many "a bunch" is but if it's not too many you might try having each phone bind to a different port for its SIP signaling, sometimes that is helpful with strict firewalls. e.g. Mary x102 use port 50102 John x114 use port 50114 This port would need to be set at the endpoint itself either manually or via the provisioning server, setting it in Asterisk has no effect. Just an idea. Luke -----Original Message----- From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Mike Diehl Sent: Thursday, October 13, 2011 12:22 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: [asterisk-users] Phones flapping with * and Sonicwall. Hi all, I've got a bunch of Polycom 301's at a site that sits behind a Sonicwall firewall. What I'm seeing is that the phones are constantly becoming unavailable, followed shortly by becoming available again. The phones register just fine and sound great on out-bound calls. The phones are configured NAT=yes and type=friend, as I do with all my Polycoms. A sniffer trace indicates that Asterisk is sending an OPTIONS request to the phones but no reply is being sent... most of the time. I'm thinking it's a firewall/NAT timeout issue. Has anyone seen this? Has anyone fixed it? Any ideas, otherwise? TIA. -- Take care and have fun, Mike Diehl.