Xen users - May 2008 - Please share your asterisk domU configurations ( config file, firewalling, etc)

I cant seem to be able to get an Asteisk domU to work for anonymous inbound
calls.  ( Have not tested yet for external sip calls from registered
clients)  It is not a freepbx issue, but rather some routing issue
particular to a xen setup. Outbound calls work fine.


Scenarios:

1. The asterisk domU can answer calls with 2 way audio if I use another
machine on the lan as a linux router/gateway forwarding to the domU.

2. The asterisk domU can answer calls with 1 way audio if I use the netgear
router as the gateway port forwarding to the domU.

3. The asterisk domU cannot answer calls If it is assigned a PCI card and a
vif interface, basically turning it into a firewall router.  I would have
assumed that eliminating NAT by using this config would work the best.

4. The asterisk domU cannot answer calls if it has a single vif interface
and another firewall domU  is portforwarding to it.

IP masquerading works in all scenarios and firewalls have been cleared in
the asterisk domU.  I have tried iptables to route packets to the asterisk
domU as well as shorewall with no luck.  The fact that the vif is part of a
bridge is probably the reason its not working.

I have not been able to configure dom0 as a router yet to route sip calls to
the asterisk domU.  I have to look into this yet.  The fact that xend
renames the bridge to eth0 complicates matters as shorewall is complaining
about the peth0 interface if I designate that in /etc/shorewall/interfaces.

My preferred scenario is to have a singe vif interface to an asterisk domU
and have another firewall domU port forward to it.  If it is not possible,
then setup dom0 as the router.  If not, that then purchase a router that can
route with 2 way audio to the asterisk domU.

I have thought about completely removing the vif interface from the asterisk
domU and assigning it a physical nic to connect to the netgear router.  I
will try that next to see if it fixes the 1 way audio problem.

Any help is appreciated.

Thanks
Chris


_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

On Sat, May 17, 2008 at 10:24 AM, Christopher Isip <cmisip@gmail.com>
wrote:
> I cant seem to be able to get an Asteisk domU to work for anonymous inbound
> calls.  ( Have not tested yet for external sip calls from registered
> clients)  It is not a freepbx issue, but rather some routing issue
> particular to a xen setup. Outbound calls work fine.
>
>
> Scenarios:
>
> 1. The asterisk domU can answer calls with 2 way audio if I use another
> machine on the lan as a linux router/gateway forwarding to the domU.
>
> 2. The asterisk domU can answer calls with 1 way audio if I use the netgear
> router as the gateway port forwarding to the domU.
>
> 3. The asterisk domU cannot answer calls If it is assigned a PCI card and a
> vif interface, basically turning it into a firewall router.  I would have
> assumed that eliminating NAT by using this config would work the best.
>
> 4. The asterisk domU cannot answer calls if it has a single vif interface
> and another firewall domU  is portforwarding to it.
>
> IP masquerading works in all scenarios and firewalls have been cleared in
> the asterisk domU.  I have tried iptables to route packets to the asterisk
> domU as well as shorewall with no luck.  The fact that the vif is part of a
> bridge is probably the reason its not working.
>
> I have not been able to configure dom0 as a router yet to route sip calls
> to the asterisk domU.  I have to look into this yet.  The fact that xend
> renames the bridge to eth0 complicates matters as shorewall is complaining
> about the peth0 interface if I designate that in /etc/shorewall/interfaces.
>
> My preferred scenario is to have a singe vif interface to an asterisk domU
> and have another firewall domU port forward to it.  If it is not possible,
> then setup dom0 as the router.  If not, that then purchase a router that
can
> route with 2 way audio to the asterisk domU.
>
> I have thought about completely removing the vif interface from the
> asterisk domU and assigning it a physical nic to connect to the netgear
> router.  I will try that next to see if it fixes the 1 way audio problem.
>
> Any help is appreciated.
>
> Thanks
> Chris
>
>
>
> Duh!  Duh! Duh!  Duh! to the nth power.
I managed to get scenario 3 up and running.  The issue was not routing at
all.  I copied my update dyndns script from the older system and didn''t
realize that the interface has changed in the new xenified system. Thus it
was registering my internal ip with dyndns.  No wonder anonymous calls
didn''t work.  Since I have the external interface and the vif in the
Asterisk domU, the NAT issue went away and i have 2 way audio.

Cheers,

Chris


_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users