Re: [asterisk-users] Portech MV-374 does not register behind NAT

2010-05-02 Thread Jonas Kellens 

Jared,

the Portech SIMbox is registering to a DNS name. The firewall is off and 
the NAT is a Zyxel NBG-419 router.


No mather what port I set, It is not working :

<--- SIP read from my_public_ip:5070 --->
REGISTER sip:sip.sipserver.tld SIP/2.0
Via: SIP/2.0/UDP 192.168.1.25:5070;branch=z9hG4bK4465928ede
From: "SIM 1-1" ;tag=6672a4c3
To: "SIM 1-1" 
Call-ID: 277210db31b0ae184675c3245d5e9...@192.168.1.25
Contact: 
CSeq: 56 REGISTER
Max-Forwards: 70
Expires: 60
Allow: INVITE,CANCEL,ACK,BYE,NOTIFY,REFER,OPTIONS,INFO,MESSAGE,UPDATE
User-Agent: Mv-37x (904290)
Content-Length: 0


<->
[May  2 10:38:51] --- (12 headers 0 lines) ---
[May  2 10:38:51] Using latest REGISTER request as basis request
[May  2 10:38:51] Sending to 192.168.1.25 : 5070 (no NAT)
[May  2 10:38:51]
<--- Transmitting (NAT) to my_public_ip:5070 --->
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 
192.168.1.25:5070;branch=z9hG4bK4465928ede;received=my_public_ip

From: "SIM 1-1" ;tag=6672a4c3
To: "SIM 1-1" 
Call-ID: 277210db31b0ae184675c3245d5e9...@192.168.1.25
CSeq: 56 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Content-Length: 0


<>
[May  2 10:38:51]
<--- Transmitting (NAT) to my_public_ip:5070 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 
192.168.1.25:5070;branch=z9hG4bK4465928ede;received=my_public_ip

From: "SIM 1-1" ;tag=6672a4c3
To: "SIM 1-1" ;tag=as12309a5f
Call-ID: 277210db31b0ae184675c3245d5e9...@192.168.1.25
CSeq: 56 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="103001vc", nonce="7c2508cc"
Content-Length: 0

Is it normal that there is a Via-header sent from the SIMbox with its 
local IP-address in it ??
Is it normal that "SIP read from my_public_ip:5070" has the same port 
number as the SIP-account (simsim1) 192.168.1.25:5070 ??

Could it be that NAT is not working correctly in my router ??


Jonas.


On 04/22/2010 05:53 PM, Jared Smith wrote:

Is the device registering to an IP address, or do a DNS name?  What type
of NAT firewall are you using?

This reminds me of a problem I had years ago with a Cisco PIX firewall,
where it would rewrite IP addresses in the SIP Request URI, causing the
authentication to fail.  One solution was to have it register to a
fully-qualified domain name instead of an IP address, so that the
Request URI wouldn't get overwritten.

It's certainly worth a shot...

--
Jared Smith
Digium, Inc.
   
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Portech MV-374 does not register behind NAT

2010-04-22 Thread Jonas Kellens 




As I already
said 2 times earlier in this thread : when I connect directly to the
internet, then the registration goes through normally. So according to
me it is definitely a NAT-problem. Don't need to find this out another
20 times.

Just don't know just what setting is needed when the Portech is behind
NAT...

Jonas.


bruce bruce wrote:
Take out the router/firewall and connect directly to the
net to test your NAT problem theory.
  
  On Thu, Apr 22, 2010 at 12:15 PM, Jonas
Kellens 
wrote:
  

Jared,

thank you for your answer.

As I said in my previous mail, I'm using a Zyxel NBG-419 router (which
normally supports VoIP and QoS). Firewall is disabled on the Zyxel.

The MV-374 only accepts IP-address, not a FQDN. Will give it another
try though...

The answer from Portech-support : "use STUN".

Even if the NAT rewrites the IP-address/port combination, why is it a
problem for the Portech and not for the IP-phones (Grandstream &
Snom) ? They all communicate on port 5060 --> 5064 (several
SIP-accounts)


Jonas.
  
  





-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Portech MV-374 does not register behind NAT

2010-04-22 Thread bruce bruce 
Take out the router/firewall and connect directly to the net to test your
NAT problem theory.

On Thu, Apr 22, 2010 at 12:15 PM, Jonas Kellens wrote:

>  Jared,
>
> thank you for your answer.
>
> As I said in my previous mail, I'm using a Zyxel NBG-419 router (which
> normally supports VoIP and QoS). Firewall is disabled on the Zyxel.
>
> The MV-374 only accepts IP-address, not a FQDN. Will give it another try
> though...
>
> The answer from Portech-support : "use STUN".
>
> Even if the NAT rewrites the IP-address/port combination, why is it a
> problem for the Portech and not for the IP-phones (Grandstream & Snom) ?
> They all communicate on port 5060 --> 5064 (several SIP-accounts)
>
>
> Jonas.
>
>
> Jared Smith wrote:
>
> On Thu, 2010-04-22 at 17:45 +0200, Jonas Kellens wrote:
>
>
>  All goes well when the gateway is connected directly to the
> internet... It's when it is behind NAT the 401 is sent from
> Asterisk...
>
>
>  Is the device registering to an IP address, or do a DNS name?  What type
> of NAT firewall are you using?
>
> This reminds me of a problem I had years ago with a Cisco PIX firewall,
> where it would rewrite IP addresses in the SIP Request URI, causing the
> authentication to fail.  One solution was to have it register to a
> fully-qualified domain name instead of an IP address, so that the
> Request URI wouldn't get overwritten.
>
> It's certainly worth a shot...
>
> --
> Jared Smith
> Digium, Inc.
>
>
>
>
>
> --
> _
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>   http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Portech MV-374 does not register behind NAT

2010-04-22 Thread Jonas Kellens 




Jared,

thank you for your answer.

As I said in my previous mail, I'm using a Zyxel NBG-419 router (which
normally supports VoIP and QoS). Firewall is disabled on the Zyxel.

The MV-374 only accepts IP-address, not a FQDN. Will give it another
try though...

The answer from Portech-support : "use STUN".

Even if the NAT rewrites the IP-address/port combination, why is it a
problem for the Portech and not for the IP-phones (Grandstream &
Snom) ? They all communicate on port 5060 --> 5064 (several
SIP-accounts)


Jonas.


Jared Smith wrote:

  On Thu, 2010-04-22 at 17:45 +0200, Jonas Kellens wrote:
  
  
All goes well when the gateway is connected directly to the
internet... It's when it is behind NAT the 401 is sent from
Asterisk...

  
  
Is the device registering to an IP address, or do a DNS name?  What type
of NAT firewall are you using?  

This reminds me of a problem I had years ago with a Cisco PIX firewall,
where it would rewrite IP addresses in the SIP Request URI, causing the
authentication to fail.  One solution was to have it register to a
fully-qualified domain name instead of an IP address, so that the
Request URI wouldn't get overwritten.

It's certainly worth a shot...

--
Jared Smith
Digium, Inc.


  




-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Portech MV-374 does not register behind NAT

2010-04-22 Thread Jared Smith 
On Thu, 2010-04-22 at 17:45 +0200, Jonas Kellens wrote:
> All goes well when the gateway is connected directly to the
> internet... It's when it is behind NAT the 401 is sent from
> Asterisk...

Is the device registering to an IP address, or do a DNS name?  What type
of NAT firewall are you using?  

This reminds me of a problem I had years ago with a Cisco PIX firewall,
where it would rewrite IP addresses in the SIP Request URI, causing the
authentication to fail.  One solution was to have it register to a
fully-qualified domain name instead of an IP address, so that the
Request URI wouldn't get overwritten.

It's certainly worth a shot...

--
Jared Smith
Digium, Inc.


-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Portech MV-374 does not register behind NAT

2010-04-22 Thread Jonas Kellens 




I'm using
Firefox on Fedora but I don't think the problems lies there.

All goes well when the gateway is connected directly to the internet...
It's when it is behind NAT the 401 is sent from Asterisk...

It must be some NAT-thing combination in how the
GSM-gateway/Zyxel-router sends the registration...

Nobody on this list has experienced similar issues ??

Jonas.



bruce bruce wrote:
Try reseting the Gateway (soft reset of the settings) and
use only IE to do the setup again. Nothing else comes to my mind. 
  
  
  Also, create a simple extension in Asterisk or if you are using
FreePBX you don't need to tamper with any ports stuff.
  
  
  
  
  -Bruce
  





-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Portech MV-374 does not register behind NAT

2010-04-22 Thread bruce bruce 
Try reseting the Gateway (soft reset of the settings) and use only IE to do
the setup again. Nothing else comes to my mind.

Also, create a simple extension in Asterisk or if you are using FreePBX you
don't need to tamper with any ports stuff.


-Bruce

On Thu, Apr 22, 2010 at 3:37 AM, Jonas Kellens wrote:

>  When I comment out the port-parameter (then it defaults to 5060), it is
> still the same...
>
> [Apr 22 09:32:49]
> <--- Transmitting (NAT) to my_pub_ip:5064 --->
> SIP/2.0 401 Unauthorized
> Via: SIP/2.0/UDP 192.168.1.23:5064;branch=z9hG4bKc46696a2b5;received=
> my_pub_ip
> From: "SIM 3-1" ;tag=0a99a41b
> To: "SIM 3-1" ;tag=as461d5769
> Call-ID: 5c580e091901a03c39becff71e477...@192.168.1.23
> CSeq: 89 REGISTER
> User-Agent: Asterisk PBX
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
> Supported: replaces
> WWW-Authenticate: Digest algorithm=MD5, realm="103001vc", nonce="03e68412"
> Content-Length: 0
>
>
> Jonas.
>
> bruce bruce wrote:
>
> Try changing port=5064 to port=5060 in your Asterisk config file. Portech
> will negotiate it's port with Asterisk itself.
>
>
>
> --
> _
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>   http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Portech MV-374 does not register behind NAT

2010-04-22 Thread Jonas Kellens 




When I
comment out the port-parameter (then it defaults to 5060), it is still
the same...

[Apr 22 09:32:49] 
<--- Transmitting (NAT) to my_pub_ip:5064 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.1.23:5064;branch=z9hG4bKc46696a2b5;received=my_pub_ip
From: "SIM
3-1" ;tag=0a99a41b
To: "SIM 3-1" ;tag=as461d5769
Call-ID: 5c580e091901a03c39becff71e477...@192.168.1.23
CSeq: 89 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="103001vc",
nonce="03e68412"
Content-Length: 0


Jonas.

bruce bruce wrote:
Try changing port=5064 to port=5060 in your Asterisk
config file. Portech will negotiate it's port with Asterisk itself.





-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users