Hi all, I need help configuring a little bit complex NAT/PAT scenario. Idea
is that clients on Internet registers themselvs against kamailio and then it
routes requests to Alcatel PBX. kamailio acts also as NAT proxy ( so that
clients on internet does not need vpn connection. Something like EDGE SERVER
for MS Lync clients)
Below the scenario
Alcatel PBX: 10.9.6.3
Kamailio internal NIC: 172.16.52.240
Kamailio DMZ NIC: 10.9.23.180
PU.BL.I.C.IP: 1.2.3.4
ALCATEL PBX(LAN 10.9.6.3)--
|
|———-(LAN INT
172.16.52.240)
|
|KAMAILIO (2 NICs)
|
|
|
|
|(LAN dmz
10.9.23.180)
PAT/NAT |
|firewal
|
|
PU.BL.I.C.IP
^
|
|
Client
on internet
As you can see there is a firewall that make NAT and PAT from PU.BL.I.C.IP
to internal Kamailio DMZ nic.
natted ports are 5060 and range from 3 to 65000 ( for RTP )
I'am tryng to use kamailio.cfg that comes with installation.. Now I am
making some changes but is not working.
Internal client ( lan 172.16.52.x ), registered on kamailio, can make call
to alcatel phones and viceversa.
External client ( on internet ) can register to kamailio but cannot call
alcatel phone nor client registered on kamailio.
Here some traces
CALL FROM EXTERNAL CLIENT TO INTERNAL CLIENT:
*U 2014/07/25 11:26:55.709196 2.2.2.2:39464 -> 10.9.23.180:5060
INVITE sip:1...@lwsbc.longwave.eu SIP/2.0.
Via: SIP/2.0/UDP
2.2.2.2:39464;branch=z9hG4bK-d8754z-015930358feee765-1---d8754z-;rport.
Max-Forwards: 70.
Contact: .
To: .
From: "CASA";tag=a3fb3269.
Call-ID: OTE2ZTRhNDU1NTU4NjU1MzU3MDZlYWUwN2E3MTRjYzk.
CSeq: 1 INVITE.
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE,
INFO.
Content-Type: application/sdp.
Supported: replaces.
User-Agent: X-Lite 4.6.1 73073-dadc6769-W.
Content-Length: 275.
.
v=0.
o=- 13050753989744621 1 IN IP4 192.168.1.102.
s=X-Lite release 4.6.1 stamp 73073.
c=IN IP4 2.2.2.2.
t=0 0.
m=audio 65220 RTP/AVP 125 100 0 9 8 101.
a=rtpmap:125 opus/48000/2.
a=rtpmap:100 speex/16000.
a=rtpmap:101 telephone-event/8000.
a=fmtp:101 0-15.
a=sendrecv.
U 2014/07/25 11:26:55.822346 10.9.23.180:5060 -> 2.2.2.2:39464
SIP/2.0 100 LW-SBC is Trying.
Via: SIP/2.0/UDP
2.2.2.2:39464;branch=z9hG4bK-d8754z-015930358feee765-1---d8754z-;rport=39464.
To: .
From: "CASA";tag=a3fb3269.
Call-ID: OTE2ZTRhNDU1NTU4NjU1MzU3MDZlYWUwN2E3MTRjYzk.
CSeq: 1 INVITE.
Server: LW-SBC.
Content-Length: 0.
.
U 2014/07/25 11:26:55.891270 172.16.52.240:5060 -> 172.16.52.53:1384
INVITE sip:bria@172.16.52.53:1384;rinstance=b31d64b3d4ead28c SIP/2.0.
Record-Route: .
Record-Route: .
Via: SIP/2.0/UDP
1.1.1.1;branch=z9hG4bKa2a3.f650fc43a494d751a41b895338b14212.0.
Via: SIP/2.0/UDP
2.2.2.2:39464;branch=z9hG4bK-d8754z-015930358feee765-1---d8754z-;rport=39464.
Max-Forwards: 69.
Contact: .
To: .
From: "CASA";tag=a3fb3269.
Call-ID: OTE2ZTRhNDU1NTU4NjU1MzU3MDZlYWUwN2E3MTRjYzk.
CSeq: 1 INVITE.
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE,
INFO.
Content-Type: application/sdp.
Supported: replaces.
User-Agent: X-Lite 4.6.1 73073-dadc6769-W.
Content-Length: 510.
.
v=0.
o=- 13050753989744621 1 IN IP4 192.168.1.102.
s=X-Lite release 4.6.1 stamp 73073.
c=IN IP4 1.1.1.1.
t=0 0.
a=ice-lite.
m=audio 30108 RTP/AVP 125 100 0 9 8 101.
a=rtpmap:125 opus/48000/2.
a=rtpmap:100 speex/16000.
a=rtpmap:101 telephone-event/8000.
a=fmtp:101 0-15.
a=sendrecv.
a=rtcp:30109.
a=ice-ufrag:wa6qnn48.
a=ice-pwd:L2qWms8nR1SA9Z8rWtDiMpzjyEHV.
a=candidate:Kw2s2DW6WXbD5UKN 1 UDP 2130706432 1.1.1.1 30108 typ host.
a=candidate:Kw2s2DW6WXbD5UKN 2 UDP 2130706431 1.1.1.1 30109 typ host.
U 2014/07/25 11:26:55.973284 172.16.52.53:1384 -> 172.16.52.240:5060
SIP/2.0 100 Trying.
Via:
