well, by it's definition, 1-to-1 is not 1-to-2 ;-). i suppose a firewall could map 2 outside IP's to 1 internal and track inbound connections and deal with replys. however, if something were initiated from inside, how would the firewall decide which IP to send out? it would need to use one of the IP's as a default outbound.
again, i can't see how sipxecs's media relay would work with only a single outside IP that it can translate to. all of the outbound sip traffic will be rewritten with the one outside IP address. if stun were used in the NAT settings, failover could be accomplished. maybe i'm missing what you're attempting, or maybe i'm just blatantly wrong. do with this as you may. mike On Fri, Sep 28, 2012 at 3:38 PM, Gerald Drouillard <gerryl...@drouillard.ca>wrote: > On 9/28/2012 8:31 AM, Michael Picher wrote: > > yea but the media relay is going to change all media packets outbound to > the static IP set in the NAT settings... > > I hope so. Although a feature request could be made to have it return via > something in the header... ;-) > > > and with most firewalls you need to do a 1-to-1 nat with the outside IP. > you can't 1-to-1 nat 5080 udp to multiple outside IP's. this does not > compute. > > I would have to disagree with you. This install worked fine up to patch > 18 I believe. The firewall has 3 nics. 2 internet providers are common > and it is completely possible to do 1-to-1 nat. See: > http://www.shorewall.net/MultiISP.html > Don't get hung up on the fact that there is 2 public ip's. > You are missing the point that sipx is sending back 500. Here are the > facts: > > - This worked before > - This is only happening on an est. 50% of the invites. > - The sipx server is configured to have the correct public IP > - The upd Invite from the VI comes though on the correct public IP > address on port 5080 of the firewall and reaches the sipx server on 5080 > - Sipx will respond: > - SIP/2.0 500 Server Internal Error > Via: SIP/2.0/UDP 64.136.174.30 > :5060;branch=z9hG4bK1sansay1103399381rdb8256 > To: <sip:7349839042@correctIPAddress> > From: "DROUILLARD&ASC," <sip:15552594772@64.136.174.30> > ;tag=sansay1103399381rdb8256 > Call-ID: 1065450821-0-1391539424@64.136.174.227 > > CSeq: 1 INVITE > Server: sipXecs/4.4.0 sipXecs/sipxbridge (Linux) > Content-Type: message/sipfrag > Content-Length: 103 > > Exception Info Initialization exception while processing request at > BackToBackUserAgentFactory.java:199 > > > Looking at the log I find a "could not locate a sipx proxy server". > Looking at the code around line 236: > > http://sipxecs.sipfoundry.org/rep/sipXecs/main/sipXbridge/src/main/java/org/sipfoundry/sipxbridge/BackToBackUserAgent.java > > if (provider == Gateway.getLanProvider()) { > ViaHeader viaHeader = (ViaHeader) > request.getHeader(ViaHeader.NAME); > /* > * If we have a received header, then use that header to look for > a > * symmmitron there. Otherwise use the Via header. The symmitron > * must be up and running by the time the request is seen at the > * server. > */ > String address = (viaHeader.getReceived() != null ? viaHeader > .getReceived() : viaHeader.getHost()); > this.symmitronClient = Gateway.getSymmitronClient(address); > this.proxyAddress = new ProxyHop(address, viaHeader.getPort(), > viaHeader.getTransport()); > } else { > this.findNextSipXProxy(); > if (this.proxyAddress == null) { > throw new IOException( > "Could not locate a sipx proxy server -- cannot > create B2BUA"); > > > Not sure if a regular incoming call is suppose to be true with > getlanprovider(). Because if it doesn't it looks like it will get > blacklisted in findnextsipxproxy(). > > > Log > > "2012-09-28T17:17:35.649000Z":73609:JAVA:INFO:pbx1.ask-services.com:Thread-4029:00000000:sipXbridge:"[SIPTransaction.java:1197][SIPTransaction.java:1183][SIPServerTransaction.java:1708][UDPMessageChannel.java > "2012-09-28T17:17:35.704000Z":73610:JAVA:INFO:pbx1.ask-services.com:Timer-1:00000000:sipXbridge:"[SipProviderImpl.java:182][SIPTransactionStack.java:1673][SIPClientTransaction.java:231][SIPStackTimerTask.java > "2012-09-28T17:17:35.747000Z":73611:INCOMING:INFO:pbx1.ask-services.com:Thread-4030:00000000:sipXbridge:"Read > SIP Message:\n----Remote Host:64.136.174.30---- Port: 5060----\nINVITE > sip:7349839042@75.144.86.61 > "2012-09-28T17:17:35.748000Z":73612:JAVA:INFO:pbx1.ask-services.com:Thread-4030:00000000:sipXbridge:"[SIPServerTransaction.java:521][SIPTransactionStack.java:1562][SIPTransactionStack.java:1336][UDPMessageCha > "2012-09-28T17:17:35.748000Z":73613:JAVA:INFO:pbx1.ask-services.com:Thread-4030:00000000:sipXbridge:"[SIPTransaction.java:1152][SIPTransactionStack.java:1361][UDPMessageChannel.java:483][UDPMessageChannel.jav > "2012-09-28T17:17:35.748000Z":73614:JAVA:INFO:pbx1.ask-services.com:Thread-4030:00000000:sipXbridge:"[SIPTransaction.java:556][SIPServerTransaction.java:1476][SIPServerTransaction.java:734][UDPMessageChannel. > "2012-09-28T17:17:35.748000Z":73615:JAVA:INFO:pbx1.ask-services.com:Thread-4030:00000000:sipXbridge:"[SipProviderImpl.java:182][DialogFilter.java:1151][SIPServerTransaction.java:823][UDPMessageChannel.java:49 > "2012-09-28T17:17:35.749000Z":73616:JAVA:INFO:pbx1.ask-services.com:Thread-4030:00000000:sipXbridge:"[SIPDialog.java:1598][SIPDialog.java:596][SIPTransactionStack.java:714][SipProviderImpl.java:516][CallContr > "2012-09-28T17:17:35.749000Z":73617:JAVA:INFO:pbx1.ask-services.com:Thread-4030:00000000:sipXbridge:"[SIPDialog.java:601][SIPTransactionStack.java:714][SipProviderImpl.java:516][CallControlManager.java:476][C > "2012-09-28T17:17:35.750000Z":73618:JAVA:INFO:pbx1.ask-services.com:Thread-4030:00000000:sipXbridge:"[SIPDialog.java:830][SIPDialog.java:1394][SipProviderImpl.java:523][CallControlManager.java:476][CallContro > "2012-09-28T17:17:35.816000Z":73619:JAVA:ERR:pbx1.ask-services.com:Thread-4030:00000000:BackToBackUserAgentFactory:"unexpected > exception " > java.io.IOException: Could not locate a sipx proxy server -- cannot create > B2BUA > at > org.sipfoundry.sipxbridge.BackToBackUserAgent.<init>(BackToBackUserAgent.java:261) > at > org.sipfoundry.sipxbridge.BackToBackUserAgentFactory.getBackToBackUserAgent(BackToBackUserAgentFactory.java:177) > at > org.sipfoundry.sipxbridge.CallControlManager.processInvite(CallControlManager.java:579) > at > org.sipfoundry.sipxbridge.CallControlManager.processRequest(CallControlManager.java:3085) > at > org.sipfoundry.sipxbridge.SipListenerImpl.processRequest(SipListenerImpl.java:449) > at gov.nist.javax.sip.EventScanner.deliverEvent(EventScanner.java:224) > at > gov.nist.javax.sip.SipProviderImpl.handleEvent(SipProviderImpl.java:192) > at > gov.nist.javax.sip.DialogFilter.processRequest(DialogFilter.java:1151) > at > gov.nist.javax.sip.stack.SIPServerTransaction.processRequest(SIPServerTransaction.java:823) > at > gov.nist.javax.sip.stack.UDPMessageChannel.processMessage(UDPMessageChannel.java:499) > at > gov.nist.javax.sip.stack.UDPMessageChannel.processIncomingDataPacket(UDPMessageChannel.java:459) > at > gov.nist.javax.sip.stack.UDPMessageChannel.run(UDPMessageChannel.java:295) > at java.lang.Thread.run(Thread.java:679) > "2012-09-28T17:17:35.816000Z":73620:JAVA:ERR:pbx1.ask-services.com:Thread-4030:00000000:CallControlManager:"Error > processing requestINVITE sip:7349839042@75.144.86.61:5080 SIP/2.0\r\nVia: > SIP/2.0/UDP 64.136.1 > org.sipfoundry.sipxbridge.SipXbridgeException: Initialization exception while > processing request > at > org.sipfoundry.sipxbridge.BackToBackUserAgentFactory.getBackToBackUserAgent(BackToBackUserAgentFactory.java:199) > at > org.sipfoundry.sipxbridge.CallControlManager.processInvite(CallControlManager.java:579) > at > org.sipfoundry.sipxbridge.CallControlManager.processRequest(CallControlManager.java:3085) > at > org.sipfoundry.sipxbridge.SipListenerImpl.processRequest(SipListenerImpl.java:449) > at gov.nist.javax.sip.EventScanner.deliverEvent(EventScanner.java:224) > at > gov.nist.javax.sip.SipProviderImpl.handleEvent(SipProviderImpl.java:192) > at > gov.nist.javax.sip.DialogFilter.processRequest(DialogFilter.java:1151) > at > gov.nist.javax.sip.stack.SIPServerTransaction.processRequest(SIPServerTransaction.java:823) > at > gov.nist.javax.sip.stack.UDPMessageChannel.processMessage(UDPMessageChannel.java:499) > at > gov.nist.javax.sip.stack.UDPMessageChannel.processIncomingDataPacket(UDPMessageChannel.java:459) > at > gov.nist.javax.sip.stack.UDPMessageChannel.run(UDPMessageChannel.java:295) > at java.lang.Thread.run(Thread.java:679) > Caused by: java.io.IOException: Could not locate a sipx proxy server -- > cannot create B2BUA > at > org.sipfoundry.sipxbridge.BackToBackUserAgent.<init>(BackToBackUserAgent.java:261) > at > org.sipfoundry.sipxbridge.BackToBackUserAgentFactory.getBackToBackUserAgent(BackToBackUserAgentFactory.java:177) > ... 11 more > "2012-09-28T17:17:35.817000Z":73621:JAVA:INFO:pbx1.ask-services.com:Thread-4030:00000000:sipXbridge:"[SIPDialog.java:2635][SIPServerTransaction.java:1392][CallControlUtilities.java:49][CallControlManager.java > > > Invite at Firewall INVITE sip:7349839042@75.144.86.61:5080 SIP/2.0 > Via: SIP/2.0/UDP 64.136.174.30:5060;branch=z9hG4bK1sansay1103399381rdb8256 > Record-Route: > <sip:sansay1103399381rdb8256@64.136.174.30:5060;lr;transport=udp> > To: <sip:7349839042@75.144.86.61> > From: "DROUILLARD&ASC, " <sip:17342594772@64.136.174.30> > ;tag=sansay1103399381rdb8256 > Call-ID: 1065450821-0-1391539424@64.136.174.227 > CSeq: 1 INVITE > Contact: <sip:17342594772@64.136.174.30:5060> > > Supported: timer > Session-Expires: 1800;refresher=uac > Min-SE: 90 > Remote-Party-ID: "DROUILLARD&ASC, " <sip:7342594772@208.93.227.8:5060> > ;privacy=off > Max-Forwards: 67 > Content-Type: application/sdp > Content-Length: 277 > > > v=0 > o=Sansay-VSXi 188 1 IN IP4 64.136.174.30 > s=Session Controller > c=IN IP4 208.93.227.13 > t=0 0 > m=audio 15792 RTP/AVP 0 18 126 > a=rtpmap:0 PCMU/8000 > > a=rtpmap:18 G729/8000 > a=fmtp:18 annexb=no > a=rtpmap:126 telephone-event/8000 > a=fmtp:126 0-15 > a=sendrecv > a=maxptime:20 > > Invite On sipx INVITE sip:7349839042@75.144.86.61:5080 SIP/2.0 > Via: SIP/2.0/UDP 64.136.174.30:5060;branch=z9hG4bK1sansay1103399381rdb8256 > Record-Route: > <sip:sansay1103399381rdb8256@64.136.174.30:5060;lr;transport=udp> > To: <sip:7349839042@75.144.86.61> > From: "DROUILLARD&ASC, " <sip:17342594772@64.136.174.30> > ;tag=sansay1103399381rdb8256 > Call-ID: 1065450821-0-1391539424@64.136.174.227 > CSeq: 1 INVITE > Contact: <sip:17342594772@64.136.174.30:5060> > > Supported: timer > Session-Expires: 1800;refresher=uac > Min-SE: 90 > Remote-Party-ID: "DROUILLARD&ASC, " <sip:7342594772@208.93.227.8:5060> > ;privacy=off > Max-Forwards: 67 > Content-Type: application/sdp > Content-Length: 277 > > > v=0 > o=Sansay-VSXi 188 1 IN IP4 64.136.174.30 > s=Session Controller > c=IN IP4 208.93.227.13 > t=0 0 > m=audio 15792 RTP/AVP 0 18 126 > a=rtpmap:0 PCMU/8000 > > a=rtpmap:18 G729/8000 > a=fmtp:18 annexb=no > a=rtpmap:126 telephone-event/8000 > a=fmtp:126 0-15 > a=sendrecv > a=maxptime:20 > > > > -- > Regards > -------------------------------------- > Gerald Drouillard > Technology Architect > Drouillard & Associates, Inc.http://www.Drouillard.biz > > > _______________________________________________ > sipx-dev mailing list > sipx-dev@list.sipfoundry.org > List Archive: http://list.sipfoundry.org/archive/sipx-dev/ > -- Michael Picher, Director of Technical Services eZuce, Inc. 300 Brickstone Square**** Suite 201**** Andover, MA. 01810 O.978-296-1005 X2015 M.207-956-0262 @mpicher <http://twitter.com/mpicher> linkedin <http://www.linkedin.com/profile/view?id=35504760&trk=tab_pro> www.ezuce.com ------------------------------------------------------------------------------------------------------------ There are 10 kinds of people in the world, those who understand binary and those who don't.
_______________________________________________ sipx-dev mailing list sipx-dev@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-dev/
