On Wed, Feb 3, 2010 at 3:18 PM, Winson (Elabram) <winson.k...@elabram.com>wrote:
> Dear all Expert ! > Hi i stuck in the firewall NAT mapping for my Sipbridge - ISTP . > > I try direct use the modem connected to sipXecs and open the port > 5060,5080, 30000-31000,16384-16482(ISTP) is wan work. > > after i plug in the firewall, the softphone show me is error 408,time out. > Then i check the sipbridge.log it show me: > > > Remote Host:202.85.243.87---- Port: 5060----\nREGISTER sip: > sip.pennytel.com SIP/2.0\r\nCall-ID:...... > Remote Host:202.85.243.87---- Port: 5060----\nSIP/2.0 401 > Unauthorized\r\nCall-ID: ........ > Remote Host:202.85.243.87---- Port: 5060----\nREGISTER sip: > sip.pennytel.com SIP/2.0\r\nCall-ID:......... > Remote Host:202.85.243.87---- Port: 5060----\nSIP/2.0 200 > OK\r\nCall-ID:........ > .... WARNING External port != internal port your NAT may not be symmetric. > > > It is because i did'n set the NAT policy from my firewall (sonicwall) will > become this problem? > > What firewall are you using? It does not appear you are using a symmetrical port NAT method. What is this? In order to connect the media stream (default 30000-31000 udp), the firewall "must" be symmetrical, if it leaves (rtp/media) on port 30123 then it must come back on port 30123, for instance.
_______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/