Home » Forums » Community Edition » Open Discussion

HELP - no sound outside lan, NAT problem?

drcabrejos
Posts: 5
 Member Since:
2006-08-15
Submitted by drcabrejos on Fri, 12/22/2006 - 9:31pm.

This is my configuration for sip on trixbox. I have written my prob in the end of the post. thx.

[b]sip.conf[/b]

[general]

port = 5060 ; Port to bind to (SIP is 5060)
bindaddr = 0.0.0.0 ; Address to bind to (all addresses on machine)
disallow=all
allow=ulaw
allow=alaw ; i have tried adding codecs ilbc, gsm, g729
; If you need to answer unauthenticated calls, you should change this
; next line to 'from-trunk', rather than 'from-sip-external'.
; You'll know this is happening if when you call in you get a message
; saying "The number you have dialed is not in service. Please check the
; number and try again."
; i have used from-sip-external too
context = from-trunk ; Send unknown SIP callers to this context
callerid = Unknown
tos=0x68
pedantic=no
progressinband=yes

; #, in this configuration file, is NOT A COMMENT. This is exactly
; how it should be.
#include sip_nat.conf
#include sip_custom.conf
#include sip_additional.conf

[b]sip_nat.conf[/b]

nat=yes ; i have tried nat=1
externip=dpdphonesystem.no-ip.org ; i have tried externhost too
localnet=192.168.0.0/255.255.255.0
qualify=yes

[b]sip_additional.conf[/b]

register=@sip.broadvoice.com::@sip.broadvoice.com

[200]
username=200
type=friend
secret=
record_out=Adhoc
record_in=Adhoc
qualify=yes
port=5060
nat=1
mailbox=200@device
host=dynamic
dtmfmode=rfc2833
disallow=all
context=from-internal
canreinvite=no
callerid= <200>
allow=alaw

; outgoing
[bv]
username=
user=phone
type=peer
secret=
nat=yes
insecure=very
host=sip.broadvoice.com
fromuser=
fromdomain=sip.broadvoice.com
dtmfmode=rfc2833
dtmf=rfc2833
context=from-pstn
canreinvite=no
authname=

; incoming
[sip.broadvoice.com]
username=
user=phone
type=user
secret=
nat=yes
insecure=very
host=sip.broadvoice.com
fromdomain=sip.broadvoice.com
dtmfmode=rfc2833
dtmf=rfc2833
context=from-pstn

[b]sip.conf[/b]

[general]
;
; RTP start and RTP end configure start and end addresses
;
rtpstart=8000
rtpend=9999
; I have tried with the default 10000 - 20000 and many others
; using 9999 because i am using webmin on 10000

I have looked in many places on how to solve this problem, most of them is just NAT=yes, but i already have that. I have port forwards for my pbx, have put them in dmz server, and even outside my firewall, and still doesnt work. Then it comes to me that it might not be a nat problem. I tried using x-lite v2 and v3, and grandstream budget tone-100. The phones register with the server just fine, they make the calls, but whenever user is outside lan and they call someone inside lan, then you cannot hear them, but they can hear you. However, if a cell phone calls to the outside user, the user can hear but who is calling cant, and if the outside user is calling a cell phone, neither side can hear each other. They used to work some time ago. I have tried fresh install from trixbox 1.0, 1.1, etc.. I have tried all versions released until now, and none of them seems to work with me. I had everything on a VM using vmware, then i made a dedicated server for trixbox and still the same problem. I dont know what else i can do. By the way, IAX works fine. I would appreciate comments on how to solve my problem. Thanks :-D

David Cabrejos

‹ Problem with trixbox 2.2.3 but the same in 2.6.2 not appear Cisco Pix sip fixup ›
--

David Cabrejos


&nbsp

crees
Posts: 293
 Member Since:
2006-08-09
Re: HELP - no sound outside lan, NAT problem?
Tue, 10/31/2006 - 11:37am

Sounds like its a firewall issue. IAX is great for this reason but in your case you need the SIP to work.

I beleive that you will need to have multiple ports and/or port range for sip to work properly.

Here is a link to another person with SIP issues Hope this helps

Experts-exchange


&nbsp

eoo
Posts: 448
 Member Since:
2006-10-30
Re: HELP - no sound outside lan, NAT problem?
Tue, 10/31/2006 - 12:05pm

Phones registering and ringing says Port 5060 traffic is OK. No sound means RTP traffic being blocked somewhere. You are sending RTP from server in the 8000-9999 range. Does Broadvoice accept this range? Is your firewall/router forwarding 8000-9999 ports to your TB? This definitely sounds like a firewall issue.


&nbsp

Siempo2000
Posts: 5
 Member Since:
2006-06-14
Re: HELP - no sound outside lan, NAT problem?
Tue, 10/31/2006 - 12:39pm

I have to agree with the previous postings.
It realy smells like a firewall issue.
I had the same stuff and after a lot of trouble shooting i found out that Cisco PIX 515 is crippling SIP traffic, solution was disable SIP FIXUP.


&nbsp

drcabrejos
Posts: 5
 Member Since:
2006-08-15
Re: HELP - no sound outside lan, NAT problem?
Tue, 10/31/2006 - 3:24pm

well.. i still dont know what is the problem with my pbx. i put it outside my firewall, and still doesnt work. I have removed the sip_nat.conf configuration and didnt work either, and i dont think its my ISP. I am totally lost, because it used to work before and now nothing is working. My ISP is COX. but thx for the replies.

--

David Cabrejos


&nbsp

jmullinix
Posts: 837
 Member Since:
2006-06-04
Re: HELP - no sound outside lan, NAT problem?
Tue, 10/31/2006 - 5:41pm

I had this problem with a A@H server behing a Linksys WRT-54G router. The problem went away with upgraded the firmware on the router. Go figure.

John

--

John

In search of Dundi Peers in Lake Wales, FL and Baltimore, MD.
http://www.cohutta.com
1-706-632-3343 - E164 friendly (Use your friendly ENUM trunk today.)
Dial Plan helper http://www.cohutta.com/npanxx.php


&nbsp

MillsapsPE
Posts: 385
 Member Since:
2006-06-09
Re: HELP - no sound outside lan, NAT problem?
Tue, 10/31/2006 - 9:12pm

What is the IP address of your TB box? Based on your info, it should be between 192.168.0.0 and 192.168.0.255.


&nbsp

klmonson
Posts: 6
 Member Since:
2006-09-08
Re: HELP - no sound outside lan, NAT problem?
Wed, 11/01/2006 - 11:04am

I've had the same problem for a while now. I've tried port forwarding, putting the trixbox in the dmz and even putting it outside all together. the phone registers, will ring if the extension is called, but will not pass sound back to the phone.


&nbsp

drcabrejos
Posts: 5
 Member Since:
2006-08-15
Re: HELP - no sound outside lan, NAT problem?
Thu, 11/02/2006 - 2:31pm

hi.. i am still trying to solve my issue with the sound. right now i have my rtp.conf on ports 10001 - 20000, i checked the firmware of my router and i have the latest. I am using a D-Link WBR-2310 with firmware version 1.02.

I UPD ports opened for:
SIP 5004 - 5082
RTP 10001 - 20000
IAX 4569 - 4569

and TCP for:
Webmin 10000 - 10000

However i tried putting on DMZ and sound still doesnt work. I am getting some weird ports on "Asterisk info" when i see the Sip Registry field. For broadvoice i get using port 5060, however for the clients i get some random ports, for example, ext 200 is getting port 39768 right now, and ext 240 ins getting port 60141. Both of them are from the outside. Ext 200 is using xlite and ext 240 is using grandstream budget tone 100. Right now i am using vmware workstation 5.5.2, but i have build another server on a dedicated pc, and same problem happens.

I am beginning to think that the problem is in some configuration in the Trixbox server, but to me its not making sense. I would appreciate some help in this matter, or some new solutions. I have read that i can do an IP tunneling for the clients, or using SER, but the prob is that i am a noob in this matter, trying to learn how to make these things really work.

--

David Cabrejos


&nbsp

kgtee
Posts: 426
 Member Since:
2006-06-17
Re: HELP - no sound outside lan, NAT problem?
Thu, 11/02/2006 - 8:00pm
Quote:
.....however for the clients i get some random ports, for example, ext 200 is getting port 39768 right now, and ext 240 ins getting port 60141. .....

??? Clients don't get ports. Ports are set by you.


&nbsp

drcabrejos
Posts: 5
 Member Since:
2006-08-15
Re: HELP - no sound outside lan, NAT problem?
Fri, 11/03/2006 - 9:53am

i though i assigned the ports for the user, for example, i wanted to continue assigning port 5060 for extension 200, and i did it on sip_additional.conf, however, when i go to asterisk info, and then under sip registry, it tells me that that the port that extension 200 is using is another, and everytime i connect the device, it gives a different port, for example, now ext 200 is on port 61135 and ext 240 on port 60124, and i dont want that, i want them to be on port 5060. I tried assigning ports 5062 for ext 200 and 5064 for ext 240, but i still keep getting those weird ports. I dont know if this is the problem with receiving the audio.

[img]http://www.myfilehut.com/public/23989/weird ports.JPG[/img]

--

David Cabrejos


&nbsp

kgtee
Posts: 426
 Member Since:
2006-06-17
Re: HELP - no sound outside lan, NAT problem?
Fri, 11/03/2006 - 6:43pm

I think your Asterisk box is setup fine. The problem is at the clients. You may want to check the way ports are handled either by the device itself or the NAT if there is any.


&nbsp

eoo
Posts: 448
 Member Since:
2006-10-30
Re: HELP - no sound outside lan, NAT problem?
Sat, 11/04/2006 - 3:52pm

yes, this is the problem, since you mentioned earlier you set the port forwarding for RTP transport for ports 10000-20000. This is pretty much guaranteed to give you one way audio at best.

The SIP registry that you are looking at is showing you what the clients are registering into your server with. They register using port 5060 but 200/200 is telling your server it is going to be sending its payload [RTP audio] using port 61135. 240/240 is going to be sending its payload using port 60124. It looks to me as if you have the clients set up with port 0 for the RTP which will allow the client to randomly pick any port [and they usually pick something in the upper ranges available].

This is not a server problem. It is a client [end point device] problem. The server is just telling you on this report what the clients are telling it. All clients have a way to set what ports they are going to use both for the registration and for the payload [the sound that travels on RTP ports]. Most clients that I have seen have a default on the registration port of 5060 [although I the latest Xten softphone I used had a default of 0] and have various defaults for the RTP port that are all over the place. The ones that are set to zero basically will choose any port at random which may be fine enough if they are on the same subnet as the server, but almost never work if they have to cross a router or firewall with some narrow[ish] band of ports available for the RTP.

If you are using XTen softphone, for example, open the configuration dialog, select the "Topology" tab, Look for "Port Used on Local Computer", select "Manually Specify Range" and type in a range for RTP that match your router/firewall port forwarding. For example, I have my home XTen with a range from 17000-18000 with my little Linksys forward the same ports [plus the 5060 of course]


&nbsp

cmgamble
Posts: 17
 Member Since:
2006-06-02
Re: HELP - no sound outside lan, NAT problem?
Fri, 11/10/2006 - 3:45pm

I am having the same trouble, and may have made some headway. 5060 is working just fine (registration, ringining, call initiation) but no audio. I have figured out a work around, but, not a perfect one.

When I have SIP_NAT with externhost = xxx.dyndns.org and I call from LAN or ZAP to softphone across NAT the inbound call will alert on softphone with XXX@127.0.0.1.

When I have SIP_NAT with externip = 71.XXX.XXX.85 and I call from LAN or ZAP to softphone across NAT, the inbound call will alert on softphone with XXX@71.XXX.XXX.85.

So, anybody have any ideas on this? I am able to get name resolution on the TB for external hosts...

Thank you in advance!


&nbsp

wtaochange
Posts: 1
 Member Since:
2006-12-22
Re: HELP - no sound outside lan, NAT problem?
Fri, 12/22/2006 - 9:31pm

I got the same problem and resoved it in this way. check /etc/asterisk/sip_nat.conf, if it is empty, please
modify it as follows:

nat=yes
externip= or
externhost=
localnet=192.168.1.0/255.255.255.0
externrefresh=10

most of time, we use dynamic ip, u gonna use domain name instead of external IP.
for details about this, refer to http://dumbme.voipeye.com.au/trixbox/trixbox_without_tears.htm#_T...

and search sip_nat.conf

good luck!

:-D


&nbsp

tonywhelan
Posts: 16
 Member Since:
2007-04-29
sip_nat.conf broke my audio
Wed, 05/09/2007 - 1:38am

My audio on outgoing calls was fine. But I added lines to sip_nat.conf (externip= and localnet= ) so that my DID could ring in, which worked beautifully. However that promptly broke the audio for calling phone when ringing outside numbers. Ring tone fine, but dead sound after call is answered.

I'm going to bed to try to recover from today's brain damage, who knows how this will be fixed...


&nbsp

tjang
Posts: 1
 Member Since:
2007-05-07
I have tried the solutions
Thu, 05/17/2007 - 9:54am

I have tried the solutions here but I am still having the same problems. I can get the extension dialed but there is no sound on either extensions. I have the Trixbox and the phone that is in a different network on DMZ. I can't think it is the ports. Any suggestions?


&nbsp

Giepie
Posts: 8
 Member Since:
2007-04-30
Hi all I also tried the
Fri, 05/25/2007 - 6:01pm

Hi all

I also tried the solutions on this post, but to no success. I keep getting a feeling it has something to do with the fact that the server side is accessible due to its public IP (being dynamic or static), but the client is more than likely ALSO behind a NAT firewall and there's no ports forwarded to it. I can't see how all clients connecting to your PBX can have ports forwarded to them, it will be way too much trouble for the end-user.

I haven't tried doing it this way, as not all people has IT IQ's, but I'll do it at the soonest given time and post here again, just for interest sake.

The solution I'm using at the moment, is to let the remote user make a VPN (pptp) connection to my network. Then I route all SIP traffic in the proper directions. This works like a bomb, and is also more secure. But it's really a mission getting end-users setting it up. Then again, call-out's I can bill, telephone support is a different story...

Re, G


&nbsp

huuhien
Posts: 15
 Member Since:
2007-06-10
HELP - no sound outside lan, NAT problem?
Thu, 06/21/2007 - 9:24am

Yeah, I met the same problem as drcabrejos. I use an extension from outside , It can only call and receive the call from inside. The inside extensions don't hear anything from outside extension although the outside extension can hear inside's voice.
I forward all traffics (tcp&udp) to my trixbox from the firewall, but the result is none. I really don't know what wrong problem....


&nbsp

jmullinix
Posts: 837
 Member Since:
2006-06-04
IF you have sip_nat.conf set
Thu, 06/21/2007 - 5:09pm

IF you have sip_nat.conf set up correctly, the proper ports open on the router pointing to the Trixbox, nat = yes in the extension setup and the nat stuff turned off in the phone, it should work. If it doesn't, then you need to look at the router. I have only had trouble once with Sip and Nat and a flashed router fixed it.

--

John

In search of Dundi Peers in Lake Wales, FL and Baltimore, MD.
http://www.cohutta.com
1-706-632-3343 - E164 friendly (Use your friendly ENUM trunk today.)
Dial Plan helper http://www.cohutta.com/npanxx.php


&nbsp

Larrywre
Posts: 2
 Member Since:
2006-11-03
I used the setting and it worked
Sat, 07/07/2007 - 9:31am

I added the lines to sip_nat.conf and I now have sound from outside!!
Now works very well.

Thanks

Larry


&nbsp

vietpq2506
Posts: 4
 Member Since:
2007-07-09
I got it
Sun, 07/15/2007 - 4:47am

I did the same in sip_nat.conf:
nat=yes
externip=x.x.x.x
localnet=192.168.0.0/255.255.255.0
qualify=yes

First, it did not work. But after I reboot the server, it worked well. You may try to reboot. hope its ok


&nbsp

lbennett
Posts: 33
 Member Since:
2007-07-19
I have a similar problem.
Mon, 08/27/2007 - 3:14am

I have a similar problem. From an external SIP phone I can call internal extensions and external numbers but when they answer I can hear them but they can't hear me. I've tried two different SIP phones, Linksys SPA941 and Netcomm V85 and it is the same with both.
I have forwarded the following from the router at the Trixbox end to the Trixbox.
SIP 5004 - 5082 UDP & TCP
RTP 10000 - 20000 UDP
IAX 4569 - 4569 UDP

sip_nat.conf

nat=yes
externhost=
localnet=192.168.0.0/255.255.255.0
externrefresh=10

RTP range on SPA941 is 16384 - 16482
Not sure on the Netcomm V85

All suggestion greatfully accepted.


&nbsp

lbennett
Posts: 33
 Member Since:
2007-07-19
Problem Solved
Mon, 08/27/2007 - 9:32pm

I don't know what happened but I checked all entries and rebooted server and now I'm getting sound both ways.


&nbsp

chrwood70
Posts: 1
 Member Since:
2007-03-20
Ditto
Thu, 10/25/2007 - 2:21pm

Just added those and rebooted on 2.2.4 and life is good. Using a linksys wrt54g (junk) but it is working. It would be nice to add to a faq.


&nbsp

pyranetuk
Posts: 51
 Member Since:
2007-02-12
Followed this and it still doesn't work
Sat, 01/12/2008 - 4:24am

I'm having the same issues as described in this thread. When calling in or out from an external extension which is registered fine with the trixbox I can hear the sound from that extension but they can't hear the sound from the other phone.

One thing which slightly differs from the rest of these entries is that we're using NTL/Virgin as our broadband provider and when using port 5060 to register it does not work at all. So I setup port redirection on the router so that port 1000 went to 5060. I was then able to register external phones using port 1000. For a short time the external phones were working fine with sound both ways. Then they suddenly stopped (Nothing had been changed).

This is the sip_nat.conf:

externip=82.4.xx.xx
externrefresh=10
nat=yes
localnet=192.168.0.0/255.255.255.0

The extensions are set to nat=yes and I have added the trixbox into the DMZ.

I have also rebooted the trixbox and router, also flashed the router with latest firmware.

Any other suggestions as I am now out of ideas? I would like to get this working without using VPN if possible.

Thanks.

--

http://www.pyranet.co.uk - IT Support tailored around your Business


&nbsp

zlatko_k
Posts: 2
 Member Since:
2007-02-14
Hi, definitely it's a
Thu, 04/16/2009 - 3:05am

Hi,

definitely it's a firewall issue. I had similar problem with deaf phones and after opening the udp 10001-20000 ports it worked like charm.

Now I'm a VERY happy camper. WEEEEEEEEE!!!! :D

By.


&nbsp

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.