VoIP Mailing List Archives
Mailing list archives for the VoIP community |
|
| View previous topic :: View next topic |
| Author |
Message |
webaccounts173 at jgoe...
Guest
|
 Posted: Mon Feb 09, 2015 3:36 pm Post subject: [asterisk-users] IAX port |
 |
|
Hi!
Sometimes IAX peers are not reachable and with "iax2 set debug on" I get something like this
Tx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass: PONG
Timestamp: 00014ms SCall: 00001 DCall: 01200 79.233.155.174:49153
Rx-Frame Retry[ No] -- OSeqno: 001 ISeqno: 001 Type: IAX Subclass: ACK
Timestamp: 00014ms SCall: 01200 DCall: 00001 79.233.155.174:49153
I am not sure what causes port 4569 to be replaced an an arbitrary port, which could be the
reason for my problem. Does someone know whether this is a router related problem?
jg
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users |
|
| Back to top |
|
 |
flojose at gmail.com
Guest
|
| Posted: Mon Feb 09, 2015 6:22 pm Post subject: [asterisk-users] IAX port |
|
|
2015-02-09 14:36 GMT-06:00 jg <webaccounts173@jgoettgens.de>:
| Quote: | Hi!
Sometimes IAX peers are not reachable and with "iax2 set debug on" I get
something like this
Tx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass: PONG
Timestamp: 00014ms SCall: 00001 DCall: 01200 79.233.155.174:49153
Rx-Frame Retry[ No] -- OSeqno: 001 ISeqno: 001 Type: IAX Subclass: ACK
Timestamp: 00014ms SCall: 01200 DCall: 00001 79.233.155.174:49153
I am not sure what causes port 4569 to be replaced an an arbitrary port,
which could be the reason for my problem. Does someone know whether this is
a router related problem?
jg
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
|
Hi.
Port is changed when NAT is applied from LAN to WAN.
While UDP session is maintained as ESTABLISHED, that port should not change.
If your peer changes constantly of session port could be UDP session
is too short in NAT table on routers.
You can try setting qualify=1000 (which is in ms. Default is 2000),
and see if peer keeps same port.
Regards.
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users |
|
| Back to top |
|
|
duncan at e-simple.co.nz
Guest
|
| Posted: Mon Feb 09, 2015 6:39 pm Post subject: [asterisk-users] IAX port |
|
|
On 10 Feb 2015, at 12:22, Jose Flores Galicia wrote:
| Quote: | 2015-02-09 14:36 GMT-06:00 jg <webaccounts173@jgoettgens.de>:
| Quote: | Hi!
Sometimes IAX peers are not reachable and with "iax2 set debug on" I
get
something like this
Tx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass:
PONG
Timestamp: 00014ms SCall: 00001 DCall: 01200 79.233.155.174:49153
Rx-Frame Retry[ No] -- OSeqno: 001 ISeqno: 001 Type: IAX
Subclass: ACK
Timestamp: 00014ms SCall: 01200 DCall: 00001 79.233.155.174:49153
I am not sure what causes port 4569 to be replaced an an arbitrary
port,
which could be the reason for my problem. Does someone know whether
this is
a router related problem?
jg
|
|
I get an occasional similar problem, we have Mikrotik firewalls and from
tcpdump monitoring on the asterisk boxes I can see that the firewall
(unbidden) has changed the IAX port. Usually a firewall reset and
sometimes PBX reset combination fixes it.
Its odd as its only one direction, occurs rarely and with no obvious
driver. So IAX is happy in one direction but not the other. And I can
see packets in the unhappy point arriving on the wrong port.
I couldn't fix it without kicking the router/firewall so I would say its
a router problem in the Destination NAT process.
Cheers Duncan
| Quote: |
Hi.
Port is changed when NAT is applied from LAN to WAN.
While UDP session is maintained as ESTABLISHED, that port should not
change.
If your peer changes constantly of session port could be UDP session
is too short in NAT table on routers.
You can try setting qualify=1000 (which is in ms. Default is 2000),
and see if peer keeps same port.
Regards.
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
|
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users |
|
| Back to top |
|
|
webaccounts173 at jgoe...
Guest
|
| Posted: Tue Feb 10, 2015 4:02 am Post subject: [asterisk-users] IAX port |
|
|
| Quote: |
I get an occasional similar problem, we have Mikrotik firewalls and from tcpdump monitoring on
the asterisk boxes I can see that the firewall (unbidden) has changed the IAX port. Usually a
firewall reset and sometimes PBX reset combination fixes it.
Its odd as its only one direction, occurs rarely and with no obvious driver. So IAX is happy
in one direction but not the other. And I can see packets in the unhappy point arriving on the
wrong port.
I couldn't fix it without kicking the router/firewall so I would say its a router problem in
the Destination NAT process.
Cheers Duncan
| Quote: |
Port is changed when NAT is applied from LAN to WAN.
While UDP session is maintained as ESTABLISHED, that port should not change.
If your peer changes constantly of session port could be UDP session
is too short in NAT table on routers.
You can try setting qualify=1000 (which is in ms. Default is 2000),
and see if peer keeps same port.
Regards.
|
|
voip-info.org also has an entry about general NAT related issues, which could be relevant here
I do not seem to have problems with Netgear firewalls, but other firewalls show this effect. So
far it happened only on a single side, such that calls work from the other side. I already
checked the open ports with nc/ncat/netcat as UDP sender and receiver on the other end. The
ports are open, even when the arbitrary ports are used by Asterisk.
I'll need to read a bit more and evaluate my pcap traces and possibly ask the router vendors.
Thank you for your efforts.
jg
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users |
|
| Back to top |
|
|
ish at pack-net.co.uk
Guest
|
| Posted: Tue Feb 10, 2015 5:19 am Post subject: [asterisk-users] IAX port |
|
|
On 10 February 2015 at 09:02, jg <webaccounts173@jgoettgens.de (webaccounts173@jgoettgens.de)> wrote:
| Quote: |
| Quote: |
I get an occasional similar problem, we have Mikrotik firewalls and from tcpdump monitoring on the asterisk boxes I can see that the firewall (unbidden) has changed the IAX port. Usually a firewall reset and sometimes PBX reset combination fixes it.
Its odd as its only one direction, occurs rarely and with no obvious driver. So IAX is happy in one direction but not the other. And I can see packets in the unhappy point arriving on the wrong port.
I couldn't fix it without kicking the router/firewall so I would say its a router problem in the Destination NAT process.
Cheers Duncan
| Quote: |
Port is changed when NAT is applied from LAN to WAN.
While UDP session is maintained as ESTABLISHED, that port should not change.
If your peer changes constantly of session port could be UDP session
is too short in NAT table on routers.
You can try setting qualify=1000 (which is in ms. Default is 2000),
and see if peer keeps same port.
Regards.
|
|
voip-info.org also has an entry about general NAT related issues, which could be relevant here
I do not seem to have problems with Netgear firewalls, but other firewalls show this effect. So far it happened only on a single side, such that calls work from the other side. I already checked the open ports with nc/ncat/netcat as UDP sender and receiver on the other end. The ports are open, even when the arbitrary ports are used by Asterisk.
I'll need to read a bit more and evaluate my pcap traces and possibly ask the router vendors.
Thank you for your efforts.
jg
|
Some firewalls have a 'consistent NAT' option that needs to be enabled, otherwise you get the symptoms described.
--
| Quote: | Ishfaq Malik
Department: VOIP Support
Company: Packnet Limited
t: +44 (0)845 004 4994
f: +44 (0)161 660 9825
e: ish@pack-net.co.uk (ish@pack-net.co.uk)
w: http://www.pack-net.co.uk
Registered Address: PACKNET LIMITED, Duplex 2, Ducie House
37 Ducie Street
Manchester, M1 2JW
COMPANY REG NO. 04920552
|
|
|
| Back to top |
|
|
webaccounts173 at jgoe...
Guest
|
| Posted: Tue Feb 10, 2015 7:56 am Post subject: [asterisk-users] IAX port |
|
|
| Quote: |
Some firewalls have a 'consistent NAT' option that needs to be enabled, otherwise you get the
symptoms described.
|
While reading about NAT, I came across this web site:
http://nattest.net.in.tum.de/
The test tool looks at various NAT related properties and prints the results related to TCP/UDP
binding properties, TCP/UDP hole punching, etc.
In my case a very short value was reported for the UDP timeout, such that depending on the
sequence of packets, the entry in the mapping table might already have been deleted. This could
explain the random nature of my connection problem. Port predictability does not seem to be a
problem.
Does that make any sense?
jg
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users |
|
| Back to top |
|
|
ish at pack-net.co.uk
Guest
|
| Posted: Tue Feb 10, 2015 8:05 am Post subject: [asterisk-users] IAX port |
|
|
On 10 February 2015 at 12:55, jg <webaccounts173@jgoettgens.de (webaccounts173@jgoettgens.de)> wrote:
| Quote: | | Quote: |
Some firewalls have a 'consistent NAT' option that needs to be enabled, otherwise you get the symptoms described.
|
While reading about NAT, I came across this web site:
http://nattest.net.in.tum.de/
The test tool looks at various NAT related properties and prints the results related to TCP/UDP binding properties, TCP/UDP hole punching, etc.
In my case a very short value was reported for the UDP timeout, such that depending on the sequence of packets, the entry in the mapping table might already have been deleted. This could explain the random nature of my connection problem. Port predictability does not seem to be a problem.
Does that make any sense?
jg
|
Yes
UDP timeout being too short is another thing I've experience with firewalls (admittedly limited and once removed experience). Actually, this one can be a (mild) problem on Draytek routers and can be resolved by telnetting into the router and using the portmaptime command.
Also, turn of stateful packet inspection if it is an option.
--
| Quote: | Ishfaq Malik
Department: VOIP Support
Company: Packnet Limited
t: +44 (0)845 004 4994
f: +44 (0)161 660 9825
e: ish@pack-net.co.uk (ish@pack-net.co.uk)
w: http://www.pack-net.co.uk
Registered Address: PACKNET LIMITED, Duplex 2, Ducie House
37 Ducie Street
Manchester, M1 2JW
COMPANY REG NO. 04920552
|
|
|
| Back to top |
|
|
webaccounts173 at jgoe...
Guest
|
| Posted: Tue Feb 10, 2015 8:22 am Post subject: [asterisk-users] IAX port |
|
|
| Quote: |
UDP timeout being too short is another thing I've experience with firewalls (admittedly limited and once removed experience). Actually, this one can be a (mild) problem on Draytek routers and can be resolved by telnetting into the router and using the portmaptime command.
Also, turn of stateful packet inspection if it is an option.
|
In this case it is a TP-Link VPN router (TL-ER6...). |
|
| Back to top |
|
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|
Search
