Sponsor: VoiceMeUp - Corporate & Wholesale VoIP Services

VoIP Mailing List Archives
Mailing list archives for the VoIP community
 SearchSearch 

[Freeswitch-users] TLS/SRTP with Innovaphone IP200


 
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> freeSWITCH Users
View previous topic :: View next topic  
Author Message
brian at freeswitch.org
Guest





PostPosted: Wed Aug 05, 2009 8:34 am    Post subject: [Freeswitch-users] TLS/SRTP with Innovaphone IP200 Reply with quote

Can you ship me a phone to test with? That's usually the missing
element when testing this stuff is I just can't afford to buy every
phone to test with.

/b

On Aug 5, 2009, at 3:52 AM, NOx-WHV wrote:

Quote:

Hello,

i have a problem using a innovaphone ip200 with freeswitch and tls/
srtp. The
freeswitch certificate is in the trust list of the phone and it
works with
tls for incomming calls. But outgoing calls were rejected to the
mailbox.
The freeswitch configuration is ok, because it works with a snom 320.

Who can help me to confugure the IP200?

Thanks

NOx
--


_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
Back to top
jim at evolutiontel.net
Guest





PostPosted: Wed Aug 05, 2009 9:16 am    Post subject: [Freeswitch-users] TLS/SRTP with Innovaphone IP200 Reply with quote

Hi NOx,

Can you clarify the direction of the calls. When you say outgoing do
you mean a call is terminating to the ip200?

I have been down a similar path while testing Eyebeam. If the
terminating phone sets an option to only accept secure calls and FS
does not send Secure Descriptions in the INVITE, Eyebeam would respond
with 415 response code and the call would fail. Depending on your
diaplan this could send your call to voicemail.

To fix it I added the following code to dialplan.
<action application="set" data="continue_on_fail=79"/>
<bridge blah blah blah>
<action application="set" data="bypass_media=false"/>
<action application="set" data="proxy_media=true"/>
<action application="set" data="ringback=$${uk-ring}"/>
<action application="pre_answer"/>
<action application="export" data="sip_secure_media=true"/>
<bridge blah blah blah>

The continue on fail captures the 415 response code forces the call to
continue to the next bridge while sip_secure_media forces the second
invite to include security descriptors. The rest was required because
I did not want to proxy media if the call was not secure, obviously if
the call is secure on a point to point basis FS will have to proxy the
media and this was the only way I could find for it to work.

Hope this helps.

Regards,


On Wed, Aug 5, 2009 at 6:52 PM, NOx-WHV<enno.egbert@googlemail.com> wrote:
Quote:

Hello,

i have a problem using a innovaphone ip200 with freeswitch and tls/srtp. The
freeswitch certificate is in the trust list of the phone and it works with
tls for incomming calls. But outgoing calls were rejected to the mailbox.
The freeswitch configuration is ok, because it works with a snom 320.

Who can help me to confugure the IP200?

Thanks

NOx
--
View this message in context: http://www.nabble.com/TLS-SRTP-with-Innovaphone-IP200-tp24823167p24823167.html
Sent from the Freeswitch-users mailing list archive at Nabble.com.


_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org




--
Jim Burke
Director Evolutiontel.
http://www.evolutiontel.net

_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
Back to top
msc at freeswitch.org
Guest





PostPosted: Wed Aug 05, 2009 10:03 am    Post subject: [Freeswitch-users] TLS/SRTP with Innovaphone IP200 Reply with quote

Jim,

Just curious - could you document this use case on the wiki? Maybe you
could create a page describing the setup and then link to it from the
TLS page.

Thanks,
MC

Sent from my iPhone

On Aug 5, 2009, at 9:07 AM, Jim Burke <jim@evolutiontel.net> wrote:

Quote:
Hi NOx,

Can you clarify the direction of the calls. When you say outgoing do
you mean a call is terminating to the ip200?

I have been down a similar path while testing Eyebeam. If the
terminating phone sets an option to only accept secure calls and FS
does not send Secure Descriptions in the INVITE, Eyebeam would respond
with 415 response code and the call would fail. Depending on your
diaplan this could send your call to voicemail.

To fix it I added the following code to dialplan.
<action application="set" data="continue_on_fail=79"/>
<bridge blah blah blah>
<action application="set" data="bypass_media=false"/>
<action application="set" data="proxy_media=true"/>
<action application="set" data="ringback=$${uk-ring}"/>
<action application="pre_answer"/>
<action application="export" data="sip_secure_media=true"/>
<bridge blah blah blah>

The continue on fail captures the 415 response code forces the call to
continue to the next bridge while sip_secure_media forces the second
invite to include security descriptors. The rest was required because
I did not want to proxy media if the call was not secure, obviously if
the call is secure on a point to point basis FS will have to proxy the
media and this was the only way I could find for it to work.

Hope this helps.

Regards,


On Wed, Aug 5, 2009 at 6:52 PM, NOx-WHV<enno.egbert@googlemail.com>
wrote:
Quote:

Hello,

i have a problem using a innovaphone ip200 with freeswitch and tls/
srtp. The
freeswitch certificate is in the trust list of the phone and it
works with
tls for incomming calls. But outgoing calls were rejected to the
mailbox.
The freeswitch configuration is ok, because it works with a snom 320.

Who can help me to confugure the IP200?

Thanks

NOx
--
View this message in context: http://www.nabble.com/TLS-SRTP-with-Innovaphone-IP200-tp24823167p24823167.html
Sent from the Freeswitch-users mailing list archive at Nabble.com.


_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org




--
Jim Burke
Director Evolutiontel.
http://www.evolutiontel.net

_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
Back to top
enno.egbert at googlem...
Guest





PostPosted: Thu Aug 06, 2009 4:18 am    Post subject: [Freeswitch-users] TLS/SRTP with Innovaphone IP200 Reply with quote

Hi Jim,

yes! It´s possible to call the IP200 full encrypted for example from a SNOM
or phonerlite. But when i try to call the SNOM from a innovaphone, the call
fails and i only hear the mailbox.

To modify the dialplan i am not so sure how i works. I don´t have any
experience of configure freeswitch or working with xml files. :confused:

In my dialplan i just modify a few lines. If you want, you can have a look
on the file in the attachment.

http://www.nabble.com/file/p24841050/default.xml default.xml

Thanks for your help. =)

NOx


Jim Burke-2 wrote:
Quote:

Hi NOx,

Can you clarify the direction of the calls. When you say outgoing do
you mean a call is terminating to the ip200?

I have been down a similar path while testing Eyebeam. If the
terminating phone sets an option to only accept secure calls and FS
does not send Secure Descriptions in the INVITE, Eyebeam would respond
with 415 response code and the call would fail. Depending on your
diaplan this could send your call to voicemail.

To fix it I added the following code to dialplan.
<action application="set" data="continue_on_fail=79"/>
<bridge blah blah blah>
<action application="set" data="bypass_media=false"/>
<action application="set" data="proxy_media=true"/>
<action application="set" data="ringback=$${uk-ring}"/>
<action application="pre_answer"/>
<action application="export" data="sip_secure_media=true"/>
<bridge blah blah blah>

The continue on fail captures the 415 response code forces the call to
continue to the next bridge while sip_secure_media forces the second
invite to include security descriptors. The rest was required because
I did not want to proxy media if the call was not secure, obviously if
the call is secure on a point to point basis FS will have to proxy the
media and this was the only way I could find for it to work.

Hope this helps.

Regards,


On Wed, Aug 5, 2009 at 6:52 PM, NOx-WHV<enno.egbert@googlemail.com> wrote:
Quote:

Hello,

i have a problem using a innovaphone ip200 with freeswitch and tls/srtp.
The
freeswitch certificate is in the trust list of the phone and it works
with
tls for incomming calls. But outgoing calls were rejected to the mailbox.
The freeswitch configuration is ok, because it works with a snom 320.

Who can help me to confugure the IP200?

Thanks

NOx
--
View this message in context:
http://www.nabble.com/TLS-SRTP-with-Innovaphone-IP200-tp24823167p24823167.html
Sent from the Freeswitch-users mailing list archive at Nabble.com.


_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org




--
Jim Burke
Director Evolutiontel.
http://www.evolutiontel.net

_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
View this message in context: http://www.nabble.com/TLS-SRTP-with-Innovaphone-IP200-tp24823167p24841050.html
Sent from the Freeswitch-users mailing list archive at Nabble.com.


_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
Back to top
enno.egbert at googlem...
Guest





PostPosted: Thu Aug 06, 2009 4:56 am    Post subject: [Freeswitch-users] TLS/SRTP with Innovaphone IP200 Reply with quote

Hi Brian,

where i have to ship the phone? Maybe i can ship it to you. But i have first
to ask the owner, because i also borrow it.

Thanks for your help

NOx


Brian West-3 wrote:
Quote:

Can you ship me a phone to test with? That's usually the missing
element when testing this stuff is I just can't afford to buy every
phone to test with.

/b

On Aug 5, 2009, at 3:52 AM, NOx-WHV wrote:

Quote:

Hello,

i have a problem using a innovaphone ip200 with freeswitch and tls/
srtp. The
freeswitch certificate is in the trust list of the phone and it
works with
tls for incomming calls. But outgoing calls were rejected to the
mailbox.
The freeswitch configuration is ok, because it works with a snom 320.

Who can help me to confugure the IP200?

Thanks

NOx
--


_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
View this message in context: http://www.nabble.com/TLS-SRTP-with-Innovaphone-IP200-tp24823167p24841078.html
Sent from the Freeswitch-users mailing list archive at Nabble.com.


_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
Back to top
Display posts from previous:   
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> freeSWITCH Users All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

VoiceMeUp - Corporate & Wholesale VoIP Services