[asterisk-bugs] [JIRA] (ASTERISK-22941) res_pjsip can't handle endpoints behind NAT

[Leif Madsen (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-22941?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Madsen updated ASTERISK-22941:
-----------------------------------

    Severity: Critical  (was: Major)
    
> res_pjsip can't handle endpoints behind NAT
> -------------------------------------------
>
>                 Key: ASTERISK-22941
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-22941
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_pjsip
>    Affects Versions: 12.0.0
>            Reporter: Leif Madsen
>            Severity: Critical
>         Attachments: failing_response.txt
>
>
> Trying to use res_pjsip today on Asterisk 12 (public interface) with devices behind NAT. First issue was lack of documentation for devices behind NAT. Once we got that far, we ran into an issue where the ACK response that Asterisk was sending for the received 200 OK after an INVITE was going to the private IP of the device, rather than the address listed in the AOR list.
> Configuration:
> {noformat}
> ; Basic UDP transport
> ;
> [transport-udp]
> type=transport
> protocol=udp    ;udp,tcp,tls,ws,wss
> bind=0.0.0.0
> local_net=127.0.0.0/24
> ;external_media_address=162.243.74.134
> ;external_signaling_address=162.243.74.134
> ;; TEST PEER
> [peer_ep](!)
> type=endpoint
> transport=transport-udp
> context=hackday
> disallow=all
> ;allow=h264
> allow=ulaw
> ;allow=gsm
> ice_support=no
> force_rport=yes
> rtp_symmetric=yes
> rewrite_contact=yes
> 100rel=no
> [peer_ep_no_ice](!)
> type=endpoint
> transport=transport-udp
> context=hackday
> disallow=all
> ;allow=h264
> allow=ulaw
> allow=gsm
> ice_support=no
> force_rport=yes
> rtp_symmetric=yes
> rewrite_contact=yes
> 100rel=no
> [peer_auth](!)
> type=auth
> auth_type=userpass
> password=w3lc0m3!!
> [peer_aor](!)
> type=aor
> remove_existing=yes
> max_contacts=5
> ;---------
> [peer_A](peer_ep)
> auth=peer_A
> aors=peer_A
> [peer_A](peer_auth)
> username=peer_A
> [peer_A](peer_aor)
> ;---------
> [peer_B](peer_ep)
> auth=peer_B
> aors=peer_B
> [peer_B](peer_auth)
> username=peer_B
> [peer_B](peer_aor)
> ;---------
> [peer_C](peer_ep)
> auth=peer_C
> aors=peer_C
> [peer_C](peer_auth)
> username=peer_C
> [peer_C](peer_aor)
> ;---------
> [peer_D](peer_ep)
> auth=peer_D
> aors=peer_D
> [peer_D](peer_auth)
> username=peer_D
> [peer_D](peer_aor)
> ;---------
> [peer_E](peer_ep)
> auth=peer_E
> aors=peer_E
> [peer_E](peer_auth)
> username=peer_E
> [peer_E](peer_aor)
> ;---------
> [peer_F](peer_ep_no_ice)
> auth=peer_F
> aors=peer_F
> [peer_F](peer_auth)
> username=peer_F
> [peer_F](peer_aor)
> ;----------
> [peer_G](peer_ep)
> auth=peer_G
> aors=peer_G
> [peer_G](peer_auth)
> username=peer_G
> [peer_G](peer_aor)
> {noformat}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira