[asterisk-dev] Symmetric RTP

[Andreas Krüger]

Yes that sounds very like the setup we're running now.

Currently the Asterisk servers are having a configuration in
res_stun_monitor with:

[general]
stunaddr=stun.l.google.com:19302
stunrefresh=30

And rtp.conf is configured with:

icesupport=yes
stunaddr=stun.l.google.com:19302


While the clients are configured to use the same stun address in SipJS.

Would it be smart to enable symmetric rtp in any case, like if the ice
negotiation fails ?

-- 
*ANDREAS KRÜGER*

Mobil: +45 51808863 <004551808863>
E-post: ak at patientsky.com
Adresse: Kongensgade 27 1, 5000 Odense C, Denmark
<https://www.google.no/maps/place/Kongensgade%2027,%205000%20Odense%20C>


2017-02-23 16:45 GMT+01:00 Mark Michelson <mmichelson at digium.com>:

> On 02/23/2017 08:28 AM, Andreas Krüger wrote:
>
> Hi,
>
> I was wondering with the following setup, if you would use Symmetric NAT.
>
>                             +--------------+
>
> +--------------+            | 89.192.76.11 |
> +--------------+
> |    Client 1  |     LAN    |   Router     |     Internet    |
> 72.87.123.32 |
> | 172.32.11.17 + ---------> | 172.32.11.1  + --------------> |  Asterisk
>  |
> +--------------+            +--------------+
> +--------------+
>
>
> I'm using PJSIP, and have set the external_media_address, external_signaling_address
> and local_net for the transport.
>
> The client is connecting with WSS and also using ICE.
>
> force_rport is set to yes in ps_endpoints section for the client. Also
> direct_media is no.
>
> Regards,
>
> Andreas Krüger
>
>
> I think that all depends on ICE is configured. If the client is not
> connecting to a STUN server, then ICE will only advertise the client's host
> candidate(s). Since Asterisk cannot reach the client directly, you would
> want to enable symmetric RTP so that Asterisk directs its media to the
> router instead.
>
> If the client is using a STUN server, it should advertise the router's
> public IP address as a server reflexive candidate. The ICE connectivity
> checks should result in Asterisk sending to that address. Therefore you
> would not need to enable symmetric RTP in that case.
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> asterisk-dev mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-dev/attachments/20170223/ad3317f7/attachment.html>