[Asterisk-Users] Conecting to asterisk server through NAT usingIAX

Bartosz Wegrzyn - asterisk junk at lexon.ws
Tue Feb 22 06:01:05 MST 2005


All clients tryingtoconnect tothe asterix says that there is a problem
comunicating with the server. It looks like the clients don't see the
server. But from the log it looks ok. Maybe may config is wrong.
What is the simplest configuration to allow external clinets tocontect to
my server. For me it was this entry in iax.conf

[client1]
type=peer
usernamename=client1
secret=test
context=sip
host=dynamic
allow=all

Is the above ok.

Maybe I will try to eliminate the router and I will try it directly.

Thanks

> well, it seems like the 2 are communicating
> correctley.. just went through
> all the logs
> what is the error that you recieve?
>
> ----- Original Message -----
> From: "Bartosz Wegrzyn - asterisk" <junk at lexon.ws>
> To: "Asterisk Users Mailing List - Non-Commercial
> Discussion"
> <asterisk-users at lists.digium.com>
> Sent: Monday, February 21, 2005 12:52 PM
> Subject: Re: [Asterisk-Users] Conecting to asterisk
> server through NAT
> usingIAX
>
>
>> This was set on linksys wrt54.
>> I turned on the forwarding to asterisk server on
> port 4569.
>> I believe that by default all outgoing packets pass
> through.
>>
>> Bart,
>>
>>> Hallo
>>> Did you allow udp outgoing on 4569 as well.. i
> found
>>> udp bit different than
>>> tcp when comming to firewalls
>>> liaan
>>>
>>> ----- Original Message -----
>>> From: "Bartosz Wegrzyn - asterisk" <junk at lexon.ws>
>>> To: <timebandit001 at gmail.com>; "Asterisk Users
> Mailing
>>> List - Non-Commercial
>>> Discussion" <asterisk-users at lists.digium.com>
>>> Sent: Monday, February 21, 2005 12:29 PM
>>> Subject: Re: [Asterisk-Users] Conecting to asterisk
>>> server through NAT
>>> usingIAX
>>>
>>>
>>>>I did change the port 4569.
>>>> Also my router forwards those packets.
>>>>
>>>> If I start tcpdump port 4569 on my server I
> receive:
>>>>
>>>> 04:25:36.061292 IP 192.168.1.253.4569 >
>>> beu164.neoplus.adsl.tpnet.pl.4569:
>>>> UDP, length 24
>>>> 04:25:39.154871 IP
> beu164.neoplus.adsl.tpnet.pl.4569
>>>> 192.168.1.251.4569:
>>>> UDP, length 24
>>>> 04:25:39.155919 IP 192.168.1.253.4569 >
>>> beu164.neoplus.adsl.tpnet.pl.4569:
>>>> UDP, length 12
>>>> 04:25:44.063009 IP 192.168.1.253.4569 >
>>> beu164.neoplus.adsl.tpnet.pl.4569:
>>>> UDP, length 12
>>>> 04:25:46.063463 IP 192.168.1.253.4569 >
>>> beu164.neoplus.adsl.tpnet.pl.4569:
>>>> UDP, length 24
>>>> 04:25:46.063952 IP 192.168.1.253.4569 >
>>> beu164.neoplus.adsl.tpnet.pl.4569:
>>>> UDP, length 12
>>>> 04:25:49.119019 IP
> beu164.neoplus.adsl.tpnet.pl.4569
>>>> 192.168.1.251.4569:
>>>> UDP, length 24
>>>> 04:25:49.120272 IP 192.168.1.253.4569 >
>>> beu164.neoplus.adsl.tpnet.pl.4569:
>>>> UDP, length 12
>>>>
>>>> It means that client is trying to comunicate with
>>> asterisk server.
>>>> But the client says that the server could not be
>>> contacted.
>>>>
>>>> On asterisk console with iax2 debuging enabled I
>>> receive
>>>>
>>>> Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 000
> Type:
>>> IAX     Subclass:
>>>> REGREQ
>>>>   Timestamp: 00007ms  SCall: 00001  DCall: 00000
>>> [66.234.228.170:4569]
>>>>   USERNAME        : nWv96gaD75
>>>>   REFRESH         : 60
>>>>
>>>> Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001
> Type:
>>> IAX     Subclass:
>>>> REGAUTH
>>>>   Timestamp: 00012ms  SCall: 00055  DCall: 00001
>>> [66.234.228.170:4569]
>>>>   AUTHMETHODS     : 3
>>>>   CHALLENGE       : 164462354
>>>>   USERNAME        : nWv96gaD75
>>>>
>>>> Tx-Frame Retry[000] -- OSeqno: 001 ISeqno: 001
> Type:
>>> IAX     Subclass:
>>>> REGREQ
>>>>   Timestamp: 00049ms  SCall: 00001  DCall: 00055
>>> [66.234.228.170:4569]
>>>>   USERNAME        : nWv96gaD75
>>>>   REFRESH         : 60
>>>>   MD5 RESULT      :
> 478939afef8fa0ec5b480cc939dedf6f
>>>>
>>>> Rx-Frame Retry[ No] -- OSeqno: 001 ISeqno: 002
> Type:
>>> IAX     Subclass:
>>>> REGACK
>>>>   Timestamp: 00047ms  SCall: 00055  DCall: 00001
>>> [66.234.228.170:4569]
>>>>   USERNAME        : nWv96gaD75
>>>>   DATE TIME       : 173363009
>>>>   REFRESH         : 60
>>>>   APPARENT ADDRES : IPV4 69.208.170.240:4569
>>>>
>>>> Tx-Frame Retry[-01] -- OSeqno: 002 ISeqno: 002
> Type:
>>> IAX     Subclass: ACK
>>>>   Timestamp: 00047ms  SCall: 00001  DCall: 00055
>>> [66.234.228.170:4569]
>>>> Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 000
> Type:
>>> IAX     Subclass:
>>>> REGREQ
>>>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
>>> [83.28.32.164:4569]
>>>>   USERNAME        : tester
>>>>   REFRESH         : 300
>>>>
>>>> Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 001
> Type:
>>> IAX     Subclass:
>>>> REGAUTH
>>>>   Timestamp: 00019ms  SCall: 00002  DCall: 13354
>>> [83.28.32.164:4569]
>>>>   AUTHMETHODS     : 1
>>>>   USERNAME        : tester
>>>>
>>>> Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 000
> Type:
>>> IAX     Subclass:
>>>> REGREQ
>>>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
>>> [83.28.32.164:4569]
>>>>   USERNAME        : tester
>>>>   REFRESH         : 300
>>>>
>>>> Tx-Frame Retry[-01] -- OSeqno: 000 ISeqno: 001
> Type:
>>> IAX     Subclass: ACK
>>>>   Timestamp: 00003ms  SCall: 00002  DCall: 13354
>>> [83.28.32.164:4569]
>>>> Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 000
> Type:
>>> IAX     Subclass:
>>>> REGREQ
>>>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
>>> [83.28.32.164:4569]
>>>>   USERNAME        : tester
>>>>   REFRESH         : 300
>>>>
>>>> Tx-Frame Retry[-01] -- OSeqno: 000 ISeqno: 001
> Type:
>>> IAX     Subclass: ACK
>>>>   Timestamp: 00003ms  SCall: 00002  DCall: 13354
>>> [83.28.32.164:4569]
>>>> Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 000
> Type:
>>> IAX     Subclass:
>>>> REGREQ
>>>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
>>> [83.28.32.164:4569]
>>>>   USERNAME        : tester
>>>>   REFRESH         : 300
>>>>
>>>> Tx-Frame Retry[-01] -- OSeqno: 000 ISeqno: 001
> Type:
>>> IAX     Subclass: ACK
>>>>   Timestamp: 00003ms  SCall: 00002  DCall: 13354
>>> [83.28.32.164:4569]
>>>> Tx-Frame Retry[001] -- OSeqno: 000 ISeqno: 001
> Type:
>>> IAX     Subclass:
>>>> REGAUTH
>>>>   Timestamp: 00019ms  SCall: 00002  DCall: 13354
>>> [83.28.32.164:4569]
>>>>   AUTHMETHODS     : 1
>>>>   USERNAME        : tester
>>>>
>>>> Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 000
> Type:
>>> IAX     Subclass:
>>>> REGREQ
>>>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
>>> [83.28.32.164:4569]
>>>>   USERNAME        : tester
>>>>   REFRESH         : 300
>>>>
>>>> Tx-Frame Retry[-01] -- OSeqno: 000 ISeqno: 001
> Type:
>>> IAX     Subclass: ACK
>>>>   Timestamp: 00003ms  SCall: 00002  DCall: 13354
>>> [83.28.32.164:4569]
>>>> Tx-Frame Retry[000] -- OSeqno: 001 ISeqno: 001
> Type:
>>> IAX     Subclass:
>>>> LAGRQ
>>>>   Timestamp: 10022ms  SCall: 00002  DCall: 13354
>>> [83.28.32.164:4569]
>>>> Tx-Frame Retry[002] -- OSeqno: 000 ISeqno: 001
> Type:
>>> IAX     Subclass:
>>>> REGAUTH
>>>>   Timestamp: 00019ms  SCall: 00002  DCall: 13354
>>> [83.28.32.164:4569]
>>>>   AUTHMETHODS     : 1
>>>>   USERNAME        : tester
>>>>
>>>> Tx-Frame Retry[001] -- OSeqno: 001 ISeqno: 001
> Type:
>>> IAX     Subclass:
>>>> LAGRQ
>>>>   Timestamp: 10022ms  SCall: 00002  DCall: 13354
>>> [83.28.32.164:4569]
>>>> Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 000
> Type:
>>> IAX     Subclass:
>>>> REGREQ
>>>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
>>> [83.28.32.164:4569]
>>>>   USERNAME        : tester
>>>>   REFRESH         : 300
>>>>
>>>> Tx-Frame Retry[-01] -- OSeqno: 000 ISeqno: 001
> Type:
>>> IAX     Subclass: ACK
>>>>   Timestamp: 00003ms  SCall: 00002  DCall: 13354
>>> [83.28.32.164:4569]
>>>> Tx-Frame Retry[000] -- OSeqno: 002 ISeqno: 001
> Type:
>>> IAX     Subclass:
>>>> PING
>>>>   Times
>>>>
>>>>
>>>> Any ideas what could be wrong.
>>>>
>>>> Thanks
>>>>
>>>>
>>>>>> I use linksys router.
>>>>>> Now, I am trying to connect from outside to my
>>> asterisk server.
>>>>>> I use Diax as iax client.
>>>>>> For some reason I cannot connect to my server
> from
>>> outside.
>>>>>> On my router I forward those ports to my
> asterisk
>>> server.
>>>>>> 5060-5063
>>>>>> 10000-20000
>>>>>> 5036
>>>>>> 4569
>>>>> For IAX, only port you have to forward is 4569
> UDP
>>>>>
>>>>> Notice the UDP, not TCP
>>>>>
>>>>> I'm using Linksys WRT54G and it works without a
>>> hitch.
>>>>>
>>>>>> It works ok with broadvoice, but clinets cannot
>>> connect to the server.
>>>>>> This is my iax.conf file
>>>>>> [general]
>>>>>> port=5036
>>>>>
>>>>> well, here's your problem, port=5036. This is not
>>> the standard IAX
>>>>> port. comment that line or replace it with
>>> port=4569
>>>>>
>>>>> hth
>>>>> _______________________________________________
>>>>> Asterisk-Users mailing list
>>>>> Asterisk-Users at lists.digium.com
>>>>>
>>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>>>>> To UNSUBSCRIBE or update options visit:
>>>>>
>>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>>>>>
>>>>
>>>> _______________________________________________
>>>> Asterisk-Users mailing list
>>>> Asterisk-Users at lists.digium.com
>>>>
>>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>>>> To UNSUBSCRIBE or update options visit:
>>>>
>>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>>>>
>>>
>>>
>>>
>>>
>>> __________________________________
>>> Do you Yahoo!?
>>> The all-new My Yahoo! - Get yours free!
>>> http://my.yahoo.com
>>>
>>>
>>> _______________________________________________
>>> Asterisk-Users mailing list
>>> Asterisk-Users at lists.digium.com
>>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>>> To UNSUBSCRIBE or update options visit:
>>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>>>
>>
>> _______________________________________________
>> Asterisk-Users mailing list
>> Asterisk-Users at lists.digium.com
>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>> To UNSUBSCRIBE or update options visit:
>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>>
>
>
>
>
> __________________________________
> Do you Yahoo!?
> All your favorites on one personal page – Try My Yahoo!
> http://my.yahoo.com
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>




More information about the asterisk-users mailing list