[asterisk-users] IAX2 thru NAT problem

[Marian Rychtecky]

Hi people,
	i have problem with IAX2 between two asterisk PBX. When i try call some 
number i get "INVAL" packet, but when i try call same number via OpenVPN 
(is between this two asterisk) call is working fine.So i debug 
communications and here is my opinion ...

Schema of connection:

  Asterisk1 -> ADSL router with NAT -> INTERNET -> Asterisk2


A)Calling directly via public IP's (port 4569 is forwarded on ADSL modem 
to asterisk1) - not working

Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 000 Type: IAX     Subclass: NEW
    Timestamp: 00013ms  SCall: 00004  DCall: 00000 [213.160.177.186:4569]
    VERSION         : 2
    CALLED NUMBER   : 1299
    CODEC_PREFS     : ()
    CALLING NUMBER  : 1199
    CALLING PRESNTN : 0
    CALLING TYPEOFN : 0
    CALLING TRANSIT : 0
    CALLING NAME    : Marian_Rychtecky
    LANGUAGE        : en
    USERNAME        : <some_username>
    FORMAT          : 2
    CAPABILITY      : 2097151
    ADSICPE         : 2
    DATE TIME       : 2006-10-18  10:16:14

Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX     Subclass: 
AUTHREQ
    Timestamp: 00006ms  SCall: 00003  DCall: 00004 [213.160.177.186:9785]
    AUTHMETHODS     : 3
    CHALLENGE       : 585590037
    USERNAME        : VALSABBIA-SLOVENSKO

Tx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 000 Type: IAX     Subclass: INVAL
    Timestamp: 00000ms  SCall: 00004  DCall: 00003 [213.160.177.186:9785]


B) calling thru openvpn - working

Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 000 Type: IAX     Subclass: NEW
    Timestamp: 00004ms  SCall: 00001  DCall: 00000 [192.168.255.2:4569]
    VERSION         : 2
    CALLED NUMBER   : 1299
    CODEC_PREFS     : ()
    CALLING NUMBER  : 1199
    CALLING PRESNTN : 0
    CALLING TYPEOFN : 0
    CALLING TRANSIT : 0
    CALLING NAME    : Marian_Rychtecky
    LANGUAGE        : en
    USERNAME        : <user_name>
    FORMAT          : 2
    CAPABILITY      : 2097151
    ADSICPE         : 2
    DATE TIME       : 2006-10-18  10:14:16

     -- Called VALSABBIA-SLOVENSKO:1234 at 192.168.255.2/1299
Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX     Subclass: 
AUTHREQ
    Timestamp: 00012ms  SCall: 00001  DCall: 00001 [192.168.255.2:4569]
    AUTHMETHODS     : 3
    CHALLENGE       : 186694617
    USERNAME        : VALSABBIA-SLOVENSKO

Tx-Frame Retry[000] -- OSeqno: 001 ISeqno: 001 Type: IAX     Subclass: 
AUTHREP
    Timestamp: 00034ms  SCall: 00001  DCall: 00001 [192.168.255.2:4569]
    MD5 RESULT      : b0674601456416db7e474de9a858c742

Rx-Frame Retry[ No] -- OSeqno: 001 ISeqno: 002 Type: IAX     Subclass: 
ACCEPT
    Timestamp: 00041ms  SCall: 00001  DCall: 00001 [192.168.255.2:4569]
    FORMAT          : 2



Only difference what i see is that in first case is the source port of 
"far-end" changed from "4569" to "9785" because of NAT of ADSL modem.In 
case of calling thru openvpn is port unchanged ... It is possible thats 
the problem?


Can somebody help me with my problem? Thanks a lot....


-- 

Marian Rychtecky
marian at mari.cz

Tel. +420 724 397 441
ICQ 76582857