[asterisk-users] Sending calls from behind NAT

[J Gao]

On 12-11-13 11:38 PM, bilal ghayyad wrote:
> Dears;
>
> What Jian said is the right and it worked.
>
> But I have the following questions:
>
> Why 192.168.10.2 is wrong and I have to use 192.168.10.0? Also, do I have to set the localnet or it is enough to set the externip?


The IP information is called "IP subnetting" which is the basic rule 
about IP address. It seems you are using a Class C private subnet so 
192.168.10.2 will never be a correct "network address". (Depend on your 
subnet mask, the network address could be like something else. But the 
last octet 2 is obviously wrong!)

If your Asterisk is behind a NAT router/firewall, you need:
localnet=
externip=
nat=yes

Regards,

Jian


>
>  From the other side, I am using Asterisk 1.8.12.0 and when I was searching in the sip.conf, I did not find externip (so I added by my hand) and I remember very well that before I was able to find the externip in the sip.conf, although I am finding externadd. So why this?
>
> One more thing, what is the difference between externadd and externip?
>
> Regards
> Bilal
>
> -----------
>>> Dears;
>>>
>>> It seems my service provider is requesting a
>> complicated settings to allow me to send from behind NAT.
>>>
>>> What they said:
>>>
>>> "It shouldn't matter as long as you are handling the
>> NAT correctly your end. We do not fix NAT so if you're
>> sending internal addresses in your INVITEs or SDP then
>> things will fail but if you're handling it correctly, we
>> shouldn't tell the difference".
>>>
>>>
>>> Really, I did not understand what exactly they need.
>> But maybe what they need is to see my public IP address
>> without the private IP address (this what I understood if I
>> am right).
>>>
>>> I tried to use the following in the [general] settings
>> in the sip.conf
>>>
>>> localnet=192.168.10.2/255.255.255.254
>>> externadd =196.40.164.239
>>>
>>
>>
>> I think these setting are all wrong:
>> 1. local network should be something like: 192.168.10.0
>> 2. Subnetmask cant' be 255.255.255.254 !
>> 3. externip=x.x.x.x (Not "externadd")
>>
>> Jian
>>
>>> But even, the calls are drop .. so what I have to do?
>>>
>>> The following what I get when I enabled the sip debug:
>>>
>>>
>>> <--- SIP read from UDP:194.0.220.220:5060 --->
>>> SIP/2.0 403 UA behind NAT not accepted here
>>> Via: SIP/2.0/UDP
>> 192.168.10.2:5060;branch=z9hG4bK123c8781;rport=5060;received=196.40.164.239
>>> From: "asterisk"
>> <sip:gwbilalkwpbx at 192.168.10.2>;tag=as45d7c63b
>>> To: <sip:9617565116 at outbound.exxs.com:5060>;tag=84f31a80f7bc633204d0bd8d76e9cb24.53a5
>>> Call-ID:
>> 6f68f414109ba1ff596726c74a0cb5ac at 192.168.10.2:5060
>>> CSeq: 102 INVITE
>>> P-Behind-NAT: source
>>> Server: Service Provider Global Proxy v2
>>> Content-Length: 0
>>>
>>> So what could resolve my problem?
>>>
>>> Regards
>>> Bilal
>
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>                 http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>     http://lists.digium.com/mailman/listinfo/asterisk-users
>


--