<div dir="ltr"><div>Hi Duncan,<br><br></div>The Asterisk machine also has a VPN IP address, so it has a route for 172.x addresses to go to tun0 VPN interface.<br><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">
On 21 January 2014 08:30, Duncan Turnbull <span dir="ltr"><<a href="mailto:duncan@e-simple.co.nz" target="_blank">duncan@e-simple.co.nz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word"><div><div><div class="im"><div>On 21/01/2014, at 10:24 am, David Cunningham <<a href="mailto:dcunningham@voisonics.com" target="_blank">dcunningham@voisonics.com</a>> wrote:</div><br>
<blockquote type="cite"><div dir="ltr"><div>Hi Paul,<br><br></div>The ngrep on the Asterisk server does show it being received. Have you any idea what would prevent it getting from the network stack to Asterisk on that machine?<br>
<br></div><div class="gmail_extra">
<br></div></blockquote><div><br></div></div>Have you got a static route on asterisk or your default gateway showing how to get back to the 172. addresses i.e. pointing to the vpn box for 172 addresses?<div><br></div><div>
Cheers Duncan<br><div></div></div><div><div class="h5"><blockquote type="cite"><div class="gmail_extra"><br><div class="gmail_quote">On 21 January 2014 05:30, Paul Belanger <span dir="ltr"><<a href="mailto:paul.belanger@polybeacon.com" target="_blank">paul.belanger@polybeacon.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div><div>On Sun, Jan 19, 2014 at 9:51 PM, David Cunningham<br>
<<a href="mailto:dcunningham@voisonics.com" target="_blank">dcunningham@voisonics.com</a>> wrote:<br>
> Hi,<br>
><br>
> We have a Kamailio and Asterisk cluster, both machines being on a real 103.x<br>
> IP address and also on a 172.x OpenVPN address.<br>
><br>
> The problem is that when Kamailo receives a call from the VPN and forwards<br>
> it to the Asterisk server on it's 103.x address, Asterisk never sees the<br>
> call.<br>
><br>
> If Kamailio receives a call from the VPN and forwards the call to the<br>
> Asterisk server on it's 172.x address then it works. However, if the call<br>
> isn't from the VPN then forwarding it to the 172.x address doesn't work. So<br>
> basically the problem is going between the real network and the VPN.<br>
><br>
> The question is, how can we make this work when calls are received on either<br>
> network on the Kamailio server and are forwarded to Asterisk?<br>
><br>
> Using ngrep on the Asterisk server we see that it does receive the INVITE,<br>
> but Asterisk's logging shows no sign it at all. We guess it's a Linux<br>
> networking issue rather than Asterisk's fault, but don't know where to fix<br>
> it. We do have net.ipv4.ip_forward = 1 on both the Kamailio and Asterisk<br>
> servers.<br>
><br>
> Thanks in advance for any help.<br>
><br>
> The ngrep on the Asterisk server:<br>
><br>
> U 2014/01/17 13:15:<a href="tel:15.599557%20172" value="+15599557172" target="_blank">15.599557 172</a>.x.x.x:5060 -> 103.y.y.y:5060<br>
> INVITE <a>sip:9067268@103.y.y.y:5060;transport=udp</a> SIP/2.0.<br>
> Record-Route: <<a>sip:172.x.x.x;lr=on</a>>.<br>
> Via: SIP/2.0/UDP 172.x.x.x;branch=z9hG4bK50c7.f49ceb73.0.<br>
> Via: SIP/2.0/UDP 192.z.z.z:5062;rport=5062;branch=z9hG4bK806710997.<br>
> From: "9067271" <<a>sip:9067271@172.x.x.x</a>>;tag=198791249.<br>
> To: <<a>sip:9067268@172.x.x.x</a>>.<br>
> Call-ID: <a href="mailto:1905625787@192.z.z.z" target="_blank">1905625787@192.z.z.z</a>.<br>
> ...<br>
><br>
> 172.x.x.x is the Kamailio server's VPN address<br>
> 103.y.y.y is the Asterisk server's real address<br>
> 192.z.z.z is the calling phone's LAN address<br>
><br>
</div></div>Sounds like a routing problem opposed to an application issue. You'll<br>
have to fire up tcpdump on Kamailio and see what happens to the<br>
packet. The look at the local routing tables to see where it is<br>
getting routed. If Asterisk is not receiving the patch, then Kamailio<br>
is not routing it properly.<br>
<br>
You'll be able to see everything once you have a pcap of the call.<br>
<span><font color="#888888"><br>
--<br>
Paul Belanger | PolyBeacon, Inc.<br>
Jabber: <a href="mailto:paul.belanger@polybeacon.com" target="_blank">paul.belanger@polybeacon.com</a> | IRC: pabelanger (Freenode)<br>
Github: <a href="https://github.com/pabelanger" target="_blank">https://github.com/pabelanger</a> | Twitter: <a href="https://twitter.com/pabelanger" target="_blank">https://twitter.com/pabelanger</a><br>
<br>
--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com/" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
</font></span></blockquote></div><br><br clear="all"><br>-- <br>David Cunningham, Voisonics<br><a href="http://voisonics.com/" target="_blank">http://voisonics.com/</a><br>USA: <a href="tel:%2B1%20213%20221%201092" value="+12132211092" target="_blank">+1 213 221 1092</a><br>
UK: <a href="tel:%2B44%20%280%29%2020%203298%201642" value="+442032981642" target="_blank">+44 (0) 20 3298 1642</a><br>
Australia: <a href="tel:%2B61%20%280%29%202%208063%209019" value="+61280639019" target="_blank">+61 (0) 2 8063 9019</a><br>
</div>
-- <br>_____________________________________________________________________<br>-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br><br>asterisk-users mailing list<br>To UNSUBSCRIBE or update options visit:<br> <a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a></blockquote>
</div></div></div><br></div></div><br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br><br clear="all"><br>-- <br>David Cunningham, Voisonics<br>
<a href="http://voisonics.com/" target="_blank">http://voisonics.com/</a><br>USA: +1 213 221 1092<br>UK: +44 (0) 20 3298 1642<br>Australia: +61 (0) 2 8063 9019<br>
</div>