<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div><div><div>On 21/01/2014, at 10:24 am, David Cunningham <<a href="mailto:dcunningham@voisonics.com">dcunningham@voisonics.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr"><div>Hi Paul,<br><br></div>The ngrep on the Asterisk server does show it being received. Have you any idea what would prevent it getting from the network stack to Asterisk on that machine?<br><br></div><div class="gmail_extra">
<br></div></blockquote><div><br></div>Have you got a static route on asterisk or your default gateway showing how to get back to the 172. addresses i.e. pointing to the vpn box for 172 addresses?<div><br></div><div>Cheers Duncan<br><div></div></div><blockquote type="cite"><div class="gmail_extra"><br><div class="gmail_quote">On 21 January 2014 05:30, Paul Belanger <span dir="ltr"><<a href="mailto:paul.belanger@polybeacon.com" target="_blank">paul.belanger@polybeacon.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex; position: static; z-index: auto;">
<div class="HOEnZb"><div class="h5">On Sun, Jan 19, 2014 at 9:51 PM, David Cunningham<br>
<<a href="mailto:dcunningham@voisonics.com">dcunningham@voisonics.com</a>> wrote:<br>
> Hi,<br>
><br>
> We have a Kamailio and Asterisk cluster, both machines being on a real 103.x<br>
> IP address and also on a 172.x OpenVPN address.<br>
><br>
> The problem is that when Kamailo receives a call from the VPN and forwards<br>
> it to the Asterisk server on it's 103.x address, Asterisk never sees the<br>
> call.<br>
><br>
> If Kamailio receives a call from the VPN and forwards the call to the<br>
> Asterisk server on it's 172.x address then it works. However, if the call<br>
> isn't from the VPN then forwarding it to the 172.x address doesn't work. So<br>
> basically the problem is going between the real network and the VPN.<br>
><br>
> The question is, how can we make this work when calls are received on either<br>
> network on the Kamailio server and are forwarded to Asterisk?<br>
><br>
> Using ngrep on the Asterisk server we see that it does receive the INVITE,<br>
> but Asterisk's logging shows no sign it at all. We guess it's a Linux<br>
> networking issue rather than Asterisk's fault, but don't know where to fix<br>
> it. We do have net.ipv4.ip_forward = 1 on both the Kamailio and Asterisk<br>
> servers.<br>
><br>
> Thanks in advance for any help.<br>
><br>
> The ngrep on the Asterisk server:<br>
><br>
> U 2014/01/17 13:15:<a href="tel:15.599557%20172" value="+15599557172">15.599557 172</a>.x.x.x:5060 -> 103.y.y.y:5060<br>
> INVITE <a href="sip:9067268@103.y.y.y:5060;transport=udp">sip:9067268@103.y.y.y:5060;transport=udp</a> SIP/2.0.<br>
> Record-Route: <<a href="sip:172.x.x.x;lr=on">sip:172.x.x.x;lr=on</a>>.<br>
> Via: SIP/2.0/UDP 172.x.x.x;branch=z9hG4bK50c7.f49ceb73.0.<br>
> Via: SIP/2.0/UDP 192.z.z.z:5062;rport=5062;branch=z9hG4bK806710997.<br>
> From: "9067271" <<a href="sip:9067271@172.x.x.x">sip:9067271@172.x.x.x</a>>;tag=198791249.<br>
> To: <<a href="sip:9067268@172.x.x.x">sip:9067268@172.x.x.x</a>>.<br>
> Call-ID: <a href="mailto:1905625787@192.z.z.z">1905625787@192.z.z.z</a>.<br>
> ...<br>
><br>
> 172.x.x.x is the Kamailio server's VPN address<br>
> 103.y.y.y is the Asterisk server's real address<br>
> 192.z.z.z is the calling phone's LAN address<br>
><br>
</div></div>Sounds like a routing problem opposed to an application issue. You'll<br>
have to fire up tcpdump on Kamailio and see what happens to the<br>
packet. The look at the local routing tables to see where it is<br>
getting routed. If Asterisk is not receiving the patch, then Kamailio<br>
is not routing it properly.<br>
<br>
You'll be able to see everything once you have a pcap of the call.<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Paul Belanger | PolyBeacon, Inc.<br>
Jabber: <a href="mailto:paul.belanger@polybeacon.com">paul.belanger@polybeacon.com</a> | IRC: pabelanger (Freenode)<br>
Github: <a href="https://github.com/pabelanger" target="_blank">https://github.com/pabelanger</a> | Twitter: <a href="https://twitter.com/pabelanger" target="_blank">https://twitter.com/pabelanger</a><br>
<br>
--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com/" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
</font></span></blockquote></div><br><br clear="all"><br>-- <br>David Cunningham, Voisonics<br><a href="http://voisonics.com/" target="_blank">http://voisonics.com/</a><br>USA: +1 213 221 1092<br>UK: +44 (0) 20 3298 1642<br>
Australia: +61 (0) 2 8063 9019<br>
</div>
-- <br>_____________________________________________________________________<br>-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com">http://www.api-digital.com</a> --<br>New to Asterisk? Join us for a live introductory webinar every Thurs:<br> <a href="http://www.asterisk.org/hello">http://www.asterisk.org/hello</a><br><br>asterisk-users mailing list<br>To UNSUBSCRIBE or update options visit:<br> <a href="http://lists.digium.com/mailman/listinfo/asterisk-users">http://lists.digium.com/mailman/listinfo/asterisk-users</a></blockquote></div><br></div></body></html>