[asterisk-users] GXP2000, Linksys RV082 Firewall / NAT, Registrations

[Mark Coccimiglio]

I prefer to keep my NAT Timeouts short ( ~5 minutes) and lets the 
applications be responsible for keeping the connections open.  **Most** 
consumer grade routers use a timeout interval of 1 hour to 1 day.  A 
safe figure to start with is 600 seconds (10 minutes) and see if anyone 
complains.

lists at infoway.net wrote:

>Did I forget to mention I had STUN enabled? :)
>
>Well, that did it. Your suggestion worked perfectly.
>
>Does anyone know what a reasonable NAT Keep-Alive to use, if you don't
>have access to their firewall/router configuration?
>
>Thanks,
>Daniel
>
>-----Original Message-----
>From: "Mark Coccimiglio" <n3whx at amsat.org>
>Sent: Mon, December 18, 2006 2:27 pm
>To: lists at infoway.net, "Asterisk Users Mailing List - Non-Commercial
>Discussion" <asterisk-users at lists.digium.com>
>Subject: Re: [asterisk-users] GXP2000, Linksys RV082 Firewall /
>NAT,	Registrations
>
>Do you have STUN Enabled?   I had similar when I had STUN turned on.  I
>found it better to turn off stun and place in sip.conf   "nat=route".
>Also use "NAT Keep-Alive" on the ATA that is < "NAT Timeout" on the Router.
>
>Good Luck,
>Mark Coccimiglio
>IS Director
>Payroll Services Hawaii, Inc.
>http://www.psh-inc.com
>
>lists at infoway.net wrote:
>
>  
>
>>Hello,
>>
>>We have several clients with GXP2000 in their network and behind NAT. We
>>have one particular client that has several GXP2000 behind a Linksys RV082
>>VPN Firewall/Router which is doing NAT services. According to SIP packet
>>inspection, it detects it's a symmetric NAT.
>>
>>The problem we have is that even though we have configured Asterisk AND
>>the GXP2000 to register every 60 minutes, they keep unregistering and
>>re-registering every few couple of minutes (between 4 and 10 minutes).
>>
>>We have checked the client's Internet connection and it's not bouncing as
>>well as their local network is working stable.
>>
>>So, the only thing we can think of why these phones are re-registering so
>>often is their firewall device since it's the only "difference" between
>>this client and our other clients that use the GXP2000.
>>
>>Does anyone have any idea why this is happening or how this can be resolved?
>>
>>Thanks,
>>Daniel
>>
>>
>>
>>_______________________________________________
>>--Bandwidth and Colocation provided by Easynews.com --
>>
>>asterisk-users mailing list
>>To UNSUBSCRIBE or update options visit:
>>  http://lists.digium.com/mailman/listinfo/asterisk-users
>>
>>
>>
>>    
>>
>
>
>
>_______________________________________________
>--Bandwidth and Colocation provided by Easynews.com --
>
>asterisk-users mailing list
>To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
>  
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20061218/0d950b50/attachment.htm