[Asterisk-Users] SPA-1001 behind NAT -- mucho hair pulling

[Damon Estep]

Set nat=yes as you have
Enable qualify=yes

Important - Do a sip reload or asterisk reload (the nat and qualify
settings have to be refreshed, at least with realtime and
rtcahcefriends).

Turn off all NAT traversal features on the SPA2100

If it still does not work - your NAT router may be the issue, make sure
that security policy allows ALL outbound traffic from the SPA2100 (no
filters).

With Linksys, Belkin, and some 3com/USR NAT routers (among others I am
sure) you will need to make sure you have recent firmware on them, older
firmware (1 year or older in many cases) does not behave well with SIP
and NAT.

The NAT=yes tells asterisk to use the IP address and port of the
connection socket (a form of NAT discovery similar to a STUN server),
not what is in the registration message, and the qualify=yes tells
asterisk to send periodic SIP OPTIONS queries to keep the NAT timeout
from expiring on the NAT router.



> -----Original Message-----
> From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-
> bounces at lists.digium.com] On Behalf Of Eric Lyons
> Sent: Monday, May 01, 2006 5:01 PM
> To: asterisk-users at lists.digium.com
> Subject: [Asterisk-Users] SPA-1001 behind NAT -- mucho hair pulling
> 
> I've got a Sipura SPA-1001 that I'm trying to get working with an
Asterisk
> server that's on the public Internet, while the SPA-1001
> is behind NAT.  I did the first obvious thing and mapped ports 5060
and
> 10000 - 30000 to the local IP address of the SPA-1001.
> Tried numerous proxy settings, have all the NAT settings == yes.
> Registration seems to be happening; with sip debug on, I see it
> get an OK and sip show peers shows it on the list.  But I can't get a
dial
> tone.
> 
> It works fine connecting to a local Asterisk box (not traversing NAT).
> 
> Anyone know the magic trick?  My sip.conf looks like:
> [homesip]
> type=friend
> username=homesip
> secret=<pw>
> context=fagi
> ;qualify=yes
> host=dynamic
> nat=yes
> 
> tried qualify both ways.  My sip show peers says:
> 
> telebox*CLI> sip show peers
> Name/username              Host            Dyn Nat ACL Port     Status
> homesip/homesip            67.188.35.109    D   N      5060
> Unmonitored
> 
> Can't seem to find enough info to get this to work, any help
appreciated
> greatly,
> 
> Eric.
> 
> 
> _______________________________________________
> --Bandwidth and Colocation provided by Easynews.com --
> 
> Asterisk-Users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users