I have somewhat of a small issue, I have an internal Asterisk server with some clients outside of my network so I added a NAT from outside to forward SIP and a few other ports to my internal IP. This works ok.
I setup another Asterisk server outside of my network and I don’t have access to it. Issue is in the Mikrotik becaus if i bypass it works.
I setup a log where I can see what’s going on when I try to access the outside server with IP phone and I get this:
input: in:ether1-gateway out:(none), src-mac 00:07:7d:xx:xx:xx, proto UDP, 74.xxx.xxx.xxx:27026->96.xxx.xxx.xxx:16466, len 280
I tried adding a new rule: Chain:input/ source address:74.xxx.xxx.xxx / action:Accept
I normally use Winbox so sorry if the string above is not formal.
No go.
Any suggestions?
I am not too sure anymore where the issue is, I’ve tried disabling all blocking filters and all dsnat and still getting the same problem.
More about the problem:
I have a Cisco IP phone with 2 active lines
Line 1 is connected to my local SIP server and working fine
Line 2 is connected to a distant SIP server, the line is active, I get dial tone but if I call an extension on another network but linked to the same SIP server, it rings but no audio.
If I connect my IP phone directly to my Cable modem, Line 2 works ok.
I know it is something in the Firewall but not sure how to diagnose.
I have 751G-2HnD with Firmware 3.09
Any help is more than welcome
Looks like you aren’t accepting the RTP (audio) ports for your call.
have you got the SIP ALG on?
Have you got NAT turned on in your extension settings on the Asterisk server?
What port range is set for RTP on your server?
Is your server directly on a public IP or is it also behind a NAT router?
Regards
Alexander
If you are referring to “SIP service port” it is turned on with ports 5060-5065
Yes, I have other phones (on other networks) connected to the same server and my phone works well if I bypass the Mikrotik.
Maybe that’s where my problem is… my server is using ports 16384-32768
I Added a filter with: Chain:input / Protocol:UDP / Src Port: 16384-32768 / Action:Accept
But that didn’t make a difference.
The server is behind a NAT (Watchguard) but another phone connects to it with no problem.
Maybe I should do factory default and start fresh trying to connect to the external server and then work my way to the internal server?
I reset my router and started from scratch. Turns out RTP ports are 10000-20000 but I have an issue, I can only get one server or the other working.
This is my configuration:
Either of these will work but how can I make both of them work?
chain=dstnat action=dst-nat to-addresses=[Asterisk-IP] protocol=udp src-port=10000-20000
chain=dstnat action=dst-nat to-addresses=[Freeswitch-IP] protocol=udp src-port=10000-20000
Note: I drew two phones but it is actually one phone with two lines so it is the same IP for both lines.