newbie VoIP+NAT problems

RouterOS General
1

I have problems with my Vood VRG 121 (sip telephone gateway). My ISP only gives me one public ip so I must use NAT.
INTERNET->Mikrotik->switch->telephone gateway

I have forwarded port 5060-5061,3478-3479 and 10000-10007 (which is specified by my voip provider) to the gateways, but It can’t connect succesfully.

Does mikrotik change the packets source port by default?
the sip server connects to the source port of the packet it recievs, so it is important that it is the correct source port of the outgoing packets.

What possibilities has mikrotik in terms of troubleshooting?

Thanks in advance,
Hans

2

can you export your NAT rules.. Mikrotik only does what its programmed to do.. :slight_smile:

the rules should look somthing similar to this:

ip firewall nat add chain=dstnat dst-address=<public_ip> protocol=udp dst-port=5060-5061 action=dst-nat to-addresses=<SIP_gateway_IP> to-ports=5060-5061 comment="NAT SIP Traffic" disabled=no
3

Hi,

I had a similar problem with my VOIP gateway, VOIP
devices are very sensetive to metric counts, also what i found out
was the VOIP carriers are not specific to ports the return VOIP
traffic a number of ports, even with all ports open on the Mikrotik
i was unable to forward or NAT VOIP traffic

I got around by having to use a dlnk 604 router as follows

MT > Dlink 604 > VOIP device
and it works well

Thanks
Imran

4

I’m running a Grandstream BT100 SIP phone behind an MT firewall. It’s on a DMZ with it’s own private IP address in my case so these are my firewall permits, but if you forward the connections listed below it should work. Looks like you’re missing the 8000 range.

44   ;;; Internet established
     chain=DMZ-In connection-state=established action=accept 

45   ;;; Internet related
     chain=DMZ-In connection-state=related action=accept 

46   ;;; RTP
     chain=DMZ-In protocol=udp dst-port=5004 action=accept 

47   ;;; SIP signalling
     chain=DMZ-In protocol=udp dst-port=5060 action=accept

48   chain=DMZ-In protocol=tcp dst-port=3478 action=accept 

49   ;;; Voice
     chain=DMZ-In protocol=udp dst-port=8000-8012 action=accept 

50   chain=DMZ-In protocol=udp dst-port=3478 action=accept

Regards

Andrew