VoIP and Double NAT

Hi
My Router Rb730 are planed to be used as Internet fail over between 2 ISP that provides me with their router and a cable to conect to my Mikrotik,

the Question: how do i get my VoIP phone connected to my RB750 to get connected to VOIP server on the internet, internet work and failover works and will group VoIP into an separate IP range but VoIP phones does not get connected to SIP server on the net..

Connected directly to 1 of the ISP routers(Nokia) and VoIp phone(cisco spa525) and it works but when i conect the VoIP phone to my Mikrotik it will not connect to sip server on the internet but my pc on the same network have internet and can ping sip server.

What is the good nat rule to get VoIp phones up and running behind my Mikrotik even if router swithes over to backup ISP router with its own local Ip adress given to me but still be able to use the VoIP phonesover the internet.?

Have added Firewall rules to permit SIP
Chain=Forward, Source ip=192.168.10.0/24, dst address=“sip server on the internet”, protocol=udp, dst-port=5060-5061, Action=accept
Chain=Forward, Source ip=192.168.10.0/24, dst address=“sip server on the internet”, protocol=udp, dst-port=10000-20000, Action=accept
disable SIP helper in ip/firewall/service ports as well
rules palced before 1st deny rule in default RB750g2 firewall rule setup
Firewall/nat
Chain=src-nat, protocol=udp, dst-port=5060-5061, out-interface=ether1, Action=Masquerade

Thank you

Hi,

With default firewall rules it should normally work with just the sip alg turned off.

However I have noticed (Europe ??) that the voip is often provided over a dedicated vlan.
So presumably if your voip traffic is not using that dedicated vlan, the voip will not work/connect.

If this is the case, you can set the mikrotik to connect (or route) the phones via that dedicated vlan and get them to work.
However it seems likely they will be difficult to get working over some arbitrary backup link.

Hi,

No VLAN, would be nice in a sense but more complcated.
I Connected my Cisco SPA525 to the ISP router on port2 and works, return to Mikrtik i see on torch for port ether1 on mikrtik from ISP on port 1 and see SIP traffic …

Good NEWS, used netinstall and reinsatalled 2 or 3 times the firmware and now it works, hope it keeps working …

Issue seems have disapeard, reinstaled all of it, firware and confiration, be aware upgrading to test version 19.1 i think bricked the unit and reinstalled stable version. be aware

so glad i got it working