VOIP gateway not running Using SIPs

RouterOS General
1

Hi all,

I am currently having a problem with one of my clients
who is trying to run a VOIP call center

The LAN setup is as follows:-

Wireless Link Point to Point 1mb to ISP > MT 230 RB > switch > Dlink AP 2100 with high gain omni directional antenna

Client setup:-

High gain dlink directional antenna > switch > Voip gateway (Mediatrix h323 ports uses 5000 - 6000) > voip handsets (Level one SIPS uses Ports 3128, 5060, 5061, 1020 - 10000 for voice)

The IP add setup is follows:-

Wireless P2p (Public IP add) MT e1 > Private IP adds, Public IP adds /29 MT e2, Dlink runs a virtual IP add of 172.16.0.1/24 not seen by MT

Client > Dlink AP 172.16.0.2/24, Wsitch> VOIP devices on Public IP adds

I read a lot of posts on port forwarding and setup my rules as follows :-

ip firewall rule forward>
src-address=0.0.0.0/32 (Pubic IP add) protocol=tcp action=passthrough
src-address=0.0.0.0/32 (Pubic IP add) protocol=udp action=passthrough

Rules setup as follows :-

add src-address=0.0.0.0/0:0-65350 in-interface=all dst-address=0.0.0.0/0:0-65350 protocol=tcp action=passthrough
add src-address=0.0.0.0/0:0-65350 in-interface=all dst-address=0.0.0.0/0:0-65350 protocol=udp action=passthrough

MT Licence Level 3, O/S ver 2.8

Any one with a similar problem, or similar experince please
assist

Thanks
Imran

2

so what problem do you actually have?

3

Hi Roman,

The problem, is the VOIP equipment does send or recieve traffic
i.e. calls cannot be made, over this setup

Thanks,
Imran

4

You need to forward your ports to the right IP address if using NAT.


You could also use proxy-arp in this situation and just give the VOIP gateway the public IP.

goto: http://forum.mikrotik.com/t/proxy-arp-solution-solved-howto/3130/1

you will find how to do that if you want.

5

with action=passthrough you are doing noting
you need action=masquerade at least
read the manual about NAT

6

Hi Guys,

Thanks , for all your replies, i finally got the devices working
the devices were metric sensetive and are now sitting behind
a router and working fine

Imran