I've implemented a PBX with asterisk in my LAN but the problem that I'm having is that when there is a video call between a softphone that is in the lan and one that is in an external network the mikrotik router RB2011 is filtering the incoming video, not the outcoming. I don't have this problem if the video call is make between softphones that are in the LAN. Also, I don't have problem with the audio signal, just the video.
As the ISP gives me just one public IP, there is a NAT. This is the firewall nat configuration:
/ip firewall nat add action=masquerade chain=srcnat out-interface=ether6 add action=dst-nat chain=dstnat dst-port=5060 protocol=udp to-addresses=\ 100.64.0.99 to-ports=5060 add action=dst-nat chain=dstnat dst-address=100.64.0.0/24 dst-port=10000-20000 protocol=udp src-port=10000-20000 to-addresses=100.64.0.0/24 to-ports=\ 10000-20000
And the last line is a try to allow the video incoming stream but it's not working. You can see here that the Private IP pool is 100.64.0.0/24 and the ports for rtp package are random between the ports ranges 10000-20000 (this is an Asterisk
characteristic) and I can changes the ports ranges but for every call I need 2 rtp ports and if there is a video stream 4 ports for every 2 softphones which stablish a video call. The rtp ports ranges 10000-20000 is an standar in asterisk.
Also the mikrotik port which is connected to the public network is ether6 and the port that connect the LAN is ether2, there is there a switch configuration with the ports ether1, ether3, ether4 and ether5 with the ether2 as master-ports.
How I must configure the nat ? What I'm missing?