Community discussions

 
Multik
newbie
Topic Author
Posts: 29
Joined: Wed Mar 10, 2010 9:00 am

Panasonic behind Mikrotik... SIP

Mon Nov 19, 2012 11:10 am

Hello All...

I have a trouble with setup SIP. Panasonic KX-TD/NCP behind mikrotik...
192.168.28.5,192.168.28.6 -internal IP of Panasonic.

I'm create two dst-nat policy:
0 ;;; ATC
chain=dstnat action=dst-nat to-addresses=192.168.28.5 protocol=udp
dst-address=(external-ip) in-interface=ether1-gateway dst-port=5061

1 ;;; ATC
chain=dstnat action=dst-nat to-addresses=192.168.28.6 protocol=udp
dst-address=(external-ip) in-interface=ether1-gateway dst-port=12000-12511

But voice got to outside only, incoming voice not.
In mikrotik services sip-service is enabled.
 
coffeecoco
Member Candidate
Member Candidate
Posts: 175
Joined: Wed Oct 12, 2005 1:17 pm

Re: Panasonic behind Mikrotik... SIP

Mon Nov 19, 2012 11:14 am

sip is such a terrible service when mixed with NAT
I see it ALL the time..... life becomes much simple and easy if you create "bridge's" or "VPN's" or Routed networks


Avoid NAT and it all starts to be easy.
 
User avatar
NAB
Trainer
Trainer
Posts: 503
Joined: Tue Feb 10, 2009 4:08 pm
Location: UK
Contact:

Re: Panasonic behind Mikrotik... SIP

Mon Nov 19, 2012 12:01 pm

sip is such a terrible service when mixed with NAT
As a VoIP telco, I have to agree. Don't expect it to work. Expect niggles, glitches and strange things. Personally, I am sick to the back teeth of telecoms companies installing systems without having the first clue how the Internet works...

That having been said, there is one thing you can do to make ROS work with SIP better, and that is to disable the SIP ALG which (in my experience) makes things ten times worse. Try:
/ip firewall service-port disable sip
at the command line and see if that improves things.

We place small RouterBoards at our customers' sites and tunnel VoIP traffic over L2TP to our hosted LNS. Removes NAT from the equation completely and also has the advantage that we then have access in to our customers' networks so we can reprogram phones and resolve problems remotely.

But then we're that rare breed of telecoms company - one that knows what it's doing!
Nicholas Barnes BSc(hons)
Certified Mikrotik Consultant
Certified Mikrotik Trainer

Vitell - Asterisk, Linux and network consultants
Unofficial IRC channel: #routerboard on irc.z.je
 
Multik
newbie
Topic Author
Posts: 29
Joined: Wed Mar 10, 2010 9:00 am

Re: Panasonic behind Mikrotik... SIP

Mon Nov 19, 2012 12:08 pm

I'm tried
/ip firewall service-port disable sip
IP-Phone/3cxPhone6 can't complete registration on station (Authentication failed)

In packets i see internal IP of Panasonic, i need to change it to external ip
 
coffeecoco
Member Candidate
Member Candidate
Posts: 175
Joined: Wed Oct 12, 2005 1:17 pm

Re: Panasonic behind Mikrotik... SIP

Mon Nov 19, 2012 12:58 pm

I'm tried
/ip firewall service-port disable sip
IP-Phone/3cxPhone6 can't complete registration on station (Authentication failed)

In packets i see internal IP of Panasonic, i need to change it to external ip

Yes that is the exact problem when you mix SIP with NAT

Expect pain and frustration if you continue to keep trying

save your self time create a tunnel to the remote network
 
Multik
newbie
Topic Author
Posts: 29
Joined: Wed Mar 10, 2010 9:00 am

Re: Panasonic behind Mikrotik... SIP

Mon Nov 19, 2012 1:55 pm

We can't support all 'out-of-office' managers. We want IP-phone usage only.
 
User avatar
NAB
Trainer
Trainer
Posts: 503
Joined: Tue Feb 10, 2009 4:08 pm
Location: UK
Contact:

Re: Panasonic behind Mikrotik... SIP

Tue Nov 20, 2012 1:16 pm

In packets i see internal IP of Panasonic, i need to change it to external ip
The PBX/server they are registering to may be able to flag registrations as from a NATted source. Asterisk, for example, lets you state "nat=yes" in sip.conf in which case the address within the SIP packets is ignored in favour of the source address of the udp IP packet.

If you cannot mark handsets as being from a NATted source, then I am afraid that it simply will not work for you.
We can't support all 'out-of-office' managers. We want IP-phone usage only.
I am afraid I do not understand this.
Nicholas Barnes BSc(hons)
Certified Mikrotik Consultant
Certified Mikrotik Trainer

Vitell - Asterisk, Linux and network consultants
Unofficial IRC channel: #routerboard on irc.z.je
 
Multik
newbie
Topic Author
Posts: 29
Joined: Wed Mar 10, 2010 9:00 am

Re: Panasonic behind Mikrotik... SIP

Tue Nov 20, 2012 1:26 pm

Panasonic dosn't have settings for NAT like Asterisk :(

My be GNU Gatekeeper help me....

Who is online

Users browsing this forum: No registered users and 102 guests