Hi Joshua,
Looking at the transmitted SIP packets from Asterisk, it looks like Asterisk is only sending it’s own internal IP (it is behind a NAT too, with proper port forwarding) . I did set in my transport the external_signaling_address and external_media_address , and I have now put transport= into my endpoint configuration hoping they will “inherit” the correct public IP for the media . But Asterisk is still sending RTP to the wrong IP . I am trying to test a “real world” scenario of public IP and NAT traversal, but I do have split tunnel VPN in my environment so the endpoint and the asterisk server *could* reach each other by the private IP ,but I am actually trying to avoid this with a proper configuration since my real users will not be on any VPN, mostly. ;===============TRANSPORT [transport-tls] type=transport protocol=tls bind=0.0.0.0:5061 local_net=10.50.55.0/24 external_media_address=66.114.139.174 external_signaling_address=66.114.139.174 cert_file=/etc/asterisk/keys/dev1.crt priv_key_file=/etc/asterisk/keys/dev1.key ca_list_file=/etc/asterisk/keys/ca.crt cipher=AES256-SHA method=tlsv1 ;===============EXTENSION 6001 [6000] type=endpoint context=internal disallow=all allow=ulaw transport=transport-tls auth=auth6000 aors=6000 direct_media=no rewrite_contact=yes ; necessary if endpoint does not know/register public ip:port ice_support=no force_rport=yes rtp_symmetric=yes media_encryption=sdes [auth6000] type=auth auth_type=userpass password=6000 username=6000 [6000] type=aor qualify_frequency=30 max_contacts=1 remove_existing=yes ;===============EXTENSION 6001 [6001] type=endpoint context=internal disallow=all allow=ulaw transport=transport-tls auth=auth6001 aors=6001 direct_media=no rewrite_contact=yes ; necessary if endpoint does not know/register public ip:port ice_support=no force_rport=yes rtp_symmetric=yes media_encryption=sdes [auth6001] type=auth auth_type=userpass password=6001 username=6001 [6001] type=aor qualify_frequency=30 max_contacts=1 remove_existing=yes
smime.p7s
Description: S/MIME cryptographic signature
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users