Well, I thought I had this NAT issue licked.  I know this is a little OT but
perhaps a benefit to those who have audio issues with NAT.

Not being able to get audio through a NAT with monowall, I created a test
network to test the 1:1 NAT mapping with monowall and it seemed to work.

When I hooked back to my ISP it's not working.  I'll lay out my config with
the hope an obvious mistake is evident.  The basic change was from a test
/24 network to an ISP /29 network.  Am I missing something?

Test Environment:

Main Site NAT monowall (works)

WAN IP  192.168.10.120/24
LAN             192.168.10.1

Astlinux        192.168.10.10

NAT 1:1 192.168.10.121/32 to 192.168.10.10

Remote site NAT

WANIP           192.168.10.122/24
LAN             192.168.11.1



ISP Environment: (not working)

Main Site NAT monowall (works)

WAN IP  x.x.x.115/29
LAN             192.168.10.1

Astlinux        192.168.10.10

NAT 1:1 x.x.x.116/32 to 192.168.10.10

Remote site NAT

WANIP           x.x.x.x/29
LAN             192.168.11.1


I even tried another ISP connection for the remote client with no luck.


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Lonnie
Abelbeck
Sent: Friday, December 21, 2007 3:20 PM
To: AstLinux Users Mailing List
Subject: Re: [Astlinux-users] ASTLINUX behind NAT

Kevin,

When in doubt, blame the Polycom phone. :-)

My setup is similar, but 1:1 NAT at the asterisk end, Linksys/Cisco/ 
Sipura ATA's and IP phones on the remote 1:MANY NAT ends.  All NAT's  
are via m0n0wall.

If you have a non-polycom phone I would try that.

Lonnie

On Dec 21, 2007, at 2:07 PM, Kevin Kiely wrote:

> it looks like it's the double nat issue.  If I place the asterisk  
> box behind
> nat (used dd-wrt for the router) and the polycom phone is not  
> behind nat it
> works through the nat router.  If I introduce the second nat device  
> is where
> I run into trouble.  That's why I was curious if you have used two nat
> devices, the main site with the ports forwarded and the remote  
> clent behind
> a nat device?
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of  
> Lonnie
> Abelbeck
> Sent: Friday, December 21, 2007 2:38 PM
> To: AstLinux Users Mailing List
> Subject: Re: [Astlinux-users] ASTLINUX behind NAT
>
> Kevin,
>
>> Do you have this working with monowall?
>
>
> Yes, for years.  Though I use 1:1 NAT with a dedicated static IP for
> AstLinux.
>
> Monowall 1.3B5 has issues, i would use 1.3B4 or wait for 1.3B6 to
> appear soon.  (1.3B6-pre is also available)
>
> If you are still having problems, possibly your RTP forwarding range
> in monowall does not match your rtp.conf file?  I am assuming
> AstLinux is setup for PBX-only mode (single interface).
>
> Possibly your remote SIP clients need to be configured differently?
>
> You can make this work.  :-)
>
> Lonnie
>
> On Dec 21, 2007, at 10:29 AM, Kevin Kiely wrote:
>
>> Lonnie,
>>
>> Thanks for your reply.  I remember a while back you suggested this
>> application with the monowall.  I do have the requisite entries in  
>> the
>> sip.conf file, in fact that's exactly what I have plus the nat
>> statement for
>> the peer. Do you have this working with monowall?  I downloaded the
>> latest
>> monowall to support the alix, I also see they they now have a SIP
>> proxy
>> built in on that load but I don't think we can use it with asterisk
>> outbound
>> proxy support.
>>
>> Kevin
>>
>>
>> -----Original Message-----
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] On Behalf Of
>> Lonnie
>> Abelbeck
>> Sent: Friday, December 21, 2007 9:32 AM
>> To: AstLinux Users Mailing List
>> Subject: Re: [Astlinux-users] ASTLINUX behind NAT
>>
>> Kevin,
>>
>> In your sip.conf file, do you have...
>>
>> externip=your_publicIP     ; Asterisk external IP
>> localnet=192.168.0.0/255.255.0.0     ; Asterisk local private net
>>
>> defined properly?
>> (provided you have a static public IP address)
>>
>> Lonnie
>>
>> On Dec 20, 2007, at 9:50 PM, Kevin Kiely wrote:
>>
>>> I am having one way audio issues with an Astlinux behind nat.
>>>
>>> My application is a local astlinux box behind a nat router with
>>> phones
>>> registering locally and also remote phones behind nats to register
>>> with the
>>> local astlinux box.  I am having audio issues with this config. I
>>> have tried
>>> several nat routers including a monowall router.  I forwarded ports
>>> 5060 and
>>> the rtp ports, the respective nat=yes settings as well as optioned
>>> the
>>> externip and localnet settings in asterisk.
>>>
>>> I have had this working in the past and I wanted to know if anyone
>>> is using
>>> this application and what has worked for them.  Any chance of using
>>> monowall
>>> as the local and remote NAT router?  Any chance of using a  
>>> additional
>>> astlinux box as the NAT routers with port forwarding?
>>>
>>> Kevin
>>
>> --------------------------------------------------------------------- 
>> -
>> ---
>> This SF.net email is sponsored by: Microsoft
>> Defy all challenges. Microsoft(R) Visual Studio 2005.
>> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
>> _______________________________________________
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>
>> Donations to support AstLinux are graciously accepted via PayPal to
>> [EMAIL PROTECTED]
>>
>> No virus found in this incoming message.
>> Checked by AVG Free Edition.
>> Version: 7.5.503 / Virus Database: 269.17.5/1190 - Release Date:
>> 12/19/2007
>> 7:37 PM
>>
>>
>>
>> --------------------------------------------------------------------- 
>> -
>> ---
>> This SF.net email is sponsored by: Microsoft
>> Defy all challenges. Microsoft(R) Visual Studio 2005.
>> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
>> _______________________________________________
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>
>> Donations to support AstLinux are graciously accepted via PayPal to
>> [EMAIL PROTECTED]
>>
>
>
> ---------------------------------------------------------------------- 
> ---
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2005.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
> [EMAIL PROTECTED]
>
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.5.503 / Virus Database: 269.17.5/1190 - Release Date:  
> 12/19/2007
> 7:37 PM
>
>
>
> ---------------------------------------------------------------------- 
> ---
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2005.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to  
> [EMAIL PROTECTED]
>


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to
[EMAIL PROTECTED]

No virus found in this incoming message.
Checked by AVG Free Edition. 
Version: 7.5.503 / Virus Database: 269.17.5/1190 - Release Date: 12/19/2007
7:37 PM
 


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to [EMAIL 
PROTECTED]

Reply via email to