Re: [asterisk-users] Digium IP Phones UNREACHABLE after registration

2018-04-12 Thread Antony Stone
On Thursday 12 April 2018 at 18:17:10, Hermann Wecke wrote:

> On Thu, Apr 12, 2018 at 11:43 AM, Antony Stone wrote:
> > 
> > Are you by any chance running fail2ban, without the IP address of this
> > location in a whitelist?
> 
> fail2ban: yes
> whitelist: yes

Have you checked:

a) the fail2ban logs
and
b) the firewall rules in place on the server immediately after the phones get 
kicked off

just to be sure this is not being caused by fail2ban somehow?

> > I'm wondering if some device is misconfigured and failing registration,
> > which get spicked up by fail2ban, and the network's public IP gets
> > blocked.
> 
> If I remove the Digium phones, after a while the other devices
> (brands) will register again.

What happens if you then add just one Digium phone?

Does it, and all the other brands, work as normal?

If yes, try adding one more, then one more - maybe you'll find one specific 
phone which is causing this problem.

If adding just one phone causes the problem immediately, try adding a different 
one instead (in case the first one you added is the one with the problem).

> >> The server remains operational and all other users/peers (not running
> >> Digium phones) are up and running.
> > 
> > You mean, all others at other locations, right?
> 
> Yes, other locations are OK. This location will be "clogged" (or
> "flooded"?) and unavailable.

Can you run wireshark or similar on the router / firewall at this location, to 
see what SIP traffic you get going back and forth to the server at the time the 
problem occurs?


Antony.

-- 
Was ist braun, liegt ins Gras, und raucht?
Ein Kaminchen...

   Please reply to the list;
 please *don't* CC me.

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Digium IP Phones UNREACHABLE after registration

2018-04-12 Thread Hermann Wecke
On Thu, Apr 12, 2018 at 11:43 AM, Antony Stone
 wrote:
>> A few seconds after registration, the Digium phones will become
>> UNREACHABLE. Right after that, the entire VoIP network (where the
>> Digiums are located) will be also dropped - all other devices
>> (non-Digium) connected will be kicked from the asterisk box. There are
>> ObiHai, Yealink and Linksys at this location - all will be kicked.
>
> Are you by any chance running fail2ban, without the IP address of this
> location in a whitelist?

fail2ban: yes
whitelist: yes

> I'm wondering if some device is misconfigured and failing registration, which
> get spicked up by fail2ban, and the network's public IP gets blocked.

If I remove the Digium phones, after a while the other devices
(brands) will register again.

>> The server remains operational and all other users/peers (not running
>> Digium phones) are up and running.
>
> You mean, all others at other locations, right?

Yes, other locations are OK. This location will be "clogged" (or
"flooded"?) and unavailable.

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Digium IP Phones UNREACHABLE after registration

2018-04-12 Thread Administrator TOOTAI

Hi Herrmann

Le 12/04/2018 à 17:22, Hermann Wecke a écrit :

I'm trying to solve a mystery for the last couple of days.

I have a mix of D70, D50 and D40 behind NAT. Server is in a
colocation, not a VPS.

For several years, everything was working fine, no issues. A few days
ago I started having problems at one particular site. NO CHANGES have
been made to this office network - same router, switch and internet
provider. No new equipment added or configuration changed (I only
upgraded the firmware and asterisk trying to solve the problem).

A few seconds after registration, the Digium phones will become
UNREACHABLE. Right after that, the entire VoIP network (where the
Digiums are located) will be also dropped - all other devices
(non-Digium) connected will be kicked from the asterisk box. There are
ObiHai, Yealink and Linksys at this location - all will be kicked.

The server remains operational and all other users/peers (not running
Digium phones) are up and running.


Don quite understand: above you say that all others phones are kicked 
too and here you say they are up and running ... Also, UNREACHABLE and 
kick are not the same for me.




Sip debug and tcpdump didn't show any relevant information to solve
the puzzle.


What is relevant: do you see SIP traffic coming from those 
phones/location *AFTER* they are UNREACHABLE/kicked?


Is a fail2ban involved ?

[...]

--
Daniel

--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
 https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Digium IP Phones UNREACHABLE after registration

2018-04-12 Thread Antony Stone
On Thursday 12 April 2018 at 17:22:39, Hermann Wecke wrote:

> I'm trying to solve a mystery for the last couple of days.
> 
> I have a mix of D70, D50 and D40 behind NAT. Server is in a
> colocation, not a VPS.
> 
> For several years, everything was working fine, no issues. A few days
> ago I started having problems at one particular site. NO CHANGES have
> been made to this office network - same router, switch and internet
> provider. No new equipment added or configuration changed (I only
> upgraded the firmware and asterisk trying to solve the problem).
> 
> A few seconds after registration, the Digium phones will become
> UNREACHABLE. Right after that, the entire VoIP network (where the
> Digiums are located) will be also dropped - all other devices
> (non-Digium) connected will be kicked from the asterisk box. There are
> ObiHai, Yealink and Linksys at this location - all will be kicked.

Are you by any chance running fail2ban, without the IP address of this 
location in a whitelist?

I'm wondering if some device is misconfigured and failing registration, which 
get spicked up by fail2ban, and the network's public IP gets blocked.

> The server remains operational and all other users/peers (not running
> Digium phones) are up and running.

You mean, all others at other locations, right?


Antony.

-- 
A user interface is like a joke.
If you have to explain it, it means it doesn't work.

   Please reply to the list;
 please *don't* CC me.

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


[asterisk-users] Digium IP Phones UNREACHABLE after registration

2018-04-12 Thread Hermann Wecke
I'm trying to solve a mystery for the last couple of days.

I have a mix of D70, D50 and D40 behind NAT. Server is in a
colocation, not a VPS.

For several years, everything was working fine, no issues. A few days
ago I started having problems at one particular site. NO CHANGES have
been made to this office network - same router, switch and internet
provider. No new equipment added or configuration changed (I only
upgraded the firmware and asterisk trying to solve the problem).

A few seconds after registration, the Digium phones will become
UNREACHABLE. Right after that, the entire VoIP network (where the
Digiums are located) will be also dropped - all other devices
(non-Digium) connected will be kicked from the asterisk box. There are
ObiHai, Yealink and Linksys at this location - all will be kicked.

The server remains operational and all other users/peers (not running
Digium phones) are up and running.

Sip debug and tcpdump didn't show any relevant information to solve
the puzzle. I also replaced the router (twice, different models and
firmware versions), PoE switch and cable modem. No success. IP is
dynamic but the provider will only change it once a year. Qualify=yes
(or no) didn't fix. Removing the password (deny/permit IP) also
didn't.

Running Asterisk 13.20.0, firmware 2.6.2.

Any ideas where I should dig further?

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Pass through registration / proxy

2018-04-12 Thread TSG
The challenge is that calls to extensions on the Nortel have to ring the
nortel phone AND the sip phone connected to Asterisk.  

-Original Message-
From: asterisk-users-boun...@lists.digium.com
[mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Daniel Tryba
Sent: Wednesday, April 11, 2018 4:26 PM
To: 'Asterisk Users Mailing List - Non-Commercial Discussion'

Subject: Re: [asterisk-users] Pass through registration / proxy

On Wed, Apr 11, 2018 at 12:04:18PM -0400, Telium Technical Support wrote:
> Maybe proxy is the wrong word I chose.  Asterisk is something like a 
> peer to the legacy PBX.  I thought about setting up individual SIP 
> accounts on the Asterisk box to connect to the legacy PBX, or maybe a 
> SIP trunk to the legacy PBX (assuming it can route calls through the 
> SIP trunk to a peer to reach a phone).  The legacy PBX is a Nortel in case
that matters.
> 
> I'm supposed to figure this out and present options but having trouble 
> figuring out if Asterisk would be a peer, or pretend to be many sip 
> agents registering on the legacy Sip pbx, etc.  I think I'm stuck at 
> the conceptual level.  (Still a beginner in training - but having fun 
> learning Asterisk)

One of my first integrations was similar but with a Siemens. Easiest might
be a SIP trunk (peer) between Asterisk/Nortel and have different prefixes
for the Norted (1xx) and Asterisk (2xx) and route these to the other. The
SIP endpoints simply register to Asterisk.


--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at:
https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users