Re: [asterisk-users] PJSIP, NAT and STUN/ICE

[Frank Vanoni]

On Tue, 2017-10-10 at 11:32 +0200, Frank Vanoni wrote:
> On Mon, 2017-10-09 at 23:56 +0200, O. Hartmann wrote:
> 
> > 
> > local_net=  192.168.254.1/24
> 
> It should be:
> 
> localnet = 192.168.254.0/255.255.255.0

Whoops...

local_net=192.168.254.0/24 




-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] PJSIP, NAT and STUN/ICE

[Frank Vanoni]

On Mon, 2017-10-09 at 23:56 +0200, O. Hartmann wrote:

> local_net=  192.168.254.1/24


It should be:

localnet = 192.168.254.0/255.255.255.0


-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] PJSIP, NAT and STUN/ICE

[O. Hartmann]

Am Mon, 9 Oct 2017 15:07:46 -0700
John Kiniston  schrieb:

> Well, I can answer one of your questions.
> 
> To see the current external_media_address and external_signalling_address
> from the CLI you can issue a 'pjsip show transport '
> 
> Your router could have a built in sip helper that is rewriting the contact
> for your packets.
> 
> On Mon, Oct 9, 2017 at 2:56 PM, O. Hartmann  wrote:
> 
> > I'm quite new to Asterisk and using Asterisk 13 on FreeBSD current.
> > Asterisk is behind a
> > NAT router, the physical setup is very much a trivial one. The Asterisk
> > PBX is supposed
> > to act as the telephone gateway for several VoIP/SIP phones.
> >
> > I'm using throughout pjsip as configuration, I have no experience with
> > chan_sip since I
> > started recently using Asterisk for several SoHo and lab's projects. So be
> > alarmed, there
> > may come some noobish questions.
> >
> > When planning and setting up the Asterisk, I had to deal with NAT. The
> > Asterisk config
> > object of type=transport knows about essential entries:
> >
> > local_net=  192.168.254.1/24
> > bind=   192.168.254.1:5060
> > external_media_address= dyndns FQDN
> > external_signaling_address= dyndns FQDN
> > direct_media=   no
> > rtp_symmetric=  yes
> > force_rport=yes
> >
> > dyndns FQDN is the FQDN of my broadband access point provided by some
> > dynamical DNS
> > provider.
> >
> > This setup is not working properly with when external_media_address= and
> > external_signaling_address= are set that way, but commenting out both
> > makes all of the
> > ITSP which provides me with service happy.
> >
> > I think, at this point I have no idea of the concept or, there is simply a
> > missing link,
> > even a (dangerously) misconfigured router - on which the Asterisk runs.
> > When
> > external__ are not set, I suppose they're set to 0.0.0.0/0.0.0.0,
> > aren't they,
> > implying that they listen on all configured IPs?
> >
> > If so, is there a way to show the setting of external_media_address= and
> > external_signaling_address= on the CLI?
> >
> > When using PJSIP with the setting excluding attributes external_xxx_xxx,
> > does pjsip do
> > some magic to traverse the NAT in a proper way? At this very moment, I do
> > not understand
> > how things would work avoiding setting external_media_address= and
> > external_signaling_address=. The Asterisk 13 I'm running is supposed to be
> > bound to IP
> > 192.168.254.1, which is routed to the gateway.
> >
> > My problem is, I don not understand why the communication is working
> > fluently with both
> > external_xxx_xxx atrributes commeneted out which I suppose to be crucial -
> > following the
> > Asterisk 13 documentation!
> >
> > Maybe someone can sched some light onto this. I think, my view on the
> > matter is
> > completely confused.
> >
> > Thanks in advance,
> >
> > oh
> >
> > Another point
> >
> > --
> > _
> > -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> >
> > Check out the new Asterisk community forum at: https://community.asterisk.
> > org/
> >
> > New to Asterisk? Start here:
> >   https://wiki.asterisk.org/wiki/display/AST/Getting+Started
> >
> > asterisk-users mailing list
> > To UNSUBSCRIBE or update options visit:
> >http://lists.digium.com/mailman/listinfo/asterisk-users
> >  
> 
> 
> 
Thank you for your answer.

This is the output of 

pjsip show transport transport-nat-udp (name of the transport object defined):

 external_media_address : 
 external_signaling_address : 
 external_signaling_port: 0

It is set, as expected, to nothing since I didn't set anything to make it work. 
I guess,
from this point, Asterisk figures somehow out itself how to traverse the NAT 
(in my
simple standard setup). 

I'm just curious. Maybe I'm on the wrong page here and the setup I have is that 
common,
that those extra options doesn't matter and NAT is easily circumferenced. As I 
said in my
introduction, Asterisk and pjsip are new to me (and I have no experience with
chan_sip) ;-).

Kind regards,

oh
-- 
O. Hartmann

Ich widerspreche der Nutzung oder Übermittlung meiner Daten für
Werbezwecke oder für die Markt- oder Meinungsforschung (§ 28 Abs. 4 BDSG).


pgpKNyunCXKvU.pgp
Description: OpenPGP digital signature
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] PJSIP, NAT and STUN/ICE

[O. Hartmann]

Am Tue, 10 Oct 2017 09:32:54 +0200
Guido Falsi  schrieb:

> On 10/09/2017 23:56, O. Hartmann wrote:
> > I'm quite new to Asterisk and using Asterisk 13 on FreeBSD current. 
> > Asterisk is
> > behind a NAT router, the physical setup is very much a trivial one. The 
> > Asterisk PBX
> > is supposed to act as the telephone gateway for several VoIP/SIP phones.
> > 
> > I'm using throughout pjsip as configuration, I have no experience with 
> > chan_sip since
> > I started recently using Asterisk for several SoHo and lab's projects. So 
> > be alarmed,
> > there may come some noobish questions.
> > 
> > When planning and setting up the Asterisk, I had to deal with NAT. The 
> > Asterisk config
> > object of type=transport knows about essential entries:
> > 
> > local_net=  192.168.254.1/24
> > bind=   192.168.254.1:5060
> > external_media_address= dyndns FQDN
> > external_signaling_address= dyndns FQDN
> > direct_media=   no
> > rtp_symmetric=  yes
> > force_rport=yes
> > 
> > dyndns FQDN is the FQDN of my broadband access point provided by some 
> > dynamical DNS
> > provider.
> > 
> > This setup is not working properly with when external_media_address= and
> > external_signaling_address= are set that way, but commenting out both makes 
> > all of the
> > ITSP which provides me with service happy.
> > 
> > I think, at this point I have no idea of the concept or, there is simply a 
> > missing
> > link, even a (dangerously) misconfigured router - on which the Asterisk 
> > runs. When
> > external__ are not set, I suppose they're set to 0.0.0.0/0.0.0.0, 
> > aren't they,
> > implying that they listen on all configured IPs?  
> 
> the external_xxx settings are not configuring where to listen. Simply
> tell asterisk what IP to put in the SDP data. You don't need to suppose
> or guess the content of the SIP/SDP packets, you can look at them by
> enabling asterisk debug output.
> 
> you can enable it following this guide:
> 
> https://wiki.asterisk.org/wiki/display/AST/Asterisk+PJSIP+Troubleshooting+Guide
> 
Thank you very much.

That is the way I figured out that the DDNS has been inserted into the packets 
and not,
as expected, my "outbound" IP (I expected the IP to be resolved by giving the 
DDNS FQDN).
Commenting out the options in question made Asterisk then work properly with 
the ITSP.
Obviously, Asterisk 13.17.2 is capable of figuring this out by itself, I try to
understand.


-- 
O. Hartmann

Ich widerspreche der Nutzung oder Übermittlung meiner Daten für
Werbezwecke oder für die Markt- oder Meinungsforschung (§ 28 Abs. 4 BDSG).


pgp2MjzAWk87m.pgp
Description: OpenPGP digital signature
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] PJSIP, NAT and STUN/ICE

[Guido Falsi]

On 10/09/2017 23:56, O. Hartmann wrote:
> I'm quite new to Asterisk and using Asterisk 13 on FreeBSD current. Asterisk 
> is behind a
> NAT router, the physical setup is very much a trivial one. The Asterisk PBX 
> is supposed
> to act as the telephone gateway for several VoIP/SIP phones.
> 
> I'm using throughout pjsip as configuration, I have no experience with 
> chan_sip since I
> started recently using Asterisk for several SoHo and lab's projects. So be 
> alarmed, there
> may come some noobish questions.
> 
> When planning and setting up the Asterisk, I had to deal with NAT. The 
> Asterisk config
> object of type=transport knows about essential entries:
> 
> local_net=  192.168.254.1/24
> bind=   192.168.254.1:5060
> external_media_address=   dyndns FQDN
> external_signaling_address=   dyndns FQDN
> direct_media= no
> rtp_symmetric=yes
> force_rport=  yes
> 
> dyndns FQDN is the FQDN of my broadband access point provided by some 
> dynamical DNS
> provider.
> 
> This setup is not working properly with when external_media_address= and
> external_signaling_address= are set that way, but commenting out both makes 
> all of the
> ITSP which provides me with service happy.
> 
> I think, at this point I have no idea of the concept or, there is simply a 
> missing link,
> even a (dangerously) misconfigured router - on which the Asterisk runs. When
> external__ are not set, I suppose they're set to 0.0.0.0/0.0.0.0, 
> aren't they,
> implying that they listen on all configured IPs?

the external_xxx settings are not configuring where to listen. Simply
tell asterisk what IP to put in the SDP data. You don't need to suppose
or guess the content of the SIP/SDP packets, you can look at them by
enabling asterisk debug output.

you can enable it following this guide:

https://wiki.asterisk.org/wiki/display/AST/Asterisk+PJSIP+Troubleshooting+Guide

-- 
Guido Falsi 

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] PJSIP, NAT and STUN/ICE

[John Kiniston]

Well, I can answer one of your questions.

To see the current external_media_address and external_signalling_address
from the CLI you can issue a 'pjsip show transport '

Your router could have a built in sip helper that is rewriting the contact
for your packets.

On Mon, Oct 9, 2017 at 2:56 PM, O. Hartmann  wrote:

> I'm quite new to Asterisk and using Asterisk 13 on FreeBSD current.
> Asterisk is behind a
> NAT router, the physical setup is very much a trivial one. The Asterisk
> PBX is supposed
> to act as the telephone gateway for several VoIP/SIP phones.
>
> I'm using throughout pjsip as configuration, I have no experience with
> chan_sip since I
> started recently using Asterisk for several SoHo and lab's projects. So be
> alarmed, there
> may come some noobish questions.
>
> When planning and setting up the Asterisk, I had to deal with NAT. The
> Asterisk config
> object of type=transport knows about essential entries:
>
> local_net=  192.168.254.1/24
> bind=   192.168.254.1:5060
> external_media_address= dyndns FQDN
> external_signaling_address= dyndns FQDN
> direct_media=   no
> rtp_symmetric=  yes
> force_rport=yes
>
> dyndns FQDN is the FQDN of my broadband access point provided by some
> dynamical DNS
> provider.
>
> This setup is not working properly with when external_media_address= and
> external_signaling_address= are set that way, but commenting out both
> makes all of the
> ITSP which provides me with service happy.
>
> I think, at this point I have no idea of the concept or, there is simply a
> missing link,
> even a (dangerously) misconfigured router - on which the Asterisk runs.
> When
> external__ are not set, I suppose they're set to 0.0.0.0/0.0.0.0,
> aren't they,
> implying that they listen on all configured IPs?
>
> If so, is there a way to show the setting of external_media_address= and
> external_signaling_address= on the CLI?
>
> When using PJSIP with the setting excluding attributes external_xxx_xxx,
> does pjsip do
> some magic to traverse the NAT in a proper way? At this very moment, I do
> not understand
> how things would work avoiding setting external_media_address= and
> external_signaling_address=. The Asterisk 13 I'm running is supposed to be
> bound to IP
> 192.168.254.1, which is routed to the gateway.
>
> My problem is, I don not understand why the communication is working
> fluently with both
> external_xxx_xxx atrributes commeneted out which I suppose to be crucial -
> following the
> Asterisk 13 documentation!
>
> Maybe someone can sched some light onto this. I think, my view on the
> matter is
> completely confused.
>
> Thanks in advance,
>
> oh
>
> Another point
>
> --
> _
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> Check out the new Asterisk community forum at: https://community.asterisk.
> org/
>
> New to Asterisk? Start here:
>   https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>http://lists.digium.com/mailman/listinfo/asterisk-users
>



-- 
A human being should be able to change a diaper, plan an invasion, butcher
a hog, conn a ship, design a building, write a sonnet, balance accounts,
build a wall, set a bone, comfort the dying, take orders, give orders,
cooperate, act alone, solve equations, analyze a new problem, pitch manure,
program a computer, cook a tasty meal, fight efficiently, die gallantly.
Specialization is for insects.
---Heinlein
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

[asterisk-users] PJSIP, NAT and STUN/ICE

[O. Hartmann]

I'm quite new to Asterisk and using Asterisk 13 on FreeBSD current. Asterisk is 
behind a
NAT router, the physical setup is very much a trivial one. The Asterisk PBX is 
supposed
to act as the telephone gateway for several VoIP/SIP phones.

I'm using throughout pjsip as configuration, I have no experience with chan_sip 
since I
started recently using Asterisk for several SoHo and lab's projects. So be 
alarmed, there
may come some noobish questions.

When planning and setting up the Asterisk, I had to deal with NAT. The Asterisk 
config
object of type=transport knows about essential entries:

local_net=  192.168.254.1/24
bind=   192.168.254.1:5060
external_media_address= dyndns FQDN
external_signaling_address= dyndns FQDN
direct_media=   no
rtp_symmetric=  yes
force_rport=yes

dyndns FQDN is the FQDN of my broadband access point provided by some dynamical 
DNS
provider.

This setup is not working properly with when external_media_address= and
external_signaling_address= are set that way, but commenting out both makes all 
of the
ITSP which provides me with service happy.

I think, at this point I have no idea of the concept or, there is simply a 
missing link,
even a (dangerously) misconfigured router - on which the Asterisk runs. When
external__ are not set, I suppose they're set to 0.0.0.0/0.0.0.0, 
aren't they,
implying that they listen on all configured IPs?

If so, is there a way to show the setting of external_media_address= and
external_signaling_address= on the CLI?

When using PJSIP with the setting excluding attributes external_xxx_xxx, does 
pjsip do
some magic to traverse the NAT in a proper way? At this very moment, I do not 
understand
how things would work avoiding setting external_media_address= and
external_signaling_address=. The Asterisk 13 I'm running is supposed to be 
bound to IP
192.168.254.1, which is routed to the gateway. 

My problem is, I don not understand why the communication is working fluently 
with both
external_xxx_xxx atrributes commeneted out which I suppose to be crucial - 
following the
Asterisk 13 documentation!

Maybe someone can sched some light onto this. I think, my view on the matter is
completely confused.

Thanks in advance,

oh

Another point


pgpXZT2q179ib.pgp
Description: OpenPGP digital signature
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users