I tried to setup a 4.2 to 4.0.4 site-to-site dialing plan. I cannot get past
the 4.2 proxy to originate the call to 4.0.4.

No matter what I do, specifying the domain as an intranet domain, specifying
the subnets, etc., when origination the call from 4.2 I see the calls being
routed over NAT. The zones existing on both sides, lookup, srv, ping,
traceroute properly with NO NAT.

However, something in the login for 4.2 DISREGARDS the NAT traversal when I
setup the unmanaged gateway by its domain name.

   - If using SIPDOMAIN in gateway, calls fail, seeing Record-route of
   internet ip address in calls.
   - If using FQDN in gateway, calls work.

I suspect there is any issue, or perhaps I am missing something. For
instance, I do not have any TLS peers setup for this. I don't need them
because it's essentially a private call over an encrypted connection. Why
does 4.2 proxy complain it cannot perform or find:

'_sip._tls.mydomain.com'  type = 33 (SRV): returned error'.

If I create the tls record in DNS, it stops complaining, then gives...

"RouteState::decode signature failed
'*auth~.*from~VWFVQVFh!0a3e5aca80a8039b804f011e396ea759'"

I do not understand why this is not working and why TLS is involved on this
call. Does 4.2 default to TLS for all internal site-to-site? If so, is there
a way to revert that behavior? I changed the default protocol to UDP for the
gateway, but it ALWAYS defaults to NAT TRAVERSAL with the domain. I don't
think those messages are anything but informational, but I think the proxy
is assuming more than it needs to in order to place the call. The DNS
records at each side did not have TLS, so I assume the error was there as
part of the SRV lookup (which worked).

Since the SRV lookup returns the private address, and that address AND
domain are listed in INTRANET calling, it should not traverse NAT.

If I hear nothing back, I will open a JIRA, because I think there is broken
logic, and I imagine it will cause issues with others as well.



-- 
======================
Tony Graziano, Manager
Telephone: 434.984.8430
sip: [email protected]
Fax: 434.984.8431

Email: [email protected]

LAN/Telephony/Security and Control Systems Helpdesk:
Telephone: 434.984.8426
sip: [email protected]
Fax: 434.984.8427

Helpdesk Contract Customers:
http://www.myitdepartment.net/gethelp/

Why do mathematicians always confuse Halloween and Christmas?
Because 31 Oct = 25 Dec.
_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/

Reply via email to