[Users] Problems registering NAT clients

Jesus Rodriguez jesusr at voztele.com
Sat Feb 4 18:24:57 CET 2006


On Sat, 4 Feb 2006, Paco Orozco wrote:

Hello Paco,

> Client X-Lite:
> IP: 192.168.1.2 (public address 81.39.220.5)
> Listen SIP port: 5060
> Listen RTP port: 8000
>
> Server: Openser 1.0 with Media Proxy
> IP: 147.83.197.39
> Config in opernser.cfg
>
> If i try to register with a UAC (X-Lite or K-Phone) with symmetric NAT
> scenario. Opernser server doesn't answer the client to 5060 port, as i need.
> X-Lite Diagnostic LOG is client_messages.txt
> Client timed out without receiving any server messages.
>
> This is a tcpdump on clients side:
> 17:42:23.458980 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448
> 17:42:23.558019 IP 147.83.197.39.5060 > 192.168.1.2.10145: SIP, length: 538
> 17:42:23.558077 IP 192.168.1.2 > 147.83.197.39: ICMP 192.168.1.2 udp port
> 10145 unreachable, length 556
> 17:42:25.085485 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448
> 17:42:28.108960 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448
> 17:42:32.643903 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 2
> 17:42:34.156151 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448
>
> On the server this is the tcpdump:
> 17:42:23.904035 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448

You can see here that the NAT device is changing the source port from
5060 to 10145, which is the port used by Openser to send the reply.
Openser is doing fine while your NAT device is doing wrong because it
keeps the external rewriten source port when sending the packet to the
internal side of the NAT (see the second line of the above tcpdump
trace).

Which NAT device/router are you using?. Are you forwarding ports from
the external to the internal side at the NAT device?.

Saludos
JesusR.




> 17:42:23.904261 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 538
> 17:42:23.905028 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 680
> 17:42:24.004623 IP 81.39.220.5 > 147.83.197.39: ICMP 81.39.220.5 udp port
> 10145 unreachable, length 556
> 17:42:25.525470 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448
> 17:42:25.525607 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 538
> 17:42:25.526314 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 680
> 17:42:28.549322 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448
>
> What's wrong?
>
> It's necessary to use a STUN server?
> Why can't register?
> Why openser doesn't reply to 5060 port? My client it's only reachable in
> this.
> Can anyone help me?
> Anyone have a OpenSer config working?
>
> Thanks in advance
> --
> -------------------------------------
> Aquel que planta árboles bajo los
> que sabe muy bien que nunca se
> sentara, ha descubierto el auténtico
> significado de la vida.
>


Saludos
JesusR.

-------------------------------
Jesus Rodriguez
VozTelecom Sistemas, S.L.
jesusr at voztele.com
http://www.voztele.com
Tel. 902360305
-------------------------------


More information about the Users mailing list