Re: NAT Problem, WAN to LAN works, LAN to WAN doesn't, , Help!!
On Mon, 03 May 2010 18:51:55 +0600, Simon Horne <s.horne@xxxxxxxxxxxxxx>
wrote:
>
> Ram
>
> Sorry for the delay in replying.
>
> A fix has been checked into the CVS.
> The problem was the interface chosen to place the call out of the NAT was
> not resolved and defaulted to the first interface (which happens to be
> loopback 127.0.0.1). The changes made corrects this so the interface is
> the
> default interface (one detected as being the route out of the NAT).
>
> Simon
>
> -----Original Message-----
> From: Ram Gandhi [mailto:ramkumar2579@xxxxxxxxx]
> Sent: Friday, 30 April 2010 10:02 PM
> To: GNU Gatekeeper Users
> Subject: Re: NAT Problem, WAN to LAN works,LAN to WAN
> doesn't, , Help!!
>
> Hi Simon,
> I have attached Trace level 5 log with this mail..
> please have a look.
>
> the xx.xx.23.191 is the IP of the polycom softphone in Internet
>
> Here is my conf::
>
> [Gatekeeper::Main]
> FortyTwo=42
> Name=GnuGkTest
> TimeToLive=300
> StatusTraceLevel=3
> ExternalIP=xx.xx.xx.230
>
> ; restrict access to the status port by an IP address [GkStatus::Auth]
> rule=allow
>
> [RoutedMode]
> GKRouted=1
> H245Routed=0
> CallSignalPort=1720
> CallSignalHandlerNumber=2
> RemoveH245AddressOnTunneling=1
> SupportNATedEndpoints=1
> DropCallsByReleaseComplete=1
> Q931PortRange=30000-30999
> H245PortRange=31000-31999
>
> [Proxy]
> Enable=1
> ProxyAlways=1
> T120PortRange=50000-59999
> RTPPortRange=50000-59999
> InternalNetwork=10.0.0.0/8
>
> [ModeSelection]
> 10.0.0.0/8=PROXY,PROXY
>
>
>
>
>
> On Fri, Apr 30, 2010 at 2:01 PM, Ram Gandhi <ramkumar2579@xxxxxxxxx>
> wrote:
>> Hi Simon,
>> Thank you for your reply.. I have done the changes as
>> you said.. The port forwarding is as you said..
>> Still the problem persists..ie) calls from LAN to Internet fails while
>> calls from Internet to LAN works.
>> I am pasting the error messages here for some help..
>> EXTIP is the Internal IP of the polycom softphone
>>
>>
>> 2010/04/30 14:06:33.739 2 RasSrv.cxx(175) RAS Read
>> from 10.129.154.240:1719 2010/04/30 14:06:33.739 3
>> RasSrv.cxx(224) RAS admissionRequest {
>> requestSeqNum = 22387
>> callType = pointToPoint <<null>>
>> callModel = gatekeeperRouted <<null>>
>> endpointIdentifier = 9 characters {
>> 0031 0035 0030 0035 005f 0065 006e 0064 1505_end
>> 0070 p
>> }
>> destinationInfo = 1 entries {
>> [0]=h323_ID 5 characters {
>> 0069 006e 0074 0032 0033 int23
>> }
>> }
>> srcInfo = 2 entries {
>> [0]=h323_ID 6 characters {
>> 0061 0073 0068 0069 0073 0068 ashish
>> }
>> [1]=dialedDigits "1088"
>> }
>> bandWidth = 7680
>> callReferenceValue = 28747
>> conferenceID = 16 octets {
>> 02 30 8b 40 b6 89 bf 15 27 ee 2c f5 8a fb 18 71 .0.@....'.,....q
>> }
>> activeMC = false
>> answerCall = false
>> canMapAlias = true
>> callIdentifier = {
>> guid = 16 octets {
>> 02 30 8b 40 b6 89 bf 15 27 ed 2c f5 8a fb 18 71 .0.@....'.,....q
>> }
>> }
>> gatekeeperIdentifier = 10 characters {
>> 004f 0070 0065 006e 0048 0033 0032 0033 OpenH323
>> 0047 004b GK
>> }
>> willSupplyUUIEs = false
>> featureSet = {
>> replacementFeatureSet = false
>> supportedFeatures = 1 entries {
>> [0]={
>> id = standard 9
>> }
>> }
>> }
>> }
>> 2010/04/30 14:06:33.739 1 RasSrv.cxx(354) RAS ARQ
>> Received from 10.129.154.240:1719 2010/04/30 14:06:33.740 3
>> RasSrv.cxx(2569) GK ARQ will request bandwith of 7680 2010/04/30
>> 14:06:33.740 2 RasTbl.cxx(3321)
>> CallTable::Insert(CALL) Call No. 6, total sessions : 1 2010/04/30
>> 14:06:33.740 2 RasSrv.cxx(394)
>> ACF|10.129.154.240:1720|1505_endp|28747|int23:h323_ID|ashish:h323_ID=1
>> ACF|088:dialedDigits|false|02-30-8b-40-b6-89-bf-15-27-ed-2c-f5-8a-fb-1
>> ACF|8-71;
>> 2010/04/30 14:06:33.740 3 RasSrv.cxx(236) RAS Send
>> to 10.129.154.240:1719 admissionConfirm {
>> requestSeqNum = 22387
>> bandWidth = 7680
>> callModel = gatekeeperRouted <<null>>
>> destCallSignalAddress = ipAddress {
>> ip = 4 octets {
>> 0a 64 6a b7 .dj.
>> }
>> port = 1720
>> }
>> irrFrequency = 120
>> willRespondToIRR = false
>> uuiesRequested = {
>> setup = false
>> callProceeding = false
>> connect = false
>> alerting = false
>> information = false
>> releaseComplete = false
>> facility = false
>> progress = false
>> empty = false
>> status = false
>> statusInquiry = false
>> setupAcknowledge = false
>> notify = false
>> }
>> }
>> 2010/04/30 14:06:33.857 3 ProxyChannel.cxx(1020) Q931s
>> Received: Setup CRV=28747 from 10.129.154.240:3232 2010/04/30
>> 14:06:33.858 2 gkacct.cxx(1047) GKACCT Successfully
>> logged event 1 for call no. 6 2010/04/30 14:06:33.859 3
>> ProxyChannel.cxx(2636) Q931s Call 6 is NAT type 0 2010/04/30
>> 14:06:33.859 1 ProxyChannel.cxx(867) Call 6:
>> h245Routed=1 proxy=1
>> 2010/04/30 14:06:33.859 3 ProxyChannel.cxx(884) GK Call 6
>> proxy enabled 2010/04/30 14:06:33.860 1 ProxyChannel.cxx(4120)
>> Q931d Could not open/connect Q.931 socket at 127.0.0.1:30001 - error
>> 6/22: Invalid argument 2010/04/30 14:06:33.860 1
>> ProxyChannel.cxx(4120) Q931d Could not open/connect Q.931 socket at
>> 127.0.0.1:30002 - error 6/22: Invalid argument .........
>> .........
>> ...........
>> 2010/04/30 14:06:33.933 1 ProxyChannel.cxx(4120) Q931d Could
>> not open/connect Q.931 socket at 127.0.0.1:30499 - error 6/22: Invalid
>> argument 2010/04/30 14:06:33.933 1 ProxyChannel.cxx(4120) Q931d
>> Could not open/connect Q.931 socket at 127.0.0.1:30500 - error 6/22:
>> Invalid argument 2010/04/30 14:06:33.933 3 ProxyChannel.cxx(3811)
>> Q931 EXTIP:1720 DIDN'T ACCEPT THE CALL
>> 2010/04/30 14:06:33.933 2 RasTbl.cxx(3727) CDR ignore
>> not connected call 2010/04/30 14:06:33.933 2
>> gkacct.cxx(1047) GKACCT Successfully logged event 2 for call no. 6
>> 2010/04/30 14:06:33.933 3 yasocket.cxx(577) Q931d Delete
>> socket EXTIP:1720 2010/04/30 14:06:33.933 3 yasocket.cxx(577)
>> Q931s Delete socket 10.129.154.240:3232
>> 2010/04/30 14:06:33.953 2 RasSrv.cxx(175) RAS Read
>> from 10.129.154.240:1719 2010/04/30 14:06:33.953 3
>> RasSrv.cxx(224) RAS disengageRequest {
>> requestSeqNum = 22388
>> endpointIdentifier = 10 characters {
>> 0031 0035 0030 0035 005f 0065 006e 0064 1505_end
>> 0070 0000 p
>> }
>> conferenceID = 16 octets {
>> 02 30 8b 40 b6 89 bf 15 27 ee 2c f5 8a fb 18 71 .0.@....'.,....q
>> }
>> callReferenceValue = 28747
>> disengageReason = normalDrop <<null>>
>> callIdentifier = {
>> guid = 16 octets {
>> 02 30 8b 40 b6 89 bf 15 27 ed 2c f5 8a fb 18 71 .0.@....'.,....q
>> }
>> }
>> gatekeeperIdentifier = 10 characters {
>> 004f 0070 0065 006e 0048 0033 0032 0033 OpenH323
>> 0047 004b GK
>> }
>> answeredCall = false
>> }
>> 2010/04/30 14:06:33.953 1 RasSrv.cxx(354) RAS DRQ
>> Received from 10.129.154.240:1719 2010/04/30 14:06:33.953 2
>> RasSrv.cxx(394)
>> DCF|10.129.154.240|1505_endp|28747|normalDrop|02-30-8b-40-b6-89-bf-15-
>> DCF|27-ed-2c-f5-8a-fb-18-71;
>> 2010/04/30 14:06:33.953 3 RasSrv.cxx(236) RAS Send
>> to 10.129.154.240:1719 disengageConfirm {
>> requestSeqNum = 22388
>> }
>> 2010/04/30 14:06:34.911 3 RasTbl.cxx(2177) Gk Delete
>> Call No. 6
>>
>>
>> ----------
>>
>>
>>
>>
>>
>>
>>
>>
>> On Fri, Apr 30, 2010 at 12:14 PM, Simon Horne <s.horne@xxxxxxxxxxxxxx>
> wrote:
>>>
>>> PORT forward or put GnuGk in the DMZ of the router
>>>
>>> If port forwarding then forward
>>> TCP 1720 (or INI CallSignalPort)
>>> UDP 1719
>>> TCP 30000-31999
>>> UDP 50000-59999
>>>
>>> Remove out the config
>>> [Gatekeeper::Main]
>>> Home=10.100.106.183
>>>
>>> See here for example
>>> http://openh323gk.cvs.sourceforge.net/viewvc/openh323gk/openh323gk/et
>>> c/nat.i
>>> ni?revision=1.5&view=markup
>>>
>>> Simon
>>>
>>> -----Original Message-----
>>> From: Ram Gandhi [mailto:ramkumar2579@xxxxxxxxx]
>>> Sent: Friday, 30 April 2010 3:56 PM
>>> To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
>>> Subject: NAT Problem, WAN to LAN works, LAN to WAN
>>> doesn't,, Help!!
>>>
>>> Hi,
>>> After trying all I could for 4 days, finally decided to post.. I
>>> hav two polycom pvx softphones on either side of the NAT trying to
>>> call each other.
>>> The Gnugk is behind the NAT in the LAN and no Firewall rules are
>>> present.
>>> The setup is as follows
>>>
>>> [polycom pvx (1) on the
>>> Internet]---------->NAT----------------------->[polycom pvx (2) on
>>> the LAN]
>>> |
>>> |
>>> GNUGK
>>>
>>> The endpoints get registered and calls from Internet to LAN gets
> through.
>>> But calls from LAN (pvx 2) to Internet (pvx 1) fails!
>>> The only error message i see in the log is something like this
>>>
>>> "Q931d Could not open/connect Q.931 socket at10.100.106.183:30001 -
>>> error 12/61:"
>>>
>>> The Config file is this
>>>
>>> [Gatekeeper::Main]
>>> Fortytwo=42
>>> TimeToLive=600
>>> Home=10.100.106.183
>>> ExternalIP=XXXX
>>>
>>> [RoutedMode]
>>> GKRouted=1
>>> H245Routed=0
>>> CallSignalPort=1720
>>> RemoveH245AddressOnTunneling=1
>>> DropCallsByReleaseComplete=1
>>> SupportNATedEndpoints=1
>>> Q931PortRange=30000-30999
>>> H245PortRange=31000-31999
>>>
>>> [Proxy]
>>> Enable=1
>>> T120PortRange=50000-59999
>>> RTPPortRange=50000-59999
>>> ProxyForNAT=1
>>> ProxyForSameNAT=1
>>> InternalNetwork=10.0.0.0/8
>>>
>>> [GkStatus::Auth]
>>> rule=allow
>>>
>>> [RoutingPolicy]
>>> default=internal
>>> --
>>>
>>> Can you please tell me what could be the problem and what else should
>>> be done?
>>> Also I have done no configurations in the PVX softphone other than
>>> the specifying the gatekeeper for registration. Is there any more
>>> config to be done?
>>>
>>> ---------------------------------------------------------------------
>>> -------
>>> --
>>> _______________________________________________________
>>>
>>> Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
>>> Archive:
>>> http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-us
>>> ers
>>> Unsubscribe:
>>> http://lists.sourceforge.net/lists/listinfo/openh323gk-users
>>> Homepage: http://www.gnugk.org/
>>>
>>>
>>> ---------------------------------------------------------------------
>>> --------- _______________________________________________________
>>>
>>> Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
>>> Archive:
>>> http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-us
>>> ers
>>> Unsubscribe:
>>> http://lists.sourceforge.net/lists/listinfo/openh323gk-users
>>> Homepage: http://www.gnugk.org/
>>>
>>
>
>
> ------------------------------------------------------------------------------
> _______________________________________________________
>
> Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
> Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
> Homepage: http://www.gnugk.org/
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature database 5083 (20100503) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
--
С уважением,
руководитель отдела голосовых услуг ООО "ИНСИС"
Павел Еремин,
454000 г. Челябинск, пл. Революции 7 - 526
Тел./факс: (351) 247-00-10, 247-00-20
e-mail: eps@xxxxxxxxxxxx
http://www.incompany.ru
------------------------------------------------------------------------------
_______________________________________________________
Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/
- References:
- NAT Problem, WAN to LAN works, LAN to WAN doesn't, , Help!!
- Re: NAT Problem, WAN to LAN works, LAN to WAN doesn't, , Help!!
- Re: NAT Problem, WAN to LAN works, LAN to WAN doesn't, , Help!!
- Re: NAT Problem, WAN to LAN works, LAN to WAN doesn't, , Help!!
- Re: NAT Problem, WAN to LAN works, LAN to WAN doesn't, , Help!!
[SIP]
[Open H.323]
[Gnu Gatekeeper]
[Asterisk PBX]
[ISDN Cause Codes]
[Singles Community]
[Yosemite News]
