Dear Victor, In my experience you have to "teach" your endpoint 1 about the global address. Otherwise it will register with its own address. Another possible solution (maybe..H.323 doesn't support it well...) is to use a STUN Server. A STUN server will tell what is your global address to a NATed endpoint. But the endpoint device has to support it. If you are using Windows try SJPhone. Yours sincerely, Jason Chan, Hong Kong ----- Original Message ----- From: "Victor Huertas Garcia" <vhuertas@xxxxxxxxxxx> To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> Sent: Thursday, May 26, 2005 11:32 PM Subject: Bug: call from NATed endpoint to a terminal with the same IP > > > Hi all, > > I am using the GNU GK v2.2.2 in a Linux machine in h.225 routed mode. This > is the scenario I have in my laboratory: > > Endpoint 1: > it is NATed (local address = 10.1.3.11, global address = 147.33.22.11) > and has this E.164 alias: 931231231. > > Endpoint 2: > has a private IP address which is 10.1.3.11 (not NATed) and has this > E.164 alias: 937897897 > > Gatekeeper: > has a public IP address. > > I want to remark that this scenario is perfectly possible, above all if we > deal with NATed endpoints (the assignation of IP addresses behind the NAT is > out of GK Administrator's control). > > Have a look at the following configuration: > > [RasSrv::RRQFeatures] > AcceptEndpointIdentifier=1 > AcceptGatewayPrefixes=1 > > > [Gatekeeper::Auth] > AliasAuth=sufficient;RRQ > PrefixAuth=required;ARQ > default=allow > > [RasSrv::RRQAuth] > 931231231=sigip:10.1.3.11 > 937897897=sigip:10.1.3.11 > > Note that if I want the NATed endpoint to be registered, the specified IP > address has to be the private one (10.1.3.11) and not the global one used by > the NAT. Otherwise, the GK sends a RRJ with SecurityDenial reason. > > Problem description: > When the Endpoint 1 calls Endpoint 2 the calls cannot be established as the > GK don't replace the inner IP addresses of the H.225 and H.245 messages (as > if it was GK proxy mode). The calling terminal realizes that the H.245 > address is himself!! and then the call is released. > > the most surprising thing is that if I call from Endpoint 2 to Endpoint 1 > the call is estabished correctly because the GK has translated all the IP > addresses inside the H.225 and H.245 messages. > > Is this a bug in the GNU GK? Anybody could help me clarify it? > > Thank you very much for your attention. > > Victor > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by Yahoo. > Introducing Yahoo! Search Developer Network - Create apps using Yahoo! > Search APIs Find out how you can build Yahoo! directly into your own > Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005 > _______________________________________________________ > > Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 > Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users > Homepage: http://www.gnugk.org/ > ------------------------------------------------------- This SF.Net email is sponsored by Yahoo. Introducing Yahoo! Search Developer Network - Create apps using Yahoo! Search APIs Find out how you can build Yahoo! directly into your own Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005 _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/
