Re: Connecting two private networks over the internet

"Bob Hicks" <robert.hicks@xxxxxxxxxxxxxxxxxx> · Wed, 12 Dec 2007 09:54:09 -0500

Hello 
Simon,

Thanks 
again for your reply. 

I have 
made the changes you indicated. When I reload the ini file the following 
messages are broadcast by the gatekeeper :

NBNS 
Name Query NB GNUGK<00>

NBNS 
Name Query NB GNUGK<00>
NBNS 
Name Query NB GNUGK<00>

Then 
when I do the ARQ, the gatekeeper immediately responds with ARJ (not 
registered). It doesn't send any message to the other 
gatekeeper.

Here 
is my ini file :

; this 
is a basic startup configuration for GnuGk
; Generated by the GnuGk 
installation package
; 

[Gatekeeper::Main]
FortyTwo=42
Name=GnuGk
EndpointSuffix=_GnuGk
TimeToLive=60
StatusTraceLevel=0
UseBroadcastListener=0
UseMulticastListener=0
UnicastRasPort=1719
ExternalIP=10.10.1.5
ExternalIsDynamic=0

[GkStatus::Auth]
rule=explicit
127.0.0.1=allow
default=forbid
Shutdown=allow

[Gatekeeper::Auth]

[SimplePasswordAuth]

[RoutedMode]
GKRouted=1
H245Routed=1
CallSignalPort=1721
AcceptNeighborCalls=1
AcceptUnregisteredCalls=1
TreatUnregisteredNAT=1
RemoveH245AddressOnTunneling=1
RemoveCallOnDRQ=0
DropCallsByReleaseComplete=1
SendReleaseCompleteOnDRQ=0
SupportNATedEndpoints=1
SupportCallingNATedEndpoints=1
TranslateFacility=1
Q931PortRange=30000-30999
H245PortRange=31000-31999

[Proxy]
Enable=1
;InternalNetwork=192.168.1.33/27
ProxyForNAT=1
ProxyForSameNAT=0
T120PortRange=50000-59999
RTPPortRange=50000-59999

[RoutingPolicy]
default=explicit,internal,neighbor

[RasSrv::Neighbors]
GK1=GnuGk

[Neighbor::GK1]
Host=10.10.1.10
SendPrefixes=*
AcceptPrefixes=*

[RasSrv::LRQFeatures]
AcceptNonNeighborLRQ=1

[RasSrv::RRQFeatures]
AcceptEndpointIdentifier=0
AcceptGatewayPrefixes=1
SupportDynamicIP=1

[RasSrv::ARQFeatures]
CallUnregisteredEndpoints=1

[CallTable]
GenerateNBCDR=0
GenerateUCCDR=1

Can 
you see what the problem is ?  Thanks.

Best 
regards,

Bob 
Hicks

  -----Original Message-----
From: 
  openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx 
  [mailto:openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx]On Behalf Of 
  Simon Horne
Sent: Tuesday, December 11, 2007 3:52 
  PM
To: GNU Gatekeeper Users
Subject: Re: 
   Connecting two private networks 
  overtheinternet

  Bob

  Your 
  INI was not configured correctly to link the two 
  gatekeepers
  Make 
  the following changes

  [RasSrv::Neighbors]
GK1=GnuGk   <---- 

  [Neighbor::GK1]
Host=10.10.2.1
SendPrefixes=*
AcceptPrefixes=*

  Also 
  remove ENUM, SRV and DNS routing policy if you don't need 
  them

  [RoutingPolicy]
default=explicit,internal,neighbor

  Simon

-----Original Message-----
From: 
  openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx 
  [mailto:openh323gk-users-bounces@xxxxxxx   urceforge.net]On Behalf 
  Of Bob Hicks
Sent: Wednesday, December 12, 2007 12:55 
  AM
To: GNU Gatekeeper Users
Subject: Re: 
   Connecting two private networks over 
  theinternet

    Hello Simon,

    Thank you very much for your suggestion. I adjusted both routers to 
    forward the ports you indicated. However, when the call initiator does 
    an ARQ to the gatekeeper (for an e.164 of 15551000), the gatekeeper tries to 
    resolve the e.164 alias using DNS :

    DNS Standard query napt 0.0.0.1.5.5.5.1.e.164.voxgratia.net 

    DNS Standard query napt 0.0.0.1.5.5.5.1.e.164.voxgratia.net 
    DNS Standard query napt 0.0.0.1.5.5.5.1.e.164.voxgratia.net 

    How do I stop the 
    gatekeeper from using DNS and go directly to the host address of the 
    neighbor ?   Many thanks.

    Best regards,

    Bob Hicks

      -----Original Message-----
From: 
      openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx 
      [mailto:openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx]On Behalf Of 
      Simon Horne
Sent: Monday, December 10, 2007 10:13 
      AM
To: GNU Gatekeeper Users
Subject: Re: 
       Connecting two private networks over 
      theinternet

      Make sure you port forward ALL the relevent ports in the routers to 
      the GnuGK box behind the router.

      UDP 1719 (done)
      TCP 1721 (done)
      TCP 30000 - 32000
      UDP 50000 - 60000

      This should now work.

      Simon

        -----Original Message-----
From: 
        openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx 
        [mailto:openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx]On Behalf Of 
        Bob Hicks
Sent: Tuesday, December 11, 2007 12:12 
        AM
To: 
        openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Subject: 
         Connecting two private networks over the 
        internet

        Hello, 

        I am trying 
        to place calls between two separate private networks, each 
        using it's own GnuGk as a gatekeeper, over the internet. 
        Each private network is behind a firewall. I have each GnuGK's Neighbor 
        set up as the opposite router's public IP address. Port forwarding is 
        enabled for 1719 and 1721.

        Each phone on the 
        two networks registers with his GnuGK using a local E.164 
        alias. Outgoing calls are then placed using the remote E.164 
        alias.

        Private Network 
        1                                          
        Private Network 
        2
        |=========|                                                    
        |=========|
        | Phones 
         |---|                                            
        |---| Phones 
         | 
        |=========|   |  |==========|                |==========|  
        |   |=========|
                      ---| 
        Router 1 |--- Internet ---| Router 2 |---

        |=========|   |  
        |==========|                
        |==========|  |   |=========|
        | GnuGk 1 |---|  Public 
        Address            Public 
        Address  |---| GnuGk 2 |
        |=========|      10.10.1.1                    10.10.1.2     
           |=========|

        Private 
        Addresses                                           
        Private 
        Addresses
        192.168.1.X                                                 
        192.168.2.X

        Can anyone help me 
        configure both GnuGk's correctly ?  Thank you.

        Bob 
        Hicks

        Here is the 
        configuration file of Network 1.  

        [Gatekeeper::Main]
FortyTwo=42
Name=GnuGk
EndpointSuffix=_GnuGk
TimeToLive=60
StatusTraceLevel=0
UseBroadcastListener=0
UseMulticastListener=0
UnicastRasPort=1719
ExternalIP=10.10.1.1
ExternalIsDynamic=0

[GkStatus::Auth]
rule=explicit
127.0.0.1=allow
default=forbid
Shutdown=allow

        [Gatekeeper::Auth]

[SimplePasswordAuth]

[RoutedMode]
GKRouted=1
H245Routed=1
CallSignalPort=1721
AcceptNeighborCalls=1
AcceptUnregisteredCalls=1
TreatUnregisteredNAT=1
RemoveH245AddressOnTunneling=1
RemoveCallOnDRQ=0
DropCallsByReleaseComplete=1
SendReleaseCompleteOnDRQ=0
SupportNATedEndpoints=1
SupportCallingNATedEndpoints=1
TranslateFacility=1
Q931PortRange=30000-30999
H245PortRange=31000-31999

[Proxy]
Enable=1
InternalNetwork=192.168.1.33/27
ProxyForNAT=1
ProxyForSameNAT=0
T120PortRange=50000-59999
RTPPortRange=50000-59999

[RoutingPolicy]
default=explicit,internal,neighbor,enum,srv,dns

[RasSrv::Neighbors]
GK1=Site2

        [Neighbor::GK1]
Host=10.10.2.1
SendPrefixes=*
AcceptPrefixes=*

[RasSrv::LRQFeatures]
AcceptNonNeighborLRQ=1

[RasSrv::RRQFeatures]
AcceptEndpointIdentifier=0
AcceptGatewayPrefixes=1
SupportDynamicIP=1

[RasSrv::ARQFeatures]
CallUnregisteredEndpoints=1

[CallTable]
GenerateNBCDR=0
GenerateUCCDR=1

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/