Hi Alex, try adding [RoutedMode] AcceptNeighborsCalls=1 to both of your configs. Regards, Jan Alex Bouton wrote: > Hello > > I have been trying to get 2 GnuGK neighboured together using the simple example given in the sample configs. > > > ////////////////////// Here is the scenario://////////////////////// > > EP (22001) <-> GK2 <------>GK1 <->EP (33001) > > /////////////////////////////////////////////////////////////////// > > > ////////////////////////Here is the config:///////////////////////// > > *************GK1 configuration:************* > > [Gatekeeper::Main] > Fortytwo=42 > Name=GK1 > TimeToLive=300 > Home=a.a.a.a > > [RoutedMode] > GKRouted=1 > H245Routed=0 > > [RasSrv::Neighbors] > GK2=GnuGK > > [RasSrv::LRQFeatures] > ;timeout value to wait reply in seconds > NeighborTimeout=2 > > [Neighbor::GK2] > Host=b.b.b.b:1719 > Dynamic=0 > SendPrefixes=* > AcceptPrefixes=* > > [GkStatus::Auth] > rule=allow > > ********* > > *************GK2 configuration:*************** > [Gatekeeper::Main] > Fortytwo=42 > Name=GK1 > TimeToLive=300 > Home=b.b.b.b > > [RoutedMode] > GKRouted=1 > H245Routed=0 > > [RasSrv::Neighbors] > GK2=GnuGK > > [RasSrv::LRQFeatures] > ;timeout value to wait reply in seconds > NeighborTimeout=2 > > [Neighbor::GK2] > Host=a.a.a.a:1719 > Dynamic=0 > SendPrefixes=* > AcceptPrefixes=* > > [GkStatus::Auth] > rule=allow > > *********** > > > //////////////////Here is the trace on the GK1://///////////////////// > > locationRequest { > requestSeqNum = 3 > destinationInfo = 1 entries { > [0]=dialedDigits "33003" > } > nonStandardData = { > nonStandardIdentifier = h221NonStandard { > t35CountryCode = 138 > t35Extension = 1 > manufacturerCode = 2 > } > data = 3 octets { > 47 4b 31 GK1 > } > } > replyAddress = ipAddress { > ip = 4 octets { > d0 31 19 64 .1.d > } > port = 1719 > } > sourceInfo = 3 entries { > [0]=h323_ID 7 characters { > 0061 006c 0065 0078 0031 0030 0030 alex100 > } > [1]=dialedDigits "22001" > [2]=h323_ID 12 characters { > 0074 0065 0073 0074 0040 0067 006b 0032 test@gk2 > 002e 0063 006f 006d .com > } > } > canMapAlias = TRUE > gatekeeperIdentifier = 3 characters { > 0047 004b 0032 GK2 > } > genericData = 1 entries { > [0]={ > id = oid 1.3.6.1.4.1.17090.0.9 > } > } > canMapSrcAlias = FALSE > } > 2009/01/07 12:53:27.921 2 Neighbor.cxx(808) NB 1 LRQ(s) sent > 2009/01/07 12:53:27.921 4 RasSrv.cxx(232) RAS Receiving on b.b.b.b:1719(U) > 2009/01/07 12:53:27.921 2 RasSrv.cxx(191) RAS Read from a.a.a.a:1719 > 2009/01/07 12:53:27.921 3 RasSrv.cxx(240) RAS > locationReject { > requestSeqNum = 3 > rejectReason = securityDenial <<null>> > } > > /////////////////////////////////////////////////////////////// > > > //////////////////////Trace on GK2://///////////////////////// > > admissionRequest { > requestSeqNum = 61041 > callType = pointToPoint <<null>> > endpointIdentifier = 9 characters { > 0031 0032 0033 0030 005f 0065 006e 0064 1230_end > 0070 p > } > destinationInfo = 1 entries { > [0]=dialedDigits "33001" > } > srcInfo = 3 entries { > [0]=h323_ID 7 characters { > 0061 006c 0065 0078 0031 0030 0030 alex100 > } > [1]=dialedDigits "22001" > [2]=h323_ID 12 characters { > 0074 0065 0073 0074 0040 0067 006b 0032 test@gk2 > 002e 0063 006f 006d .com > } > } > bandWidth = 200000 > callReferenceValue = 7299 > conferenceID = 16 octets { > 97 a6 52 5a 6d fd 18 10 96 38 00 13 72 3f db 50 ..RZm....8..r?.P > } > activeMC = FALSE > answerCall = FALSE > canMapAlias = TRUE > callIdentifier = { > guid = 16 octets { > 97 a6 52 5a 6d fd 18 10 96 37 00 13 72 3f db 50 ..RZm....7..r?.P > } > } > gatekeeperIdentifier = 3 characters { > 0047 004b 0032 GK2 > } > willSupplyUUIEs = TRUE > canMapSrcAlias = FALSE > } > 2009/01/07 15:24:56.843 1 RasSrv.cxx(370) RAS ARQ Received > 2009/01/07 15:24:56.843 3 RasSrv.cxx(2234) GK ARQ will request bandwith of 200000 > 2009/01/07 15:24:56.843 3 RasSrv.cxx(252) RAS Send to a.a.a.a:1719 > locationRequest { > requestSeqNum = 11 > destinationInfo = 1 entries { > [0]=dialedDigits "33001" > } > nonStandardData = { > nonStandardIdentifier = h221NonStandard { > t35CountryCode = 138 > t35Extension = 1 > manufacturerCode = 2 > } > data = 3 octets { > 47 4b 31 GK1 > } > } > replyAddress = ipAddress { > ip = 4 octets { > d0 31 19 64 .1.d > } > port = 1719 > } > sourceInfo = 3 entries { > [0]=h323_ID 7 characters { > 0061 006c 0065 0078 0031 0030 0030 alex100 > } > [1]=dialedDigits "22001" > [2]=h323_ID 12 characters { > 0074 0065 0073 0074 0040 0067 006b 0032 test@gk2 > 002e 0063 006f 006d .com > } > } > canMapAlias = TRUE > gatekeeperIdentifier = 3 characters { > 0047 004b 0032 GK2 > } > genericData = 1 entries { > [0]={ > id = oid 1.3.6.1.4.1.17090.0.9 > } > } > canMapSrcAlias = FALSE > } > 2009/01/07 15:24:56.843 2 Neighbor.cxx(808) NB 1 LRQ(s) sent > 2009/01/07 15:24:56.859 4 RasSrv.cxx(232) RAS Receiving on b.b.b.b:1719(U) > 2009/01/07 15:24:56.859 2 RasSrv.cxx(191) RAS Read from a.a.a.a:1719 > 2009/01/07 15:24:56.859 3 RasSrv.cxx(240) RAS > locationReject { > requestSeqNum = 11 > rejectReason = securityDenial <<null>> > } > 2009/01/07 15:24:56.859 2 RasSrv.cxx(1354) RAS Trapped LRJ > 2009/01/07 15:24:56.859 2 RasSrv.cxx(415) ARJ|b.b.b.b:1720|33001:dialedDigits|alex100:h323_ID=22001:dialedDigits=test@xxxxxxx:h323_ID|false|calledPartyNotRegistered|97-a6-52-5a-6d-fd-18-10-96-37-00-13-72-3f-db-50; > 2009/01/07 15:24:56.859 3 RasSrv.cxx(252) RAS Send to b.b.b.b:4278 > admissionReject { > requestSeqNum = 61041 > rejectReason = calledPartyNotRegistered <<null>> > } > > ////////////////////////////////////////////////////////////////////////////////////////////////////////// > > > > Can somebody help me to understand why I'm getting a "security denial" on GK1 when GK2 sends an LRQ? > Also on GK2 who is initiating the call by calling 33001 from endpoint 22001 I am getting an LRJ for security denial and a ARQ? > I am getting confused. > > > Thanks for your answers > > Alex BOUTON. > -- Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.gnugk.org/ ------------------------------------------------------------------------------ Check out the new SourceForge.net Marketplace. It is the best place to buy or sell services for just about anything Open Source. http://p.sf.net/sfu/Xq1LFB _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/