H.460 Firewall traversal on Polycom Endpoint == no internal calls?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I am trying to troubleshoot an issue with internal calls.

Two endpoints are registered to GnuGK 2.3.1 (CVS).
If firewall traversal is enabled on the Polycom HDX endpoints, then 
internal calls dialed via the H.323 ID fail.  The two endpoints will 
play the "ring ring" sound and will display the distant ends' system 
name, but they will fail to establish a media channel and will then 
disconnect.

If firewall traversal is disabled, the calls can connect.

I'm not even sure I need firewall traversal, as the endpoints can reach 
the GK without passing through a firewall, but it seems odd that the 
GnuGK isn't recognizing that the two endpoints are internal.

In the level 5 log, I can see:
...skipping...
             productId =  11 octets {
               48 44 58 20 34 30 30 30  20 48 44                  HDX 
4000 HD
             }
             versionId =  22 octets {
               52 65 6c 65 61 73 65 20  2d 20 32 2e 35 2e 30 2e 
Release - 2.5.0.
               35 2d 33 35 34 38                                  5-3548
             }
           }
           terminal = {
           }
           mc = false
           undefinedNode = false
         }
         conferenceID =  16 octets {
           02 2e 5c b4 f6 47 14 a8  17 f4 69 ee 8f 1c 25 fb 
..\..G....i...%.
         }
         callIdentifier = {
           guid =  16 octets {
             02 2e 5c b4 f6 47 14 a8  17 f3 69 ee 8f 1c 25 fb 
..\..G....i...%.
           }
         }
         multipleCalls = false
         maintainConnection = true
         presentationIndicator = presentationAllowed <<null>>
         screeningIndicator = userProvidedVerifiedAndFailed
         featureSet = {
           replacementFeatureSet = true
           supportedFeatures = 1 entries {
             [0]={
               id = standard 19
               parameters = 1 entries {
                 [0]={
                   id = standard 1
                 }
               }
             }
           }
         }
       }
       h245Tunneling = false
     }
   }
}
2009/08/19 11:00:54.508 2             gkacct.cxx(1043)  GKACCT 
Successfully logged event 32 for call no. 1
2009/08/19 11:00:54.508 4             osutil.cxx(188)   PWLib   File 
handle high water mark set: 40 TCPSocket
2009/08/19 11:00:54.508 3       ProxyChannel.cxx(4508)  H245    Set 
h245Address to 63.250.160.22:31000
2009/08/19 11:00:54.508 5                job.cxx(364)   JOB     Worker 
threads: 10 total - 10 busy, 0 idle
2009/08/19 11:00:54.508 4       ProxyChannel.cxx(943)   Q931    Send to 
10.244.22.24:32986 {


The "interesting" line is 3rd from the bottom, where the H.245 address 
is being set to the external IP address of the GnuGK.

My ini file looks like:
cat gatekeeper.ini
; this is a basic startup configuration for GnuGk
; Generated by the GnuGk installation package
;

[Gatekeeper::Main]
FortyTwo=42
Name=GnuGk
EndpointSuffix=_GnuGk
TimeToLive=60
StatusTraceLevel=5
UseBroadcastListener=0
UseMulticastListener=0
UnicastRasPort=1719
ExternalIP=63.250.160.22
# DefaultDomain=
ExternalIsDynamic=0
TraceLevel=5


[GkStatus::Auth]
rule=explicit|password
10.0.0.0/8=allow
127.0.0.1=allow
default=forbid
Shutdown=allow
status=allow

[RoutedMode]
GKRouted=1
H245Routed=0
CallSignalPort=1721
AcceptNeighborCalls=1
AcceptUnregisteredCalls=1
TreatUnregisteredNAT=1
RemoveH245AddressOnTunneling=1
RemoveCallOnDRQ=0
DropCallsByReleaseComplete=1
SendReleaseCompleteOnDRQ=0
SupportNATedEndpoints=1
SupportCallingNATedEndpoints=1
TranslateFacility=1
EnableH46018=1
EnableH46023=1
H46023STUN=69.0.208.27
Q931PortRange=30000-30999
H245PortRange=31000-31999


[Proxy]
Enable=1
ProxyForNAT=1
ProxyForSameNAT=1
T120PortRange=50000-59999
RTPPortRange=50000-59999


[RoutingPolicy]
default=explicit,internal,neighbor,enum,srv,dns

[RasSrv::AssignedAliases]

[RasSrv::AssignedGatekeepers]

[RasSrv::Neighbors]


[RasSrv::LRQFeatures]
AcceptNonNeighborLRQ=1


[RasSrv::RRQFeatures]
AcceptEndpointIdentifier=0
AcceptGatewayPrefixes=1
SupportDynamicIP=1
;;AccHTTPLink=https://billing.mydomain.com?account=%a&password=%p

[RasSrv::ARQFeatures]
CallUnregisteredEndpoints=1

[CallTable]
GenerateNBCDR=0
GenerateUCCDR=1


[GkH350::Settings]
[GkQoSMonitor]
[LogFile]
Filename=2009-08-19-gk_trace.log


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux