Re: NAT Problem, WAN to LAN works, LAN to WAN doesn't, , Help!!

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ram

Sorry for the delay in replying.

A fix has been checked into the CVS.
The problem was the interface chosen to place the call out of the NAT was
not resolved and defaulted to the first interface (which happens to be
loopback 127.0.0.1). The changes made corrects this so the interface is the
default interface (one detected as being the route out of the NAT).

Simon 

-----Original Message-----
From: Ram Gandhi [mailto:ramkumar2579@xxxxxxxxx] 
Sent: Friday, 30 April 2010 10:02 PM
To: GNU Gatekeeper Users
Subject: Re:  NAT Problem, WAN to LAN works,LAN to WAN
doesn't, , Help!!

Hi Simon,
               I have attached Trace level 5 log with this mail..
please have a look.

the xx.xx.23.191 is the IP of the polycom softphone in Internet

Here is my conf::

[Gatekeeper::Main]
FortyTwo=42
Name=GnuGkTest
TimeToLive=300
StatusTraceLevel=3
ExternalIP=xx.xx.xx.230

; restrict access to the status port by an IP address [GkStatus::Auth]
rule=allow

[RoutedMode]
GKRouted=1
H245Routed=0
CallSignalPort=1720
CallSignalHandlerNumber=2
RemoveH245AddressOnTunneling=1
SupportNATedEndpoints=1
DropCallsByReleaseComplete=1
Q931PortRange=30000-30999
H245PortRange=31000-31999

[Proxy]
Enable=1
ProxyAlways=1
T120PortRange=50000-59999
RTPPortRange=50000-59999
InternalNetwork=10.0.0.0/8

[ModeSelection]
10.0.0.0/8=PROXY,PROXY





On Fri, Apr 30, 2010 at 2:01 PM, Ram Gandhi <ramkumar2579@xxxxxxxxx> wrote:
> Hi Simon,
>                Thank you for your reply.. I have done the changes as 
> you said.. The port forwarding is as you said..
> Still the problem persists..ie) calls from LAN to Internet fails while 
> calls from Internet to LAN works.
> I am pasting the error messages here for some help..
> EXTIP is the Internal IP of the polycom softphone
>
>
> 2010/04/30 14:06:33.739 2             RasSrv.cxx(175)   RAS     Read 
> from 10.129.154.240:1719 2010/04/30 14:06:33.739 3             
> RasSrv.cxx(224)   RAS admissionRequest {
>    requestSeqNum = 22387
>    callType = pointToPoint <<null>>
>    callModel = gatekeeperRouted <<null>>
>    endpointIdentifier =  9 characters {
>      0031 0035 0030 0035 005f 0065 006e 0064   1505_end
>      0070                                      p
>    }
>    destinationInfo = 1 entries {
>      [0]=h323_ID  5 characters {
>        0069 006e 0074 0032 0033                  int23
>      }
>    }
>    srcInfo = 2 entries {
>      [0]=h323_ID  6 characters {
>        0061 0073 0068 0069 0073 0068             ashish
>      }
>      [1]=dialedDigits "1088"
>    }
>    bandWidth = 7680
>    callReferenceValue = 28747
>    conferenceID =  16 octets {
>      02 30 8b 40 b6 89 bf 15  27 ee 2c f5 8a fb 18 71   
> .0.@....'.,....q
>    }
>    activeMC = false
>    answerCall = false
>    canMapAlias = true
>    callIdentifier = {
>      guid =  16 octets {
>        02 30 8b 40 b6 89 bf 15  27 ed 2c f5 8a fb 18 71   
> .0.@....'.,....q
>      }
>    }
>    gatekeeperIdentifier =  10 characters {
>      004f 0070 0065 006e 0048 0033 0032 0033   OpenH323
>      0047 004b                                 GK
>    }
>    willSupplyUUIEs = false
>    featureSet = {
>      replacementFeatureSet = false
>      supportedFeatures = 1 entries {
>        [0]={
>          id = standard 9
>        }
>      }
>    }
>  }
> 2010/04/30 14:06:33.739 1             RasSrv.cxx(354)   RAS     ARQ 
> Received from 10.129.154.240:1719 2010/04/30 14:06:33.740 3             
> RasSrv.cxx(2569)  GK      ARQ will request bandwith of 7680 2010/04/30 
> 14:06:33.740 2             RasTbl.cxx(3321)
> CallTable::Insert(CALL) Call No. 6, total sessions : 1 2010/04/30 
> 14:06:33.740 2             RasSrv.cxx(394)
> ACF|10.129.154.240:1720|1505_endp|28747|int23:h323_ID|ashish:h323_ID=1
> ACF|088:dialedDigits|false|02-30-8b-40-b6-89-bf-15-27-ed-2c-f5-8a-fb-1
> ACF|8-71;
> 2010/04/30 14:06:33.740 3             RasSrv.cxx(236)   RAS     Send 
> to 10.129.154.240:1719 admissionConfirm {
>    requestSeqNum = 22387
>    bandWidth = 7680
>    callModel = gatekeeperRouted <<null>>
>    destCallSignalAddress = ipAddress {
>      ip =  4 octets {
>        0a 64 6a b7                                        .dj.
>      }
>      port = 1720
>    }
>    irrFrequency = 120
>    willRespondToIRR = false
>    uuiesRequested = {
>      setup = false
>      callProceeding = false
>      connect = false
>      alerting = false
>      information = false
>      releaseComplete = false
>      facility = false
>      progress = false
>      empty = false
>      status = false
>      statusInquiry = false
>      setupAcknowledge = false
>      notify = false
>    }
>  }
> 2010/04/30 14:06:33.857 3       ProxyChannel.cxx(1020)  Q931s
> Received: Setup CRV=28747 from 10.129.154.240:3232 2010/04/30 
> 14:06:33.858 2             gkacct.cxx(1047)  GKACCT Successfully 
> logged event 1 for call no. 6 2010/04/30 14:06:33.859 3       
> ProxyChannel.cxx(2636)  Q931s   Call 6 is NAT type 0 2010/04/30 
> 14:06:33.859 1       ProxyChannel.cxx(867)   Call 6:
> h245Routed=1 proxy=1
> 2010/04/30 14:06:33.859 3       ProxyChannel.cxx(884)   GK      Call 6 
> proxy enabled 2010/04/30 14:06:33.860 1       ProxyChannel.cxx(4120)  
> Q931d   Could not open/connect Q.931 socket at 127.0.0.1:30001 - error 
> 6/22: Invalid argument 2010/04/30 14:06:33.860 1       
> ProxyChannel.cxx(4120)  Q931d   Could not open/connect Q.931 socket at 
> 127.0.0.1:30002 - error 6/22: Invalid argument .........
> .........
> ...........
> 2010/04/30 14:06:33.933 1       ProxyChannel.cxx(4120)  Q931d   Could 
> not open/connect Q.931 socket at 127.0.0.1:30499 - error 6/22: Invalid 
> argument 2010/04/30 14:06:33.933 1       ProxyChannel.cxx(4120)  Q931d   
> Could not open/connect Q.931 socket at 127.0.0.1:30500 - error 6/22: 
> Invalid argument 2010/04/30 14:06:33.933 3       
> ProxyChannel.cxx(3811)  Q931 EXTIP:1720 DIDN'T ACCEPT THE CALL 
> 2010/04/30 14:06:33.933 2             RasTbl.cxx(3727)  CDR     ignore 
> not connected call 2010/04/30 14:06:33.933 2             
> gkacct.cxx(1047)  GKACCT Successfully logged event 2 for call no. 6 
> 2010/04/30 14:06:33.933 3           yasocket.cxx(577)   Q931d   Delete 
> socket EXTIP:1720 2010/04/30 14:06:33.933 3           
> yasocket.cxx(577)   Q931s   Delete socket 10.129.154.240:3232 
> 2010/04/30 14:06:33.953 2             RasSrv.cxx(175)   RAS     Read 
> from 10.129.154.240:1719 2010/04/30 14:06:33.953 3             
> RasSrv.cxx(224)   RAS disengageRequest {
>    requestSeqNum = 22388
>    endpointIdentifier =  10 characters {
>      0031 0035 0030 0035 005f 0065 006e 0064   1505_end
>      0070 0000                                 p
>    }
>    conferenceID =  16 octets {
>      02 30 8b 40 b6 89 bf 15  27 ee 2c f5 8a fb 18 71   
> .0.@....'.,....q
>    }
>    callReferenceValue = 28747
>    disengageReason = normalDrop <<null>>
>    callIdentifier = {
>      guid =  16 octets {
>        02 30 8b 40 b6 89 bf 15  27 ed 2c f5 8a fb 18 71   
> .0.@....'.,....q
>      }
>    }
>    gatekeeperIdentifier =  10 characters {
>      004f 0070 0065 006e 0048 0033 0032 0033   OpenH323
>      0047 004b                                 GK
>    }
>    answeredCall = false
>  }
> 2010/04/30 14:06:33.953 1             RasSrv.cxx(354)   RAS     DRQ 
> Received from 10.129.154.240:1719 2010/04/30 14:06:33.953 2             
> RasSrv.cxx(394)
> DCF|10.129.154.240|1505_endp|28747|normalDrop|02-30-8b-40-b6-89-bf-15-
> DCF|27-ed-2c-f5-8a-fb-18-71;
> 2010/04/30 14:06:33.953 3             RasSrv.cxx(236)   RAS     Send 
> to 10.129.154.240:1719 disengageConfirm {
>    requestSeqNum = 22388
>  }
> 2010/04/30 14:06:34.911 3             RasTbl.cxx(2177)  Gk      Delete 
> Call No. 6
>
>
> ----------
>
>
>
>
>
>
>
>
> On Fri, Apr 30, 2010 at 12:14 PM, Simon Horne <s.horne@xxxxxxxxxxxxxx>
wrote:
>>
>> PORT forward or put GnuGk in the DMZ of the router
>>
>> If port forwarding then forward
>> TCP 1720 (or INI CallSignalPort)
>> UDP 1719
>> TCP 30000-31999
>> UDP 50000-59999
>>
>> Remove out the config
>> [Gatekeeper::Main]
>> Home=10.100.106.183
>>
>> See here for example
>> http://openh323gk.cvs.sourceforge.net/viewvc/openh323gk/openh323gk/et
>> c/nat.i
>> ni?revision=1.5&view=markup
>>
>> Simon
>>
>> -----Original Message-----
>> From: Ram Gandhi [mailto:ramkumar2579@xxxxxxxxx]
>> Sent: Friday, 30 April 2010 3:56 PM
>> To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
>> Subject:  NAT Problem, WAN to LAN works, LAN to WAN 
>> doesn't,, Help!!
>>
>> Hi,
>>     After trying all I could for 4 days, finally decided to post.. I 
>> hav two polycom pvx softphones on either side of the NAT trying to 
>> call each other.
>> The Gnugk is behind the NAT in the LAN and no Firewall rules are present.
>> The setup is as follows
>>
>> [polycom pvx (1) on the
>> Internet]---------->NAT----------------------->[polycom pvx (2) on 
>> the LAN]
>>                                                                  |
>>                                                                  |
>>                                                            GNUGK
>>
>> The endpoints get registered and calls from  Internet to LAN gets
through.
>> But calls from LAN (pvx 2) to Internet (pvx 1) fails!
>> The only error message i see in the log is something like this
>>
>> "Q931d Could not open/connect Q.931 socket at10.100.106.183:30001 - 
>> error 12/61:"
>>
>> The Config file is this
>>
>> [Gatekeeper::Main]
>> Fortytwo=42
>> TimeToLive=600
>> Home=10.100.106.183
>> ExternalIP=XXXX
>>
>> [RoutedMode]
>> GKRouted=1
>> H245Routed=0
>> CallSignalPort=1720
>> RemoveH245AddressOnTunneling=1
>> DropCallsByReleaseComplete=1
>> SupportNATedEndpoints=1
>> Q931PortRange=30000-30999
>> H245PortRange=31000-31999
>>
>> [Proxy]
>> Enable=1
>> T120PortRange=50000-59999
>> RTPPortRange=50000-59999
>> ProxyForNAT=1
>> ProxyForSameNAT=1
>> InternalNetwork=10.0.0.0/8
>>
>> [GkStatus::Auth]
>> rule=allow
>>
>> [RoutingPolicy]
>> default=internal
>> --
>>
>> Can you please tell me what could be the problem and what else should 
>> be done?
>> Also I have done no configurations in the PVX softphone other than 
>> the specifying the gatekeeper for registration. Is there any more 
>> config to be done?
>>
>> ---------------------------------------------------------------------
>> -------
>> --
>> _______________________________________________________
>>
>> Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
>> Archive:
>> http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-us
>> ers
>> Unsubscribe: 
>> http://lists.sourceforge.net/lists/listinfo/openh323gk-users
>> Homepage: http://www.gnugk.org/
>>
>>
>> ---------------------------------------------------------------------
>> --------- _______________________________________________________
>>
>> Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
>> Archive: 
>> http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-us
>> ers
>> Unsubscribe: 
>> http://lists.sourceforge.net/lists/listinfo/openh323gk-users
>> Homepage: http://www.gnugk.org/
>>
>


------------------------------------------------------------------------------
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/


[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux