[WXC/VFX] Switch to Fibre/new ISP and SIP doesn't work. Help!

Forums › One NZ (including Farmside) › [WXC/VFX] Switch to Fibre/new ISP and SIP doesn't work. Help!

rlevis

355 posts

Ultimate Geek
+1 received by user: 33

#124589 13-Jul-2013 01:55

Hi,

I've had an XNet account for close to 2 years and all was well using DSL.

I'm now using a new router connected to UFB fibre and I cannot make or receive calls via XNet. I've configured port forwarding for port 5060 although that should not be necessary.

The Network settings in the phone are correct for the new router. Strangely, I also have a free 2Talk account and it is still working fine. It's as if XNet are blocking communications from my new IP address, although the IP phone appears to be registering ok.

Making a call and I just get silence.

I was trying to do a speed test at Consumer.co.nz site and it said it was for NZ residents only. They thought my IP was foreign. Does XNet prevent access to their network from what they think are overseas?

Any help much appreciated.

RunningMan

9184 posts

Uber Geek
+1 received by user: 4834

#854742 13-Jul-2013 07:30

What ISP are you connected to UFB with?

What is the "new router" you are using.

Presumably you are using VFX or Open VFX - what device is this terminating on at your end?

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#854743 13-Jul-2013 07:40

If a SIP registration is occuring but no there is silence during a call it would typically be a NAT issue caused by a setup such as double NAT.

Port 5060 is only used by SIP signalling, not RTP traffic. If you have a double NAT setup you need to resolve your internal network issues.

maverick

3594 posts

Uber Geek
+1 received by user: 80

Trusted

WorldxChange

#854754 13-Jul-2013 08:37

I took a look at your number, you register fine but on calls when a 200 OK goes back to your device (SNOM) you do not respond with an ACK , the ACK is required to open up the voice path, then because the ACK is not received after a period of time the call will drop due to no response to the 200 OK, so more than likely the router is doing some funky natting, in your invite you do use rport with the device and in this case (5060 as well) so possibly the issue is how this is being dealt with by the router so odds on this is a nat issue, 2talk will be using different ports btw and we do not ever block overseas access

This is what is being sent back to your snom and there is no ACK message in response to this
----------------------------------------
Timestamp : 01:00:09.087 2013-07-13
Direction : TX
Remote IP/Port: 103.xxx.xxx.6/5060
Local IP/Port : 58.xxx.xxx.150(vx2)/5060
Transport : UDP
----------------------------------------
SIP/2.0 200 OK
From: "075xxxx21" ;tag=x9qt4c
To: "075xxxx29" ;tag=3201400a-13c4-51dffdd9-75efd962-605f894f
Call-ID: fe8m91qocb
CSeq: 55447915 INVITE
Allow: ACK,BYE,CANCEL,INFO,INVITE,OPTIONS,PRACK,REFER,NOTIFY,UPDATE
Accept: application/media_control+xml,application/sdp
Via: SIP/2.0/UDP 103.xxx.xxx.6:5060;branch=z9hG4bK-k90scp;rport=5060
Contact:
Content-Type: application/sdp
Content-Length: 227

v=0
o=BroadWorks 18610246 1 IN IP4 58.xxx.xxx.150
s=-
c=IN IP4 58.xxx.xxx.150
t=0 0
m=audio 36148 RTP/AVP 8 101
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
a=bsoft:1 image udptl t38

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

chevrolux

4962 posts

Uber Geek
+1 received by user: 2638
Inactive user

#854916 13-Jul-2013 12:19

2talk have a range of IP's in the 103.x.x.x area.

Are they your fibre provider? Have you got a public IP? 2talk do stuff to 5060 so this might be your issue if you arent paying for a public address.

rlevis

355 posts

Ultimate Geek
+1 received by user: 33

#854978 13-Jul-2013 16:03

It's a fairly new ISP in Tauranga, not related to 2Talk.

The phone system is a SNOM M9.

The router is an INNBOX V50-U Gateway. I'm not sure what you mean by double NAT. Do you mean 2 routers connected to the network? I do have 2 routers, my old DSL one, but I had disabled NAT in the DSL router so it should have only been acting as a switch. I'm sure I also tested without it connected at all to the network.

I was originally using a different port number for incoming SIP connections. I had heard using 5060 attracts hackers. I only switched to 5060 recently in the hope it may have helped, but no.

In the INNBOX settings are "Enable NAT" and when checked, I have the option to "Enable Fullcone NAT" which is checked. Apparently the Fullcone NAT is required for SIP type use where an outgoing connection opens an incoming connection. I've tried every conceivable setting in the router including disabling the built-in firewall etc.

This router has a built-in SIP client but it is disabled.

I've gone back to DSL so our phones work until this can be resolved. I'll let our ISP know that you think it is a router issue.

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#854995 13-Jul-2013 16:56

What type of VoIP hardware are you using and how exactly is it configured behind the Innbox?

I guess the other thing to find out is whether you actually have a static IP or are behind a NATed public IP in the first place (which essentially means you have a double NATed connection). There are ISP's doing this and the double NAT will break VoIP.

Dyson

Shop now for Dyson appliances (affiliate link).

rlevis

355 posts

Ultimate Geek
+1 received by user: 33

#855090 13-Jul-2013 21:58

sbiddle: What type of VoIP hardware are you using and how exactly is it configured behind the Innbox?

I guess the other thing to find out is whether you actually have a static IP or are behind a NATed public IP in the first place (which essentially means you have a double NATed connection). There are ISP's doing this and the double NAT will break VoIP.

I'm told I have a static IP and all ports are open. It's a SNOM M9 IP phone system. I set it with a static IP. There are dozens of configurations so I'm not sure what are you referring to exactly? It has a web interface for configuration. All I changed when installing the new router was the Gateway and DNS IP to match the new router IP.

myfullflavour

896 posts

Ultimate Geek
+1 received by user: 382

Trusted

Full Flavour

#855140 14-Jul-2013 05:18

sbiddle: I guess the other thing to find out is whether you actually have a static IP or are behind a NATed public IP in the first place (which essentially means you have a double NATed connection). There are ISP's doing this and the double NAT will break VoIP.

The OP is using Full Flavour, every customer has a static IP and there is no CG-Nat in place.

I've messaged the OP with an isolation test to try, failing that, an engineer can take a second look into the Innbox configuration on Monday.

rlevis

355 posts

Ultimate Geek
+1 received by user: 33

#857776 16-Jul-2013 23:36

I've been given a test SIP account via our new UFB ISP and it's also working with our SNOM phone system with the INNBOX VLAN router, so I'm not sure what's stopping proper communications with VFX. We'll have to transfer the 2 phones over to our ISP and use their system.

johny99

495 posts

Ultimate Geek
+1 received by user: 61
Inactive user

#862399 19-Jul-2013 22:27

does vfx support encription?

johny99

495 posts

Ultimate Geek
+1 received by user: 61
Inactive user

#862400 19-Jul-2013 22:27

does vfx support encription?