2Talk, PAP2T ATA, Double NAT - stopped working...

Forums › VoIP › 2Talk, PAP2T ATA, Double NAT - stopped working...

DonGould

3892 posts

Uber Geek

#89352 31-Aug-2011 18:25

Any tricks to getting the ATA working with double nat?

publicIP <> 192.168.1.0/24 <> 192.168.2.0/24

Everything else seems to be working just fine, but the ATA won't register.

Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#514661 31-Aug-2011 19:46

Simple solution is to get rid of the double NAT. SIP doesn't like NAT traversals.

Failing that there are plenty of NAT settings in the SPA's incl the ability to insert VIA headers which may resolve the issue but they are a kludge - the ultimate solution is to get rid of the double NAT.

MightyApe

You will find anything you want at MightyApe (affiliate link).

DonGould

3892 posts

Uber Geek

#514662 31-Aug-2011 19:51

thanks steve,

double nat isn't going away sadly... I don't know what via headers are or where to find the right settings for 2talk. Can you provide any pointers?

Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#514694 31-Aug-2011 20:45

DonGould: thanks steve,

double nat isn't going away sadly... I don't know what via headers are or where to find the right settings for 2talk. Can you provide any pointers?

There isn't really a simple one answer fits all solution other than to get rid of the double NAT. This is the fix.

If you want to attempt to get around it with the use of remapped VIA headers you'll need to read up about them and then play with them in the SIP settings in your ATA. You will probably need to set up multiple port forwards as well.

DonGould

3892 posts

Uber Geek

#514721 31-Aug-2011 21:23

sbiddle:

... you'll need to read up about them

sure... I was looking for a hint on what to read? I tried a google, but my googlefu didn't turn up anything useful when I googled 'via sip header' and a 200 page rfc - 3261, which seemed a little ott.

Is there a guild you can recommend?

Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz

coffeebaron

6072 posts

Uber Geek

Trusted

Lifetime subscriber

#514740 31-Aug-2011 21:53

Why do you have double NAT? What prevents you from removing this?

Rural IT and Broadband support.

Broadband troubleshooting and master filter installs.
Starlink installer
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally
Rural Broadband RBI installer for Ultimate Broadband and Full Flavour

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

DonGould

3892 posts

Uber Geek

#514743 31-Aug-2011 21:59

coffeebaron: Why do you have double NAT? What prevents you from removing this?

I'm testing out the pppoe server on my mikrotik 750 router with the pppoe client on my ECB 1221R ap, with my TC HFC connection.

I've got all the pppoe working, but as I only have 1 public IP here, I end up with double nat. I threw the ata back on a different port on the RB for now, but I wanted everything behind the ecb.

Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#514747 31-Aug-2011 22:04

DonGould:
coffeebaron: Why do you have double NAT? What prevents you from removing this?

I'm testing out the pppoe server on my mikrotik 750 router with the pppoe client on my ECB 1221R ap, with my TC HFC connection.

I've got all the pppoe working, but as I only have 1 public IP here, I end up with double nat. I threw the ata back on a different port on the RB for now, but I wanted everything behind the ecb.

Whyt are you simply not handing out PPPoE addresses on the 192.168.1.0/24 subnet?

DonGould

3892 posts

Uber Geek

#514751 31-Aug-2011 22:11

sbiddle:
Whyt are you simply not handing out PPPoE addresses on the 192.168.1.0/24 subnet?

Sorry I don't follow... are you saying that I should be able to get the pppoe server to provide the dhcp and only have a single nat?

At present

TCModem/pubIP <>(port1)RB750-NAT192.168.1.0/24(so PPPoE interface on 750 = 1.1)(port2) <--> ECB Wan port (192.168.1.2)NAT-->192.168.2.0/24 --> MyATA(192.168.2.2)

Are you saying that my ECB should be able to terminate a subnect from the RB750 without doing NAT?

So I can then just dishout a subnet without natting it, but routing it?

Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#514754 31-Aug-2011 22:16

I don't fully understand your setup from that but you use proxy-arp on the PPPoE interface there is no need to route traffic or use a different IP range.

DonGould

3892 posts

Uber Geek

#514758 31-Aug-2011 22:23

sbiddle: I don't fully understand your setup from that but you use proxy-arp on the PPPoE interface there is no need to route traffic or use a different IP range.

I have proxy-arp on the interface, but I don't follow what you're talking about with the ip range.

The ECB just assumes the IP it's getting on the PPPoE interface is a 'public' ip and/or that it can only get the 1 ip so it has to set up NAT so it can service the clients hanging off that.

the ECB is just a basic wifi/ap/router.

Am I meant to be able to pass a whole /24 over the pppoe so that I don't need to NAT on the ECB?

Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz

coffeebaron

6072 posts

Uber Geek

Trusted

Lifetime subscriber

#514759 31-Aug-2011 22:25

Can you not turn off DHCP on the ECB and just use as basic AP?

Rural IT and Broadband support.

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

DonGould

3892 posts

Uber Geek

#514760 31-Aug-2011 22:30

coffeebaron: Can you not turn off DHCP on the ECB and just use as basic AP?

I don't know it if will let me use the pppoe client in the ap mode on the wan port. I also don't know how to configure the pppoe session to pass the subnet... I will look at the ECB a bit closer. There's a number of modes in the thing.

I'm wanting the pppoe because I'm setting up the user manager in the 750 so I can count the traffic going to the ecb.

Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz