TIPS PJSIP/SIP extension goes unreachable within 5 minutes

[vchohan]

Hi Team, I am facing the issues with PJSIP/SIP extensions and they are going unreachable with 5 minutes and after sometime they came back online and again goes unreachable. I guess it is because of the Asterisk server is not getting KEEPALIVE back from the extensions. We are using Comcast business modem and I have already disabled the firewall so that it will not block any sort of packet. However, when I try to restart the extension, it comes online and goes unreachable.

I have tried to change the SIP expire time on extension from 3600 to 60/120 but still not luck. I really need help here. I am missing something on the PBX server or is it network issue?

Below are extension logs:

[2020-11-12 17:41:48] VERBOSE[13399] res_pjsip/pjsip_configuration.c: Endpoint 113 is now Reachable
[2020-11-12 17:41:48] VERBOSE[13399] res_pjsip/pjsip_options.c: Contact 113/sip:113@XX-XX-XX-XX:1090;x-ast-orig-host=10.1.10.69:0 is now Reachable. RTT: 54.319 msec
[2020-11-12 18:06:06] VERBOSE[2806] res_pjsip_registrar.c: Removed contact 'sip:113@XX-XX-XX-XX:1090;x-ast-orig-host=10.1.10.69:0' from AOR '113' due to expiration
[2020-11-12 18:06:06] VERBOSE[24569] res_pjsip/pjsip_options.c: Contact 113/sip:113@XX-XX-XX-XX:1090;x-ast-orig-host=10.1.10.69:0 has been deleted
[2020-11-12 18:06:06] VERBOSE[24569] res_pjsip/pjsip_configuration.c: Endpoint 113 is now Unreachable
[2020-11-12 18:34:23] VERBOSE[30973] pbx.c: Total time merge_contexts_delete: 0.005113 sec
[2020-11-12 19:43:28] VERBOSE[11113] res_pjsip/pjsip_options.c: Contact 101/sip:101@XX-XX-XX-XX:5060;x-ast-orig-host=10.1.10.82:0 has been deleted
[2020-11-12 19:43:28] VERBOSE[11113] res_pjsip/pjsip_configuration.c: Endpoint 101 is now Unreachable
[2020-11-12 21:41:26] VERBOSE[24569] res_pjsip/pjsip_options.c: Contact 101/sip:101@XX-XX-XX-XX:1094;x-ast-orig-host=10.1.10.82:0 is now Reachable. RTT: 64.113 msec
[2020-11-12 22:47:51] VERBOSE[2249] translate.c: Registered translator 'lintogsm' from codec slin to gsm, table cost, 600000, computational cost 1136
[2020-11-12 23:04:16] VERBOSE[2330] res_pjsip_registrar.c: Added contact 'sip:113@XX-XX-XX-XX:1095;x-ast-orig-host=10.1.10.69:0' to AOR '113' with expiration of 3600 seconds
[2020-11-12 23:04:16] VERBOSE[2330] res_pjsip/pjsip_configuration.c: Endpoint 113 is now Reachable
[2020-11-12 23:04:16] VERBOSE[2330] res_pjsip/pjsip_options.c: Contact 113/sip:113@XX-XX-XX-XX:1095;x-ast-orig-host=10.1.10.69:0 is now Reachable. RTT: 63.715 msec
[2020-11-12 23:05:19] VERBOSE[2330] res_pjsip/pjsip_configuration.c: Endpoint 113 is now Unreachable
[2020-11-12 23:05:19] VERBOSE[2330] res_pjsip/pjsip_options.c: Contact 113/sip:113@XX-XX-XX-XX:1095;x-ast-orig-host=10.1.10.69:0 is now Unreachable. RTT: 0.000 msec
[2020-11-13 00:04:20] VERBOSE[2343] res_pjsip_registrar.c: Removed contact 'sip:113@XX-XX-XX-XX:1095;x-ast-orig-host=10.1.10.69:0' from AOR '113' due to expiration
[2020-11-13 00:04:20] VERBOSE[10987] res_pjsip/pjsip_options.c: Contact 113/sip:113@XX-XX-XX-XX:1095;x-ast-orig-host=10.1.10.69:0 has been deleted

 

[Eliad]

It might be your IncrediblePBX firewall. Run iptables -nL on the IncrediblePBX server and see what is going on. Fail2Ban might be the problem.

 

[vchohan]

I checked but it it seems like IP are not blocked:

[PBX@noreply ~]$ sudo iptables -nL | grep 73.XX.XX.XX
ACCEPT all -- 73.XX.XX.XX 0.0.0.0/0
ACCEPT all -- 73.XX.XX.XX 0.0.0.0/0
[PBX@noreply ~]$ sudo iptables -nL | grep 10.1.10.0
ACCEPT all -- 10.1.10.0/24 0.0.0.0/0
ACCEPT all -- 10.1.10.0/24 0.0.0.0/0

 

[dhoppy]

When this happens to me it is because I need to set the NAT mode on the phone to "keep alive."

 

[vchohan]

I tried that but no luck, I just noticed that Comcast is using IPv6 and as well as IPv4. It seems like traffic is going to out from IPv6 .i.e. I am not able to ping or open WebUI. I think it is now clear that IPv6 is creating issues.

Is there any script or way to whitelist IPv6 address? I tried to run default script but that is not accepting IPv6 address. It seems like I have to manually update IP tables for IPv6.

 

[billsimon]

Comcast business modems are garbage; my last experience with one revealed a SIP ALG that could not be disabled. You might have better luck if you disable NAT on your extensions and see whether Comcast’s ALG actually works. Or use TLS. Your issue is not IPv6; the logs show IPv4.

 

[vchohan]

Comcast business modems are garbage; my last experience with one revealed a SIP ALG that could not be disabled. You might have better luck if you disable NAT on your extensions and see whether Comcast’s ALG actually works. Or use TLS. Your issue is not IPv6; the logs show IPv4.

I agree Comcast business router are garbage. I tried disabling NAT on extension but no luck. I wondering why I am not able to open UI. I run and tracert and found that packets are not going out although I have allowed all the incoming traffic for office IP.

C:\Users\admin - Call>tracert 13.XXX.XXX.XXX

Tracing route to 13.XXX.XXX.XXX over a maximum of 30 hops

1 9 ms * 12 ms 10.1.10.1
2 * * * Request timed out.
3 * * * Request timed out.
4 * * * Request timed out.
5 * * * Request timed out.
6 * * * Request timed out.
7 * * * Request timed out.
8 * * * Request timed out.
9 * * * Request timed out.
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.

 

[dhoppy]

You mean you can't open the UI of the PBX? What version are you running? If IPBX 2020, is it the "go public" version?

 

[vchohan]

I can open UI of PBX from other location but not from the office because of the Comcast business modem issue.

 

[Eliad]

I can open UI of PBX from other location but not from the office because of the Comcast business modem issue.

For a friend of mine we just got rid of the Comcast router. I replaced it with a cable modem and Ubiquity Edge router.

 

[geopeterwc]

@vchohan I'm certain that the responses you have received so far are based on personal preferences for IncrediblePBX installations. However, more information is needed to help you resolve the problem with your installation.

From your description of the issue, it appears that you have two (or more) locations where you intend to use phones with your Incredible PBX installation?

What version of Incredible PBX are you using?

Is the server installed on a cloud server or is it installed on hardware at one of the locations? (You used "sudo" in one of your references which suggests hardware, indicating possibly a Raspberry Pi?

How many extensions in your installation at each location? Are they configured with ChanSIP or PJSIP? Are any of them mobile extensions or cell phones?

Are you certain that the passwords are correct for all of the extension configurations at the "problem" location? (Fail2Ban will disable the public IP address for all devices including GUI access from the problem location if any of the phones at that location is improperly configured, as well as your access to the GUI from that location.)

Is it your intention to use the "public Internet" to connect the multiple service locations? If so, you'll need to run the "Public" version of iPBX2020 or use a VPN.

Your responses (though there may be others) will provide a more clear picture of your intentions and likely more precise assistance.

/Pete./

 

[vchohan]

@vchohan I'm certain that the responses you have received so far are based on personal preferences for IncrediblePBX installations. However, more information is needed to help you resolve the problem with your installation.

From your description of the issue, it appears that you have two (or more) locations where you intend to use phones with your Incredible PBX installation?

What version of Incredible PBX are you using?

Is the server installed on a cloud server or is it installed on hardware at one of the locations? (You used "sudo" in one of your references which suggests hardware, indicating possibly a Raspberry Pi?

How many extensions in your installation at each location? Are they configured with ChanSIP or PJSIP? Are any of them mobile extensions or cell phones?

Are you certain that the passwords are correct for all of the extension configurations at the "problem" location? (Fail2Ban will disable the public IP address for all devices including GUI access from the problem location if any of the phones at that location is improperly configured, as well as your access to the GUI from that location.)

Is it your intention to use the "public Internet" to connect the multiple service locations? If so, you'll need to run the "Public" version of iPBX2020 or use a VPN.

Your responses (though there may be others) will provide a more clear picture of your intentions and likely more precise assistance.

/Pete./

I am hosting Incredible PBX 2020 on Microsoft Azure. I have total of 15 extensions most of them are PJSIP, I created CHANSIP extension to see if it makes any difference. I have entered the password by my self on all the extensions so they are likely to be correct. On office we have around 10 extension and at other we have 1-2 extensions. I am able use extension which are in remote location connected through softphone and hardphones (Polycom VVX Series) are working fine and extension keep themselves registered.

However, in office neither I am unable to open UI nor dashboard or not ping simply do nothing. I know Comcast business modem is not that good but we are already using VOIP services from current provider and it is working perfectly fine. I really need to fix this issue..

We are not using any extension on mobile phone.

 

[vchohan]

I messed up with the settings of Comcast business router, Now now able to correct it. Now, I am able to Ping, open UI and register extension as well. However they are still going UNREACHABLE in a few seconds and then comes back to reachable and going UNREACHABLE .

 

[geopeterwc]

I am unfamiliar with the Microsoft Azure offering. My installations (if not local hardware) are largely using the $25 per year offering from Crown Cloud. I've not had any issues with Crown Cloud ... and have multiple locations supported by the same VPS server without problems. I've also not experienced an outage with Crown Cloud since installing services with them several months ago. Check out the Crown Cloud offerings here: http://nerdvittles.com/?p=32656.

Additionally, my installations are using the Comcast-provided modem/router for both business and residential services - and not experiencing any issues, though your experience may be different from mine. (No adjustments to the default configuration of the routers in any installation.)

/Pete./

 

[vchohan]

After reading some post online, I changed the Qualify Frequency value of PJSIP extension from 60 to 0 and now, extension are not going UNREACHABLE. I am not sure if this is correct setting keep for the future.

However, I am getting below message but it is not creating issues in calls for now at least..

-- Removed contact 'sip:[email protected]:1102;x-ast-orig-host=10.1.10.82:0' from AOR '101' due to remove existing
== Contact 101/sip:[email protected]:1102;x-ast-orig-host=10.1.10.82:0 has been deleted
-- Added contact 'sip:[email protected].32:1106;x-ast-orig-host=10.1.10.94:0' to AOR '107' with expiration of 3600 seconds
-- Removed contact 'sip:[email protected]:1103;x-ast-orig-host=10.1.10.94:0' from AOR '107' due to remove existing
== Contact 107/sip:[email protected]:1103;x-ast-orig-host=10.1.10.94:0 has been deleted
-- Added contact 'sip:[email protected]:1106;x-ast-orig-host=10.1.10.110:0' to AOR '102' with expiration of 60 seconds
-- Removed contact 'sip:[email protected]:1103;x-ast-orig-host=10.1.10.110:0' from AOR '102' due to remove existing
== Contact 102/sip:[email protected]:1103;x-ast-orig-host=10.1.10.110:0 has been deleted
-- Added contact 'sip:[email protected]:1107;x-ast-orig-host=10.1.10.116:0' to AOR '111' with expiration of 3600 seconds

 

[wardmundy]

PJsip extensions are not created in the default Incredible PBX 2020 build. What defaults did you change when creating these extensions?? Without knowing exactly how you set up the extensions, it's obviously difficult to troubleshoot your issues. Sounds like you have found a fix, albeit less than an ideal solution.

 

[vchohan]

PJsip extensions are not created in the default Incredible PBX 2020 build. What defaults did you change when creating these extensions?? Without knowing exactly how you set up the extensions, it's obviously difficult to troubleshoot your issues. Sounds like you have found a fix, albeit less than an ideal solution.

Yes, PJSIP extensions were not created in default on Incredible PBX 2020. I only changes the Qualify Frequency which is under Advanced setting of the extension to fix this issue.