QUESTION Router Settings Question

[AndyInNYC]

My friend just set up a RentPBX site. All extensions are set up with NAT enabled (as is the SIP Settings). Setup is Green.

Asterisk = ONLINE | Dahdi = ONLINE | MySQL = ONLINE │
│ SSH = ONLINE | Apache = ONLINE | Iptables = ONLINE │
│ Fail2ban = ONLINE | Internet = ONLINE | Ip6Tables = ONLINE │
│ Disk Free = ADEQUATE| Mem Free = ADEQUATE| NTPD = OFFLINE │
│ SendMail = ONLINE | Samba = OFFLINE | Webmin = ONLINE │
│ Ethernet0 = ONLINE | Ethernet1 = N/A | Wlan0 = N/A │
│ │
│ PIAF Installed Version = 2.0.6.4 under *XEN* on Rent PBX │
│ FreePBX Version = 2.11.0.11 │
│ Running Asterisk Version = 11.5.1 │
│ Asterisk Source Version = 11.5.1 │
│ Dahdi Source Version = 2.7.0.1 │
│ Libpri Source Version = 1.4.14 │
│ IP Address = XXX on eth0 │
│ Operating System = CentOS release 6.4 (Final) │
│ Kernel Version = 2.6.32-358.6.2.el6.i686 - 32 Bit │
│ Incredible Version = 11.7


My extension (remote from him) seems to work just fine. His extension becomes UNREACHABLE (even mid conversation). The conversation will continue (i.e. no drop during the call), but if we hang up I am unable to reach his extension and he can't dial out. It appears to reestablish a connection on its own at some point post becoming UNREACHABLE.

He has an Actiontek (sp?) router provided by Verizon for his office's FIOS service.

The specific message received is:
[2014-01-06 13:41:45] NOTICE[27970]: chan_sip.c:29344 sip_poke_noanswer: Peer '705' is now UNREACHABLE! Last qualify: 120
So, I think we have a firewall/port issue on his side, but I can't recall what ports to open or if any need to be open on his side.
If I need to post results from rtp or sip debug I will do that next.
Thanks for your attention and thoughts.
Andrew

 

[atsak]

The router provided by Verizon is the problem. You can try forwarding port 5060 and 10 to 20000 to his extension, but I wouldn't do that I'd just set the router into bridge mode and get him a proper one (like the ASUS).

 

[AndyInNYC]

It's my understanding that the Verizon router can't be bridged (from what I read on-line).

Upon further investigation, it seems the lines DON'T reregister.

I'll check to see if it can be replaced entirely (supposedly if it is connected via cat5 it can if connected via coax it can't).

If I can't bridge or replace, any ideas how to fix the issue?



Andrew

 

[TwigsUSAN]

How is the FIOS router being connected? Coax or Ethernet? Does he have any other FIOS services? If it is bu Ethernet, he can just unhook the FIOS router and hook his own up. I've had installs in NJ and I have forced Verizon to hook it up by Ethernet just for the reason.

 

[atsak]

It's my understanding that the Verizon router can't be bridged (from what I read on-line).

Upon further investigation, it seems the lines DON'T reregister.

I'll check to see if it can be replaced entirely (supposedly if it is connected via cat5 it can if connected via coax it can't).

If I can't bridge or replace, any ideas how to fix the issue?



Andrew

Well you can try forwarding UDP port 5060 and UDP 10 to 20000 on the verizon router. The telco's aren't in a hurry to make this easy for obvious reasons. There's a setting on some endpoints called RTP keepalive that might help I suppose. I can't really help much with this I don't work with Verizon anywhere.

 

[AndyInNYC]

My friend stated that the Verizon router is connected via cat5 - if he's right I'll have him plug a router in and test his connections. I probably have an old 54G hanging around somewhere.

He is using Mitel 5224 phones. The closest I see to a keep alive is labeled:

Session Timer (90-3600 Seconds, 0=DISABLED):
And on my 5224 it is set for 1800. Would one set it to 90 to continue pinging? Or is this not the setting you are speaking of, atsak?


He has a small shop. On the 'what router is good for PIAF' discussion the RT-N66U seems to win praise, but at $125 it is seemingly $50 too expensive given he doesn't need a Bentley for a 6 man shop. Given the suggestions, though I'm inclined to point him towards one just to remove any other future inconvenience/issue.

Thanks for the help; I hope it really is as simple as swapping the router.

Andrew

 

[Hyksos]

before dropping 125$ for a shot in the dark you should debug the issue.
maybe if he was using another endpoint like a softphone the issue would disappear, for example.
Then that would warrant further investigation.

If the endpoint can currently only register one time... You need to find how you can reset that and make it work again, which would give you a hint about what is happening.
And like always, people should start by learning some asterisk debugging through the logs. sip debug, rtp debug and the like.

Maybe the verizon stuff has some type of voip helper/ALG that could turned off.
It's possible that it's the router, but a NAT device capable of successfully establishing a conntrack entry one time only.... would be pretty broken and cause a ton of problem for verizon...

what do you need to reboot to make it work again, for example.