How to Make Asterisk 11 behind NAT works

Asterisk Asterisk Support
21

Enable NAT. Disable SIP Alg. Port forward 5060 and the port numbers used in both directions for RTP. Configure the phone to operate behind NAT.

It is not possible to give specifics without detailed information on the network and the routers. I don’t have the experience with routers to give it, even then. Also the SIP trace is important in order to understand what addresses are actually being specified.

22

David,

I’ll send you exactly what I did but before that, let me ask you a question? If you have a look at this RTP packet by one of the phone which is trying to communicate with the other phone:

Sent RTP P2P packet to 10.0.0.24:52980<------------ this 52980, isn’t the RTP port number? To me it is and it’s way outside what we are opening at the firewall" 10000-20000".

I would really appreciated if you can send me a sample sip file with all the required features that needed for a phone behind NAT and another phone which is in the same LAN as the asterisk.

LANA
Asterisk<------------>
Sip Phone<---------> FW<--------------->Internet<------------>FW<----> LAN B ( my other sip phone)

23

[quote=“aldulaimi"Sent RTP P2P packet to 10.0.0.24:52980<------------ this 52980, isn’t the RTP port number? To me it is and it’s way outside what we are opening at the firewall” 10000-20000".
[/quote]

You haven’t provided the configuration for the remote end, so we have no idea what port numbers are valid for the remote side. Also the NAT device may be changing them.

24

David,

My remote device is X-Lite 4.7 on windows 7. Opened port 5061 and 10000-20000 and pointed to the PC that run the X-Lite,

I may mention that the routers that I have at both end are TP-link TD-W8960N. I’ve disabled SIP AGL on both.

Again and if that’s ok with you, please send me examples " tested examples" of sip.conf, extension.conf or rtp.conf. Just to make sure I’m not doing something silly.

Again, many thanks for your help.

PS- The only thing I did not do is to disable windows firewall. I’m going to test with cisco 9740 to avoid all the hassles of windows and x-lite, but still if you can please send me those samples which you think it will work.