I have an asterisk server which is behind NAT and the subnet of the Asterisk is 192.168.1.0/24
I have a managed switch that provides diffrent VLANs with subnets like 192.168.11.0/24 and similar with L3 switching . All the VLANs can access the asterisk and all udp,tcp packats are allowed to and from the asterisk server to and from all VLANs.
The transport section for pjsip is as follows
[transport-tls] type=transport protocol=tls bind=0.0.0.0:5061 cert_file=/etc/asterisk/keys/asterisk.crt priv_key_file=/etc/asterisk/keys/asterisk.key method=tlsv1 local_net=192.168.1.0/16 local_net=127.0.0.1/16 external_media_address=188.8.131.52 external_signaling_address=184.108.40.206 external_signaling_port=5061 tos = cs3
Endpoints are as follows
 type = aor max_contacts = 1 remove_existing = yes qualify_frequency = 60 maximum_expiration = 3600 minimum_expiration = 60 default_expiration = 120  type = auth username = 70102 password = 70102 nonce_lifetime = 200  type = endpoint context=fullrights rtp_symmetric = yes rewrite_contact=yes dtmf_mode = rfc4733 message_context=some_context_that_does_nothing disallow = all allow = ulaw allow = alaw allow = gsm allow = g726 allow = h264 allow = mpeg4 allow = vp8 allow = h263p rtp_timeout = 30 timers = yes direct_media = no callerid=70102 <Door_5> send_pai = yes use_avpf = no tos_audio = ef tos_video = af41 auth = 70102 outbound_auth = 70102 aors = 70102
 type = aor max_contacts = 5 qualify_frequency = 60 maximum_expiration = 3600 minimum_expiration = 60 default_expiration = 120 remove_existing = yes  type = auth username = 90102 password = 88868c  type = endpoint rewrite_contact=yes context=mobile dtmf_mode = rfc4733 disallow = all allow = ulaw allow = alaw allow = gsm allow = g726 allow = h264 allow = mpeg4 allow = vp8 allow = h263p rtp_timeout = 30 timers = yes direct_media = no callerid=90102 <Mobile Exten 90102> send_pai = yes auth = 90102 outbound_auth = 90102 aors = 90102 dtmf_mode=rfc4733 media_encryption=sdes transport = transport-tls rtp_symmetric=yes force_rport=yes
Here is the full log with debug and verbose set to 5
full.log.txt (115.4 KB)
How can this be solved?