dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
1953
share rss forum feed


Edrick
I aspire to tell the story of a lifetime
Premium
join:2004-09-11
Woburn, MA

2 edits

Cisco 7970 NAT

downloadLog.txt 21,438 bytes
I believe I've posted this question before but don't believe it ever got responses and I gave up on the project. Anyways back at it and the online results don't seem to be helping. I have a Cisco 7970 running the SIP Firmware version 9-3-1. I've verified a Soft Phone on my computer at the remote location is able to connect to the extension and make calls just fine. But the Cisco 7970 I cannot get to connect, it just brings me to the desktop with the extension 201 listed as a button but a red x.

I can't seem to modify the SIP settings from the phone menu even with it unlocked as such I'm trying to use the SEP.cnf.xml file to have it pull its settings. I know it did at one point as it pulled the extension info and updated the firmware. From the status screen it looks like it pulls the config file.

Here's the config file,

<?xml version="1.0" encoding="UTF-8"?>
<device>
 
  <deviceProtocol>SIP</deviceProtocol>
 
  <sshUserId>admin</sshUserId>
  <sshPassword>cisco</sshPassword>
 
  <devicePool>
                <dateTimeSetting>
                        <dateTemplate>M/D/YA</dateTemplate>
                        <timeZone>Eastern Standard/Daylight Time</timeZone>
                        <ntps>
                                <ntp>
                                        <name>192.168.0.1</name>
                                        <ntpMode>Unicast</ntpMode>
                                </ntp>
                        </ntps>
                </dateTimeSetting>
 
     <callManagerGroup>
        <members>
           <member priority="0">
              <callManager>
                 <ports>
                    <ethernetPhonePort>2000</ethernetPhonePort>
                    <sipPort>5060</sipPort>
                    <securedSipPort>5061</securedSipPort>
                 </ports>
                 <processNodeName><TRIXREMOTEIP></processNodeName>
              </callManager>
           </member>
        </members>
     </callManagerGroup>
  </devicePool>
 
  <commonProfile>
     <phonePassword></phonePassword>
     <backgroundImageAccess>true</backgroundImageAccess>
     <callLogBlfEnabled>2</callLogBlfEnabled>
  </commonProfile>
 
  <loadInformation>SIP70.9-3-1-1S</loadInformation>
 
  <vendorConfig>
     <disableSpeaker>false</disableSpeaker>
     <disableSpeakerAndHeadset>false</disableSpeakerAndHeadset>
     <pcPort>0</pcPort>
     <settingsAccess>1</settingsAccess>
     <garp>0</garp>
     <voiceVlanAccess>0</voiceVlanAccess>
     <videoCapability>0</videoCapability>
     <autoSelectLineEnable>0</autoSelectLineEnable>
 
     <webAccess>0</webAccess>
     <spanToPCPort>1</spanToPCPort>
     <loggingDisplay>1</loggingDisplay>
     <loadServer></loadServer>
     <daysDisplayNotActive></daysDisplayNotActive>
     <displayOnTime>07:00</displayOnTime>
     <displayOnDuration>17:00</displayOnDuration>
     <displayIdleTimeout>1:00</displayIdleTimeout>
  </vendorConfig>
 
  <deviceSecurityMode>1</deviceSecurityMode>
 
  <authenticationURL>http://TRIXREMOTEIP/cisco/services/authentication.php</authenticationURL>
  <directoryURL>http://TRIXREMOTEIP/xmlservices/PhoneDirectory.php</directoryURL>
  <idleURL>http://TRIXREMOTEIP/xmlservices/index.php</idleURL>
  <informationURL></informationURL>
 
  <messagesURL></messagesURL>
  <proxyServerURL></proxyServerURL>
  <servicesURL>http://phone-xml.berbee.com/menu.xml</servicesURL>
  <dscpForSCCPPhoneConfig>96</dscpForSCCPPhoneConfig>
  <dscpForSCCPPhoneServices>0</dscpForSCCPPhoneServices>
  <dscpForCm2Dvce>96</dscpForCm2Dvce>
 
  <transportLayerProtocol>4</transportLayerProtocol>
 
  <capfAuthMode>0</capfAuthMode>
  <capfList>
     <capf>
        <phonePort>3804</phonePort>
     </capf>
  </capfList>
 
  <certHash></certHash>
  <encrConfig>false</encrConfig>
 
   <sipProfile>
     <sipProxies>
        <backupProxy></backupProxy>
        <backupProxyPort></backupProxyPort>
        <emergencyProxy></emergencyProxy>
        <emergencyProxyPort></emergencyProxyPort>
        <outboundProxy></outboundProxy>
        <outboundProxyPort></outboundProxyPort>
        <registerWithProxy>false</registerWithProxy>
     </sipProxies>
 
     <sipCallFeatures>
        <cnfJoinEnabled>true</cnfJoinEnabled>
        <callForwardURI>x--serviceuri-cfwdall</callForwardURI>
        <callPickupURI>x-cisco-serviceuri-pickup</callPickupURI>
        <callPickupListURI>x-cisco-serviceuri-opickup</callPickupListURI>
        <callPickupGroupURI>x-cisco-serviceuri-gpickup</callPickupGroupURI>
        <meetMeServiceURI>x-cisco-serviceuri-meetme</meetMeServiceURI>
        <abbreviatedDialURI>x-cisco-serviceuri-abbrdial</abbreviatedDialURI>
        <rfc2543Hold>false</rfc2543Hold>
        <callHoldRingback>2</callHoldRingback>
        <localCfwdEnable>true</localCfwdEnable>
        <semiAttendedTransfer>true</semiAttendedTransfer>
        <anonymousCallBlock>2</anonymousCallBlock>
        <callerIdBlocking>2</callerIdBlocking>
        <dndControl>0</dndControl>
        <remoteCcEnable>true</remoteCcEnable>
     </sipCallFeatures>
 
     <sipStack>
        <sipInviteRetx>6</sipInviteRetx>
        <sipRetx>10</sipRetx>
        <timerInviteExpires>180</timerInviteExpires>
        <timerRegisterExpires>3600</timerRegisterExpires>
        <timerRegisterDelta>5</timerRegisterDelta>
        <timerKeepAliveExpires>120</timerKeepAliveExpires>
        <timerSubscribeExpires>120</timerSubscribeExpires>
        <timerSubscribeDelta>5</timerSubscribeDelta>
        <timerT1>500</timerT1>
        <timerT2>4000</timerT2>
        <maxRedirects>70</maxRedirects>
        <remotePartyID>false</remotePartyID>
        <userInfo>None</userInfo>
     </sipStack>
 
     <autoAnswerTimer>1</autoAnswerTimer>
     <autoAnswerAltBehavior>false</autoAnswerAltBehavior>
     <autoAnswerOverride>true</autoAnswerOverride>
     <transferOnhookEnabled>false</transferOnhookEnabled>
     <enableVad>false</enableVad>
     <preferredCodec>none</preferredCodec>
     <dtmfAvtPayload>101</dtmfAvtPayload>
     <dtmfDbLevel>3</dtmfDbLevel>
     <dtmfOutofBand>avt</dtmfOutofBand>
     <alwaysUsePrimeLine>false</alwaysUsePrimeLine>
     <alwaysUsePrimeLineVoiceMail>false</alwaysUsePrimeLineVoiceMail>
     <kpml>3</kpml>
 
     <natEnabled>true</natEnabled>
     <natAddress>TRIXREMOTEIP</natAddress>
 
     <stutterMsgWaiting>0</stutterMsgWaiting>
 
     <callStats>false</callStats>
     <silentPeriodBetweenCallWaitingBursts>10</silentPeriodBetweenCallWaitingBursts>
     <disableLocalSpeedDialConfig>false</disableLocalSpeedDialConfig>
 
     <startMediaPort>16384</startMediaPort>
     <stopMediaPort>32766</stopMediaPort>
 
         <voipControlPort>5060</voipControlPort>
     <dscpForAudio>184</dscpForAudio>
     <ringSettingBusyStationPolicy>0</ringSettingBusyStationPolicy>
     <dialTemplate>dialplan.xml</dialTemplate>
 
         <phoneLabel>201</phoneLabel>
     <sipLines>
        <line button="1">
           <featureID>9</featureID>
           <featureLabel>201</featureLabel>
                   <name>201</name>
                   <displayName>201</displayName>
                   <contact>201</contact>
 
           <proxy>TRIXREMOTEIP</proxy>
           <port>5060</port>
           <autoAnswer>
              <autoAnswerEnabled>2</autoAnswerEnabled>
           </autoAnswer>
           <callWaiting>3</callWaiting>
 
           <authName>201</authName>
           <authPassword>PASSWORD</authPassword>
 
           <sharedLine>false</sharedLine>
           <messageWaitingLampPolicy>1</messageWaitingLampPolicy>
           <messagesNumber>*97</messagesNumber>
           <ringSettingIdle>4</ringSettingIdle>
           <ringSettingActive>5</ringSettingActive>
 
           <forwardCallInfoDisplay>
              <callerName>true</callerName>
              <callerNumber>false</callerNumber>
              <redirectedNumber>false</redirectedNumber>
              <dialedNumber>true</dialedNumber>
           </forwardCallInfoDisplay>
        </line>
     </sipLines>
  </sipProfile>
</device>
 

Again I'm able to use soft phones without an issue, so I'm not sure if it's still possibly something at the remote end on Trixbox or in the config. I have the SIP Ports and Voice Ports open on the remote end.

Also here's my sip_nat.cnf

externhost = EXTERNIP
localnet = 10.0.1.0/255.255.255.0
 

I've attached a dump from terminal showing the sip debug info, [officeip] is where the trixbox is and [remoteip] is where the phone is.
--
Edrick Smith
Independent Film & Broadcast Producer
»edricksmith.com

cramer
Premium
join:2007-04-10
Raleigh, NC
kudos:8

You're trying to setup a remote SIP phone through NAT? Nothing good will come of this.

(I have the good sense to use VPN tunnels.)



Edrick
I aspire to tell the story of a lifetime
Premium
join:2004-09-11
Woburn, MA

Ideally I'd setup a VPN and that'll happen eventually as I need one between home and the office. But for now I'm trying to get this guy working, I know SIP works (Software Phone and I have a dumb phone 7912 that works), but the dang 7970 is being a pain.


cramer
Premium
join:2007-04-10
Raleigh, NC
kudos:8

Is the 7912 running SIP or SCCP?

It sounds like the issue is the two NATs... 7970 internal to internet, and internet to internal call manager. I've seen this before and quickly removed all NAT from the equation -- which includes telling the phones/pbx to stop trying to be "smart": don't fuck with any addresses. Depending on your setup, you may need to do that as well. Remote SIP phone behind a residential NAT router connecting to an internet visible pbx, if the routers doing NAT are SIP aware, then neither the phone nor pbx need to touch anything -- alternately, tell the natters to stop screwing with SIP. (not always possible)



Edrick
I aspire to tell the story of a lifetime
Premium
join:2004-09-11
Woburn, MA

The 7912 is running the SIP Firmware. I should mention this is a Asterisk Trixbox Setup.



Edrick
I aspire to tell the story of a lifetime
Premium
join:2004-09-11
Woburn, MA

Check Check


unixwolf

join:2007-05-04
Flower Mound, TX
reply to Edrick

You will never get this to work. NAT is broken on these phones...



Edrick
I aspire to tell the story of a lifetime
Premium
join:2004-09-11
Woburn, MA

said by unixwolf:

You will never get this to work. NAT is broken on these phones...

Guess I best throw it into the technology grinder damn useless phone.

But in reality I'll probably just buy a VPN and create a site to site VPN.
--
Edrick Smith
Independent Film & Broadcast Producer
»edricksmith.com

st1nga

join:2012-11-18
united kingd

I have 7940 that works fine behind NAT. Have not tried my 7970.
NAT works fine for me and others.


unixwolf

join:2007-05-04
Flower Mound, TX

said by st1nga:

I have 7940 that works fine behind NAT. Have not tried my 7970.
NAT works fine for me and others.

This is a dumb post. In my post I said that NAT is broken for "these phones" implying 797x series..

All others seem to be unaffected by this bug.