Twinning Drops 3

[newatek]

Hello, we have our IPO behind a firewall using SIP trunks and incoming/outgoing calls work fine. When we setup mobile twinning the calls drop. Our engineers have been told the only way to correct this is to eliminate the firewall and put the IPO directly on the Internet. When we do this the twinning works perfectly. The logs show the calls drop when behind the firewall because the when the incoming call is forwarded back out for twinning the provider drops the connection because it has the wrong packet information. Its the provider seeing the private IP of the avaya interface and dropping. So, what are we missing to get twinning working behind the firewall?

 

[nnaarrnn]

what's your routing look like on the IP Office?

 

[smokinjoe2938]

well tell your engineers that they are a bunch of morons and you will be hacked if you continue to do this, put it back behind the firewall, I suspect a tweaking of the sip programming will resolve this twinning issue, not too much sip experience so someone else will assist you there but in the mean while put it back behind the firewall or you will be sorry.

 

[intrigrant]

Does unconditional forward work?

 

[newatek]

I will send it over shortly. I have tasked the engineers with fixing today once and for all so our firewall is down right now as they test, so email is not flowing.

 

[smokinjoe2938]

Good luck

 

[newatek]

Were all set. Thanks to all. All we needed to do was turn on the firewall on the IPO and twinning is working fine. Counter intuitive but it works!

 

[amriddle01]

First time I've heard of that fixing anything, thanks for letting us know though. Star for you sir

 

[Gunnaro]

(I assume you have both the proper firewall and the internal firewall active now.)

It would be really interesting to see a Monitor trace of what the internal firewall does to fix this.
Needless to say, I'm just as surprised as mr Riddle. Have star from me as well.

Kind regards

Gunnar
______________________________________
Mille viae ducunt homines per saecula Romam

 

[newatek]

Correct we have the IPO behind firewall and IPO firewall set to blocking

 

[derfloh]

Seems that IPO this way is able to recognize that it is not possible to directly connect source an destination and handles the call itself.

 

[Gunnaro]

That's an interesting theory. May very well be the case here.

Kind regards

Gunnar
______________________________________
Mille viae ducunt homines per saecula Romam

 

[derfloh]

I need some Screenshots how the firewall will be closed ;-) We have a similar problem with on off our customers too.

 

[Ekster]

This is a classic RTP Keepalives problem, the SIP works fine but you get this when you use mobile twinning to SIP, I had the same problem at one of my customers. It is set in the VOIP tab of the LAN interface you use for the SIP trunk.

Set SCOPE to RTP
Set PERIODIC TIMEOUT to (try different settings I started at 10 seconds and worked my way down)
Set INITIAL KEEPALIVES to ENABLE



+++ Divide By Cucumber Error. Please Reinstall Universe And Reboot +++

 

[Westi]

I had in the past that the firewall breaks SIP completely (upgrade from 8.0 to 8.1 did that on my old system) and I had to turn it off but this one is new.
maybe they fixed it finally and make it work now.......nah must be a bug, be careful when you upgrade to the next release it might break it again

Joe W.
je sui charlie

FHandw, ACSS (SME), ACIS (SME)


"This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[IPGuru]

Correct we have the IPO behind firewall and IPO firewall set to blocking

That is not setting the firewall on the IPO, it is telling the IPO which type of external firewall it is connected to.




A Maintenance contract is essential, not a Luxury.
Do things on the cheap & it will cost you dear

 

[Gunnaro]

So it's the Topology> Firewall/NAT type we're talking about here?

Then there wasn't any miracle after all.

*Cancel lunch with Pope*

Kind regards

Gunnar
______________________________________
Mille viae ducunt homines per saecula Romam

 

[holdmusic34]

You'd have him on speed dial across all your devices by now, wouldn't you?

"There is one hope, and, as usual, it's Norwegian!"
Professor Farnsworth, Futurama