[OpenSIPS-Users] Call from non-NATed endpoint to NATed endpoint failed

Leon Li Leon.Li at aarnet.edu.au
Fri Aug 28 07:28:21 CEST 2009 

Hi,

 

I have the following setup:

 

UA1(1000 at 192.168.1.x) --> NAT box (@public IP) --> OpenSIPs (@public IP)
<-- UA2(1001 at public IP)

 

Both UA1 and UA2 are registering fine. Call from UA1 (private IP) to UA2
(public IP) succeeded. However, call from UA2 to UA1 failed with error
513.

 

Ngrep shows the below, I assume after proxy authentication required by
OpenSIPs, UA2 should return an INVITE with Proxy-Authorization header?
In this case, an ACK (in bold) was returned by UA2.   Any idea?

 

T UA2_IP:64315 -> OPENSIPS_IP:5060 [A]

  INVITE sip:1000 at OPENSIPS_IP SIP/2.0..To:
<sip:1000 at OPENSIPS_IP>..Call-ID:
DL6fc7c3a8b9-1079373876 at DOMAIN.au..From:
<sip:1001 at OPENSIPS_IP>;tag=DLb458f1345e;epid=02AFF3B8..CSeq: 1
INVITE..Max-Forwards

  : 70..Via: SIP/2.0/TCP
UA2_IP:5060;branch=z9hG4bK-167524e695-DL..Contact: "1001"
<sip:1001 at UA2_IP:5060>..Allow:
INVITE,CANCEL,ACK,OPTIONS,INFO,SUBSCRIBE,NOTIFY,BYE,MESSAGE,UPDATE,REFER
..Supported: replaces,norefersub

  ..User-Agent: Dylogic Mirial 7.0.3..Content-Type:
application/sdp..Content-Length: 1327....v=0..o=1001 154970389 0 IN IP4
UA2_IP..s=-..i=Dylogic Mirial 7.0.3..c=IN IP4 UA2_IP..b=AS:384..t=0
0..m=audio 51156 RTP/AVP 9

  6 97 98 0 8 4 101..a=rtpmap:96 G7221/32000..a=fmtp:96
bitrate=48000..a=rtpmap:97 G7221/32000..a=fmtp:97
bitrate=32000..a=rtpmap:98 G7221/32000..a=fmtp:98
bitrate=24000..a=rtpmap:0 PCMU/8000..a=rtpmap:8 PCMA/8000..a=rtpmap:4
G723/800

  0..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-16..a=x-mpdp:UA2_IP:51156..m=video 51158 RTP/AVP 99 100 34
31..a=rtpmap:99 H264/90000..a=fmtp:99 profile-level-id=420028;
max-mbps=248400; max-fs=8280; max-dpb=12288..a=rtpm

  ap:100 H263-1998/90000..a=fmtp:100 CIF4=1; CIF=1; QCIF=1; SQCIF=1;
D=1; F=1; I=1; J=1; L=1; S=1; T=1

##

T UA2_IP:64315 -> OPENSIPS_IP:5060 [AP]

  ..a=rtpmap:34 H263/90000..a=fmtp:34 CIF4=1; CIF=1; QCIF=1;
SQCIF=1..a=rtpmap:31 H261/90000..a=fmtp:31 CIF=1;
QCIF=1..a=x-mpdp:UA2_IP:51158..m=video 51160 RTP/AVP 102
103..a=content:slides..a=rtpmap:102 H264/90000..a=fmtp:102

   profile-level-id=42001f; max-mbps=115200; max-fs=3840;
max-dpb=7680..a=rtpmap:103 H263-1998/90000..a=fmtp:103
CUSTOM=1280,768,1; CUSTOM=1024,768,1; CUSTOM=800,600,1;
CUSTOM=768,576,1; CUSTOM=720,480,1; CUSTOM=640,480,1; CIF4=1; CIF

  =1; D=1; F=1; I=1; J=1; L=1; S=1;
T=1..a=x-mpdp:UA2_IP:51160..m=application 51162 RTP/AVP
104..a=rtpmap:104 H224/4800..a=x-mpdp:UA2_IP:51162..

##

T OPENSIPS_IP:5060 -> UA2_IP:64315 [AP]

  SIP/2.0 407 Proxy Authentication Required..To:
<sip:1000 at OPENSIPS_IP>;tag=c97b4d1cb1f3d0da549e06a8d482ef63.8850..Call-I
D: DL6fc7c3a8b9-1079373876 at DOMAIN.au..From:
<sip:1001 at OPENSIPS_IP>;tag=DLb458f1345e

  ;epid=02AFF3B8..CSeq: 1 INVITE..Via: SIP/2.0/TCP
UA2_IP:5060;branch=z9hG4bK-167524e695-DL..Proxy-Authenticate: Digest
realm="OPENSIPS_IP",
nonce="4a9766e10000000c972448b97ed8deb3eceb529df85bf574"..Server:
OpenSIPS (1.5.2

  -notls (i386/linux))..Content-Length: 0....

#

T UA2_IP:64315 -> OPENSIPS_IP:5060 [AP]

  ACK sip:1000 at OPENSIPS_IP SIP/2.0..CSeq: 1 ACK..Call-ID:
DL6fc7c3a8b9-1079373876 at DOMAIN.au..From:
<sip:1001 at OPENSIPS_IP>;tag=DLb458f1345e;epid=02AFF3B8..To:
<sip:1000 at OPENSIPS_IP>;tag=c97b4d1cb1f3d0d

  a549e06a8d482ef63.8850..Via: SIP/2.0/TCP
UA2_IP:5060;branch=z9hG4bK-167524e695-DL..Max-Forwards:
70..Content-Length: 0....

#

T UA2_IP:64315 -> OPENSIPS_IP:5060 [A]

  ACK sip:1000 at OPENSIPS_IP SIP/2.0..CSeq: 1 ACK..Call-ID:
DL6fc7c3a8b9-1079373876 at DOMAIN.au..From:
<sip:1001 at OPENSIPS_IP>;tag=DLb458f1345e;epid=02AFF3B8..To:
<sip:1000 at OPENSIPS_IP>;tag=c97b4d1cb1f3d0d

  a549e06a8d482ef63.8850..Via: SIP/2.0/TCP
UA2_IP:5060;branch=z9hG4bK-167524e695-DL..Max-Forwards:
70..Content-Length: 0....INVITE sip:1000 at OPENSIPS_IP SIP/2.0..To:
<sip:1000 at OPENSIPS_IP>..Call-ID: DL6fc7c3a8b9-1079373

  876 at DOMAIN.au..From:
<sip:1001 at OPENSIPS_IP>;tag=DLb458f1345e;epid=02AFF3B8..CSeq: 2
INVITE..Max-Forwards: 70..Via: SIP/2.0/TCP
UA2_IP:5060;branch=z9hG4bK-be84255313-DL..Contact: "1001" <sip:1001 at 202

  .158.213.89:5060>..Allow:
INVITE,CANCEL,ACK,OPTIONS,INFO,SUBSCRIBE,NOTIFY,BYE,MESSAGE,UPDATE,REFER
..Supported: replaces,norefersub..User-Agent: Dylogic Mirial
7.0.3..Content-Type: application/sdp..Content-Length:
1327..Proxy-Authori

  zation: Digest response="6faed07ce4f4974dd4db8220ffb285c7",
username="1001", realm="OPENSIPS_IP",
nonce="4a9766e10000000c972448b97ed8deb3eceb529df85bf574", algorithm=MD5,
uri="sip:1000 at OPENSIPS_IP"....v=0..o=1001 154970389 0

   IN IP4 UA2_IP..s=-..i=Dylogic Mirial 7.0.3..c=IN IP4
UA2_IP..b=AS:384..t=0 0..m=aud

##

T UA2_IP:64315 -> OPENSIPS_IP:5060 [AP]

  io 51156 RTP/AVP 96 97 98 0 8 4 101..a=rtpmap:96
G7221/32000..a=fmtp:96 bitrate=48000..a=rtpmap:97 G7221/32000..a=fmtp:97
bitrate=32000..a=rtpmap:98 G7221/32000..a=fmtp:98
bitrate=24000..a=rtpmap:0 PCMU/8000..a=rtpmap:8 PCMA/8000..a

  =rtpmap:4 G723/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-16..a=x-mpdp:UA2_IP:51156..m=video 51158 RTP/AVP 99 100 34
31..a=rtpmap:99 H264/90000..a=fmtp:99 profile-level-id=420028;
max-mbps=248400; max-fs=8280; max

  -dpb=12288..a=rtpmap:100 H263-1998/90000..a=fmtp:100 CIF4=1; CIF=1;
QCIF=1; SQCIF=1; D=1; F=1; I=1; J=1; L=1; S=1; T=1..a=rtpmap:34
H263/90000..a=fmtp:34 CIF4=1; CIF=1; QCIF=1; SQCIF=1..a=rtpmap:31
H261/90000..a=fmtp:31 CIF=1; QCIF=

  1..a=x-mpdp:UA2_IP:51158..m=video 51160 RTP/AVP 102
103..a=content:slides..a=rtpmap:102 H264/90000..a=fmtp:102
profile-level-id=42001f; max-mbps=115200; max-fs=3840;
max-dpb=7680..a=rtpmap:103 H263-1998/90000..a=fmtp:103 CUS

  TOM=1280,768,1; CUSTOM=1024,768,1; CUSTOM=800,600,1; CUSTOM=768,576,1;
CUSTOM=720,480,1; CUSTOM=640,480,1; CIF4=1; CIF=1; D=1; F=1; I=1; J=1;
L=1; S=1; T=1..a=x-mpdp:UA2_IP:51160..m=application 51162 RTP/AVP
104..a=rtpmap:10

  4 H224/4800..a=x-mpdp:UA2_IP:51162..

#

T OPENSIPS_IP:5060 -> UA2_IP:64315 [AP]

  SIP/2.0 513 Message too big..To:
<sip:1000 at OPENSIPS_IP>;tag=c97b4d1cb1f3d0da549e06a8d482ef63.e813..Call-I
D: DL6fc7c3a8b9-1079373876 at DOMAIN.au..From:
<sip:1001 at OPENSIPS_IP>;tag=DLb458f1345e;epid=02AFF3B8

  ..CSeq: 2 INVITE..Via: SIP/2.0/TCP
UA2_IP:5060;branch=z9hG4bK-be84255313-DL..Server: OpenSIPS (1.5.2-notls
(i386/linux))..Content-Length: 0....

#

T UA2_IP:64315 -> OPENSIPS_IP:5060 [AP]

  ACK sip:1000 at OPENSIPS_IP SIP/2.0..CSeq: 2 ACK..Call-ID:
DL6fc7c3a8b9-1079373876 at DOMAIN.au..From:
<sip:1001 at OPENSIPS_IP>;tag=DLb458f1345e;epid=02AFF3B8..To:
<sip:1000 at OPENSIPS_IP>;tag=c97b4d1cb1f3d0d

  a549e06a8d482ef63.e813..Via: SIP/2.0/TCP
UA2_IP:5060;branch=z9hG4bK-be84255313-DL..Max-Forwards:
70..Proxy-Authorization: Digest
response="6faed07ce4f4974dd4db8220ffb285c7", username="1001",
realm="OPENSIPS_IP", nonce="4

  a9766e10000000c972448b97ed8deb3eceb529df85bf574", algorithm=MD5,
uri="sip:1000 at OPENSIPS_IP"..Content-Length: 0....

##

T UA2_IP:64315 -> OPENSIPS_IP:5060 [AP]

  ACK sip:1000 at OPENSIPS_IP SIP/2.0..CSeq: 2 ACK..Call-ID:
DL6fc7c3a8b9-1079373876 at DOMAIN.au..From:
<sip:1001 at OPENSIPS_IP>;tag=DLb458f1345e;epid=02AFF3B8..To:
<sip:1000 at OPENSIPS_IP>;tag=c97b4d1cb1f3d0d

  a549e06a8d482ef63.e813..Via: SIP/2.0/TCP
UA2_IP:5060;branch=z9hG4bK-be84255313-DL..Max-Forwards:
70..Proxy-Authorization: Digest
response="6faed07ce4f4974dd4db8220ffb285c7", username="1001",
realm="OPENSIPS_IP", nonce="4

  a9766e10000000c972448b97ed8deb3eceb529df85bf574", algorithm=MD5,
uri="sip:1000 at OPENSIPS_IP"..Content-Length: 0....

##

 

Regards

Leon

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.opensips.org/pipermail/users/attachments/20090828/b975e4e8/attachment-0001.htm

More information about the Users mailing list