One way communication between two IP Phones through AR150 router

Publication Date:  2014-08-29 Views:  355 Downloads:  0
Issue Description
Our AR150 router as internet gateway and enable NAT function. There is one PBX server inside and SIP Proxy outside
Topology:
                                  eth0/0/4_Z.Z.Z.Z
                                           |
SIPproxy_X.X.X.X----------|Huawei|-----------------PBX_Y.Y.Y.Y
                                                           |
                                                   vlanif1_Y.Y.Y.1

When making a call from Outside to Inside, only outside user can hear and Inside user cannot hear anything.
The wan interface configuration:
interface Ethernet0/0/4
description WAN
ip address Z.Z.Z.Z 255.255.255.240
ipsec policy XXXX
nat server global current-interface inside Y.Y.Y.Y acl 3105
nat outbound 3104
Alarm Information
None
Handling Process
1.Check the configuration and there is no SIP NAT ALG configuration.Confirm with customer and let him enable it.
After enable SIP NAT ALG funtion, both sides cannot hear each other. Let customer capture packets to further analyze.
2.Afte get the pacekts, find the packets from inside PBX server with public address Z.Z.Z.Z with port 4984

After SIP parameter negoiation, IP Phones will communicate with each other using RTP protocol.
When there is no SIP NAT ALG, AR router will change the source IP and source port of RTP traffic and send to SIP Proxy.
The source Port is 10241 and destination port is 8482. The source port is not 4984.

However, when SIP Proxy replied the traffic, it did not know the its destination port is changed because it will reply packets with destination port negoiated in SIP Message which is 4984
 

When packets arrived on AR router, there is no nat session table for destination port 4984 and the packets will be dropped. That is why inside user cannot hear. But AR can send out the traffic to SIP proxy. there is no problem for ouside user.
3.Based the capture packets, we suggest customer change the configuration on inside PBX. Usually, PBX server should not set the contact IP in SIP Message as Public IP. Let them change it to private IP and enable SIP NAT ALG on AR router. AR router will change the private IP to public one and does not change the port for RTP stream.
4.After change the configuration, the problem is solved.
Root Cause
1.Network issue
2.Configuration issue
Suggestions
None

END