2 site SCN not working - Receive Too many RIPs received

[g18c]

Hi guys, i have a two site SCN over a Draytek site to site IPSEC tunnel.

On the head office (192.168.42.2), i am getting PRN: VPNNetworkedPBX::Receive Too many RIPs received (13) sent from 192.168.10.2

On the remote office, i dont see those messages only:

15:04:53 3615117mS H323Evt: IsRemoteBehindNat for line 20, remote 192.168.42.2 socket remote 192.168.42.2
15:04:53 3615117mS H323Evt: V9 on the other side of line 20 tcp f4c38bf4 shared_tcp f4c38bf4 tcp f4c38bf4 shared_msg_sent 1 new_caps ff3 ver_major 9 remote_behind_nat 0
15:04:53 3615117mS H323Evt: H323 stack for line 20 is connected
15:04:53 3615117mS H323Evt: H323Pipe::ConnectIndication cap H323Pipe(1)
15:04:53 3615117mS H323Evt: H323Pipe::ConnectIndication cap CmMsg(2)
15:04:53 3615118mS H323Evt: H323Pipe::ConnectIndication cap SipVideo(10)
15:04:53 3615118mS H323Evt: H323Pipe::ConnectIndication cap SharedLicence(20)
15:04:53 3615118mS H323Evt: H323Pipe::ConnectIndication cap ConfServer(40)
15:04:53 3615118mS H323Evt: H323Pipe::ConnectIndication cap Presentation(80)
15:04:53 3615118mS H323Evt: H323Pipe::ConnectIndication cap CameraControl(100)
15:04:53 3615118mS H323Evt: H323Pipe::ConnectIndication cap CMMsgRelay(200)
15:04:53 3615118mS H323Evt: H323Pipe::ConnectIndication cap Rfc2833(400)
15:04:53 3615118mS H323Evt: H323Pipe::ConnectIndication cap ResponseToReInvite(800)
15:04:53 3615118mS H323Evt: Shared TCP became operational for line 20
15:04:53 3615138mS H323Evt: ProcessRemoteBehindNAT for line 20, it is not behind a NAT
15:04:53 3615138mS H323Evt: CMH323Trunk::BehindNatIndic: Line 20: received BehindNatIndic 0, IsWebSocketServer 0 IsWebSocketClient 0.
15:04:53 3615138mS H323Evt: ProcessRemoteBehindNAT for line 20, it is not behind a NAT
15:04:53 3615138mS H323Evt: CMH323Trunk::BehindNatIndic: Line 20: received BehindNatIndic 0, IsWebSocketServer 0 IsWebSocketClient 0.

Just about to setup wireshark on a port mirror, found an older post with ports:

833 Network Relay UDP Network relay.

49152-53247 RTP/RTCP UDP Dynamically allocated ports used during VoIP calls for RTP and RTCP traffic. The port range can be adjusted through the System | LAN1 | VoIP tab

50795 IPO Voice Networking UDP Small Community Network signalling (AVRIP) and BLF updates. Each system does a broadcast every 30 seconds. BLF updates are sent required up a maximum of every 0.5 seconds.

Are these still valid for R9.1? Is there a headbeat on port 50795 that i can see in the monitor? I am not seeing anything in the 192.168.10.2 remote site monitor logs regarding SCN (other than when it first comes up and does a NAT test).

I have rebooted the IP Offices, both on latest 9.1 firmware.

Next i will reboot the firewalls (although ping is definitely working, under system status, ping works both ways, and no blocking rules on draytek).

Anything else to try? Remove and readd the h323 SCN trunks? Ensure they are unique line numbers?

Thanks in advance.

 

[intrigrant]

What version are you talking about?
If R10 or higher set the SCN trunks to use HTTP as signalling carrier.

Works a lot better.

 

[g18c]

Dear all, happened to be a firewall issue - did a reboot and that fixed it. Then saw firewall was NATing traffic one way, which was weird as was working after reboot.

TL;DR disable nat and reboot firewall, all sorted!