Public IP in SIP trunk header

[rwgs811]

Does anyone know how I can force the IP office to display a public IP in the SIP trunk header?

The SIP provider is rejecting outgoing calls because it shows the internal IP address only.

The system is on R8 and I have stun configured and working and the trunk is set to use the stun settings, but it still seems to be sending the internal rather than external IP in outgoing calls.

 

[Pepp77]

Network Topology is used for this.

| ACSS SME |

 

[rwgs811]

I've done this already, but to no avail. I have set it to use the interface which connects the SIP trunks to the router (but which is an internal address still). Is this the issue? Is the only way to get the system's LAN port on a Public IP?

 

[Pepp77]

There are two main ways to get the public IP in the SIP headers

1. Network Topology - This is the method I use 99% of the time.
2. SIP transformations/SIP ALG on a firewall. If you do not use Network Topology, then having this turned on on most firewalls will amend the headers in the SIP packets to amend the private IP to the Public IP.

Issues can occur if you use the first and then also have the second on.

| ACSS SME |

 

[TheSmash]

On the SIP trunk make sure you set it to use Network Topology LAN1 (or LAN2 where appropriate). If you don't set this it won't re-write the SIP header. What is the IP on the LAN>VOIP tab when you run STUN?



ACSS (SME)

 

[Manie3]

I think you're close to getting a star @TheSmash

ACSS

Just another day in the life of ME

 

[rwgs811]

I have this already in place, but it doesn't work.

The Network Topology is set to LAN1 (which is an internal IP address). The STUN server has the public IP set in there and is set to Full Cone NAT.

I don't want to enable SIP ALG.

 

[Pepp77]

Attached is how I setup SIP trunks (this is assuming the SIP trunk is IP authenticated).

| ACSS SME |

 

[TheSmash]

What is the Public IP Address in LAN1>Network Topology? If this is not set correctly then this is your problem. You either set it manually or use STUN.

My bet is that whatever is in you SIP header matches this.

ACSS (SME)

 

[critchey]

As TheSmash stated make sure the public IP in the network topology is set to the public IP you want sent to the SIP provider. I would actually turn off STUN, set the firewall type to static port block, and set the public IP manually. Make sure the port listed here is the signaling port for the provider (5060 is default).

The truth is just an excuse for lack of imagination.

 

[rwgs811]

ok, it seems like it was working, but the SIP provider was still rejecting the call, even though it is now showing in the header.

i will have to go back to them again...