xlite call drops after 30 seconds

[danramirez]

Hi,

3300 CX MCD 4.2, Fortigate Firewall connected to the internet.

I have forwarded port 5060 from the internet to the 3300 using fortigate firewall.

People when at home can register Xlite to the 3300 and can call extensions in the office. The problem is that after exactly 30 seconds the call drops.

Any Ideas Why?

Regards,

Daniel

 

[dryaquaman]

My guess is that it's something similar to what I've experienced with the Juniper firewalls. The firewall interprets the UDP stream as an attack and kills the session. 30 seconds sounds about right.

Dry Aquaman

http://www.university-music-on-hold.com

 

[danramirez]

Dryaquaman,

what you did? did you change the firewall?

 

[dryaquaman]

In our case there was a tic-box that disabled it.
I had to have our firewall tech take care of it so I don't remember the specific feature.

Dry Aquaman

http://www.university-music-on-hold.com

 

[IrwinMFletcher]

Sounds like a firewall issue, however it could be a SIP interop issue as well. If acknowledgments are not received for some messages, the calls can be dropped.

The first step I would take is to determine who dropped the call. With SIP this is easy. Just sniff at the 3300 and see who initiates the BYE. At the same time, check the streaming from the phone.

 

[mitelmania]

Had similar problem with calls from OCS to 3300 phones over SIP after upgrading to 4.0 SP3, the fix in our case was to enable "NAT Keepalive" in the Sip peer profile on the 3300. The duration in this case was exactly the same, 30 seconds then the call would drop. Give it a go.

 

[danramirez]

Mitelmania,

Our case is to do with SIP Extensions (X-Lite), not SIP Trunks.

I don't find NAT Keepalive option in the options for "SIP Device Capabilities"

???

Regards,

Daniel

 

[boycey9]

Not sure it is your problem but the firewall setting mentioned above is the SIP ALG (Application Layer Gateway) there is usually a tick box for SIP which would need to be deselected.
I have mainly found this to be a problem for UCA clients on remote sites where the presence doesnt work.

 

[dryaquaman]

boycey9,
Now that you mentioned the ALG, that's exactly what we did to fix it.
This also created issues with our MBG also. Both fixed with a simple removal of the tick.

Dry Aquaman

http://www.university-music-on-hold.com

 

[danramirez]

Guys, I disabled both SIP HELPER and SIP ALG and it's working now. Those have to be disabled through CLI commands on the Fortigate Firewall.

Thank you guys,

Daniel