[Serusers] NAT ping and consumer router

Richard richard at o-matrix.org
Mon Aug 23 02:12:09 CEST 2004


Hi Dave,

Thanks for the information. I don't have a Netgear. Wonder if you can do me
a favor test it. The test plan is very simple,

Have a ser running with rtpproxy or mediaproxy enabled and set NAT ping
interval with a small number, 15, 10, or 5 seconds. If you don't have time
to setup one, please contact me offline, you can use my server.

Load xlite and ethereal on your pc which sits behind the NAT.

Use ethereal capture all packets coming from and to the ser server. The
capture filter string is "host <ser-ip-address>".

Start xlite and register with the server. You should be able to see ser
sending SIP packets (marked as malformed SIP in ethereal) periodically.

Shutdown xlite, you should still see ser NAT ping packets for a certain
amount of time until it stops. The time is the NAT binding timeout value. If
it never stops, congratulations... you've found a NAT device which allows
inbound UDP packets refreshing the NAT binding timer.

Thanks for your help.

Richard


-----Original Message-----
From: serusers-bounces at iptel.org [mailto:serusers-bounces at lists.iptel.org] On
Behalf Of Dave Bath
Sent: Sunday, August 22, 2004 12:29 PM
To: serusers at lists.iptel.org
Subject: RE: [Serusers] NAT ping and consumer router

Hey there,

At home I have Netgear ADSL router (1 x ADSL, 4 x eth) and have not had
any problems with NAT devices dropping off.  Mainly use Zyxel Wireless
2000 handsets.

Dave

-----Original Message-----
From: serusers-bounces at iptel.org [mailto:serusers-bounces at lists.iptel.org] On
Behalf Of Jesus Rodriguez
Sent: 22 August 2004 19:59
To: Richard
Cc: serusers at lists.iptel.org
Subject: Re: [Serusers] NAT ping and consumer router

On Sun, 22 Aug 2004, Richard wrote:

> Does anyone know and use a consumer router which works with NAT ping?
>
> I did some research recently and can't find any. Basically if a phone
is
> behind NAT, we need to keep the NAT binding in the router active even
if
> there is no activity from the phone. NAT ping from ser (either
rtpproxy or
> mediaproxy) tries to ping the phone with an empty SIP packet. However
this
> inbound UDP packet can't always keep the NAT binding active because
some NAT
> firewalls ONLY refresh the timer based on outbound packets. So the
result is
> that the binding expires after a certain time even if NAT ping is
enabled.
>
> For example, Dlink falls in this category. It appears the timeout is 3
> minutes and NAT ping won't make it active.
>
> If anyone has a good experience with any consumer router, can you
please let
> share with us?

Use an UA that supports it (Sipura or Cisco for example).

Saludos
JesusR.

-------------------------------
Jesus Rodriguez
VozTelecom Sistemas, S.L.
jesusr at voztele.com
http://www.voztele.com
Tel. 902360305
-------------------------------

_______________________________________________
Serusers mailing list
serusers at lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers




_______________________________________________
Serusers mailing list
serusers at lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers




More information about the sr-users mailing list