Voip nat helper really don't help in nat mode...

Products ePMP
1

I have seriously problem with voip under nat with firmware 2.3.x.

There's the possibility to downgrade from 2.3.1 to 2.3 ? or i can disable this function of voip nat helper?

2 
Jan  1 00:10:38 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.196.*.* LEN=838 TOS=0x10 PREC=0x20 TTL=63 ID=39068 PROTO=UDP SPT=1024 DPT=5060 LEN=818

i have discovered this message from syslog
3

Interesting, so it appears to be dropped by the netfilter firewall.  I'm assuming nothing in L2/L3 firewall config could explain it?  I wonder if it's related to PPPoE - would it work correctly with direct routing instead...

j

4

i don’t know without pppoe if it work because i have the clients connected with pppoe so i can’t try without. I think is correct from cambium to include the possibility for disable this function.

5

anyway now i have downgrade to 2.3 to solve the problem

6

Hi Giuseppe,

We're looking into this now and we'll keep you posted. 

Thanks,

Sriram

7

news? there’s the same problem in 2.3.4 !

8

Hello Giuseppe,

Release 2.4 will contain a fix for SIP registration. There is a beta version (2.4.0-RC11) currently available that you could give a try to ensure it will help with your issue.

Regards,

Luis

9

Jan 1 07:39:10 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.19*.13*.4* LEN=765 TOS=0x08 PREC=0x80 TTL=127 ID=32197 PROTO=UDP SPT=1030 DPT=5060 LEN=745
Jan 1 07:39:12 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.19*.13*.4* LEN=835 TOS=0x10 PREC=0x20 TTL=63 ID=54228 PROTO=UDP SPT=5060 DPT=5060 LEN=815
Jan 1 07:39:14 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.19*.13*.4* LEN=765 TOS=0x08 PREC=0x80 TTL=127 ID=32198 PROTO=UDP SPT=1030 DPT=5060 LEN=745
Jan 1 07:39:16 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.19*.13*.4* LEN=835 TOS=0x10 PREC=0x20 TTL=63 ID=54229 PROTO=UDP SPT=5060 DPT=5060 LEN=815
Jan 1 07:39:18 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.19*.13*.4* LEN=765 TOS=0x08 PREC=0x80 TTL=127 ID=32199 PROTO=UDP SPT=1030 DPT=5060 LEN=745
Jan 1 07:39:20 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.19*.13*.4* LEN=835 TOS=0x10 PREC=0x20 TTL=63 ID=54230 PROTO=UDP SPT=5060 DPT=5060 LEN=815
Jan 1 07:39:22 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.19*.13*.4* LEN=765 TOS=0x08 PREC=0x80 TTL=127 ID=32200 PROTO=UDP SPT=1030 DPT=5060 LEN=745
Jan 1 07:39:24 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.19*.13*.4* LEN=835 TOS=0x10 PREC=0x20 TTL=63 ID=54237 PROTO=UDP SPT=5060 DPT=5060 LEN=815
Jan 1 07:39:26 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.19*.13*.4* LEN=765 TOS=0x08 PREC=0x80 TTL=127 ID=32201 PROTO=UDP SPT=1030 DPT=5060 LEN=745
Jan 1 07:39:28 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.19*.13*.4* LEN=835 TOS=0x10 PREC=0x20 TTL=63 ID=54241 PROTO=UDP SPT=5060 DPT=5060 LEN=815
Jan 1 07:39:30 TD kernel: nf_ct_sip: dropping packetIN= OUT=pppoe-wan src=172.16.18.131 DST=217.19*.13*.4* LEN=765 TOS=0x08 PREC=0x80 TTL=127 ID=32202 PROTO=UDP SPT=1030 DPT=5060 LEN=745
Jan 1 08:37:15 TD kernel: nf_ct_sip: dropping packetIN= OUT=eth0 src=217.19*.13*.4* DST=192.168.88.23 LEN=937 TOS=0x00 PREC=0x00 TTL=61 ID=61967 PROTO=UDP SPT=5060 DPT=5060 LEN=917
Jan 1 08:37:15 TD kernel: nf_ct_sip: dropping packetIN= OUT=eth0 src=217.19*.13*.4* DST=192.168.88.23 LEN=937 TOS=0x00 PREC=0x00 TTL=61 ID=61975 PROTO=UDP SPT=5060 DPT=5060 LEN=917
Jan 1 08:37:15 TD kernel: nf_ct_sip: dropping packetIN= OUT=eth0 src=217.19*.13*.4* DST=192.168.88.23 LEN=937 TOS=0x00 PREC=0x00 TTL=61 ID=61987 PROTO=UDP SPT=5060 DPT=5060 LEN=917
Jan 1 08:37:15 TD kernel: nf_ct_sip: dropping packetIN= OUT=eth0 src=217.19*.13*.4* DST=192.168.88.23 LEN=937 TOS=0x00 PREC=0x00 TTL=61 ID=62008 PROTO=UDP SPT=5060 DPT=5060 LEN=917
Jan 1 08:37:16 TD kernel: nf_ct_sip: dropping packetIN= OUT=eth0 src=217.19*.13*.4* DST=192.168.88.23 LEN=937 TOS=0x00 PREC=0x00 TTL=61 ID=62049 PROTO=UDP SPT=5060 DPT=5060 LEN=917
Jan 1 08:37:18 TD kernel: nf_ct_sip: dropping packetIN= OUT=eth0 src=217.19*.13*.4* DST=192.168.88.23 LEN=937 TOS=0x00 PREC=0x00 TTL=61 ID=62132 PROTO=UDP SPT=5060 DPT=5060 LEN=917
Jan 1 08:37:21 TD kernel: nf_ct_sip: dropping packetIN= OUT=eth0 src=217.19*.13*.4* DST=192.168.88.23 LEN=937 TOS=0x00 PREC=0x00 TTL=61 ID=62302 PROTO=UDP SPT=5060 DPT=5060 LEN=917
Jan 1 09:29:01 TD kernel: nf_ct_sip: dropping packetIN= OUT=eth0 src=217.19*.13*.4* DST=192.168.88.238 LEN=873 TOS=0x00 PREC=0x00 TTL=61 ID=18650 PROTO=UDP SPT=5060 DPT=5060 LEN=853

10

Hello Giuseppe,

Looks like you are still having issues. Please contact our support engineers for additional help, as this may require knowing more about your network configuration. Our support engineers can be contacted through phone, email or by opening a support case here: http://www.cambiumnetworks.com/support/contact-support

Best regards,

Luis

11

i have try to open a support ticket but no one reply to me.  I still have this problem with voip 

12

Hello Giuseppe,

Sent you a private message. Let me know if you can provide access to your SM.

Regards,

Luis