Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 370 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SIP: How to cross two ASGs

mdallagi
Hi all,

I have this configuration:

SIP client ---(LAN)---> ASG_A ---(DMZ)--->ASG_B--->(Internet)---Remote SIP proxy

By enabling the SIP proxy on both ASGs I'm able to establish the SIP session but the RTP traffic is not routed.
Pratically, from SIP client, I can dial remote SIP client (the phone rings) but then I can't hear voice traffic.

Here the ASG_A config:

Transparent Mode: off
Outgoing Interface: External eth
Route other calls via smarthost: Internal ASG_B IP addess

Then the ASG_B config:

Transparent Mode: off
Outgoing Interface: External eth
Route other calls via: DNS SRV/Host lookup

By analyzing the packet filter rules, I found that the RTP rule (udp spts:1:65535 dpts:16384:32766 ACCEPT) doesn't detect any traffic on the ASG_B while ASG_A shows few bytes on INPUT and OUTPUT chains.

any idea?


This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to RFCat_vk_01
    Hi RFCat_vk

    the SIP iptables rules are the same on both the ASGs...although, it seems that the ASG_A doesn't route RTP traffic to ASG_B while it did for SIP. In fact I can make a call but I can't hear the voice...

    Perhaps I have forgotten some configuration....I don't know
Children
No Data