We just upgraded to 7.501 on an ASG320. prior to that we were on 7.402. We put in a voip system with externally hosted PBX about 3 weeks ago. We had the SIP Security enabled and it seemed to work, more or less. However, restarting the firewall sometimes caused some phones to just refuse to properly register despite repeated reboots, etc. Sometimes clearing the DHCP lease and rebooting would get it back on the network. Also note that the ASG does not serve DHCP - we let our Windows 2003 server do that.
We have 2 lines in - a Cable DSL and an Ethernet over Fibre line.
I have set up multipath routing and an interface route to send all traffic to our SIP provider over the EOF line for better quality. Recent complaints about call quality caused me to question whether or not it was actually routing traffic destined for the SIP server over the correct interface/network.
Today we upgraded to 7.501 and have had nothing but problems with VOIP. The SIP security just seemed to stop working. First, I saw nothing but packet filter violations in the firewall. So I put in PF rules for udp and TCP and opened it up to our SIP provider.
Some phones started to work, but some exhibit this weird symptom where they can seem to connect -they can call outbound and receive inbound calls, but then when you pick up neither party can hear the other.
No amount of restarting the phones can seem to fix this. If I plug the phone in outside the ASG network, it works fine. This has all the hallmarks of a routing issue.
Our hosted PBX VOIP provider said that a look at the log files confirmed my suspicion - despite the multipath interface rule, SOME SIP traffic was going over the DSL interface to their servers while other traffic was going over the EOF interface.
I tried putting in a static route over the EOF interface to our SIP provider and then ALL VOIP phones stopped working - they couldn't even register with the SIP provider, so I pulled that.
I have disabled the SIP security in the ASG and currently am running with PF rules that allow all protocols between us and the VOIP provider, plus multipath rules to try and force web and low-priority traffic over our cheap DSL interface, and the important stuff (VOIP, for example) over the EOF interface. I disabled any QOS settings as well. I tried a policy route to no effect so I have also disabled that.
I've heard talk of people using DNAT rules in the past (pre 7.402) - we don't have any in place for this - if we aren't using SIP security, should we?
Half our phones work properly, half don't.
I logged a call with Astaro support HOURS ago, and haven't heard back (I'm a platinum support customer), and I'm at my wit's end. The execs whose phones aren't working are chomping on my ass.
Anyone have any suggestions on what I could do to get our phones ALL working again?
-Natalie
This thread was automatically locked due to age.
