Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Cloud based SIP: NAT/PAT changing control ports, consistent NAT setting?

This thread has been viewed 0 times

  • 1.  Cloud based SIP: NAT/PAT changing control ports, consistent NAT setting?

    Posted Dec 01, 2015 07:39 PM

    Hello,

    Aruba controller running AOS 6.4.4.0 as the head end router, NAT is set up on the external interface on the Aruba controller.

    I have a customer attempting to set up a cloud based SIP VoIP system (crexendo), and the vendor is asking for a consistent NAT setting that they have seen before in sonicwall firewall systems. What is happening is the phone control traffic is getting port address translated, and the calls are getting mismatched between the phones, or not ringing in at all. Below, the 5060 to 9000 traffic is good but when the port address translation takes place farther down the port changes to 1004X.

    When looking at call traces/pcap the sip response is "408 request timed out" which means the phone is unrepsonsive and traffic is blocked or the return port has been changed.

     

    Any help?

     

    (Aruba 3200) #show datapath session table 184.178.213.102


    Datapath Session Table Entries
    ------------------------------

    Flags: F - fast age, S - src NAT, N - dest NAT
    D - deny, R - redirect, Y - no syn
    H - high prio, P - set prio, T - set ToS
    C - client, M - mirror, V - VOIP
    Q - Real-Time Quality analysis
    I - Deep inspect, U - Locally destined
    E - Media Deep Inspect, G - media signal
    r - Route Nexthop


    Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Packets Bytes Flags
    --------------- --------------- ---- ----- ----- -------- ---- --- --- ----------- ---- --------- --------- ---------------
    192.168.25.208 184.178.213.102 17 5060 9000 0/0 6 62 1 1/1 25 0 0 FSHPTCG
    192.168.25.209 184.178.213.102 17 5060 9000 0/0 6 62 0 1/1 2d 1 32 FSHPTCG
    192.168.25.206 184.178.213.102 17 5060 9000 0/0 6 62 1 1/1 24 0 0 FSHPTCG
    192.168.25.207 184.178.213.102 17 5060 9000 0/0 6 62 0 1/1 1a 1 32 FSHPTCG
    192.168.25.204 184.178.213.102 17 5060 9000 0/0 6 62 0 1/1 c 1 32 FSHPTCG


    184.178.213.102 208.117.126.10 17 9000 5060 0/0 6 62 0 1/1 1a 0 0 FNHPT
    184.178.213.102 208.117.126.10 17 9000 10045 0/0 6 62 1 1/1 24 0 0 FNYHPT
    184.178.213.102 208.117.126.10 17 9000 10044 0/0 6 62 1 1/1 25 0 0 FNYHPT
    184.178.213.102 208.117.126.10 17 9000 10046 0/0 6 62 1 1/1 c 0 0 FNYHPT
    184.178.213.102 208.117.126.10 17 9000 10043 0/0 6 62 1 1/1 2d 0 0 FNYHPT


    184.178.213.102 208.117.126.10 17 5060 10015 0/0 0 0 0 1/3 f 0 0 FDYC

    (AS-UT-3200) #