Dismiss Notice
We would like to remind you that we’re updating our login process for all 3CX forums whereby you will be able to login with the same credentials you use for the Partner or Customer Portal. Click here to read more.

3CXPhone vs Other soft-phones different reaction to NAT

Discussion in '3CX Phone System - General' started by hccj, May 19, 2014.

Thread Status:
Not open for further replies.
  1. hccj

    Joined:
    May 19, 2014
    Messages:
    21
    Likes Received:
    0
    Hi!

    I am setting up a 3CX system and am having multiple issues. I am using pfSense firewall 2.1.1, and the most recent 3CX V12.

    The main symptom is that calls made using SIP TCP get disconnected after exactly 32 seconds. From the logs, the culprit appears to be "ACK is not received", then 3CX PBX requests the call to be terminated.

    The pfSense firewall passes all the Firewall Checker tests 100%. Ports 5060-5061 tcp/udp,5090 tcp/udp, 9000-9049 udp have been forwarded as per the latest blog post from 3cx re: pfsense, and settings in outbound nat to create a static outbound port mapping have also been done.

    Wireshark has been used to confirm that traffic is indeed on a static map - coming and directed towards the ports listed above.

    The strange thing is this:

    When call (to *777 echo test) is made using 3CXPhone (iOS - latest version):
    - Via wifi connection + UDP = WORKS PERFECTLY - 0 problems
    - Via wifi connection + TCP = Works, but disconnects at exactly 32 seconds
    - Via 3G/LTE cellular connection + UDP = Does not connect at all - Connection attempt times out
    - Via 3G/LTE cellular connection + TCP = Works, but disconnects at exactly 32 seconds

    When call (to *777 echo test) is made using 3rd party soft-phone (Acrobits Groundwire on iOS):
    - Via wifi connection + UDP = WORKS PERFECTLY*
    - Via wifi connection + TCP = WORKS PERFECTLY*
    - Via 3G/LTE cellular connection + UDP = WORKS PERFECTLY*
    - Via 3G/LTE cellular connection + TCP = WORKS PERFECTLY*

    * The only catch here is that upon pressing "END CALL" on the soft-phone, 3CX does not disconnect the call - and the call remains connected even though it is finished. I suppose this is an issue with the soft-phone config?

    I have a feeling this issue is how 3CXPhone is using STUN, and the different way Groundwire soft-phone handles NAT traversal that is breaking or making the operability.

    I can provide additional information, and captures. However, from this superficial information, could anybody suggest what kind of information would be useful in diagnosing this?

    It would be nice if I could configure 3CXPhone similar to how the 3rd party apps work. At this point, I don't really care which method I use to connect; tcp, udp, 3rd party or otherwise - all my options are partially working!

    Jeff.
     
  2. hccj

    Joined:
    May 19, 2014
    Messages:
    21
    Likes Received:
    0
    Here is a wireshark capture of a call via TCP, and cuts at about 30-32sec

    No. Time Source Destination Protocol Length Info
    1 0.000000000 207.219.69.190 192.168.1.210 SIP 829 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 1, Ack: 1, Len: 763
    Session Initiation Protocol (REGISTER)

    No. Time Source Destination Protocol Length Info
    2 0.200032000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=1 Ack=764 Win=256 Len=0 TSval=7578552 TSecr=1096020993

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 1, Ack: 764, Len: 0

    No. Time Source Destination Protocol Length Info
    3 0.201066000 192.168.1.210 207.219.69.190 SIP 615 Status: 407 Proxy Authentication Required (0 bindings) |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 1, Ack: 764, Len: 549
    Session Initiation Protocol (407)

    No. Time Source Destination Protocol Length Info
    4 0.249060000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=764 Ack=550 Win=8157 Len=0 TSval=1096021254 TSecr=7578552

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 764, Ack: 550, Len: 0

    No. Time Source Destination Protocol Length Info
    5 0.259006000 207.219.69.190 192.168.1.210 SIP 1069 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 764, Ack: 550, Len: 1003
    Session Initiation Protocol (REGISTER)

    No. Time Source Destination Protocol Length Info
    6 0.455019000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=550 Ack=1767 Win=252 Len=0 TSval=7578578 TSecr=1096021255

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 550, Ack: 1767, Len: 0

    No. Time Source Destination Protocol Length Info
    7 0.461088000 192.168.1.210 207.219.69.190 SIP 637 Status: 200 OK (2 bindings) |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 550, Ack: 1767, Len: 571
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    8 0.534661000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=1767 Ack=1121 Win=8156 Len=0 TSval=1096021532 TSecr=7578578

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 1767, Ack: 1121, Len: 0

    No. Time Source Destination Protocol Length Info
    9 0.534697000 192.168.1.210 207.219.69.190 SIP 809 Request: NOTIFY sip:980@10.250.135.174:5077;transport=TCP;ob;inst="74EACC" |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 1121, Ack: 1767, Len: 743
    Session Initiation Protocol (NOTIFY)

    No. Time Source Destination Protocol Length Info
    10 0.546192000 207.219.69.190 192.168.1.210 SIP 975 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 1767, Ack: 1121, Len: 909
    Session Initiation Protocol (REGISTER)

    No. Time Source Destination Protocol Length Info
    11 0.595178000 207.219.69.190 192.168.1.210 SIP 818 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 2676, Ack: 1864, Len: 752
    Session Initiation Protocol (REGISTER)

    No. Time Source Destination Protocol Length Info
    12 0.595212000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=1864 Ack=3428 Win=256 Len=0 TSval=7578592 TSecr=1096021534

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 1864, Ack: 3428, Len: 0

    No. Time Source Destination Protocol Length Info
    13 0.647619000 207.219.69.190 192.168.1.210 SIP 447 Status: 200 OK |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 3428, Ack: 1864, Len: 381
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    14 0.649223000 192.168.1.210 207.219.69.190 SIP 615 Status: 407 Proxy Authentication Required (0 bindings) |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 1864, Ack: 3809, Len: 549
    Session Initiation Protocol (407)

    No. Time Source Destination Protocol Length Info
    15 0.714799000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=3809 Ack=2413 Win=8157 Len=0 TSval=1096021703 TSecr=7578597

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 3809, Ack: 2413, Len: 0

    No. Time Source Destination Protocol Length Info
    16 0.714813000 192.168.1.210 207.219.69.190 SIP 615 Status: 407 Proxy Authentication Required (0 bindings) |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 2413, Ack: 3809, Len: 549
    Session Initiation Protocol (407)

    No. Time Source Destination Protocol Length Info
    17 0.726136000 207.219.69.190 192.168.1.210 SIP 975 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 3809, Ack: 2413, Len: 909
    Session Initiation Protocol (REGISTER)

    No. Time Source Destination Protocol Length Info
    18 0.765405000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=4718 Ack=2962 Win=8157 Len=0 TSval=1096021750 TSecr=7578603

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 4718, Ack: 2962, Len: 0

    No. Time Source Destination Protocol Length Info
    19 0.925048000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=2962 Ack=4718 Win=251 Len=0 TSval=7578625 TSecr=1096021704

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 2962, Ack: 4718, Len: 0

    No. Time Source Destination Protocol Length Info
    20 0.927154000 192.168.1.210 207.219.69.190 SIP 543 Status: 200 OK (1 bindings) |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 2962, Ack: 4718, Len: 477
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    21 0.979960000 207.219.69.190 192.168.1.210 SIP 1058 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 4718, Ack: 2962, Len: 992
    Session Initiation Protocol (REGISTER)

    No. Time Source Destination Protocol Length Info
    22 0.980088000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=5710 Ack=3439 Win=8162 Len=0 TSval=1096021953 TSecr=7578625

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 5710, Ack: 3439, Len: 0

    No. Time Source Destination Protocol Length Info
    23 1.175099000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=3439 Ack=5710 Win=256 Len=0 TSval=7578650 TSecr=1096021950

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 3439, Ack: 5710, Len: 0

    No. Time Source Destination Protocol Length Info
    24 1.182135000 192.168.1.210 207.219.69.190 SIP 627 Status: 200 OK (2 bindings) |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 3439, Ack: 5710, Len: 561
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    25 1.236792000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=5710 Ack=4000 Win=8156 Len=0 TSval=1096022205 TSecr=7578650

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 5710, Ack: 4000, Len: 0

    No. Time Source Destination Protocol Length Info
    26 1.236814000 192.168.1.210 207.219.69.190 SIP 811 Request: NOTIFY sip:980@207.219.69.190:20460;transport=tcp;ob;inst="74EACC" |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 4000, Ack: 5710, Len: 745
    Session Initiation Protocol (NOTIFY)

    No. Time Source Destination Protocol Length Info
    27 1.293387000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=5710 Ack=4745 Win=8145 Len=0 TSval=1096022256 TSecr=7578656

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 5710, Ack: 4745, Len: 0

    No. Time Source Destination Protocol Length Info
    28 1.297335000 207.219.69.190 192.168.1.210 SIP 448 Status: 200 OK |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 5710, Ack: 4745, Len: 382
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    29 1.495168000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=4745 Ack=6092 Win=255 Len=0 TSval=7578682 TSecr=1096022257

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 4745, Ack: 6092, Len: 0

    No. Time Source Destination Protocol Length Info
    30 9.870611000 207.219.69.190 192.168.1.210 SIP/SDP 1132 Request: INVITE sip:*777@my.domainname.com:5060;transport=tcp |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 6092, Ack: 4745, Len: 1066
    Session Initiation Protocol (INVITE)

    No. Time Source Destination Protocol Length Info
    31 10.070644000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=4745 Ack=7158 Win=256 Len=0 TSval=7579539 TSecr=1096030820

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 4745, Ack: 7158, Len: 0

    No. Time Source Destination Protocol Length Info
    32 10.071749000 192.168.1.210 207.219.69.190 SIP 603 Status: 407 Proxy Authentication Required |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 4745, Ack: 7158, Len: 537
    Session Initiation Protocol (407)

    No. Time Source Destination Protocol Length Info
    33 10.302878000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=7158 Ack=5282 Win=8158 Len=0 TSval=1096031264 TSecr=7579539

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 7158, Ack: 5282, Len: 0

    No. Time Source Destination Protocol Length Info
    34 10.312649000 207.219.69.190 192.168.1.210 SIP 502 Request: ACK sip:*777@my.domainname.com:5060;transport=tcp |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 7158, Ack: 5282, Len: 436
    Session Initiation Protocol (ACK)

    No. Time Source Destination Protocol Length Info
    35 10.511606000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=5282 Ack=7594 Win=254 Len=0 TSval=7579583 TSecr=1096031264

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 5282, Ack: 7594, Len: 0

    No. Time Source Destination Protocol Length Info
    36 10.767986000 207.219.69.190 192.168.1.210 SIP/SDP 1377 Request: INVITE sip:*777@my.domainname.com:5060;transport=tcp |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 7594, Ack: 5282, Len: 1311
    Session Initiation Protocol (INVITE)

    No. Time Source Destination Protocol Length Info
    37 10.870508000 192.168.1.210 207.219.69.190 SIP 392 Status: 100 Trying |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 5282, Ack: 8905, Len: 326
    Session Initiation Protocol (100)

    No. Time Source Destination Protocol Length Info
    38 10.923668000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=5608 Win=8171 Len=0 TSval=1096031877 TSecr=7579619

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 5608, Len: 0

    No. Time Source Destination Protocol Length Info
    39 11.023555000 192.168.1.210 207.219.69.190 SIP 511 Status: 180 Ringing |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 5608, Ack: 8905, Len: 445
    Session Initiation Protocol (180)

    No. Time Source Destination Protocol Length Info
    40 11.072876000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=6053 Win=8164 Len=0 TSval=1096032028 TSecr=7579634

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 6053, Len: 0

    No. Time Source Destination Protocol Length Info
    41 11.072890000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 6053, Ack: 8905, Len: 873
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    42 11.125725000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=6926 Win=8137 Len=0 TSval=1096032076 TSecr=7579639

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 6926, Len: 0

    No. Time Source Destination Protocol Length Info
    43 11.724741000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 6926, Ack: 8905, Len: 873
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    44 11.885212000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=7799 Win=8082 Len=0 TSval=1096032830 TSecr=7579704

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 7799, Len: 0

    No. Time Source Destination Protocol Length Info
    45 12.825863000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 7799, Ack: 8905, Len: 873
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    46 12.877188000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=8672 Win=8137 Len=0 TSval=1096033825 TSecr=7579815

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 8672, Len: 0

    No. Time Source Destination Protocol Length Info
    47 14.926955000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 8672, Ack: 8905, Len: 873
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    48 14.991567000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=9545 Win=8137 Len=0 TSval=1096035922 TSecr=7580025

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 9545, Len: 0

    No. Time Source Destination Protocol Length Info
    49 19.028168000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 9545, Ack: 8905, Len: 873
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    50 19.082744000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=10418 Win=8137 Len=0 TSval=1096040013 TSecr=7580435

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 10418, Len: 0

    No. Time Source Destination Protocol Length Info
    51 23.082420000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 10418, Ack: 8905, Len: 873
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    52 23.137809000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=11291 Win=8137 Len=0 TSval=1096044066 TSecr=7580840

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 11291, Len: 0

    No. Time Source Destination Protocol Length Info
    53 27.183638000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 11291, Ack: 8905, Len: 873
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    54 27.235355000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=12164 Win=8137 Len=0 TSval=1096048158 TSecr=7581250

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 12164, Len: 0

    No. Time Source Destination Protocol Length Info
    55 31.284869000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 12164, Ack: 8905, Len: 873
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    56 31.337994000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=13037 Win=8137 Len=0 TSval=1096052258 TSecr=7581660

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 13037, Len: 0

    No. Time Source Destination Protocol Length Info
    57 35.386142000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 13037, Ack: 8905, Len: 873
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    58 35.442842000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=13910 Win=8137 Len=0 TSval=1096056358 TSecr=7582071

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 13910, Len: 0

    No. Time Source Destination Protocol Length Info
    59 39.497358000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 13910, Ack: 8905, Len: 873
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    60 39.558002000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=14783 Win=8137 Len=0 TSval=1096060473 TSecr=7582482

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 14783, Len: 0

    No. Time Source Destination Protocol Length Info
    61 43.129648000 192.168.1.210 207.219.69.190 SIP 567 Request: BYE sip:980@207.219.69.190:20460;transport=tcp;ob;inst="74EACC" |

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 14783, Ack: 8905, Len: 501
    Session Initiation Protocol (BYE)

    No. Time Source Destination Protocol Length Info
    62 43.183491000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=15284 Win=8160 Len=0 TSval=1096064096 TSecr=7582845

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 15284, Len: 0

    No. Time Source Destination Protocol Length Info
    63 43.193007000 207.219.69.190 192.168.1.210 SIP 418 Status: 200 OK |

    Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
    Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 15284, Len: 352
    Session Initiation Protocol (200)

    No. Time Source Destination Protocol Length Info
    64 43.385521000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=15284 Ack=9257 Win=255 Len=0 TSval=7582871 TSecr=1096064096

    Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
    Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 15284, Ack: 9257, Len: 0
    my.domainname.com
     
  3. hccj

    Joined:
    May 19, 2014
    Messages:
    21
    Likes Received:
    0
    Here's an excerpt of verbose server activity log:

    19-May-2014 00:30:32.524 [CM503008]: Call(C:39): Call is terminated
    19-May-2014 00:30:32.524 L:39.2[ParkOrb:*777]: Terminating targets, reason: SIP ;cause=200 ;text="Call terminated on user request"
    19-May-2014 00:30:32.522 L:39.1[Extn]: Terminating targets, reason: SIP ;cause=200 ;text="Call terminated on user request"
    19-May-2014 00:30:32.522 Blocking refers for the Call(C:39)
    19-May-2014 00:30:32.522 Call(C:39) is terminated
    19-May-2014 00:30:32.522 [CM503021]: Call(C:39): ACK is not received from sip:980@my.domainname.com:5060
    19-May-2014 00:30:32.522 ACK not received from "John Smith"<sip:980@my.domainname.com:5060>;tag=IlFkBHJ1SxmQj98EPf.TMzCuFFo6cBox to <sip:*777@my.domainname.com:5060>;tag=5c02bc36
    19-May-2014 00:30:28.793 L:39.1[Extn] Sending: OnSendResp Send 200/INVITE from 0.0.0.0:0 tid=PjvPa3SLDa7y3nrTTJsm7ZMMX0ubMODyVG Call-ID=xJPjyFy0fdbt4vRxBX.yJbk1ZsDzSouK:
    SIP/2.0 200 OK
    Via: SIP/2.0/TCP 207.219.69.190:20460;rport=20460;branch=z9hG4bKPjvPa3SLDa7y3nrTTJsm7ZMMX0ubMODyVG
    Contact: <sip:*777@192.168.1.210:5060;transport=TCP>
    To: <sip:*777@my.domainname.com:5060>;tag=5c02bc36
    From: "John Smith"<sip:980@my.domainname.com:5060>;tag=IlFkBHJ1SxmQj98EPf.TMzCuFFo6cBox
    Call-ID: xJPjyFy0fdbt4vRxBX.yJbk1ZsDzSouK
    CSeq: 14821 INVITE
    Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE
    Content-Type: application/sdp
    Supported: replaces
    User-Agent: 3CXPhoneSystem 12.0.35528.640 (34969)
    Content-Length: 287
     
  4. lneblett

    lneblett Well-Known Member

    Joined:
    Sep 7, 2010
    Messages:
    2,086
    Likes Received:
    65
    Presuming that BOTH softphones have the same capabilities and settings and can be configured identically, then you should be able to setup the 3CX softphone to mimic the Acrobit and all should be well. Unfortunately, there is still the question of how each implements the features, so it might be that getting one to emulate the other is not completely possible despite the appearance that it should be so.

    First, the firewall checker is an indication that things should function correctly, but I venture that it is not an absolute. While it sounds like you have covered the firewall issue I suggest that you validate the settings against those found in this link: http://www.3cx.com/blog/voip-howto/pfsense-firewall/

    I then suggest that you work with the standard default settings in the 3CX softphone first and go from there. You did not mention any of the settings made other than TCP or UDP. Was the NAT helper on or off? Tunnel or no tunnel, keep alive interval, etc.?

    You can gain a lot of insight with wireshark by viewing the flow under the telephony tab. You will be able to see how the various devices communicate with one another and you can compare a call captured with the Acrobits softphone against one made with the 3CX phone. Just be sure to conduct the tests using the same methodology. I also find it easier if you will post a pcap log rather than the listings, but this may reveal certain IP addresses that should not be posted in a public forum.

    I use the android version over both Wi-Fi (local and remote) as well as over AT&T and it works quiet well for me. I do not use the tunnel as if I can't get thru a particular Wi-Fi, I merely shift to AT&T.
     
  5. hccj

    Joined:
    May 19, 2014
    Messages:
    21
    Likes Received:
    0
    I have followed the above link on pfSense setup. And in fact, I think the advice given there is incomplete. An Outbound NAT also needs to be established to make the NAT symmetric, and the port mapping to be static. I had additionally created an outbound rule to make all outgoing IP connections from that specific computer to have a static mapping. This mapping was critical to getting 3CX pass the Firewall Checker test. No outbound mapping = No go. Perhaps this should be added in the blog post.

    I had tried both TCP and UDP connections methods:
    TCP + NAT helper on = Connects and works, but call disconnects at the 30/32second mark
    TCP + NAT helper off = Connects and works, but call disconnects at the 30/32second mark
    UDP + NAT helper off = Connects to 3CX, and shows "On Hook"; but when attempting call, the request times out and call is aborted.
    UDP + NAT helper on = Cannot even connect to 3CX. "Out of office service not available"
    Keep alive in all test cases was 15sec.

    Tunnel works perfectly. No issues at all - just a hassle to start each time.

    Before I go further to try capturing a call with the different soft phones, is there anything that you recommend paying special attention to?

    Thanks.
     
  6. hccj

    Joined:
    May 19, 2014
    Messages:
    21
    Likes Received:
    0
    A new finding here:

    When using wireshark to analyze the output of a successful connection over 3G/LTE, using UDP protocol. One difference I noted when using Acrobits Groundwire soft-phone was that after the Request: SUBSCRIBE messages, there is communication by the STUN protocol:

    Softphone > PBX asks for BINDING REQUEST
    PBX > Softphone replies BINDING SUCCESS RESPONSE MAPPED-ADDRESS: <public ip:port> of my soft phone
    The connection completes successfully from here on. No problems here. I was nosy and looked at a packet after the binding was successful, and an additional difference between this an and unsuccessful one is that the message header of the SIP protocol contains what I believe is a private IP of my phone (it is 10.xx.xx.xx, and it is not my public IP) - I suppose this is normal and is what STUN was designed to do.

    However, when using 3CXPhone, I only get alternating messages of:
    Request: REGISTER sip:mydomain.com:5060; transport=UDP
    Status: 407 Proxy Authentication Required (0 bindings)
    This would repeat on and on.
    I am connecting using direct SIP, UDP, Keep alive 15, Nat Helper ON

    Sounds to me like an issue of how STUN is being resolved. Can anybody point me any further in the right direction?

    To reiterate a bit, this (UDP from 3CXPhone) would work properly if I am on my home wifi (which is behind a router/firewall) connecting to office. Or would work with TCP in any case; apart from the 30sec disconnect problem.
     
  7. lneblett

    lneblett Well-Known Member

    Joined:
    Sep 7, 2010
    Messages:
    2,086
    Likes Received:
    65
    In my case, the NAT helper is off.

    In your latest post I am a little confused with the 10.10.10.x reference in the capture. If using the mobile carrier during this exercise, then the IP should reflect something other than the private IP indicated and the flow would show this. Are you certain that the Wi-Fi aspect of the phone was turned-off?

    It is still my belief that the firewall is an issue. 3CX, as evidenced by the Acrobit, does not disconnect the call when a call is made. Nor does it disconnect when the 3CX softphone is used when on internal Wi-Fi. My settings are:

    The extension number and associated login credentials. An account name as I have several accounts set. The local and public IP of the 3CX system, 5060 as the SIP port, the stun server is the default (stun3.3cx.com), the tunnel is off, Proxy is empty, Registration timeout=120, Keep alive = 15, DTMF = RFC, TCP Transport = off, Nat Helper = off, SRTP mode = disabled, Codecs=GSM, 771a, 711u. On the 3CX side, I have the extension enable for use outside the LAN, the IP is the external (public) and not using STUN. From a router perspective, the SIP ALG is off and only the ports required by 3CX are in play.

    It works flawlessly for me, but I must also admit that I have never used the call handling features that the latest has- have not had a need.

    You can also search the forum with the key words "32 seconds", there are a number of users who also had similar issues and referenced dropped calls. Some indicated that turning off UpNp did the trick while others suggested that turning off support re-invites for the extension was the answer...and of course others.
     
  8. hccj

    Joined:
    May 19, 2014
    Messages:
    21
    Likes Received:
    0
    Just wanted to update anybody following this thread.

    I had spent a lot of time investigating this issue further, and there was a lot of weird behaviour.

    What I did was get a static IP, and disable STUN both on 3CX and remote clients. This solved the problem with UDP.
    It now connects, and stays connected for more than 30sec. I haven't tested TCP, because UDP was the prior worst-case problem - as long as it's working I'm happy.

    The server addresses are now all set with static IP, and 3CXPhone configuration has NAT helper on, using UDP.
     
  9. jpillow

    jpillow Well-Known Member

    Joined:
    Jun 20, 2011
    Messages:
    1,342
    Likes Received:
    0
    When I have this issue I usually do one of two things number one would be the same resolution as you disable stun and use the static IP, or use the SPM/SBC.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Thread Status:
Not open for further replies.