3CXPhone vs Other soft-phones different reaction to NAT

[hccj]

Hi!

I am setting up a 3CX system and am having multiple issues. I am using pfSense firewall 2.1.1, and the most recent 3CX V12.

The main symptom is that calls made using SIP TCP get disconnected after exactly 32 seconds. From the logs, the culprit appears to be "ACK is not received", then 3CX PBX requests the call to be terminated.

The pfSense firewall passes all the Firewall Checker tests 100%. Ports 5060-5061 tcp/udp,5090 tcp/udp, 9000-9049 udp have been forwarded as per the latest blog post from 3cx re: pfsense, and settings in outbound nat to create a static outbound port mapping have also been done.

Wireshark has been used to confirm that traffic is indeed on a static map - coming and directed towards the ports listed above.

The strange thing is this:

When call (to *777 echo test) is made using 3CXPhone (iOS - latest version):
- Via wifi connection + UDP = WORKS PERFECTLY - 0 problems
- Via wifi connection + TCP = Works, but disconnects at exactly 32 seconds
- Via 3G/LTE cellular connection + UDP = Does not connect at all - Connection attempt times out
- Via 3G/LTE cellular connection + TCP = Works, but disconnects at exactly 32 seconds

When call (to *777 echo test) is made using 3rd party soft-phone (Acrobits Groundwire on iOS):
- Via wifi connection + UDP = WORKS PERFECTLY*
- Via wifi connection + TCP = WORKS PERFECTLY*
- Via 3G/LTE cellular connection + UDP = WORKS PERFECTLY*
- Via 3G/LTE cellular connection + TCP = WORKS PERFECTLY*

* The only catch here is that upon pressing "END CALL" on the soft-phone, 3CX does not disconnect the call - and the call remains connected even though it is finished. I suppose this is an issue with the soft-phone config?

I have a feeling this issue is how 3CXPhone is using STUN, and the different way Groundwire soft-phone handles NAT traversal that is breaking or making the operability.

I can provide additional information, and captures. However, from this superficial information, could anybody suggest what kind of information would be useful in diagnosing this?

It would be nice if I could configure 3CXPhone similar to how the 3rd party apps work. At this point, I don't really care which method I use to connect; tcp, udp, 3rd party or otherwise - all my options are partially working!

Jeff.

 

[hccj]

Here is a wireshark capture of a call via TCP, and cuts at about 30-32sec

No. Time Source Destination Protocol Length Info
1 0.000000000 207.219.69.190 192.168.1.210 SIP 829 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 1, Ack: 1, Len: 763
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
2 0.200032000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=1 Ack=764 Win=256 Len=0 TSval=7578552 TSecr=1096020993

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 1, Ack: 764, Len: 0

No. Time Source Destination Protocol Length Info
3 0.201066000 192.168.1.210 207.219.69.190 SIP 615 Status: 407 Proxy Authentication Required (0 bindings) |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 1, Ack: 764, Len: 549
Session Initiation Protocol (407)

No. Time Source Destination Protocol Length Info
4 0.249060000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=764 Ack=550 Win=8157 Len=0 TSval=1096021254 TSecr=7578552

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 764, Ack: 550, Len: 0

No. Time Source Destination Protocol Length Info
5 0.259006000 207.219.69.190 192.168.1.210 SIP 1069 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 764, Ack: 550, Len: 1003
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
6 0.455019000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=550 Ack=1767 Win=252 Len=0 TSval=7578578 TSecr=1096021255

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 550, Ack: 1767, Len: 0

No. Time Source Destination Protocol Length Info
7 0.461088000 192.168.1.210 207.219.69.190 SIP 637 Status: 200 OK (2 bindings) |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 550, Ack: 1767, Len: 571
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
8 0.534661000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=1767 Ack=1121 Win=8156 Len=0 TSval=1096021532 TSecr=7578578

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 1767, Ack: 1121, Len: 0

No. Time Source Destination Protocol Length Info
9 0.534697000 192.168.1.210 207.219.69.190 SIP 809 Request: NOTIFY sip:[email protected]:5077;transport=TCP;ob;inst="74EACC" |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 1121, Ack: 1767, Len: 743
Session Initiation Protocol (NOTIFY)

No. Time Source Destination Protocol Length Info
10 0.546192000 207.219.69.190 192.168.1.210 SIP 975 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 1767, Ack: 1121, Len: 909
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
11 0.595178000 207.219.69.190 192.168.1.210 SIP 818 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 2676, Ack: 1864, Len: 752
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
12 0.595212000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=1864 Ack=3428 Win=256 Len=0 TSval=7578592 TSecr=1096021534

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 1864, Ack: 3428, Len: 0

No. Time Source Destination Protocol Length Info
13 0.647619000 207.219.69.190 192.168.1.210 SIP 447 Status: 200 OK |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 3428, Ack: 1864, Len: 381
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
14 0.649223000 192.168.1.210 207.219.69.190 SIP 615 Status: 407 Proxy Authentication Required (0 bindings) |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 1864, Ack: 3809, Len: 549
Session Initiation Protocol (407)

No. Time Source Destination Protocol Length Info
15 0.714799000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=3809 Ack=2413 Win=8157 Len=0 TSval=1096021703 TSecr=7578597

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 3809, Ack: 2413, Len: 0

No. Time Source Destination Protocol Length Info
16 0.714813000 192.168.1.210 207.219.69.190 SIP 615 Status: 407 Proxy Authentication Required (0 bindings) |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 2413, Ack: 3809, Len: 549
Session Initiation Protocol (407)

No. Time Source Destination Protocol Length Info
17 0.726136000 207.219.69.190 192.168.1.210 SIP 975 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 3809, Ack: 2413, Len: 909
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
18 0.765405000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=4718 Ack=2962 Win=8157 Len=0 TSval=1096021750 TSecr=7578603

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 4718, Ack: 2962, Len: 0

No. Time Source Destination Protocol Length Info
19 0.925048000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=2962 Ack=4718 Win=251 Len=0 TSval=7578625 TSecr=1096021704

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 2962, Ack: 4718, Len: 0

No. Time Source Destination Protocol Length Info
20 0.927154000 192.168.1.210 207.219.69.190 SIP 543 Status: 200 OK (1 bindings) |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 2962, Ack: 4718, Len: 477
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
21 0.979960000 207.219.69.190 192.168.1.210 SIP 1058 Request: REGISTER sip:my.domainname.com:5060;transport=TCP |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 4718, Ack: 2962, Len: 992
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
22 0.980088000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=5710 Ack=3439 Win=8162 Len=0 TSval=1096021953 TSecr=7578625

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 5710, Ack: 3439, Len: 0

No. Time Source Destination Protocol Length Info
23 1.175099000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=3439 Ack=5710 Win=256 Len=0 TSval=7578650 TSecr=1096021950

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 3439, Ack: 5710, Len: 0

No. Time Source Destination Protocol Length Info
24 1.182135000 192.168.1.210 207.219.69.190 SIP 627 Status: 200 OK (2 bindings) |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 3439, Ack: 5710, Len: 561
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
25 1.236792000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=5710 Ack=4000 Win=8156 Len=0 TSval=1096022205 TSecr=7578650

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 5710, Ack: 4000, Len: 0

No. Time Source Destination Protocol Length Info
26 1.236814000 192.168.1.210 207.219.69.190 SIP 811 Request: NOTIFY sip:[email protected]:20460;transport=tcp;ob;inst="74EACC" |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 4000, Ack: 5710, Len: 745
Session Initiation Protocol (NOTIFY)

No. Time Source Destination Protocol Length Info
27 1.293387000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=5710 Ack=4745 Win=8145 Len=0 TSval=1096022256 TSecr=7578656

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 5710, Ack: 4745, Len: 0

No. Time Source Destination Protocol Length Info
28 1.297335000 207.219.69.190 192.168.1.210 SIP 448 Status: 200 OK |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 5710, Ack: 4745, Len: 382
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
29 1.495168000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=4745 Ack=6092 Win=255 Len=0 TSval=7578682 TSecr=1096022257

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 4745, Ack: 6092, Len: 0

No. Time Source Destination Protocol Length Info
30 9.870611000 207.219.69.190 192.168.1.210 SIP/SDP 1132 Request: INVITE sip:*[email protected]:5060;transport=tcp |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 6092, Ack: 4745, Len: 1066
Session Initiation Protocol (INVITE)

No. Time Source Destination Protocol Length Info
31 10.070644000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=4745 Ack=7158 Win=256 Len=0 TSval=7579539 TSecr=1096030820

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 4745, Ack: 7158, Len: 0

No. Time Source Destination Protocol Length Info
32 10.071749000 192.168.1.210 207.219.69.190 SIP 603 Status: 407 Proxy Authentication Required |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 4745, Ack: 7158, Len: 537
Session Initiation Protocol (407)

No. Time Source Destination Protocol Length Info
33 10.302878000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=7158 Ack=5282 Win=8158 Len=0 TSval=1096031264 TSecr=7579539

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 7158, Ack: 5282, Len: 0

No. Time Source Destination Protocol Length Info
34 10.312649000 207.219.69.190 192.168.1.210 SIP 502 Request: ACK sip:*[email protected]:5060;transport=tcp |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 7158, Ack: 5282, Len: 436
Session Initiation Protocol (ACK)

No. Time Source Destination Protocol Length Info
35 10.511606000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=5282 Ack=7594 Win=254 Len=0 TSval=7579583 TSecr=1096031264

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 5282, Ack: 7594, Len: 0

No. Time Source Destination Protocol Length Info
36 10.767986000 207.219.69.190 192.168.1.210 SIP/SDP 1377 Request: INVITE sip:*[email protected]:5060;transport=tcp |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 7594, Ack: 5282, Len: 1311
Session Initiation Protocol (INVITE)

No. Time Source Destination Protocol Length Info
37 10.870508000 192.168.1.210 207.219.69.190 SIP 392 Status: 100 Trying |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 5282, Ack: 8905, Len: 326
Session Initiation Protocol (100)

No. Time Source Destination Protocol Length Info
38 10.923668000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=5608 Win=8171 Len=0 TSval=1096031877 TSecr=7579619

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 5608, Len: 0

No. Time Source Destination Protocol Length Info
39 11.023555000 192.168.1.210 207.219.69.190 SIP 511 Status: 180 Ringing |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 5608, Ack: 8905, Len: 445
Session Initiation Protocol (180)

No. Time Source Destination Protocol Length Info
40 11.072876000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=6053 Win=8164 Len=0 TSval=1096032028 TSecr=7579634

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 6053, Len: 0

No. Time Source Destination Protocol Length Info
41 11.072890000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 6053, Ack: 8905, Len: 873
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
42 11.125725000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=6926 Win=8137 Len=0 TSval=1096032076 TSecr=7579639

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 6926, Len: 0

No. Time Source Destination Protocol Length Info
43 11.724741000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 6926, Ack: 8905, Len: 873
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
44 11.885212000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=7799 Win=8082 Len=0 TSval=1096032830 TSecr=7579704

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 7799, Len: 0

No. Time Source Destination Protocol Length Info
45 12.825863000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 7799, Ack: 8905, Len: 873
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
46 12.877188000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=8672 Win=8137 Len=0 TSval=1096033825 TSecr=7579815

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 8672, Len: 0

No. Time Source Destination Protocol Length Info
47 14.926955000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 8672, Ack: 8905, Len: 873
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
48 14.991567000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=9545 Win=8137 Len=0 TSval=1096035922 TSecr=7580025

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 9545, Len: 0

No. Time Source Destination Protocol Length Info
49 19.028168000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 9545, Ack: 8905, Len: 873
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
50 19.082744000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=10418 Win=8137 Len=0 TSval=1096040013 TSecr=7580435

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 10418, Len: 0

No. Time Source Destination Protocol Length Info
51 23.082420000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 10418, Ack: 8905, Len: 873
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
52 23.137809000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=11291 Win=8137 Len=0 TSval=1096044066 TSecr=7580840

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 11291, Len: 0

No. Time Source Destination Protocol Length Info
53 27.183638000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 11291, Ack: 8905, Len: 873
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
54 27.235355000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=12164 Win=8137 Len=0 TSval=1096048158 TSecr=7581250

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 12164, Len: 0

No. Time Source Destination Protocol Length Info
55 31.284869000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 12164, Ack: 8905, Len: 873
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
56 31.337994000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=13037 Win=8137 Len=0 TSval=1096052258 TSecr=7581660

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 13037, Len: 0

No. Time Source Destination Protocol Length Info
57 35.386142000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 13037, Ack: 8905, Len: 873
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
58 35.442842000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=13910 Win=8137 Len=0 TSval=1096056358 TSecr=7582071

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 13910, Len: 0

No. Time Source Destination Protocol Length Info
59 39.497358000 192.168.1.210 207.219.69.190 SIP/SDP 939 Status: 200 OK |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 13910, Ack: 8905, Len: 873
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
60 39.558002000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=14783 Win=8137 Len=0 TSval=1096060473 TSecr=7582482

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 14783, Len: 0

No. Time Source Destination Protocol Length Info
61 43.129648000 192.168.1.210 207.219.69.190 SIP 567 Request: BYE sip:[email protected]:20460;transport=tcp;ob;inst="74EACC" |

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 14783, Ack: 8905, Len: 501
Session Initiation Protocol (BYE)

No. Time Source Destination Protocol Length Info
62 43.183491000 207.219.69.190 192.168.1.210 TCP 66 20460 > sip [ACK] Seq=8905 Ack=15284 Win=8160 Len=0 TSval=1096064096 TSecr=7582845

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 15284, Len: 0

No. Time Source Destination Protocol Length Info
63 43.193007000 207.219.69.190 192.168.1.210 SIP 418 Status: 200 OK |

Internet Protocol Version 4, Src: 207.219.69.190 (207.219.69.190), Dst: 192.168.1.210 (192.168.1.210)
Transmission Control Protocol, Src Port: 20460 (20460), Dst Port: sip (5060), Seq: 8905, Ack: 15284, Len: 352
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
64 43.385521000 192.168.1.210 207.219.69.190 TCP 66 sip > 20460 [ACK] Seq=15284 Ack=9257 Win=255 Len=0 TSval=7582871 TSecr=1096064096

Internet Protocol Version 4, Src: 192.168.1.210 (192.168.1.210), Dst: 207.219.69.190 (207.219.69.190)
Transmission Control Protocol, Src Port: sip (5060), Dst Port: 20460 (20460), Seq: 15284, Ack: 9257, Len: 0
my.domainname.com

 

[hccj]

Here's an excerpt of verbose server activity log:

19-May-2014 00:30:32.524 [CM503008]: Call(C:39): Call is terminated
19-May-2014 00:30:32.524 L:39.2[ParkOrb:*777]: Terminating targets, reason: SIP ;cause=200 ;text="Call terminated on user request"
19-May-2014 00:30:32.522 L:39.1[Extn]: Terminating targets, reason: SIP ;cause=200 ;text="Call terminated on user request"
19-May-2014 00:30:32.522 Blocking refers for the Call(C:39)
19-May-2014 00:30:32.522 Call(C:39) is terminated
19-May-2014 00:30:32.522 [CM503021]: Call(C:39): ACK is not received from sip:[email protected]:5060
19-May-2014 00:30:32.522 ACK not received from "John Smith"<sip:[email protected]:5060>;tag=IlFkBHJ1SxmQj98EPf.TMzCuFFo6cBox to <sip:*[email protected]:5060>;tag=5c02bc36
19-May-2014 00:30:28.793 L:39.1[Extn] Sending: OnSendResp Send 200/INVITE from 0.0.0.0:0 tid=PjvPa3SLDa7y3nrTTJsm7ZMMX0ubMODyVG Call-ID=xJPjyFy0fdbt4vRxBX.yJbk1ZsDzSouK:
SIP/2.0 200 OK
Via: SIP/2.0/TCP 207.219.69.190:20460;rport=20460;branch=z9hG4bKPjvPa3SLDa7y3nrTTJsm7ZMMX0ubMODyVG
Contact: <sip:*[email protected]:5060;transport=TCP>
To: <sip:*[email protected]:5060>;tag=5c02bc36
From: "John Smith"<sip:[email protected]:5060>;tag=IlFkBHJ1SxmQj98EPf.TMzCuFFo6cBox
Call-ID: xJPjyFy0fdbt4vRxBX.yJbk1ZsDzSouK
CSeq: 14821 INVITE
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE
Content-Type: application/sdp
Supported: replaces
User-Agent: 3CXPhoneSystem 12.0.35528.640 (34969)
Content-Length: 287

 

[lneblett]

Presuming that BOTH softphones have the same capabilities and settings and can be configured identically, then you should be able to setup the 3CX softphone to mimic the Acrobit and all should be well. Unfortunately, there is still the question of how each implements the features, so it might be that getting one to emulate the other is not completely possible despite the appearance that it should be so.

First, the firewall checker is an indication that things should function correctly, but I venture that it is not an absolute. While it sounds like you have covered the firewall issue I suggest that you validate the settings against those found in this link: http://www.3cx.com/blog/voip-howto/pfsense-firewall/

I then suggest that you work with the standard default settings in the 3CX softphone first and go from there. You did not mention any of the settings made other than TCP or UDP. Was the NAT helper on or off? Tunnel or no tunnel, keep alive interval, etc.?

You can gain a lot of insight with wireshark by viewing the flow under the telephony tab. You will be able to see how the various devices communicate with one another and you can compare a call captured with the Acrobits softphone against one made with the 3CX phone. Just be sure to conduct the tests using the same methodology. I also find it easier if you will post a pcap log rather than the listings, but this may reveal certain IP addresses that should not be posted in a public forum.

I use the android version over both Wi-Fi (local and remote) as well as over AT&T and it works quiet well for me. I do not use the tunnel as if I can't get thru a particular Wi-Fi, I merely shift to AT&T.

 

[hccj]

First, the firewall checker is an indication that things should function correctly, but I venture that it is not an absolute. While it sounds like you have covered the firewall issue I suggest that you validate the settings against those found in this link: http://www.3cx.com/blog/voip-howto/pfsense-firewall/

I have followed the above link on pfSense setup. And in fact, I think the advice given there is incomplete. An Outbound NAT also needs to be established to make the NAT symmetric, and the port mapping to be static. I had additionally created an outbound rule to make all outgoing IP connections from that specific computer to have a static mapping. This mapping was critical to getting 3CX pass the Firewall Checker test. No outbound mapping = No go. Perhaps this should be added in the blog post.

I then suggest that you work with the standard default settings in the 3CX softphone first and go from there. You did not mention any of the settings made other than TCP or UDP. Was the NAT helper on or off? Tunnel or no tunnel, keep alive interval, etc.?

I had tried both TCP and UDP connections methods:
TCP + NAT helper on = Connects and works, but call disconnects at the 30/32second mark
TCP + NAT helper off = Connects and works, but call disconnects at the 30/32second mark
UDP + NAT helper off = Connects to 3CX, and shows "On Hook"; but when attempting call, the request times out and call is aborted.
UDP + NAT helper on = Cannot even connect to 3CX. "Out of office service not available"
Keep alive in all test cases was 15sec.

Tunnel works perfectly. No issues at all - just a hassle to start each time.

Before I go further to try capturing a call with the different soft phones, is there anything that you recommend paying special attention to?

Thanks.

 

[hccj]

A new finding here:

When using wireshark to analyze the output of a successful connection over 3G/LTE, using UDP protocol. One difference I noted when using Acrobits Groundwire soft-phone was that after the Request: SUBSCRIBE messages, there is communication by the STUN protocol:

Softphone > PBX asks for BINDING REQUEST
PBX > Softphone replies BINDING SUCCESS RESPONSE MAPPED-ADDRESS: <public iport> of my soft phone
The connection completes successfully from here on. No problems here. I was nosy and looked at a packet after the binding was successful, and an additional difference between this an and unsuccessful one is that the message header of the SIP protocol contains what I believe is a private IP of my phone (it is 10.xx.xx.xx, and it is not my public IP) - I suppose this is normal and is what STUN was designed to do.

However, when using 3CXPhone, I only get alternating messages of:
Request: REGISTER sip:mydomain.com:5060; transport=UDP
Status: 407 Proxy Authentication Required (0 bindings)
This would repeat on and on.
I am connecting using direct SIP, UDP, Keep alive 15, Nat Helper ON

Sounds to me like an issue of how STUN is being resolved. Can anybody point me any further in the right direction?

To reiterate a bit, this (UDP from 3CXPhone) would work properly if I am on my home wifi (which is behind a router/firewall) connecting to office. Or would work with TCP in any case; apart from the 30sec disconnect problem.

 

[lneblett]

In my case, the NAT helper is off.

In your latest post I am a little confused with the 10.10.10.x reference in the capture. If using the mobile carrier during this exercise, then the IP should reflect something other than the private IP indicated and the flow would show this. Are you certain that the Wi-Fi aspect of the phone was turned-off?

It is still my belief that the firewall is an issue. 3CX, as evidenced by the Acrobit, does not disconnect the call when a call is made. Nor does it disconnect when the 3CX softphone is used when on internal Wi-Fi. My settings are:

The extension number and associated login credentials. An account name as I have several accounts set. The local and public IP of the 3CX system, 5060 as the SIP port, the stun server is the default (stun3.3cx.com), the tunnel is off, Proxy is empty, Registration timeout=120, Keep alive = 15, DTMF = RFC, TCP Transport = off, Nat Helper = off, SRTP mode = disabled, Codecs=GSM, 771a, 711u. On the 3CX side, I have the extension enable for use outside the LAN, the IP is the external (public) and not using STUN. From a router perspective, the SIP ALG is off and only the ports required by 3CX are in play.

It works flawlessly for me, but I must also admit that I have never used the call handling features that the latest has- have not had a need.

You can also search the forum with the key words "32 seconds", there are a number of users who also had similar issues and referenced dropped calls. Some indicated that turning off UpNp did the trick while others suggested that turning off support re-invites for the extension was the answer...and of course others.

 

[hccj]

Just wanted to update anybody following this thread.

I had spent a lot of time investigating this issue further, and there was a lot of weird behaviour.

What I did was get a static IP, and disable STUN both on 3CX and remote clients. This solved the problem with UDP.
It now connects, and stays connected for more than 30sec. I haven't tested TCP, because UDP was the prior worst-case problem - as long as it's working I'm happy.

The server addresses are now all set with static IP, and 3CXPhone configuration has NAT helper on, using UDP.

 

[jpillow]

When I have this issue I usually do one of two things number one would be the same resolution as you disable stun and use the static IP, or use the SPM/SBC.