TLS/TCP break STUN on a Grandstream phone

[B-7]

Hello. While setting up a Grandstream GXP21xx series phones, we’ve come across a problem. We’ve tried to use TLS/TCP instead of the UDP with the supplied certificate. Problem is, when we change the transport and port, manually or via a modified config, it correctly provisions and seem to register, but the STUN stops working, and on the Phones page the private IP address is displayed instead of the public of network where the phone is. Why could that be and where to look at for troubleshooting?
Thanks in advance.

 

[cobaltit]

So is there an actual problem? Like the phone can't make calls, BLFs don't work, etc? Or are you saying cosmetically you don't like the fact it's reporting the private IP address? I guess I'm not sure what exactly you are trying to troubleshoot?

 

[B-7]

So is there an actual problem?

Yes, the phone is unable to make calls because of that and the BLS keys are blacked out, but the line status shows online.

 

[cobaltit]

Are these the newer, fully supported GXP21XX models or the older EOL ones? Not a lot of folks run TLS here and it's really baked in supported solution atm with 3CX. I have it working with a T41P on my bench, but I've never tried with GS. I'm just happy when they work they way they are supposed to. I might have an older GS phone I can test if you can confirm what model you are working with.

 

[Evolute IT]

I just tried on a GRP2616 and it works, BLF too.

What model are you using?
What firmware is it running?

 

[B-7]

It’s a brand new 2170 with the latest firmware suggested by the system, 1.0.11.6.

 

[cobaltit]

Ok I'm going to leave you in the very capable hands of @Frederick Marcoux . He does a lot more with GS than I do

 

[Evolute IT]

Okay, first, factory reset the phone, upgrade to the latest firmware (a new one is available today, 1.0.11.16) and reprovision. Make sure the phone does not use 5060 for Local SIP port.

Then, go to the phone Web UI and change these:
- Accounts -> Account 1 -> General -> SIP Server: change port 5060 to 5061
- Accounts -> Account 1 -> SIP Settings : change transport to TCP/TLS

Give it a few seconds to re-register and see if it works. I tried on my GRP and it works flawlessly. I will try later tonight on my GXP2170 (in use right now).

 

[B-7]

Okay, first, factory reset the phone, upgrade to the latest firmware (a new one is available today, 1.0.11.16) and reprovision. Make sure the phone does not use 5060 for Local SIP port.

Then, go to the phone Web UI and change these:
- Accounts -> Account 1 -> General -> SIP Server: change port 5060 to 5061
- Accounts -> Account 1 -> SIP Settings : change transport to TCP/TLS

Give it a few seconds to re-register and see if it works. I tried on my GRP and it works flawlessly. I will try later tonight on my GXP2170 (in use right now).

I’m gonna try it, will report the result. Before, literally the same actions didn’t get it to work.

 

[Evolute IT]

I’m gonna try it, will report the result. Before, literally the same actions didn’t get it to work.

Sometimes it just takes a second try. The router might have leftover stale sessions so giving it more time might also help.

 

[B-7]

Interesting. At first the symptoms were the same, but then after a reboot it worked. Thanks for your help, I guess it all comes down to the socket resets.