Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Issues resetting states

    Scheduled Pinned Locked Moved General pfSense Questions
    15 Posts 3 Posters 1.3k Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • provelsP Offline
      provels @jkalber
      last edited by

      @jkalber
      47fd656a-5259-4ce6-aa0a-4ffb31436923-image.png

      Peder

      MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
      BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

      J 1 Reply Last reply Reply Quote 1
      • J Offline
        jkalber @provels
        last edited by

        @provels I get that it happens but is it supposed to happen every single time I reset states? Does the GUI never refresh/load saying something like "states reset successfully" or something of that nature? I noticed that the RTP setting was set to 10000-20000 which were the previous "recommended" settings from Vitelity. I adjusted the RTP port range to 10000-36385 and went to reset the states but just want to confirm that they reset successfully. I could have sworn last time I did this, the browser eventually refresh/loaded with a message that the states were reset successfully. I'm having a weird issue with outbound calls - once the call connects (someone answers the phone on the other end) the call goes silent for my employees. This was previously fixed with setting the RTP port range from 10000-20000 to 10000-36385 but I always had to reset the states after I made that change.

        provelsP 1 Reply Last reply Reply Quote 0
        • provelsP Offline
          provels @jkalber
          last edited by

          @jkalber said in Issues resetting states:

          Does the GUI never refresh/load saying something like "states reset successfully" or something of that nature?

          Not in my experience.

          Monitor your live FW logs for all traffic for a selected phone's IP to see if you're blocking it somehow. Sounds like it may be switching to another range after call pickup. Not a VOIP expert. Hated VOIP when I had to maintain it.

          Peder

          MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
          BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

          J 1 Reply Last reply Reply Quote 1
          • J Offline
            jkalber @provels
            last edited by

            @provels Yeah - it can be a real pain in the butt to support and manage sometimes.

            1 Reply Last reply Reply Quote 0
            • J Offline
              jkalber
              last edited by

              So Vitelity believes I have an issue with the firewall and how it is handling port forwarding. Are there any experts here that might be able to help me out? I have all of our firewalls configured the same for RTP port forwarding, not sure if there is anywhere else that I can check to resolve this issue?

              From Vitelity: I believe I have identified the issue. I have uploaded a SIP ladder for your review. As I was capturing the call I could hear the called party answered and say hello a couple times and the calling party said they couldn't hear anything. I believe the issue is with your RTP ports. Your invite specifies that you want us to send RTP to 216.74.234.162 port 34502 in the SDP, but when you're sending us audio, you're sending it from port 12002. When we send you audio, we send it to 34502 as you requested. I confirmed this same behavior on multiple calls. My best guess is that it's an issue with how your firewall is handling the port forwarding.

              sip rtp screenshot.JPG

              provelsP S 2 Replies Last reply Reply Quote 0
              • provelsP Offline
                provels @jkalber
                last edited by

                @jkalber
                I remember we had issues with one-way audio, but too many years ago now. I'd probably make a couple LAN rules to monitor ALL traffic to/from a test phone's IP and also your phone server's IP, then monitor the FW logs dynamically and filter the logs for the related IPs and test, test, test. If that doesn't find it, move to the WAN. Sorry, best I can offer.

                Peder

                MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                1 Reply Last reply Reply Quote 1
                • S Offline
                  SteveITS Rebel Alliance @jkalber
                  last edited by

                  @jkalber said in Issues resetting states:

                  but when you're sending us audio, you're sending it from port 12002

                  That sounds like the NAT is changing the ports. You can give the phone a fixed IP and tell pfSense not to do that:

                  Navigate to “Firewall” > “NAT” > “Outbound”.

                  Set the type from automatic to “Hybrid” and press “Save”.

                  Now create a new “Mapping Rule” to set:
                  “Source” for the phone LAN IP, e.g. 192.168.3.155.
                  “Port or Range” - enable “Static Port”.

                  Move the rule to the first position in your “Mappings" table.

                  It probably depends on the phone and phone system? We host 3CX for clients and though only one has a phone using STUN we haven't had to do that for the phone. But it's necessary if the 3CX server is behind NAT.

                  Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                  When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
                  Upvote 👍 helpful posts!

                  J 1 Reply Last reply Reply Quote 1
                  • J Offline
                    jkalber @SteveITS
                    last edited by

                    @steveits Thanks for the recommendation Steve! So I already have the NAT mode set to Hybrid Outbound NAT just like every other site that I support. I haven't had to create any type of mapping rule to specify a phones static IP, thoughts?

                    Below is a screenshot of my current settings for NAT Outbound

                    NAT outbound.JPG

                    NAT entry1.JPG

                    NAT entry2.JPG

                    S 1 Reply Last reply Reply Quote 0
                    • S Offline
                      SteveITS Rebel Alliance @jkalber
                      last edited by

                      @jkalber That's saying all devices on your network using UDP get a translated port. If you check Static Port what happens? You might need to clear states for the phone or reboot the phone, if it doesn't work right away.

                      Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                      When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
                      Upvote 👍 helpful posts!

                      J 2 Replies Last reply Reply Quote 2
                      • J Offline
                        jkalber @SteveITS
                        last edited by

                        @steveits Are you referring to the check box that says Static Port right next to Port or Range which I currently have blank?

                        1 Reply Last reply Reply Quote 0
                        • J Offline
                          jkalber @SteveITS
                          last edited by

                          @steveits HOLY CRAP THAT WAS IT. Dude can you shoot me your venmo or zelle? I owe you a six pack at the very least.

                          S 1 Reply Last reply Reply Quote 0
                          • S Offline
                            SteveITS Rebel Alliance @jkalber
                            last edited by

                            @jkalber You're welcome. Just help someone else someday. :)

                            Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                            When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
                            Upvote 👍 helpful posts!

                            1 Reply Last reply Reply Quote 1
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.