Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Voip no audio

    Scheduled Pinned Locked Moved General pfSense Questions
    28 Posts 4 Posters 5.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • chpalmerC
      chpalmer
      last edited by

      What is the WAN address of your pfsense box? Public or private?

      Triggering snowflakes one by one..
      Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

      1 Reply Last reply Reply Quote 0
      • R
        rafamello @chpalmer
        last edited by

        @chpalmer said in Voip no audio:

        You are not double NAT'd are you? VOIP was not originally designed to be behind NAT when it first surfaced. NAT was hacked in later. Double NAT can be double trouble.
        Create a firewall rule allowing your PBX server to your clients behind your pfsense box.
        No port forward.. just the firewall rule.

        I have as rules both LAN and WAN for IP of IPBX that is in the Amazon.

        I have no port forwarding as it is external.

        Many articles say to configure outgoing NAT

        DaddyGoD 1 Reply Last reply Reply Quote 0
        • chpalmerC
          chpalmer
          last edited by

          But you seem to be avoiding the main questions.. Are you double NAT'd?

          Triggering snowflakes one by one..
          Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

          1 Reply Last reply Reply Quote 0
          • DaddyGoD
            DaddyGo @rafamello
            last edited by DaddyGo

            @rafamello

            @Stewart Stewart says it right

            if you have registration, ergo you have SIP initialization,
            so if there is no sound then the RTP ports will not pass...
            most VOIP devices have configurable RTP ports, look for something that is not a bumper and pass it through the NAT (port forward)

            @chpalmer "Are you double NAT'd?"

            and his question is also very important

            +++edit:
            as shown here:

            bad6f27d-5ea9-41cd-8bf0-baedb81a1b9a-image.png

            or
            (since SIP has NAT Traversal, the RTP not)

            https://voipstudio.com/blog/sip-nat-traversal/

            Cats bury it so they can't see it!
            (You know what I mean if you have a cat)

            1 Reply Last reply Reply Quote 0
            • S
              Stewart
              last edited by Stewart

              RTP faces 2 big problems: SIP ALG and NATting. SIP ALG was created to assist in allowing SIP to traverse networks properly by rewriting the ports in the headers. I've troubleshot countless VoIP problems and I've never, not once, seen SIP ALG do anything but break SIP. At this point it's almost like it becomes a selling point for ISPs. NATting is an issue in that the packets have internal and external IPs and ports listed in the info packets. If they get NATted more than once then those get jumbled. It's a terrible mess.

              Ultimately you must figure out these 3 things:

              1. Is your WAN a public IP or a private IP? If it's public then you're not being double NATted. If it's private then it is.
              2. Does the modem have any firewalling in place? Regardless of the rest of the stuff, having the firewall on can interfere.
              3. Is the modem performing SIP ALG? If so, it must be turned off.

              The step after that will probably be a Wireshark trace. Start capturing on the WAN, place a test call, hang up, stop the capture. Then you can view the VOIP info in Wireshark and see what's happening. Who is your SIP provider?

              @DaddyGo Is that a Grandstream inferface I see there? That looks an awful lot like the old GXW4108s I used to use.

              DaddyGoD R 2 Replies Last reply Reply Quote 0
              • R
                rafamello
                last edited by

                the company that "sold" the service configured ports 16000: 33000 for RTP.

                About duplicating NAT, I didn't understand.

                What I have is:

                ![0_1593456131058_Screenshot_1.png](Uploading 100%)

                1 Reply Last reply Reply Quote 0
                • DaddyGoD
                  DaddyGo @Stewart
                  last edited by

                  @Stewart said in Voip no audio:

                  Is that a Grandstream inferface I see there? That looks an awful lot like the old GXW4108s I used to use.

                  ok you won 😉
                  in some places in our radio studio we use these "beauties" Grandstream HT801 és 802, for older analog phones, as ATA
                  this is because the Cisco STA112 cannot operate from POE power

                  their GUI is evil, but otherwise I think they have been working without problems for 6 to 7 years...

                  Cats bury it so they can't see it!
                  (You know what I mean if you have a cat)

                  S 1 Reply Last reply Reply Quote 0
                  • S
                    Stewart @DaddyGo
                    last edited by

                    @DaddyGo I ran a ton of HT502s and never had a problem. The GXWs needed to be rebooted once or twice year but otherwise worked well. The Sipura/Linksys/Cisco SPA ATA models have been less reliable and cost a bit more. Towards the end of us using them they got a new GUI but I wasn't in them much after that so I'm not sure the difference. I don't think that the newer firmware had the yellow background with the orange headers, though, so that may help with the interface.

                    DaddyGoD 1 Reply Last reply Reply Quote 0
                    • S
                      Stewart
                      last edited by

                      @rafamello Can you re-upload? All I'm seeing is text showing "![0_1593456131058_Screenshot_1.png](Uploading 100%)"

                      R 1 Reply Last reply Reply Quote 0
                      • R
                        rafamello @Stewart
                        last edited by

                        @Stewart

                        1.Is your WAN a public IP or a private IP? If it's public then you're not being double NATted. If it's private then it is.

                        private
                        2.Does the modem have any firewalling in place? Regardless of the rest of the stuff, having the firewall on can interfere.

                        It is disabled
                        3.Is the modem performing SIP ALG? If so, it must be turned off.
                        It is disabled

                        chpalmerC DaddyGoD 2 Replies Last reply Reply Quote 0
                        • DaddyGoD
                          DaddyGo @Stewart
                          last edited by

                          @Stewart "he GXWs needed to be rebooted once or twice year but otherwise worked well."

                          now a built-in feature in the GUI for configurable reboot ... juppppijuhe
                          every two weeks on Sunday at dawn restart and work really well

                          Cats bury it so they can't see it!
                          (You know what I mean if you have a cat)

                          1 Reply Last reply Reply Quote 0
                          • chpalmerC
                            chpalmer @rafamello
                            last edited by

                            @rafamello said in Voip no audio:

                            private

                            Would it be possible for you to bridge your modem and get your public IP address on your WAN?

                            Triggering snowflakes one by one..
                            Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                            R 1 Reply Last reply Reply Quote 0
                            • DaddyGoD
                              DaddyGo @rafamello
                              last edited by

                              @rafamello

                              SIP makes it easier... to find his way, especially if you have STUNT in the system
                              RTP is not and if you have dual NAT then it sucks

                              Cats bury it so they can't see it!
                              (You know what I mean if you have a cat)

                              1 Reply Last reply Reply Quote 0
                              • R
                                rafamello @Stewart
                                last edited by

                                @Stewart NAT.png

                                DaddyGoD 1 Reply Last reply Reply Quote 0
                                • DaddyGoD
                                  DaddyGo @rafamello
                                  last edited by DaddyGo

                                  @rafamello

                                  listen to the good advice from @chpalmer :
                                  Would it be possible for you to bridge your modem and get your public IP address on your WAN?

                                  ++++edit:
                                  VOIP, behind dual-NAT can take several hours for even a seriously trained IT guy too

                                  Cats bury it so they can't see it!
                                  (You know what I mean if you have a cat)

                                  R 1 Reply Last reply Reply Quote 0
                                  • R
                                    rafamello @chpalmer
                                    last edited by

                                    @chpalmer said in Voip no audio:

                                    Would it be possible for you to bridge your modem and get your public IP address on your WAN?

                                    I am seeing another environment that has this configuration for me to test.

                                    1 Reply Last reply Reply Quote 0
                                    • R
                                      rafamello @DaddyGo
                                      last edited by

                                      @DaddyGo it's difficult, you will end up losing the customer.

                                      DaddyGoD 1 Reply Last reply Reply Quote 0
                                      • DaddyGoD
                                        DaddyGo @rafamello
                                        last edited by

                                        @rafamello

                                        do you write from Portugal or Brazil?

                                        Cats bury it so they can't see it!
                                        (You know what I mean if you have a cat)

                                        R 1 Reply Last reply Reply Quote 0
                                        • R
                                          rafamello @DaddyGo
                                          last edited by

                                          @DaddyGo

                                          Brasil

                                          DaddyGoD 1 Reply Last reply Reply Quote 0
                                          • R
                                            rafamello
                                            last edited by

                                            @Stewart said in Voip no audio:

                                            SIP ALG

                                            now with the public IP on the WAN the IPBX support is claiming that the internal IP arrives, I believe that I would now have to do a nat out ... I already have the image in the will it be correct?

                                            S 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.