Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SIP Not Working Behind Pfsense

    Scheduled Pinned Locked Moved Firewalling
    20 Posts 4 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      Janiboy
      last edited by

      Thanks for the replies,

      Sorry the provider wont give any details, because they don't want to loss their profit on the cisco router because every month we are billed.

      i only have the IP on that cisco firewall.
      IG0 - 10.200.94.182 /30 going to their modem
      IG1 - 192.168.1.1/24

      but i will try ask them again if they can provide it thanks.

      1 Reply Last reply Reply Quote 0
      • J
        Janiboy @Derelict
        last edited by

        @derelict @bingo600 i will get back to you guys once i have an update on our ISP side. Thanks

        1 Reply Last reply Reply Quote 0
        • chpalmerC
          chpalmer @Janiboy
          last edited by

          @janiboy said in SIP Not Working Behind Pfsense:

          but i dont know how to Set static mapping in Pfsense .

          I have several pfSense implementations with VOIP phones and other SIP devices behind. Generally these days most VOIP providers do not need static port but there are one or two that do.

          https://docs.netgate.com/pfsense/en/latest/nat/outbound.html#static-port

          Triggering snowflakes one by one..
          Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

          J 1 Reply Last reply Reply Quote 1
          • J
            Janiboy @chpalmer
            last edited by

            @chpalmer said in SIP Not Working Behind Pfsense:

            https://docs.netgate.com/pfsense/en/latest/nat/outbound.html#static-port

            Thanks for the reply sir,

            Is there any video or image that I can walk through this process, sorry because im new to it.

            chpalmerC 1 Reply Last reply Reply Quote 0
            • chpalmerC
              chpalmer @Janiboy
              last edited by

              @janiboy

              Go to /firewall_nat_out.php ( http://"yourfirewall"/firewall_nat_out.php )

              or another way to describe..

              Firewall / NAT / Outbound

              ... Ill get a screen capture momentarily..

              Triggering snowflakes one by one..
              Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

              chpalmerC 1 Reply Last reply Reply Quote 1
              • chpalmerC
                chpalmer @chpalmer
                last edited by

                Go down to mappings and then "add"..

                Triggering snowflakes one by one..
                Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                chpalmerC 1 Reply Last reply Reply Quote 1
                • chpalmerC
                  chpalmer @chpalmer
                  last edited by

                  The local address shown would be my SIP device/client machine. If it is a machine doing multiple tasks then adding the SIP port would be prudent.

                  staticport.jpg

                  Triggering snowflakes one by one..
                  Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                  chpalmerC 1 Reply Last reply Reply Quote 1
                  • chpalmerC
                    chpalmer @chpalmer
                    last edited by

                    "Outbound NAT Mode" then should be "Hybrid".

                    Triggering snowflakes one by one..
                    Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                    J 1 Reply Last reply Reply Quote 1
                    • J
                      Janiboy @chpalmer
                      last edited by

                      @chpalmerscreencapture-210-4-100-242-11443-firewall-nat-out-edit-php-2021-03-24-11_19_54.png

                      i got this on my side, my panasonic NS300 ip 192.168.1.102 , my WAN is 10.200.94.182.

                      witch ip should i put on the source?

                      thanks

                      chpalmerC bingo600B 2 Replies Last reply Reply Quote 0
                      • chpalmerC
                        chpalmer @Janiboy
                        last edited by

                        @janiboy said in SIP Not Working Behind Pfsense:

                        my panasonic NS300 ip 192.168.1.102 , my WAN is 10.200.94.182.

                        witch ip should i put on the source?

                        "SIP device/client machine."

                        The LAN device at 192.168.1.102

                        Triggering snowflakes one by one..
                        Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                        J 1 Reply Last reply Reply Quote 1
                        • J
                          Janiboy @chpalmer
                          last edited by

                          @chpalmer no need to add anything ? ok i will give it a try and get back to you thanks @chpalmer

                          chpalmerC 1 Reply Last reply Reply Quote 0
                          • J
                            Janiboy @Derelict
                            last edited by

                            @derelict Talked to SIP provider, They know about the config maybe non technical person, by the way sip cisco router model is Cisco 4321.

                            1 Reply Last reply Reply Quote 0
                            • chpalmerC
                              chpalmer @Janiboy
                              last edited by

                              @janiboy said in SIP Not Working Behind Pfsense:

                              no need to add anything ?

                              ???

                              The LAN device at 192.168.1.102

                              You need to add your client device as the "source".

                              Triggering snowflakes one by one..
                              Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                              1 Reply Last reply Reply Quote 0
                              • bingo600B
                                bingo600 @Janiboy
                                last edited by

                                @janiboy said in SIP Not Working Behind Pfsense:

                                i got this on my side, my panasonic NS300 ip 192.168.1.102 , my WAN is 10.200.94.182.

                                Please note that even if your "Wan is 10.200.94.182" , that is not your public ip address (aka the ip address you are seen with on the internet).

                                Somewhere between your "Wan" and the internet someone is Natting your 10.200.94.182 , to a non RFC1918 ip address.

                                You could (from a browser behind your WAN) , go to this site : https://www.myip.com/

                                And it will show what IP you currently are seen as on the internet.

                                That would also be the ip address that external sip devices (phones/servers) should reply to.

                                /Bingo

                                If you find my answer useful - Please give the post a šŸ‘ - "thumbs up"

                                pfSense+ 23.05.1 (ZFS)

                                QOTOM-Q355G4 Quad Lan.
                                CPUĀ  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
                                LANĀ  : 4 x Intel 211, DiskĀ  : 240G SAMSUNG MZ7L3240HCHQ SSD

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.