Problem with green network traffic...any suggestions?

[McJerry]

Customer has a point-to-point fiber lan on 10.0.0.0/24 subnet between two locations.  At the main location, the fiber to ethernet connects to a 24 port switch.  The internet fiber to ethernet connects to the WAN port (Red) interface with static public IP on the EFW box.  The GREEN interface is assigned IP address 10.0.0.1/24  and connects to the 24 port switch.  All firewall rules and port forwarding rules work and customers at the remote location obtain IP addresses and browse the internet via the EFW box at the main location.

The problem is with the Esi phone system.  When I have the EFW box in place, the phone system stops working between the two locations.  There was a Linksys WRT160N router in place originally and I duplicated the port forwarding rules from the Linksys to the EFW box.  I've enable the necessary outgoing firewall port rules and I've gone as far as to disable the outgoing firewall on the EFW box and the phone system's UDP traffic simply isn't reaching either side.  The remote phone server has IP 10.0.0.33 and the local phone server has IP 10.0.0.32.  If I pull the EFW box out and put the Linksys WRT160N back in place, the phone system works as expected.

What could be causing this problem?  I need to figure this one out asap.

[compdoc]

What ports do the phones use, and are you using the sip
proxy?



------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[McJerry]

compdoc, I thought about that yesterday while the Esi technician was onsite and he wouldn't give me a straight answer.  He's being hush hush about the system and I'm having difficulty finding information about it.  Very few manuals I can find.  The ports I'm dealing with are TCP ports 59001 and 59002 and UDP ports 59160-59163.

Admittedly, I know little about SIP and such but is the UDP traffic subject to SIP proxy?

compdoc wrote:

What ports do the phones use, and are you using the sip
proxy?



------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Efw-user mailing list
[e-mail]
https://lists.sourceforge.net/lists/listinfo/efw-user

[Luca Giovenzana-2]

You can avoid using sip proxy but you must use 5060 and only 5060 for
outgoing registration.
If you are going to use a different destination port for your sip
provider it won't work because netfilter won't analyse the sip traffic
and won't be able to allow rtp traffic.

HTH

PS i recommend you consider purchasing Endian Enterprise for your
customer since it's supported ;)

Luca

> Date: Fri, 23 Oct 2009 17:28:35 -0700 (PDT)
> From: McJerry <bryanj0207@...>
> Subject: Re: [Efw-user] Problem with green network traffic...any
> suggestions?
> To: efw-user@...
> Message-ID: <26035003.post@...>
> Content-Type: text/plain; charset=us-ascii
>
>
> compdoc, I thought about that yesterday while the Esi technician was onsite
> and he wouldn't give me a straight answer.  He's being hush hush about the
> system and I'm having difficulty finding information about it.  Very few
> manuals I can find.  The ports I'm dealing with are TCP ports 59001 and
> 59002 and UDP ports 59160-59163.
>
> Admittedly, I know little about SIP and such but is the UDP traffic subject
> to SIP proxy?

--
:: e n d i a n
:: open source - open minds

:: luca giovenzana
:: phone [phone]  :: gpg key id 3B741128
:: http://www.endian.com  :: luca (AT) endian.com


------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[McJerry]

Update...

The ESi Phone system isn't primarily concerned with SIP port 5060 traffic that I can see.  The UDP ports involved are UDP 59002, and 59161-59163.  Once I turned QoS off in the phone system, everything began working as it should.  Each phone conversation is only streaming at 27k via UDP so I don't see QoS being an issue on this network at this point.

Is EFW 2.2 capable of reading the QoS packet tagging?

McJerry wrote:

Customer has a point-to-point fiber lan on 10.0.0.0/24 subnet between two locations.  At the main location, the fiber to ethernet connects to a 24 port switch.  The internet fiber to ethernet connects to the WAN port (Red) interface with static public IP on the EFW box.  The GREEN interface is assigned IP address 10.0.0.1/24  and connects to the 24 port switch.  All firewall rules and port forwarding rules work and customers at the remote location obtain IP addresses and browse the internet via the EFW box at the main location.

The problem is with the Esi phone system.  When I have the EFW box in place, the phone system stops working between the two locations.  There was a Linksys WRT160N router in place originally and I duplicated the port forwarding rules from the Linksys to the EFW box.  I've enable the necessary outgoing firewall port rules and I've gone as far as to disable the outgoing firewall on the EFW box and the phone system's UDP traffic simply isn't reaching either side.  The remote phone server has IP 10.0.0.33 and the local phone server has IP 10.0.0.32.  If I pull the EFW box out and put the Linksys WRT160N back in place, the phone system works as expected.

What could be causing this problem?  I need to figure this one out asap.