Forwarding Asterisk

[IgorM]

How can I setup port forwarding on my router in order to access my asterisk server and make calls?

[brwainer]

Look up your router at https://portforward.com/router.htm or google “port forward (insert router type here)”. Also google “port forward asterisk” to find out what ports are needed.

[IgorM]

Just now, brwainer said:

Look up your router at https://portforward.com/router.htm

Also google “port forward asterisk” to find out what ports are needed.

I've already set up a lot of other ports on my router so that part if fine.

As far as googling it It was the first thing I've done but didn't find an option that worked 

[Jarsky]

So you have a static IP? You aren't on a CG-Nat connection right? 

Have you set nat=yes and your external IP and localnet subnet in the sip.conf? 

 

A quick check shows you should have these ports forwarded in your router:

4569 UDP - IAX/2

5060 UDP - SIP 

10000 - 20000 UDP - SIP RTP Media

 

What is actually failing? Can you not setup calls? You cant connect to the server remotely? 

[brwainer]

In addition to what @Jarsky said, if you are having issues with calls dropping almost immediately, your router may have a "SIP Helper" or "SIP ALG". These are meant to help in situations where the SIP server and client aren't NAT aware. However with Asterisk, this type of help is actually detrimental and messes up the SIP headers. Whether your router has this feature and where to turn it off depends on the model and sometimes the firmware version.

[IgorM]

8 hours ago, Jarsky said:

So you have a static IP? You aren't on a CG-Nat connection right? 

Have you set nat=yes and your external IP and localnet subnet in the sip.conf? 

 

A quick check shows you should have these ports forwarded in your router:

4569 UDP - IAX/2

5060 UDP - SIP 

10000 - 20000 UDP - SIP RTP Media

 

What is actually failing? Can you not setup calls? You cant connect to the server remotely? 

I have a dynamic Ip and a ddns domain. I'm using the ISP provided modem/router with some other ports forwarded already. What has worked sometimes only outside my network was to forward ports 5060 to 5080 and 10000 to 60000. But only sometimes and it doesn't work inside my network.

[IgorM]

8 hours ago, brwainer said:

In addition to what @Jarsky said, if you are having issues with calls dropping almost immediately, your router may have a "SIP Helper" or "SIP ALG". These are meant to help in situations where the SIP server and client aren't NAT aware. However with Asterisk, this type of help is actually detrimental and messes up the SIP headers. Whether your router has this feature and where to turn it off depends on the model and sometimes the firmware version.

It's a normal ISP modem/router so I believe it doesn't have this feature

[Jarsky]

22 minutes ago, IgorM said:

I have a dynamic Ip and a ddns domain. I'm using the ISP provided modem/router with some other ports forwarded already. What has worked sometimes only outside my network was to forward ports 5060 to 5080 and 10000 to 60000. But only sometimes and it doesn't work inside my network.

Sounds like asterisk configuration if it doesn't work inside your network? 

Router port forwarding has nothing to do with internal, its for firewall and nat translation from your external IP address to internal. 

[IgorM]

4 minutes ago, Jarsky said:

Sounds like asterisk configuration if it doesn't work inside your network? 

Router port forwarding has nothing to do with internal, its for firewall and nat translation from your external IP address to internal. 

No, it works inside my network when I use the asterisk server IP as a host on my sip client. The problem is when I use my ddns as a host, sometimes is works, and only via 4G. When I connect to my local network and use the ddns as a host on my sip client it doesn't work

[Jarsky]

Does it work if you use the external IP? Is it just when you try to use the ddns that it fails? 

[brwainer]

Failing to connect from inside the network when using the external IP of your router (either directly or via a hostname e.g. DDNS) means that your router doesn't have hairpin NAT enabled, or doesn't have that feature at all. Try some of your other (non-Asterisk/SIP) port forwards to see whether they work when using the external IP/hostname from inside the network.

[IgorM]

19 minutes ago, Jarsky said:

Does it work if you use the external IP? Is it just when you try to use the ddns that it fails? 

No, I tried to use the IP instead of the ddns but nothing

[IgorM]

4 minutes ago, brwainer said:

Failing to connect from inside the network when using the external IP of your router (either directly or via a hostname e.g. DDNS) means that your router doesn't have hairpin NAT enabled, or doesn't have that feature at all. Try some of your other (non-Asterisk/SIP) port forwards to see whether they work when using the external IP/hostname from inside the network.

Yes they have been working fine for months