[Spce-user] Setting advertised-ip breaks calls for internal network (vlans)

B Davis bjd503 at gmail.com
Fri Aug 9 16:16:26 EDT 2019


I have setup the network as shown below.


                                      Firewall
                   Public Internet      +---+  Internal LAN (VLANS)
                                        |   |
                                        |   |
                     sip.services.com 1:1 NAT                         +-----------+
                                        |   |<------------------------+ SIPWISE  1|
+-------+                               |   |                         +-----------+
|  PBX 1+-------------------------------+   |
+-------+                               |   |
                                        |   |                         +-----------+
                                        |   +<------------------------+ VLAN PBX 2|
                                        |   |                         +-----------+
                                        |   |
                                        |   |                         +-----------+
+-------+                               |   +<------------------------+ VLAN PBX 3|
|  PBX 1+-------------------------------+   |                         +-----------+
+-------+                               |   |
                                        |   |                         +-----------+
                                        |   <-------------------------+ VLAN PBX 4|
                                        |   |                         +-----------+
+-------+                               |   |
|  PBX 1+-------------------------------+   |                         +-----------+
+-------+                               |   +<------------------------+ VLAN PBX 5|
                                        |   |                         +-----------+
                                        |   |
                                        |   |
                                        |   |
                                        +---+


All of the ‘PBX’ systems on the internal LAN (VLANS) are routed traffic (no nat being performed by the firewall)
Internal LAN resolves the domain sip.services.com <http://sip.services.com/> to the internal IP of the SIPwise server to avoid firewall 
hair-pinning. 

If we do not set adverse-ip then internal PBX, can make outbound calls just fine.
However external PBX’s can not. 

Setting the advertise-ip allows external PBX systems to operate correctly but breaks calls for internal LAN (VLAN).


The Sipwise server is operating as a VM. It has 1 Nic eth0.
The firewall (pfSense) performs a 1:1 NAS from the public IP address to the SIPwise server.

What I think is happening here is that when advertise-ip is set, it is treating the calls on the internal VLAN as remote
connections and attempting to handle ‘NAT’ on them. 

Is there a way to instruct sip wise/kamailio to *NOT* apply the advertised-ip for specific networks (e.g. my vlans)?

Thank you,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/mailman/private/spce-user_lists.sipwise.com/attachments/20190809/34a91f59/attachment.html>


More information about the Spce-user mailing list