Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

RV016 How to enable Port Forwarding + Firewall Access Rules

Hi,

I've got a SIP or VOIP server hosted in my network and I want to allow extensions who are outside of the network to register as 'local extensions'

 

I've forwarded ports:

5060   [Source WAN2]    [From ANY]     [TO 192.168.76.150]

10001 ~ 20000 [Source WAN2]    [From ANY]     [TO 192.168.76.150]

 

Permitted firewall services:

AllowVOIP UDP [5060]WAN2Any192.168.76.150 ~ 192.168.76.150Always
AllowVOIP UDP 2 [10000]WAN2Any192.168.76.150 ~ 192.168.76.150Always

 

 

Port checks says that port 5060 is still closed.

 

Similar settings for port 80 work fine.

 

ISP does not block the port 5060

5 REPLIES

Hi Mike,  First the

Hi Mike, 

 

First the configuration look ok and you tested already with port 80 , in that case please install wireshark on 192.168.76.150 and capture the traffic, if you cannot do it from this server by any reason please put another PC connected to RV and forward the SIP to the PC and run Wireshark 

 

If we can see on packet capture SIP message so there is no problem with the router

but if you cannot see them please capture the WAN interface if you have the possiblity like hub or switch with port mirroring and you can verify first if the SIP packet are coming to the WAN interface of the RV

 

Those test can confirm because the Port checks is very hard to verify port in UDP protocol 

 

Please share with us wireshark file we can help you with it 

 

Please rate this post or mark as answered to help other Cisco Customers

 

Greetings

Mehdi

Community Member

Wireshark file attached. I've

Wireshark file attached.

 

I've used SIP filters and identified that the packets are coming through i think.

See 401 authorization failure.

Hi Mike,yes the SIP packet

Hi Mike,

yes the SIP packet are coming to the LAN to your Voice Server but the voice server responding with 401 Unauthorized.

the Router is not blocking the SIP port

anyhow, 

I saw you are using AsteriskNow 11.13.0 and you have some softphone are registred locallyw with port 5062 and from External phone are sending to 5060 , this just what i'm seeing because i don't know the configuration on Asterisk, may this cause the problem

 

or we can check the SIP ALG option on RV042 on the browser https://IPaddress_of_rv016/f_general_hidden.htm

and please enable SIP ALG and test again, otherwhise please check the asterisk setting

Please rate this post or mark as answered to help other Cisco Customers

Thanks

Mehdi

Community Member

I enabled SIP ALG as you

I enabled SIP ALG as you suggested but is it possible there is an error blocking outgoing request?

Hi Mike, I don't think so

Hi Mike,

 

I don't think so because by default from LAN to WAN is allow all traffic of course if you don't have any rule created manually to block from LAN to WAN 

 

Regards

Mehdi

116
Views
0
Helpful
5
Replies
CreatePlease to create content