Freeswitch Session Manager Firewall Issue
Normally when we connect FS to SM we use default UDP 5060.
It seems that although the initial sip
invite from FS to SM is done on the configured port of 5060, as the call is established for longer periods, FS would eventually start it’s RTP traffic on a
different port range. Once FS started to use these ports to initiate SIP
messages, SM would then reply back to FS on the port that FS started to use to
communicate on. Since the firewall only really cares about the destination port
and not the originating port, these messages were making it to SM without
issue. But since SM started to communicate back to FS on the new RTP port, the
firewall rule would no longer allow this traffic. So all SIP messages would
make it to SM but no messages would make it back from SM to FS.
Normally there
aren’t firewalls in the same DC between FS and SM. But if you do run into this,
here are the steps you will need to take. In order to fix it.
- Go into the
autoload_configs.xml file in FS in the below location and edit the file
using vi or some other tool
- Find the RTP port range
section of the file and uncomment the fields. I went ahead and used a port
range that I saw the FS server using 10000 thru 16000. See two screen
shots below
- Next you can restart the
FS server and then provid the UDP port range to the Firewall folks.
Before:
After:
First screen shot below shows how FS (.127) is initiating
traffic to SM (.41) on 12865. Second screen shot shows how SM comes back to FS
on that same port.
Related Articles
Common Issue with Calls not showing in CT Suite Web Client
The issue behaves in the following way. User will get a call and it will be ringing at their hard phone but the call will not show in the CT Suite Web Client. The issue seems to be on the Avaya AES side where it stops sending CT Suite events related ...
Common Issue with Calls not showing in CT Suite Web Client
The issue behaves in the following way. User will get a call and it will be ringing at their hard phone but the call will not show in the CT Suite Web Client. The issue seems to be on the Avaya AES side where it stops sending CT Suite events related ...
Issue when taking Snapshots of App Servers
Issue When a customer takes a snapshot of the windows servers, it can cause network partitions to occur between the RMQ nodes. Normally snapshots are taken to prepare for an upgrade or change in the system, so they don't happen all the time, but when ...
Chrome Throttling - Browser Throttling - Issue with Web Client Getting Disconnected from Web Socket
Problem Agent screen freezing, or turning blank after some time of being idle OR Agent seeing "The Device<extension#> is currently out of service" when an agent has been idle for more than 5 minutes. Other signs of throttling is Agent is unable to ...
SIP endpoints/extensions not being monitored by the AES
Issue SIP endpoints/extensions that are being monitored by the AES. Resolution Make sure to make this change in System Manager in order for CT Suite to be able to monitor the extensions. 1. Log into System Manager, then select Communication Manager ...