[Xen-users] Re: Please share your asterisk domU configurations ( config file, firewalling, etc)

["Christopher Isip" <cmisip@xxxxxxxxx>]

On Sat, May 17, 2008 at 10:24 AM, Christopher Isip <cmisip@xxxxxxxxx> wrote:

I cant seem to be able to get an Asteisk domU to work for anonymous inbound calls.  ( Have not tested yet for external sip calls from registered clients)  It is not a freepbx issue, but rather some routing issue particular to a xen setup. Outbound calls work fine.


Scenarios:

1. The asterisk domU can answer calls with 2 way audio if I use another machine on the lan as a linux router/gateway forwarding to the domU.

2. The asterisk domU can answer calls with 1 way audio if I use the netgear router as the gateway port forwarding to the domU.

3. The asterisk domU cannot answer calls If it is assigned a PCI card and a vif interface, basically turning it into a firewall router.  I would have assumed that eliminating NAT by using this config would work the best.

4. The asterisk domU cannot answer calls if it has a single vif interface and another firewall domU  is portforwarding to it.

IP masquerading works in all scenarios and firewalls have been cleared in the asterisk domU.  I have tried iptables to route packets to the asterisk domU as well as shorewall with no luck.  The fact that the vif is part of a bridge is probably the reason its not working.  

I have not been able to configure dom0 as a router yet to route sip calls to the asterisk domU.  I have to look into this yet.  The fact that xend renames the bridge to eth0 complicates matters as shorewall is complaining about the peth0 interface if I designate that in /etc/shorewall/interfaces.

My preferred scenario is to have a singe vif interface to an asterisk domU and have another firewall domU port forward to it.  If it is not possible,  then setup dom0 as the router.  If not, that then purchase a router that can route with 2 way audio to the asterisk domU.

I have thought about completely removing the vif interface from the asterisk domU and assigning it a physical nic to connect to the netgear router.  I will try that next to see if it fixes the 1 way audio problem.

Any help is appreciated.

Thanks
Chris

Duh!  Duh! Duh!  Duh! to the nth power.

I managed to get scenario 3 up and running.  The issue was not routing at all.  I copied my update dyndns script from the older system and didn't realize that the interface has changed in the new xenified system. Thus it was registering my internal ip with dyndns.  No wonder anonymous calls didn't work.  Since I have the external interface and the vif in the Asterisk domU, the NAT issue went away and i have 2 way audio.

Cheers,

Chris

 

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users