Re: [MT-AU Public] Public Digest, Vol 5, Issue 23
Hi again, Stavros - no NAT traversal Mark - the PABX is a Panasonic NCP500. The remote phones are cordless SIP extensions and an IP-PT handset. The RB2011's are running 6.17. While on the road today, I was wondering where the best place would be to place a wireshark box. Did you solve your issue Mark? TIA, Dave. On 26/07/2014 12:00 PM, <public-request@talk.mikrotik.com.au> wrote:
Send Public mailing list submissions to public@talk.mikrotik.com.au
To subscribe or unsubscribe via the World Wide Web, visit
http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
or, via email, send a message with subject or body 'help' to public-request@talk.mikrotik.com.au
You can reach the person managing the list at public-owner@talk.mikrotik.com.au
When replying, please edit your Subject line so it is more specific than "Re: Contents of Public digest..."
Today's Topics:
1. voip over ipsec tunnel (David Ryan) 2. Re: voip over ipsec tunnel (Mark Voevodin) 3. Re: voip over ipsec tunnel (Stavros Patiniotis)
----------------------------------------------------------------------
Message: 1 Date: Sat, 26 Jul 2014 10:28:35 +1000 From: David Ryan <dsryan@rjs.com.au> To: public@talk.mikrotik.com.au Subject: [MT-AU Public] voip over ipsec tunnel Message-ID: < CANNabwKXGc9-eWcMT6sbUE4SRkgyK_6f_UmSki4k3QurXJ7EKw@mail.gmail.com> Content-Type: text/plain; charset=UTF-8
Howdy all,
I have just installed a site to site ipsec tunnel as per the example on the Tik wiki.
At one end I have a PBX that has it's own proprietary IP protocol (RTP based) and also has SIP extensions. The remote extensions connect over the ipsec tunnel to the PBX (routed, not bridged).
All works well basically, except that on two occasions during testing, I lost voice completely at the non-PBX end for about 5-10 seconds, after which it restored by itself. The other end could hear me fine but I could not hear anything. I was able to look at the LCD (there is a RB2011UAS at each end) when this occurred and I could see a drop in the receive data down to zero while the transmit was still at around 100kbps.
I have not configured any QoS at this stage. Keep in mind that pretty much nothing else was using the tunnel at the time. The WAN link is 12/4Mbps at both ends.
Does anyone have any clues as to why this is happening?
Cheers, Dave.
-- David Ryan - 0402 054 426 RJS Communications dsryan@rjs.com.au MTCNA, MTCWE, MTCRE
------------------------------
Message: 2 Date: Sat, 26 Jul 2014 10:54:13 +1000 From: Mark Voevodin <markv@nitel.com.au> To: MikroTik Australia Public List <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] voip over ipsec tunnel Message-ID: <CA7C9070-CE4C-4956-B81A-D4F719AE42E8@nitel.com.au> Content-Type: text/plain; charset=us-ascii
Hi Dave,
We have a similar setup, but between 2 RB450G's. They are still running early 4.9 software (will upgrade one day soon), and we get one way no speech on long time calls, over 10 minutes. Lasts for about 5-10 seconds, then comes back. This affects the non PABX end, PABX is a NEC SV8100 using net link across the tunnel. Phones are TDM to remote shelf, so only RTP is between PABX and remote shelf connected via net link.
What version software are you running in the RB2011's? What PABX (if not NEC, that would rule out a similar PABX problem)?
Regards
Mark Voevodin 0410520070 The Communications Company markv@commsco.com.au Nitel Software markv@nitel.com.au MTCNA
Sent from my iPhone
On 26 Jul 2014, at 10:28 am, David Ryan <dsryan@rjs.com.au> wrote:
Howdy all,
I have just installed a site to site ipsec tunnel as per the example on the Tik wiki.
At one end I have a PBX that has it's own proprietary IP protocol (RTP based) and also has SIP extensions. The remote extensions connect over the ipsec tunnel to the PBX (routed, not bridged).
All works well basically, except that on two occasions during testing, I lost voice completely at the non-PBX end for about 5-10 seconds, after which it restored by itself. The other end could hear me fine but I could not hear anything. I was able to look at the LCD (there is a RB2011UAS at each end) when this occurred and I could see a drop in the receive data down to zero while the transmit was still at around 100kbps.
I have not configured any QoS at this stage. Keep in mind that pretty much nothing else was using the tunnel at the time. The WAN link is 12/4Mbps at both ends.
Does anyone have any clues as to why this is happening?
Cheers, Dave.
-- David Ryan - 0402 054 426 RJS Communications dsryan@rjs.com.au MTCNA, MTCWE, MTCRE _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
------------------------------
Message: 3 Date: Sat, 26 Jul 2014 11:08:17 +0930 From: "Stavros Patiniotis" <stavros@staff.esc.net.au> To: "'MikroTik Australia Public List'" <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] voip over ipsec tunnel Message-ID: <33a701cfa872$465f9100$d31eb300$@staff.esc.net.au> Content-Type: text/plain; charset="us-ascii"
Hi,
Are you using NAT across the tunnel?
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of David Ryan Sent: Saturday, 26 July 2014 9:59 AM To: public@talk.mikrotik.com.au Subject: [MT-AU Public] voip over ipsec tunnel
Howdy all,
I have just installed a site to site ipsec tunnel as per the example on the Tik wiki.
At one end I have a PBX that has it's own proprietary IP protocol (RTP based) and also has SIP extensions. The remote extensions connect over the ipsec tunnel to the PBX (routed, not bridged).
All works well basically, except that on two occasions during testing, I lost voice completely at the non-PBX end for about 5-10 seconds, after which it restored by itself. The other end could hear me fine but I could not hear anything. I was able to look at the LCD (there is a RB2011UAS at each end) when this occurred and I could see a drop in the receive data down to zero while the transmit was still at around 100kbps.
I have not configured any QoS at this stage. Keep in mind that pretty much nothing else was using the tunnel at the time. The WAN link is 12/4Mbps at both ends.
Does anyone have any clues as to why this is happening?
Cheers, Dave.
-- David Ryan - 0402 054 426 RJS Communications dsryan@rjs.com.au MTCNA, MTCWE, MTCRE _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
------------------------------
Subject: Digest Footer
_______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
------------------------------
End of Public Digest, Vol 5, Issue 23 *************************************
David, No, luckily we don't ring too often to our Brisbane office for more than 5 minutes at a time, so not a pressing issue. Your PABX being Panasonic sort of indicates it is not a PABX issue, but a Mikrotik one. What port on the RB2011 are you connecting WAN to, as last port can exhibit strange things apparently. Also re 6.17 , the changelog for 6.18RC4 mentions fixes for IPSec issues amongst others. Might pay to upgrade to the beta, just to see if that fixes the problem. Mark Voevodin Sent from my iPhone
On 26 Jul 2014, at 3:47 pm, David Ryan <dsryan@rjs.com.au> wrote:
Hi again,
Stavros - no NAT traversal
Mark - the PABX is a Panasonic NCP500. The remote phones are cordless SIP extensions and an IP-PT handset. The RB2011's are running 6.17.
While on the road today, I was wondering where the best place would be to place a wireshark box.
Did you solve your issue Mark?
TIA, Dave.
On 26/07/2014 12:00 PM, <public-request@talk.mikrotik.com.au> wrote:
Send Public mailing list submissions to public@talk.mikrotik.com.au
To subscribe or unsubscribe via the World Wide Web, visit
http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
or, via email, send a message with subject or body 'help' to public-request@talk.mikrotik.com.au
You can reach the person managing the list at public-owner@talk.mikrotik.com.au
When replying, please edit your Subject line so it is more specific than "Re: Contents of Public digest..."
Today's Topics:
1. voip over ipsec tunnel (David Ryan) 2. Re: voip over ipsec tunnel (Mark Voevodin) 3. Re: voip over ipsec tunnel (Stavros Patiniotis)
----------------------------------------------------------------------
Message: 1 Date: Sat, 26 Jul 2014 10:28:35 +1000 From: David Ryan <dsryan@rjs.com.au> To: public@talk.mikrotik.com.au Subject: [MT-AU Public] voip over ipsec tunnel Message-ID: < CANNabwKXGc9-eWcMT6sbUE4SRkgyK_6f_UmSki4k3QurXJ7EKw@mail.gmail.com> Content-Type: text/plain; charset=UTF-8
Howdy all,
I have just installed a site to site ipsec tunnel as per the example on the Tik wiki.
At one end I have a PBX that has it's own proprietary IP protocol (RTP based) and also has SIP extensions. The remote extensions connect over the ipsec tunnel to the PBX (routed, not bridged).
All works well basically, except that on two occasions during testing, I lost voice completely at the non-PBX end for about 5-10 seconds, after which it restored by itself. The other end could hear me fine but I could not hear anything. I was able to look at the LCD (there is a RB2011UAS at each end) when this occurred and I could see a drop in the receive data down to zero while the transmit was still at around 100kbps.
I have not configured any QoS at this stage. Keep in mind that pretty much nothing else was using the tunnel at the time. The WAN link is 12/4Mbps at both ends.
Does anyone have any clues as to why this is happening?
Cheers, Dave.
-- David Ryan - 0402 054 426 RJS Communications dsryan@rjs.com.au MTCNA, MTCWE, MTCRE
------------------------------
Message: 2 Date: Sat, 26 Jul 2014 10:54:13 +1000 From: Mark Voevodin <markv@nitel.com.au> To: MikroTik Australia Public List <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] voip over ipsec tunnel Message-ID: <CA7C9070-CE4C-4956-B81A-D4F719AE42E8@nitel.com.au> Content-Type: text/plain; charset=us-ascii
Hi Dave,
We have a similar setup, but between 2 RB450G's. They are still running early 4.9 software (will upgrade one day soon), and we get one way no speech on long time calls, over 10 minutes. Lasts for about 5-10 seconds, then comes back. This affects the non PABX end, PABX is a NEC SV8100 using net link across the tunnel. Phones are TDM to remote shelf, so only RTP is between PABX and remote shelf connected via net link.
What version software are you running in the RB2011's? What PABX (if not NEC, that would rule out a similar PABX problem)?
Regards
Mark Voevodin 0410520070 The Communications Company markv@commsco.com.au Nitel Software markv@nitel.com.au MTCNA
Sent from my iPhone
On 26 Jul 2014, at 10:28 am, David Ryan <dsryan@rjs.com.au> wrote:
Howdy all,
I have just installed a site to site ipsec tunnel as per the example on the Tik wiki.
At one end I have a PBX that has it's own proprietary IP protocol (RTP based) and also has SIP extensions. The remote extensions connect over the ipsec tunnel to the PBX (routed, not bridged).
All works well basically, except that on two occasions during testing, I lost voice completely at the non-PBX end for about 5-10 seconds, after which it restored by itself. The other end could hear me fine but I could not hear anything. I was able to look at the LCD (there is a RB2011UAS at each end) when this occurred and I could see a drop in the receive data down to zero while the transmit was still at around 100kbps.
I have not configured any QoS at this stage. Keep in mind that pretty much nothing else was using the tunnel at the time. The WAN link is 12/4Mbps at both ends.
Does anyone have any clues as to why this is happening?
Cheers, Dave.
-- David Ryan - 0402 054 426 RJS Communications dsryan@rjs.com.au MTCNA, MTCWE, MTCRE _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
------------------------------
Message: 3 Date: Sat, 26 Jul 2014 11:08:17 +0930 From: "Stavros Patiniotis" <stavros@staff.esc.net.au> To: "'MikroTik Australia Public List'" <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] voip over ipsec tunnel Message-ID: <33a701cfa872$465f9100$d31eb300$@staff.esc.net.au> Content-Type: text/plain; charset="us-ascii"
Hi,
Are you using NAT across the tunnel?
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of David Ryan Sent: Saturday, 26 July 2014 9:59 AM To: public@talk.mikrotik.com.au Subject: [MT-AU Public] voip over ipsec tunnel
Howdy all,
I have just installed a site to site ipsec tunnel as per the example on the Tik wiki.
At one end I have a PBX that has it's own proprietary IP protocol (RTP based) and also has SIP extensions. The remote extensions connect over the ipsec tunnel to the PBX (routed, not bridged).
All works well basically, except that on two occasions during testing, I lost voice completely at the non-PBX end for about 5-10 seconds, after which it restored by itself. The other end could hear me fine but I could not hear anything. I was able to look at the LCD (there is a RB2011UAS at each end) when this occurred and I could see a drop in the receive data down to zero while the transmit was still at around 100kbps.
I have not configured any QoS at this stage. Keep in mind that pretty much nothing else was using the tunnel at the time. The WAN link is 12/4Mbps at both ends.
Does anyone have any clues as to why this is happening?
Cheers, Dave.
-- David Ryan - 0402 054 426 RJS Communications dsryan@rjs.com.au MTCNA, MTCWE, MTCRE _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
------------------------------
Subject: Digest Footer
_______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
------------------------------
End of Public Digest, Vol 5, Issue 23 *************************************
Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
participants (2)
-
David Ryan -
Mark Voevodin