Hi,
changed the isp to Telekom. I have a VDSL50 line. In front I am using a Draytek Vigor 166 with FullBridge Mode. The opnsense is dialing up with PPPOE.
I have created a seprate VLAN for the ATA Grandstream HT801.
I have configured port forward for the HT801 like this:
WAN TCP/UDP DTAGServers * WAN address DTAGServers_Ports_TCP_UDP 192.XXXXX DTAGServers_Ports_TCP_UDP VOIP
WAN TCP DTAGServers * WAN address DTAGServers_Ports_TCP 192.XXXXX DTAGServers_Ports_TCP VOIP
WAN UDP DTAGServers * WAN address DTAGServers_Ports_UDP 192.XXXXX DTAGServers_Ports_UDP VOIP
The ports are copied from https://www.telekom.de/hilfe/internet-telefonie/telefonie/einstellungen-telefoniecenter/voice-over-ip?samChecked=true
On the VLAN for the HT801, everything is allowed to stun.t-online.de in and out
The big question is for me, how do I configure the HT801 to register to telekoms phoneline.
On FXS PORT:
Primary SIP Server:tel.t-online.de
Outbound Proxy: tel.t-online.de
NAT Traversal: STUN
SIP: User ID +49XXXXXXXXX
Authenicate ID: anonymous@t-online.de
PW: empty
Name: +49XXXXXXXXX
DNS Mode: A Record
Under Advanced:
STUN server is: stun.t-online.de
The rest is default.
At the moment I don't know where to search for wrong configuration.. in the opnsense or the grandstream.
The other thing is, I also found some information about the SIPProxy Plugin for opnsense, but I don't know if that something that could help in my situation.
Is there anybody else with this kind of config who could help here?!
Ok, I have got it working with stun. But only if I make an incoming call from outside to inside. I can hear and talk on both sides.
I have made this outging NAT Rule
Interface Source Source Port Destination Destination Port NAT Address NAT Port Static Port Description
WAN 192.1XXXXXX0/32 * * * Interface address * YES VOIP
Firewall Rules allow everything from Grandstream to any in the first step.
On Grandstream:
FXS Port:
Primary SIP Server: tel.t-online.de
SIP Transport: UDP
NAT Traversal: Auto
SIP User ID: +49XXXXXXXX
Authenticate ID: anonymous@t-online.de
Authenicate Password: "TelekomPW from PPPOE"
DNS Mode: NAPTR/SRV
Enable SIP OPTIONS/NOTIFY Keep Alive: OPTIONS
SIP OPTIONS/NOTIFY Keep Alive Interval: 600
Preferred Vocoder:
choice 1 to 8: all G722
Forced Codec Feature all No and the last G722 Codec: Yes
Under Advanced Settings:
STUN server is: stun.t-online.de
My last problem: I can not make an outgoing call from inside to outside....I just got fast beep beep beep
I have a Grandstream HT801 on its own VLAN and I'm in the UK, so the settings might not be of any help to you but these are the rules I have for it.
You don't need the block rule to 7443. I do it because I don't want to allow it to call the ACS server of the provider. But most users would want that. I happen to have a hand-written config for the device that we don't want to be changed.