Using Grandstream ATA HT801 with Telekom Magenta VOIP

[aeq]

Hi,
changed the isp to Telekom. I have a VDSL50 line. In front I am using a Draytek Vigor 166 with FullBridge Mode. The opnsense is dialing up with PPPOE.
I have created a seprate VLAN for the ATA Grandstream HT801.
I have configured port forward for the HT801 like this:

WAN   TCP/UDP   DTAGServers    *   WAN address   DTAGServers_Ports_TCP_UDP     192.XXXXX   DTAGServers_Ports_TCP_UDP     VOIP      
         
WAN   TCP   DTAGServers    *   WAN address   DTAGServers_Ports_TCP     192.XXXXX   DTAGServers_Ports_TCP     VOIP      
         
WAN   UDP   DTAGServers    *   WAN address   DTAGServers_Ports_UDP     192.XXXXX   DTAGServers_Ports_UDP     VOIP

The ports are copied from https://www.telekom.de/hilfe/internet-telefonie/telefonie/einstellungen-telefoniecenter/voice-over-ip?samChecked=true

On the VLAN for the HT801, everything is allowed to stun.t-online.de in and out

The big question is for me, how do I configure the HT801 to register to telekoms phoneline.

On FXS PORT:
Primary SIP Server:tel.t-online.de
Outbound Proxy: tel.t-online.de

NAT Traversal: STUN

SIP: User ID +49XXXXXXXXX
Authenicate ID: anonymous@t-online.de
PW: empty
Name: +49XXXXXXXXX

DNS Mode: A Record


Under Advanced:
STUN server is: stun.t-online.de

The rest is default.

At the moment I don't know where to search for wrong configuration.. in the opnsense or the grandstream.

The other thing is, I also found some information about the SIPProxy Plugin for opnsense, but I don't know if that something that could help in my situation.

Is there anybody else with this kind of config who could help here?!

[aeq]

Ok, I have got it working with stun. But only if I make an incoming call from outside to inside. I can hear and talk on both sides.
I have made this outging NAT Rule
   Interface   Source   Source Port   Destination   Destination Port   NAT Address   NAT Port   Static Port   Description      
         
      WAN   192.1XXXXXX0/32    *   *   *   Interface address   *   YES   VOIP

Firewall Rules allow everything from Grandstream to any in the first step.

On Grandstream:
FXS Port:
Primary SIP Server: tel.t-online.de
SIP Transport: UDP
NAT Traversal: Auto
SIP User ID: +49XXXXXXXX
Authenticate ID: anonymous@t-online.de
Authenicate Password: "TelekomPW from PPPOE"
DNS Mode: NAPTR/SRV
Enable SIP OPTIONS/NOTIFY Keep Alive: OPTIONS
SIP OPTIONS/NOTIFY Keep Alive Interval: 600

Preferred Vocoder:
choice 1 to 8: all G722

Forced Codec Feature all No and the last G722 Codec: Yes

Under Advanced Settings:
STUN server is: stun.t-online.de

My last problem: I can not  make an outgoing call from inside to outside....I just got fast beep beep beep

      

[cookiemonster]

I have a Grandstream  HT801 on its own VLAN and I'm in the UK, so the settings might not be of any help to you but these are the rules I have for it.
 
You don't need the block rule to 7443. I do it because I don't want to allow it to call the ACS server of the provider. But most users would want that. I happen to have a hand-written config for the device that we don't want to be changed.