Voip IAX Trunk - Reset States

[saxopete]

Hello,

Have a NAT rule working perfectly well for an inbound IAX / SIP trunk however it's seems to drop the trunk randomly and the only way to get it back up again is to reset the states on OPNSense to bring the trunk backup.

Any ideas?

[lfirewall1243]

Reduce the keep alive time for the trunk

[saxopete]

Thanks will take a look - strangely didn't have this issue with PFSense - will look into the trunks. Is there anything that can be done on the firewall side?

[saxopete]

Bump on this.

SIP provider says they can't lower the keep alive and was fine on the other firewall - I just prefer OPNSense. Is there away of disabling State Tracking on Port Forwards?

Thanks
Peter.

[priller]

On OPNsense, you could try  Firewall -> Settings -> Advanced -> Firewall Optimization "conservative".

You are saying IAX, then saying SIP.  Which is it?  They are different protocols.

How is this trunk registering with the provider?  (username/passwd?  Static IP Auth?)

If you are the one initiating the registration to the provider, then it's unlikely that port forward is even required.  Let the firewall open the connection upon initial registration and it will stay open if you send OPTIONS Keep Alive, appropriate Registration Interval (what you set can be overridden by the provider), etc.   

[saxopete]

Hello,

It's both IAX and SIP (IAX inter Office) and SIP for the main lines - without the forwards we end up with one way Audio.

I'll look at the setting you mention :-)

Sorry about confusion dealing with a 100 things at once you know how it is!

[lfirewall1243]

Bump on this.

SIP provider says they can't lower the keep alive and was fine on the other firewall - I just prefer OPNSense. Is there away of disabling State Tracking on Port Forwards?

Thanks
Peter.

You have to change it in your PBX not the provider has to change it


What PBX are you using

[lfirewall1243]

Hello,

It's both IAX and SIP (IAX inter Office) and SIP for the main lines - without the forwards we end up with one way Audio.

I'll look at the setting you mention :-)

Sorry about confusion dealing with a 100 things at once you know how it is!

It should work without Port forwardings
Calls NAT

[priller]

It's both IAX and SIP (IAX inter Office) and SIP for the main lines - without the forwards we end up with one way Audio.

I was referring to the IAX2 trunking protocol ( https://www.voip-info.org/iax/ ).  This works differently than SIP.  Some providers still offer IAX2 trunks.