VoIP SIP registration

[fgsfdgfds]

Tried searches, google etc nothing helps... been at this for several days, almost decided that OPNsense and SIP don't work together.

I'm in the UK, just moved to fibre and been sent and ATA pre-configured.. ready to go.
I tried the ATA in a draytek router connected to the net elsewhere and the ATA works perfect.

Connect to the OPNsense network, SIP refuses to register.  Nothing at all.
tried the NAT static ports and conservative firewall settings... nothing (maybe have the NAT static port re-write settings wrong...?)
tried siproxd, Upnp, can't get that to work either.

Any help would be much appreciated, as I think I maybe faced with binning OPNsense and getting a draytek.... which I'd prefer not to do.
I'm not a network specialised, but I know my way round a fairly standard setup.
My OPNsense has multiple networks, VLANs, wireguard VPN, etc, bit considered there is a conflict somewhere...
Thanks for any help you can offer.
Chris

[bartjsmit]

Hi Chris,

I run FreePBX behind OPNsense with a trunk to aa.net.uk for VoIP.

SIP can be finicky but doable. I NAT 5060 TCP/UDP and UDP high ports (1024-65535) to the PBX from Andrews & Arnold public IP range.

Happy to compare notes 

Bart...

[fgsfdgfds]

is that all on the nat outboard ? or some on the port forward as well ?
My FTTP and SIP provider is Cerberus

I did wonder if I could do it via IPv6, but the phones don't seem to get an IPv6 address, but the PC s do.

on outbound I have
Interface    source (the phone)  source port     destination   NAT address          NAT port    Static port
WAN          192.168.0.55/32          *                      *               WAN address         *                     yes

Then on the rules WAN:
I have:

Protocol    source                                  port        destination            port
 IPv4 *       IP of SIP provider server      *            192.168.0.55          *


Chris

[bartjsmit]

is that all on the nat outboard ? or some on the port forward as well ?

Mine are port forwards. The outbound connection goes on the any/any outbound rule. I never got anywhere with VoIP on IPv6 either and just gave up.

Cerberus looks sound although A&A puts no Erlang limit on the trunk and ported the old copper number for £15.

[fgsfdgfds]

well, I don't understand that at all.

Cerberus asked if they could remote in and look at the firewall.
Was slightly nervous about this, but nothing I'd done could make it work...

But they deleted all the NAT outbound and port forwards I'd tried.
deleted firewalls rules on WAN associated with SIP (I had done)
changed NAT:outboard from hybrid to automatic

Then did a fiddle on their side (no idea what that was)
Then SIP registered, no issue...
Have not tested for the 1 way voice issue you can sometimes get.... yet
Not sure what fixed this really....
But thanks for your input and hats off to cerberus tech guy, he obviously knows a thing or 2