PJSIP endpoints register momentarily, then drop off as Unreachable. SNGREP shows all inbound packets to Asterisk flowing correctly, but Asterisk not sending and responses to those packets. All REGISTER, NOTIFY, OPTIONS just fall on deaf ears. However, outbound REGISTER packets from Asterisk to trunk providers complete successfully, so Asterisk can communicate out.
A test device in my office seems not to encounter this problem, only the customer’s site. But the internet is up and fast, and I was actually on-site for a different issue when the problem started. No new router, switch, config changes, etc…
This smacks of firewall, since SNGREP can see what’s happening on the ethernet port (since it’s in promiscuous mode) and the program can’t (because the firewall is behind promiscuous mode). To double check, look at the /var/log/asterisk/full log and see if you see anything in there about incoming traffic from that site.
Not really, asterisk has been told that to expect that ‘contact’ to reappear because you have it programmed, when and if it does it should reply to the OPTION it will send to the ‘last known’ address , if you don’t expect them to reappear, delete them. If you do, get the network/firewalls/routing/NAT fixed and make sure they are plugged in and all will be good again after they re-register
The phones are behind NAT. Lets use 101 as example (I pasted 102 by mistake).
The 3 devices registered and Asterisk accepted the registration. But then look at the ports asterisk is sending to - 3 of them are correct but the other 4 are not. There are stale entries that may be causing Asterisk to think the devices have timed out.
Still waiting, same issue, about 4 hours since beginning of outage.
Doesn’t seem like waiting removes the rogue entries. I’m not sure anyway if that’s the source of my problem.
If they are not registering after 4 hours you have a problem , there is no point waiting for them much past the re-register timeout (usually 120 seconds) you probably have an underlying network/routing problem, but with sngrep you can drill down and possibly identify the culprit by any IP rewrites.
They reregister, then drop to Unreachable… probably because outbound Options are not coming back.
I’m beginning to suspect something like SIP ALG, but like I said it was working and suddenly stopped.