16
NAT Traversal Panasonic Communications Co.,Ltd Office Network Company Network SE Team 2008 Feb 25 th

NAT Traversal

  • Upload
    conley

  • View
    44

  • Download
    1

Embed Size (px)

DESCRIPTION

NAT Traversal. 2008 Feb 25 th. Panasonic Communications Co.,Ltd Office Network Company Network SE Team. Account info. Management site: It is used for checking the charge or choosing the phone services. CLIP: Calling Line Identification Presentation - PowerPoint PPT Presentation

Citation preview

Page 1: NAT Traversal

NAT Traversal

Panasonic Communications Co.,Ltd

Office Network Company

Network SE Team

2008 Feb 25th

Page 2: NAT Traversal

Account infoAccount info

VAD: Voice Activity Detection If it work correctly then voice packet traffic become reduced so it is good.But it rarely cause a trouble. Bad voice quality or call cut off.

STUN / SBC.Please refer the “Programming Manual for SIP”.

Management site: It is used for checking the charge or choosing the phone services.CLIP: Calling Line Identification PresentationCLIR: Calling Line Identification RestrictionStar code is a special code which provider support.In case of Bellshare (German provider) *67 is used for CLIR.When you call *67+area code + phone number then it become a CLIR call.

There are other way to stop Caller ID sending if provider support. Logging into the provider web site (using 05) and CLIP off.(Some provider permit user to change some setting on their management site.)

[ITSP Essential information]

1 Provider name

2 Provider type ISP or Carrier

3 Type of the network Closed / Open4 Provider URI http:// 5 Management site http://

  > Login ID

  > Login Password

6 Address (Country)

7 Area code

8 The method of an international call

[Service interface functionalities]

10 CLIP* Support

11 CLIR* Support

  Star Code for CLIP/CLIR

  WEB setting

12 FAX relay (T.38) Support

13 DTMF (RFC2833) Support

14 Hold Support

15 Transfer Support

16 Conference Support

17 DDI Support

18 VAD* Support

19 STUN Support

  > If yes then Server name

20 SBC (Session Border Controller) Support

[SIP Telephone Settings Essential information] <Server Settings>

30 Proxy Server <compulsory>

31 Proxy Server port

32 Registrar Server

33 Domain Name

<Account Settings 1>

40-1 SIP Account <compulsory>

41-1 Authentication ID <compulsory>

42-1 Authentication Password <compulsory>

43-1 Incoming Number <compulsory>

44-1 DDI Number

<Account Settings 2>

40-2 SIP Account <compulsory>

41-2 Authentication ID <compulsory>

42-2 Authentication Password <compulsory>

43-2 Incoming Number <compulsory>

44-2 DDI Number  <Codec Settings> 50 Codec  51 Packet Interval  52 VAD  53 DTMF relay  

Page 3: NAT Traversal

*NAT Traversal type*NAT Traversal type

SIP Service Provider

SIP Server STUN Server

SIP Service Provider

SIP Server

SIP Service Provider

SBC

SIP Server

*NAT: Network Address Translation

*SBC: Session Boarder Controller

STUN Method Fixed Global IP address Method SBC* Method

TDE

NAT Router

Local Area Network

Page 4: NAT Traversal

MediaServer

ProxyServer

Nat Off (SBC method)

SIP PhoneSIP Phone

WiresharkWireshark

L2 SwitchL2 Switch L2 SwitchL2 Switch

TDETDE

RouterRouterRouterRouter

192.168.2.9192.168.2.10

217.10.79.23 217.10.68.75 Media Server217.10.68.75

TDE192.168.2.10

Proxy Server217.10.79.23

TDE192.168.2.9

SBC

* SBC: Session Border Controller

61.199.255.184

DSL modemDSL modem

Page 5: NAT Traversal

Nat Off (SBC method): outgoing call

TDE192.168.2.10

Router61.199.255.184

TDE192.168.2.9

NAPT

LAN sideLAN side WAN sideWAN side

①①

④④③③

②②

⑤⑤

Router61.199.255.184

Router61.199.255.184

Proxy Server217.10.79.23

Media Server217.10.68.75

NAPT

Page 6: NAT Traversal

Nat Off (SBC method): incoming call

TDE192.168.2.10

TDE192.168.2.9

Router61.199.255.184

Proxy Server217.10.79.23

LAN sideLAN sideWAN sideWAN side

NAPT

①①

④④③③

②②

Media Server217.10.68.75

NAPT

Router61.199.255.184

Router61.199.255.184

Page 7: NAT Traversal

STUN

SNOM phone217.10.68.75

Proxy Server217.10.79.23

TDE192.168.2.9

TDE218.116.146.6

217.10.68.75

STUNServer

ProxyServer

SIP PhoneSIP Phone

WiresharkWireshark

L2 SwitchL2 Switch L2 SwitchL2 Switch

TDETDE

RouterRouterRouterRouter

192.168.2.9192.168.2.10

217.10.79.23

61.199.255.184

DSL modemDSL modem

Page 8: NAT Traversal

TDE192.168.2.10

TDE192.168.2.9

SNOM phone218.116.146.6

Router61.199.255.184

Proxy Server217.10.79.23

LAN sideLAN side WAN sideWAN side

STUN: outgoing call

①①

④④③③

②②

Router61.199.255.184

Router61.199.255.184

Page 9: NAT Traversal

TDE192.168.2.10

Proxy Server217.10.79.23

TDE192.168.2.9

Router61.199.255.184

Proxy Server217.10.79.23

LAN sideLAN sideWAN sideWAN side

STUN: incoming call

SNOM phone218.116.146.6

Router61.199.255.184

①①

④④③③

②②

Page 10: NAT Traversal

SBC / STUN

TDE Router

TDE

Server

Router Server

SBC

STUN

REGISTER

192.168.2.101:35060

192.168.2.101:35060 192.168.2.101:35060

61.199.255.184 : 32844

REGISTER

192.168.2.101:35060

61.199.255.184: 35060 61.199.255.184 :35060

61.199.255.184 :32844

IP

SIP

IP

SIP

Page 11: NAT Traversal

SBC / STUN

INVITE sip:[email protected] SIP/2.0ViaVia: SIP/2.0/UDP 10.16.1.10:35060;branch=z9hG4bK00007d74;rportMax-Forwards: 70To: sip:[email protected]: sip:[email protected];tag=28482Call-ID: [email protected]: 1 INVITEContactContact: sip:[email protected]:35060Supported: timer,100relSession-Expires: 180Allow: INVITE,ACK,CANCEL,BYE,PRACK,REGISTER,UPDATEContent-Type: application/sdpUser-Agent: V1.000iContent-Length: 270

v=0o=- 1 1 IN IP4 10.16.1.10s=-c=IN IP4 10.16.1.10t=0 0m=audio 16000 RTP/AVP 8 0 18 101a=rtpmap:8 PCMA/8000/1a=rtpmap:0 PCMU/8000/1a=rtpmap:18 G729/8000/1a=rtpmap:101 telephone-event/8000a=fmtp:101 0-15a=sendrecva=ptime:20a=rtcp:16001

■IP-Address: Global IP address (10.16.1.10) ■RTP port: 16000 ~■* 番号は変更しないポート

INVITE sip:[email protected] SIP/2.0ViaVia: SIP/2.0/UDP 192.168.2.101:35060;branch=z9hG4bK00007d74;rportMax-Forwards: 70To: sip:[email protected]: sip:[email protected];tag=28482Call-ID: [email protected]: 1 INVITEContactContact: sip:[email protected]:35060Supported: timer,100relSession-Expires: 180Allow: INVITE,ACK,CANCEL,BYE,PRACK,REGISTER,UPDATEContent-Type: application/sdpUser-Agent: V1.000iContent-Length: 270

v=0o=- 1 1 IN IP4 192.168.2.102s=-c=IN IP4 192.168.2.102t=0 0m=audio 12000 RTP/AVP 8 0 18 101a=rtpmap:8 PCMA/8000/1a=rtpmap:0 PCMU/8000/1a=rtpmap:18 G729/8000/1a=rtpmap:101 telephone-event/8000a=fmtp:101 0-15a=sendrecva=ptime:20a=rtcp:12001

■IP-Address: Local IP address■RTP Port: 12000 ~■ Signaling IP address is different from SDP IP address

<< STUNSTUN>><< SBCSBC>>

Page 12: NAT Traversal

a-line before m-line

Page 13: NAT Traversal

Audio type change

Page 14: NAT Traversal

Session (IP address) change

TDE192.168.100.101

ITSP10.20.11.14

ITSP10.20.11.31

Page 15: NAT Traversal

MAC address error: one way audio

Page 16: NAT Traversal

MAC address error: one way audio