Page 1 of 1

VOIP Can't hear vpn client on softphone

Posted: Thu Feb 18, 2021 11:34 am
by armen10
Hi, cannot hear vpn client while connected via VOIP.
The remote user can hear the caller, but the caller cannot hear the remote user. What is the problem here.
I will only add that I added a remote port 5060.
I would be grateful for help

Re: VOIP Can't hear vpn client on softphone

Posted: Fri Feb 19, 2021 12:10 am
by solo
SIP phones use port 5060 for signalling only and other port/port-range for RTP voice.
Do they work properly directly on your LAN?
Where did you add "remote port 5060"?

Re: VOIP Can't hear vpn client on softphone

Posted: Fri Feb 19, 2021 11:47 am
by armen10
Thanks for the answer, but when I'm on the local network it works, but when I connect via vpn and I'm on the local network, it doesn't work.
"Do they work properly directly on your LAN?" - Yes.

On the softether VPN server, I added the appropriate ports in iptales and nothing. Maybe I need to add some virtual ports?

iptables -I FORWARD -p udp -m multiport --dport 16384:32767 -j ACCEPT

Re: VOIP Can't hear vpn client on softphone

Posted: Fri Feb 19, 2021 10:03 pm
by solo
I have not tried a Linux SoftEther server yet but here is my equivalent, working VOIP setup:
  • Ubuntu OpenVPN server in Layer 2 mode bridging LAN
  • a dozen LAN SIP phones
  • a few remote SIP phones
All phones are working fine and the only iptables rules are these:
  1. iptables -A INPUT -i tap0 -j ACCEPT
  2. iptables -A INPUT -i br0 -j ACCEPT
  3. iptables -A FORWARD -i br0 -j ACCEPT

Re: VOIP Can't hear vpn client on softphone

Posted: Sat Feb 20, 2021 8:33 am
by solo
solo wrote:
Fri Feb 19, 2021 10:03 pm
I have not tried a Linux SoftEther server yet....
I have just tested a Linux SoftEther server (L2 mode) and confirm that SIP phones work fine with only the default, permissible, iptables' policies.

Later one should modify iptables to improve security, of course.

Re: VOIP Can't hear vpn client on softphone

Posted: Mon Feb 22, 2021 8:12 am
by armen10
Yes, but I use L2PT because I don't want to use certificates. I need to use the built-in VPN client in Windows10.