Page 1 of 1
VOIP Can't hear vpn client on softphone
Posted: Thu Feb 18, 2021 11:34 am
by armen10
Hi, cannot hear vpn client while connected via VOIP.
The remote user can hear the caller, but the caller cannot hear the remote user. What is the problem here.
I will only add that I added a remote port 5060.
I would be grateful for help
Re: VOIP Can't hear vpn client on softphone
Posted: Fri Feb 19, 2021 12:10 am
by solo
SIP phones use port 5060 for signalling only and other port/port-range for RTP voice.
Do they work properly directly on your LAN?
Where did you add "remote port 5060"?
Re: VOIP Can't hear vpn client on softphone
Posted: Fri Feb 19, 2021 11:47 am
by armen10
Thanks for the answer, but when I'm on the local network it works, but when I connect via vpn and I'm on the local network, it doesn't work.
"Do they work properly directly on your LAN?" - Yes.
On the softether VPN server, I added the appropriate ports in iptales and nothing. Maybe I need to add some virtual ports?
iptables -I FORWARD -p udp -m multiport --dport 16384:32767 -j ACCEPT
Re: VOIP Can't hear vpn client on softphone
Posted: Fri Feb 19, 2021 10:03 pm
by solo
I have not tried a Linux SoftEther server yet but here is my equivalent, working VOIP setup:
- Ubuntu OpenVPN server in Layer 2 mode bridging LAN
- a dozen LAN SIP phones
- a few remote SIP phones
All phones are working fine and the only iptables rules are these:
- iptables -A INPUT -i tap0 -j ACCEPT
- iptables -A INPUT -i br0 -j ACCEPT
- iptables -A FORWARD -i br0 -j ACCEPT
Re: VOIP Can't hear vpn client on softphone
Posted: Sat Feb 20, 2021 8:33 am
by solo
solo wrote: ↑Fri Feb 19, 2021 10:03 pm
I have not tried a Linux SoftEther server yet....
I have just tested a Linux SoftEther server (L2 mode) and confirm that SIP phones work fine with only the default, permissible, iptables' policies.
Later one should modify iptables to improve security, of course.
Re: VOIP Can't hear vpn client on softphone
Posted: Mon Feb 22, 2021 8:12 am
by armen10
Yes, but I use L2PT because I don't want to use certificates. I need to use the built-in VPN client in Windows10.