Kitz Forum
Broadband Related => Broadband Hardware => Topic started by: vic0239 on February 16, 2015, 09:34:16 AM
-
I’m new to the forum, so hello to everyone.
I am looking for assistance with my Huawei HG612 modem. I recently acquired an unlocked HG612 (A2pv6C038m.d24j) and initially set it up in bridged mode using my BT Hub as the router. In this configuration everything on my home network was working ok. However, I did't particularly want to keep using the BT Hub so decided to switch the HG612 to router mode. However in this mode I am having an issue with my VOIP devices as neither will register with my provider in this mode of operation. I have tried port forwarding, but the problem persists. All other devices are working ok as before.
Are there any additional settings I need to enable to allow VOIP to work in router mode or is this a non starter?
Thanks … Andy.
-
Hi
I would think you need to remove your port forward rule for VoIP and open the port for VoIP in firewall.
Then repower your VoIP phones one after the other, so they acquire their settings from VoIP provider.
You may have to flush your tables though
Many thanks
John
-
Don't you have to enable some ALG (Application Level Gateway) or something in the GUI?
-
Hi
I would think you need to remove your port forward rule for VoIP and open the port for VoIP in firewall.
Then repower your VoIP phones one after the other, so they acquire their settings from VoIP provider.
You may have to flush your tables though
Many thanks
John
Thanks for your reply, John. I'm not quite sure how to open the port in the firewall. Would that Application Filtering? I did disabale the firewall, but that made no difference. The firewall is currently enabled in bridge mode though and VOIP is ok, so would imply it operates differently when in router mode.
Andy.
-
Don't you have to enable some ALG (Application Level Gateway) or something in the GUI?
Thanks for the suggestion which I did try as well to no effect.
Andy.
-
Hi
Are your IP address of VoIP phone on the same network
I'm thinking they may have retained same bridge settings perhaps.
Also, so I clearly understand, you have reset your hg back to router from bridge mode and all other devices work apart from VoIP phones.
If the phones are on the same network, can you ping them and bring up the web GUI for them.
Is the gateway address correct for your network
What VoIP ports are you using, in router mode these need opening in firewall and firewall should be on.
Have you restarted your hg to make sure settings are saved
These are just some thoughts
Many thanks
John
-
Hi
Are your IP address of VoIP phone on the same network
Yes they are on the same network.
I'm thinking they may have retained same bridge settings perhaps.
Also, so I clearly understand, you have reset your hg back to router from bridge mode and all other devices work apart from VoIP phones.
Correct, but as I needed the VoIP phones active I have gone back to bridged mode.
If the phones are on the same network, can you ping them and bring up the web GUI for them.
Yes.
Is the gateway address correct for your network
Yes
What VoIP ports are you using, in router mode these need opening in firewall and firewall should be on.
One is a Gigaset N300 and I'm using the default ports:
SIP : 5060-5076
RTP : 5004-5010
Can you explain the mechanism for opening the ports please. It's not apparent from the GUI or manual. Thanks.
Have you restarted your hg to make sure settings are saved
No I haven't restarted.
These are just some thoughts
Many thanks
John
Hi John, thanks for comming back. I've answered in red above. I'll need to make time to reconfigure back to router, but am wary of too many restarts as my line stats are starting to drop.
Andy.
-
I can't really understand why they're failing to register. It's the most basic of TCP connections outbound, which should be NAT'd like everything else?
What am I missing? :)
Not DNS related, perhaps?
-
I can't really understand why they're failing to register. It's the most basic of TCP connections outbound, which should be NAT'd like everything else?
What am I missing? :)
Not DNS related, perhaps?
I know the feeling! ???
-
SIP debug is pretty verbose - what error are you seeing? Or is it just timing out?
-
Hi
Please could I ask if the VoIP phones are dhcp or static
If static, I think I read somewhere that the hg612 dhcp does not play well with static ip
I think the firewall as well is perhaps not that good and this maybe the issue perhaps.
I'll have to think a little more but as I do not have the same setup you want to use, I cannot test beyond theory or thoughts.
I hope that helps a little
Many thanks
John
-
SIP debug is pretty verbose - what error are you seeing? Or is it just timing out?
Don't think I'd get this from the Gigaset, but maybe the Linksys. I'll need to set up a syslog server I guess. Thanks, I'll look into that.
-
Hi John. They are both static addresses. I could probably set up the DHCP server elsewhere and try that, but will need to revert back to router mode first. Thanks for your input, much appreciated.
Andy.
-
Hi andy
Many thanks, I believe you might have to use the hg dhcp though for it to work.
Personally I would leave hg in bridge mode and drop in a draytek as router.
I myself do not think the hg is a full blown router, and may not have enough processing power to feed everything, but this is my personal thoughts, not based on anything apart from I'm a firm believer in offloading services to dedicated systems.
My connection has a hg as bridge, splits into home hub, Sam knows, firewall-then-draytek router.
Some users may think total overkill, but we have 5 ip and can use dynamic ip if needed from Bt, and run services which need protection.
I hope that helps and hopefully may fix your issue on VoIP, which I'll follow, so hopefully whatever your fix is, is good to know
Many thanks
John
-
Thanks John.
You are probably right in that it is not quite up to the job.
I have a Mac environment and use an Apple Time Capsule which I understand has a PPPoE client and has router/DHCP capability as well, so maybe I'll give that a try. Otherwise I'll investigate other routers as the T/C is sparse on ports although they are all 1Gb.
Thanks again for your help.
Andy.
-
Success! It’s working, but I’m not exactly sure what the issue was.
Following John’s theory of DHCP being flakey, I changed the modem to router mode but did not enable the DHCP server. Using static IPs for my computer and the VoIP devices they registered straight away. I could make and receive calls, but the incoming audio was missing. I fixed this by adding the RTP ports to the NAT rules. So far so good.
I then set to configuring a DHCP server on my Synology NAS, but I could not get it to allocate any addresses. Pressured by my other half who wanted to use the Internet, I decided just to enable the DHCP server on the modem and live with the issue for now. However, I was surprised to see that the VoIP devices were still registered and remained so even after a power cycle. They’ve been active now for a couple of hours.
Now before I started today I powered off the modem to rearrange the cables, so I’m guessing that this has cleared some cached information in the modem as it is set up now identically as when it was failing. Anyway, I’ll leave well alone now for a while and keep my fingers crossed that it keeps working. I used to come across these imponderable mysteries from time to time in my 30 odd years working in IT so I should know not to be surprised! :lol:
Many thanks to all who took the time to give their input.
Cheers .. Andy.
-
Be sure to check for open and non stealth ports (I seem to remember they are only closed not stealth) grc.com/x/ne.dll?bh0bkyd2 (http://grc.com/x/ne.dll?bh0bkyd2).
Ian
-
Hi Andy
Glad you resolved it.
Good point re checking, hopefully andy will post results.
I think the hg using mixture of dhcp and static, cannot add static to tables, but using either fully dhcp with no static or full static, it adds them. Once added, unless expired cache is run, it should work.
The bigger issue I thought off which might have a more major implication, is if the hg needs re powering to clear any holdup or freeze, meaning you may want to wait 30 minutes before powering on.
With hg in bridge mode, and using a seperate router, means you should be able to repower the router without waiting, as I thought the hg holds the connection.
I could be entirely wrong though, so I apologise in advance
Many thanks
John
-
Hmm. Is this bad?
GRC Port Authority Report created on UTC: 2015-02-18 at 10:38:13
Results from scan of ports: 0, 21-23, 25, 79, 80, 110, 113,
119, 135, 139, 143, 389, 443, 445,
1002, 1024-1030, 1720, 5000
0 Ports Open
22 Ports Closed
4 Ports Stealth
---------------------
26 Ports Tested
NO PORTS were found to be OPEN.
Ports found to be STEALTH were: 21, 22, 23, 80
Other than what is listed above, all ports are CLOSED.
TruStealth: FAILED - NOT all tested ports were STEALTH,
- NO unsolicited packets were received,
- NO Ping reply (ICMP Echo) was received.
-
https://www.grc.com/su/portstatusinfo.htm (https://www.grc.com/su/portstatusinfo.htm)
I was unhappy with non-stealth ports (scan all service ports) so changed router.
Ian
-
The difference between the two is that an ICMP port unreachable is sent where you see 'closed' and nothing is sent back where you see 'stealth'.
If you're able to manipulate the firewall on the device, probably iptables or similar, you'll see a 'reject' rule instead of a 'drop' rule. Changing any rejects to drops will turn closed into stealth.
-
Using the GUI if I change to Block_All then all ports appear in stealth mode, but everything stops working. All the other firewall levels don't appear to change the port status (except Disable). I don't think I am up to manipulating the firewall rules using the command prompt!
Andy.
-
Just to close this off, I have reverted to bridged mode as the WAN connection appeared unstable while in router mode. I’ve connected my old BT Hub 4 behind it and my connection has stabilised. My connection is lower than previously, but I’ll maybe start another thread about than if it doesn’t improve. Running the port scan now all of the ports are in stealth mode other than a couple I have opened so I’m happy about that.
Thanks .. Andy.