Du kannst SRTP aktiviert lassen, wenn deine Anlage die MediaSec-Erweiterungen beherrscht.Das deaktivieren von SRTP löst das Problem,
Du kannst SRTP aktiviert lassen, wenn deine Anlage die MediaSec-Erweiterungen beherrscht.Das deaktivieren von SRTP löst das Problem,
Die Umstellung ist nicht vollständig abgeschlossen, aber es sind keine Proxys der Altinfrastruktur mehr in Richtung Kunde aktiv. Damit sind die Mediasec-Erweiterungen Geschichte (bzw. nicht mehr notwendig).Vollzitat gemäß Boardregeln https://www.ip-phone-forum.de/threads/ip-phone-forum-regeln.297224/ entfernt by stoney
[global]
type=global
user_agent=Asterisk
endpoint_identifier_order=ip,username
default_from_user=0123412345
keep_alive_interval=20
[transport-udp]
type=transport
protocol=udp
bind=0.0.0.0
[telekom_12345]
type=registration
transport=transport-udp
outbound_auth=telekom_12345_auth
server_uri=sip:tel.t-online.de
client_uri=sip:[email protected]
contact_user=0123412345
retry_interval=60
forbidden_retry_interval=300
expiration=480
auth_rejection_permanent=false
[telekom_12345_out]
type=endpoint
transport=transport-udp
media_encryption=sdes
context=unspecified
disallow=all
allow=g722
allow=alaw
outbound_auth=telekom_12345_auth
aors=telekom_12345_out
callerid=0123412345
from_user=0123412345
from_domain=tel.t-online.de
timers=no
rtp_symmetric=yes
[telekom_12345_out]
type=aor
contact=sip:[email protected]
[telekom_12345_in]
type=endpoint
transport=transport-udp
context=telekom_12345_in
disallow=all
allow=g722
allow=alaw
outbound_auth=telekom_12345_auth
[telekom_12345_in]
type=identify
endpoint=telekom_12345_in
match=217.0.0.0/13
[telekom_12345_auth]
type=auth
auth_type=userpass
password=passwort:[email protected]
username=0123412345
realm=tel.t-online.de
[tel_flur]
type=endpoint
direct_media=no
transport=transport-udp
context=internalsip
disallow=all
allow=g722
allow=alaw
auth=tel_flur_auth
aors=flur
[tel_flur_auth]
type=auth
auth_type=userpass
password=passwort
username=flur
realm=home.lan
[flur]
type=aor
max_contacts=1
remove_existing=true
[tel_flur]
type=identify
endpoint=tel_flur
match=<interne ip>
[global]
type=global
user_agent=Asterisk
endpoint_identifier_order=ip,username
default_from_user=012312345
keep_alive_interval=20
[transport-udp]
type=transport
protocol=udp
bind=0.0.0.0
[transport-tls]
type=transport
protocol=tls
method=tlsv1_2
ca_list_file=/etc/ssl/certs/ca-certificates.crt
bind=0.0.0.0:5061
[telekom_12345]
type=registration
transport=transport-tls
outbound_auth=telekom_12345_auth
server_uri=sip:tel.t-online.de
client_uri=sip:[email protected]
contact_user=012312345
retry_interval=60
forbidden_retry_interval=300
expiration=480
auth_rejection_permanent=false
[telekom_12345_out]
type=endpoint
transport=transport-tls
media_encryption=sdes
context=unspecified
disallow=all
allow=g722
allow=alaw
outbound_auth=telekom_12345_auth
aors=telekom_12345_out
callerid=012312345
from_user=012312345
from_domain=tel.t-online.de
timers=no
rtp_symmetric=yes
[telekom_12345_out]
type=aor
contact=sip:[email protected]
[telekom_12345_in]
type=endpoint
transport=transport-tls
media_encryption=sdes
context=telekom_12345_in
disallow=all
allow=g722
allow=alaw
outbound_auth=telekom_12345_auth
[telekom_12345_in]
type=identify
endpoint=telekom_12345_in
match=217.0.0.0/13
[telekom_12345_auth]
type=auth
auth_type=userpass
password=passwort:[email protected]
username=012312345
realm=tel.t-online.de
[tel_flur]
type=endpoint
direct_media=no
transport=transport-udp
context=internalsip
disallow=all
allow=g722
allow=alaw
auth=tel_flur_auth
aors=flur
[tel_flur_auth]
type=auth
auth_type=userpass
password=passwort
username=flur
realm=home.lan
[flur]
type=aor
max_contacts=1
remove_existing=true
[tel_flur]
type=identify
endpoint=tel_flur
match=<interne ip>
v=0
o=ccs-0-615-7 061271351165920 1699889617 IN IP4 217.0.x.y
s=call
c=IN IP4 217.0.x.y
t=0 0
m=audio 41518 RTP/SAVP 9 8 0 2 102 100 99 97 120 121 101
^^^^^^^^^
a=sendrecv
a=ptime:20
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:wc9rzrZeYZFLOmWf5MGupVsYtP2ms2ITCV8FfT0d
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
a=crypto:2 AES_CM_128_HMAC_SHA1_32 inline:eP7t5MyjQi00jmeZLUxb3PG29KW0m1gWrmJ1tN+z
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
a=rtpmap:2 G726-32/8000
a=rtpmap:102 G726-32/8000
a=rtpmap:100 G726-40/8000
a=rtpmap:99 G726-24/8000
a=rtpmap:97 iLBC/8000
a=fmtp:97 mode=30
a=rtpmap:120 PCMA/16000
a=rtpmap:121 PCMU/16000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
v=0
o=- 3642688480 1699889619 IN IP4 [lokale öffentliche IP]
s=Asterisk
c=IN IP4 [lokale öffentliche IP]
t=0 0
m=audio 10096 RTP/SAVP 9 8 0 101
^^^^^^^^
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:BvpYc0fPJ3s1qcivMYhhnZLgLmoYKIoK8Y0c54nc
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
a=rtpmap:9 G722/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=ptime:20
a=maxptime:140
a=sendrecv
v=0
o=ccs-0-615-4 061241889867886 1776194861 IN IP4 217.0.x.x
s=-
c=IN IP4 217.0.x.x
t=0 0
a=sendrecv
m=audio 25124 RTP/SAVP 109 104 110 9 102 108 8 0 100 105
a=sendrecv
a=maxptime:40
a=ptime:20
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:AUC2RZ7yu0C/k3cDftUU3ubsGDiPaZcgcEfjTN0j
a=crypto:2 AES_CM_128_HMAC_SHA1_32 inline:C99jwSQBtOBCc3O5dvGOis91d+itBlFEJ8GLCg5p
a=rtpmap:109 EVS/16000
a=fmtp:109 br=5.9-24.4;bw=nb-wb;cmr=1;ch-aw-recv=-1;max-red=0
a=rtpmap:104 AMR-WB/16000
a=fmtp:104 mode-set=0,1,2;mode-change-capability=2;max-red=0
a=rtpmap:110 AMR-WB/16000
a=fmtp:110 octet-align=1;mode-set=0,1,2;mode-change-capability=2;max-red=0
a=rtpmap:9 G722/8000
a=rtpmap:102 AMR/8000
a=fmtp:102 mode-change-capability=2;max-red=0
a=rtpmap:108 AMR/8000
a=fmtp:108 octet-align=1;mode-change-capability=2;max-red=0
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:100 telephone-event/8000
a=fmtp:100 0-15
a=rtpmap:105 telephone-event/16000
a=fmtp:105 0-15
rasterisk
CLI> module show like rtp
Module Description Use Count Status Support Level
bridge_native_rtp.so Native RTP bridging module 0 Running core
chan_rtp.so RTP Media Channel 0 Running core
res_pjsip_sdp_rtp.so PJSIP SDP RTP/AVP stream handler 0 Running core
res_rtp_asterisk.so Asterisk RTP Stack 0 Running core
res_rtp_multicast.so Multicast RTP Engine 1 Running core
res_srtp.so Secure RTP (SRTP) 0 Running core
ParameterName : ParameterValue
===================================================================================================
100rel : yes
accept_multiple_sdp_answers : false
accountcode :
acl :
aggregate_mwi : true
allow : (alaw|ulaw)
allow_overlap : true
allow_subscribe : true
allow_transfer : true
allow_unauthenticated_options : false
aors : [individuell]
asymmetric_rtp_codec : false
auth :
bind_rtp_to_media_address : false
bundle : false
call_group :
callerid : <unknown>
callerid_privacy : allowed_not_screened
callerid_tag :
codec_prefs_incoming_answer : prefer:pending, operation:intersect, keep:all, transcode:allow
codec_prefs_incoming_offer : prefer:pending, operation:intersect, keep:all, transcode:allow
codec_prefs_outgoing_answer : prefer:pending, operation:intersect, keep:all, transcode:allow
codec_prefs_outgoing_offer : prefer:pending, operation:union, keep:all, transcode:allow
connected_line_method : invite
contact_acl :
contact_user : +49...
context : from-pstn-remove-plus (da wirst Du auch was individuelles haben)
cos_audio : 0
cos_video : 0
device_state_busy_at : 0
direct_media : false
direct_media_glare_mitigation : none
direct_media_method : invite
disable_direct_media_on_nat : false
dtls_auto_generate_cert : No
dtls_ca_file :
dtls_ca_path :
dtls_cert_file :
dtls_cipher :
dtls_fingerprint : SHA-256
dtls_private_key :
dtls_rekey : 0
dtls_setup : active
dtls_verify : No
dtmf_mode : rfc4733
fax_detect : false
fax_detect_timeout : 0
follow_early_media_fork : true
force_avp : false
force_rport : false
from_domain : tel.t-online.de
from_user : +49....
g726_non_standard : false
geoloc_incoming_call_profile :
geoloc_outgoing_call_profile :
ice_support : false
identify_by : username,ip
ignore_183_without_sdp : true
inband_progress : false
incoming_call_offer_pref : local
incoming_mwi_mailbox :
language : de
mailboxes :
max_audio_streams : 1
max_video_streams : 1
media_address :
media_encryption : sdes
media_encryption_optimistic : false
media_use_received_transport : false
message_context :
moh_passthrough : false
moh_suggest : default
mwi_from_user :
mwi_subscribe_replaces_unsolicited : no
named_call_group :
named_pickup_group :
notify_early_inuse_ringing : false
one_touch_recording : false
outbound_auth : [individuell]
outbound_proxy :
outgoing_call_offer_pref : remote_merge
overlap_context :
pickup_group :
preferred_codec_only : false
record_off_feature : automixmon
record_on_feature : automixmon
refer_blind_progress : true
rewrite_contact : false
rpid_immediate : false
rtcp_mux : false
rtp_engine : asterisk
rtp_ipv6 : false
rtp_keepalive : 0
rtp_symmetric : false
rtp_timeout : 120
rtp_timeout_hold : 0
sdp_owner : -
sdp_session : Asterisk
security_mechanisms :
security_negotiation : no
send_aoc : false
send_connected_line : no
send_diversion : true
send_history_info : false
send_pai : false
send_rpid : false
set_var :
srtp_tag_32 : false
stir_shaken : off
stir_shaken_profile :
sub_min_expiry : 0
subscribe_context :
suppress_q850_reason_headers : false
t38_bind_udptl_to_media_address : false
t38_udptl : true
t38_udptl_ec : none
t38_udptl_ipv6 : false
t38_udptl_maxdatagram : 0
t38_udptl_nat : true
timers : no
timers_min_se : 900
timers_sess_expires : 1800
tone_zone :
tos_audio : 184
tos_video : 0
transport : [individuell - muss auf einen tls-enableten Transport verweisen]
trust_connected_line : yes
trust_id_inbound : false
trust_id_outbound : false
use_avpf : false
use_ptime : false
user_eq_phone : true
voicemail_extension :
webrtc : no
Translation times between formats (in microseconds) for one second of data
Source Format (Rows) Destination Format (Columns)
ulaw gsm slin8 slin12 slin16 slin24 slin32 slin44 slin48 slin96 slin192 g722
ulaw - 15000 9000 17000 17000 17000 17000 17000 17000 17000 17000 17250
gsm 15000 - 9000 17000 17000 17000 17000 17000 17000 17000 17000 17250
slin8 6000 6000 - 8000 8000 8000 8000 8000 8000 8000 8000 8250
slin12 14500 14500 8500 - 8000 8000 8000 8000 8000 8000 8000 14000
slin16 14500 14500 8500 8500 - 8000 8000 8000 8000 8000 8000 6000
slin24 14500 14500 8500 8500 8500 - 8000 8000 8000 8000 8000 14500
slin32 14500 14500 8500 8500 8500 8500 - 8000 8000 8000 8000 14500
slin44 14500 14500 8500 8500 8500 8500 8500 - 8000 8000 8000 14500
slin48 14500 14500 8500 8500 8500 8500 8500 8500 - 8000 8000 14500
slin96 14500 14500 8500 8500 8500 8500 8500 8500 8500 - 8000 14500
slin192 14500 14500 8500 8500 8500 8500 8500 8500 8500 8500 - 14500
g722 15600 15600 9600 17500 9000 17000 17000 17000 17000 17000 17000 -
core show translation paths alaw
--- Translation paths SRC Codec "alaw" sample rate 8000 ---
alaw:8000 To codec2:8000 : No Translation Path
alaw:8000 To g723:8000 : No Translation Path
alaw:8000 To ulaw:8000 : No Translation Path
alaw:8000 To gsm:8000 : No Translation Path
alaw:8000 To g726:8000 : No Translation Path
alaw:8000 To g726aal2:8000 : No Translation Path
alaw:8000 To adpcm:8000 : No Translation Path
alaw:8000 To slin:8000 : No Translation Path
alaw:8000 To slin:12000 : No Translation Path
alaw:8000 To slin:16000 : No Translation Path
alaw:8000 To slin:24000 : No Translation Path
alaw:8000 To slin:32000 : No Translation Path
alaw:8000 To slin:44100 : No Translation Path
alaw:8000 To slin:48000 : No Translation Path
alaw:8000 To slin:96000 : No Translation Path
alaw:8000 To slin:192000 : No Translation Path
alaw:8000 To lpc10:8000 : No Translation Path
alaw:8000 To g729:8000 : No Translation Path
alaw:8000 To speex:8000 : No Translation Path
alaw:8000 To speex:16000 : No Translation Path
alaw:8000 To speex:32000 : No Translation Path
alaw:8000 To ilbc:8000 : No Translation Path
alaw:8000 To g722:16000 : No Translation Path
alaw:8000 To siren7:16000 : No Translation Path
alaw:8000 To siren14:32000 : No Translation Path
alaw:8000 To g719:48000 : No Translation Path
alaw:8000 To opus:48000 : No Translation Path
alaw:8000 To none:8000 : No Translation Path
alaw:8000 To silk:8000 : No Translation Path
alaw:8000 To silk:12000 : No Translation Path
alaw:8000 To silk:16000 : No Translation Path
alaw:8000 To silk:24000 : No Translation Path
Ja - Du musst jede Nummer einzeln registrieren (jede Nummer ist quasi ein eigener Trunk) - kannst sie aber alle an den gleichen Transport hängen. Der Auth ist, wenn ich mich richtig erinnere (habs gerade nicht vor mir), jedesmal unterschiedlich - sind ja andere Nummern.Ich habe mehrere Rufnummern, für die würde ich dann jeweils eine Registration und die In/Out Endpoints anlegen und entsprechend verwenden?