[Problem] Telefonieren zwischen zwei ZoiPer SIP Clients nicht möglich

[sharbich]

Hallo Ihr Lieben,

ich habe zwei ZoiPer SIP Softphone mit dem Namen "sgsthme01 und ipmanme01". Beide Telefone können sich nicht erreichen. Raus telefonieren geht eingehende Anrufe gehen auch. Die Verständigung ist in beiden Richtungen gut.

Ich habe folgende Asterisk Version im Einsatz:

dsme01*CLI> core show version
Asterisk certified/13.21-cert4 built by root @ dsme01 on a x86_64 running Linux on 2019-09-23 09:41:39 UTC

Der Asterisk Server hängt hinter einen Speedport Smart der Telekom und einen OpenWrt Router in eine DMZ. Das Regelwerk der Firewall ist zwischen den Zonen bei (Eingang / Ausgang / Weiterleiten) auf noch zulassen gestellt. Außer bei der Zone WAN wird das Weiterleiten zurückgewiesen.
Meine Asterisk Konfigurationen sehen wie folgt aus:

root@dsme01:~# cat /etc/asterisk/pjsip.conf
;=========== General settings ===========
[global]
type=global
user_agent=Asterisk PBX
endpoint_identifier_order=ip,username
default_from_user=0abcd900856
[transport-tcp-nat]
type=transport
protocol=tcp
bind=192.168.140.20:5070
local_net=192.168.0.0/16
external_media_address=example.com
external_signaling_address=example.com
external_signaling_port=5070
[transport-udp-nat]
type=transport
protocol=udp
bind=192.168.140.20:5070
local_net=192.168.0.0/16
external_media_address=example.com
external_signaling_address=example.com
external_signaling_port=5070
[telekom_0abcd900855]
type=registration
transport=transport-udp-nat
outbound_auth=telekom_0abcd900855_auth
outbound_proxy = sip:[email protected]\;lr
server_uri=sip:tel.t-online.de:5070
client_uri=sip:[email protected]:5070
contact_user=0abcd900855
retry_interval=60
forbidden_retry_interval=10
expiration=480
auth_rejection_permanent=false
[telekom_0abcd900856]
type=registration
transport=transport-udp-nat
outbound_auth=telekom_0abcd900856_auth
outbound_proxy = sip:[email protected]\;lr
server_uri=sip:tel.t-online.de:5070
client_uri=sip:[email protected]:5070
contact_user=0abcd900856
retry_interval=60
forbidden_retry_interval=10
expiration=480
auth_rejection_permanent=false
[telekom_0abcd900855_auth]
type=auth
auth_type=userpass
password=
[email protected]
realm=tel.t-online.de
[telekom_0abcd900856_auth]
type=auth
auth_type=userpass
password=
[email protected]
realm=tel.t-online.de
[telekom_0abcd900855_out]
type=endpoint
transport=transport-udp-nat
context=unspecified
disallow=all
allow=g722
allow=alaw
outbound_auth=telekom_0abcd900855_auth
outbound_proxy = sip:[email protected]\;lr
aors=telekom_0abcd900855_out
callerid=0abcd900855
from_user=0abcd900855
from_domain=tel.t-online.de
timers=yes
rtp_symmetric=yes
force_rport=yes
rewrite_contact=yes
direct_media=no
[telekom_0abcd900856_out]
type=endpoint
transport=transport-udp-nat
context=unspecified
disallow=all
allow=g722
allow=alaw
outbound_auth=telekom_0abcd900856_auth
outbound_proxy = sip:[email protected]\;lr
aors=telekom_0abcd900856_out
callerid=0abcd900856
from_user=0abcd900856
from_domain=tel.t-online.de
timers=yes
rtp_symmetric=yes
force_rport=yes
rewrite_contact=yes
direct_media=no
[telekom_0abcd900855_out]
type=aor
contact=sip:[email protected]
[telekom_0abcd900856_out]
type=aor
contact=sip:[email protected]
[telekom_0abcd900855_in]
type=endpoint
transport=transport-udp-nat
context=telekom_0abcd900855_in
disallow=all
allow=g722
allow=alaw
outbound_auth=telekom_0abcd900855_auth
direct_media=no
[telekom_0abcd900855_in]
type=identify
endpoint=telekom_0abcd900855_in
match=217.0.0.0/13
[telekom_0abcd900856_in]
type=endpoint
transport=transport-udp-nat
context=telekom_0abcd900856_in
disallow=all
allow=g722
allow=alaw
outbound_auth=telekom_0abcd900856_auth
direct_media=no
[telekom_0abcd900856_in]
type=identify
endpoint=telekom_0abcd900856_in
match=217.0.0.0/13
[sgsthme01]
type=endpoint
transport=transport-udp-nat
context=internalsip
disallow=all
allow=g722
allow=alaw
auth=auth-sgsthme01
aors=sgsthme01
;; mailboxes=wie in voicemail.conf definiert
[auth-sgsthme01]
type=auth
auth_type=userpass
username=sgsthme01
password=#########
realm=sgsthme01realm
[sgsthme01]
type=aor
max_contacts=1
remove_existing=true
[sgsthme01]
type=identify
endpoint=sgsthme01
match=192.168.30.129
match=192.168.190.65
[ipmanme01]
type=endpoint
transport=transport-udp-nat
context=internalsip
disallow=all
allow=g722
allow=alaw
auth=auth-ipmanme01
aors=ipmanme01
;; mailboxes=wie in voicemail.conf definiert
[auth-ipmanme01]
type=auth
auth_type=userpass
username=ipmanme01
password=#########
realm=ipmanme01realm
[ipmanme01]
type=aor
max_contacts=1
remove_existing=true
[ipmanme01]
type=identify
endpoint=ipmanme01
match=192.168.30.132
;=========== ACL's ===========
[acl]
type=acl
deny=0.0.0.0/0.0.0.0
permit=217.0.0.0/13
permit=192.168.0.0/16

root@dsme01:~# cat /etc/asterisk/extensions.conf
[general]
static=yes
writeprotect=yes
autofallthrough=yes
extenpatternmatchnew=no
clearglobalvars=no
userscontext=unspecified
[unspecified]
exten => _X.,1,Answer()
same => n,Verbose(D E F A U L T ==> ${CALLERID(num)} kam um ${STRFTIME(${EPOCH},,%Y%m%d-%H%M%S)} in UNSPECIFIED an, als es versuchte die Nummer ${EXTEN} anzurufen.)
  same => n,Playback(No_permissions)
  same => n,Hangup()
[internalsip]
; direkt einzelne User anwaehlen
exten => sgsthme01,1,Dial(PJSIP/sgsthme01)
exten => ipmanme01,1,Dial(PJSIP/ipmanme01)
;Mailboxabfrage von intern ohne PIN
exten => mailboxname,1,VoiceMailMain(mailboxname@VoiceMailContext,s)
exten => 5201,1,VoiceMailMain(5201@VoiceMail1,s)
;National, mit +49 gewaehlt
exten => _+49ZXX!.,1,Dial(PJSIP/telekom_0abcd900855_out/sip:0${EXTEN:3}@tel.t-online.de,60)
exten => _+49ZXX!.,n,Hangup()
;International
exten => _+X.,1,NoOp(Blocked: ${EXTEN})
  same => n,Playback(sorry-cant-let-you-do-that)
  same => n,Hangup()
exten => _00X.,1,NoOp(Blocked: ${EXTEN})
  same => n,Playback(sorry-cant-let-you-do-that)
  same => n,Hangup()
;National, mit 0 vorneweg
exten => _0Z.,1,Dial(PJSIP/telekom_0abcd900855_out/sip:${EXTEN}@tel.t-online.de,60)
exten => _0Z.,n,Hangup()
;Ortsnetz
exten => _Z.,1,Dial(PJSIP/telekom_0abcd900855_out/sip:${EXTEN}@tel.t-online.de,60)
exten => _Z.,n,Hangup()
;Notrufe gehen immer
exten => 110,1,Dial(PJSIP/telekom_0abcd900855_out/sip:[email protected],60)
exten => 110,n,Hangup()
exten => 112,1,Dial(PJSIP/telekom_0abcd900855_out/sip:[email protected],60)
exten => 112,n,Hangup()
; ********* Kostenpflichtige Sondernummern ***********
exten => _0137Z.,1,NoOp(Blocked: ${EXTEN}) ;Servicenummern für TeleVoting
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _0138Z.,1,NoOp(Blocked: ${EXTEN})
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _0180Z.,1,NoOp(Blocked: ${EXTEN}) ;Servicenummern für Service-Dienste
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _0181Z.,1,NoOp(Blocked: ${EXTEN}) ;Zugang zu VPN, Kunden-Hotline
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _0182Z.,1,NoOp(Blocked: ${EXTEN})
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _0183Z.,1,NoOp(Blocked: ${EXTEN})
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _0184Z.,1,NoOp(Blocked: ${EXTEN})
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _0185Z.,1,NoOp(Blocked: ${EXTEN})
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _0186Z.,1,NoOp(Blocked: ${EXTEN})
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _0187Z.,1,NoOp(Blocked: ${EXTEN})
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _0188Z.,1,NoOp(Blocked: ${EXTEN})
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _032Z.,1,NoOp(Blocked: ${EXTEN}) ;Vorwahl für Internettelefonie-Nutzer
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _0700Z.,1,NoOp(Blocked: ${EXTEN}) ;persönliche Rufnummer 0700
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _09001Z.,1,NoOp(Blocked: ${EXTEN}) ;Premiumdienste Information
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _09003Z.,1,NoOp(Blocked: ${EXTEN}) ;Premiumdienste Unterhaltung
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _09005Z.,1,NoOp(Blocked: ${EXTEN}) ;Premiumdienste Sonstiges, Erotik
  same => n,Playback(sorry-cant-let-you-do-that3)
  same => n,Hangup()
exten => _09009Z.,1,NoOp(Blocked: ${EXTEN}) ;Dialer
 same => n,Playback(sorry-cant-let-you-do-that3)
 same => n,Hangup()
exten => 0abcd900855,1,Dial(PJSIP/sgsthme01,30)
exten => 0abcd900855,n,VoiceMail(mailboxname@mailboxcontext)
exten => 0abcd900855,n,Hangup()
exten => 0abcd900856,1,Dial(PJSIP/sgsthme01,30)
exten => 0abcd900856,n,VoiceMail(mailboxname@mailboxcontext)
exten => 0abcd900856,n,Hangup()
[telekom_0abcd900855_in]
exten => 02173900855,1,Dial(PJSIP/sgsthme01&PJSIP/ipmanme01,30)
;;   same => n,Playback(Ansagetext)
  same => n,VoiceMail(mailboxname@mailboxcontext)
  same => n,Hangup()
[telekom_0abcd900856_in]
exten => 0abcd900856,1,Dial(PJSIP/sgsthme01&PJSIP/ipmanme01,30)
;;   same => n,Playback(Ansagetext)
  same => n,VoiceMail(mailboxname@mailboxcontext)
  same => n,Hangup()

Versuche ich nun von einen ZoiPer SIP Client den anderen ZoiPer SIP Client zu erreichen bekomme ich im Asterisk CLI folgende Fehlermeldung:

[Nov 14 18:02:38] ERROR[28099] res_pjsip.c: Endpoint 'ipmanme01': Could not create dialog to invalid URI 'ipmanme01'.  Is endpoint registered and reachable?
[Nov 14 18:02:38] ERROR[28099] chan_pjsip.c: Failed to create outgoing session to endpoint 'ipmanme01'
[Nov 14 18:02:38] WARNING[28195][C-00000000] app_dial.c: Unable to create channel of type 'PJSIP' (cause 3 - No route to destination)

Habt Ihr noch eine Idee welche Analysen ich machen kann um den Fehler zu finden?

Lieben Gruß von Stefan Harbich