Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 0 replies
  • Subscribers 39 subscribers
  • Views 432 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VOIP SIP Hunting Group Reply Packets

Gerd Rehders1

Hi,

I observe a strange behavior regarding UDP Reply Packets on multiple WAN interfaces.

Since we have configured a SIP hunting group with our telephone provider, the provider sends option pings on the 3 existing WAN interfaces.
3 DNAT rules are set up, one for each interface.

If the SIP helper on the Sophos XG is switched off, all reply packets are sent via WAN 1. (WAN1 is our primary gateway / no SD WAN policy for this network segment)

If the SIP Helper is enabled on the Sophos XG, all response packets will be answered via the correct interfaces.

SIP Helper switched off:
WAN1  <-> Option Ping / ALL Replies WAN1-3 to SIP Provider
WAN2  <-  Option Ping
WAN3  <-  Option Ping

SIP Helper switched on:
WAN1  <-> Option Ping / Reply WAN1 to SIP Provider
WAN2  <-> Option Ping / Reply WAN2 to SIP Provider
WAN3  <-> Option Ping / Reply WAN3 to SIP Provider


How can this behavior be explained?
Incorrect configuration?

Best regards Gerd



This thread was automatically locked due to age.
Unfiltered HTML