05-11-2017 01:04 AM - edited 03-18-2019 01:06 PM
Hello colleagues,
can someone kindly advise what the rout cause could be?
Description:
Placing video call from VC system in local network to VC system on another network with public IP is not successful, showing status "No route to destination Unreachable destination"
Having a look at the diagnostic logs, We cannot see any traffic going out to the public IP we are trying to reach.
***UPDATE***
issue fixed after reboot. Thanks all
Thanks a lot in advance
Lyubo
05-11-2017 04:00 AM
This means the VC is not able to talk to VC in public world. Make sure that your firewall allows necessary ports. H.323 ports 1720 and also the ports for H.245 media negotiation.
Read the endpoint document to know what ports it used to communicate.
Also since you are on internal network behind a firewall you have to enable H.323 NAT on the internal endpoint so that correct ip's are sent to far end, otherwise you would face media issues.
Regards,
Alok
05-11-2017 04:07 AM
Thank you very much.
The port is indeed 1720 and it is allowed on the firewall. As I spoke with the colleague from networking, he cannot see any activity at all. Will check further.
TA
Lyubo
05-11-2017 04:27 AM
IF they don't see any connection on firewall then may be a routing issue ? not sure.
But try to do a tcp dump or trace-route if the endpoint supports that.
Also make sure that firewall doesn't do a H.323 deep packet inspection and ALG must be turned off for this connections. ALG normally creates problem in such scenario's.
Regards,
Alok
05-11-2017 04:30 AM
Thanks Alok,
will check and give feedback
05-11-2017 06:31 AM
Lyubo,
Can you copy and paste the search history for this call?
Thanks,
Justin
05-11-2017 06:47 AM
Hello Justin,
please find hereafter the search and call history. I've changed our system to 123456789, because I'm not sure if I am allowed to make it public and 140.242.250.204 is a policom test IP
************************************
2017-05-11 13:46:57 H323 (Setup) 123456789@video.domain.com 140.242.250.204 No route to destination - Unreachable destination
************************************
2017-05-11T13:46:57.583+01:00 tvcs: Event="Call Rejected" Service="H323" Src-ip="10.***.***.**" Src-port="19041" Src-alias-type="H323"
Src-alias="123456789@video.domain.com" Src-alias-type="E164" Src-alias="123456789" Dst-alias-type="H323" Dst-alias="140.242.250.204"
Call-serial-number="70d564c7-c3ce-4945-82b2-994f91717fbe" Tag="d16039e9-e90b-4bf3-83ec-3e1e55702939" Protocol="TCP"
Response-code="No route to destination - Unreachable destination" Level="1" UTCTime="2017-05-11 12:46:57,583"
Thank you very much
Lyubo
05-11-2017 06:52 AM
Lyubo,
Is this VCS set to Direct for "Calls to unknown IPs"?
Any alarms?
Thanks,
Justin
05-11-2017 06:54 AM
Justin,
this is correct - set to direct. No alarms - "unfortunately"
Thanks
Lyubo
05-11-2017 09:25 AM
Have you tried in the VCS, Maintenance->Tools->Check Pattern or ->Locate to see how the VCS would handle the failing call? It should be sending it to a zone for a trunk to the public internet.
05-11-2017 10:53 PM
Hello Joe,
thank you for your suggestion. Unfortunatelly I coudnt try it, because my colleagues rebootet the device over night and this fixed the issue somehow.
Thanks again for your effort.
Best
Lyubo
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide