{"id":1625,"date":"2016-05-10T12:45:33","date_gmt":"2016-05-10T11:45:33","guid":{"rendered":"http:\/\/www.cyber-cottage.co.uk\/?p=1625"},"modified":"2017-01-20T11:32:08","modified_gmt":"2017-01-20T11:32:08","slug":"one-way-audio-on-call-pickup-with-hosted-asterisk","status":"publish","type":"post","link":"https:\/\/www.cyber-cottage.co.uk\/?p=1625","title":{"rendered":"Fortigate issues such as one way audio on Call Pickup With Hosted Asterisk and other problems."},"content":{"rendered":"<p>We have noted that with some Fortigate routers and firewalls come with SIP helpers enabled by default.<\/p>\n<p>The customer may initially not think that there is any issue and inbound and outbound calls work as expected, But we had noted on one customer site that when they did a call pickup on another phone that was ringing in the office they would not be able to hear the caller. The caller could hear them and if they put the call on and off hold they could speak normally.<\/p>\n<p>On further \u00a0investigation with <a href=\"http:\/\/www.cyber-cottage.co.uk\/?p=316\" target=\"_blank\">wireshark <\/a>we noted that the RTP port changed when the pickup took place. We tested this on other sites not using the Fortigate hardware and did not have this issue.<\/p>\n<p>Below are listed the commands to clear the SIP helper settings from the Fortigate hardware.<\/p>\n<ol>\n<li>Open the <span class=\"il\">Fortigate<\/span> CLI from the dashboard.<\/li>\n<li>Enter the following commands in <span class=\"il\">FortiGate<\/span>\u2019s CLI:\n<ul>\n<li>config system settings<\/li>\n<li>set sip-helper disable<\/li>\n<li>set sip-nat-trace disable<\/li>\n<li>reboot the device<\/li>\n<\/ul>\n<\/li>\n<li>Reopen CLI and enter the following commands \u2013 do not enter the text after \/\/:\n<ul>\n<li>config system session-helper<\/li>\n<li>show \u00a0 \u00a0\/\/locate the SIP entry, usually 12, but can vary.<\/li>\n<li>delete 12 \u00a0 \u00a0 \/\/or the number that you identified from the previous command.<\/li>\n<\/ul>\n<\/li>\n<li>Disable RTP processing as follows:\n<ul>\n<li>config voip profile<\/li>\n<li>edit default<\/li>\n<li>config sip<\/li>\n<li>set rtp disable<\/li>\n<\/ul>\n<\/li>\n<li>And finally:\n<ul>\n<li><i><span style=\"font-family: sans-serif;\">config system settings<\/span><\/i><\/li>\n<li><i><span style=\"font-family: sans-serif;\">set default-voip-alg-mode kernel-helper based<\/span><\/i><\/li>\n<li><i><span style=\"font-family: sans-serif;\">End<\/span><\/i><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<p><strong>on a\u00a0fortigate 200D the following is the method to use<\/strong><\/p>\n<p><u>Step 1) Removing the session helper.<\/u><\/p>\n<p>Run the following commands:<\/p>\n<p><em>config system session-helper<\/em><br \/>\n<em>\u00a0 show<\/em><\/p>\n<p>Amongst the displayed settings will be one similar to the following example:<\/p>\n<p><em>\u00a0\u00a0\u00a0 edit 13<\/em><br \/>\n<em>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set name sip<\/em><br \/>\n<em>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set protocol 17<\/em><br \/>\n<em>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set port 5060<\/em><\/p>\n<p>In this example the next commands would be:<\/p>\n<p><em>delete 13<\/em><br \/>\n<em>end<\/em><br \/>\n<u>Step 2) Change the default \u2013voip \u2013alg-mode.<\/u><\/p>\n<p>Run the following commands:<\/p>\n<p><em>config system settings<\/em><br \/>\n<em>set default-voip-alg-mode kernel-helper based<\/em><br \/>\n<em>end<\/em><br \/>\n<u>Step 3) Either clear sessions or reboot to make sure changes take effect<\/u><\/p>\n<p>a) To clear sessions<\/p>\n<p>The command to clear sessions applies to ALL sessions unless a filter is applied, and therefore will interrupt traffic.<\/p>\n<p><em>diagnose system session clear<\/em><\/p>\n<p>Taken from<\/p>\n<p><a href=\"http:\/\/kb.fortinet.com\/kb\/documentLink.do?externalID=FD36405\" data-saferedirecturl=\"https:\/\/www.google.com\/url?hl=en-GB&amp;q=http:\/\/kb.fortinet.com\/kb\/documentLink.do?externalID%3DFD36405&amp;source=gmail&amp;ust=1484997893010000&amp;usg=AFQjCNGPbrUOa23oiEArLLOvgY5RntPZkg\">http:\/\/kb.fortinet.com\/kb\/documentLink.do?externalID=FD36405<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>We have noted that with some Fortigate routers and firewalls come with SIP helpers enabled by default. The customer may initially not think that there is any issue and inbound and outbound calls work as expected, But we had noted on one customer site that when they did a call pickup on another phone that [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[11,7],"tags":[23,33,35,39,112,113,40,101,69,73,100,76,77],"class_list":["post-1625","post","type-post","status-publish","format-standard","hentry","category-knowledge","category-technical","tag-asterisk","tag-digium","tag-elastix","tag-firewalls","tag-fortigate","tag-fortiwifi","tag-freepbx","tag-handsets","tag-sip","tag-support","tag-technical","tag-voip","tag-xorcom"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p5daZy-qd","jetpack_sharing_enabled":true,"jetpack_likes_enabled":false,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/www.cyber-cottage.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/1625","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cyber-cottage.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cyber-cottage.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cyber-cottage.co.uk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cyber-cottage.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1625"}],"version-history":[{"count":3,"href":"https:\/\/www.cyber-cottage.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/1625\/revisions"}],"predecessor-version":[{"id":1799,"href":"https:\/\/www.cyber-cottage.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/1625\/revisions\/1799"}],"wp:attachment":[{"href":"https:\/\/www.cyber-cottage.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1625"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cyber-cottage.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1625"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cyber-cottage.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1625"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}