Andrews Arnold + OPNsense + Grandstream HT801

Hello,

I'm new to Voip. I just signed up for an Andrews and Arnold account as very good feedback and reviews. Except, I'm really struggling to get it running with my router running OPNsense!

I have allowed port 5060, set up the account but no joy. I added siproxd plugin and filled in what I could but still no joy.

Has anybody got any tips on getting Voip working with an OPNsense / pfSense router? Any guidance you can provide would be greatly welcomed.

I migrated my existing VOIP services from an ISP router to Opnsense without any issue, no opening any ports, no plugins like siproxd required, it was seamless.

If your ISP provided you with a router when you took the service I would suggest getting the VOIP working via that first before you try it with Opnsense as you may go down the wrong rabbit hole.

Edit: for clarity my VOIP services are not provided by my ISP as that is a totally different conversation.

Edited by deleted (Tue 11-Jul-23 16:14:36)

Thank you.

Likewise - I have different providers for internet (BT) and Voip (A&A).

I had Voip working on my old Unifi USG router last week. But, I swapped that out for OPNsense as the USG could not operate with a faster broadband speed.

Andrew & Arnold use SIP - I think this is maybe the bit that is not playing well with OPNsense.

If anybody knows how to OPNsense working with SIP I'd love to see how. I'm pulling my hair out (and maybe missing phone calls!)

If it was me I would temporary plug the BT hub back in and connect the Grandstream HT801 into the hub and see if it works, if it does then you can focus on the Opnsense if it doesn't then you need to look at the Grandstream HT801

Edit: Most VOIP services are SIP including mine, I did no special setup for it to work on either my ISP router or my Opnsense router only the ATA had to be correctly configured.

Edited by deleted (Tue 11-Jul-23 17:16:31)

It's just UDP. The firewall doesn't need any special configuration.

Have you *ever* hand the HT801 working with the AAISP VOIP service? If not, then it's almost certainly your SIP configuration in the HT801 that's at fault.

If you have, then check your HT801 is getting an IP address and gateway from your OPNSense server (look at the DHCP leases)

You don't need to open any ports, usually anyway. The ports will be opened when the device connects up to the SIP server then usually "keepalives" are pinged out from the device to keep port 5060 alive over NAT and the Firewall open in order to receive incoming calls. If the settings like account and password are correct you should at least be able to make an outgoing call.

What I would suggest is removing anything added to help with the SIP problem and get back to basics.

You can use pfTop and filter on port 5060, this will let you see if it connects and if packets pass back and forth.

What issues are you having? Or is it just failing to register full stop?

In reply to a post by candlerb:

It's just UDP. The firewall doesn't need any special configuration.

Have you *ever* hand the HT801 working with the AAISP VOIP service? If not, then it's almost certainly your SIP configuration in the HT801 that's at fault.

If you have, then check your HT801 is getting an IP address and gateway from your OPNSense server (look at the DHCP leases)

Yes, the HT801 worked with my Unifi router, I could make and receive calls.

Yes the HT801 is getting an internal IP address from OPNsense.

In reply to a post by candlerb:

It's just UDP. The firewall doesn't need any special configuration.

Have you *ever* hand the HT801 working with the AAISP VOIP service? If not, then it's almost certainly your SIP configuration in the HT801 that's at fault.

If you have, then check your HT801 is getting an IP address and gateway from your OPNSense server (look at the DHCP leases)

I'm sure the OP with the issue will appreciate your comments

Are you running IPv6 on opnSense and your ISP?

Also some more information here about Firewall rules. https://support.aa.net.uk/VoIP_Firewall

Edited by E300 (Tue 11-Jul-23 18:10:10)

In reply to a post by E300:

You don't need to open any ports, usually anyway. The ports will be opened when the device connects up to the SIP server then usually "keepalives" are pinged out from the device to keep port 5060 alive over NAT and the Firewall open in order to receive incoming calls. If the settings like account and password are correct you should at least be able to make an outgoing call.

Thank you. We can make outgoing calls. Just not receive then. When making an incoming call the line is just silent. No ring tone, nothing on the calling phone and the voip phone also does not ring. Then it goes to voicemail. I can see a record of incoming call in the call log online. But, no indication there is a call from the voip.

What I would suggest is removing anything added to help with the SIP problem and get back to basics.

You can use pfTop and filter on port 5060, this will let you see if it connects and if packets pass back and forth.

I have disabled the SIP plugin. Looking at the live view / log files, I can see the incoming call on port 5060 proto udp, but is blocked by "Default deny / state violation rule"?

What issues are you having? Or is it just failing to register full stop?

The HT801 says it is registered. And, can make outgoing calls. But, does not ring nor allow incoming calls.