380.66_4 Voip ATA wont re-register after WAN down

[eastavin]

I have a come across something unusual that I want to get to the bottom of. RT-AC68U C1 with a Grandstream HT-702 ATA running latest f/w which is several years old (1.0.8.2) The ATA is set to use a static LAN address and the Asus is set to for MAC-IP binding to reserve the ip address.

If the ATA is added to a working network things are good and the reservation set. Everything works as expected.

However if you 1) release the WAN and then reenable it the ATA fails to reregister the 2 lines until you cancel/turn off the Mac-IP binding. (2) if there is a power fail again the ATA will fail to reregister after all powers back up - until I login to the router and release the MAC-IP binding in which case it registers instantly.

Am I misusing the MAC-IP binding feature? Or is there some other conflict I have not considered? I have tried using a LAN address within the DHCP range and outside the DHCP range and it made no difference. The ATA appeared to function normally on stock f/w and 380.66_2 in the past but I cant honestly say the problem does not exist there. The reregistration issue only came up after upgrading the router to _4 and a subsequent power fail ... which made me go looking.

 

[Vexira]

im having a simliar with my grandstream HT-812, i have to use the mac of my isp modem to get voip to register. When my router reboots the ata wont dial out any more but in my case its registered. You issue might be similar to mine, router register it needs the ports to be forwarded by upnp in my case after power cycle I need to reboot the ATA to get the ports to forward again. When it's not registered check the router log for upnp and see if the ports are forwarded.

 

[eastavin]

I really appreciate your thoughts. Have been using it from the beginning without UPNP.. several years. As the register request originates from the ATA its unlikely that UPNP would be adding anything valuable, just security risk. I sort of feel (but don't know yet) this has something to do with DHCP operation and discovery in my case but need to invest more time.

 

[Vexira]

the upnp that merlin uses, is more secure or he turns on the secutiy features as per say, as long as you dont enable ports below 1024 on internal i reas it should be fine. I enabled the sip keep alive setting in my ata, i notced that to even make outbound or receve inbond calls i needed upnp since, i dont know much about stun or the other options, i also notice that after i reboot my 88u i need to reboot the ata for the voip ports to show up.

 

[eastavin]

im having a simliar with my grandstream HT-812, .

Something just came back to me. If your 812 is behind the Asus you are double natting. I was wondering why you need holes in your firewall?? I recall having this discussion with grandstream tech support and they told me that if you are behind a firewall the correct product is an ht-802 (no Nat or router).

If there is no router in front then use the 812m as it has one. here is a clip from their webpage "The HT812 is a powerful analog telephone adapter that is easily deployable and manageable. It comes equipped with 2 FXS ports and an integrated Gigabit NAT router"

So if you turn off the grandstream nat you should be able to work without UPNP on your asus router. (also called UnPlugaNdPray for those of us old enough to remember the dangers of letting programs punch holes in firewalls without any oversight).

An alternative idea is to put the ht-812 in the asus DMZ configured as is with the NAT on. I betcha it works perfectly there.

 

[Vexira]

Something just came back to me. If your 812 is behind the Asus you are double natting. I was wondering why you need holes in your firewall?? I recall having this discussion with grandstream tech support and they told me that if you are behind a firewall the correct product is an ht-802 (no Nat or router).

If there is no router in front then use the 812m as it has one. here is a clip from their webpage "The HT812 is a powerful analog telephone adapter that is easily deployable and manageable. It comes equipped with 2 FXS ports and an integrated Gigabit NAT router"

So if you turn off the grandstream nat you should be able to work without UPNP on your asus router. (also called UnPlugaNdPray for those of us old enough to remember the dangers of letting programs punch holes in firewalls without any oversight).

An alternative idea is to put the ht-812 in the asus DMZ configured as is with the NAT on. I betcha it works perfectly there.

mines set to bridge mode i changed it from nat router, either i need to set stun or edge traversal, didn't work with out upnp, my isp is weird like that, wouldnt register with out a mac clone of thier modem/router, tested it with a freind who has the same kit, wouldnt register till the mac clone was in place. For dmz its pita, id rather change the default port number to avoid port scan attacks, since i already disabled ip calling, its just that upnp is being odd on my 88u.

 

[eastavin]

Hmm. I guess you know your isp best after all these years. Its just that something sounds off to me. You say your ISP only assigns a WAN address to a specific MAC address you provided them from your router. OK sounds good here there are such ISPs. After that I am not so sure you are set up the best way.

If you have not already done so it cant hurt to open a trouble ticket with Grandstream helpdesk and tell them the story. They are pretty helpful. you may also want to check over their release notes for the f/w you are on http://firmware.grandstream.com/Release_Note_HT81x_1.0.3.2.pdf . I had some issues with their latest f/w release and they surprised me by the amount of testing they did to duplicate my issue and found it... even getting a test account from my voip provider. The guys were good I have to say.

 

[Vexira]

In Australia I'm on the nbn, most issues don't like you using third party hardware, due the the crappy vdsl2 in some areas I'm in one of those areas, my ISP optus is one of the ip's that like to push you to use their hardware, I'm on ipoe its dhcp on the isp end of sorts, not ppoe/a, it some what works with out a mac clone but voip won't always register, the mac clone is on my 88u. The nbn co has strict hardware restrictions on what hard ware is compatible, to 'prevent service degrerdation' by port locking unsupported devices like adsl 2+ modems and non vectored vdsl2 modems.