Symmetric NAT issues with Cisco 7961G prevent registration
 

I am new to Voxalot and would like to register my Cisco 7961. This UA has a particularly unhelpful SIP implementation that sends SIP messages (e.g. REGISTER) to the proxy (e.g. based on DNS record for voxalot.com) from random high numbered ports (e.g. UDP/49000). By itself, this is not a problem, except that it listens for responses only on the configured "VOIP Control Port" (e.g. UDP/5060), which make it incompatible with Symmetric NAT (e.g. on asterisk, "nat=yes"). To make things especially fun, it increments the source UDP port with each outgoing SIP message (so the first REGISTER could come from UDP/49000, second attempt from UDP/49001, ...).

The UA is technically behaving in an RFC compliant way, and Cisco contends that this is a security enhancement. The Voxalot SIP proxy appears to use Symmetric NAT to workaround NAT issues.

I have this device working fine with a number of VOIP providers (e.g. Vitelity, Junction, FWD, etc.). Vitelity and Junction both allow the user to configure whether to use Symmetric NAT in their account management interface, and FWD seems to have an automatic protocol sniffing approach.

Is there a way to use Voxalot without Symmetric NAT? I realize most people don't need this, but it's quite useful for those who do. :)

This strange UA behavior is documented on the VOIP wiki: http://www.voip-info.org/wiki/index....%20local%20PBX

Anybody else affected by this?

Thanks!

You are 100% correct that our NAT handling is for symmetric UAs as that does indeed cater for the majority.

However your request is something we are very keen to do and it should be a relatively easy change for us to make.

We don't have one of these devices handy but if you are willing to work with us off-line against our test server we are more than happy to oblige.

Follow-up
 

Happy to help! Sent PM, includes packet capture, config, and screenshot.

Results
 

Pleased to report that symmetric NAT is user configurable in the testing site, and it works with the Cisco 79x1 UA. Looking forward to the next release. :)