Hi Team,
Setup is VOIP phones connected to Switch, Switch is then connected to Firewall
VOIP Phones able to make call only when it is connected to VOIP Server over the internet.
1. Customer upgraded firewall from R77.30 to R80.20
2. In R77.30, the firewall rule base is like
---> Network_A Any Any Accept
We can say VOIP network as Network_A which is Hide NAT (behind gateway)
And in Applictaion rule base is
--> Network_A Internet [SIP Communicator, SDP over SIP, SIP messaging, SIP Protocol, Network Protocols Category] Accept
SIP traffic is working fine with R77.30 version.
3. But the same is not working in R80.20 and getting the below errors:
--> fw ctl zdebug shows the multicast IP 224.0.1.75:
@;78481;[cpu_1];[fw4_0];fw_log_drop_ex: Packet proto=17 :5060 -> 224.0.1.75:5060 dropped by fw_first_packet_outbound_init Reason: failed to get outbound interface;
--> tcpdump shows:
For example: Source IP is 10.10.10.10
arp who has <10.10.10.20 -- internal ip> address tell 10.10.10.10
--> But in Logs and Monitoring view, the SIP traffic is getting dropped with the message information: Missing OS Route
Kindly let me know how can we resolve this issue.
