Fibre modem linking to wan port router Vodafone branded

asked 2017-10-30 15:48:29 +0000

This post is a wiki. Anyone with karma >750 is welcome to improve it.

Hello all

Please forgive me if I don’t know exactly what I am talking about.

I have a big problem with my fibre to the location supplied by Vodafone es.

I have a fibre modem that the fibre plugs in and then a cat 6 cable going to a Vodafone branded router wan port.

The router has a VoIP port on it that you plug a plain ordinary telephone in.

The problem is:

Vodafone are completely un co operative Even if you put a device on a static lan ip and make it dmz ports 5060 and 5061 and a load of other ports are blocked. It tells you in the router that these ports are blocked.

I need to get rid of the Vodafone router completely and use my own wan router. But I don’t know what credentials to use and voda won’t give me them. Cos the are zzz xxxxx!

So what I was thinking was putting a switch between the modem and the router wan port and putting a pc on the switch also with wireshark on it. So I can try and sniff what is going on.

I could try and use another one of my routers to watch what that does to try and logon. At least then I know what the username and password is I put in my own router so I can see what happens with no credentials.

I need the ports for my VoIP project.

I am not that bothered about Vodafone t&c so please no links to Vodafone t&c it’s not my fault my provider router steals ports i need.

Do I need port mirroring switch?

When the engineers came to install the broadband they pasted credentials from a spreadsheet into some browser, but like a fool I didn’t ask for them!

edit retag flag offensive close merge delete

Comments

Sorry I mean a switch between modem and router wan not lan!

costadelsol ( 2017-10-30 15:50:04 +0000 )edit

Fixed (lan -> wan)

Jaap ( 2017-10-30 19:41:59 +0000 )edit

add a comment

2 Answers

Sort by » oldest newest most voted

answered 2017-10-30 19:41:38 +0000

sindy
6209 ●5 ●66 ●55

As for the WIreshark-related part of your issue: The switch you place between the router and the modem has to be capable of traffic mirroring in order to allow you to capture the traffic between the router and the modem. Unfortunately for your purpose, chances are that the password will not be available there in plaintext and that some challenge-response authentication is used.

As for the real issue you need to solve: I can understand that if a box has an FXS port on it, its SIP stack binds to 5060 as factory default and thus that port cannot be forwarded without disabling the VoIP gateway functionality of the box.

What I cannot understand is why you need exactly port 5060 for your purpose:

either you want to run a SIP CPE, so it registers to a remote registrar, and can use any port as it tells the registrar on which port it expects incoming calls; the registrars are ready for this as you can have several CPEs behind a single "public" IP address so they cannot all bind to 5060 (unless the NAT device would be deeply SIP-aware and forward messages up to URIs rather than port numbers)
or you want to run your own registrar and proxy, and here too you can choose any other port provided that you tell the CPEs to register to it instead of the default 5060 (or 5061 for sips).

So I'd say don't waste time by trying to find the credentials and simply use some other port.

What would bother me much more than an exact port number would be eventual ALG functionality of the router, intended to modify the SIP messages forwarded so that the headers and SDP information contain the IP address of the WAN interface of the router - this functionality is often broken and makes things worse.

edit flag offensive delete link

Comments

Hello Thanks for your replies. The provider of the numbers I use are hard set at 5060 They won’t change and I won’t change them. I want to put an asterisk server on an internal ip that’s Dmz I don’t like the Vodafone branded router I like draytek.

costadelsol ( 2017-10-30 19:53:41 +0000 )edit

I am an asterisk novice and at my previous address broadband I only had any success when I opened everything up to asterisk. I only know basic things about sip.conf and extensions.conf. I don’t trust the voda router.

costadelsol ( 2017-10-30 19:57:14 +0000 )edit

NOT related to Wireshark any more, yet: do you realize that the port at your end (where your Asterisk will listen) and at the port at provider's end are two independent things? So you can run your Asterisk at 5064 (sip.conf will do) and tell it to register at provider's IP at port 5060.

sindy ( 2017-10-30 20:18:24 +0000 )edit

I cannot believe that the VoIP provider would only accept port 5060 at customer side.

sindy ( 2017-10-30 20:19:27 +0000 )edit

I am going to have a go at doing what you say with wireshark and the mirroring switch. I would like to learn as I want to learn about my femtocell too. Thats another provider issued piece of kit I’d like to understand. I’d like to go to battle with that too.

costadelsol ( 2017-10-30 20:28:04 +0000 )edit

add a comment