• Home
  • My Tools
  • Visio Stencils
  • Online Tools
  • PS Scripts
  • PS One Liners
  • Downloads
  • Product Review
  • About

Modern Workplace and Collaboration

~ by Paul B

Modern Workplace and Collaboration

Category Archives: Firewall Rules

SIP/2.0 415 Unsupported Media Type

30 Saturday Sep 2017

Posted by Paul B in Firewall Rules, SIP, SIP 415, SIP/2.0 415 Unsupported Media Type

≈ 2 Comments

Tags

SIP/2.0 415 Unsupported Media Type, Skype for Business, Troubleshooting

So this is a new error for me, not seen this in Skype Client logs before. But there it was, SIP/2.0 415 Unsupported Media Type.

unsupported media

The deployment is Two Front End Pools (both Standard Edition) with a single Edge Pool. No Enterprise Voice (yet).

The Problem

When attempting to call a service that’s effectively a Pexip DMZ Cloud Service in New Zealand (called SmartPresence) from the corporate LAN then the call seems to connect but then disconnects, there is no audio or video.

It all works when then the Skype user tries calling the Pexip\SmartPresence bridge from an external location (not corporate LAN).

Troubleshooting

At first glance, you’d agree that this smells of firewall issues. Lets see what the logs say. Heading off to the client logs cause that’s my go to as a starting point for these sorts of issues. I find the call and of course spot the SIP/2.0 415 Unsupported Media Type.

Looking at the negotiation of Media I see that the Skype Client sends all the usual audio and video codec options.

Audio options from Skype client

Snooper 01

Video Options from Skype client

snooper 02

On the inbound side from SmartPresence we see that there are less media options (thats expected) but certainly options that match with what the Skype client is capable of.

Audio Options from Pexip\SmartPresence

snooper 03

So it appears that its not so much an unsupported Media type, lets see what the clients agree on using by looking for the results of the candidate negotiation.

Looking for the a=remote-candidates line tell in the client log should show the options both clients agree on.

Wait..there is no a=remote-candidates for this call!

What, so that means that the candidate negotiation is failing to establish a viable path between the the Skype client and the Pexip\SmartPresence service. Taking a closer look at the candidtes on offer I see the below.

Candidates from Skype client

snooper 04

So the Skype client sends options 2,3 and 4 as viable (1 and 5 are direct, thats not allowed by customer strict firewall policies).

Candidates from SmartPresence\Pexip

pexip 01

Looking at the options from the Pexip\SmartPresence service I can see the candidates on offer.. and there it is.

Those are not standard ports!

Since when do we need ports in the 40 000 range from our Edge Server pool outbound?

Right, what does the Pexip portal say with regard to firewall requirements. Searched a while for this info but eventually found the following table

pexip 02

and also this little gem

pexip 03

Solution

Open ports 40 000 – 49 999 for both UDP and TCP outbound from the Edge pool to Pexip\SmartPresence Cloud

Source https://docs.pexip.com/sfb/ports.htm

Share this:

  • Click to share on Twitter (Opens in new window)
  • Click to share on Facebook (Opens in new window)
  • Click to share on LinkedIn (Opens in new window)
  • Click to share on WhatsApp (Opens in new window)
  • Click to share on Reddit (Opens in new window)
  • Click to share on Pocket (Opens in new window)
  • Click to share on Pinterest (Opens in new window)
  • Click to share on Tumblr (Opens in new window)
  • Click to share on Skype (Opens in new window)
  • Click to email a link to a friend (Opens in new window)
  • Click to print (Opens in new window)

Like this:

Like Loading...

Firewall and Reverse Proxy Rules for Lync Deployment

17 Tuesday Jan 2012

Posted by Paul B in Edge Server, Firewall Rules, Lync Edge, Quick Reference Guide

≈ Leave a comment

I realize that this is some really old information but really needed this in the “cloud” for quick reference. So here it is:-

Overview

Absolute minimum on External Firewall as follows:

UDP 3478 and TCP 443 inbound
UDP 3478 to UDP 3478 outbound
TCP 50000 – 59999 to TCP 443 outbound

References

Determine External A/V Firewall and Port Requirements

Ports and Protocols for Internal Servers

Share this:

  • Click to share on Twitter (Opens in new window)
  • Click to share on Facebook (Opens in new window)
  • Click to share on LinkedIn (Opens in new window)
  • Click to share on WhatsApp (Opens in new window)
  • Click to share on Reddit (Opens in new window)
  • Click to share on Pocket (Opens in new window)
  • Click to share on Pinterest (Opens in new window)
  • Click to share on Tumblr (Opens in new window)
  • Click to share on Skype (Opens in new window)
  • Click to email a link to a friend (Opens in new window)
  • Click to print (Opens in new window)

Like this:

Like Loading...

Microsoft MVP

Follow Modern Workplace and Collaboration on WordPress.com

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Join 674 other followers

Show your appreciation by donating

Links

  • Andrew Morpeth
  • Anthony Caragol
  • Get-CsJosh
  • Greig in Sydney
  • Guy Bachar
  • Jeff Schertz
  • Lasse Nordvik Wedø
  • LEXEL UC
  • Mark Vale
  • y0av. With a zero.

Archives

Category

ABS ABServer ADContacts Address Book AddressBook AddressBook Service Communicator contacts CX500 Devices DHCP DNS Edge Server Error Codes event id Exchange UM 2010 GAL Install Guide Lync 2013 Tools Lync Edge Lync Tools Microsoft Teams Monitoring Polycom Powershell Scripts Product Review QOS Quick Reference Guide Reskit RGS RTC Database SIP SIP Options Skype for Business Skype for Business Monitoring Skype for Business Tools SQL Teams TMG Tool Tools Troubleshoot Edge UC Sorted Tools UM Uncategorized Unified Messaging visio Visio Stencil voicemail

Create a free website or blog at WordPress.com.

Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
  • Follow Following
    • Modern Workplace and Collaboration
    • Join 674 other followers
    • Already have a WordPress.com account? Log in now.
    • Modern Workplace and Collaboration
    • Customize
    • Follow Following
    • Sign up
    • Log in
    • Report this content
    • View site in Reader
    • Manage subscriptions
    • Collapse this bar
 

Loading Comments...
 

    %d bloggers like this: