iChat video/screensharing works locally but not over the WAN.
Hello All, First i want to explain how my company is setup. We have multiple office across 3 different states. I have a local jabber server installed on a MAC Pro Server in the main office. I have a SonicWall NSA 3500 with the proper ports opened (according to this TCP and UDP ports used by Apple software products - Apple Support). All the other offices use a variety of models of Airport Extreme's with NAT mapping protocol enabled. The MAC OS X varies on the client iMacs from 10.7.5 to 10.10.4 depending on the office.
Starting about 4 months ago my company began experiencing iChat video and screensharing connection problems. It started as just being intermittent with 1 or 2 users throughout the day. At this time a simple NVRAM and PRAM reset would resolve the connection issues between users. Then the entire company was experiencing an entire day where no-one could video chat except locally within the office, then the following day it would be functioning properly. This happened for about a month. Then about 2 weeks ago iChat Video and Screensharing stopped working altogether company wide.
During this time i have completely rebuilt the Server, upgrading from Lion Server to Yosemite. I have had Apple Tier 2 tech support connect and build the Messages server from scratch. Apple Tier 2 tech support mentioned that the local Messages server intended use is for local office and that it is working as intended, (even though this was in use with our current business model for 3 years). He recommended a 3rd party jabber server. I currently have installed Openfire Jabber Server and configured properly and am still experiencing the same exact problems. I have also contacted my SonicWall Vendor tech support 3 different occasions and they have verified the settings on the firewall are configured correctly and noted nothing wrong with the NSA 3500. I have contacted my ISP Fiber provider and they have verified they are not blocking ports and have verified their equipment is fully operational.
Here are things i know.
- iChat video and screen sharing works locally at each office but not across subnets.
- The Packet Capture that my SonicWall noticed the SIP packet going from my Client Machine to the distant end on port UDP 16402 but when the distant end clicks accept there is no return packet to the firewall on port 16402.
- iChat video will work if connected through VPN but crashes after 30 minutes and is unable to connect again. Same SIP error noted in the logs below.
Below is the error log we receive when we try video chat or screen sharing.
Date/Time: 2015-07-16 10:32:06 -0700
OS Version: 10.10.4 (Build 14E46)
Report Version: 4
Messages Connection Log:
2015-07-16 10:31:23 -0700: 0x608000190740: State change from No State to Invited.
2015-07-16 10:31:45 -0700: 0x608000190740: State change from Invited to Connecting.
2015-07-16 10:31:53 -0700: 0x608000190740: State change from Connecting to Ended.
2015-07-16 10:31:53 -0700: 0x608000190740: Error 1008 (Did not receive a response from 0x608000190740.)
Video Conference Error Report:
86754.568112 @/SourceCache/VideoConference/VideoConference-473/SIP/SIP.c:2255 type=4 (900A0015/0)
[SIPConnectIPPort failed]
[]
Video Conference Support Report:
0.000000 @/SourceCache/VideoConference/VideoConference-473/SIP/Transport.c:2144 type=1 (00000000/0)
[SIP/2.0 200 OK
Via: SIP/2.0/UDP 172.16.100.100:16402;branch=z9hG4bK6e49cf83135c0092
To: 0 <sip:user@lip:16402>;tag=610441441
From: u0 <sip:user@172.16.100.100:16402>;tag=928253306
Call-ID: 1e52b168dfe353e-2b16-11e5-b5cf-e2bf9f2b4012@172-16-100-100
CSeq: 1 INVITE
Contact: <sip:user@lip:16402>
User-Agent: Viceroy 1.4
Content-Type: application/sdp
Content-Length: 395
v=0
o=mmobley 0 0 IN IP4 lip
s=1001
c=IN IP4 lip
b=AS:2147483647
t=0 0
a=hwi:1056:4:3200
a=bandwidthDetection:YES
m=audio 16402 RTP/AVP 110
a=rtcp:16402
a=rtpmap:110 X-AAC_LD/22050
a=rtpID:2153114169
m=video 16402 RTP/AVP 123
a=rtcp:16402
a=rtpmap:123 H264/90000
a=RTCP:AUDIO 16402 VIDEO 16402
a=fmtp:123 imagesize 0 rules 20:640:480:640:480
a=rtpID:1866507574
]
[]
0.053686 @/SourceCache/VideoConference/VideoConference-473/SIP/Transport.c:343 type=2 (00000000/0)
[ACK sip:user@lip:16402 SIP/2.0
Via: SIP/2.0/UDP 172.16.100.100:16402;branch=z9hG4bK3adb2dda291546d8
Max-Forwards: 70
To: 0 <sip:user@lip:16402>;tag=610441441
From: u0 <sip:user@172.16.100.100:16402>;tag=928253306
Call-ID: 1e52b168dfe353e-2b16-11e5-b5cf-e2bf9f2b4012@172-16-100-100
CSeq: 1 ACK
User-Agent: Viceroy 1.4
Content-Length: 0
]
[]
0.155914 @:0 type=1 (00000000/0)
[Bandwidth Detection]
[Received the first BWD packet from 172.16.100.100:16402]
0.522277 @:0 type=1 (00000000/0)
[Bandwidth Detection]
[Avg=100649.30, NSDev=55.57%]
0.658062 @:0 type=1 (00000000/1)
[Bandwidth Detection]
[Avg=853679.30, NSDev=48.42%]
0.772362 @:0 type=1 (00000000/2)
[Bandwidth Detection]
[Avg=2873909.00, NSDev=9.63%]
72.738519 @/SourceCache/VideoConference/VideoConference-473/SIP/Transport.c:2144 type=1 (00000000/0)
[BYE sip:user@172.16.100.100:16402 SIP/2.0
Via: SIP/2.0/UDP lip:16402;branch=z9hG4bK10f7cac74a7a8b3e
Max-Forwards: 70
To: u0 <sip:user@172.16.100.100:16402>;tag=928253306
From: 0 <sip:user@lip:16402>;tag=610441441
Call-ID: 1e52b168dfe353e-2b16-11e5-b5cf-e2bf9f2b4012@172-16-100-100
CSeq: 1 BYE
User-Agent: Viceroy 1.4
Content-Length: 0
]
[]
72.826088 @/SourceCache/VideoConference/VideoConference-473/SIP/Transport.c:343 type=2 (00000000/0)
[SIP/2.0 200 OK
Via: SIP/2.0/UDP lip:16402;branch=z9hG4bK10f7cac74a7a8b3e
To: u0 <sip:user@172.16.100.100:16402>;tag=928253306
From: 0 <sip:user@lip:16402>;tag=610441441
Call-ID: 1e52b168dfe353e-2b16-11e5-b5cf-e2bf9f2b4012@172-16-100-100
CSeq: 1 BYE
User-Agent: Viceroy 1.4
Content-Length: 0
]
[]
86730.661188 @/SourceCache/VideoConference/VideoConference-473/Video Conference/VCInitiateConference.m:1973 type=2 (00000000/0)
[Connection Data for call id: 5 returns 1
]
[]
86746.567680 @/SourceCache/VideoConference/VideoConference-473/Video Conference/VCInitiateConference.m:1988 type=2 (00000000/0)
[Prepare Connection With Remote Data - remote VCConnectionData: 1, local VCConnectionData: 1
]
[]
86746.588500 @/SourceCache/VideoConference/VideoConference-473/Video Conference/VCInitiateConference.m:2180 type=2 (00000000/0)
[Initiate Conference To User: u0 with Remote VCConnectionData: 1 with Local Connection Data: 1 conferenceSettings: 1]
[]
86752.568495 @/SourceCache/VideoConference/VideoConference-473/SIP/Transport.c:2144 type=1 (00000000/0)
[INVITE sip:user@rip:16402 SIP/2.0
Via: SIP/2.0/UDP lip:16402;branch=z9hG4bK456e05ec32f7d26f
Max-Forwards: 70
To: "u0" <sip:user@rip:16402>
From: "0" <sip:user@lip:16402>;tag=1602980090
Call-ID: 1e52be08b3266c0-2be0-11e5-8272-8b7231a74012@lip
CSeq: 1 INVITE
Contact: <sip:user@lip:16402>;isfocus
User-Agent: Viceroy 1.4
Content-Type: application/sdp
Content-Length: 684
v=0
o=mmobley 0 0 IN IP4 lip
s=0
c=IN IP4 lip
b=AS:2147483647
t=0 0
a=hwi:1056:4:3200
a=iChatEncryption:NO
a=bandwidthDetection:YES
m=audio 16402 RTP/AVP 110 12 124 3 0
a=rtcp:16402
a=rtpmap:110 X-AAC_LD/22050
a=rtpmap:3 GSM/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:124 iLBC/8000
a=fmtp:124 mode=30
a=rtpID:2137538099
m=video 16402 RTP/AVP 123 126 34
a=rtcp:16402
a=rtpmap:123 H264/90000
a=rtpmap:126 X-H264/90000
a=rtpmap:34 H263/90000
a=fmtp:34 imagesize 1 rules 30:352:288
a=framerate:30
a=RTCP:AUDIO 16402 VIDEO 16402
a=fmtp:126 imagesize 0 rules 30:640:480:640:480:30
a=fmtp:123 imagesize 0 rules 30:640:480:640:480:30
a=rtpID:3017826849
]
[]
86753.071798 @/SourceCache/VideoConference/VideoConference-473/SIP/Transport.c:2144 type=1 (00000000/0)
[INVITE sip:user@rip:16402 SIP/2.0
Via: SIP/2.0/UDP lip:16402;branch=z9hG4bK456e05ec32f7d26f
Max-Forwards: 70
To: "u0" <sip:user@rip:16402>
From: "0" <sip:user@lip:16402>;tag=1602980090
Call-ID: 1e52be08b3266c0-2be0-11e5-8272-8b7231a74012@lip
CSeq: 1 INVITE
Contact: <sip:user@lip:16402>;isfocus
User-Agent: Viceroy 1.4
Content-Type: application/sdp
Content-Length: 684
v=0
o=mmobley 0 0 IN IP4 lip
s=0
c=IN IP4 lip
b=AS:2147483647
t=0 0
a=hwi:1056:4:3200
a=iChatEncryption:NO
a=bandwidthDetection:YES
m=audio 16402 RTP/AVP 110 12 124 3 0
a=rtcp:16402
a=rtpmap:110 X-AAC_LD/22050
a=rtpmap:3 GSM/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:124 iLBC/8000
a=fmtp:124 mode=30
a=rtpID:2137538099
m=video 16402 RTP/AVP 123 126 34
a=rtcp:16402
a=rtpmap:123 H264/90000
a=rtpmap:126 X-H264/90000
a=rtpmap:34 H263/90000
a=fmtp:34 imagesize 1 rules 30:352:288
a=framerate:30
a=RTCP:AUDIO 16402 VIDEO 16402
a=fmtp:126 imagesize 0 rules 30:640:480:640:480:30
a=fmtp:123 imagesize 0 rules 30:640:480:640:480:30
a=rtpID:3017826849
]
[]
86754.075857 @/SourceCache/VideoConference/VideoConference-473/SIP/Transport.c:2144 type=1 (00000000/0)
[INVITE sip:user@rip:16402 SIP/2.0
Via: SIP/2.0/UDP lip:16402;branch=z9hG4bK456e05ec32f7d26f
Max-Forwards: 70
To: "u0" <sip:user@rip:16402>
From: "0" <sip:user@lip:16402>;tag=1602980090
Call-ID: 1e52be08b3266c0-2be0-11e5-8272-8b7231a74012@lip
CSeq: 1 INVITE
Contact: <sip:user@lip:16402>;isfocus
User-Agent: Viceroy 1.4
Content-Type: application/sdp
Content-Length: 684
v=0
o=mmobley 0 0 IN IP4 lip
s=0
c=IN IP4 lip
b=AS:2147483647
t=0 0
a=hwi:1056:4:3200
a=iChatEncryption:NO
a=bandwidthDetection:YES
m=audio 16402 RTP/AVP 110 12 124 3 0
a=rtcp:16402
a=rtpmap:110 X-AAC_LD/22050
a=rtpmap:3 GSM/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:124 iLBC/8000
a=fmtp:124 mode=30
a=rtpID:2137538099
m=video 16402 RTP/AVP 123 126 34
a=rtcp:16402
a=rtpmap:123 H264/90000
a=rtpmap:126 X-H264/90000
a=rtpmap:34 H263/90000
a=fmtp:34 imagesize 1 rules 30:352:288
a=framerate:30
a=RTCP:AUDIO 16402 VIDEO 16402
a=fmtp:126 imagesize 0 rules 30:640:480:640:480:30
a=fmtp:123 imagesize 0 rules 30:640:480:640:480:30
a=rtpID:3017826849
]
[]
Video Conference User Report:
0.829876 @:0 type=5 (00000000/60)
[Detected bandwidth (kbits/s): 2302 up, 2302 down. (00000000)
]
[]
0.854043 @/SourceCache/VideoConference/VideoConference-473/Video Conference/VideoConferenceMultiController.m:2447 type=5 (00000000/0)
[Start Conference With UserID: 1001]
[]
86746.567796 @/SourceCache/VideoConference/VideoConference-473/Video Conference/VCInitiateConference.m:2085 type=5 (00000000/0)
[Remote Router]
[FULLCONE]
86746.567802 @/SourceCache/VideoConference/VideoConference-473/Video Conference/VCInitiateConference.m:2087 type=5 (00000000/0)
[Remote CommNAT Result: 0x00000102
]
[]
86746.588503 @/SourceCache/VideoConference/VideoConference-473/Video Conference/VideoConferenceGlobalObjects.m:1679 type=5 (00000000/0)
[Router]
[SYMMETRIC]
86746.588508 @/SourceCache/VideoConference/VideoConference-473/Video Conference/VideoConferenceGlobalObjects.m:1681 type=5 (00000000/0)
[CommNAT Result: 0x000000c4
]
[]
Here are the connection doctor settings
I apologize for the giant wall of text but after 200 + hours of troubleshooting with multiple vendors i am at my wits end. I appreciate any feedback and welcome the help!
Thanks in advance,
Matt Mobley
IT Program Manager