Syslog message and lost of connectivity when put SIP server on inside LAN

samashcam
samashcam used Ask the Experts™
on
Hi there,

We put the SIP server on the inside of the firewall.  Since we have done this we get sporadic 30 seconds lost of ip connectivity through the firewall.  This is the message the syslog generates when we have lost of connectivity. Does anyone have an idea on what is going on?

"Warning [port8191-65535] drop rate-1 exceeded. Current burst rate is 74 per second, max configured rate is 40. Current average rate is 2 per seconds, max configured rate is 20; Cummulative total count is 1704."

This si the only thing that shows up in the syslog but we actually lose connectivity for about 15-20 sec.

Any idea?

Thx
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Ernie BeekSenior infrastructure engineer
Top Expert 2012
Commented:
TimotiStDatacenter Technician
Top Expert 2012

Commented:

Author

Commented:
This only started after putting the SIP server on the inside of the firewall.  Is there any traffic settings I need to configure?
Learn SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.

TimotiStDatacenter Technician
Top Expert 2012

Commented:
Do you have any "threat-detection rate" commands in your config? You'll have to adjust them to match your UDP packet rate.
You could post a sanitised config, so we can check it.

Tamas

Author

Commented:
How do I do that? How do I know the UDP packet rate?
Datacenter Technician
Top Expert 2012
Commented:
Either you could test it with tcpdump/wireshark, or you can calculate it.
For example: typical voip codecs use 64kbit bitrates, that's 8000kB per second. Voip packets are around 200 bytes, so that's 40 packets/second for every call. Let's say you have an average of 5 calls at the same time: that's 200 packets/sec.
Of course, actual data depends on the setup of your SIP server and usage.

Tamas

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial