ST 12.0.2 FP1 New build everything works internally and externally apart from AV only works externally!

HCL Sametime Sametime Forum
,
1

I have a brand new st 12.0.2 fp1 build using Docker Compose. All works great apart from AV only works for externally.

If a user internal to the network connects to the meeting no AV, if in the same meeting 2 external users connect as in guests or authenticated users they can talk to each toher fine and see the av of eachother but not the internal user.

I have completed a lot of these builds but this is the first where external works and internal doesn't.

2

Hey Richard -

This implies that the internal users cannot route AV to the external address.

1) check the jvb logs for what was discovered -

docker compose logs jvb | grep -i discovered

and then work with the network team to allow that traffic outbound.

2) if that isn't possible, and you want to route internal traffic to the internal IP, you can do that, but will require either an internal STUN server or to hardcode the public and internal IPs using the 'JVB_ADVERTISE_IPS' parameter in custom.env.

If you need assistance with this - please open a case.

3

Hi Tony,

Thanks for replying so quickly.
Here is a bit more info, The server is sat in the DMZ it has an external ip using SNAT and an internal ip. Internal DNS points at the internal ip of the server external dns points at the external ip of the server.

4

Thats fine, and appears to be primarily focused on the 'hostname' of the server. This has little to do with the address that will be used for AV traffic.

By default, this IP address is discovered thru a public STUN service provided by google, and the AV component would have no knowledge of the internal IP address in the default configuration.

Usually, the internal address will be the actual IP address of the machine.

You can try overriding by using the JVB_ADVERTISE_IPS as mentioned earlier.

a) use the command I posted earlier to get the current external IP.

b) determine the internal IP

c) in custom.env, set

JVB_ADVERTISE_IPS=externalIP, internalIP

d) in .env, empty the JVB_STUN_SERVERS entry

e) restart and retest.

Let me know if you have any questions

5

Works perfectly now thanks Tony.