Notifications

CME CUBE Gateway  

  RSS

thembatshabalala@ymail.com
(@thembatshabalalaymail-com)
New Member
Joined: 4 months ago
Posts: 2
28/11/2019 8:10 am  

Hi Family, I dont know if you will be able to assist me but lets engage and see if you can help resolve this issue.

OK here we go,  we have 2 7911 Cisco phones registered on this CME and have just moved from BRI to SIP.

ITSP has sent me sip server IP address and domain name , SIP username and password for registration plus Aliases numbers (DID)

I have managed to register the sip trunk between my CME and ITSP and can receive external calls from PSTN to both my 7911 without any issues.

The challenge that we have is that we cannot make any outgoing calls from both the phones. 

When I do debug ccsip messages.....I see a lot of 403 forbidden authentication failure and usernama mismatch messages with the aliases numbers of the phones, ITSP says he doesn't understand why these numbers are trying to register on his SIP server hence he  keeps rejecting them with 403 forbidden authentication failure .

 

when I make a phone call I get :

*Nov 27 11:54:18.098: //1754/7235910D8474/SIP/Msg/ccsipDisplayMsg:
Sent:
INVITE sip:0736699789@41.193.38.11:5060 SIP/2.0
Via: SIP/2.0/UDP 172.158.1.253:5060;branch=z9hG4bK8971B7E
Remote-Party-ID: <sip:27108243720@172.158.1.253>;party=calling;screen=no;privacy=off
From: <sip:[email protected]>;tag=10705C4-2554
To: <sip:0736699789@41.193.38.11>
Date: Wed, 27 Nov 2019 11:54:18 GMT
Call-ID: 79D3A433-104311EA-847AE0F2-7A1BB9ED@172.158.1.253
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Min-SE: 1800
Cisco-Guid: 1916113165-0272830954-2222252274-2048637421
User-Agent: Cisco-SIPGateway/IOS-15.2.4.M2
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
CSeq: 101 INVITE
Max-Forwards: 70
Timestamp: 1574855658
Contact: <sip:27108243720@172.158.1.253:5060>
Expires: 180
Allow-Events: kpml, telephone-event
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 309

v=0
o=CiscoSystemsSIP-GW-UserAgent 2401 7382 IN IP4 172.158.1.253
s=SIP Call
c=IN IP4 172.158.1.253
t=0 0
m=audio 16468 RTP/AVP 8 0 18 101
c=IN IP4 172.158.1.253
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=no
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16

*Nov 27 11:54:18.158: //1754/7235910D8474/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 172.158.1.253:5060;received=100.65.134.221;branch=z9hG4bK8971B7E;rport=53655
From: <sip:[email protected]>;tag=10705C4-2554
To: <sip:0736699789@41.193.38.11>
Call-ID: 79D3A433-104311EA-847AE0F2-7A1BB9ED@172.158.1.253
CSeq: 101 INVITE
Timestamp: 1574855658

*Nov 27 11:54:18.158: //1754/7235910D8474/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 172.158.1.253:5060;received=100.65.134.221;branch=z9hG4bK8971B7E;rport=53655
From: <sip:[email protected]>;tag=10705C4-2554
To: <sip:0736699789@41.193.38.11>;tag=aprqngfrt-moqbd700000a6
Call-ID: 79D3A433-104311EA-847AE0F2-7A1BB9ED@172.158.1.253
CSeq: 101 INVITE
Timestamp: 1574855658

*Nov 27 11:54:18.162: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
ACK sip:0736699789@41.193.38.11:5060 SIP/2.0
Via: SIP/2.0/UDP 172.158.1.253:5060;branch=z9hG4bK8971B7E
From: <sip:[email protected]>;tag=10705C4-2554
To: <sip:0736699789@41.193.38.11>;tag=aprqngfrt-moqbd700000a6
Date: Wed, 27 Nov 2019 11:54:18 GMT
Call-ID: 79D3A433-104311EA-847AE0F2-7A1BB9ED@172.158.1.253
Max-Forwards: 70
CSeq: 101 ACK
Allow-Events: kpml, telephone-event
Content-Length: 0

 

The logs above tell me the ITSP might not be trusting my IP hence the 403 forbidden but the sip messages I dont understand  are the authentication failure and username mismatch I keep seeing cause when I do the show sip-ua register status my trunk is registered 😞 

I'd really appreciate it if you can help me on this. 

 


Quote
Topic Tags
Pasha Teplitsky
(@pasha)
Member Admin
Joined: 4 years ago
Posts: 23
28/11/2019 8:47 am  

Hi,
check your sip-ua config.

you used the 'credential' command for the registration part, that allow the ITSP to register you and send you calls.

You need to add 'authentication' command for the outgoing calls to work as well.

check this section.

Let us know how it goes


ReplyQuote
thembatshabalala@ymail.com
(@thembatshabalalaymail-com)
New Member
Joined: 4 months ago
Posts: 2
28/11/2019 10:10 am  

@pasha

Thanks a lot for the quick response, 

I dont know if you checked the the running configs I attached on my post

below is what I have configured, unless I dont understand your question

 

sip-ua
credentials username name password 7 06085F3dddshhydds realm jhb.vcell.co.za
authentication username name password 7 0455gtsysjsujdil
retry invite 3
retry response 3
retry bye 3
retry cancel 3
registrar dns:jhb.vcell.co.za expires 60
sip-server dns:jhb.vcell.co.za
!

 

I have attached my configs as well 

 


ReplyQuote
Pasha Teplitsky
(@pasha)
Member Admin
Joined: 4 years ago
Posts: 23
28/11/2019 11:04 am  

right, I didn't look at the config 🙂

In that case, it seems like the ITSP expects to see something different in the Invite.

My educated guess is that it's the caller id.

It's either your caller id is out of the range the ITSP has allocated to you, or they might want to see the username in the SIPReqURI which requires SIP Profiles to adjust.

Try to change the caller id to the main number first, see if it works.


ReplyQuote
Pasha Teplitsky
(@pasha)
Member Admin
Joined: 4 years ago
Posts: 23
28/11/2019 11:08 am  

check out the 'unknown identity' part in this post

I think it's the same.


ReplyQuote
Pasha Teplitsky
(@pasha)
Member Admin
Joined: 4 years ago
Posts: 23
04/12/2019 9:27 am  

Any luck with that?

Let me know how if you managed to fix that


ReplyQuote
Share: