No subject


Thu Dec 2 10:23:01 CET 2010


U nat.ip:2370 -> opensips.ip:5060 REGISTER sip:opensips.ip
SIP/2.0..Via: SIP/2.0/UDP nat.ip:8427;branch=z9hG4bK79682dfb..
From: <sip:9515013401 at opensips.ip;user=phone>..To:
<sip:9515013401 at opensips.ip;user=phone>..Call-ID:
00036be7-b0aa0007-736f1483-25859b27 at nat.ip..Date: Mon, 06 Dec 2010
21:28:11 GMT..CSeq: 200 REGISTER..User-Agent
 : CSCO/7..Contact: <sip:9515013401 at nat.ip:8427>..Content-Length:
0..Expires: 45....

In the VIA header I believe your phone is saying "Talk to me over
nat.ip:8427"

You might want to set up logging on your PIX/ASA firewall to see whats
getting blocked, but from the way you've explained the issue it doesn't
sound like an OpenSIPS issue.  Sounds like a firewall issue or Cisco phone
issue.

On Tue, Dec 7, 2010 at 10:22 AM, James Lamanna <jlamanna at gmail.com> wrote:

> Hi Bogdan,
> I guess I'm confused as to why you say its being transmitted back to
> the same IP:Port:
>
> U nat.ip:2370 -> opensips.ip:5060
> U opensips.ip:5060 -> nat.ip:8427
>
> Shouldn't it be going back to port 2370? And not 8427?
>
> -- James
>
> On Tue, Dec 7, 2010 at 2:43 AM, Bogdan-Andrei Iancu
> <bogdan at voice-system.ro> wrote:
> > Hi James,
> >
> > From proxy point of view, everything looks ok - I see the reply sent back
> to
> > the exact IP:port where the request came from....So the reply should make
> it
> > through the NAT...But it seams it doesn't as the phone keeps
> retransmitting
> > the REGISTER..
> >
> > Again, from NAT pov, opensips is doing the right stuff (doing symmetric
> > signalling) - there is nothing more you can do here for opensips..Maybe
> it
> > is something specific to the NAT device - any possibility to debug/trace
> on
> > it ?
> >
> > Regards,
> > Bogdan
> >
> > James Lamanna wrote:
> >>
> >> Hi,
> >> I was wondering if anyone had any experience getting a Cisco 7960
> >> phone to register to opensips when the phone is behind a PIX firewall.
> >> I'm having a hell of a time getting it to register.
> >> I see these messages:
> >>
> >> U nat.ip:2260 -> opensips.ip:5060
> >>  REGISTER sip:opensips.ip SIP/2.0..Via: SIP/2.0/UDP
> >> 10.20.33.22:5060;branch=z9hG4bK48039e3a..From: <
> >>  sip:xxxxxxx at opensips.ip;user=phone>..To:
> >> <sip:xxxxxxxx at opensips.ip;user=phone>..Call-ID: 0003
> >>  6be7-b0aa0007-46220771-115f4fcc at 10.20.33.22..Date: Mon, 06 Dec 2010
> >> 18:10:49 GMT..CSeq: 107 REGISTER
> >>  ..User-Agent: CSCO/7..Contact:
> >> <sip:xxxxxxxx at 10.20.33.22:5060>..Content-Length: 0..Expires: 45....
> >> #
> >> U opensips.ip:5060 -> nat.ip:2260
> >>  SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
> >> 10.20.33.22:5060;branch=z9hG4bK48039e3a;rport=2260;receiv
> >>  ed=208.90.184.123..From: <sip:xxxxxxxxx at opensips.ip;user=phone>..To:
> >> <sip:xxxxxxxx at opensips.ip;
> >>  user=phone>;tag=c5cd5e6c2a1d4c975e04c2ff1b643904.5bf3..Call-ID:
> >> 00036be7-b0aa0007-46220771-115f4fcc@
> >>  10.20.33.22..CSeq: 107 REGISTER..WWW-Authenticate: Digest
> >> realm="asterisk", nonce="4cfd27fe0000780d7
> >>  1826527370e7c8b97f663425df75489"..Server: OpenSIPS (1.6.3-notls
> >> (x86_64/linux))..Content-Length: 0..
> >>  ..
> >> #
> >> U nat.ip:2260 -> opensips.ip:5060
> >>  REGISTER sip:opensips.ip SIP/2.0..Via: SIP/2.0/UDP
> >> 10.20.33.22:5060;branch=z9hG4bK48039e3a..From: <
> >>  sip:xxxxxxxxx at opensips.ip;user=phone>..To:
> >> <sip:xxxxxxxx at opensips.ip;user=phone>..Call-ID: 0003
> >>  6be7-b0aa0007-46220771-115f4fcc at 10.20.33.22..Date: Mon, 06 Dec 2010
> >> 18:10:49 GMT..CSeq: 107 REGISTER
> >>  ..User-Agent: CSCO/7..Contact:
> >> <sip:xxxxxxxxx at 10.20.33.22:5060>..Content-Length: 0..Expires: 45....
> >> #
> >> U opensips.ip:5060 -> nat.ip:2260
> >>  SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
> >> 10.20.33.22:5060;branch=z9hG4bK48039e3a;rport=2260;receiv
> >>  ed=208.90.184.123..From: <sip:xxxxxxxx at opensips.ip;user=phone>..To:
> >> <sip:xxxxxxxxx at opensips.ip;
> >>  user=phone>;tag=c5cd5e6c2a1d4c975e04c2ff1b643904.5bf3..Call-ID:
> >> 00036be7-b0aa0007-46220771-115f4fcc@
> >>  10.20.33.22..CSeq: 107 REGISTER..WWW-Authenticate: Digest
> >> realm="asterisk", nonce="4cfd28000000780e5
> >>  c3381d838a044479357aa6c660df432"..Server: OpenSIPS (1.6.3-notls
> >> (x86_64/linux))..Content-Length: 0..
> >>
> >> This suggests the 401 response is not making it back to the
> >> phone....but I'm not sure why the PIX would be blocking it.
> >> All sip fixup is off.
> >>
> >> Any configuration suggestions would be much appreciated.
> >> The phone has:
> >> nat_enable: 0
> >> nat_received_processing: 0
> >>
> >> That was the only way I could get opensips to send the responses back
> >> to the correct port.
> >>
> >> Thanks.
> >>
> >> -- James
> >>
> >> _______________________________________________
> >> Users mailing list
> >> Users at lists.opensips.org
> >> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> >>
> >>
> >
> >
> > --
> > Bogdan-Andrei Iancu
> > OpenSIPS Bootcamp
> > 15 - 19 November 2010, Edison, New Jersey, USA
> > www.voice-system.ro
> >
> >
> > _______________________________________________
> > Users mailing list
> > Users at lists.opensips.org
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> >
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>



-- 
--
*--*--*--*--*--*
Duane
*--*--*--*--*--*
--

--0016e64c24f2495e6f0496d56389
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div>From your SIP message</div>
<div>=A0</div>
<div>U nat.ip:2370 -&gt; opensips.ip:5060 REGISTER sip:opensips.ip<br>SIP/2=
.0..Via: SIP/2.0/UDP nat.ip:8427;branch=3Dz9hG4bK79682dfb..<br>From: &lt;si=
p:9515013401 at opensips.ip;user=3Dphone&gt;..To:<br>&lt;sip:9515013401 at opensi=
ps.ip;user=3Dphone&gt;..Call-ID:<br>
00036be7-b0aa0007-736f1483-25859b27 at nat.ip..Date: Mon, 06 Dec 2010<br>21:28=
:11 GMT..CSeq: 200 REGISTER..User-Agent<br>=A0: CSCO/7..Contact: &lt;sip:95=
15013401 at nat.ip:8427&gt;..Content-Length:<br>0..Expires: 45....<br></div>

<div>=A0</div>
<div>In the VIA header I believe your phone is saying &quot;Talk to me over=
 nat.ip:8427&quot;</div>
<div>=A0</div>
<div>You might want to set up logging on your PIX/ASA firewall to see whats=
 getting blocked, but from the way you&#39;ve explained the issue it doesn&=
#39;t sound like an OpenSIPS issue.=A0 Sounds like a firewall issue or Cisc=
o phone issue.<br>
<br></div>
<div class=3D"gmail_quote">On Tue, Dec 7, 2010 at 10:22 AM, James Lamanna <=
span dir=3D"ltr">&lt;<a href=3D"mailto:jlamanna at gmail.com">jlamanna at gmail.c=
om</a>&gt;</span> wrote:<br>
<blockquote style=3D"BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex=
; PADDING-LEFT: 1ex" class=3D"gmail_quote">Hi Bogdan,<br>I guess I&#39;m co=
nfused as to why you say its being transmitted back to<br>the same IP:Port:=
<br>
<br>U nat.ip:2370 -&gt; opensips.ip:5060<br>U opensips.ip:5060 -&gt; nat.ip=
:8427<br><br>Shouldn&#39;t it be going back to port 2370? And not 8427?<br>=
<br>-- James<br><br>On Tue, Dec 7, 2010 at 2:43 AM, Bogdan-Andrei Iancu<br>
&lt;<a href=3D"mailto:bogdan at voice-system.ro">bogdan at voice-system.ro</a>&gt=
; wrote:<br>&gt; Hi James,<br>&gt;<br>&gt; From proxy point of view, everyt=
hing looks ok - I see the reply sent back to<br>&gt; the exact IP:port wher=
e the request came from....So the reply should make it<br>
&gt; through the NAT...But it seams it doesn&#39;t as the phone keeps retra=
nsmitting<br>&gt; the REGISTER..<br>&gt;<br>&gt; Again, from NAT pov, opens=
ips is doing the right stuff (doing symmetric<br>&gt; signalling) - there i=
s nothing more you can do here for opensips..Maybe it<br>
&gt; is something specific to the NAT device - any possibility to debug/tra=
ce on<br>&gt; it ?<br>&gt;<br>&gt; Regards,<br>&gt; Bogdan<br>&gt;<br>&gt; =
James Lamanna wrote:<br>&gt;&gt;<br>&gt;&gt; Hi,<br>&gt;&gt; I was wonderin=
g if anyone had any experience getting a Cisco 7960<br>
&gt;&gt; phone to register to opensips when the phone is behind a PIX firew=
all.<br>&gt;&gt; I&#39;m having a hell of a time getting it to register.<br=
>&gt;&gt; I see these messages:<br>&gt;&gt;<br>&gt;&gt; U nat.ip:2260 -&gt;=
 opensips.ip:5060<br>
&gt;&gt; =A0REGISTER sip:opensips.ip SIP/2.0..Via: SIP/2.0/UDP<br>&gt;&gt; =
10.20.33.22:5060;branch=3Dz9hG4bK48039e3a..From: &lt;<br>&gt;&gt; =A0sip:xx=
xxxxx at opensips.ip;user=3Dphone&gt;..To:<br>&gt;&gt; &lt;sip:xxxxxxxx at opensi=
ps.ip;user=3Dphone&gt;..Call-ID: 0003<br>
&gt;&gt; =A06be7-b0aa0007-46220771-115f4fcc at 10.20.33.22..Date: Mon, 06 Dec =
2010<br>&gt;&gt; 18:10:49 GMT..CSeq: 107 REGISTER<br>&gt;&gt; =A0..User-Age=
nt: CSCO/7..Contact:<br>&gt;&gt; &lt;<a href=3D"http://sip:xxxxxxxx@10.20.3=
3.22:5060" target=3D"_blank">sip:xxxxxxxx at 10.20.33.22:5060</a>&gt;..Content=
-Length: 0..Expires: 45....<br>
&gt;&gt; #<br>&gt;&gt; U opensips.ip:5060 -&gt; nat.ip:2260<br>&gt;&gt; =A0=
SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP<br>&gt;&gt; 10.20.33.22:5060;bra=
nch=3Dz9hG4bK48039e3a;rport=3D2260;receiv<br>&gt;&gt; =A0ed=3D208.90.184.12=
3..From: &lt;sip:xxxxxxxxx at opensips.ip;user=3Dphone&gt;..To:<br>
&gt;&gt; &lt;sip:xxxxxxxx at opensips.ip;<br>&gt;&gt; =A0user=3Dphone&gt;;tag=
=3Dc5cd5e6c2a1d4c975e04c2ff1b643904.5bf3..Call-ID:<br>&gt;&gt; 00036be7-b0a=
a0007-46220771-115f4fcc@<br>&gt;&gt; =A010.20.33.22..CSeq: 107 REGISTER..WW=
W-Authenticate: Digest<br>
&gt;&gt; realm=3D&quot;asterisk&quot;, nonce=3D&quot;4cfd27fe0000780d7<br>&=
gt;&gt; =A01826527370e7c8b97f663425df75489&quot;..Server: OpenSIPS (1.6.3-n=
otls<br>&gt;&gt; (x86_64/linux))..Content-Length: 0..<br>&gt;&gt; =A0..<br>=
&gt;&gt; #<br>
&gt;&gt; U nat.ip:2260 -&gt; opensips.ip:5060<br>&gt;&gt; =A0REGISTER sip:o=
pensips.ip SIP/2.0..Via: SIP/2.0/UDP<br>&gt;&gt; 10.20.33.22:5060;branch=3D=
z9hG4bK48039e3a..From: &lt;<br>&gt;&gt; =A0sip:xxxxxxxxx at opensips.ip;user=
=3Dphone&gt;..To:<br>
&gt;&gt; &lt;sip:xxxxxxxx at opensips.ip;user=3Dphone&gt;..Call-ID: 0003<br>&g=
t;&gt; =A06be7-b0aa0007-46220771-115f4fcc at 10.20.33.22..Date: Mon, 06 Dec 20=
10<br>&gt;&gt; 18:10:49 GMT..CSeq: 107 REGISTER<br>&gt;&gt; =A0..User-Agent=
: CSCO/7..Contact:<br>
&gt;&gt; &lt;<a href=3D"http://sip:xxxxxxxxx@10.20.33.22:5060" target=3D"_b=
lank">sip:xxxxxxxxx at 10.20.33.22:5060</a>&gt;..Content-Length: 0..Expires: 4=
5....<br>&gt;&gt; #<br>&gt;&gt; U opensips.ip:5060 -&gt; nat.ip:2260<br>&gt=
;&gt; =A0SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP<br>
&gt;&gt; 10.20.33.22:5060;branch=3Dz9hG4bK48039e3a;rport=3D2260;receiv<br>&=
gt;&gt; =A0ed=3D208.90.184.123..From: &lt;sip:xxxxxxxx at opensips.ip;user=3Dp=
hone&gt;..To:<br>&gt;&gt; &lt;sip:xxxxxxxxx at opensips.ip;<br>&gt;&gt; =A0use=
r=3Dphone&gt;;tag=3Dc5cd5e6c2a1d4c975e04c2ff1b643904.5bf3..Call-ID:<br>
&gt;&gt; 00036be7-b0aa0007-46220771-115f4fcc@<br>&gt;&gt; =A010.20.33.22..C=
Seq: 107 REGISTER..WWW-Authenticate: Digest<br>&gt;&gt; realm=3D&quot;aster=
isk&quot;, nonce=3D&quot;4cfd28000000780e5<br>&gt;&gt; =A0c3381d838a0444793=
57aa6c660df432&quot;..Server: OpenSIPS (1.6.3-notls<br>
&gt;&gt; (x86_64/linux))..Content-Length: 0..<br>&gt;&gt;<br>&gt;&gt; This =
suggests the 401 response is not making it back to the<br>&gt;&gt; phone...=
.but I&#39;m not sure why the PIX would be blocking it.<br>&gt;&gt; All sip=
 fixup is off.<br>
&gt;&gt;<br>&gt;&gt; Any configuration suggestions would be much appreciate=
d.<br>&gt;&gt; The phone has:<br>&gt;&gt; nat_enable: 0<br>&gt;&gt; nat_rec=
eived_processing: 0<br>&gt;&gt;<br>&gt;&gt; That was the only way I could g=
et opensips to send the responses back<br>
&gt;&gt; to the correct port.<br>&gt;&gt;<br>&gt;&gt; Thanks.<br>&gt;&gt;<b=
r>&gt;&gt; -- James<br>&gt;&gt;<br>&gt;&gt; _______________________________=
________________<br>&gt;&gt; Users mailing list<br>&gt;&gt; <a href=3D"mail=
to:Users at lists.opensips.org">Users at lists.opensips.org</a><br>
&gt;&gt; <a href=3D"http://lists.opensips.org/cgi-bin/mailman/listinfo/user=
s" target=3D"_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/use=
rs</a><br>&gt;&gt;<br>&gt;&gt;<br>&gt;<br>&gt;<br>&gt; --<br>&gt; Bogdan-An=
drei Iancu<br>
&gt; OpenSIPS Bootcamp<br>&gt; 15 - 19 November 2010, Edison, New Jersey, U=
SA<br>&gt; <a href=3D"http://www.voice-system.ro/" target=3D"_blank">www.vo=
ice-system.ro</a><br>&gt;<br>&gt;<br>&gt; _________________________________=
______________<br>
&gt; Users mailing list<br>&gt; <a href=3D"mailto:Users at lists.opensips.org"=
>Users at lists.opensips.org</a><br>&gt; <a href=3D"http://lists.opensips.org/=
cgi-bin/mailman/listinfo/users" target=3D"_blank">http://lists.opensips.org=
/cgi-bin/mailman/listinfo/users</a><br>
&gt;<br><br>_______________________________________________<br>Users mailin=
g list<br><a href=3D"mailto:Users at lists.opensips.org">Users at lists.opensips.=
org</a><br><a href=3D"http://lists.opensips.org/cgi-bin/mailman/listinfo/us=
ers" target=3D"_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/u=
sers</a><br>
</blockquote></div><br><br clear=3D"all"><br>-- <br>--<br>*--*--*--*--*--*<=
br>Duane<br>*--*--*--*--*--*<br>--<br>

--0016e64c24f2495e6f0496d56389--



More information about the Users mailing list