No subject
Thu Dec 2 10:23:01 CET 2010
U nat.ip:2370 -> opensips.ip:5060 REGISTER sip:opensips.ip
SIP/2.0..Via: SIP/2.0/UDP nat.ip:8427;branch=z9hG4bK79682dfb..
From: <sip:9515013401 at opensips.ip;user=phone>..To:
<sip:9515013401 at opensips.ip;user=phone>..Call-ID:
00036be7-b0aa0007-736f1483-25859b27 at nat.ip..Date: Mon, 06 Dec 2010
21:28:11 GMT..CSeq: 200 REGISTER..User-Agent
: CSCO/7..Contact: <sip:9515013401 at nat.ip:8427>..Content-Length:
0..Expires: 45....
In the VIA header I believe your phone is saying "Talk to me over
nat.ip:8427"
You might want to set up logging on your PIX/ASA firewall to see whats
getting blocked, but from the way you've explained the issue it doesn't
sound like an OpenSIPS issue. Sounds like a firewall issue or Cisco phone
issue.
On Tue, Dec 7, 2010 at 10:22 AM, James Lamanna <jlamanna at gmail.com> wrote:
> Hi Bogdan,
> I guess I'm confused as to why you say its being transmitted back to
> the same IP:Port:
>
> U nat.ip:2370 -> opensips.ip:5060
> U opensips.ip:5060 -> nat.ip:8427
>
> Shouldn't it be going back to port 2370? And not 8427?
>
> -- James
>
> On Tue, Dec 7, 2010 at 2:43 AM, Bogdan-Andrei Iancu
> <bogdan at voice-system.ro> wrote:
> > Hi James,
> >
> > From proxy point of view, everything looks ok - I see the reply sent back
> to
> > the exact IP:port where the request came from....So the reply should make
> it
> > through the NAT...But it seams it doesn't as the phone keeps
> retransmitting
> > the REGISTER..
> >
> > Again, from NAT pov, opensips is doing the right stuff (doing symmetric
> > signalling) - there is nothing more you can do here for opensips..Maybe
> it
> > is something specific to the NAT device - any possibility to debug/trace
> on
> > it ?
> >
> > Regards,
> > Bogdan
> >
> > James Lamanna wrote:
> >>
> >> Hi,
> >> I was wondering if anyone had any experience getting a Cisco 7960
> >> phone to register to opensips when the phone is behind a PIX firewall.
> >> I'm having a hell of a time getting it to register.
> >> I see these messages:
> >>
> >> U nat.ip:2260 -> opensips.ip:5060
> >> REGISTER sip:opensips.ip SIP/2.0..Via: SIP/2.0/UDP
> >> 10.20.33.22:5060;branch=z9hG4bK48039e3a..From: <
> >> sip:xxxxxxx at opensips.ip;user=phone>..To:
> >> <sip:xxxxxxxx at opensips.ip;user=phone>..Call-ID: 0003
> >> 6be7-b0aa0007-46220771-115f4fcc at 10.20.33.22..Date: Mon, 06 Dec 2010
> >> 18:10:49 GMT..CSeq: 107 REGISTER
> >> ..User-Agent: CSCO/7..Contact:
> >> <sip:xxxxxxxx at 10.20.33.22:5060>..Content-Length: 0..Expires: 45....
> >> #
> >> U opensips.ip:5060 -> nat.ip:2260
> >> SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
> >> 10.20.33.22:5060;branch=z9hG4bK48039e3a;rport=2260;receiv
> >> ed=208.90.184.123..From: <sip:xxxxxxxxx at opensips.ip;user=phone>..To:
> >> <sip:xxxxxxxx at opensips.ip;
> >> user=phone>;tag=c5cd5e6c2a1d4c975e04c2ff1b643904.5bf3..Call-ID:
> >> 00036be7-b0aa0007-46220771-115f4fcc@
> >> 10.20.33.22..CSeq: 107 REGISTER..WWW-Authenticate: Digest
> >> realm="asterisk", nonce="4cfd27fe0000780d7
> >> 1826527370e7c8b97f663425df75489"..Server: OpenSIPS (1.6.3-notls
> >> (x86_64/linux))..Content-Length: 0..
> >> ..
> >> #
> >> U nat.ip:2260 -> opensips.ip:5060
> >> REGISTER sip:opensips.ip SIP/2.0..Via: SIP/2.0/UDP
> >> 10.20.33.22:5060;branch=z9hG4bK48039e3a..From: <
> >> sip:xxxxxxxxx at opensips.ip;user=phone>..To:
> >> <sip:xxxxxxxx at opensips.ip;user=phone>..Call-ID: 0003
> >> 6be7-b0aa0007-46220771-115f4fcc at 10.20.33.22..Date: Mon, 06 Dec 2010
> >> 18:10:49 GMT..CSeq: 107 REGISTER
> >> ..User-Agent: CSCO/7..Contact:
> >> <sip:xxxxxxxxx at 10.20.33.22:5060>..Content-Length: 0..Expires: 45....
> >> #
> >> U opensips.ip:5060 -> nat.ip:2260
> >> SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
> >> 10.20.33.22:5060;branch=z9hG4bK48039e3a;rport=2260;receiv
> >> ed=208.90.184.123..From: <sip:xxxxxxxx at opensips.ip;user=phone>..To:
> >> <sip:xxxxxxxxx at opensips.ip;
> >> user=phone>;tag=c5cd5e6c2a1d4c975e04c2ff1b643904.5bf3..Call-ID:
> >> 00036be7-b0aa0007-46220771-115f4fcc@
> >> 10.20.33.22..CSeq: 107 REGISTER..WWW-Authenticate: Digest
> >> realm="asterisk", nonce="4cfd28000000780e5
> >> c3381d838a044479357aa6c660df432"..Server: OpenSIPS (1.6.3-notls
> >> (x86_64/linux))..Content-Length: 0..
> >>
> >> This suggests the 401 response is not making it back to the
> >> phone....but I'm not sure why the PIX would be blocking it.
> >> All sip fixup is off.
> >>
> >> Any configuration suggestions would be much appreciated.
> >> The phone has:
> >> nat_enable: 0
> >> nat_received_processing: 0
> >>
> >> That was the only way I could get opensips to send the responses back
> >> to the correct port.
> >>
> >> Thanks.
> >>
> >> -- James
> >>
> >> _______________________________________________
> >> Users mailing list
> >> Users at lists.opensips.org
> >> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> >>
> >>
> >
> >
> > --
> > Bogdan-Andrei Iancu
> > OpenSIPS Bootcamp
> > 15 - 19 November 2010, Edison, New Jersey, USA
> > www.voice-system.ro
> >
> >
> > _______________________________________________
> > Users mailing list
> > Users at lists.opensips.org
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> >
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
--
--
*--*--*--*--*--*
Duane
*--*--*--*--*--*
--
--0016e64c24f2495e6f0496d56389
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
<div>From your SIP message</div>
<div>=A0</div>
<div>U nat.ip:2370 -> opensips.ip:5060 REGISTER sip:opensips.ip<br>SIP/2=
.0..Via: SIP/2.0/UDP nat.ip:8427;branch=3Dz9hG4bK79682dfb..<br>From: <si=
p:9515013401 at opensips.ip;user=3Dphone>..To:<br><sip:9515013401 at opensi=
ps.ip;user=3Dphone>..Call-ID:<br>
00036be7-b0aa0007-736f1483-25859b27 at nat.ip..Date: Mon, 06 Dec 2010<br>21:28=
:11 GMT..CSeq: 200 REGISTER..User-Agent<br>=A0: CSCO/7..Contact: <sip:95=
15013401 at nat.ip:8427>..Content-Length:<br>0..Expires: 45....<br></div>
<div>=A0</div>
<div>In the VIA header I believe your phone is saying "Talk to me over=
nat.ip:8427"</div>
<div>=A0</div>
<div>You might want to set up logging on your PIX/ASA firewall to see whats=
getting blocked, but from the way you've explained the issue it doesn&=
#39;t sound like an OpenSIPS issue.=A0 Sounds like a firewall issue or Cisc=
o phone issue.<br>
<br></div>
<div class=3D"gmail_quote">On Tue, Dec 7, 2010 at 10:22 AM, James Lamanna <=
span dir=3D"ltr"><<a href=3D"mailto:jlamanna at gmail.com">jlamanna at gmail.c=
om</a>></span> wrote:<br>
<blockquote style=3D"BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex=
; PADDING-LEFT: 1ex" class=3D"gmail_quote">Hi Bogdan,<br>I guess I'm co=
nfused as to why you say its being transmitted back to<br>the same IP:Port:=
<br>
<br>U nat.ip:2370 -> opensips.ip:5060<br>U opensips.ip:5060 -> nat.ip=
:8427<br><br>Shouldn't it be going back to port 2370? And not 8427?<br>=
<br>-- James<br><br>On Tue, Dec 7, 2010 at 2:43 AM, Bogdan-Andrei Iancu<br>
<<a href=3D"mailto:bogdan at voice-system.ro">bogdan at voice-system.ro</a>>=
; wrote:<br>> Hi James,<br>><br>> From proxy point of view, everyt=
hing looks ok - I see the reply sent back to<br>> the exact IP:port wher=
e the request came from....So the reply should make it<br>
> through the NAT...But it seams it doesn't as the phone keeps retra=
nsmitting<br>> the REGISTER..<br>><br>> Again, from NAT pov, opens=
ips is doing the right stuff (doing symmetric<br>> signalling) - there i=
s nothing more you can do here for opensips..Maybe it<br>
> is something specific to the NAT device - any possibility to debug/tra=
ce on<br>> it ?<br>><br>> Regards,<br>> Bogdan<br>><br>> =
James Lamanna wrote:<br>>><br>>> Hi,<br>>> I was wonderin=
g if anyone had any experience getting a Cisco 7960<br>
>> phone to register to opensips when the phone is behind a PIX firew=
all.<br>>> I'm having a hell of a time getting it to register.<br=
>>> I see these messages:<br>>><br>>> U nat.ip:2260 ->=
opensips.ip:5060<br>
>> =A0REGISTER sip:opensips.ip SIP/2.0..Via: SIP/2.0/UDP<br>>> =
10.20.33.22:5060;branch=3Dz9hG4bK48039e3a..From: <<br>>> =A0sip:xx=
xxxxx at opensips.ip;user=3Dphone>..To:<br>>> <sip:xxxxxxxx at opensi=
ps.ip;user=3Dphone>..Call-ID: 0003<br>
>> =A06be7-b0aa0007-46220771-115f4fcc at 10.20.33.22..Date: Mon, 06 Dec =
2010<br>>> 18:10:49 GMT..CSeq: 107 REGISTER<br>>> =A0..User-Age=
nt: CSCO/7..Contact:<br>>> <<a href=3D"http://sip:xxxxxxxx@10.20.3=
3.22:5060" target=3D"_blank">sip:xxxxxxxx at 10.20.33.22:5060</a>>..Content=
-Length: 0..Expires: 45....<br>
>> #<br>>> U opensips.ip:5060 -> nat.ip:2260<br>>> =A0=
SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP<br>>> 10.20.33.22:5060;bra=
nch=3Dz9hG4bK48039e3a;rport=3D2260;receiv<br>>> =A0ed=3D208.90.184.12=
3..From: <sip:xxxxxxxxx at opensips.ip;user=3Dphone>..To:<br>
>> <sip:xxxxxxxx at opensips.ip;<br>>> =A0user=3Dphone>;tag=
=3Dc5cd5e6c2a1d4c975e04c2ff1b643904.5bf3..Call-ID:<br>>> 00036be7-b0a=
a0007-46220771-115f4fcc@<br>>> =A010.20.33.22..CSeq: 107 REGISTER..WW=
W-Authenticate: Digest<br>
>> realm=3D"asterisk", nonce=3D"4cfd27fe0000780d7<br>&=
gt;> =A01826527370e7c8b97f663425df75489"..Server: OpenSIPS (1.6.3-n=
otls<br>>> (x86_64/linux))..Content-Length: 0..<br>>> =A0..<br>=
>> #<br>
>> U nat.ip:2260 -> opensips.ip:5060<br>>> =A0REGISTER sip:o=
pensips.ip SIP/2.0..Via: SIP/2.0/UDP<br>>> 10.20.33.22:5060;branch=3D=
z9hG4bK48039e3a..From: <<br>>> =A0sip:xxxxxxxxx at opensips.ip;user=
=3Dphone>..To:<br>
>> <sip:xxxxxxxx at opensips.ip;user=3Dphone>..Call-ID: 0003<br>&g=
t;> =A06be7-b0aa0007-46220771-115f4fcc at 10.20.33.22..Date: Mon, 06 Dec 20=
10<br>>> 18:10:49 GMT..CSeq: 107 REGISTER<br>>> =A0..User-Agent=
: CSCO/7..Contact:<br>
>> <<a href=3D"http://sip:xxxxxxxxx@10.20.33.22:5060" target=3D"_b=
lank">sip:xxxxxxxxx at 10.20.33.22:5060</a>>..Content-Length: 0..Expires: 4=
5....<br>>> #<br>>> U opensips.ip:5060 -> nat.ip:2260<br>>=
;> =A0SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP<br>
>> 10.20.33.22:5060;branch=3Dz9hG4bK48039e3a;rport=3D2260;receiv<br>&=
gt;> =A0ed=3D208.90.184.123..From: <sip:xxxxxxxx at opensips.ip;user=3Dp=
hone>..To:<br>>> <sip:xxxxxxxxx at opensips.ip;<br>>> =A0use=
r=3Dphone>;tag=3Dc5cd5e6c2a1d4c975e04c2ff1b643904.5bf3..Call-ID:<br>
>> 00036be7-b0aa0007-46220771-115f4fcc@<br>>> =A010.20.33.22..C=
Seq: 107 REGISTER..WWW-Authenticate: Digest<br>>> realm=3D"aster=
isk", nonce=3D"4cfd28000000780e5<br>>> =A0c3381d838a0444793=
57aa6c660df432"..Server: OpenSIPS (1.6.3-notls<br>
>> (x86_64/linux))..Content-Length: 0..<br>>><br>>> This =
suggests the 401 response is not making it back to the<br>>> phone...=
.but I'm not sure why the PIX would be blocking it.<br>>> All sip=
fixup is off.<br>
>><br>>> Any configuration suggestions would be much appreciate=
d.<br>>> The phone has:<br>>> nat_enable: 0<br>>> nat_rec=
eived_processing: 0<br>>><br>>> That was the only way I could g=
et opensips to send the responses back<br>
>> to the correct port.<br>>><br>>> Thanks.<br>>><b=
r>>> -- James<br>>><br>>> _______________________________=
________________<br>>> Users mailing list<br>>> <a href=3D"mail=
to:Users at lists.opensips.org">Users at lists.opensips.org</a><br>
>> <a href=3D"http://lists.opensips.org/cgi-bin/mailman/listinfo/user=
s" target=3D"_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/use=
rs</a><br>>><br>>><br>><br>><br>> --<br>> Bogdan-An=
drei Iancu<br>
> OpenSIPS Bootcamp<br>> 15 - 19 November 2010, Edison, New Jersey, U=
SA<br>> <a href=3D"http://www.voice-system.ro/" target=3D"_blank">www.vo=
ice-system.ro</a><br>><br>><br>> _________________________________=
______________<br>
> Users mailing list<br>> <a href=3D"mailto:Users at lists.opensips.org"=
>Users at lists.opensips.org</a><br>> <a href=3D"http://lists.opensips.org/=
cgi-bin/mailman/listinfo/users" target=3D"_blank">http://lists.opensips.org=
/cgi-bin/mailman/listinfo/users</a><br>
><br><br>_______________________________________________<br>Users mailin=
g list<br><a href=3D"mailto:Users at lists.opensips.org">Users at lists.opensips.=
org</a><br><a href=3D"http://lists.opensips.org/cgi-bin/mailman/listinfo/us=
ers" target=3D"_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/u=
sers</a><br>
</blockquote></div><br><br clear=3D"all"><br>-- <br>--<br>*--*--*--*--*--*<=
br>Duane<br>*--*--*--*--*--*<br>--<br>
--0016e64c24f2495e6f0496d56389--
More information about the Users
mailing list