James,<div>On your TFTP server, add this line to either SIPDefault.cnf or SIP<macaddress>.cnf:</div><div><br></div><div>nat_enable : 1</div><div><br></div><div>Then reboot your phone.</div><div><br></div><div>Mario</div>
<div><a href="http://advantia.ca">http://advantia.ca</a></div><div><br><br><div class="gmail_quote">On Mon, Dec 6, 2010 at 10:17 AM, James Lamanna <span dir="ltr"><<a href="mailto:jlamanna@gmail.com">jlamanna@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Hi,<br>
I was wondering if anyone had any experience getting a Cisco 7960<br>
phone to register to opensips when the phone is behind a PIX firewall.<br>
I'm having a hell of a time getting it to register.<br>
I see these messages:<br>
<br>
U nat.ip:2260 -> opensips.ip:5060<br>
REGISTER sip:opensips.ip SIP/2.0..Via: SIP/2.0/UDP<br>
10.20.33.22:5060;branch=z9hG4bK48039e3a..From: <<br>
sip:xxxxxxx@opensips.ip;user=phone>..To:<br>
<sip:xxxxxxxx@opensips.ip;user=phone>..Call-ID: 0003<br>
6be7-b0aa0007-46220771-115f4fcc@10.20.33.22..Date: Mon, 06 Dec 2010<br>
18:10:49 GMT..CSeq: 107 REGISTER<br>
..User-Agent: CSCO/7..Contact:<br>
<<a href="http://sip:xxxxxxxx@10.20.33.22:5060" target="_blank">sip:xxxxxxxx@10.20.33.22:5060</a>>..Content-Length: 0..Expires: 45....<br>
#<br>
U opensips.ip:5060 -> nat.ip:2260<br>
SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP<br>
10.20.33.22:5060;branch=z9hG4bK48039e3a;rport=2260;receiv<br>
ed=208.90.184.123..From: <sip:xxxxxxxxx@opensips.ip;user=phone>..To:<br>
<sip:xxxxxxxx@opensips.ip;<br>
user=phone>;tag=c5cd5e6c2a1d4c975e04c2ff1b643904.5bf3..Call-ID:<br>
00036be7-b0aa0007-46220771-115f4fcc@<br>
10.20.33.22..CSeq: 107 REGISTER..WWW-Authenticate: Digest<br>
realm="asterisk", nonce="4cfd27fe0000780d7<br>
1826527370e7c8b97f663425df75489"..Server: OpenSIPS (1.6.3-notls<br>
(x86_64/linux))..Content-Length: 0..<br>
..<br>
#<br>
U nat.ip:2260 -> opensips.ip:5060<br>
REGISTER sip:opensips.ip SIP/2.0..Via: SIP/2.0/UDP<br>
10.20.33.22:5060;branch=z9hG4bK48039e3a..From: <<br>
sip:xxxxxxxxx@opensips.ip;user=phone>..To:<br>
<sip:xxxxxxxx@opensips.ip;user=phone>..Call-ID: 0003<br>
6be7-b0aa0007-46220771-115f4fcc@10.20.33.22..Date: Mon, 06 Dec 2010<br>
18:10:49 GMT..CSeq: 107 REGISTER<br>
..User-Agent: CSCO/7..Contact:<br>
<<a href="http://sip:xxxxxxxxx@10.20.33.22:5060" target="_blank">sip:xxxxxxxxx@10.20.33.22:5060</a>>..Content-Length: 0..Expires: 45....<br>
#<br>
U opensips.ip:5060 -> nat.ip:2260<br>
SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP<br>
10.20.33.22:5060;branch=z9hG4bK48039e3a;rport=2260;receiv<br>
ed=208.90.184.123..From: <sip:xxxxxxxx@opensips.ip;user=phone>..To:<br>
<sip:xxxxxxxxx@opensips.ip;<br>
user=phone>;tag=c5cd5e6c2a1d4c975e04c2ff1b643904.5bf3..Call-ID:<br>
00036be7-b0aa0007-46220771-115f4fcc@<br>
10.20.33.22..CSeq: 107 REGISTER..WWW-Authenticate: Digest<br>
realm="asterisk", nonce="4cfd28000000780e5<br>
c3381d838a044479357aa6c660df432"..Server: OpenSIPS (1.6.3-notls<br>
(x86_64/linux))..Content-Length: 0..<br>
<br>
This suggests the 401 response is not making it back to the<br>
phone....but I'm not sure why the PIX would be blocking it.<br>
All sip fixup is off.<br>
<br>
Any configuration suggestions would be much appreciated.<br>
The phone has:<br>
nat_enable: 0<br>
nat_received_processing: 0<br>
<br>
That was the only way I could get opensips to send the responses back<br>
to the correct port.<br>
<br>
Thanks.<br>
<br>
-- James<br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
</blockquote></div><br></div>