SSA Ping Via LAN 2

[jmlee]

I am trouble shooting some issues with Registration of a SIP Trunk to Alianza. The IPO won't register with the SIP provider and i am thinking it still is a config issue.

IPO412 running 5.0 (15)

The IPO is using a public IP address connected to the ISP's router.

IP route built with
0.0.0.0, 0.0.0.0, 74.xxx.xxx.182<Lan2> Metric:0
All IP routes on LAN 1 are for VOIP Handsets.

In SSA the SIP Line is Idle but not registered, when you Ping from the SIP Trunk Summary results return Source (used by IP Office) subnet of LAN 1

Shouldn't SSA's Ping use the IP Routes and returhn Source of 74.xxx.xxx.xxx as defined in the Route?

I am unable to Ping the Public IP address of the IPO on LAN2

 

[telecomtekperson]

What do your SIP traces show? Does the provider see any traffic coming from you?

Are you sure the firewall is allowing the traffic out?

 

[intrigrant]

Is your SIP line "use network topology" set to "None"?
Then it uses the IP Route, else data is send to the corresponing LAN directly and not to a router.

 

[jmlee]

telecomtekperson:
The Trace says "Disconnect from Destination End"
Provider has done packet capture and sees no traffic.
We have done a packet capture on the LAN1 side and see no traffic.
No firewall between IPO and ISP (currently to rule out variables)

intrigrant:
"use network topology" was set to "LAN2", changed to "None"
same results "Disconnect from Destination End"

 

[Bas1234]

Are you sure you have a SIP trunk instead of a Hosted account?

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[jmlee]

Yes i am sure it is a sip trunk.

 

[hairlessupportmonkey]

im guessing your LAN 2 is public facing?

can you ping it from another connection?

Also, i would secure your route a little

<itsp ip> / <mask> / Gateway

then make your blanket route out on your private network....

just tightens things up a little.

 

[jmlee]

hairlessupportmonkey: i had planned to secure the routes a bit more once we got traffic working correctly, thanks for the reminder.

Yes Lan2 is public facing i cannot ping it.

 

[Bas1234]

Turn off the Firewall on LAN2 in the Manager.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[hairlessupportmonkey]

if you cant ping the public facing IP of LAN 2 then it isnt working and either your route is wrong, or the router isnt configured for multiple IPs?

E.G

Router (212.200.200.201) -- IPO LAN 2 (212.200.200.202) (Mask might be 255.255.255.248)

so your route on the IPO will be 0.0.0.0 / 0.0.0.0 / 212.200.200.201 / LAN2

your ISP supplies IPs like

212.200.200.200 / Mask 255.255.255.248

Router IP 212.200.200.201
1st usable 212.200.200.202 etc

 

[jmlee]

From the sip provider i received today the following. Should i change the Primary Authentication Name to be the phone? or am i missing something?

from SIP Provider:
In your REGISTER you are sending:
Contact: “Unknown” SiprimaryAuthenticationName@xx.xxx.xxx.xxx:5060;transport=udp
and in your INVITE you are sending:
Contact: “10000000000” sip:10000000000@xx.xxx.xxx.xxx:5060;transport=udp
These don’t match, which is why you’re getting the 403 Forbidden returned.
Please add the PN to the registration and it should work.

 

[Bas1234]

Add a new or change the SIP URI "Auth Name" in all 3 pulldown menus into the name you privoder want's. The selection does not has to be one of the two, any number or name can also work.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[jmlee]

ok.. so it sounds like its not the authorization but how we are pushing the contact, from and to ... this is what is going out:
Modified values: (IP address: X phone number:# authorization:y)

Request-Line: REGISTER siprovider.com SIP/2.0
Message Header
From: <sip:yy.yyyyyyy.yy@provider.com>;tag=
To: <sip:yy.yyyyyyy.yy@provider.com>
Call-ID: guid@xx.xxx.xxx.xxx
CSeq: 1730209970 REGISTER
Contact: "Unknown" <sip:yy.yyyyyyy.yy@xx.xxx.xxx.xxx:5060;transport=udp>
Expires: 1200
Authorization: Digest username="yy.yyyyyyy.yy",realm="provider",
User-Agent: IP Office 5.0 (15)
Content-Length: 0

the provider wants
Request-Line: REGISTER siprovider.com SIP/2.0
Message Header
From: <sip:##########@provider.com>
To: <sip:##########@provider.com>
Call-ID: guid@xx.xxx.xxx.xxx
CSeq: 1730209970 REGISTER
Contact: "##########" <sip:##########@xx.xxx.xxx.xxx:5060;transport=udp>
Expires: 1200
Authorization: Digest username="yy.yyyyyyy.yy",realm="provider",nonce="MDAxMjgwMzI4MjI0OjI1MTcxNTI4T3c0R2N2QWYzZkd3SDNtSVpoYytxQT09AA==",response="b449f07a70c987ca3c9297f2c83e2f33",uri="siprovider.com"
Max-Forwards: 70
User-Agent: IP Office 5.0 (15)
Content-Length: 0

 

[Bas1234]

Check the router, is it in bridge mode?
If not is the FW letting 5060 thru?

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[hairlessupportmonkey]

im not convinced the router is configured correctly either, not if you cant ping the public IP of LAN2 from the internet