asterisk users - Aug 2007 - Polycom behind NAT won't register to * server behind ALG

I?ve been tearing my hair out trying to get a Polycom phone (behind a NAT) to
register to an * box behind a Cisco SIP ALG.  With known good credentials
configured on the phone and in *, I get 403 Bad Auth when trying to register. 
If I put the phone onto the same LAN as * it works fine without changing any
authentication parameters whatsoever.  If I make the secret blank (null) on the
phone and *, it?s registers fine.  An X-Lite softphone works fine, and I already
have a Cisco 7960 working in the same scenario but no go with the Polycom (I?ve
tried a few different firmware versions, currently up to 2.02).

 

I also have configured Polycoms behind NAT to configure to * that is not behind
a SIP ALG many times without trouble?it?s just with the SIP ALG that I?ve hit
this wall?

 

I found this forum thread which seems to pinpoint the issue, but I?m not really
understanding the suggested fix. Does anyone out there understand the MD5
challenge/response and URI stuff that can give me some clue what to do?

 

HYPERLINK
"http://forum.voxilla.com/asterisk-support-forum/sipura-asterisk-registration-failed-wrong-password-18730.html"http://forum.voxilla.com/asterisk-support-forum/sipura-asterisk-registration-failed-wrong-password-18730.html

 

 

Thanks!

 

mmastera

 


No virus found in this outgoing message.
Checked by AVG Free Edition. 
Version: 7.5.484 / Virus Database: 269.12.1/963 - Release Date: 8/20/2007 5:44
PM
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.digium.com/pipermail/asterisk-users/attachments/20070821/014613de/attachment.htm

Polycom's were simply not originally built for multi location VoIP.  There
is no NAT support in the Polycom's. We have several networks, being an ISP,
and have found that when transversing one network say 192.168.2.x with the *
box on a 192.168.1.x the polycoms were able to communicate however sustained
a lot of one way audio problems.  Moving thim onto the same network is the
only thing we have been able to reliable do.  According to Polycom Support
this is what they are intended for and no definitive answer as to whether
they would support Stun or another method in the future.  At least as of 6
months ago.

Matt