thr3ads.net - asterisk users - [asterisk-users] can't get pap2 to register from outside the LAN. [Nov 2009]

If this information is useful, please help other people find it:
Share via:

Tim Uckun

2009-Nov-24 01:25 UTC

[asterisk-users] can't get pap2 to register from outside the LAN.

I am having a hell of a problem trying to get a linksys pap2t to
register with my asterisk from outside the LAN.

I have tried every combination of NAT, outbound proxy, stun, specify
external IP address etc and it just won't work.  Here are the relevant
details.

In asterisk I have set the following.

externip=my.ip.address
localnet=192.168.0.0/255.255.0.0
nat=yes
bindport=5060


here is the sip user

deny=0.0.0.0/0.0.0.0
type=friend
secret=blah
qualify=yes
port=5060
pickupgrouppermit=0.0.0.0/0.0.0.0
nat=yes
mailbox=372 at device
host=dynamic
dtmfmode=rfc2833
dial=SIP/372
context=from-internal
canreinvite=no
callgroupcallerid=device <372>
accountcodecall-limit=50


I have tried nat = no, nat=never, nat=route, and leaving out the nat
no difference.

On the linksys end I have tried everything I can think of. Nat, no
nat, stun, hard coded external IP address etc. I have read dozens of
web sites and have tried every suggestion given but no joy.

I know other people have had the same problem but none of the links I
ran into had a solution that worked for me.

This device connects perfectly when inside the lan, take it out and it
won't connect no matter what I do.


Here is the sip debug trace. What truly puzzles me is the 401 not
authorized packets. The password is correct, it connects fine inside
the lan but the same username and password fails outside the LAN.


 <------------>
[Nov 24 14:18:41]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="0dc307da"
Content-Length: 0


<------------>
[Nov 24 14:18:41] Scheduling destruction of SIP dialog
'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method: REGISTER)
[Nov 24 14:18:42]  ip
<--- SIP read from 218.101.6.157:5060 --->
REGISTER sip:203.109.148.108 SIP/2.0
Via: SIP/2.0/UDP 192.168.50.183:5060;branch=z9hG4bK-26ca393d
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
Max-Forwards: 70
Contact: 372 <sip:372 at 192.168.50.183:5060>;expires=3600
User-Agent: Linksys/PAP2T-5.1.6(LS)
Content-Length: 0
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
Supported: x-sipura, replaces


<------------->
[Nov 24 14:18:42] --- (12 headers 0 lines) ---
[Nov 24 14:18:42] Using latest REGISTER request as basis request
[Nov 24 14:18:42] Sending to 218.101.6.157 : 5060 (NAT)
[Nov 24 14:18:42]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 100 Trying
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Contact: <sip:372 at 203.109.148.108>
Content-Length: 0


<------------>
[Nov 24 14:18:42]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="0dc307da"
Content-Length: 0


<------------>
[Nov 24 14:18:42] Scheduling destruction of SIP dialog
'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method: REGISTER)
[Nov 24 14:18:44]  ip
<--- SIP read from 218.101.6.157:5060 --->
REGISTER sip:203.109.148.108 SIP/2.0
Via: SIP/2.0/UDP 192.168.50.183:5060;branch=z9hG4bK-26ca393d
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
Max-Forwards: 70
Contact: 372 <sip:372 at 192.168.50.183:5060>;expires=3600
User-Agent: Linksys/PAP2T-5.1.6(LS)
Content-Length: 0
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
Supported: x-sipura, replaces


<------------->
[Nov 24 14:18:44] --- (12 headers 0 lines) ---
[Nov 24 14:18:44] Using latest REGISTER request as basis request
[Nov 24 14:18:44] Sending to 218.101.6.157 : 5060 (NAT)
[Nov 24 14:18:44]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 100 Trying
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Contact: <sip:372 at 203.109.148.108>
Content-Length: 0


<------------>
[Nov 24 14:18:44]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="0dc307da"
Content-Length: 0


<------------>
[Nov 24 14:18:44] Scheduling destruction of SIP dialog
'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method: REGISTER)
[Nov 24 14:18:48]  ip
<--- SIP read from 218.101.6.157:5060 --->
REGISTER sip:203.109.148.108 SIP/2.0
Via: SIP/2.0/UDP 192.168.50.183:5060;branch=z9hG4bK-26ca393d
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
Max-Forwards: 70
Contact: 372 <sip:372 at 192.168.50.183:5060>;expires=3600
User-Agent: Linksys/PAP2T-5.1.6(LS)
Content-Length: 0
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
Supported: x-sipura, replaces


<------------->
[Nov 24 14:18:48] --- (12 headers 0 lines) ---
[Nov 24 14:18:48] Using latest REGISTER request as basis request
[Nov 24 14:18:48] Sending to 218.101.6.157 : 5060 (NAT)
[Nov 24 14:18:48]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 100 Trying
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Contact: <sip:372 at 203.109.148.108>
Content-Length: 0


<------------>
[Nov 24 14:18:48]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="0dc307da"
Content-Length: 0


<------------>
[Nov 24 14:18:48] Scheduling destruction of SIP dialog
'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method: REGISTER)
[Nov 24 14:18:52]  ip
<--- SIP read from 218.101.6.157:5060 --->
REGISTER sip:203.109.148.108 SIP/2.0
Via: SIP/2.0/UDP 192.168.50.183:5060;branch=z9hG4bK-26ca393d
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
Max-Forwards: 70
Contact: 372 <sip:372 at 192.168.50.183:5060>;expires=3600
User-Agent: Linksys/PAP2T-5.1.6(LS)
Content-Length: 0
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
Supported: x-sipura, replaces


<------------->
[Nov 24 14:18:52] --- (12 headers 0 lines) ---
[Nov 24 14:18:52] Using latest REGISTER request as basis request
[Nov 24 14:18:52] Sending to 218.101.6.157 : 5060 (NAT)
[Nov 24 14:18:52]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 100 Trying
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Contact: <sip:372 at 203.109.148.108>
Content-Length: 0


<------------>
[Nov 24 14:18:52]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="0dc307da"
Content-Length: 0


<------------>
[Nov 24 14:18:52] Scheduling destruction of SIP dialog
'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method: REGISTER)
sip*CLI> sip debug ip

Michael Wyres

2009-Nov-24 02:38 UTC

head link

[asterisk-users] can't get pap2 to register from outside the LAN.

I would without the "deny" and "permit" directives in the
SIP, and rule out some sort of clash there that is rejecting the address the
registration is coming from, and take it from there.


-----Original Message-----
From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-bounces
at lists.digium.com] On Behalf Of Tim Uckun
Sent: Tuesday, 24 November 2009 12:26
To: asterisk-users at lists.digium.com
Subject: [asterisk-users] can't get pap2 to register from outside the LAN.

I am having a hell of a problem trying to get a linksys pap2t to
register with my asterisk from outside the LAN.

I have tried every combination of NAT, outbound proxy, stun, specify
external IP address etc and it just won't work.  Here are the relevant
details.

In asterisk I have set the following.

externip=my.ip.address
localnet=192.168.0.0/255.255.0.0
nat=yes
bindport=5060


here is the sip user

deny=0.0.0.0/0.0.0.0
type=friend
secret=blah
qualify=yes
port=5060
pickupgrouppermit=0.0.0.0/0.0.0.0
nat=yes
mailbox=372 at device
host=dynamic
dtmfmode=rfc2833
dial=SIP/372
context=from-internal
canreinvite=no
callgroupcallerid=device <372>
accountcodecall-limit=50


I have tried nat = no, nat=never, nat=route, and leaving out the nat
no difference.

On the linksys end I have tried everything I can think of. Nat, no
nat, stun, hard coded external IP address etc. I have read dozens of
web sites and have tried every suggestion given but no joy.

I know other people have had the same problem but none of the links I
ran into had a solution that worked for me.

This device connects perfectly when inside the lan, take it out and it
won't connect no matter what I do.


Here is the sip debug trace. What truly puzzles me is the 401 not
authorized packets. The password is correct, it connects fine inside
the lan but the same username and password fails outside the LAN.


 <------------>
[Nov 24 14:18:41]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="0dc307da"
Content-Length: 0


<------------>
[Nov 24 14:18:41] Scheduling destruction of SIP dialog
'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method: REGISTER)
[Nov 24 14:18:42]  ip
<--- SIP read from 218.101.6.157:5060 --->
REGISTER sip:203.109.148.108 SIP/2.0
Via: SIP/2.0/UDP 192.168.50.183:5060;branch=z9hG4bK-26ca393d
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
Max-Forwards: 70
Contact: 372 <sip:372 at 192.168.50.183:5060>;expires=3600
User-Agent: Linksys/PAP2T-5.1.6(LS)
Content-Length: 0
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
Supported: x-sipura, replaces


<------------->
[Nov 24 14:18:42] --- (12 headers 0 lines) ---
[Nov 24 14:18:42] Using latest REGISTER request as basis request
[Nov 24 14:18:42] Sending to 218.101.6.157 : 5060 (NAT)
[Nov 24 14:18:42]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 100 Trying
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Contact: <sip:372 at 203.109.148.108>
Content-Length: 0


<------------>
[Nov 24 14:18:42]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="0dc307da"
Content-Length: 0


<------------>
[Nov 24 14:18:42] Scheduling destruction of SIP dialog
'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method: REGISTER)
[Nov 24 14:18:44]  ip
<--- SIP read from 218.101.6.157:5060 --->
REGISTER sip:203.109.148.108 SIP/2.0
Via: SIP/2.0/UDP 192.168.50.183:5060;branch=z9hG4bK-26ca393d
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
Max-Forwards: 70
Contact: 372 <sip:372 at 192.168.50.183:5060>;expires=3600
User-Agent: Linksys/PAP2T-5.1.6(LS)
Content-Length: 0
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
Supported: x-sipura, replaces


<------------->
[Nov 24 14:18:44] --- (12 headers 0 lines) ---
[Nov 24 14:18:44] Using latest REGISTER request as basis request
[Nov 24 14:18:44] Sending to 218.101.6.157 : 5060 (NAT)
[Nov 24 14:18:44]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 100 Trying
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Contact: <sip:372 at 203.109.148.108>
Content-Length: 0


<------------>
[Nov 24 14:18:44]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="0dc307da"
Content-Length: 0


<------------>
[Nov 24 14:18:44] Scheduling destruction of SIP dialog
'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method: REGISTER)
[Nov 24 14:18:48]  ip
<--- SIP read from 218.101.6.157:5060 --->
REGISTER sip:203.109.148.108 SIP/2.0
Via: SIP/2.0/UDP 192.168.50.183:5060;branch=z9hG4bK-26ca393d
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
Max-Forwards: 70
Contact: 372 <sip:372 at 192.168.50.183:5060>;expires=3600
User-Agent: Linksys/PAP2T-5.1.6(LS)
Content-Length: 0
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
Supported: x-sipura, replaces


<------------->
[Nov 24 14:18:48] --- (12 headers 0 lines) ---
[Nov 24 14:18:48] Using latest REGISTER request as basis request
[Nov 24 14:18:48] Sending to 218.101.6.157 : 5060 (NAT)
[Nov 24 14:18:48]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 100 Trying
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Contact: <sip:372 at 203.109.148.108>
Content-Length: 0


<------------>
[Nov 24 14:18:48]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="0dc307da"
Content-Length: 0


<------------>
[Nov 24 14:18:48] Scheduling destruction of SIP dialog
'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method: REGISTER)
[Nov 24 14:18:52]  ip
<--- SIP read from 218.101.6.157:5060 --->
REGISTER sip:203.109.148.108 SIP/2.0
Via: SIP/2.0/UDP 192.168.50.183:5060;branch=z9hG4bK-26ca393d
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
Max-Forwards: 70
Contact: 372 <sip:372 at 192.168.50.183:5060>;expires=3600
User-Agent: Linksys/PAP2T-5.1.6(LS)
Content-Length: 0
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
Supported: x-sipura, replaces


<------------->
[Nov 24 14:18:52] --- (12 headers 0 lines) ---
[Nov 24 14:18:52] Using latest REGISTER request as basis request
[Nov 24 14:18:52] Sending to 218.101.6.157 : 5060 (NAT)
[Nov 24 14:18:52]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 100 Trying
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Contact: <sip:372 at 203.109.148.108>
Content-Length: 0


<------------>
[Nov 24 14:18:52]
<--- Transmitting (NAT) to 218.101.6.157:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP
192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
From: 372 <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
CSeq: 26779 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="0dc307da"
Content-Length: 0


<------------>
[Nov 24 14:18:52] Scheduling destruction of SIP dialog
'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method: REGISTER)
sip*CLI> sip debug ip

_______________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users
IMPORTANT NOTICE TO RECIPIENT

Computer viruses - It is your responsibility to scan this email and any
attachments for viruses and defects and rely on those scans as Communications
Design & Management Pty Limited (CDM) does not accept any liability for loss
or damage arising from receipt or use of this email or any attachments.

Confidentiality - This email and any attachments are intended for the named
recipient only and may contain personal information, be it confidential or
subject to privilege, none of which are lost or waived because this email may
have been sent to you in error. If you are not the named addressee please let
CDM know by return email, permanently delete it from your system and destroy all
copies and do not use or disclose the contents.

Copyright - This email is subject to copyright and no part of it maybe
reproduced in any manner without the written permission of the copyright owner.

Privacy - Within the jurisdiction of Australian law, personal information in
this email must be dealt with in compliance with the Australian Federal Privacy
Act 1988.

Landy Landy

2009-Nov-24 03:16 UTC

head link

[asterisk-users] can't get pap2 to register from outside the LAN.

How about adding:

insecure=invite,port




--- On Mon, 11/23/09, Tim Uckun <timuckun at gmail.com> wrote:
> From: Tim Uckun <timuckun at gmail.com>
> Subject: [asterisk-users] can't get pap2 to register from outside the
LAN.
> To: asterisk-users at lists.digium.com
> Date: Monday, November 23, 2009, 8:25 PM
> I am having a hell of a problem
> trying to get a linksys pap2t to
> register with my asterisk from outside the LAN.
> 
> I have tried every combination of NAT, outbound proxy,
> stun, specify
> external IP address etc and it just won't work.? Here
> are the relevant
> details.
> 
> In asterisk I have set the following.
> 
> externip=my.ip.address
> localnet=192.168.0.0/255.255.0.0
> nat=yes
> bindport=5060
> 
> 
> here is the sip user
> 
> deny=0.0.0.0/0.0.0.0
> type=friend
> secret=blah
> qualify=yes
> port=5060
> pickupgroup> permit=0.0.0.0/0.0.0.0
> nat=yes
> mailbox=372 at device
> host=dynamic
> dtmfmode=rfc2833
> dial=SIP/372
> context=from-internal
> canreinvite=no
> callgroup> callerid=device <372>
> accountcode> call-limit=50
> 
> 
> I have tried nat = no, nat=never, nat=route, and leaving
> out the nat
> no difference.
> 
> On the linksys end I have tried everything I can think of.
> Nat, no
> nat, stun, hard coded external IP address etc. I have read
> dozens of
> web sites and have tried every suggestion given but no
> joy.
> 
> I know other people have had the same problem but none of
> the links I
> ran into had a solution that worked for me.
> 
> This device connects perfectly when inside the lan, take it
> out and it
> won't connect no matter what I do.
> 
> 
> Here is the sip debug trace. What truly puzzles me is the
> 401 not
> authorized packets. The password is correct, it connects
> fine inside
> the lan but the same username and password fails outside
> the LAN.
> 
> 
>  <------------>
> [Nov 24 14:18:41]
> <--- Transmitting (NAT) to 218.101.6.157:5060 --->
> SIP/2.0 401 Unauthorized
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> User-Agent: Asterisk PBX
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE,
> NOTIFY
> Supported: replaces
> WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
> nonce="0dc307da"
> Content-Length: 0
> 
> 
> <------------>
> [Nov 24 14:18:41] Scheduling destruction of SIP dialog
> 'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method:
> REGISTER)
> [Nov 24 14:18:42]? ip
> <--- SIP read from 218.101.6.157:5060 --->
> REGISTER sip:203.109.148.108 SIP/2.0
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> Max-Forwards: 70
> Contact: 372
> <sip:372 at 192.168.50.183:5060>;expires=3600
> User-Agent: Linksys/PAP2T-5.1.6(LS)
> Content-Length: 0
> Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS,
> REFER
> Supported: x-sipura, replaces
> 
> 
> <------------->
> [Nov 24 14:18:42] --- (12 headers 0 lines) ---
> [Nov 24 14:18:42] Using latest REGISTER request as basis
> request
> [Nov 24 14:18:42] Sending to 218.101.6.157 : 5060 (NAT)
> [Nov 24 14:18:42]
> <--- Transmitting (NAT) to 218.101.6.157:5060 --->
> SIP/2.0 100 Trying
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> User-Agent: Asterisk PBX
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE,
> NOTIFY
> Supported: replaces
> Contact: <sip:372 at 203.109.148.108>
> Content-Length: 0
> 
> 
> <------------>
> [Nov 24 14:18:42]
> <--- Transmitting (NAT) to 218.101.6.157:5060 --->
> SIP/2.0 401 Unauthorized
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> User-Agent: Asterisk PBX
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE,
> NOTIFY
> Supported: replaces
> WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
> nonce="0dc307da"
> Content-Length: 0
> 
> 
> <------------>
> [Nov 24 14:18:42] Scheduling destruction of SIP dialog
> 'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method:
> REGISTER)
> [Nov 24 14:18:44]? ip
> <--- SIP read from 218.101.6.157:5060 --->
> REGISTER sip:203.109.148.108 SIP/2.0
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> Max-Forwards: 70
> Contact: 372
> <sip:372 at 192.168.50.183:5060>;expires=3600
> User-Agent: Linksys/PAP2T-5.1.6(LS)
> Content-Length: 0
> Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS,
> REFER
> Supported: x-sipura, replaces
> 
> 
> <------------->
> [Nov 24 14:18:44] --- (12 headers 0 lines) ---
> [Nov 24 14:18:44] Using latest REGISTER request as basis
> request
> [Nov 24 14:18:44] Sending to 218.101.6.157 : 5060 (NAT)
> [Nov 24 14:18:44]
> <--- Transmitting (NAT) to 218.101.6.157:5060 --->
> SIP/2.0 100 Trying
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> User-Agent: Asterisk PBX
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE,
> NOTIFY
> Supported: replaces
> Contact: <sip:372 at 203.109.148.108>
> Content-Length: 0
> 
> 
> <------------>
> [Nov 24 14:18:44]
> <--- Transmitting (NAT) to 218.101.6.157:5060 --->
> SIP/2.0 401 Unauthorized
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> User-Agent: Asterisk PBX
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE,
> NOTIFY
> Supported: replaces
> WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
> nonce="0dc307da"
> Content-Length: 0
> 
> 
> <------------>
> [Nov 24 14:18:44] Scheduling destruction of SIP dialog
> 'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method:
> REGISTER)
> [Nov 24 14:18:48]? ip
> <--- SIP read from 218.101.6.157:5060 --->
> REGISTER sip:203.109.148.108 SIP/2.0
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> Max-Forwards: 70
> Contact: 372
> <sip:372 at 192.168.50.183:5060>;expires=3600
> User-Agent: Linksys/PAP2T-5.1.6(LS)
> Content-Length: 0
> Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS,
> REFER
> Supported: x-sipura, replaces
> 
> 
> <------------->
> [Nov 24 14:18:48] --- (12 headers 0 lines) ---
> [Nov 24 14:18:48] Using latest REGISTER request as basis
> request
> [Nov 24 14:18:48] Sending to 218.101.6.157 : 5060 (NAT)
> [Nov 24 14:18:48]
> <--- Transmitting (NAT) to 218.101.6.157:5060 --->
> SIP/2.0 100 Trying
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> User-Agent: Asterisk PBX
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE,
> NOTIFY
> Supported: replaces
> Contact: <sip:372 at 203.109.148.108>
> Content-Length: 0
> 
> 
> <------------>
> [Nov 24 14:18:48]
> <--- Transmitting (NAT) to 218.101.6.157:5060 --->
> SIP/2.0 401 Unauthorized
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> User-Agent: Asterisk PBX
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE,
> NOTIFY
> Supported: replaces
> WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
> nonce="0dc307da"
> Content-Length: 0
> 
> 
> <------------>
> [Nov 24 14:18:48] Scheduling destruction of SIP dialog
> 'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method:
> REGISTER)
> [Nov 24 14:18:52]? ip
> <--- SIP read from 218.101.6.157:5060 --->
> REGISTER sip:203.109.148.108 SIP/2.0
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> Max-Forwards: 70
> Contact: 372
> <sip:372 at 192.168.50.183:5060>;expires=3600
> User-Agent: Linksys/PAP2T-5.1.6(LS)
> Content-Length: 0
> Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS,
> REFER
> Supported: x-sipura, replaces
> 
> 
> <------------->
> [Nov 24 14:18:52] --- (12 headers 0 lines) ---
> [Nov 24 14:18:52] Using latest REGISTER request as basis
> request
> [Nov 24 14:18:52] Sending to 218.101.6.157 : 5060 (NAT)
> [Nov 24 14:18:52]
> <--- Transmitting (NAT) to 218.101.6.157:5060 --->
> SIP/2.0 100 Trying
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> User-Agent: Asterisk PBX
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE,
> NOTIFY
> Supported: replaces
> Contact: <sip:372 at 203.109.148.108>
> Content-Length: 0
> 
> 
> <------------>
> [Nov 24 14:18:52]
> <--- Transmitting (NAT) to 218.101.6.157:5060 --->
> SIP/2.0 401 Unauthorized
> Via: SIP/2.0/UDP
> 192.168.50.183:5060;branch=z9hG4bK-26ca393d;received=218.101.6.157
> From: 372
> <sip:372 at 203.109.148.108>;tag=e25fccc07a79cd65o0
> To: 372 <sip:372 at 203.109.148.108>;tag=as1f31845b
> Call-ID: f4e6d9bc-59a7c482 at 192.168.50.183
> CSeq: 26779 REGISTER
> User-Agent: Asterisk PBX
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE,
> NOTIFY
> Supported: replaces
> WWW-Authenticate: Digest algorithm=MD5, realm="asterisk",
> nonce="0dc307da"
> Content-Length: 0
> 
> 
> <------------>
> [Nov 24 14:18:52] Scheduling destruction of SIP dialog
> 'f4e6d9bc-59a7c482 at 192.168.50.183' in 32000 ms (Method:
> REGISTER)
> sip*CLI> sip debug ip
> 
> _______________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
> ???http://lists.digium.com/mailman/listinfo/asterisk-users
>

Reasonably Related Threads

Search for more possibly parallel threads

asterisk users - Nov 2009 - can't get pap2 to register from outside the LAN.

[asterisk-users] can't get pap2 to register from outside the LAN.

[asterisk-users] can't get pap2 to register from outside the LAN.

[asterisk-users] can't get pap2 to register from outside the LAN.

Reasonably Related Threads