since many people mentioned that they are using cisco 5x00 series sip/pstn gateways, it would be nice if also others than me would push cisco to implement digest authentication in its ios software. currently 5x00 namely is the only sip UA that i'm aware of that doesn't support digest (or any other) authentication of sip requests.
another annoying thing with 5x00 is that i cannot configure the host part of its from uri. it always uses as the host part the numeric ip address of the interface via which it is sending out the sip request.
-- juha
There are also a problem with not being able to limit the hosts that can use the gateway in another way than blocking sip/h323 ports in an acl.
/ Tomas
On Thu, 3 Apr 2003, Juha Heinanen wrote:
since many people mentioned that they are using cisco 5x00 series sip/pstn gateways, it would be nice if also others than me would push cisco to implement digest authentication in its ios software. currently 5x00 namely is the only sip UA that i'm aware of that doesn't support digest (or any other) authentication of sip requests.
another annoying thing with 5x00 is that i cannot configure the host part of its from uri. it always uses as the host part the numeric ip address of the interface via which it is sending out the sip request.
-- juha
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
I have seen lots of dropped packets on my 5300 that isn't invite packets, for example ack, bye etc.. even though record-route is turned on in the proxy.
/ Tomas
On Thu, 3 Apr 2003 jh@lohi.eng.song.fi wrote:
Tomas Björklund writes:
There are also a problem with not being able to limit the hosts that can use the gateway in another way than blocking sip/h323 ports in an acl.
that i can take care of by only allowing signaling traffic to the gw from my proxy.
-- juha
Tomas Björklund writes:
I have seen lots of dropped packets on my 5300 that isn't invite packets, for example ack, bye etc.. even though record-route is turned on in the proxy.
my media gw has two ip interfaces: one for media and the other one for signaling. the signaling interface is on a private network and it is impossible for anyone except my proxy to reach it.
there is a catch though with 5300: it is close to impossible to tell to the 5300 which of its interfaces it should use for signaling and which for media.
-- juha
-
jh＠lohi.eng.song.fi -
Juha Heinanen
-
Tomas Björklund