[Serusers] Cisco 7960 and 407 Proxy Auth Required

[Steve Blair]

Martin:

  Just out of curiousity what version of phone software are you running?

-Steve

Martin Koenig wrote:

>Hello,
>
>we have (again) problems with a Cisco 7960 SIP phone.
>
>#
>U 2004/11/17 13:18:55.664760 1.2.3.4:50520 -> 11.22.33.44:5060
>INVITE sip:07216636445 at testbed.de SIP/2.0.
>Via: SIP/2.0/UDP 1.2.3.4:5065;branch=z9hG4bK218ce466.
>From: "Koenig"
><sip:koenig at testbed.de>;tag=0006283e0a68009a4d72450f-0d8cfd54.
>To: <sip:07216636445 at testbed.de>.
>Call-ID: 0006283e-0a680093-034392eb-37bfeedf at 1.2.3.4.
>CSeq: 101 INVITE.
>User-Agent: CSCO/7.
>Contact: <sip:koenig at 1.2.3.4:5065>.
>Expires: 180.
>Content-Type: application/sdp.
>Content-Length: 246.
>Accept: application/sdp.
>Remote-Party-ID: "Koenig"
><sip:koenig at 1.2.3.4>;party=calling;id-type=subscriber;privacy=off;screen=no.
>.
>(sdp stripped)
>
>#
>U 2004/11/17 13:18:55.665068 11.22.33.44:5060 -> 1.2.3.4:5065
>SIP/2.0 407 Proxy Authentication Required.
>Via: SIP/2.0/UDP 1.2.3.4:5065;branch=z9hG4bK218ce466.
>From: "Koenig"
><sip:koenig at testbed.de>;tag=0006283e0a68009a4d72450f-0d8cfd54.
>To: <sip:07216636445 at testbed.de>;tag=16ac3fc2258766c821c391b58b08db64.371f.
>Call-ID: 0006283e-0a680093-034392eb-37bfeedf at 1.2.3.4.
>CSeq: 101 INVITE.
>Proxy-Authenticate: Digest realm="testbed.de",
>nonce="419b42db55c1a65dac6b825b8c2f8bfa62539beb", qop="auth".
>Server: Sip EXpress router (0.8.14-2 (i386/linux)).
>Content-Length: 0.
>Warning: 392 11.22.33.44:5060 "Noisy feedback tells:  pid=2660
>req_src_ip=1.2.3.4 req_src_port=50520 in_uri=sip:07216636445 at testbed.de
>out_uri=sip:07216636445 at testbed.de via_cnt==1".
>.
>
>#
>U 2004/11/17 13:18:55.764578 1.2.3.4:51368 -> 11.22.33.44:5060
>ACK sip:07216636445 at testbed.de SIP/2.0.
>Via: SIP/2.0/UDP 1.2.3.4:5060;branch=z9hG4bK218ce466.
>From: "Koenig"
><sip:koenig at testbed.de>;tag=0006283e0a68009a4d72450f-0d8cfd54.
>To: <sip:07216636445 at testbed.de>;tag=16ac3fc2258766c821c391b58b08db64.371f.
>Call-ID: 0006283e-0a680093-034392eb-37bfeedf at 1.2.3.4.
>CSeq: 101 ACK.
>Content-Length: 0.
>.
>
>#
>U 2004/11/17 13:18:55.764915 11.22.33.44:5060 -> 11.22.33.55:5060
>ACK sip:+497216636445 at 213.218.10.130:5060 SIP/2.0.
>Max-Forwards: 10.
>Via: SIP/2.0/UDP 11.22.33.44;branch=0.
>Via: SIP/2.0/UDP 1.2.3.4:5060;branch=z9hG4bK218ce466.
>From: "Koenig"
><sip:koenig at testbed.de>;tag=0006283e0a68009a4d72450f-0d8cfd54.
>To: <sip:07216636445 at testbed.de>;tag=16ac3fc2258766c821c391b58b08db64.371f.
>Call-ID: 0006283e-0a680093-034392eb-37bfeedf at 1.2.3.4.
>CSeq: 101 ACK.
>Content-Length: 0.
>.
>
>As you can see, the ACK for the 407 gets forwarded by SER. It does not match
>the previous transaction. This should not be the case. Is there anything we
>can do about this, except flying to munich and beat on cisco?
>
>Best regards,
>Martin
>
>_______________________________________________
>Serusers mailing list
>serusers at lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
>  
>

-- 
  
ISC Network Engineering
The University of Pennsylvania
3401 Walnut Street, Suite 221A
Philadelphia, PA 19104  


voice: 215-573-8396 

       215-746-7903

fax: 215-898-9348    

sip:blairs at net.isc.upenn.edu (8 rings for vm)