[Serusers] Can't Register Cisco ATA - www_challege Fails
Iqbal
iqbal at gigo.co.uk
Fri Apr 29 01:51:59 CEST 2005
leave the realm in ser, leave it blank and try ""
Iqbal
On 4/28/2005, "Elton Machado" <elton.machado at gmail.com> wrote:
>In my Allnet, devices I have the same problem, I have no options to set
>realm or domain, what I usually do is, to have a dns entry for the
>domain/realm at my dns server and in device I use the same entry as outbound
>and sip proxy, instead of using an ip entry or other dns name.
>
>Another choice is to try out at authentication user or in user field, to use
>this form sipuser at realm instead of sipuser.
>
>I never configure a Cisco ATA, but in you case I will try the both ways.
>
>Regards and keep us current of results.
>
>Elton
>
>
>
>
>-----Original Message-----
>From: serusers-bounces at iptel.org [mailto:serusers-bounces at lists.iptel.org] On
>Behalf Of Aaron W
>Sent: quinta-feira, 28 de Abril de 2005 21:52
>To: serusers at lists.iptel.org
>Subject: [Serusers] Can't Register Cisco ATA - www_challege Fails
>
>I have SER setup on 10.9.8.7 which is on the internet. I have a Cisco
>ATA at home beind a linksys router. The ATA has an non-routeable ip
>of 192.168.1.107, while the public IP of my linksys router is 1.2.3.4
>I can not get the cisco ATA to register, and i dont know why. I have
>posted results on Ngrep, also some debugging info from SER and my
>acutal ser.cfg In the setup for the ATA I gave it the proxy as an IP
>address (10.9.8.7), there is no place in the cisco config (that I can
>find) to specify a domain/realm. And the DNS server that my linksys
>router has doesnt have a route to sip1.jmusa.com Is that the problem,
>if so whats the best way around it?
>
>Results of ngrep:
>
>U 1.2.3.4:5060 -> 10.9.8.7:5060
> REGISTER sip:10.9.8.7SIP/2.0..Via: SIP/2.0/UDP
>192.168.1.107:5060;branch=z9hG4bKfac02618b73b6b6
> a..From: Aaron <sip:8306 at 10.9.8.7;user=phone>;tag=3424024559..To:
>Aaron <sip:8306 at 10.9.8.7;
> user=phone>..Call-ID: 2834281883 at 192.168.1.107..CSeq: 3
>REGISTER..Contact: Aaron <sip:8306 at 192.168.1.
> 107:5060;user=phone;transport=udp>;expires=3600..User-Agent: Cisco
>ATA 188 v3.2.0 atasip (041111A)..
> Authorization: Digest
>username="8306",realm="sip1.jmusa.com",nonce="427023d34e56189a2adcddfb16228d
>de9
>
>f51f0eb",uri="sip:10.9.8.7",response="7b9e7ec34e8d4f8157fb66e140f95cbe"..Con
>tent-Length:
>0....
>#
>U 10.9.8.7:5060 -> 1.2.3.4:5060
> SIP/2.0 100 Trying..Via: SIP/2.0/UDP
>192.168.1.107:5060;branch=z9hG4bKfac02618b73b6b6a;received=69.14
> 2.66.52..From: Aaron
><sip:8306 at 10.9.8.7;user=phone>;tag=3424024559..To: Aaron
><sip:8306 at 65.199.1
> 91.83;user=phone>..Call-ID: 2834281883 at 192.168.1.107..CSeq: 3
>REGISTER..Server: Sip EXpress router (0
> .9.0 (i386/linux))..Content-Length: 0..Warning: 392 10.9.8.7:5060
>"Noisy feedback tells: pid=91
> 53 req_src_ip=1.2.3.4 req_src_port=5060
>in_uri=sip:10.9.8.7out_uri=sip:10.9.8.7via_c
> nt==1"....
>#
>U 10.9.8.7:5060 -> 1.2.3.4:5060
> SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
>192.168.1.107:5060;branch=z9hG4bKfac02618b73b6b6a;rport=50
> 60;received=1.2.3.4..From: Aaron
><sip:8306 at 10.9.8.7;user=phone>;tag=3424024559..To: Aaron <
>
>sip:8306 at 10.9.8.7;user=phone>;tag=b27e1a1d33761e85846fc98f5f3a7e58.a0aa..Cal
>l-ID:
>2834281883 at 192
> .168.1.107..CSeq: 3 REGISTER..WWW-Authenticate: Digest
>realm="jmusa.com", nonce="427147ef446cc27cc8b6
> 502323243e02f9b5dfb6"..Server: Sip EXpress router (0.9.0
>(i386/linux))..Content-Length: 0..Warning: 3
> 92 10.9.8.7:5060 "Noisy feedback tells: pid=9153 req_src_ip=1.2.3.4
>req_src_port=5060 in_u
> ri=sip:10.9.8.7out_uri=sip:10.9.8.7via_cnt==1"....
>
>
>My messages:
>Apr 28 16:26:33 sip1 /sbin/ser[9148]: CLIENT NAT TEST 7 IS TRUE: From
>sip:8306 at 10.9.8.7;user=phone, To sip:8306 at 10.9.8.7;user=phone, Call
>ID: 2834281883 at 192.168.1.107, MESASGE ID 2
>Apr 28 16:26:33 sip1 /sbin/ser[9148]: BEGIN WWW AUTH: From
>sip:8306 at 10.9.8.7;user=phone, To sip:8306 at 10.9.8.7;user=phone, Call
>ID: 2834281883 at 192.168.1.107, MESASGE ID 2
>Apr 28 16:26:33 sip1 /sbin/ser[9148]: WWW AUTHFAIL PRE CHALLEGE: From
>sip:8306 at 10.9.8.7;user=phone, To sip:8306 at 10.9.8.7;user=phone, Call
>ID: 2834281883 at 192.168.1.107, MESASGE ID 2
>---Then nothing else......
>
>
>My ser.cfg (snipped)
>----snip----
> if (method=="INVITE") {
> route(3);
> break;
> } else if (method=="REGISTER") {
> route(2);
> break;
>----snip----
>route[2] {
> # -----------------------------------------------------------------
> # REGISTER Message Handler
> # ----------------------------------------------------------------
> sl_send_reply("100", "Trying");
> if (!search("^Contact: \*") && client_nat_test("7")) {
> xlog("L_ERR","CLIENT NAT TEST 7 IS TRUE: From %fu, To %tu,
>Call ID:
>%ci, MESASGE ID %mi");
> setflag(6);
> fix_nated_register();
> force_rport();
> };
>xlog("L_ERR","BEGIN WWW AUTH: From %fu, To %tu, Call ID: %ci, MESASGE ID
>%mi");
> if (!www_authorize("sip1.jmusa.com","subscriber")) {
>xlog("L_ERR"," WWW AUTHFAIL PRE CHALLEGE: From %fu, To %tu, Call ID:
>%ci, MESASGE ID %mi");
> www_challenge("sip1.jmusa.com","0");
>xlog("L_ERR"," WWW AUTHFAIL POST CHALLEGE From %fu, To %tu, Call ID:
>%ci, MESASGE ID %mi");
> break;
> };
>
> if (!check_to()) {
> sl_send_reply("401", "Unauthorized");
> break;
> };
> consume_credentials();
> if (!save("location")) {
> sl_reply_error();
> };
>}
>
>_______________________________________________
>Serusers mailing list
>serusers at lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
>
>_______________________________________________
>Serusers mailing list
>serusers at lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
>
>
More information about the sr-users
mailing list