[Users] SER behind PIX

[Ovidiu Sas]

Hi Diego,

When you challenge the SIP UA from openSER, provide the realm and
configure the SIP UA to use that particular realm for authorization.

see: http://openser.org/docs/modules/1.2.x/auth_db.html#AEN170
(do not use an empty string for realm)


Regards,
Ovidiu Sas

On 2/20/07, Diego Valencia <dvalencia at ip-tel.com.ar> wrote:
> Hi everybody.  In the topology:
>
> INTERNET
>         |
>     PIX  (NAT static translate 200.x.x.2 to 10.1.1.2)
>         |
>     SER (10.1.1.2)
>
> I can´t register UA from internet.(unauthorized)
>
> The PIX is configured with the "fixup SIP" and "fixup udp SIP" commands.
> I guess there is a problem when UA generates HA1 with the external IP, then
> de PIX translates this to internal IP, and the SER can´t authenticate it by
> the erroneous hash.
>
> Anybody know some solution for it?
>
> Thanks!
>
> Diego
>
>
>
> _______________________________________________
> Users mailing list
> Users at openser.org
> http://openser.org/cgi-bin/mailman/listinfo/users
>