Hopefully this helps. I don't know what else to try to look at. The trace
didn't show up much. Hope someone can help me out. Thanks.
-----Original Message-----
From: Scott Lawrence [mailto:scott.lawre...@nortel.com]
Sent: Friday, December 11, 2009 11:22 AM
To: Lara Johnson
Cc: Tony Graziano; sipx-users@list.sipfoundry.org
Subject: RE: [sipx-users] 4.0.2 Remote users & Authentication Realm problem
On Fri, 2009-12-11 at 11:10 -0500, Lara Johnson wrote:
>
> I currently have all the permissions on all of my dial plans set to
> none. Which solved the outbound problem with the external users in
> 3.10.3. Where a call would look like it was coming from and going to
> the same place (the ingate).
>
>
>
> The only dial plan I have that resembles the extensions goes to an
> Exchange voicemail server.
>
>
>
> The ingate logs just an Authorization Failure when it tries the
> calls.
>
>
>
> A more detailed description of my setup. The ingate is on the public
> internet. It is also what handles the sip trunk to my ITSP. My
> external users are using Bria Pro with the ingate’s public IP address
> as their proxy. The ingate doesn’t actually hold the registrations,
> but acts as a B2BUA for the users. You can see my external users with
> a string of alphanumericlett...@ip of ingate;x-sipx-nonat in the
> sipXecs’ registrations.
>
>
>
> Calls from my internally registered users to my external users
> complete successfully with audio.
>
>
>
> Any calls my external users try to make get a not authorized message.
> When checking the logs in the ingate and the packet capture there. The
> calls seemed to be formed correctly in the INVITES (u...@domain.com)
> and the sipx box is replying with authorization required.
If you post these files:
/etc/sipxpbx/fallbackrules.xml
/etc/sipxpbx/authrules.xml
and a trace of a failed call, I suspect I can sort this out.
See:
http://sipx-wiki.calivia.com/index.php/Display_SIP_message_flow_using_Sipviewer#Getting_SIP_Messages_to_display
<?xml version="1.0" encoding="UTF-8"?>
<mappings xmlns="http://www.sipfoundry.org/sipX/schema/xml/urlauth-00-00";>
<hostMatch>
<name>Emergency</name>
<description>Emergency dialing plan</description>
<ruleType>Emergency</ruleType>
<hostPattern>10.0.0.17</hostPattern>
<userMatch>
<userPattern>sos</userPattern>
<userPattern>911</userPattern>
<userPattern>9911</userPattern>
<permissionMatch/>
</userMatch>
</hostMatch>
<hostMatch>
<name>Local</name>
<description>Local dialing</description>
<hostPattern>209.249.x.x</hostPattern>
<userMatch>
<userPattern>606xxxxxxx</userPattern>
<permissionMatch/>
</userMatch>
</hostMatch>
<hostMatch>
<name>Long Distance</name>
<description>Long distance dialing plan</description>
<hostPattern>209.249.x.x</hostPattern>
<userMatch>
<userPattern>1xxxxxxxxxx</userPattern>
<permissionMatch/>
</userMatch>
</hostMatch>
<hostMatch>
<name>Toll free</name>
<description>Toll free dialing</description>
<hostPattern>209.249.x.x</hostPattern>
<userMatch>
<userPattern>1800xxxxxxx</userPattern>
<permissionMatch/>
</userMatch>
</hostMatch>
<hostMatch>
<name>Toll free</name>
<description>Toll free dialing</description>
<hostPattern>209.249.x.x</hostPattern>
<userMatch>
<userPattern>1866xxxxxxx</userPattern>
<permissionMatch/>
</userMatch>
</hostMatch>
<hostMatch>
<name>Toll free</name>
<description>Toll free dialing</description>
<hostPattern>209.249.x.x</hostPattern>
<userMatch>
<userPattern>1877xxxxxxx</userPattern>
<permissionMatch/>
</userMatch>
</hostMatch>
<hostMatch>
<name>Toll free</name>
<description>Toll free dialing</description>
<hostPattern>209.249.x.x</hostPattern>
<userMatch>
<userPattern>1888xxxxxxx</userPattern>
<permissionMatch/>
</userMatch>
</hostMatch>
<hostMatch>
<name>ExchangeUMVoice</name>
<hostPattern>10.0.0.245</hostPattern>
<userMatch>
<userPattern>2xxx</userPattern>
<permissionMatch/>
</userMatch>
</hostMatch>
<hostMatch>
<description>Reject all other calls to the gateways that are not handled by the earlier rules</description>
<hostPattern>209.249.x.x</hostPattern>
<hostPattern>10.0.0.245</hostPattern>
<hostPattern>10.0.0.17</hostPattern>
<userMatch>
<userPattern>.</userPattern>
<permissionMatch>
<permission>NoAccess</permission>
</permissionMatch>
</userMatch>
</hostMatch>
</mappings><?xml version="1.0" encoding="UTF-8"?>
<mappings xmlns="http://www.sipfoundry.org/sipX/schema/xml/fallback-00-00";>
<hostMatch>
<hostPattern>domain.biz</hostPattern>
<hostPattern>sipxecs4.domain.biz</hostPattern>
<hostPattern>sipxecs4</hostPattern>
<hostPattern>10.0.0.231</hostPattern>
<userMatch>
<!--Emergency-->
<description>Emergency dialing plan</description>
<userPattern>sos</userPattern>
<userPattern>911</userPattern>
<userPattern>9911</userPattern>
<transform>
<user>911</user>
<host>10.0.0.17</host>
<headerparams>expires=60</headerparams>
<fieldparams>q=0.9</fieldparams>
</transform>
</userMatch>
<userMatch>
<!--Local-->
<description>Local dialing</description>
<userPattern>9606xxxxxxx</userPattern>
<userPattern>606xxxxxxx</userPattern>
<userPattern>9xxxxxxx</userPattern>
<userPattern>xxxxxxx</userPattern>
<transform>
<user>606{vdigits}</user>
<host>209.249.3.59</host>
<headerparams>route=10.0.0.19</headerparams>
<headerparams>expires=60</headerparams>
<fieldparams>q=0.9</fieldparams>
</transform>
</userMatch>
<userMatch>
<!--Long Distance-->
<description>Long distance dialing plan</description>
<userPattern>91xxxxxxxxxx</userPattern>
<userPattern>1xxxxxxxxxx</userPattern>
<transform>
<user>1{vdigits}</user>
<host>209.249.3.59</host>
<headerparams>route=10.0.0.19</headerparams>
<headerparams>expires=60</headerparams>
<fieldparams>q=0.9</fieldparams>
</transform>
</userMatch>
<userMatch>
<!--Toll free-->
<description>Toll free dialing</description>
<userPattern>91800xxxxxxx</userPattern>
<userPattern>1800xxxxxxx</userPattern>
<transform>
<user>1800{vdigits}</user>
<host>209.249.3.59</host>
<headerparams>route=10.0.0.19</headerparams>
<headerparams>expires=60</headerparams>
<fieldparams>q=0.9</fieldparams>
</transform>
</userMatch>
<userMatch>
<!--Toll free-->
<description>Toll free dialing</description>
<userPattern>91866xxxxxxx</userPattern>
<userPattern>1866xxxxxxx</userPattern>
<transform>
<user>1866{vdigits}</user>
<host>209.249.3.59</host>
<headerparams>route=10.0.0.19</headerparams>
<headerparams>expires=60</headerparams>
<fieldparams>q=0.9</fieldparams>
</transform>
</userMatch>
<userMatch>
<!--Toll free-->
<description>Toll free dialing</description>
<userPattern>91877xxxxxxx</userPattern>
<userPattern>1877xxxxxxx</userPattern>
<transform>
<user>1877{vdigits}</user>
<host>209.249.3.59</host>
<headerparams>route=10.0.0.19</headerparams>
<headerparams>expires=60</headerparams>
<fieldparams>q=0.9</fieldparams>
</transform>
</userMatch>
<userMatch>
<!--Toll free-->
<description>Toll free dialing</description>
<userPattern>91888xxxxxxx</userPattern>
<userPattern>1888xxxxxxx</userPattern>
<transform>
<user>1888{vdigits}</user>
<host>209.249.3.59</host>
<headerparams>route=10.0.0.19</headerparams>
<headerparams>expires=60</headerparams>
<fieldparams>q=0.9</fieldparams>
</transform>
</userMatch>
<userMatch>
<!--ExchangeUMVoice-->
<userPattern>2xxx</userPattern>
<transform>
<user>{digits}</user>
<host>10.0.0.245</host>
<urlparams>transport=tcp</urlparams>
<headerparams>expires=60</headerparams>
<fieldparams>q=0.9</fieldparams>
</transform>
</userMatch>
</hostMatch>
</mappings>
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<sipTrace>
<branchNode>
<branchIdSet>
<branchId>z9hG4bK57d6bcb05388b9dac8dfc4d1a40214d1.0</branchId>
<branchId>z9hG4bK1957a421f6fa970fe118346b67283444.2HAsjSnQPrz0airz04brPw__</branchId>
</branchIdSet>
<time>2009-12-11T18:01:12.624752Z</time>
<source>10.0.0.19:5060</source>
<destination>sipxecs4.domain.biz-SipXProxy</destination>
<sourceAddress>10.0.0.19:5060</sourceAddress>
<destinationAddress>sipxecs4.domain.biz-SipXProxy</destinationAddress>
<transactionId>1629193578,19920614-4b2289c1c5ccd-1b436...@sipgt-04a64615,156a5d5a,</transactionId>
<method>INVITE</method>
<frameId>1 /tmp/trace.fgN10718/_.sipXproxy.trace.xml:17391</frameId>
<message><![CDATA[INVITE sip:3...@domain.biz SIP/2.0
Via: SIP/2.0/UDP 10.0.0.19:5060;branch=z9hG4bK57d6bcb05388b9dac8dfc4d1a40214d1.0
Session-Expires: 14400
Via: SIP/2.0/UDP 10.0.0.19:5060;branch=z9hG4bK1957a421f6fa970fe118346b67283444.2HAsjSnQPrz0airz04brPw__
To: <sip:3...@domain.biz>
From: "Lara Johnson" <sip:3...@domain.biz>;tag=156a5d5a
Call-ID: 19920614-4b2289c1c5ccd-1b436...@sipgt-04a64615
CSeq: 1629193578 INVITE
User-Agent: SIParator/4.7.1
Contact: <sip:ed0qdtae1eopp7uabo-5ihcje9vvw8kbsw3qjp6fr7...@10.0.0.19>
Supported: timer, replaces
Allow: ACK, INVITE, BYE, CANCEL, OPTIONS, NOTIFY, REFER, INFO, UPDATE
Max-Forwards: 68
Content-Type: application/sdp
Content-Length: 191
Record-Route: <sip:60e7dc377b888...@10.0.0.19;lr>
v=0
o=localb2bua1 1903 400965780 IN IP4 10.0.0.19
s=CounterPath X-Lite 3.0
c=IN IP4 10.0.0.19
t=0 0
m=audio 59806 RTP/AVP 0 8
a=alt:1 1 : IlmN2Ffm +MbjK0wo 10.0.0.86 25082
a=sendrecv
]]></message>
</branchNode>
<branchNode>
<branchIdSet>
<branchId>z9hG4bK57d6bcb05388b9dac8dfc4d1a40214d1.0</branchId>
<branchId>z9hG4bK1957a421f6fa970fe118346b67283444.2HAsjSnQPrz0airz04brPw__</branchId>
</branchIdSet>
<time>2009-12-11T18:01:12.625653Z</time>
<source>sipxecs4.domain.biz-SipXProxy</source>
<destination>10.0.0.19:5060</destination>
<sourceAddress>sipxecs4.domain.biz-SipXProxy</sourceAddress>
<destinationAddress>10.0.0.19:5060</destinationAddress>
<transactionId>1629193578,19920614-4b2289c1c5ccd-1b436...@sipgt-04a64615,156a5d5a,</transactionId>
<responseCode>100</responseCode>
<responseText>Trying</responseText>
<frameId>2 /tmp/trace.fgN10718/_.sipXproxy.trace.xml:17393</frameId>
<message><![CDATA[SIP/2.0 100 Trying
From: "Lara Johnson" <sip:3...@domain.biz>;tag=156a5d5a
To: <sip:3...@domain.biz>
Call-Id: 19920614-4b2289c1c5ccd-1b436...@sipgt-04a64615
Cseq: 1629193578 INVITE
Via: SIP/2.0/UDP 10.0.0.19:5060;branch=z9hG4bK57d6bcb05388b9dac8dfc4d1a40214d1.0
Via: SIP/2.0/UDP 10.0.0.19:5060;branch=z9hG4bK1957a421f6fa970fe118346b67283444.2HAsjSnQPrz0airz04brPw__
Record-Route: <sip:60e7dc377b888...@10.0.0.19;lr>
Content-Length: 0
]]></message>
</branchNode>
<branchNode>
<branchIdSet>
<branchId>z9hG4bK57d6bcb05388b9dac8dfc4d1a40214d1.0</branchId>
<branchId>z9hG4bK1957a421f6fa970fe118346b67283444.2HAsjSnQPrz0airz04brPw__</branchId>
</branchIdSet>
<time>2009-12-11T18:01:12.627191Z</time>
<source>sipxecs4.domain.biz-SipXProxy</source>
<destination>10.0.0.19:5060</destination>
<sourceAddress>sipxecs4.domain.biz-SipXProxy</sourceAddress>
<destinationAddress>10.0.0.19:5060</destinationAddress>
<transactionId>1629193578,19920614-4b2289c1c5ccd-1b436...@sipgt-04a64615,156a5d5a,15774e03</transactionId>
<responseCode>407</responseCode>
<responseText>Proxy Authentication Required</responseText>
<frameId>3 /tmp/trace.fgN10718/_.sipXproxy.trace.xml:17394</frameId>
<message><![CDATA[SIP/2.0 407 Proxy Authentication Required
From: "Lara Johnson" <sip:3...@domain.biz>;tag=156a5d5a
To: <sip:3...@domain.biz>;tag=15774e03
Call-Id: 19920614-4b2289c1c5ccd-1b436...@sipgt-04a64615
Cseq: 1629193578 INVITE
Via: SIP/2.0/UDP 10.0.0.19:5060;branch=z9hG4bK57d6bcb05388b9dac8dfc4d1a40214d1.0
Via: SIP/2.0/UDP 10.0.0.19:5060;branch=z9hG4bK1957a421f6fa970fe118346b67283444.2HAsjSnQPrz0airz04brPw__
Record-Route: <sip:60e7dc377b888...@10.0.0.19;lr>
Proxy-Authenticate: Digest realm="sipxecs4.domain.biz", nonce="a946fa1ca506f948d51f7b8fd23c92d04b2288e8"
Server: sipXecs/4.0.2 sipXecs/sipXproxy (Linux)
Date: Fri, 11 Dec 2009 18:01:12 GMT
Content-Length: 0
]]></message>
</branchNode>
<branchNode>
<branchIdSet>
<branchId>z9hG4bK57d6bcb05388b9dac8dfc4d1a40214d1.0</branchId>
</branchIdSet>
<time>2009-12-11T18:01:12.635545Z</time>
<source>10.0.0.19:5060</source>
<destination>sipxecs4.domain.biz-SipXProxy</destination>
<sourceAddress>10.0.0.19:5060</sourceAddress>
<destinationAddress>sipxecs4.domain.biz-SipXProxy</destinationAddress>
<transactionId>A1629193578,19920614-4b2289c1c5ccd-1b436...@sipgt-04a64615,156a5d5a,15774e03</transactionId>
<method>ACK</method>
<frameId>4 /tmp/trace.fgN10718/_.sipXproxy.trace.xml:17395</frameId>
<message><![CDATA[ACK sip:3...@domain.biz SIP/2.0
Via: SIP/2.0/UDP 10.0.0.19:5060;branch=z9hG4bK57d6bcb05388b9dac8dfc4d1a40214d1.0
From: "Lara Johnson" <sip:3...@domain.biz>;tag=156a5d5a
To: <sip:3...@domain.biz>;tag=15774e03
Call-Id: 19920614-4b2289c1c5ccd-1b436...@sipgt-04a64615
CSeq: 1629193578 ACK
Max-Forwards: 70
Content-Length: 0
]]></message>
</branchNode>
</sipTrace>
_______________________________________________
sipx-users mailing list sipx-users@list.sipfoundry.org
List Archive: http://list.sipfoundry.org/archive/sipx-users
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users
sipXecs IP PBX -- http://www.sipfoundry.org/
