Hi,
I'm trying to get my Cisco 7960 working with my SIP server running SER-0.9.0, but it never registers in the server. When I run "ngrep sip" I always get "401 Unauthorized" responses sent from server to phone. I don't understand why is it happening because I think it's everything well configured. What could be causing this problem?
Regards,
Ricardo.
ngrep log:
U 192.168.6.16:50988 -> 192.168.10.90:5060 REGISTER sip:iric.up.pt SIP/2.0..Via: SIP/2.0/UDP 192.168.6.16:5060;branch=z9hG4bK48104c63..From: sip:105711@iric.up.pt;tag=00036baad2f4 00d600629c68-0c16f516..To: sip:105711@iric.up.pt..Call-ID: 00036baa-d2f40009-20a38f54-53f31005@192.168.6.16..Max-Forwards: 70..Date: Fri, 16 Jun 2006 10:29:05 GMT..CSeq: 224 REGISTER..User-Agent: Cisco-CP7960G/8.0..Contact: sip:105711@192.168.6.16:5060;transport=udp;+sip.in
stance="urn:uuid:00000000-0000-0000-0000-00036baad2f4";+u.sip!model.ccm.cisco.com="7"..Content-Length: 0..Expires: 3600.... # U 192.168.10.90:5060 -> 192.168.6.16:50988 SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP 192.168.6.16:5060;branch=z9hG4bK48104c63;rport=50988..From: sip:105711@iric.up.pt;tag=00036ba ad2f400d600629c68-0c16f516..To: sip:105711@iric.up.pt;tag=11df39ed0e444255bd65b6f6af831c6f.4db5..Call-ID: 00036baa-d2f40009-20a38f54-53f31 005@192.168.6.16..CSeq: 224 REGISTER..WWW-Authenticate: Digest realm="iric.up.pt", nonce="449288cfbfc18bc31d059bf8b935352cf56ec883"..Serve r: Sip EXpress router (0.9.0 (i386/linux))..Content-Length: 0....
401 Unauthorized is a challenge sent by a sip proxy.
You are supposed to handle that challenge and send back an other REGISTER or INVITE request which contains the following field:
Authorization: Digest username="toto", realm="toto.com", nonce="fsdg324fdsfg34bfd",...
Where username is your login and nonce generated from your password and parts of 401 message
Check your login and password configuration or check if that user exists on your SER server
Regards,
Paul
-----Message d'origine----- De : serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org] De la part de Ricardo Carvalho Envoyé : vendredi 16 juin 2006 11:42 À : serusers@lists.iptel.org Objet : [Serusers] Cisco 7960 don't REGISTER
Hi,
I'm trying to get my Cisco 7960 working with my SIP server running
SER-0.9.0, but it never registers in the server. When I run "ngrep sip"
I always get "401 Unauthorized" responses sent from server to phone. I
don't understand why is it happening because I think it's everything
well configured. What could be causing this problem?
Regards,
Ricardo.
ngrep log:
U 192.168.6.16:50988 -> 192.168.10.90:5060
REGISTER sip:iric.up.pt SIP/2.0..Via: SIP/2.0/UDP
192.168.6.16:5060;branch=z9hG4bK48104c63..From:
sip:105711@iric.up.pt;tag=00036baad2f4
00d600629c68-0c16f516..To: sip:105711@iric.up.pt..Call-ID:
00036baa-d2f40009-20a38f54-53f31005@192.168.6.16..Max-Forwards:
70..Date: Fri,
16 Jun 2006 10:29:05 GMT..CSeq: 224 REGISTER..User-Agent:
Cisco-CP7960G/8.0..Contact:
sip:105711@192.168.6.16:5060;transport=udp;+sip.in
stance="urn:uuid:00000000-0000-0000-0000-00036baad2f4";+u.sip!model.ccm.ci sco.com="7"..Content-Length:
0..Expires: 3600....
#
U 192.168.10.90:5060 -> 192.168.6.16:50988
SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
192.168.6.16:5060;branch=z9hG4bK48104c63;rport=50988..From:
sip:105711@iric.up.pt;tag=00036ba
ad2f400d600629c68-0c16f516..To:
sip:105711@iric.up.pt;tag=11df39ed0e444255bd65b6f6af831c6f.4db5..Call-ID:
00036baa-d2f40009-20a38f54-53f31
005@192.168.6.16..CSeq: 224 REGISTER..WWW-Authenticate: Digest
realm="iric.up.pt", nonce="449288cfbfc18bc31d059bf8b935352cf56ec883"..Serve
r: Sip EXpress router (0.9.0 (i386/linux))..Content-Length: 0....
_______________________________________________
Serusers mailing list
Serusers@lists.iptel.org
Dear Paul PREVOT, thank you for your reply,
In fact, when I watch my Database log, I do not see any activity while messages are exchanged between phone and server, what leaves me to conclude that as you said, no username and password is being extracted from the messages that reaches the server. X-lite that I also use, only exchanges one REGISTER message to the server including authorization parameters! I was expecting that this cisco hardphone, like x-lite, would send every data needed to register in only one SIP REGISTER message. Does the SIP protocol permit handle one challenge and send back an other REGISTER message with the rest of the needed parameters for accomplish registration? Or does this phone implement a modified SIP protocol that SER can't handle?
Regards,
Ricardo.
Paul PREVOT wrote:
401 Unauthorized is a challenge sent by a sip proxy.
You are supposed to handle that challenge and send back an other REGISTER or INVITE request which contains the following field:
Authorization: Digest username="toto", realm="toto.com", nonce="fsdg324fdsfg34bfd",...
Where username is your login and nonce generated from your password and parts of 401 message
Check your login and password configuration or check if that user exists on your SER server
Regards,
Paul
-----Message d'origine----- De : serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org] De la part de Ricardo Carvalho Envoyé : vendredi 16 juin 2006 11:42 À : serusers@lists.iptel.org Objet : [Serusers] Cisco 7960 don't REGISTER
Hi,
I'm trying to get my Cisco 7960 working with my SIP server running
SER-0.9.0, but it never registers in the server. When I run "ngrep sip"
I always get "401 Unauthorized" responses sent from server to phone. I
don't understand why is it happening because I think it's everything
well configured. What could be causing this problem?
Regards,
Ricardo.
ngrep log:
U 192.168.6.16:50988 -> 192.168.10.90:5060
REGISTER sip:iric.up.pt SIP/2.0..Via: SIP/2.0/UDP
192.168.6.16:5060;branch=z9hG4bK48104c63..From:
sip:105711@iric.up.pt;tag=00036baad2f4
00d600629c68-0c16f516..To: sip:105711@iric.up.pt..Call-ID:
00036baa-d2f40009-20a38f54-53f31005@192.168.6.16..Max-Forwards:
70..Date: Fri,
16 Jun 2006 10:29:05 GMT..CSeq: 224 REGISTER..User-Agent:
Cisco-CP7960G/8.0..Contact:
sip:105711@192.168.6.16:5060;transport=udp;+sip.in
stance="urn:uuid:00000000-0000-0000-0000-00036baad2f4";+u.sip!model.ccm.cisco.com="7"..Content-Length:
0..Expires: 3600....
#
U 192.168.10.90:5060 -> 192.168.6.16:50988
SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
192.168.6.16:5060;branch=z9hG4bK48104c63;rport=50988..From:
sip:105711@iric.up.pt;tag=00036ba
ad2f400d600629c68-0c16f516..To:
sip:105711@iric.up.pt;tag=11df39ed0e444255bd65b6f6af831c6f.4db5..Call-ID:
00036baa-d2f40009-20a38f54-53f31
005@192.168.6.16..CSeq: 224 REGISTER..WWW-Authenticate: Digest
realm="iric.up.pt", nonce="449288cfbfc18bc31d059bf8b935352cf56ec883"..Serve
r: Sip EXpress router (0.9.0 (i386/linux))..Content-Length: 0....
Serusers mailing list
Serusers@lists.iptel.org
Finally it's working, although not as I was expecting, because my cisco 7960 only registers in the server if I put him outside of my firewall, in a public IP. How can this be possible? If I give him an IP in the same subnet of the SER server, It doesn't register, if I put him outside, it works!! From outside until reach server, in the path there is a PIX, routers and switches. While in the same subnet there is only one switch!! So strange... Any clues?
Regards,
Ricardo.
Ricardo Carvalho wrote:
Dear Paul PREVOT, thank you for your reply,
In fact, when I watch my Database log, I do not see any activity while messages are exchanged between phone and server, what leaves me to conclude that as you said, no username and password is being extracted from the messages that reaches the server. X-lite that I also use, only exchanges one REGISTER message to the server including authorization parameters! I was expecting that this cisco hardphone, like x-lite, would send every data needed to register in only one SIP REGISTER message. Does the SIP protocol permit handle one challenge and send back an other REGISTER message with the rest of the needed parameters for accomplish registration? Or does this phone implement a modified SIP protocol that SER can't handle?
Regards,
Ricardo.
Paul PREVOT wrote:
401 Unauthorized is a challenge sent by a sip proxy.
You are supposed to handle that challenge and send back an other REGISTER or INVITE request which contains the following field:
Authorization: Digest username="toto", realm="toto.com", nonce="fsdg324fdsfg34bfd",...
Where username is your login and nonce generated from your password and parts of 401 message
Check your login and password configuration or check if that user exists on your SER server
Regards,
Paul
-----Message d'origine----- De : serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org] De la part de Ricardo Carvalho Envoyé : vendredi 16 juin 2006 11:42 À : serusers@lists.iptel.org Objet : [Serusers] Cisco 7960 don't REGISTER
Hi,
I'm trying to get my Cisco 7960 working with my SIP server running
SER-0.9.0, but it never registers in the server. When I run "ngrep sip"
I always get "401 Unauthorized" responses sent from server to phone. I
don't understand why is it happening because I think it's everything
well configured. What could be causing this problem?
Regards,
Ricardo.
ngrep log:
U 192.168.6.16:50988 -> 192.168.10.90:5060
REGISTER sip:iric.up.pt SIP/2.0..Via: SIP/2.0/UDP
192.168.6.16:5060;branch=z9hG4bK48104c63..From:
sip:105711@iric.up.pt;tag=00036baad2f4
00d600629c68-0c16f516..To: sip:105711@iric.up.pt..Call-ID:
00036baa-d2f40009-20a38f54-53f31005@192.168.6.16..Max-Forwards:
70..Date: Fri,
16 Jun 2006 10:29:05 GMT..CSeq: 224 REGISTER..User-Agent:
Cisco-CP7960G/8.0..Contact:
sip:105711@192.168.6.16:5060;transport=udp;+sip.in
stance="urn:uuid:00000000-0000-0000-0000-00036baad2f4";+u.sip!model.ccm.cisco.com="7"..Content-Length:
0..Expires: 3600....
#
U 192.168.10.90:5060 -> 192.168.6.16:50988
SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
192.168.6.16:5060;branch=z9hG4bK48104c63;rport=50988..From:
sip:105711@iric.up.pt;tag=00036ba
ad2f400d600629c68-0c16f516..To:
sip:105711@iric.up.pt;tag=11df39ed0e444255bd65b6f6af831c6f.4db5..Call-ID:
00036baa-d2f40009-20a38f54-53f31
005@192.168.6.16..CSeq: 224 REGISTER..WWW-Authenticate: Digest
realm="iric.up.pt", nonce="449288cfbfc18bc31d059bf8b935352cf56ec883"..Serve
r: Sip EXpress router (0.9.0 (i386/linux))..Content-Length: 0....
Serusers mailing list
Serusers@lists.iptel.org
Serusers mailing list Serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Hi Ricardo,
I bet you have enable the NAT-IP in the config of the 79xx phone. If you disable this, and turn everything related to NAT off, it normally works bether :-)
Best Regards
Atle * Ricardo Carvalho rcarvalho@iric.up.pt [060616 18:00]:
Finally it's working, although not as I was expecting, because my cisco 7960 only registers in the server if I put him outside of my firewall, in a public IP. How can this be possible? If I give him an IP in the same subnet of the SER server, It doesn't register, if I put him outside, it works!! From outside until reach server, in the path there is a PIX, routers and switches. While in the same subnet there is only one switch!! So strange... Any clues?
Regards,
Ricardo.
Ricardo Carvalho wrote:
Dear Paul PREVOT, thank you for your reply,
In fact, when I watch my Database log, I do not see any activity while messages are exchanged between phone and server, what leaves me to conclude that as you said, no username and password is being extracted from the messages that reaches the server. X-lite that I also use, only exchanges one REGISTER message to the server including authorization parameters! I was expecting that this cisco hardphone, like x-lite, would send every data needed to register in only one SIP REGISTER message. Does the SIP protocol permit handle one challenge and send back an other REGISTER message with the rest of the needed parameters for accomplish registration? Or does this phone implement a modified SIP protocol that SER can't handle?
Regards,
Ricardo.
Paul PREVOT wrote:
401 Unauthorized is a challenge sent by a sip proxy.
You are supposed to handle that challenge and send back an other REGISTER or INVITE request which contains the following field:
Authorization: Digest username="toto", realm="toto.com", nonce="fsdg324fdsfg34bfd",...
Where username is your login and nonce generated from your password and parts of 401 message
Check your login and password configuration or check if that user exists on your SER server
Regards,
Paul
-----Message d'origine----- De : serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org] De la part de Ricardo Carvalho Envoy? : vendredi 16 juin 2006 11:42 ? : serusers@lists.iptel.org Objet : [Serusers] Cisco 7960 don't REGISTER
Hi,
I'm trying to get my Cisco 7960 working with my SIP server running
SER-0.9.0, but it never registers in the server. When I run "ngrep sip"
I always get "401 Unauthorized" responses sent from server to phone. I
don't understand why is it happening because I think it's everything
well configured. What could be causing this problem?
Regards,
Ricardo.
ngrep log:
U 192.168.6.16:50988 -> 192.168.10.90:5060
REGISTER sip:iric.up.pt SIP/2.0..Via: SIP/2.0/UDP
192.168.6.16:5060;branch=z9hG4bK48104c63..From:
sip:105711@iric.up.pt;tag=00036baad2f4
00d600629c68-0c16f516..To: sip:105711@iric.up.pt..Call-ID:
00036baa-d2f40009-20a38f54-53f31005@192.168.6.16..Max-Forwards:
70..Date: Fri,
16 Jun 2006 10:29:05 GMT..CSeq: 224 REGISTER..User-Agent:
Cisco-CP7960G/8.0..Contact:
sip:105711@192.168.6.16:5060;transport=udp;+sip.in
stance="urn:uuid:00000000-0000-0000-0000-00036baad2f4";+u.sip!model.ccm.cisco.com="7"..Content-Length:
0..Expires: 3600....
#
U 192.168.10.90:5060 -> 192.168.6.16:50988
SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
192.168.6.16:5060;branch=z9hG4bK48104c63;rport=50988..From:
sip:105711@iric.up.pt;tag=00036ba
ad2f400d600629c68-0c16f516..To:
sip:105711@iric.up.pt;tag=11df39ed0e444255bd65b6f6af831c6f.4db5..Call-ID:
00036baa-d2f40009-20a38f54-53f31
005@192.168.6.16..CSeq: 224 REGISTER..WWW-Authenticate: Digest
realm="iric.up.pt", nonce="449288cfbfc18bc31d059bf8b935352cf56ec883"..Serve
r: Sip EXpress router (0.9.0 (i386/linux))..Content-Length: 0....
Serusers mailing list
Serusers@lists.iptel.org
Serusers mailing list Serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Serusers mailing list Serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers