UCCE Outbound Dialer SIP 403 Forbidden error.

[Ritesh Desai]

Hi folks,

Am configuring Cisco Outbound dialer in my lab. Earlier I configured and was working fine. During those days infra was bit different, it consisted of SIP gateway which was doing job of TDM-SIP and vice-versa.

Now in current scenario, we have PRI directly connected to Cisco 2911 router (PRI is UP and able to make calls to ICM script). Now there is no SIP Gateway. Configuration remains the same. I have followed the Outbound Guide. What I have noticed is Agent Reservation script runs and goes to Queue to SG Node but call does not hit the agent extension. I have gone through the Gateway logs and PG, Dialer, CTI and RTR logs. I see is on Dialer i get SIP 403: Forbidden Error. Q.850 error 21.

Q.850 Error Code: 21 description says Call rejected. Typical scenarios include: Subscriber has a service constraint that does not accept this call.

For this error, my understanding is fax t38 creating obstacle and not allowing gateway to dial. (Correct if am wrong). Tried to remove it but it does not allow to do so. can you suggest the way to remove / disable fax protocol t38 config.

Attached Logs for reference.

regards,

Ritesh Desai.

[Tagir Temirgaliyev]

as I understand outbound dialer receaved SIP message 403 Forbidden? but from where?

[Ritesh Desai]

Tagir,

I dont remembr from where it was coming. Tomrw i will answer ur question.

I suspect t38 fax protocol is sent to PSTN which is creatibg 403 Forbiden error.

Please suggest

Thanks & Regards,

Ritesh Desai

[Ritesh Desai]

Hi Tagir,

As your question was "from where you are receiving SIP 403 forbidden" It is from ICM.

Dialer Logs

SIP/2.0 403 Forbidden 
Via: SIP/2.0/UDP 192.168.3.141:58800;branch=z9hG4bK-d8754z-3a29ba130678f478-1---d8754z-;rport 
To: <sip:9920867686@192.168.1.20>;tag=1F1F19A0-1CDC 
From: <sip:7005@192.168.3.141>;tag=0e25c173 
Call-ID: 9314b662-b749265d-73770b34-b432df5e 
CSeq: 1 INVITE 
Date: Sat, 11 Jun 2016 11:31:03 GMT 
Server: Cisco-SIPGateway/IOS-15.2.4.M6 
Allow-Events: telephone-event 
Reason: Q.850;cause=21 
Content-Length: 0 


17:07:48:326 dialer-baDialer Trace: (RESIP) Found matching transaction for SipResp: 403 cid=9314b662-b749265d-73770b34-b432df5e tid=3a29ba130678f478 cseq=INVITE / 1 from(wire) -> tid=3a29ba130678f478 [ ClientInviteProceeding unreliable target=[ V4 0.0.0.0:0 UNKNOWN_TRANSPORT target domain=unspecified mFlowKey=0 ]] 
17:07:48:326 dialer-baDialer Trace: (RESIP) TransactionState::processClientInvite: SipResp: 403 cid=9314b662-b749265d-73770b34-b432df5e tid=3a29ba130678f478 cseq=INVITE / 1 from(wire) tid=3a29ba130678f478 [ ClientInviteProceeding unreliable target=[ V4 0.0.0.0:0 UNKNOWN_TRANSPORT target domain=unspecified mFlowKey=0 ]] 
17:07:48:326 dialer-baDialer Trace: (RESIP) Adding timer: Timer D tid=3a29ba130678f478 ms=32000 
17:07:48:326 dialer-baDialer Trace: (RESIP) hint provided by app: SIP/2.0/UDP 192.168.3.141:58800;branch=z9hG4bK-d8754z-3a29ba130678f478-1---d8754z-;rport 
17:07:48:326 dialer-baDialer Trace: (RESIP) Transmitting to [ V4 192.168.1.20:5060 UDP target domain=192.168.1.20 mFlowKey=0 ] tlsDomain= via [ V4 192.168.3.141:58800 UDP target domain=unspecified mFlowKey=0 ]

VOICE GATEWAY CONFIG

dial-peer voice 1010 pots
description *** OUTBOUND CALLS TO PSTN ***
destination-pattern [7-9]..T
port 0/0/0:15

I have configuration at Global config level:-

voice service voip
ip address trusted list
ipv4 192.168.2.0
ipv4 192.168.2.0 255.255.255.0
ipv4 192.168.2.50
ipv4 192.168.2.49
ipv4 192.168.2.52
ipv4 192.168.2.1
ipv4 192.168.1.233
address-hiding
mode border-element 
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
no supplementary-service sip handle-replaces
signaling forward none
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
sip
min-se 180 session-expires 180
header-passing

first am unable to disable / remove fax protocol config from voice service voip. Secondly i tried command fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass through g711ulaw. Though call failed.

Please suggest.

regards,

Ritesh Desai

[Ritesh Desai]

hey folks,

Filled the crack. q850 CC21 is because of blocking tollfraud. This is done by voice gateway and is enabled from IOS versions by default. Adding ICM IP Address to ip address trusted list solved the issue.

Follow URL and Ayodegi's comment for solution URL: https://supportforums.cisco.com/discussion/12091656/sip-error-403-forbidden

regards,

Ritesh Desai.

[richardmoorehead]

I have come across this issue a few times now.  Assigning a different number is an easy fix to the problem if possible.  What I have found is that even with Trusted IPs confgured under voice services voip on the CUBE, I was still randomly having numbers blocked with SIP 403 code when dial toll free (800,888,etc.)

I discovered that these internal 7-digit numbers shared the same numbering as known toll-fraud lines.  I checked against Tollfreenumbers.com and sure enough, my problem DNs were the same as a few registered toll fraud spammers.

Edit: the problem I encountered upon further analysis was based on a SIP 403 Forbidden error with cause code 57.  It looks like my provider isn't accepting one directory number for unknown reasons.   The toll fraud information I posted above may not be relevant.