Enable digest authentication for SIP trunk between CUBE and CUCM

[edguidry]

Hello. Have working SIP trunk between CUCM 12.5 and CUBE running on ISR4331 IOS 16.9.5.  Trying to enable digest authentication.   I have tried the following but not seeing it take effect:

1. CUCM: enabled digest auth in SIP trunk security profile

2. CUCM: create a SIP Realm under User Management

3. CUCM reset SIP trunk

4. CUBE: added authentication command with same username and password used in the Realm. I have tried applying to sip-ua and to dial-peers. 

5. Phone - have not assigned anything to the phone itself.

I do not see anywhere to assign the Realm to a SIP trunk.

I am not seeing anything in SIP messages in log pertaining to digest auth when setting up call.

Does anyone know if my approach is correct?  Having trouble finding doc with clear instructions.  

Thanks!

[Gregory Brunn]

You following this documentation

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/12_5_1/cucm_b_security-guide-1251/cucm_b_security-guide-1251_chapter_011001.html?bookSearch=true

This will probably be hopefull as well

https://community.cisco.com/t5/collaboration-voice-and-video/handle-cube-registration-authentication-like-a-boss/ba-p/3660492