Registering SIP Softphone through Internet Failed

[noorudden]

Hi,

Trying to register SIP Softphone through Internet but giving following error. However through Local Network Softphone works fine. Moreover 5060 - 5061 TCP/UDP ports are allowed and forwarded to Cisco router through mikrotik firewall.

Please see below messages. Help would be appreciated.

Jun 10 04:57:08.027: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
REGISTER sip:somecompany.ddns.org SIP/2.0
Via: SIP/2.0/UDP 192.168.8.65:59057;branch=z9hG4bK-524287-1---fa2b413159770f3e;rport
Max-Forwards: 70
Contact: <sip:111@192.168.8.65:59057;rinstance=c607bf023235fc0c>
To: "sip"<sip:111@somecompany.ddns.org>
From: "sip"<sip:111@somecompany.ddns.org>;tag=8879db4c
Call-ID: 99142ODk4NDVkN2JkZDRiZWM4YTQxMTE2ZTQyMjJmZTlhMWI
CSeq: 1 REGISTER
Expires: 3600
Allow: OPTIONS, SUBSCRIBE, NOTIFY, INVITE, ACK, CANCEL, BYE, REFER, INFO
User-Agent: X-Lite release 5.6.1 stamp 99142
Content-Length: 0

Jun 10 04:57:08.035: //1918/08844B5492F2/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 192.168.8.65:59057;branch=z9hG4bK-524287-1---fa2b413159770f3e;rport;received=118.27.114.145
From: "sip"<sip:111@somecompany.ddns.org>;tag=8879db4c
To: "sip"<sip:111@somecompany.ddns.org>
Date: Mon, 10 Jun 2019 04:57:08 GMT
Call-ID: 99142ODk4NDVkN2JkZDRiZWM4YTQxMTE2ZTQyMjJmZTlhMWI
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 1 REGISTER
Content-Length: 0

Jun 10 04:57:08.035: //1918/08844B5492F2/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.8.65:59057;branch=z9hG4bK-524287-1---fa2b413159770f3e;rport;received=118.27.114.145
From: "sip"<sip:111@somecompany.ddns.org>;tag=8879db4c
To: "sip"<sip:111@somecompany.ddns.org>;tag=7BF5DFA0-BEC
Date: Mon, 10 Jun 2019 04:57:08 GMT
Call-ID: 99142ODk4NDVkN2JkZDRiZWM4YTQxMTE2ZTQyMjJmZTlhMWI
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 1 REGISTER
WWW-Authenticate: Digest realm="",nonce="925C08170C656329",algorithm=MD5,qop="auth"
Content-Length: 0

Jun 10 04:57:08.519: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
REGISTER sip:somecompany.ddns.org SIP/2.0
Via: SIP/2.0/UDP 192.168.8.65:59057;branch=z9hG4bK-524287-1---fa2b413159770f3e;rport
Max-Forwards: 70
Contact: <sip:111@192.168.8.65:59057;rinstance=c607bf023235fc0c>
To: "sip"<sip:111@somecompany.ddns.org>
From: "sip"<sip:111@somecompany.ddns.org>;tag=8879db4c
Call-ID: 99142ODk4NDVkN2JkZDRiZWM4YTQxMTE2ZTQyMjJmZTlhMWI
CSeq: 1 REGISTER
Expires: 3600
Allow: OPTIONS, SUBSCRIBE, NOTIFY, INVITE, ACK, CANCEL, BYE, REFER, INFO
User-Agent: X-Lite release 5.6.1 stamp 99142
Content-Length: 0

Thanks in Advance,

Nooruddin

[Mohammed al Baqari]

Hi,

When the server is sending 401 challenge your client is sending register
without username/password/realm.

Do you have digest user created on server and configured in client. ?

[noorudden]

Hello Mohammaed,
Thanks for the quick reply, Yes i have configured it and works fine when connected through local network.
Please see below full sip config

voice service voip
sip
registrar server
!
!
voice register global
mode cme
source-address 10.10.10.1 port 5060
max-dn 5
max-pool 5
tftp-path flash:
create profile sync 0235267355444106
!
voice register dn 1
number 111
allow watch
name Sip-Client
!
voice register pool 1
id mac 8086.F8556.6C33
number 1 dn 1
username voice password voice
codec g711ulaw

[Mohammed al Baqari]

See, your config has the ip in global pool as 10.10.10.1. In this case it
won't work because the IP which the phone will try to communicate with is
different (natted IP). I believe natting breaks digest authentication. I
don't think this will work through nat.

[noorudden]

yes you may be right as when i connect vpn it works smoothly as it gets local network ip address.
do you know any mobile android app for PPTP VPN as builtin one does not connect. Using CHAP encryption.

[HARIS_HUSSAIN]

I would suggest using Expressway-C & E which will act as a proxy to register the phone on the internet.

*** Please rate helpful post; Mark "Accept as a Solution" if applicable

Thanks,
Haris

[noorudden]

Thanks Haris but purchasing hardware is not an option here.