SIP Header "To" on voice gateway

alexey_bayganov · ‎05-23-2011

Hello,

My config :

ISR2811------(sip)--------NAT1-------(sip)--------NAT2-------(sip)--------SIP Provider

ISR2811 : voice gateway, one network interface with private ip address 1.1.1.1

NAT1 : third-party equipment with sip inspection. Two network interface with private address: inside 1.1.1.10; outside 2.2.2.2

NAT2 : ISR2811 with ip route to ISP. Two network interface: inside 2.2.2.20; outside 3.3.3.3

I have strange sutuation. With IOS c2800nm-adventerprisek9_ivs-mz.124-22.YB5 call is processing successful.

Connecting ACK (from SIP provider) example with debug ccsip message:

*May 23 2011 07:02:22.255 GMT: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:

Received:

ACK sip:9999999@1.1.1.1:5060 SIP/2.0

Via: SIP/2.0/UDP 3.3.3.3:5060;branch=z9hG4bK4008b4c6;rport

From: "7777777" <sip:7777777@3.3.3.3>;tag=as5be3026b

To: <sip:9999999@1.1.1.1>;tag=1A180-1B29

Contact: <sip:7777777@3.3.3.3>

Call-ID: 4edf4a2d28fb554a288a4e804cffb38f@3.3.3.3

CSeq: 102 ACK

User-Agent: Asterisk PBX

Max-Forwards: 70

Content-Length: 0

But after upgrade c2800nm-adventerprisek9_ivs-mz.151-3.T, sip header change and call is fail.

*May 23 2011 06:54:45.987 GMT: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:

Received:

ACK sip:9999999@1.1.1.1:5060 SIP/2.0

Via: SIP/2.0/UDP 3.3.3.3:5060;branch=z9hG4bK16341077;rport

From: "7777777" <sip:7777777@3.3.3.3>;tag=as0084e5b5

To: <sip:9999999@2.2.2.2>;tag=262F4-159B

Contact: <sip:7777777@3.3.3.3>

Call-ID: 6079cf764b1e63d561b8e3863fbe77af@3.3.3.3

CSeq: 102 ACK

User-Agent: Asterisk PBX

Max-Forwards: 70

Content-Length: 0

9999999 - called number.

Why "To" header with different image not same?

May you share experience upgrade to 15.1 IOS?

I suppose this difference may affect to call process.

nitsinha · ‎05-23-2011

Refer the toll fraud enhancement feature in IOS 15.1(2) T onwards. Make sure you disable this and try

https://supportforums.cisco.com/docs/DOC-12228

Hpe that helps

Regards

Nitesh

PS:Please rate helpful posts

alexey_bayganov · ‎05-23-2011

Thank you for your reply.

Then try find "root of evil", i set trusted ip addresses and even disable the toll-fraud prevention.

nitsinha · ‎05-23-2011

At which 2811 gateway have these debug ccsip messages been taken and which 2811 gateway's IOS has been upgraded? I see two of those gateways in the call flow. Post the complete debug output here for analysis. You might also want to capture 'debug ccapi inout' for analysis.

Regards

Nitesh

alexey_bayganov · ‎05-23-2011

Sorry for my poor data.

All debugs and upgrade action at ISR2811 router (on the scheme).
NAT2 - its only ip router without voice feature.

Any other equipment do not modified or upgraded.

In attachment full debug ccsip messages and debug voice ccapi inout with inbound call from pstn.

With c2800nm-adventerprisek9_ivs-mz.151-3.T:

inbound_ccsip_mess.15.1.txt - debug ccsip messages

inbound_ccapi_inout.15.1.txt - debug voice ccapi

config.15.1.txt - bit of config with voice feature

When c2800nm-adventerprisek9_ivs-mz.124-22.YB5:

inbound_ccsip_mess.12.4.txt - debug ccsip messages

inbound_ccapi_inout.12.4.txt - debug voice ccapi

In debug 4.4.4.4 - ip address ITSP server

With c2800nm-adventerprisek9_ivs-mz.151-3.T calling side hear silence.

Outbound call is fine.

After rollback to c2800nm-adventerprisek9_ivs-mz.124-22.YB5, all calls (in and out) is fine.

Thank you for your participate.

dijohn · ‎05-24-2011

Hi Alexey!

Could you enable the following debugs simultaneously on BOTH the CISCO routers. If possible get a sniffer trace from the routers too

conf t
Logging buffered 200000 debugg

no logging rate-limit

service sequence

exit

debug voip ccapi inout

debug ccsip all

show debug

clear log

ip traffic-export profile XYZ mode capture

bidirect

exit

int

ip traffic-export apply XYZ

exit

traffic-export int  stop
traffic-export int  clear

after the test call

show log | redirect log1.txt

traffic-export int  stop
traffic-export int  copy flash:pcap.cap

copy the log from FLASH to Local computer and upload.it here.

Regards,

Divin

alexey_bayganov · ‎05-24-2011

Hello Divin,

Start debugs on "NAT2" router not possible, because IOS not support voice feature (advsecurityk9).

Simultaneously, i start debugs on "ISR2811" router + capture traffic on "ISR2811" + capture traffic on outside interface "NAT2".
Results at attachment.

I make two logs pack: with IOS c2800nm-adventerprisek9_ivs-mz.151-4.M.bin (filenames contain "151") and c2800nm-adventerprisek9_ivs-mz.124-22.YB5.bin (filenames contain "124").
May be it help compare logs.

Capture traffic logs contain only extracted "SIP || RTP || SDP" packets by wireshark.

Legend:

ISR2811 interface with ip 1.1.1.1 = 10.64.240.2

NAT1 outside interface "2.2.2.2" = 172.16.2.28

NAT2 outside interface "3.3.3.3" = 81.200.213.28

ITSP SIP Server "4.4.4.4" = 81.200.208.154

Thank you for your participate.

Message was edited by: Alexey Bayganov

Confuse, but unable to upload .cap file from ISR2811

alexey_bayganov · ‎05-24-2011

Attachments to previous post

alexey_bayganov · ‎05-26-2011

After analyze shiffer trace, i found absent rtp channel before 200 OK in 15.1 IOS.

But in 12.4 its here.

Then other rtp packets wrong translating.

Is it bug?!