Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
378
Views
0
Helpful
7
Replies

SIP TRUNK Calls --- error 403 Forbidden Invalid User

m.gnahoui
Level 1
Level 1

‎05-05-2025 04:31 PM

Hellooo,

Please I need help to resolve an "Invalid user" issue. The calls are not successful

 

"debug ccsip messages ****************

May 5 17:26:06.677: //615/000000000000/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 200 OK
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bK1501A17;received=10.11.84.90;rport=5060
Call-ID: DCA67A44-290C11F0-8268A0EC-8D42D511@172.16.30.9
From: <sip:172.16.30.9>;tag=10CB051-1CAC
To: <sip:10.10.254.10>;tag=smjy3vjt
CSeq: 101 OPTIONS
Allow: OPTIONS,NOTIFY,SUBSCRIBE,INFO,REGISTER,MESSAGE,REFER,UPDATE,PRACK,BYE,CANCEL,ACK,INVITE
Supported: privacy,precondition,100rel
Content-Length: 0


May 5 17:26:06.677: %SIP-5-DIALPEER_STATUS: VoIP dial-Peer <1000> is Up, Raising SNMP UP Trap
May 5 17:26:06.716: //614/000000000000/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bK14FA53;received=10.11.84.90;rport=5060
Call-ID: DCA65387-290C11F0-8267A0EC-8D42D511@172.16.30.9
From: <sip:172.16.30.9>;tag=10CB050-3B9
To: <sip:10.10.254.42>;tag=ar2w3wn2
CSeq: 101 OPTIONS
Warning: 399 03077.09093.A.005.406.228.0.11.02248.00000000.1075445762 "Invalid User"
Content-Length: 0"

 

"sip-ua **************

sip-ua
registrar ipv4:ims01.benintelecoms.bj expires 3600
credentials number +2290121400100 username +2290121400100 ******** realm @ims01.benintelecoms.bj
authentication username +2290121400100 password ************ realm @ims01.benintelecoms.bj
retry invite 2
retry bye 2
retry cancel 2
timers options 1000
sip-server ipv4:10.10.254.42:5060
sip-server dns:ims01.benintelecoms.bj
connection-reuse
host-registrar
!"

 

"voice class sip-profiles 10
request INVITE sip-header From modify "sip:172.16.30.9" "sip:+22901214000@ims01.benintelecoms.bj;user=phone"
request INVITE sip-header Contact modify "@172.16.30.9" "@ims01.benintelecoms.bj"
request INVITE sip-header SIP-Req-URI modify "10.10.254.42" "ims01.benintelecoms.bj"
request INVITE sip-header SIP-Req-URI modify "10.10.254.10" "ims01.benintelecoms.bj"
request INVITE sip-header To modify "@10.10.254.10>" "@ims01.benintelecoms.bj>"
request INVITE sip-header To modify "10.10.254.42" "ims01.benintelecoms.bj"
request INVITE sip-header P-Asserted-Identity add "sip:+22901214000@ims01.benintelecoms.bj;user=phone" "

1 person had this problem
0 Helpful
7 Replies 7

Roger Kallberg
VIP
VIP

‎05-05-2025 09:57 PM

Please collect the entire output from the debug and put it into a text file that you attach to your answer. That makes it much easier for us to work with and provide you help. The snippet you provided is just a small piece of the SIP dialogue. Please also enable debug ccapi voip inout.



Response Signature


0 Helpful

m.gnahoui
Level 1
Level 1
In response to Roger Kallberg

‎05-06-2025 12:54 AM

Hello @Roger Kallberg, attached the debug ccsip all. The debug voip ccapi inout does not give anything at the moment. My router cannot register with the provider. I can't make calls or receive calls.

Preview file
41 KB
0 Helpful

Roger Kallberg
VIP
VIP
In response to m.gnahoui

‎05-06-2025 04:09 AM

Please collect the output from this debugs.

  • debug ccsip message 
  • debug voip ccapi inout

Debug ccsip all is very verbose.



Response Signature


0 Helpful

m.gnahoui
Level 1
Level 1
In response to Roger Kallberg

‎05-07-2025 03:07 AM - edited ‎05-07-2025 03:27 AM

Hello @Roger Kallberg / @Nithin Eluvathingal , here are the debug ccsip messages. Everything I could get.

 

debug ccsip messages **************

 


May 7 10:23:21.882: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
OPTIONS sip:10.0.1.250:5060 SIP/2.0
Via: SIP/2.0/TCP 10.0.1.12:5060;branch=z9hG4bK1ae77d62127e57
From: <sip:10.0.1.12>;tag=573392103
To: <sip:10.0.1.250>
Date: Wed, 07 May 2025 10:23:21 GMT
Call-ID: 4b8d3800-1f114930-19e491-c01000a@10.0.1.12
User-Agent: Cisco-CUCM14.0
CSeq: 101 OPTIONS
Contact: <sip:10.0.1.12:5060;transport=tcp>
Max-Forwards: 0
Content-Length: 0


May 7 10:23:21.884: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 200 OK
Via: SIP/2.0/TCP 10.0.1.12:5060;branch=z9hG4bK1ae77d62127e57
From: <sip:10.0.1.12>;tag=573392103
To: <sip:10.0.1.250>;tag=4757ECB-BAE
Date: Wed, 07 May 2025 10:23:21 GMT
Call-ID: 4b8d3800-1f114930-19e491-c01000a@10.0.1.12
Server: Cisco-SIPGateway/IOS-17.6.1a
CSeq: 101 OPTIONS
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
Allow-Events: kpml, telephone-event
Accept: application/sdp
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Content-Type: application/sdp
Content-Length: 163

v=0
o=CiscoSystemsSIP-GW-UserAgent 9540 1300 IN IP4 10.0.1.250
s=SIP Call
c=IN IP4 10.0.1.250
t=0 0
m=audio 0 RTP/AVP 18 0 8 9 4 2 15 3
c=IN IP4 10.0.1.250

May 7 10:24:06.023: //3969/000000000000/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:ims01.benintelecoms.bj:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bKA9F13D8
From: <sip:+2290121400100@ims01.benintelecoms.bj>;tag=4762B36-1ABA
To: <sip:+2290121400100@ims01.benintelecoms.bj>
Date: Wed, 07 May 2025 10:24:06 GMT
Call-ID: FFFFFFFF89D7844C-2A6211F0-FFFFFFFF8DBE831A-FFFFFFFFD9DBECEA
User-Agent: Cisco-SIPGateway/IOS-17.6.1a
Max-Forwards: 70
Timestamp: 1746613446
CSeq: 8 REGISTER
Contact: <sip:+2290121400100@172.16.30.9:5060>
Expires: 3600
Supported: path
Content-Length: 0


May 7 10:24:06.197: //3969/000000000000/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bKA9F13D8;received=10.11.84.90;rport=5060
Call-ID: FFFFFFFF89D7844C-2A6211F0-FFFFFFFF8DBE831A-FFFFFFFFD9DBECEA
From: <sip:+2290121400100@ims01.benintelecoms.bj>;tag=4762B36-1ABA
To: <sip:+2290121400100@ims01.benintelecoms.bj>;tag=3ou3qu7n
CSeq: 8 REGISTER
WWW-Authenticate: Digest realm="ims01.benintelecoms.bj",nonce="XbYjLiUe+vjGC1HIw2m3pA==",algorithm=MD5,qop="auth"
Content-Length: 0


May 7 10:24:06.198: //3969/000000000000/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:ims01.benintelecoms.bj:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bKAA0228C
From: <sip:+2290121400100@ims01.benintelecoms.bj>;tag=4762B36-1ABA
To: <sip:+2290121400100@ims01.benintelecoms.bj>
Date: Wed, 07 May 2025 10:24:06 GMT
Call-ID: FFFFFFFF89D7844C-2A6211F0-FFFFFFFF8DBE831A-FFFFFFFFD9DBECEA
User-Agent: Cisco-SIPGateway/IOS-17.6.1a
Max-Forwards: 70
Timestamp: 1746613446
CSeq: 9 REGISTER
Contact: <sip:+2290121400100@172.16.30.9:5060>
Expires: 3600
Supported: path
Authorization: Digest username="+2290121400100",realm="ims01.benintelecoms.bj",uri="sip:ims01.benintelecoms.bj:5060",response="f02046355bdb722c2685b01c6a6924cf",nonce="XbYjLiUe+vjGC1HIw2m3pA==",cnonce="2B275C89",qop=auth,algorithm=MD5,nc=00000001
Content-Length: 0


May 7 10:24:06.646: //3969/000000000000/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bKAA0228C;received=10.11.84.90;rport=5060
Call-ID: FFFFFFFF89D7844C-2A6211F0-FFFFFFFF8DBE831A-FFFFFFFFD9DBECEA
From: <sip:+2290121400100@ims01.benintelecoms.bj>;tag=4762B36-1ABA
To: <sip:+2290121400100@ims01.benintelecoms.bj>;tag=g1y1tvgu
CSeq: 9 REGISTER
Warning: 399 5132.4952.S.260.5.4.255.255.5134.0.1075445925.ims01.benintelecoms.bj "Invalid User"
P-UpdateLocation: Failure;reason=1717793635
Content-Length: 0


May 7 10:24:16.077: //3970/000000000000/SIP/Msg/ccsipDisplayMsg:
Sent:
OPTIONS sip:10.10.254.42:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bKAA12673
From: <sip:172.16.30.9>;tag=476527C-C3
To: <sip:10.10.254.42>
Date: Wed, 07 May 2025 10:24:16 GMT
Call-ID: 432F6028-2A6411F0-8DE5831A-D9DBECEA@172.16.30.9
User-Agent: Cisco-SIPGateway/IOS-17.6.1a
Max-Forwards: 70
CSeq: 101 OPTIONS
Contact: <sip:172.16.30.9:5060>
Content-Length: 0


May 7 10:24:16.080: //3971/000000000000/SIP/Msg/ccsipDisplayMsg:
Sent:
OPTIONS sip:10.10.254.10:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bKAA2210A
From: <sip:172.16.30.9>;tag=476527F-5E3
To: <sip:10.10.254.10>
Date: Wed, 07 May 2025 10:24:16 GMT
Call-ID: 432FD592-2A6411F0-8DE6831A-D9DBECEA@172.16.30.9
User-Agent: Cisco-SIPGateway/IOS-17.6.1a
Max-Forwards: 70
CSeq: 101 OPTIONS
Contact: <sip:172.16.30.9:5060>
Content-Length: 0


May 7 10:24:16.084: //3971/000000000000/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 200 OK
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bKAA2210A;received=10.11.84.90;rport=5060
Call-ID: 432FD592-2A6411F0-8DE6831A-D9DBECEA@172.16.30.9
From: <sip:172.16.30.9>;tag=476527F-5E3
To: <sip:10.10.254.10>;tag=7127577c
CSeq: 101 OPTIONS
Allow: OPTIONS,NOTIFY,SUBSCRIBE,INFO,REGISTER,MESSAGE,REFER,UPDATE,PRACK,BYE,CANCEL,ACK,INVITE
Supported: privacy,precondition,100rel
Content-Length: 0


May 7 10:24:16.084: %SIP-5-DIALPEER_STATUS: VoIP dial-Peer <1000> is Up, Raising SNMP UP Trap
May 7 10:24:16.176: %SIP-5-DIALPEER_STATUS: VoIP dial-Peer <1000> is Busied Out, Raising SNMP DOWN Trap
May 7 10:24:16.191: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bKAA12673;received=10.11.84.90;rport=5060
Call-ID: 432F6028-2A6411F0-8DE5831A-D9DBECEA@172.16.30.9
From: <sip:172.16.30.9>;tag=476527C-C3
To: <sip:10.10.254.42>;tag=z9sa667i
CSeq: 101 OPTIONS
Warning: 399 03077.09093.A.005.408.228.0.11.02248.00000000.1075445762 "Invalid User"
Content-Length: 0

 

0 Helpful

Roger Kallberg
VIP
VIP
In response to m.gnahoui

‎05-07-2025 03:45 AM

Please put the log into a text file that you attach. It's very impractical to work with logs directly in-line in the post.



Response Signature


0 Helpful

Roger Kallberg
VIP
VIP
In response to m.gnahoui

‎05-07-2025 03:48 AM

Are you sure that your have configured the correct user name and/or password?

You sent the credentials in this.

May 7 10:24:06.198: //3969/000000000000/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:ims01.benintelecoms.bj:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bKAA0228C
From: <sip:+2290121400100@ims01.benintelecoms.bj>;tag=4762B36-1ABA
To: <sip:+2290121400100@ims01.benintelecoms.bj>
Date: Wed, 07 May 2025 10:24:06 GMT
Call-ID: FFFFFFFF89D7844C-2A6211F0-FFFFFFFF8DBE831A-FFFFFFFFD9DBECEA
User-Agent: Cisco-SIPGateway/IOS-17.6.1a
Max-Forwards: 70
Timestamp: 1746613446
CSeq: 9 REGISTER
Contact: <sip:+2290121400100@172.16.30.9:5060>
Expires: 3600
Supported: path
Authorization: Digest username="+2290121400100",realm="ims01.benintelecoms.bj",uri="sip:ims01.benintelecoms.bj:5060",response="f02046355bdb722c2685b01c6a6924cf",nonce="XbYjLiUe+vjGC1HIw2m3pA==",cnonce="2B275C89",qop=auth,algorithm=MD5,nc=00000001
Content-Length: 0

And your SP is responding with this.

May 7 10:24:06.646: //3969/000000000000/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 172.16.30.9:5060;branch=z9hG4bKAA0228C;received=10.11.84.90;rport=5060
Call-ID: FFFFFFFF89D7844C-2A6211F0-FFFFFFFF8DBE831A-FFFFFFFFD9DBECEA
From: <sip:+2290121400100@ims01.benintelecoms.bj>;tag=4762B36-1ABA
To: <sip:+2290121400100@ims01.benintelecoms.bj>;tag=g1y1tvgu
CSeq: 9 REGISTER
Warning: 399 5132.4952.S.260.5.4.255.255.5134.0.1075445925.ims01.benintelecoms.bj "Invalid User"
P-UpdateLocation: Failure;reason=1717793635
Content-Length: 0

That clearly looks like you have mis-configured something on your end.



Response Signature


0 Helpful

Nithin Eluvathingal
VIP
VIP

‎05-05-2025 11:47 PM

I echo @Roger Kallberg , share the full logs. A few lines aren't enough for us to assist you effectively.

 



Response Signature


0 Helpful
Customers Also Viewed These Support Documents