Solved: SIP Trunk using CME - Page 2

moustafa.idc · ‎10-14-2019

Hello Everyone,

I need some help in setting up SIP Trunk on CME to send and receive all calls (local, domestic & international)

here is a copy of the voice related setting that I have:

ip dhcp excluded-address 10.10.20.1 10.10.20.20
!
ip dhcp pool Voice
network 10.10.20.0 255.255.255.0
default-router 10.10.20.1
dns-server 8.8.8.8
option 150 ip 10.10.20.1
!

!
voice call carrier capacity active
!
voice service voip
ip address trusted list
ipv4 10.10.10.0 255.255.255.0
ipv4 10.10.20.0 255.255.255.0
ipv4 185.111.128.0 255.255.255.0
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
supplementary-service h450.12
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
sip
early-offer forced
midcall-signaling passthru
!

voice class codec 1
codec preference 1 g711alaw
codec preference 2 g711ulaw
codec preference 3 g729br8
!
voice class sip-profiles 1
!
!
!
!
voice translation-rule 1
rule 1 /^9\(011.*\)/ /\1/
!
voice translation-rule 2
rule 1 /5011/ /02037752050/
!
!
voice translation-profile SIP
translate calling 2
translate called 1
!
!

!
mgcp profile default
!
!
dial-peer voice 100 voip
description **** OUTBOUND CALLS to telecoms *****
translation-profile outgoing SIP
destination-pattern 9T
session protocol sipv2
session target sip-server
voice-class sip options-keepalive up-interval 100 down-interval 50 retry 6
dtmf-relay rtp-nte
codec g711alaw
no vad
authentication username user password 7 094A453809081A3738345D72 realm sip.telecoms.com
!
!
gateway
timer receive-rtp 1200
!

sip-ua
credentials username user password 7 01150D354B060B2A12741751 realm sip.telecoms.com
authentication username user password 7 094A453809081A3738345D72 realm sip.telecoms.com
registrar dns:sip.telecoms.com expires 3600
sip-server dns:sip.telecoms.com
!
!
!
gatekeeper
shutdown
!
!
telephony-service
max-ephones 25
max-dn 25
ip source-address 10.10.20.1 port 2000
auto assign 1 to 25
timeouts interdigit 4
max-conferences 12 gain -6
transfer-system full-consult
create cnf-files version-stamp 7960 Oct 08 2019 04:33:05
!
!
ephone-dn 1
number 5001 no-reg primary
label PH-1
name PH-1
!
!
ephone-dn 2
number 5002 no-reg primary
label PH-2
name PH-2
!
!
ephone-dn 3
number 5003 no-reg primary
label PH-3
name PH-3
!
!
ephone-dn 4
number 5004 no-reg primary
label PH-4
name PH-4
!
!
ephone-dn 5
number 5005 no-reg primary
label PH-5
name PH-5
!
!
ephone-dn 6
number 5006 no-reg primary
label PH-6
name PH-6
!
!
ephone-dn 7
number 5007 no-reg primary
label PH-7
name PH-7
!
!
ephone-dn 8
number 5008 no-reg primary
label PH-8
name PH-8
!
!
ephone-dn 9
number 5009 no-reg primary
label PH-9
name PH-9
!
!
ephone-dn 10
number 5010 no-reg primary
label PH-10
name PH-10
!
!
ephone-dn 11
number 5011 no-reg primary
label PH-11
name PH-11
!
!
ephone-dn 12
number 5012 no-reg primary
label Meeting Room
name Meeting Room
!
!
ephone-dn 13
number 5020 no-reg primary
label SIP
name SIP
!
!
ephone 1
device-security-mode none
mac-address 000E.3857.275B
type 7945
button 1:1
!
!
!
ephone 2
device-security-mode none
mac-address 000E.3833.A235
type 7945
button 1:2
!
!
!
ephone 3
device-security-mode none
mac-address 000D.BC80.ECD0
type 7945
button 1:3
!
!
!
ephone 4
device-security-mode none
mac-address 000E.3888.E6DB
type 7945
button 1:5
!
!
!
ephone 5
device-security-mode none
mac-address 000E.3857.2975
type 7945
button 1:4
!
!
!
ephone 6
device-security-mode none
mac-address 000E.38E4.6766
type 7945
button 1:6
!
!
!
ephone 7
device-security-mode none
mac-address 000E.3888.E116
type 7945
button 1:7
!
!
!
ephone 8
device-security-mode none
mac-address 000D.BC50.F87B
type 7945
button 1:8
!
!
!
ephone 9
device-security-mode none
mac-address 0011.20B6.229D
type 7945
button 1:9
!
!
!
ephone 10
device-security-mode none
mac-address 0011.20B6.22B6
type 7945
button 1:10
!
!
!
ephone 11
device-security-mode none
mac-address 000D.BC26.1B5D
type 7945
button 1:11
!
!
!
ephone 12
device-security-mode none
mac-address 001A.6C7B.56AF
type 7945
button 1:12
!
!
!
ephone 13
device-security-mode none
mac-address 14AB.C558.0395
type CIPC
keep-conference
button 1:13
!

------------------------------------------------------

Also here is the output of show call active voice compact

<callID> A/O FAX T<sec> Codec type Peer Address IP R<ip>:<udp>
Total call-legs: 9
130380 ANS T0 g711ulaw VOIP P1012 192.168.1.83:25282
130381 ANS T0 g711ulaw VOIP P7009 192.168.1.83:25282
130382 ANS T0 g711ulaw VOIP P170001 192.168.1.83:25282
130383 ANS T0 g711ulaw VOIP Pil 192.168.1.83:25282
130384 ANS T0 g711ulaw VOIP P1012 192.168.1.83:25282
130385 ANS T0 g711ulaw VOIP P526 192.168.1.83:25282
130386 ANS T0 g711ulaw VOIP P1012 192.168.1.83:25282
130387 ANS T0 g711ulaw VOIP P606060 192.168.1.83:25282
130388 ANS T0 g711ulaw VOIP Pistat 192.168.1.83:25282

Vaijanath Sonvane · ‎10-15-2019

Hi,

You are receiving: SIP/2.0 403 Forbidden auth ID. Is username and password configured under sip-ua correct?

Here is the signaling:

++++++++++++++++++ First INVITE sent to ITSP without Authentication Info +++++++++++++++++

Oct 15 20:56:58.499: //929/243ADBAF91F4/SIP/Msg/ccsipDisplayMsg:
Sent: 
INVITE sip:12146043977@sip.bluetelecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 37.236.146.168:5060;branch=z9hG4bK6B1621
From: "SIP" <sip:442037752050@sip.bluetelecoms.com>;tag=531A9C-1F91
To: <sip:12146043977@sip.bluetelecoms.com>
Date: Tue, 15 Oct 2019 20:56:58 GMT
Call-ID: 2992A82E-EEC511E9-9203DF47-51F10770@sip.bluetelecoms.com
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Min-SE:  3600
Cisco-Guid: 0607837103-4005892585-2448744263-1374750576
User-Agent: Cisco-SIPGateway/IOS-12.x
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
CSeq: 101 INVITE
Max-Forwards: 70
Timestamp: 1571173018
Contact: <sip:442037752050@37.236.146.168:5060>
Expires: 180
Allow-Events: telephone-event
P-Asserted-Identity: "SIP" <sip:442037752050@sip.bluetelecoms.com>
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 313

v=0
o=CiscoSystemsSIP-GW-UserAgent 2620 1107 IN IP4 37.236.146.168
s=SIP Call
c=IN IP4 37.236.146.168
t=0 0
m=audio 19286 RTP/AVP 8 0 18 101
c=IN IP4 37.236.146.168
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=yes
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16

++++++++++++++++++ Received Proxy Authentication Required message from ITSP +++++++++++++++++

Oct 15 20:56:58.615: //929/243ADBAF91F4/SIP/Msg/ccsipDisplayMsg:
Received: 
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 37.236.146.168:5060;branch=z9hG4bK6B1621
From: "SIP" <sip:442037752050@sip.bluetelecoms.com>;tag=531A9C-1F91
To: <sip:12146043977@sip.bluetelecoms.com>;tag=be6cf535174b54f27be086b6ef2cfa5f.1e9e
Call-ID: 2992A82E-EEC511E9-9203DF47-51F10770@sip.bluetelecoms.com
CSeq: 101 INVITE
Proxy-Authenticate: Digest realm="sip.bluetelecoms.com", nonce="5da6381900008cef0b08383a5999f491d242321e0496da2f"
server: SBC
Content-Length: 0

++++++++++++++++++ ACK sent to ITSP +++++++++++++++++
Oct 15 20:56:58.615: //929/243ADBAF91F4/SIP/Msg/ccsipDisplayMsg:
Sent: 
ACK sip:12146043977@sip.bluetelecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 37.236.146.168:5060;branch=z9hG4bK6B1621
From: "SIP" <sip:442037752050@sip.bluetelecoms.com>;tag=531A9C-1F91
To: <sip:12146043977@sip.bluetelecoms.com>;tag=be6cf535174b54f27be086b6ef2cfa5f.1e9e
Date: Tue, 15 Oct 2019 20:56:58 GMT
Call-ID: 2992A82E-EEC511E9-9203DF47-51F10770@sip.bluetelecoms.com
Max-Forwards: 70
CSeq: 101 ACK
Allow-Events: telephone-event
Content-Length: 0

++++++++++++++++++ Second INVITE sent to ITSP with Authentication Info +++++++++++++++++
Oct 15 20:56:58.615: //929/243ADBAF91F4/SIP/Msg/ccsipDisplayMsg:
Sent: 
INVITE sip:12146043977@sip.bluetelecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 37.236.146.168:5060;branch=z9hG4bK6CCFA
From: "SIP" <sip:442037752050@sip.bluetelecoms.com>;tag=531A9C-1F91
To: <sip:12146043977@sip.bluetelecoms.com>
Date: Tue, 15 Oct 2019 20:56:58 GMT
Call-ID: 2992A82E-EEC511E9-9203DF47-51F10770@sip.bluetelecoms.com
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Min-SE:  3600
Cisco-Guid: 0607837103-4005892585-2448744263-1374750576
User-Agent: Cisco-SIPGateway/IOS-12.x
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
CSeq: 102 INVITE
Max-Forwards: 70
Timestamp: 1571173018
Contact: <sip:442037752050@37.236.146.168:5060>
Expires: 180
Allow-Events: telephone-event
Proxy-Authorization: Digest username="4718367014",realm="sip.bluetelecoms.com",uri="sip:12146043977@sip.bluetelecoms.com:5060",response="17ab9913dff4daab17481048c3e050af",nonce="5da6381900008cef0b08383a5999f491d242321e0496da2f",algorithm=md5
P-Asserted-Identity: "SIP" <sip:442037752050@sip.bluetelecoms.com>
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 313
v=0
o=CiscoSystemsSIP-GW-UserAgent 2620 1107 IN IP4 37.236.146.168
s=SIP Call
c=IN IP4 37.236.146.168
t=0 0
m=audio 19286 RTP/AVP 8 0 18 101
c=IN IP4 37.236.146.168
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=yes
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16

++++++++++++++++++ Received Forbidden Auth ID from ITSP  +++++++++++++++++
Oct 15 20:56:58.731: //929/243ADBAF91F4/SIP/Msg/ccsipDisplayMsg:
Received: 
SIP/2.0 403 Forbidden auth ID
Via: SIP/2.0/UDP 37.236.146.168:5060;branch=z9hG4bK6CCFA
From: "SIP" <sip:442037752050@sip.bluetelecoms.com>;tag=531A9C-1F91
To: <sip:12146043977@sip.bluetelecoms.com>;tag=be6cf535174b54f27be086b6ef2cfa5f.bb8c
Call-ID: 2992A82E-EEC511E9-9203DF47-51F10770@sip.bluetelecoms.com
CSeq: 102 INVITE
server: SBC
Content-Length: 0

++++++++++++++++++ ACK sent to ITSP +++++++++++++++++
Oct 15 20:56:58.735: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent: 
ACK sip:12146043977@sip.bluetelecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 37.236.146.168:5060;branch=z9hG4bK6CCFA
From: "SIP" <sip:442037752050@sip.bluetelecoms.com>;tag=531A9C-1F91
To: <sip:12146043977@sip.bluetelecoms.com>;tag=be6cf535174b54f27be086b6ef2cfa5f.bb8c
Date: Tue, 15 Oct 2019 20:56:58 GMT
Call-ID: 2992A82E-EEC511E9-9203DF47-51F10770@sip.bluetelecoms.com
Max-Forwards: 70
CSeq: 102 ACK
Allow-Events: telephone-event
Content-Length: 0

Please rate helpful posts and if applicable mark "Accept as a Solution".
Thanks, Vaijanath S.

Vaijanath Sonvane · ‎10-15-2019

Hi,

Can you try below configuration:

voice class sip-profiles 1
 request INVITE sip-header From modify "sip.bluetelecoms.com" "37.236.146.168"
 request INVITE sip-header P-Asserted-Identity modify "sip.bluetelecoms.com" "37.236.146.168"
 !
dial-peer voice 100 voip
  voice-class sip profiles 1
 !

Please rate helpful posts and if applicable mark "Accept as a Solution".
Thanks, Vaijanath S.

moustafa.idc · ‎10-15-2019

It worked!
Would you please explain what is the case exactly?

I cant thank you enough for the efforts and time here!

Vaijanath Sonvane · ‎10-15-2019

Hi,

Your CME Router has 37.236.146.168 as ITSP facing IP Address. When I looked at the INVITE logs carefully, you were sending sip:442037752050@sip.bluetelecoms.com in FROM field instead of sip:442037752050@37.236.146.168 and same thing for P-Asserted-Identity field. Your ITSP was not authenticating FROM or P-Asserted-Identity filed using sip:442037752050@sip.bluetelecoms.com. The SIP profile changed that to sip:442037752050@37.236.146.168.

Please post your final working configuration.

Please rate helpful posts and if applicable mark "Accept as a Solution".
Thanks, Vaijanath S.

moustafa.idc · ‎10-15-2019

Here is the final config