cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
920
Views
5
Helpful
5
Replies

UC540 SIP Trunk Install

jason-nguyen
Level 1
Level 1

Currently have an ASA 5505 and a uc540. I'm trying to test a sip trunk with this configuration and having a hard time getting inbound calls to work. The calls are passing to my uc540 but I am getting an invalid host. I can make outbound calls but not inbound calls at the moment. Below are the call traps.

 

047358: //-1/xxxxxxxxxxxx/SIP/Info/HandleUdpIPv4SocketReads: Msg enqueued for SPI with IP addr: [38.96.36.23]:5060, local_address:[ - ]
047359: //-1/xxxxxxxxxxxx/SIP/Info/ccsip_process_sipspi_queue_event: ccsip_spi_get_msg_type returned: 2 for event 1
047360: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
INVITE sip:7143863279@38.96.40.186 SIP/2.0
Via: SIP/2.0/UDP 38.96.36.23:5060;branch=z9hG4bK49a7b77a;rport
Max-Forwards: 70
From: "NGUYEN,JASON" <sip:@38.96.36.23>;tag=as075b23e0
To: <sip:7143863279@38.96.40.186>
Contact: <sip:@38.96.36.23:5060>
Call-ID: 692b38d52bafd8b666b934c5752af4dc@38.96.36.23:5060
CSeq: 102 INVITE
User-Agent: sws20
Date: Wed, 02 Nov 2016 22:54:43 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
P-Asserted-Identity: "NGUYEN,JASON" <sip:@38.96.36.23>
Content-Type: application/sdp
Content-Length: 316
 
v=0
o=root 1092542824 1092542824 IN IP4 38.96.36.23
s=Asterisk PBX 1.8.32.1-gc-ae0b228b
c=IN IP4 38.96.36.23
t=0 0
m=audio 12660 RTP/AVP 0 8 97 101
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:97 iLBC/8000
a=fmtp:97 mode=30
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=ptime:20
a=sendrecv

047361: //-1/xxxxxxxxxxxx/SIP/Info/ccsip_new_msg_preprocessor: Checking Invite Dialog
047362: //-1/xxxxxxxxxxxx/SIP/Info/sipSPIAddContextToTable: Added context(0x8818EE88) with key=[14187] to table
047363: //-1/000000000000/SIP/Info/sipSPI_ipip_vcc_Initialization:  Entry...
047364: //-1/xxxxxxxxxxxx/SIP/Info/resolve_sig_ip_address_to_bind: calling reg_invoke_ip_first_hop()
047365: //-1/xxxxxxxxxxxx/SIP/Info/resolve_sig_ip_address_to_bind: calling ip_best_local_address()
047366: //-1/xxxxxxxxxxxx/SIP/Info/resolve_sig_ip_address_to_bind: return addr 192.168.0.2
047367: //-1/xxxxxxxxxxxx/SIP/Info/sipSPISetDateHeader: Converting TimeZone PDT to SIP default timezone = GMT
047368: //-1/xxxxxxxxxxxx/SIP/Info/resolve_sig_ip_address_to_bind: calling reg_invoke_ip_first_hop()
047369: //-1/xxxxxxxxxxxx/SIP/Info/resolve_sig_ip_address_to_bind: calling ip_best_local_address()
047370: //-1/xxxxxxxxxxxx/SIP/Info/resolve_sig_ip_address_to_bind: return addr 192.168.0.2
047371: //-1/xxxxxxxxxxxx/SIP/Error/sipSPI_validate_own_ip_addr: ReqLine IP addr does not match with host IP addr
047372: //-1/013EAC719CB1/SIP/Error/sact_idle_new_message_invite: Invalid URL in incoming INVITE
047373: //-1/013EAC719CB1/SIP/Info/ccsip_set_cc_cause_for_spi_err: Categorized cause:100, category:100
047374: //-1/xxxxxxxxxxxx/SIP/Info/ccsip_set_release_source_for_peer: ownCallId[-1], src[6]
047375: //-1/013EAC719CB1/SIP/Info/sipSPIUaddCcbToUASReqTable: ****Adding to UAS Request table.
047376: //-1/013EAC719CB1/SIP/Info/sipSPIUaddCcbToTable: Added to table. ccb=0x8818EE88 key=692b38d52bafd8b666b934c5752af4dc@38.96.36.23:50607143863279
047377: //-1/013EAC719CB1/SIP/Info/sipSPIUaddCcbToUASRespTable: ****Adding to UAS Response table.
047378: //-1/013EAC719CB1/SIP/Info/sipSPIUaddCcbToTable: Added to table. ccb=0x8818EE88 key=692b38d52bafd8b666b934c5752af4dc@38.96.36.23:50601ADC3384-14A6
047379: //-1/013EAC719CB1/SIP/Info/Session-Timer/sipSTSLMain:
 SE: 0;refresher:none peer refresher:none, flags:0, posted event:E_STSL_INVALID_PEER_EVENT, reason:4
 Configured SE:1800, Configured Min-SE:1800
047380: //-1/013EAC719CB1/SIP/Info/sipSPISendInviteResponse: Associated container=0x8A2494C8 to Invite Response 400
047381: //-1/013EAC719CB1/SIP/Info/sentErrResDisconnecting: Sent an 3456XX Error Response
047382: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 400 Bad Request - 'Invalid Host'
Via: SIP/2.0/UDP 38.96.36.23:5060;branch=z9hG4bK49a7b77a;rport
From: "NGUYEN,JASON" <sip:@38.96.36.23>;tag=as075b23e0
To: <sip:7143863279@38.96.40.186>;tag=1ADC3384-14A6
Date: Wed, 02 Nov 2016 23:43:35 GMT
Call-ID: 692b38d52bafd8b666b934c5752af4dc@38.96.36.23:5060
CSeq: 102 INVITE
Allow-Events: telephone-event
Reason: Q.850;cause=100
Server: Cisco-SIPGateway/IOS-12.x
Content-Length: 0
 

047383: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 400 Bad Request - 'Invalid Host'
Via: SIP/2.0/UDP 38.96.36.23:5060;branch=z9hG4bK49a7b77a;rport
From: "NGUYEN,JASON" <sip:@38.96.36.23>;tag=as075b23e0
To: <sip:7143863279@38.96.40.186>;tag=1ADC3384-14A6
Call-ID: 692b38d52bafd8b666b934c5752af4dc@38.96.36.23:5060
CSeq: 102 INVITE
Reason: Q.850;cause=100
Content-Length: 0
 

047384: //-1/xxxxxxxxxxxx/SIP/Info/HandleUdpIPv4SocketReads: Msg enqueued for SPI with IP addr: [38.96.36.23]:5060, local_address:[ - ]
047385: //-1/xxxxxxxxxxxx/SIP/Info/ccsip_process_sipspi_queue_event: ccsip_spi_get_msg_type returned: 2 for event 1
047386: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
ACK sip:7143863279@38.96.40.186 SIP/2.0
Via: SIP/2.0/UDP 38.96.36.23:5060;branch=z9hG4bK49a7b77a;rport
Max-Forwards: 70
From: "NGUYEN,JASON" <sip:@38.96.36.23>;tag=as075b23e0
To: <sip:7143863279@38.96.40.186>;tag=1ADC3384-14A6
Contact: <sip:@38.96.36.23:5060>
Call-ID: 692b38d52bafd8b666b934c5752af4dc@38.96.36.23:5060
CSeq: 102 ACK
User-Agent: sws20
Content-Length: 0
 

047387: //-1/xxxxxxxxxxxx/SIP/Info/ccsip_new_msg_preprocessor: Checking Invite Dialog
047388: //-1/013EAC719CB1/SIP/Info/sipSPIFindCcbUASRespTable: *****CCB found in UAS Response table. ccb=0x8818EE88
047389: //-1/xxxxxxxxxxxx/SIP/Info/sipSPISetDateHeader: Converting TimeZone PDT to SIP default timezone = GMT
047390: //-1/013EAC719CB1/SIP/Call/sipSPICallInfo:
The Call Setup Information is:
Call Control Block (CCB) : 0x8818EE88
State of The Call        : STATE_DEAD
TCP Sockets Used         : NO
Calling Number           :
Called Number            : 7143863279
Source IP Address (Sig  ): 192.168.0.2
Destn SIP Req Addr:Port  : 38.96.36.23:0
Destn SIP Resp Addr:Port : 38.96.36.23:5060
Destination Name         : 38.96.36.23
047391: //-1/013EAC719CB1/SIP/Call/sipSPICallInfo:
Disconnect Cause (CC)    : 100
Disconnect Cause (SIP)   : 400
5 Replies 5

ADAM CRISP
Level 4
Level 4

You are sending a call to 38.96.40.186

Is 38.96.40.186 your UC500 ?

No the UC is 192.168.0.2

Well that's your problem.

So there are several ways of fixing this.

1. Configure the Asterisk PBX SIP Trunk to your UC500, to send calls to a proxy defined as 192.168.0.2 and at the same time to use an "outbound proxy" of 38.96.40.186

This will mean calls will be sent to 38.96.40.185 but the SIP message will be constructed correctly as INVITE sip:7143863279@192.168.0.2 SIP/2.0

or

2. On your ASA firewall configure the Application Layer Gateway (ALG) for SIP. This should mean the ASA does the the swap from 38.96.40.186 to 192.168.0.2 for you.

This is normally on by default, at least for port 5060.

Under sip-ua on the UC500, you could try using the "connection reuse" command. This makes all sip traffic originating from the UC500 to use port 5060 (unless otherwise configured) and means the firewall would stand a better chance of building a nat session for sip. But I think you have probably got a static nat session setup on your ASA - so check out the protocol fix up settings.

or

3. Not recommended unless you know about sip security, but I have seen many Cube's with public IP's, so you could put a public IP on there, but again, serious secutity considerations need to be thought about before doing this.

or

4. There is a sip-ua command. 'permit dns hostname'

http://www.cisco.com/c/en/us/td/docs/ios/voice/sip/configuration/guide/15_0/sip_15_0_book/sip_cg-msg_tmr_rspns.html

You could try creating a DNS entry for 38.96.40.186 and then having:

sip-ua
 permit hostname dns:your.dns.name

or even perhaps,

 permit hostname dns:38.96.40.186 (not sure this works - give is a go)

Hope this helps

Thanks Adam, ill try your suggestions and see which one works best.

Thanks Adam, I am harving a hard time trying to picture why its only rejecting inbound calls still. When I Call in its Public IP for SIP PROVIDER 10.X.X.X > My Public IP 11.X.X.X > Firewall > PBx 12.X.X.X. When it hits my UC540 system i see the sip packet with the bad request is

SIP/2.0 400 Bad Request - 'Invalid Host'
Via: SIP/2.0/UDP 38.96.36.23:5060;branch=z9hG4bK5108da02;rport
From: "NGUYEN,JASON" <sip:7144945000@10.X.X.X>;tag=as085f8bb8
To: <sip:7143863279@11.X.X.X>;tag=F988C9C4-241F

Does that mean that my firewall should be changing my to packet to reflect my UC540 and not the my Public IP?