ASA 5520 - CUBE NAT & SIP Inspect

[orddie234]

Hi Everyone,

I'm having issues with my CUBE router and inbound calls. Outbound is working fine, but inbound is is getting a Malformed/Missing URL

This is the invite comming into the CUBE.  As you can see, it's missing the called number.

SIP/2.0 400 Bad Request - 'Malformed/Missing URL'
Via: SIP/2.0/UDP 208.43.234.227:5060;branch=z9hG4bK399260d5;rport
From: "User" <sip:717XXXXXXX@208.43.234.227>;tag=as7e366827
To: <sip:172.16.70.20:5060>;tag=1E3FBC18-17A
Date: Sat, 21 Nov 2015 12:24:59 GMT
Call-ID: 2b6e7ecf7e2fef793d7bd54e23cded12@208.43.234.227:5060
CSeq: 102 INVITE

in the ASA config, i have the following

object network OBJ_Cube
 host 172.16.70.20

object-group network OBJ_PSTN_SIP
 description Voip.ms SIP connections
 network-object object OBJ_washington1.voip.ms
 network-object object OBJ_washington2.voip.ms

object network OBJ_washington2.voip.ms
 host 208.43.234.227
object network OBJ_washington1.voip.ms
 host 208.43.234.226

object network OBJ_50.X.X.33
 host 50.251.70.33

policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect ip-options
  inspect netbios
  inspect rsh
  inspect rtsp
  inspect sqlnet
  inspect sunrpc
  inspect tftp
  inspect xdmcp
  inspect esmtp
  inspect http
  inspect icmp
  inspect sip  
 class class-default
  user-statistics accounting
!
service-policy global_policy global

nat (Voice,outside) source static OBJ_Cube OBJ_50.X.X.33 destination static OBJ_PSTN_SIP OBJ_PSTN_SIP

[orddie234]

cisco# debug sip
cisco# SIP::INVITE received from outside:208.43.234.227/5060 to Voice:172.16.70.20/5060
        Found port 5060
        Found port 5060
Via Port 5060
        Found port 5060
        Found port 5060
        Found port 5060
SIP::Found User-Agent
SIP: Media port 13796
SIP::session level connection addr 208.43.234.227, media port 13796
SIP::media level connection addr 208.43.234.227, media port 13796
SIP::Embedded media port 13796 found in SDP with session IP 208.43.234.227
SIP::Audio port 13796 found in SDP
SIP::regex engine has reached end of packet
SIP::Found CSeq 102 INVITE
SIP::Found URI in request line "sip:172.16.70.20:5060" (21)
SIP::Found valid SIP URI: sip:717XXXXXXX@208.43.234.227
SIP::Found From addr "sip:717XXXXXXX@208.43.234.227" (29)
SIP::Found From addr tag "as5e3ddd96" (10)
SIP::Found valid SIP URI: sip:172.16.70.20:5060
SIP::Found To addr "sip:172.16.70.20:5060" (21)
SIP::Found Via branch "z9hG4bK79d26254" (15)
SIP::Found Via addr "SIP/2.0/UDP 208.43.234.227:5060;branch=z9hG4bK79d26254;rport" (60)
SIP::Found Max-Forwards 70
SIP::Found Call-ID 01e9af1d7ad018c55a2017063773447b@208.43.234.227:5060 (52)
SIP::Found valid SIP URI: sip:717XXXXXXX@208.43.234.227:5060
SIP::Found Contact sip:717XXXXXXX@208.43.234.227:5060
SIP::Found Content-type application/sdp
SIP::Found Content-length 274
Created SIP session for outside:208.43.234.227/5060 to Voice:172.16.70.20/5060, 1 total
        From: sip:717XXXXXXX@208.43.234.227 (29);tag=as5e3ddd96 (10)
        To: sip:172.16.70.20:5060 (21)
        Call-ID: 01e9af1d7ad018c55a2017063773447b@208.43.234.227:5060 (52)
Created SIP Transaction for outside:208.43.234.227/5060 to Voice:172.16.70.20/5060
        Call-ID: 01e9af1d7ad018c55a2017063773447b@208.43.234.227:5060 (52)
        CSeq: 102 INVITE
        Branch: z9hG4bK79d26254
SIP::Adding early RTP conn 172.16.70.20/* to 208.43.234.227/13796
SIP:: Forward 951 bytes, total 951
SIP::4xx received from Voice:172.16.70.20/56334 to outside:208.43.234.227/5060
SIP::regex engine has reached end of packet
SIP::Found CSeq 102 INVITE
SIP::Found valid SIP URI: sip:717XXXXXXX@208.43.234.227
SIP::Found From addr "sip:717XXXXXXX@208.43.234.227" (29)
SIP::Found From addr tag "as5e3ddd96" (10)
SIP::Found valid SIP URI: sip:172.16.70.20:5060
SIP::Found To addr "sip:172.16.70.20:5060" (21)
SIP::Found To addr tag "1E5B8A10-15D3" (13)
SIP::Found Via branch "z9hG4bK79d26254" (15)
SIP::Found Via addr "SIP/2.0/UDP 208.43.234.227:5060;branch=z9hG4bK79d26254;rport" (60)
SIP::Found Call-ID 01e9af1d7ad018c55a2017063773447b@208.43.234.227:5060 (52)
SIP::Found Content-length 0
        Found port 5060
Via Port 5060
        Found port 5060
        Found port 5060
SIP::Found Server
SIP:: Forward 466 bytes, total 466
SIP::ACK received from outside:208.43.234.227/5060 to Voice:172.16.70.20/5060
        Found port 5060
        Found port 5060
Via Port 5060
        Found port 5060
        Found port 5060
        Found port 5060
SIP::Found User-Agent
SIP::regex engine has reached end of packet
SIP::Found CSeq 102 ACK
SIP::Found URI in request line "sip:172.16.70.20:5060" (21)
SIP::Found valid SIP URI: sip:717XXXXXXX@208.43.234.227
SIP::Found From addr "sip:717XXXXXXX@208.43.234.227" (29)
SIP::Found From addr tag "as5e3ddd96" (10)
SIP::Found valid SIP URI: sip:172.16.70.20:5060
SIP::Found To addr "sip:172.16.70.20:5060" (21)
SIP::Found To addr tag "1E5B8A10-15D3" (13)
SIP::Found Via branch "z9hG4bK79d26254" (15)
SIP::Found Via addr "SIP/2.0/UDP 208.43.234.227:5060;branch=z9hG4bK79d26254;rport" (60)
SIP::Found Max-Forwards 70
SIP::Found Call-ID 01e9af1d7ad018c55a2017063773447b@208.43.234.227:5060 (52)
SIP::Found valid SIP URI: sip:717XXXXXXX@208.43.234.227:5060
SIP::Found Contact sip:717XXXXXXX@208.43.234.227:5060
SIP::Found Content-length 0
Created SIP Transaction for outside:208.43.234.227/5060 to Voice:172.16.70.20/5060
        Call-ID: 01e9af1d7ad018c55a2017063773447b@208.43.234.227:5060 (52)
        CSeq: 102 ACK
        Branch: z9hG4bK79d26254
Deleted SIP Transaction
        Call-ID: 01e9af1d7ad018c55a2017063773447b@208.43.234.227:5060 (52)
        CSeq: 102 ACK
        Branch: z9hG4bK79d26254
Deleted SIP Transaction
        Call-ID: 01e9af1d7ad018c55a2017063773447b@208.43.234.227:5060 (52)
        CSeq: 102 INVITE
        Branch: z9hG4bK79d26254
SIP::Deleting session for 172.16.70.20 to 208.43.234.227, 0 total
        From: sip:717XXXXXXX@208.43.234.227 (29);tag=as5e3ddd96 (10)
        To: sip:172.16.70.20:5060 (21);tag=1E5B8A10-15D3 (13)
        Call-ID: 01e9af1d7ad018c55a2017063773447b@208.43.234.227:5060 (52)
Freeing RTP and RTCP conns
SIP:: Freeing offer dialog conn Voice:172.16.70.20/0 to outside:208.43.234.227/5060
SIP:: Freeing signaling conn Voice:172.16.70.20/0 to outside:208.43.234.227/5060
SIP:: Freeing signaling conn Voice:172.16.70.20/0 to outside:208.43.234.227/5060
SIP:: Forward 405 bytes, total 405
no debug
INFO: % Type "no debug ?" for a list of subcommands
cisco# no debug all

[orddie234]

ASDM version is 7.5.(1)90

ASA version is 9.1(6)

[Vibhor Amrodia]

Hi,

I think this might be related to the NAT configuration. ALthough , it seems to be correct i.e. ONe to One NAT but can you try changing this to:-

nat (Voice,outside) 1 source static OBJ_Cube OBJ_50.X.X.33

and see if this makes any difference.

Also , collect the SIP debugs with NAT debugs "denug nat 5"

Thanks and Regards.,

Vibhor Amrodia

[orddie234]

thanks but this did NOT work.

cisco(config)# nat: policy unlock 0x0x5a589820, old count is 17

nat: unlocking pool range 50.X.X.37-50.X.X.37, refcnt 16

SIP::INVITE received from outside:208.43.234.227/5060 to Voice:172.16.70.20/5060

        Found port 5060

nat: rewriting mapped outside:50.X.X.33/5060, hint 0.0.0.0/0, dest Voice:50.X.X.33/0 (rdip 208.43.234.227)

nat: untranslation - outside:50.X.X.33/5060 to Voice:172.16.70.20/5060 (xp:0x5b7db3c0, policy:0x54604a70)

nat: skipping intra-interface rule for Voice:172.16.70.20

        Found port 5060

Via Port 5060

        Found port 5060

nat: rewriting mapped outside:50.X.X.33/5060, hint 0.0.0.0/0, dest Voice:50.X.X.33/0 (rdip 208.43.234.227)

nat: untranslation - outside:50.X.X.33/5060 to Voice:172.16.70.20/5060 (xp:0x5b7db3c0, policy:0x54604a70)

nat: skipping intra-interface rule for Voice:172.16.70.20

        Found port 5060

        Found port 5060

SIP::Found User-Agent

SIP: Media port 14308

SIP::session level connection addr 208.43.234.227, media port 14308

SIP::media level connection addr 208.43.234.227, media port 14308

SIP::Embedded media port 14308 found in SDP with session IP 208.43.234.227

SIP::Audio port 14308 found in SDP

SIP::regex engine has reached end of packet

SIP::Found CSeq 102 INVITE

SIP::Found URI in request line "sip:172.16.70.20:5060" (21)

SIP::Found valid SIP URI: sip:717XXXXXXX@208.43.234.227

SIP::Found From addr "sip:717XXXXXXX@208.43.234.227" (29)

SIP::Found From addr tag "as521a6535" (10) 

SIP::Found valid SIP URI: sip:172.16.70.20:5060

SIP::Found To addr "sip:172.16.70.20:5060" (21)

SIP::Found Via branch "z9hG4bK1d087ffa" (15)

SIP::Found Via addr "SIP/2.0/UDP 208.43.234.227:5060;branch=z9hG4bK1d087ffa;rport" (60)

SIP::Found Max-Forwards 70

SIP::Found Call-ID 4158d2103eb6865610c3c9d22a4eb202@208.43.234.227:5060 (52)

SIP::Found valid SIP URI: sip:717XXXXXXX@208.43.234.227:5060

SIP::Found Contact sip:717XXXXXXX@208.43.234.227:5060

SIP::Found Content-type application/sdp

SIP::Found Content-length 274

Created SIP session for outside:208.43.234.227/5060 to Voice:172.16.70.20/5060, 1 total

        From: sip:717XXXXXXX@208.43.234.227 (29);tag=as521a6535 (10)

        To: sip:172.16.70.20:5060 (21)

        Call-ID: 4158d2103eb6865610c3c9d22a4eb202@208.43.234.227:5060 (52)

Created SIP Transaction for outside:208.43.234.227/5060 to Voice:172.16.70.20/5060

        Call-ID: 4158d2103eb6865610c3c9d22a4eb202@208.43.234.227:5060 (52)

        CSeq: 102 INVITE

        Branch: z9hG4bK1d087ffa

flow: requesting mapped outside:172.16.70.20/0 -> mapped outside:208.43.234.227/5060

nat: rewriting real outside:208.43.234.227/5060, hint 0.0.0.0/0, dest Voice:172.16.70.20/0 (rdip 208.43.234.227)

nat: translation - outside:208.43.234.227/5060 to Voice:208.43.234.227/5060 (xp:0x54601b80, policy:0x5803dd90)

nat: rewriting real Voice:172.16.70.20/0, hint 0.0.0.0/0, dest outside:208.43.234.227/5060 (rdip 208.43.234.227)

nat: translation - Voice:172.16.70.20/0 to outside:50.X.X.33/0 (xp:0x5b7db3c0, policy:0x54604a70)

flow: initiator real Voice:172.16.70.20/0, mapped outside:50.X.X.33/0)

flow: hole prot 17/0, 172.16.70.20/0 -> Voice:208.43.234.227/5060

nat: translation - Voice:172.16.70.20/0 to outside:50.X.X.33/0 (xp:0x5b7db3c0, policy:0x54604a70)

nat: untranslation - Voice:208.43.234.227/5060 to outside:208.43.234.227/5060 (xp:0x54601b80, policy:0x5803dd90)

flow: requesting mapped outside:172.16.70.20/0 -> mapped outside:208.43.234.227/5060

nat: rewriting real outside:208.43.234.227/5060, hint 0.0.0.0/0, dest Voice:172.16.70.20/0 (rdip 208.43.234.227)

nat: translation - outside:208.43.234.227/5060 to Voice:208.43.234.227/5060 (xp:0x54601b80, policy:0x5803dd90)

nat: rewriting real Voice:172.16.70.20/0, hint 0.0.0.0/0, dest outside:208.43.234.227/5060 (rdip 208.43.234.227)

nat: translation - Voice:172.16.70.20/0 to outside:50.X.X.33/0 (xp:0x5b7db3c0, policy:0x54604a70)

flow: initiator real Voice:172.16.70.20/0, mapped outside:50.X.X.33/0)

flow: hole prot 17/0, 172.16.70.20/0 -> Voice:208.43.234.227/5060

nat: translation - Voice:50.X.X.33/0 failed - host is not found in xlate

nat: untranslation - Voice:208.43.234.227/5060 to outside:208.43.234.227/5060 (xp:0x54601b80, policy:0x5803dd90)

SIP::Adding early RTP conn 172.16.70.20/* to 208.43.234.227/14308

flow: requesting mapped outside:172.16.70.20/0 -> mapped outside:208.43.234.227/14308

nat: rewriting real outside:208.43.234.227/14308, hint 0.0.0.0/0, dest Voice:172.16.70.20/0 (rdip 208.43.234.227)

nat: translation - outside:208.43.234.227/14308 to Voice:208.43.234.227/14308 (xp:0x54601b80, policy:0x5803dd90)

nat: rewriting real Voice:172.16.70.20/0, hint 0.0.0.0/0, dest outside:208.43.234.227/14308 (rdip 208.43.234.227)

nat: translation - Voice:172.16.70.20/0 to outside:50.X.X.33/0 (xp:0x5b7db3c0, policy:0x54604a70)

flow: initiator real Voice:172.16.70.20/0, mapped outside:50.X.X.33/0)

flow: hole prot 17/0, 172.16.70.20/0 -> Voice:208.43.234.227/14308

nat: translation - Voice:172.16.70.20/0 to outside:50.X.X.33/0 (xp:0x5b7db3c0, policy:0x54604a70)

nat: untranslation - Voice:208.43.234.227/14308 to outside:208.43.234.227/14308 (xp:0x54601b80, policy:0x5803dd90)

flow: hole prot 17/0, 172.16.70.20/0 -> Voice:208.43.234.227/14309

nat: translation - Voice:172.16.70.20/0 to outside:50.X.X.33/0 (xp:0x5b7db3c0, policy:0x54604a70)

nat: untranslation - Voice:208.43.234.227/14309 to outside:208.43.234.227/14309 (xp:0x54601b80, policy:0x5803dd90)

SIP:: Forward 951 bytes, total 951

SIP::4xx received from Voice:172.16.70.20/56214 to outside:208.43.234.227/5060

SIP::regex engine has reached end of packet

SIP::Found CSeq 102 INVITE

SIP::Found valid SIP URI: sip:717XXXXXXX@208.43.234.227

SIP::Found From addr "sip:717XXXXXXX@208.43.234.227" (29)

SIP::Found From addr tag "as521a6535" (10) 

SIP::Found valid SIP URI: sip:172.16.70.20:5060

SIP::Found To addr "sip:172.16.70.20:5060" (21)

SIP::Found To addr tag "3FD46C20-1E50" (13) 

SIP::Found Via branch "z9hG4bK1d087ffa" (15)

SIP::Found Via addr "SIP/2.0/UDP 208.43.234.227:5060;branch=z9hG4bK1d087ffa;rport" (60)

SIP::Found Call-ID 4158d2103eb6865610c3c9d22a4eb202@208.43.234.227:5060 (52)

SIP::Found Content-length 0

        Found port 5060

Via Port 5060

nat: rewriting mapped Voice:208.43.234.227/5060, hint 0.0.0.0/0, dest outside:208.43.234.227/0 (rdip 208.43.234.227)

nat: skipping intra-interface rule for outside:208.43.234.227

nat: rewriting mapped Voice:208.43.234.227/5060, hint 0.0.0.0/0, dest outside:208.43.234.227/0 (rdip 208.43.234.227)

nat: skipping intra-interface rule for outside:208.43.234.227

        Found port 5060

nat: rewriting real Voice:172.16.70.20/5060, hint 50.X.X.37/0, dest outside:208.43.234.227/0 (rdip 208.43.234.227)

nat: locking pool range 50.X.X.37-50.X.X.37, refcnt 15

nat: policy lock 0x0x5a589820, old count is 16

nat: translation - any:172.16.70.20/5060 to outside:50.X.X.37/5060 (xp:0x5b7cc600, policy:0x5a589820)

        Found port 5060

nat: rewriting mapped Voice:208.43.234.227/5060, hint 0.0.0.0/0, dest outside:208.43.234.227/0 (rdip 208.43.234.227)

nat: skipping intra-interface rule for outside:208.43.234.227

SIP::Found Server

flow: requesting mapped Voice:172.16.70.20/0 -> mapped Voice:208.43.234.227/5060

nat: rewriting real outside:208.43.234.227/5060, hint 0.0.0.0/0, dest Voice:172.16.70.20/0 (rdip 208.43.234.227)

nat: rewriting real Voice:172.16.70.20/0, hint 0.0.0.0/0, dest outside:208.43.234.227/5060 (rdip 208.43.234.227)

nat: translation - Voice:172.16.70.20/0 to outside:50.X.X.33/0 (xp:0x5b7db3c0, policy:0x54604a70)

flow: initiator real Voice:172.16.70.20/0, mapped outside:50.X.X.33/0)

flow: hole prot 17/0, 172.16.70.20/0 -> Voice:208.43.234.227/5060

nat: translation - Voice:172.16.70.20/0 to outside:50.X.X.33/0 (xp:0x5b7db3c0, policy:0x54604a70)

SIP:: Forward 466 bytes, total 466

SIP::ACK received from outside:208.43.234.227/5060 to Voice:172.16.70.20/5060

        Found port 5060

nat: rewriting mapped outside:50.X.X.33/5060, hint 0.0.0.0/0, dest Voice:50.X.X.33/0 (rdip 208.43.234.227)

nat: untranslation - outside:50.X.X.33/5060 to Voice:172.16.70.20/5060 (xp:0x5b7db3c0, policy:0x54604a70)

nat: skipping intra-interface rule for Voice:172.16.70.20

        Found port 5060

Via Port 5060

        Found port 5060

nat: rewriting mapped outside:50.X.X.33/5060, hint 0.0.0.0/0, dest Voice:50.X.X.33/0 (rdip 208.43.234.227)

nat: untranslation - outside:50.X.X.33/5060 to Voice:172.16.70.20/5060 (xp:0x5b7db3c0, policy:0x54604a70)

nat: skipping intra-interface rule for Voice:172.16.70.20

        Found port 5060

        Found port 5060

SIP::Found User-Agent

SIP::regex engine has reached end of packet

SIP::Found CSeq 102 ACK

SIP::Found URI in request line "sip:172.16.70.20:5060" (21)

SIP::Found valid SIP URI: sip:717XXXXXXX@208.43.234.227

SIP::Found From addr "sip:717XXXXXXX@208.43.234.227" (29)

SIP::Found From addr tag "as521a6535" (10) 

SIP::Found valid SIP URI: sip:172.16.70.20:5060

SIP::Found To addr "sip:172.16.70.20:5060" (21)

SIP::Found To addr tag "3FD46C20-1E50" (13) 

SIP::Found Via branch "z9hG4bK1d087ffa" (15)

SIP::Found Via addr "SIP/2.0/UDP 208.43.234.227:5060;branch=z9hG4bK1d087ffa;rport" (60)

SIP::Found Max-Forwards 70

SIP::Found Call-ID 4158d2103eb6865610c3c9d22a4eb202@208.43.234.227:5060 (52)

SIP::Found valid SIP URI: sip:717XXXXXXX@208.43.234.227:5060

SIP::Found Contact sip:717XXXXXXX@208.43.234.227:5060

SIP::Found Content-length 0

Created SIP Transaction for outside:208.43.234.227/5060 to Voice:172.16.70.20/5060

        Call-ID: 4158d2103eb6865610c3c9d22a4eb202@208.43.234.227:5060 (52)

        CSeq: 102 ACK

        Branch: z9hG4bK1d087ffa

Deleted SIP Transaction

        Call-ID: 4158d2103eb6865610c3c9d22a4eb202@208.43.234.227:5060 (52)

        CSeq: 102 ACK

        Branch: z9hG4bK1d087ffa

Deleted SIP Transaction

        Call-ID: 4158d2103eb6865610c3c9d22a4eb202@208.43.234.227:5060 (52)

        CSeq: 102 INVITE

        Branch: z9hG4bK1d087ffa

SIP::Deleting session for 172.16.70.20 to 208.43.234.227, 0 total

        From: sip:717XXXXXXX@208.43.234.227 (29);tag=as521a6535 (10)

        To: sip:172.16.70.20:5060 (21);tag=3FD46C20-1E50 (13)

        Call-ID: 4158d2103eb6865610c3c9d22a4eb202@208.43.234.227:5060 (52)

Freeing RTP and RTCP conns

SIP:: Freeing offer dialog conn Voice:172.16.70.20/0 to outside:208.43.234.227/5060

SIP:: Freeing signaling conn Voice:172.16.70.20/0 to outside:208.43.234.227/5060

SIP:: Freeing signaling conn Voice:172.16.70.20/0 to outside:208.43.234.227/5060

SIP:: Forward 405 bytes, total 405

nat: untranslation - outside:50.X.X.34/443 to WindowsSrv:172.16.40.12/443 (xp:0x54603980, policy:0x5ba8cc18)

nat: untranslation - outside:50.X.X.34/443 to WindowsSrv:172.16.40.12/443 (xp:0x54603980, policy:0x5ba8cc18)

nat: untranslation - outside:50.X.X.34/443 to WindowsSrv:172.16.40.12/443 (xp:0x54603980, policy:0x5ba8cc18)

nat: untranslation - outside:50.X.X.34/443 to WindowsSrv:172.16.40.12/443 (xp:0x54603980, policy:0x5ba8cc18)

nat: untranslation - outside:50.X.X.34/443 to WindowsSrv:172.16.40.12/443 (xp:0x54603980, policy:0x5ba8cc18)