02-08-2019 07:00 AM - edited 02-21-2020 08:47 AM
Hello Gurus,
I just signed up with an ITSP but been struggling with SIP registration. I use a Cisco CME and had initially thought I was configuring it wrong, or perhaps, the credentials were wrong. I configured the same credentials on a 3CX soft phone and I still couldn't register with the ITSP's gateway (registration fails).
What I did next was to connect my laptop to another network (network NOT behind firewall), outside my office domain and boom, the registration was successful.
I did packet capture on the my Cisco ASA 5515x and figured that traffic was hitting the inside interface but was not going out the outside interface. Seems like it was "trapped in" so to speak. Is there a reason to why my ASA FW will not allow SIP registration. Currently SIP traffic is being inspected but issue still persists.
What can I do to allow my SIP traffic go out the egress interface of my Cisco ASA. My network is such as this
ISP-->ASA FW-->CORE SWITCH-->CME
PLEASE HELP!
Solved! Go to Solution.
07-01-2019 06:38 AM - edited 07-01-2019 06:39 AM
Thanks @AcePetDetective
I never really made many changes. I disabled SIP inspection, it was still not registering. I enabled it again and registration was successful. This technically does not answer many questions as it sounds anomalous but that's what fixed my issue.
Thanks again!
02-08-2019 07:04 AM
Check the ASA FW Logs, by Monitoring so you see what is dropping
Hope you have basic SIP ports allowed in the ACL ?
02-08-2019 07:08 AM
I have tried to monitor the logs. It does not show recent logs. Logs are about 3 hours late.
Yes I allowed 5060 on the outside interface. Still the same issue.
02-08-2019 07:34 AM
I know ASA do not have option of history logs, or if you have syslog to offload configured.
you can start live traffic monitor and see any thing dropping, while you registering the device.
02-10-2019 02:06 AM
Setup packet captures on both inside and outside interfaces of the ASA to get failed registration event details along with ccsip debugs on CME
02-12-2019 05:46 AM
Hello Ikurmala,
I enabled packet capture. I saw packet going through the "inside" interface.
For the outside interface, the export was empty. Nothing was recorded. Secondly please, how do i get ccsip debugs to reflect on the packet capture for the outside interface. I had enabled ccsip debugs.
Thank you.
05-06-2019 07:33 AM
Hello @lkumarla,
Please see CCSIP response below. I have also attached a file so you can see full debug.
The major issue here is that my CME is not registering with Service Provider's Voice Gateway.
I have tested with 3CX and it works fine. Please let me know what you think. It's getting frustrating.
May 6 15:07:32.794: //151196/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.794: //151196/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.794: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.794: //151196/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.802: //-1/xxxxxxxxxxxx/SIP/Error/httpish_msg_free:
Freeing NULL pointer!
May 6 15:07:32.802: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:cme.telecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.121.5:5060;branch=z9hG4bK1A6B5CE5
From: <sip:1034@cme.telecoms.com>;tag=19776BD8-143
To: <sip:1034@cme.telecoms.com>
Date: Mon, 06 May 2019 15:07:32 GMT
Call-ID: 6CF29BE8-6F4711E9-BB60E817-C0100652
User-Agent: Cisco-SIPGateway/IOS-15.3.3.M5
Max-Forwards: 70
Timestamp: 1557155252
CSeq: 2 REGISTER
Contact: <sip:1034@172.16.121.5:5060>
Expires: 3600
Supported: path
Content-Length: 0
May 6 15:07:32.806: //-1/xxxxxxxxxxxx/SIP/Error/httpish_msg_free:
Freeing NULL pointer!
May 6 15:07:32.806: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:cme.telecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.121.5:5060;branch=z9hG4bK1A6B62041
From: <sip:1035@cme.telecoms.com>;tag=19776BD8-B3B
To: <sip:1035@cme.telecoms.com>
Date: Mon, 06 May 2019 15:07:32 GMT
Call-ID: 6CF29BE8-6F4711E9-BB61E817-C0100652
User-Agent: Cisco-SIPGateway/IOS-15.3.3.M5
Max-Forwards: 70
Timestamp: 1557155252
CSeq: 2 REGISTER
Contact: <sip:1035@172.16.121.5:5060>
Expires: 3600
Supported: path
Content-Length: 0
May 6 15:07:32.806: //-1/xxxxxxxxxxxx/SIP/Error/httpish_msg_free:
Freeing NULL pointer!
May 6 15:07:32.806: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:cme.telecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.121.5:5060;branch=z9hG4bK1A6B723D2
From: <sip:1036@cme.telecoms.com>;tag=19776BDC-1984
To: <sip:1036@cme.telecoms.com>
Date: Mon, 06 May 2019 15:07:32 GMT
Call-ID: 6CF33810-6F4711E9-BB62E817-C0100652
User-Agent: Cisco-SIPGateway/IOS-15.3.3.M5
Max-Forwards: 70
Timestamp: 1557155252
CSeq: 2 REGISTER
Contact: <sip:1036@172.16.121.5:5060>
Expires: 3600
Supported: path
Content-Length: 0
May 6 15:07:32.814: //151197/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.814: //151197/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.814: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.814: //151197/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.818: //151198/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.818: //151198/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.818: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.818: //151198/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.818: //-1/xxxxxxxxxxxx/SIP/Error/httpish_msg_free:
Freeing NULL pointer!
May 6 15:07:32.818: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:cme.telecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.121.5:5060;branch=z9hG4bK1A6B817FC
From: <sip:1037@cme.telecoms.com>;tag=19776BDC-141D
To: <sip:1037@cme.telecoms.com>
Date: Mon, 06 May 2019 15:07:32 GMT
Call-ID: 6CF33810-6F4711E9-BB63E817-C0100652
User-Agent: Cisco-SIPGateway/IOS-15.3.3.M5
Max-Forwards: 70
Timestamp: 1557155252
CSeq: 2 REGISTER
Contact: <sip:1037@172.16.121.5:5060>
Expires: 3600
Supported: path
Content-Length: 0
May 6 15:07:32.822: //151199/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.822: //151199/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.822: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.822: //151199/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.826: //151200/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.826: //151200/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.826: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.826: //151200/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.830: //151201/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.830: //151201/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.830: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.830: //151201/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.834: //151202/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.834: //151202/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.834: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.834: //151202/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.842: //151203/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.842: //151203/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.842: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.842: //151203/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.842: //-1/xxxxxxxxxxxx/SIP/Error/httpish_msg_free:
Freeing NULL pointer!
May 6 15:07:32.842: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:cme.telecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.121.5:5060;branch=z9hG4bK1A6B91F71
From: <sip:1038@cme.telecoms.com>;tag=19776BE0-DA
To: <sip:1038@cme.telecoms.com>
Date: Mon, 06 May 2019 15:07:32 GMT
Call-ID: 6CF33810-6F4711E9-BB64E817-C0100652
User-Agent: Cisco-SIPGateway/IOS-15.3.3.M5
Max-Forwards: 70
Timestamp: 1557155252
CSeq: 2 REGISTER
Contact: <sip:1038@172.16.121.5:5060>
Expires: 3600
Supported: path
Content-Length: 0
06-26-2019 12:28 PM
Perhaps this is too late but for anyone who hits this thread in the future...
I am by no means a voice expert but I have a decent amount of experience with ASAs. This sounds like it may be an inspection issue with your ASA. Have you tried disabling inspection? It is enabled by default on most, or all code releases. Also, check your NAT. I can't diagnose your problem since I have not seen your ASA config.
See here for more info: https://community.cisco.com/t5/firewalls/asa-sip-inspection/td-p/2021267
07-01-2019 06:38 AM - edited 07-01-2019 06:39 AM
Thanks @AcePetDetective
I never really made many changes. I disabled SIP inspection, it was still not registering. I enabled it again and registration was successful. This technically does not answer many questions as it sounds anomalous but that's what fixed my issue.
Thanks again!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide