cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3051
Views
5
Helpful
8
Replies

SIP REGISTRATION FAILS ON ASA 5515x

Jesutofunmi O
Level 1
Level 1

Hello Gurus, 

 

I just signed up with an ITSP but been struggling with SIP registration. I use a Cisco CME and had initially thought I was configuring it wrong, or perhaps, the credentials were wrong. I configured the same credentials on a 3CX soft phone and I still couldn't register with the ITSP's gateway (registration fails). 

What I did next was to connect my laptop to another network (network NOT behind firewall), outside my office domain and boom, the registration was successful. 

I did packet capture on the my Cisco ASA 5515x and figured that traffic was hitting the inside interface but was not going out the outside interface. Seems like it was "trapped in" so to speak. Is there a reason to why my ASA FW will not allow SIP registration. Currently SIP traffic is being inspected but issue still persists. 

 

What can I do to allow my SIP traffic go out the egress interface of my Cisco ASA. My network is such as this

 

ISP-->ASA FW-->CORE SWITCH-->CME

 

PLEASE HELP!

1 Accepted Solution

Accepted Solutions

Thanks @AcePetDetective 


I never really made many changes. I disabled SIP inspection, it was still not registering. I enabled it again and registration was successful. This technically does not answer many questions as it sounds anomalous but that's what fixed my issue. 

 

Thanks again!

View solution in original post

8 Replies 8

balaji.bandi
Hall of Fame
Hall of Fame

Check the ASA FW Logs, by Monitoring so you see what is dropping

 

Hope you have basic SIP ports allowed in the ACL ?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

I have tried to monitor the logs. It does not show recent logs. Logs are about 3 hours late.

Yes I allowed 5060 on the outside interface. Still the same issue.

I know ASA do not have option of history logs, or if you have syslog to offload configured.

 

you can start live traffic monitor and see any thing dropping, while you registering the device.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Lokesh Kumar Lal
Cisco Employee
Cisco Employee

 Setup packet captures on both inside and outside interfaces of the ASA to get failed registration event details  along with ccsip debugs on CME

Regards,
Lokesh K. Lal
Engineering Product Manager
Cisco Systems Inc.

Please don't forget to rate useful posts

Hello Ikurmala, 

 

I enabled packet capture. I saw packet going through the "inside" interface. 

For the outside interface, the export was empty. Nothing was recorded. Secondly please, how do i get ccsip debugs to reflect on the packet capture for the outside interface. I had enabled ccsip debugs.

 

Thank you.

Hello @lkumarla

Please see CCSIP response below. I have also attached a file so you can see full debug. 

The major issue here is that my CME is not registering with Service Provider's Voice Gateway. 
I have tested with 3CX and it works fine.  Please let me know what you think. It's getting frustrating.

 

May 6 15:07:32.794: //151196/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.794: //151196/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.794: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.794: //151196/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.802: //-1/xxxxxxxxxxxx/SIP/Error/httpish_msg_free:
Freeing NULL pointer!
May 6 15:07:32.802: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:cme.telecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.121.5:5060;branch=z9hG4bK1A6B5CE5
From: <sip:1034@cme.telecoms.com>;tag=19776BD8-143
To: <sip:1034@cme.telecoms.com>
Date: Mon, 06 May 2019 15:07:32 GMT
Call-ID: 6CF29BE8-6F4711E9-BB60E817-C0100652
User-Agent: Cisco-SIPGateway/IOS-15.3.3.M5
Max-Forwards: 70
Timestamp: 1557155252
CSeq: 2 REGISTER
Contact: <sip:1034@172.16.121.5:5060>
Expires: 3600
Supported: path
Content-Length: 0


May 6 15:07:32.806: //-1/xxxxxxxxxxxx/SIP/Error/httpish_msg_free:
Freeing NULL pointer!
May 6 15:07:32.806: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:cme.telecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.121.5:5060;branch=z9hG4bK1A6B62041
From: <sip:1035@cme.telecoms.com>;tag=19776BD8-B3B
To: <sip:1035@cme.telecoms.com>
Date: Mon, 06 May 2019 15:07:32 GMT
Call-ID: 6CF29BE8-6F4711E9-BB61E817-C0100652
User-Agent: Cisco-SIPGateway/IOS-15.3.3.M5
Max-Forwards: 70
Timestamp: 1557155252
CSeq: 2 REGISTER
Contact: <sip:1035@172.16.121.5:5060>
Expires: 3600
Supported: path
Content-Length: 0


May 6 15:07:32.806: //-1/xxxxxxxxxxxx/SIP/Error/httpish_msg_free:
Freeing NULL pointer!
May 6 15:07:32.806: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:cme.telecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.121.5:5060;branch=z9hG4bK1A6B723D2
From: <sip:1036@cme.telecoms.com>;tag=19776BDC-1984
To: <sip:1036@cme.telecoms.com>
Date: Mon, 06 May 2019 15:07:32 GMT
Call-ID: 6CF33810-6F4711E9-BB62E817-C0100652
User-Agent: Cisco-SIPGateway/IOS-15.3.3.M5
Max-Forwards: 70
Timestamp: 1557155252
CSeq: 2 REGISTER
Contact: <sip:1036@172.16.121.5:5060>
Expires: 3600
Supported: path
Content-Length: 0


May 6 15:07:32.814: //151197/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.814: //151197/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.814: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.814: //151197/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.818: //151198/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.818: //151198/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.818: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.818: //151198/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.818: //-1/xxxxxxxxxxxx/SIP/Error/httpish_msg_free:
Freeing NULL pointer!
May 6 15:07:32.818: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:cme.telecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.121.5:5060;branch=z9hG4bK1A6B817FC
From: <sip:1037@cme.telecoms.com>;tag=19776BDC-141D
To: <sip:1037@cme.telecoms.com>
Date: Mon, 06 May 2019 15:07:32 GMT
Call-ID: 6CF33810-6F4711E9-BB63E817-C0100652
User-Agent: Cisco-SIPGateway/IOS-15.3.3.M5
Max-Forwards: 70
Timestamp: 1557155252
CSeq: 2 REGISTER
Contact: <sip:1037@172.16.121.5:5060>
Expires: 3600
Supported: path
Content-Length: 0


May 6 15:07:32.822: //151199/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.822: //151199/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.822: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.822: //151199/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.826: //151200/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.826: //151200/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.826: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.826: //151200/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.830: //151201/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.830: //151201/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.830: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.830: //151201/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.834: //151202/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.834: //151202/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.834: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.834: //151202/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.842: //151203/000000000000/SIP/Error/act_sent_register_wait_100:
act_sent_register_wait_100: Out of retries
May 6 15:07:32.842: //151203/000000000000/SIP/Error/ccsip_api_register_result_ind:
Message Code Class 4xx Method Code 100 received for REGISTER
May 6 15:07:32.842: //-1/xxxxxxxxxxxx/SIP/Error/sipDestroyContainerContext:
Corrupted/Freed Container=0x0
May 6 15:07:32.842: //151203/000000000000/SIP/Error/ccsip_api_register_result_ind:
SIP Registration Retries Exhausted
May 6 15:07:32.842: //-1/xxxxxxxxxxxx/SIP/Error/httpish_msg_free:
Freeing NULL pointer!
May 6 15:07:32.842: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:cme.telecoms.com:5060 SIP/2.0
Via: SIP/2.0/UDP 172.16.121.5:5060;branch=z9hG4bK1A6B91F71
From: <sip:1038@cme.telecoms.com>;tag=19776BE0-DA
To: <sip:1038@cme.telecoms.com>
Date: Mon, 06 May 2019 15:07:32 GMT
Call-ID: 6CF33810-6F4711E9-BB64E817-C0100652
User-Agent: Cisco-SIPGateway/IOS-15.3.3.M5
Max-Forwards: 70
Timestamp: 1557155252
CSeq: 2 REGISTER
Contact: <sip:1038@172.16.121.5:5060>
Expires: 3600
Supported: path
Content-Length: 0

Perhaps this is too late but for anyone who hits this thread in the future...

 

I am by no means a voice expert but I have a decent amount of experience with ASAs. This sounds like it may be an inspection issue with your ASA. Have you tried disabling inspection? It is enabled by default on most, or all code releases. Also, check your NAT. I can't diagnose your problem since I have not seen your ASA config.

 

See here for more info: https://community.cisco.com/t5/firewalls/asa-sip-inspection/td-p/2021267

Thanks @AcePetDetective 


I never really made many changes. I disabled SIP inspection, it was still not registering. I enabled it again and registration was successful. This technically does not answer many questions as it sounds anomalous but that's what fixed my issue. 

 

Thanks again!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: