Cisco IP Phone 9951 won't register on CUCME

[Alexander Afanasenkov]

Hello,

I've problem with registering IP Phone 9951 with CUCME on ISR 2901.

IP Phone -> ROUTER -> CUCME

IP Phone 9951 (sip9951.9-4-2SR2-2)
CUCME (CISCO 2901) Version 15.4(3)M5

I need your experiences. Can anyone help me to solve it?
Thanks in Advance.

ROUTER:
ip dhcp pool dhcp[VoIP].net
network 10.16.0.0 255.255.255.224
default-router 10.16.0.30
option 42 ip 10.16.0.30
option 150 ip 10.194.127.3
lease 0 0 30
class voip
address range 10.16.0.1 10.16.0.4

interface GigabitEthernet0/1.3
description { voip/pbx }
encapsulation dot1Q 3
ip address 10.16.0.30 255.255.255.224

sh ip route 10.194.127.1
Routing entry for 10.194.127.1/32
Known via "eigrp 900", distance 90, metric 26624640, type internal
Redistributing via eigrp 900
Last update from 10.198.36.9 on Tunnel1, 2d00h ago
Routing Descriptor Blocks:
* 10.198.36.9, from 10.198.36.9, 2d00h ago, via Tunnel1
Route metric is 26624640, traffic share count is 1
Total delay is 50002 microseconds, minimum bandwidth is 5000 Kbit
Reliability 255/255, minimum MTU 1400 bytes
Loading 1/255, Hops 1

CUCME:
interface Loopback10
description { SIP }
ip address 10.194.127.1 255.255.255.255

sh ip route 10.16.0.3
Routing entry for 10.16.0.0/27
Known via "eigrp 900", distance 90, metric 26629120, type internal
Redistributing via eigrp 900
Last update from 10.198.36.10 on Tunnel3, 2d00h ago
Routing Descriptor Blocks:
* 10.198.36.10, from 10.198.36.10, 2d00h ago, via Tunnel3
Route metric is 26629120, traffic share count is 1
Total delay is 50010 microseconds, minimum bandwidth is 5000 Kbit
Reliability 255/255, minimum MTU 1400 bytes
Loading 1/255, Hops 1

voice service voip
ip address trusted list
ipv4 10.16.0.0 255.255.255.0
address-hiding
mode border-element
allow-connections sip to sip
no supplementary-service sip moved-temporarily
no supplementary-service sip refer
redirect ip2ip
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
sip
registrar server expires max 1200 min 300
asserted-id pai
early-offer forced
midcall-signaling passthru
privacy-policy passthru
privacy-policy send-always

voice register global
mode cme
source-address 10.194.127.1 port 5060
bandwidth video tias-modifier 384 negotiate end-to-end
timeouts interdigit 5
max-dn 10
max-pool 5
load 9951 sip9951.9-4-2SR2-2.loads
authenticate register
authenticate realm cisco.com
timezone 34
time-format 24
date-format D/M/Y
tftp-path flash:
file text
create profile sync 0092095222334772
network-locale RU
user-locale RU load CME-locale-ru_RU-Russian-10.5.3.0.tar
ntp-server 10.16.0.30 mode unicast
camera
video

voice register dn 1
number 600
name 600
no-reg
label 600

voice register pool 1
id mac 7C95.F322.398A
type 9951
number 1 dn 1
dtmf-relay rtp-nte
voice-class codec 1
username 600 password 600
no vad
camera
video

tftp-server flash:/cme/ringtones/Analog1.raw alias Analog1.raw
tftp-server flash:/cme/ringtones/Analog2.raw alias Analog2.raw
tftp-server flash:/cme/ringtones/AreYouThere.raw alias AreYouThere.raw
tftp-server flash:/cme/ringtones/AreYouThereF.raw alias AreYouThereF.raw
tftp-server flash:/cme/ringtones/Bass.raw alias Bass.raw
tftp-server flash:/cme/ringtones/CallBack.raw alias CallBack.raw
tftp-server flash:/cme/ringtones/Chime.raw alias Chime.raw
tftp-server flash:/cme/ringtones/Classic1.raw alias Classic1.raw
tftp-server flash:/cme/ringtones/Classic2.raw alias Classic2.raw
tftp-server flash:/cme/ringtones/ClockShop.raw alias ClockShop.raw
tftp-server flash:/cme/ringtones/DistinctiveRingList.xml alias DistinctiveRingList.xml
tftp-server flash:/cme/ringtones/Drums1.raw alias Drums1.raw
tftp-server flash:/cme/ringtones/Drums2.raw alias Drums2.raw
tftp-server flash:/cme/ringtones/FilmScore.raw alias FilmScore.raw
tftp-server flash:/cme/ringtones/HarpSynth.raw alias HarpSynth.raw
tftp-server flash:/cme/ringtones/Jamaica.raw alias Jamaica.raw
tftp-server flash:/cme/ringtones/KotoEffect.raw alias KotoEffect.raw
tftp-server flash:/cme/ringtones/MusicBox.raw alias MusicBox.raw
tftp-server flash:/cme/ringtones/Piano1.raw alias Piano1.raw
tftp-server flash:/cme/ringtones/Piano2.raw alias Piano2.raw
tftp-server flash:/cme/ringtones/Pop.raw alias Pop.raw
tftp-server flash:/cme/ringtones/Pulse1.raw alias Pulse1.raw
tftp-server flash:/cme/ringtones/Ring1.raw alias Ring1.raw
tftp-server flash:/cme/ringtones/Ring2.raw alias Ring2.raw
tftp-server flash:/cme/ringtones/Ring3.raw alias Ring3.raw
tftp-server flash:/cme/ringtones/Ring4.raw alias Ring4.raw
tftp-server flash:/cme/ringtones/Ring5.raw alias Ring5.raw
tftp-server flash:/cme/ringtones/Ring6.raw alias Ring6.raw
tftp-server flash:/cme/ringtones/Ring7.raw alias Ring7.raw
tftp-server flash:/cme/ringtones/RingList.xml alias RingList.xml
tftp-server flash:/cme/ringtones/Sax1.raw alias Sax1.raw
tftp-server flash:/cme/ringtones/Sax2.raw alias Sax2.raw
tftp-server flash:/cme/ringtones/Vibe.raw alias Vibe.raw
tftp-server flash:/cme/phones/6921-6941-6961/BOOT69xx.0-0-0-14.zz.sgn alias BOOT69xx.0-0-0-14.zz.sgn
tftp-server flash:/cme/phones/6921-6941-6961/DSP69xx.12-4-122-99.131025.zz.sgn alias DSP69xx.12-4-122-99.131025.zz.sgn
tftp-server flash:/cme/phones/6921-6941-6961/SCCP69xx.9-4-1-3SR2.loads alias SCCP69xx.9-4-1-3SR2.loads
tftp-server flash:/cme/phones/6921-6941-6961/SCCP69xx.9-4-1-3SR2.zz.sgn alias SCCP69xx.9-4-1-3SR2.zz.sgn
tftp-server flash:/cme/phones/9951/dkern9951.100609R2-9-4-2SR2-2.sebn alias dkern9951.100609R2-9-4-2SR2-2.sebn
tftp-server flash:/cme/phones/9951/kern9951.9-4-2SR2-2.sebn alias kern9951.9-4-2SR2-2.sebn
tftp-server flash:/cme/phones/9951/rootfs9951.9-4-2SR2-2.sebn alias rootfs9951.9-4-2SR2-2.sebn
tftp-server flash:/cme/phones/9951/sboot9951.031610R1-9-4-2SR2-2.sebn alias sboot9951.031610R1-9-4-2SR2-2.sebn
tftp-server flash:/cme/phones/9951/sip9951.9-4-2SR2-2.loads alias sip9951.9-4-2SR2-2.loads
tftp-server flash:/cme/phones/9951/skern9951.022809R2-9-4-2SR2-2.sebn alias skern9951.022809R2-9-4-2SR2-2.sebn
tftp-server flash:/cme/locale/russia_lk-sip.jar alias Russian_Russian_Federation/lk-sip.jar

debug tftp events
1015698: Apr 22 09:10:36.248 MSK: TFTP: Server request for port 49152, socket_id 0x44BB6388 for process 163
1015699: Apr 22 09:10:36.248 MSK: TFTP: Looking for CTLSEP7C95F322398A.tlv
1015700: Apr 22 09:10:36.376 MSK: TFTP: Server request for port 49152, socket_id 0x44BB6388 for process 163
1015701: Apr 22 09:10:36.376 MSK: TFTP: Looking for ITLSEP7C95F322398A.tlv
1015702: Apr 22 09:10:36.552 MSK: TFTP: Server request for port 49152, socket_id 0x44BB6388 for process 163
1015703: Apr 22 09:10:36.552 MSK: TFTP: Looking for ITLFile.tlv
1015704: Apr 22 09:10:36.752 MSK: TFTP: Server request for port 49152, socket_id 0x44BB6388 for process 163
1015705: Apr 22 09:10:36.752 MSK: TFTP: Looking for SEP7C95F322398A.cnf.xml
1015706: Apr 22 09:10:36.756 MSK: TFTP: Opened flash:/its/SEP7C95F322398A.cnf.xml, fd 3, size 4768 for process 163
1015707: Apr 22 09:10:36.792 MSK: TFTP: Finished flash:/its/SEP7C95F322398A.cnf.xml, time 00:00:00 for process 163

debug ccsip messages
1016026: Apr 22 09:25:49.337 MSK: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
REGISTER sip:10.194.127.1 SIP/2.0
Via: SIP/2.0/UDP 10.16.0.3:5060;branch=z9hG4bK55cab01a
From: <sip:600@10.194.127.1>;tag=7c95f322398a013e0adcd544-3f613b9d
To: <sip:600@10.194.127.1>
Call-ID: 7c95f322-398a013a-665edfb4-537ba639@10.16.0.3
Max-Forwards: 70
Date: Fri, 01 Jan 1982 16:09:48 GMT
CSeq: 724 REGISTER
User-Agent: Cisco-CP9951/9.4.2
Contact: <sip:165C34-62C@10.16.0.3:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-7c95f322398a>";+u.sip!devicename.ccm.cisco.com="SEP7C95F322398A";+u.sip!model.ccm.cisco.com="537";video
Supported: replaces,join,sdp-anat,norefersub,resource-priority,extended-refer,X-cisco-callinfo,X-cisco-serviceuri,X-cisco-escapecodes,X-cisco-service-control,X-cisco-srtp-fallback,X-cisco-monrec,X-cisco-config,X-cisco-sis-7.0.0,X-cisco-xsi-8.0.1
Content-Length: 0
Reason: SIP;cause=200;text="cisco-alarm:22 Name=SEP7C95F322398A ActiveLoad=sip9951.9-4-2SR2-2.loads InactiveLoad=sip9951.9-4-2-13.loads Last=reset-reset"
Expires: 3600

1016027: Apr 22 09:25:49.337 MSK: //11594/D33D42DEB50A/SIP/Msg/ccsipDisplayMsg:
Sent: SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.16.0.3:5060;branch=z9hG4bK55cab01a
From: <sip:600@10.194.127.1>;tag=7c95f322398a013e0adcd544-3f613b9d
To: <sip:600@10.194.127.1>;tag=A74BA48-2D7
Date: Fri, 22 Apr 2016 06:25:49 GMT
Call-ID: 7c95f322-398a013a-665edfb4-537ba639@10.16.0.3
Server: Cisco-SIPGateway/IOS-15.4.3.M5
CSeq: 724 REGISTER
WWW-Authenticate: Digest realm="cisco.com",nonce="1E6855C6010BAC3A",algorithm=MD5,qop="auth"
Content-Length: 0

1016028: Apr 22 09:25:53.361 MSK: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
REGISTER sip:10.194.127.1 SIP/2.0
Via: SIP/2.0/UDP 10.16.0.3:5060;branch=z9hG4bK55cab01a
From: <sip:600@10.194.127.1>;tag=7c95f322398a013e0adcd544-3f613b9d
To: <sip:600@10.194.127.1>
Call-ID: 7c95f322-398a013a-665edfb4-537ba639@10.16.0.3
Max-Forwards: 70
Date: Fri, 01 Jan 1982 16:09:48 GMT
CSeq: 724 REGISTER
User-Agent: Cisco-CP9951/9.4.2
Contact: <sip:165C34-62C@10.16.0.3:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-7c95f322398a>";+u.sip!devicename.ccm.cisco.com="SEP7C95F322398A";+u.sip!model.ccm.cisco.com="537";video
Supported: replaces,join,sdp-anat,norefersub,resource-priority,extended-refer,X-cisco-callinfo,X-cisco-serviceuri,X-cisco-escapecodes,X-cisco-service-control,X-cisco-srtp-fallback,X-cisco-monrec,X-cisco-config,X-cisco-sis-7.0.0,X-cisco-xsi-8.0.1
Content-Length: 0
Reason: SIP;cause=200;text="cisco-alarm:22 Name=SEP7C95F322398A ActiveLoad=sip9951.9-4-2SR2-2.loads InactiveLoad=sip9951.9-4-2-13.loads Last=reset-reset"
Expires: 3600

1016029: Apr 22 09:25:53.365 MSK: //11594/D33D42DEB50A/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.16.0.3:5060;branch=z9hG4bK55cab01a
From: <sip:600@10.194.127.1>;tag=7c95f322398a013e0adcd544-3f613b9d
To: <sip:600@10.194.127.1>;tag=A74BA48-2D7
Date: Fri, 22 Apr 2016 06:25:53 GMT
Call-ID: 7c95f322-398a013a-665edfb4-537ba639@10.16.0.3
Server: Cisco-SIPGateway/IOS-15.4.3.M5
CSeq: 724 REGISTER
WWW-Authenticate: Digest realm="cisco.com",nonce="1E6855C6010BAC3A",algorithm=MD5,qop="auth"
Content-Length: 0

1016030: Apr 22 09:25:57.361 MSK: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
REGISTER sip:10.194.127.1 SIP/2.0
Via: SIP/2.0/UDP 10.16.0.3:5060;branch=z9hG4bK55cab01a
From: <sip:600@10.194.127.1>;tag=7c95f322398a013e0adcd544-3f613b9d
To: <sip:600@10.194.127.1>
Call-ID: 7c95f322-398a013a-665edfb4-537ba639@10.16.0.3
Max-Forwards: 70
Date: Fri, 01 Jan 1982 16:09:48 GMT
CSeq: 724 REGISTER
User-Agent: Cisco-CP9951/9.4.2
Contact: <sip:165C34-62C@10.16.0.3:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-7c95f322398a>";+u.sip!devicename.ccm.cisco.com="SEP7C95F322398A";+u.sip!model.ccm.cisco.com="537";video
Supported: replaces,join,sdp-anat,norefersub,resource-priority,extended-refer,X-cisco-callinfo,X-cisco-serviceuri,X-cisco-escapecodes,X-cisco-service-control,X-cisco-srtp-fallback,X-cisco-monrec,X-cisco-config,X-cisco-sis-7.0.0,X-cisco-xsi-8.0.1
Content-Length: 0
Reason: SIP;cause=200;text="cisco-alarm:22 Name=SEP7C95F322398A ActiveLoad=sip9951.9-4-2SR2-2.loads InactiveLoad=sip9951.9-4-2-13.loads Last=reset-reset"
Expires: 3600

1016031: Apr 22 09:25:57.361 MSK: //11597/E87A4296B510/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.16.0.3:5060;branch=z9hG4bK55cab01a
From: <sip:600@10.194.127.1>;tag=7c95f322398a013e0adcd544-3f613b9d
To: <sip:600@10.194.127.1>;tag=A754578-860
Date: Fri, 22 Apr 2016 06:25:57 GMT
Call-ID: 7c95f322-398a013a-665edfb4-537ba639@10.16.0.3
Server: Cisco-SIPGateway/IOS-15.4.3.M5
CSeq: 724 REGISTER
WWW-Authenticate: Digest realm="cisco.com",nonce="5BFA5DF2010BBA25",algorithm=MD5,qop="auth"
Content-Length: 0

[Vivek Batra]

Hi,

It seems 401 Unauthorized message is not reaching to phone because phone is not sending REGISTER message immediately on receipt of 401 and moreover, REGISTER message didn't include authentication header received in 401 Unauthorized message.

Since you've bind 10.194.127.1 under voice register global, can you ensure there is a network connectivity and you can ping phone IP address from 10.194.127.1 interface.....

- Vivek

[Alexander Afanasenkov]

Good afternoon,

CUCME:
ping 10.16.0.3 so lo 10
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.16.0.3, timeout is 2 seconds:
Packet sent with a source address of 10.194.127.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms

May be problem with NTP?

REGISTER sip:10.194.127.1 SIP/2.0
Via: SIP/2.0/UDP 10.16.0.3:5060;branch=z9hG4bK55cab01a
From: <sip:600@10.194.127.1>;tag=7c95f322398a013e0adcd544-3f613b9d
To: <sip:600@10.194.127.1>
Call-ID: 7c95f322-398a013a-665edfb4-537ba639@10.16.0.3
Max-Forwards: 70
Date: Fri, 01 Jan 1982 16:09:48 GMT

But how can i solve it?