cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1315
Views
0
Helpful
6
Replies

Voice Source Group Blocking Incomming SIP 3.1/8.2

dharig
Beginner
Beginner

I have owned a UC520 since CCA 2.1   and each time you factroy default the unit and re-enter the generic SIP providor the incomming SIP calls are rejected with 500 Internal error.  Each time the fix was to remove a Voice Source Group Access list.  TAC gave me this set of commands I have used for two years and though 5 upgrades and factory defualts.

conf t

voice source-group CCA_SIP_SOURCE_GROUP

no access-list 2

translation-profile incoming SIP_Incoming

exit

I would have thought through 5 CCA/IOS upgrades this would have been resolved but it is still not and this latest Upgrade to 8.2/8.0.6 this is not working .  I ran the commands and calles are still getting blocked.   The ITSP said there is nothing they can do and provided this log showing how my UC520 is rejecting the incomming calls.

"Call attempts to your PBX are being rejected with the following error:

U 2011/08/11 02:12:54.667299 74.5.213.95:56006 -> 66.23.129.253:5060
SIP/2.0 500 Internal Server Error..Via: SIP/2.0/UDP 66.23.129.253:5060;bran
ch=z9hG4bKb098.430a5b1.0,SIP/2.0/UDP 208.94.159.10:5060;branch=z9hG4bK-d491
2-4e433aa6-cf91513f-52e9074b..From: "anonymous" <
sip:anonymous@208.94.159.1
0:5060
>;tag=a9f5ed0-13c4-4e433aa6-cf91513f-1b4c601a..To: <sip:16125207500@6
6.23.129.253:5060
>;tag=22DAAFC-4DE..Date: Thu, 11 Aug 2011 02:06:50 GMT..Ca
ll-ID: CXC-223-6b03ce30-a9f5ed0-13c4-4e433aa6-cf91513f-6d6313c@208.94.159.1
0..CSeq: 1 INVITE..Allow-Events: telephone-event..Reason: Q.850;cause=63..S
erver: Cisco-SIPGateway/IOS-12.x..Content-Length: 0....

Why does this happen, what is the fix now and how come CCA and the UC520 have made this so difficult for so many years.  

6 Replies 6

Darren DeCroock
Enthusiast
Enthusiast

Hello David,

Your problem is the external source group for incoming calls.  Removing the ACL will get this to work, but is not the recommended solution.  The ACL in question is the one used by the external source group.

voice source-group CCA_SIP_SOURCE_GROUP_EXTERNAL

access-list 3

You can just remove the access-list, but this does open you up to possible toll-fraud.  I would suggest that you add permit statements to ACL 3 to allow incoming calls from your SIP provider.  The issue is that you have to allow all of the IP addresses that your provider may send from.  This can be done manually though CLI, or on the "advanced" tab when configuring the SIP trunk.

Thank you,

Darren