How to configure more then one SIP-ua authentication

Gianluigi Carella · ‎02-10-2009

Hi,

I have a CME 7.1 on a Cisco 2811 router.

I'm trying to configure more than one SIP account. I have two or more numbers taken from the same SIP provider, but each one with different username and password.

what I have done until now is this:

voice service voip

allow-connections sip to sip

sip

registrar server

!

voice translation-rule 1

rule 1 /1003/ /0690282XXX/

rule 2 /1051/ /0690282YYY/

!

voice translation-rule 2

rule 1 /0690282XXX/ /1003/

rule 2 /0690282YYY/ /1051/

!

voice translation-profile In-Sip

translate called 2

!

voice translation-profile out-SipTrunk

translate calling 1

!

dial-peer voice 220 voip

translation-profile incoming In-Sip

translation-profile outgoing out-SipTrunk

destination-pattern [0,3]T

voice-class sip dtmf-relay force rtp-nte

session protocol sipv2

session target sip-server

dtmf-relay rtp-nte

codec g711alaw

no vad

!

sip-ua

credentials username 0690282XXX password 7 XXX realm voip.eutelia.it

credentials username 0690282YYY password 7 YYY realm voip.eutelia.it

authentication username 0690282XXX password 7 XXX realm voip.eutelia.it

no remote-party-id

registrar dns:voip.eutelia.it expires 3600

sip-server dns:voip.eutelia.it

With the two "credentials" commands I was able to register the two numbers towards the SIP provider and it's possible to recieve the calls directed to 0690282XXX and 0690282YYY on the phones.

show sip-ua register status

Line peer expires(sec) registered P-Associated-URI

============ ============= ============ =========== ================

0690282YYY -1 1042 yes

0690282XXX -1 1015 yes

Instead calling from this number to outside it's impossible.

To resolve this I have added the command "authentication username 0690282XXX ..." but I was able to call outside using only the 0690282XXX.

Sip-ua can manage only one authentication string.

How can I make this work?

Thanks

Nicholas Matthews · ‎02-10-2009

Hi,

Unfortunately at this time we only support one authentication at a time. The only way for this to work is to have both SIP trunks have the same authentication.

I think this is something that we are working on, however.

hth,

nick

Gianluigi Carella · ‎02-10-2009

Well... I was not surprised, I expected a response of this kind.

But there is nothing that I can do to resolve the problem? Maybe a temporary solution while waiting the new release?

Nicholas Matthews · ‎02-10-2009

The workarounds require getting the providers involved - seeing if they will change your authentication or waive the registration requirement.

-nick

Gianluigi Carella · ‎02-10-2009

I've tried, it's impossible.

A SIP-Proxy can be a good thing to resolve my issue? If yes, do you know something easy to configure?

Nicholas Matthews · ‎02-10-2009

A SIP proxy should be able to take care of this, yes.

I do not know much on the Cisco Sip Proxy side of things, nor any 3rd party configurations.

I'm interested to know about your solution if you find one.

hth,

nick

y.talibi · ‎06-03-2009

Hello,

You can use a voice port in the router and use authentication in the dial-peer pots like this:

dial-peer voice 111111 pots

answer-address 111111

destination-pattern 111111

forward-digits all

authentication username 111111@isp.com password 1234 realm isp.com

sip-ua

no remote-party-id

retry invite 3

retry notify 3

timers notify 100

registrar dns:isp.com:5060 expires 3600

sip-server dns:isp.com:5060

Let me know...

Steen Nielsen · ‎08-27-2010

Did you ever get that to work so it showed different number pr configured credential ? I have the same problem after have configured 8 different credentials, only the number used with the authentication command is showed when calling out. I need the 8 different numbers to be showen.

What to do ?

Gianluigi Carella · ‎08-28-2010

Hi Steen Nielsen,

I resolved with the new CME 8.0 (and later) and Cisco IOS Release 15.0(1)XA (and later). With this new feature you can add multiple authentication strings in sip-ua.

What I have understood is that the command "credentials" works for calling in and the command "authentication" works for calling out.

Read this and try.

http://www.cisco.com/en/US/docs/ios/voice/sip/configuration/guide/sip_cg-multi-registrars.html#wp1070074

Best Regards,

Gianluigi Carella