×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

SIP trunk firewall Traversal issue

Unanswered Question
Jul 3rd, 2013
User Badges:
  • Blue, 1500 points or more
  • Community Spotlight Award,

    Best Doc/Video: December 2014

Dear Experts,


I have configured SIP trunk with authentication. the authentication is username and password. I use CUBE to acheive this.


the call flow is like the following


phone ---> CCM 6.1 -----> H323 ----> CUBE -----> Firewall -----> Internet ------> SIP provider.


while I do troubleshooting, I found a message told me that the firewall traversal is not enabled.


I do stun configuration by using the following commands


voice sevice voip

stun

  stun flowdata agent-id 10


voice class stun-usage 1

stun usage firewall-traversal flowdata


after that, the firewall traversal message disappear from the logs. but the call is not working.


the sip provider has a STUN server, how we can use it ? and also what is the STUN ?


thanks in advance

Anas

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Tapan Dutt Wed, 07/03/2013 - 08:12
User Badges:
  • Cisco Employee,

Do you have captures from CUBE for a failed call?


Tapan

Anas Abueideh Wed, 07/03/2013 - 08:56
User Badges:
  • Blue, 1500 points or more
  • Community Spotlight Award,

    Best Doc/Video: December 2014

It shows me a dead call, when I do.debug ccsip calls.

regards
Anas


Sent from Cisco Technical Support Android App

Jorge Armijo Wed, 07/03/2013 - 11:04
User Badges:
  • Silver, 250 points or more

That reply is not helpful,


capture debug ccsip messages


And provide the logs.


--
Jorge Armijo

Please remember to rate helpful responses and identify helpful or correct answers.

Anas Abueideh Sun, 07/07/2013 - 01:24
User Badges:
  • Blue, 1500 points or more
  • Community Spotlight Award,

    Best Doc/Video: December 2014

Dears,


kindly find the attached logs



thanks in advance

Anas

Attachment: 
Anas Abueideh Wed, 07/10/2013 - 04:31
User Badges:
  • Blue, 1500 points or more
  • Community Spotlight Award,

    Best Doc/Video: December 2014

Hi Guys,

can any one help me with this case ?

thanks in advance
regards

Sent from Cisco Technical Support Android App

chrysostomos1980 Wed, 07/10/2013 - 05:16
User Badges:
  • Silver, 250 points or more

Hi


The version of the CUBE is 15.x?



Please rate all useful posts


Regards
Chrysostomos


""The Most Successful People Are Those Who Are Good At Plan B""

Jorge Armijo Wed, 07/10/2013 - 05:20
User Badges:
  • Silver, 250 points or more

Here's the issue:


Sent:

INVITE sip:[email protected]:5060 SIP/2.0

Via: SIP/2.0/UDP 192.168.33.127:5060;branch=z9hG4bKF1147

Remote-Party-ID: ;party=calling;screen=yes;privacy=off

From: [email protected]>;tag=3A5AA8-139A

To: [email protected]>

Date: Sun, 07 Jul 2013 08:54:45 GMT

Call-ID: [email protected]

Supported: 100rel,timer,resource-priority,replaces,sdp-anat

Min-SE:  1800

Cisco-Guid: 15705573-2133102877-100672513-3232243830

User-Agent: Cisco-SIPGateway/IOS-12.x

Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER

CSeq: 102 INVITE

Max-Forwards: 70

Timestamp: 1373187285

Contact:

Expires: 180

Allow-Events: telephone-event

Proxy-Authorization: Digest username="1430052e1",realm="sipgate.de",uri="sip:[email protected]:5060",response="90b394921ae0523993f5f44fe1715f41",nonce="51d926d735a262f3a6904b27adba2bb98012f4a7",algorithm=md5

Content-Length: 0


Received:

SIP/2.0 403 Forbidden (check from field)

Via: SIP/2.0/UDP 192.168.33.127:5060;rport=49786;received=192.168.33.127;branch=z9hG4bKF1147

From: [email protected]>;tag=3A5AA8-139A

To: [email protected]>;tag=6d6e7f8f352adddb20da2b196524dfa8.b769

Call-ID: [email protected]

CSeq: 102 INVITE

Content-Length: 0


Seems like the SIP Server does'n like the FROM header:


From: [email protected]>;tag=3A5AA8-139A


You can modify the FROM header with a SIP Profile:


voice class sip-profiles 1111

request ANY sip-header From modify "sip:(.*)@" "sip:[whatever they want to receive]@"


You may ask your Service Provider what they don't like on the INVITE, then you can modify it accordingly.


Some information if STUN:

http://www.voip-info.org/wiki/view/STUN


HTH


--
Jorge Armijo

Please remember to rate helpful responses and identify helpful or correct answers.

Actions

This Discussion