I was able to get an SPA942 to register with my CME on the LAN. However, when I move the SPA942 to a location behind a NAT, it fails to register. I ran "debug ccsip messages" on the CME and found multiple issues with the SPA not registering. Main problems were that CME was responding to the private IP address of the SPA942, embeded in the SIP REGISTER message instead of responding to the NAT'ed IP address of the SPA942. I have fixed this problem by specifying the public IP address of the NAT router in the SPA942's configuration on the SIP tab under the EXT IP field and setting the NAT Enable setting to Yes on the EXT tab. At this point, the correct IP address is embedded in the SIP REGISTER message, but the registration is still failing with the 401 Unauthorized message. The same exact phone is registering with the same credentials when it's plugged in my LAN.
Does anyone have any ideas? Why is NAT breaking registration?
I would give up your efforts anyways, because your RTP streams are not going to work right through NAT, I have tested it a few times. Some of the newer ASA's can do the proper fixups requires in RTP and SIP header's to make it work. Your going to get one way audio though, Cisco Voice hates NAT. Your other option would be to make a permenent VPN tunnel between the 2 sites and have your Phone properly inside the LAN.
You have reached the Cisco Logistics Support Center.. To Check Status of
your RMA, visit Product Returns & Replacements (RMA). Need help? Contact
us by Phone or Email. North Americas Phone: 1800 553 2447 Option 4
Email: firstname.lastname@example.org Europe Phone: +3...
The short answer is that you don't.... That isn't entirely true while at
the same time it kind of is, but for the most part you don't configure
the softkeys. You enable or disable them via TCL. Here is the long
answer. Be sure to read the whole thing or e...
Topology: IP Phone > Switches > Microsoft NPS setup to forward 802.1x
proxy to > ISE 2.1 patch 3 Authentication: EAP-TLS using Cisco MIC SANs
Phone Models 802.1X support? 802.1x flavor Addtl Comment EAP-MD5 EAP-TLS
Cisco 3905 Y Y N Cisco 6911 Y Y N Cisco ...