11-10-2014 04:38 AM - edited 03-17-2019 12:52 AM
I have a problem with multiple sip-ua authorization on Cisco 2811 with IOS version 15.1(1)T.
sip-ua configuration:
sip-ua
credentials username ngn59953 password pass realm Realm
credentials username ngn59952 password pass 8 realm Realm
credentials username ngn59594 password pass realm Realm
authentication username ngn59953 password pass realm Realm
authentication username ngn59952 password pass realm Realm1
authentication username ngn59594 password pass realm Realm2
nat symmetric check-media-src
no remote-party-id
retry invite 3
retry response 3
retry bye 3
retry cancel 3
retry options 2
registrar dns:isimngn.usi.ru expires 3600
sip-server dns:isimngn.usi.ru
no suspend-resume
connection-reuse
All of them are registered successfully:
#sh sip-ua register stat
Line peer expires(sec) registered P-Associ-URI
================================ ========== ============ ========== ============
ngn59594 -1 2407 yes
ngn59952 -1 2253 yes
ngn59953 -1 2453 yes
But I can call only from the first one in configuration. (no matter, which is the first, it works). I know the reason but I don't have any clue why it happens. SIP invite are sent from correct number, but when SIP-proxy requires authorization the router sends authorization for first username (Full debug is in attachment.):
Sent:
INVITE sip:83452560121@isimngn.usi.ru:5060 SIP/2.0
Via: SIP/2.0/UDP 178.46.155.50:5060;branch=z9hG4bK26411241
From: "Uralmicro Test" <sip:59952@isimngn.usi.ru>;tag=6C4886AC-0
To: <sip:83452560121@isimngn.usi.ru>
Date: Mon, 20 Oct 2014 11:15:13 GMT
<output is omitted>
Proxy-Authorization: Digest username="ngn59953",realm="Realm",uri="sip:83452560121@isimngn.usi.ru:5060",response="8b6c528425a16fb43f8182b57a246765",nonce="MTQxMzgwMzY2MjY5NmI4MTI5NDUxNzkxYzdhZjM2M2JlZjlhMzFhMzVjNmJj",cnonce="64C796E3",qop=auth-int,algorithm=MD5,nc=00000001
Max-Forwards: 69
Session-Expires: 1800
Content-Length: 0
Also I've tried this sip-accounts on another similar Cisco 2811 router with same IOS version, where scheme with multiple sip-accounts are working, and I've gotten same problem. And I've tried sip-accounts from that second router on my 2811:
credentials username 3467360087 password pass realm Realm
credentials username 3467360089 password pass realm Realm
authentication username 3467360087 password pass realm Realm
authentication username 3467360089 password pass realm Realm1
And they are working correctly!! It's really strange!!
Why such problem could be? Full debug is in attachment.
11-10-2014 07:52 AM
Hi.
Can you please send a full config of your VG?
Thanks
Regards
Carlo
11-10-2014 07:58 PM
11-12-2014 04:10 AM
Could someone could explain me how router chooses which sip-ua authorization line to use? Maybe in my case, when sip-account usernames are not equal to telephone numbers some specific configuration should be done.
11-30-2014 08:30 PM
SIP-provider has changed sip-logins for us to match phone number, and now all works perfectly! But I still wonder why it hasn't worked in the first place.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide