[Asterisk-Users] Sip Register Fail - NAT

[AstGrp]

I am having an issue with registering SIP client w/ NAT.  I have set
this up before on other boxes... But for some reason this one is not
acting the same... I have attached a sip debug from the registration...
For what ever reason it does not appear to be setting up the nat session
correctly....

Am I seeing something wrong or even doing something wrong....

-gcc

############ SIP CONFIG ######################

;
; SIP Configuration for Asterisk
;
[general]
port = 5060                     ; Port to bind to
bindaddr = 0.0.0.0              ; Address to bind to
externip = <nat ip> ; Address that we're going to put in SIP messages if
we're behind a NAT
localnet = 10.100.254.0        ; Internal NETWORK address
localmask = 255.255.255.0      ; Internal netmask
context=default         ; Default for incoming calls
;srvlookup = yes                ; Enable SRV lookups on outbound calls
;pedantic = yes                 ; Enable slow, pedantic checking for
Pingtel
;tos=lowdelay
;tos=184
;maxexpirey=3600                ; Max length of incoming registration we
allow
;defaultexpirey=120             ; Default length of incoming/outoing
registration
;notifymimetype=text/plain      ; Allow overriding of mime type in
NOTIFY
;videosupport=yes               ; Turn on support for SIP video
disallow=all                    ; Disallow all codecs
allow=ulaw                      ; Allow codecs in order of preference
allow=ilbc
allow=alaw

[4003]
type=friend
username=4003
secret=4003
host=dynamic
qualify=500
context=local
nat=yes
mailbox=4003


############## SIP DEBUG #################3

Sip read: 
REGISTER sip:10.100.254.21 SIP/2.0 Content-Length: 0 Contact:
<sip:192.168.1.10> Call-ID:
599ACC9F-780E-4B29-BAF1-3F0CC7277338 at 192.168.1.10 From:
<sip:4003 at 10.100.254.21>;tag=10990022 CSeq: 87 REGISTER To:
<sip:4003 at 10.100.254.21> Via: SIP/2.0/UDP 192.168.1.10:5060  
 8 headers, 0 lines
 Using latest request as basis request
 Sending to 192.168.1.10 : 5060 (non-NAT)
 Transmitting (NAT):
SIP/2.0 100 Trying Via: SIP/2.0/UDP
192.168.1.10:5060;received=69.132.68.17 From:
<sip:4003 at 10.100.254.21>;tag=10990022 To:
<sip:4003 at 10.100.254.21>;tag=as138021c1 Call-ID:
599ACC9F-780E-4B29-BAF1-3F0CC7277338 at 192.168.1.10 CSeq: 87 REGISTER
User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:4003 at 66.64.246.36> Content-Length: 0  
 to 69.132.68.17:5060
 Transmitting (NAT):
SIP/2.0 407 Proxy Authentication Required Via: SIP/2.0/UDP
192.168.1.10:5060;received=69.132.68.17 From:
<sip:4003 at 10.100.254.21>;tag=10990022 To:
<sip:4003 at 10.100.254.21>;tag=as138021c1 Call-ID:
599ACC9F-780E-4B29-BAF1-3F0CC7277338 at 192.168.1.10 CSeq: 87 REGISTER
User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:4003 at 66.64.246.36> Proxy-Authenticate: Digest
realm="asterisk", nonce="267e89bd" Content-Length: 0  
 to 69.132.68.17:5060
 ^Dtnevoip*CLI>  
Sip read: 
REGISTER sip:10.100.254.21 SIP/2.0 Content-Length: 0 Contact:
<sip:192.168.1.10> Call-ID:
599ACC9F-780E-4B29-BAF1-3F0CC7277338 at 192.168.1.10 From:
<sip:4003 at 10.100.254.21>;tag=10990413 CSeq: 88 REGISTER To:
<sip:4003 at 10.100.254.21> Via: SIP/2.0/UDP 192.168.1.10:5060
Proxy-Authorization: Digest
username="4003",realm="asterisk",nonce="267e89bd",uri="sip:10.100.254.21
",response="fb30e53fffc30ea15fc97acf7d82322f"  
 9 headers, 0 lines
 Using latest request as basis request
 Sending to 192.168.1.10 : 5060 (NAT)
 Transmitting (NAT):
SIP/2.0 100 Trying Via: SIP/2.0/UDP
192.168.1.10:5060;received=69.132.68.17 From:
<sip:4003 at 10.100.254.21>;tag=10990413 To:
<sip:4003 at 10.100.254.21>;tag=as138021c1 Call-ID:
599ACC9F-780E-4B29-BAF1-3F0CC7277338 at 192.168.1.10 CSeq: 88 REGISTER
User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:4003 at 66.64.246.36> Content-Length: 0  
 to 69.132.68.17:5060
 Transmitting (NAT):
SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP
192.168.1.10:5060;received=69.132.68.17 From:
<sip:4003 at 10.100.254.21>;tag=10990413 To:
<sip:4003 at 10.100.254.21>;tag=as138021c1 Call-ID:
599ACC9F-780E-4B29-BAF1-3F0CC7277338 at 192.168.1.10 CSeq: 88 REGISTER
User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:4003 at 66.64.246.36> Content-Length: 0  
 to 69.132.68.17:5060
 Feb 22 19:33:23 NOTICE[-1147384912]:
chan_sip.c:5577
handle_request:  Registration from
'<sip:4003 at 10.100.254.21>' failed for '69.132.68.17'
 ^Dtnevoip*CLI>  
Sip read: 
REGISTER sip:10.100.254.21 SIP/2.0 Content-Length: 0 Contact:
<sip:192.168.1.10> Call-ID:
599ACC9F-780E-4B29-BAF1-3F0CC7277338 at 192.168.1.10 From:
<sip:4003 at 10.100.254.21>;tag=10990613 CSeq: 89 REGISTER To:
<sip:4003 at 10.100.254.21> Via: SIP/2.0/UDP 192.168.1.10:5060  
 8 headers, 0 lines
 Using latest request as basis request
 Sending to 192.168.1.10 : 5060 (non-NAT)
 Transmitting (NAT):
SIP/2.0 100 Trying Via: SIP/2.0/UDP
192.168.1.10:5060;received=69.132.68.17 From:
<sip:4003 at 10.100.254.21>;tag=10990613 To:
<sip:4003 at 10.100.254.21>;tag=as42b62c4b Call-ID:
599ACC9F-780E-4B29-BAF1-3F0CC7277338 at 192.168.1.10 CSeq: 89 REGISTER
User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:4003 at 66.64.246.36> Content-