[asterisk-users] Failed to authenticate device "Ext 110"

[asterisk users]

On Tue, May 21, 2013 at 11:26 AM, Matthew J. Roth <mroth at imminc.com> wrote:

> asterisk users wrote:
> >
> > I'm having a strange problem recently with a Yealink SIP-T28P phone
> connected
> > to Asterisk 11.4.0 via openvpn. It was working fine for months, and now
> when I
> > dial anything from the phone, it shows "Forbidden", and the Asterisk
> console
> > shows:
> >
> > [May 21 10:47:49] NOTICE[28518][C-00000004]: chan_sip.c:25189
> handle_request_invite: Failed to authenticate device "Ext 110" <
> sip:110 at 192.168.6.2 >;tag=1130259112
> >
> > Asterisk 192.168.6.2
> > OpenVPN on router 10.8.0.1
> > Remote Yealink phone 10.8.0.6
> >
> > The remote phone shows as being registered:
> > PBX*CLI> sip show peers
> > Name/username Host Dyn Forcerport ACL Port Status Description
> > 110/110 10.8.0.6 D A 5062 OK (111 ms) Yealink OpenVPN
> >
> > Also, if there is voicemail in the mailbox for 110, the phone's message
> light
> > is lit and it beeps periodically.
> >
> > ...
> >
> > Any suggestions on what might be happening here, and how it could be
> resolved?
>
>
> That is quite strange.  Please provide SIP traces of the dialogs between
> Asterisk and the phone in the following two scenarios:
>
>   1) Phone registering to Asterisk (presumably successful)
>   2) Phone dialing to Asterisk (presumably unsuccessful)
>
> Regards,
>
> Matthew Roth
> InterMedia Marketing Solutions
> Software Engineer and Systems Developer
>
> --
>
>
Registration trace
(note that extension 88 is the voicemail extension, which the phone
registers to also for MWI)
--> http://pastebin.com/c3H700wa

Call trace:
|Time     | 10.8.0.6                              |
|         |                   | 192.168.6.2       |
|268.693661|         INVITE SDP (g711U g729 g722
telephone-eventRTP...e-101)          |SIP From: "Ext 110" <
sip:110 at 192.168.6.2 To:<sip:88 at 192.168.6.2
|         |(1024)   ------------------>  (5060)   |
|268.694449|         401 Unauthorized              |SIP Status
|         |(1024)   <------------------  (5060)   |
|268.914195|         ACK       |                   |SIP Request
|         |(1024)   ------------------>  (5060)   |
|268.945115|         INVITE SDP (g711U g729 g722
telephone-eventRTP...e-101)          |SIP From: "Ext 110" <
sip:110 at 192.168.6.2 To:<sip:88 at 192.168.6.2
|         |(1024)   ------------------>  (5060)   |
|268.945717|         403 Forbidden                 |SIP Status
|         |(1024)   <------------------  (5060)   |
|269.041417|         ACK       |                   |SIP Request
|         |(1024)   ------------------>  (5060)   |


I'm also confused by the reference in "sip show peers" to port 5062, as I
can't see that anywhere in the configuration of either the phone or in
sip.conf.  All the other phones show port 5060 in the "sip show peers"
output.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20130521/ee79fbe7/attachment.htm>