[asterisk-users] Failed to authenticate device "Ext 110"

[Matthew J. Roth]

asterisk users wrote:
> 
> Registration trace
> (note that extension 88 is the voicemail extension, which the phone registers
> to also for MWI)
> --> http://pastebin.com/c3H700wa

There are no REGISTER requests in that trace.  All I see are SUBSCRIBE, NOTIFY,
OPTIONS, and INVITE dialogs.

> Call trace: 
> |Time | 10.8.0.6 | 
> | | | 192.168.6.2 | 
> |268.693661| INVITE SDP (g711U g729 g722 telephone-eventRTP...e-101) |SIP From: "Ext 110" < sip:110 at 192.168.6.2 To:< sip:88 at 192.168.6.2 
> | |(1024) ------------------> (5060) | 
> |268.694449| 401 Unauthorized |SIP Status 
> | |(1024) <------------------ (5060) | 
> |268.914195| ACK | |SIP Request 
> | |(1024) ------------------> (5060) | 
> |268.945115| INVITE SDP (g711U g729 g722 telephone-eventRTP...e-101) |SIP From: "Ext 110" < sip:110 at 192.168.6.2 To:< sip:88 at 192.168.6.2 
> | |(1024) ------------------> (5060) | 
> |268.945717| 403 Forbidden |SIP Status 
> | |(1024) <------------------ (5060) | 
> |269.041417| ACK | |SIP Request 
> | |(1024) ------------------> (5060) | 

This is just a failed INVITE probably due to the username and/or password being
incorrect.  It's also possible that bad ACLs (see the 'permit/deny/acl' settings
in sip.conf) could be to blame.  It's hard to say without seeing a full SIP
trace and Asterisk CLI output.

> I'm also confused by the reference in "sip show peers" to port 5062, as I
> can't see that anywhere in the configuration of either the phone or in
> sip.conf. All the other phones show port 5060 in the "sip show peers" output. 

Start there and work through the obvious issues one by one.  First, figure out
why the phone is showing up on port 5062 and correct it if necessary.  Then,
double-check the username and password.  Keep going down that path until it
leads to a resolution or report back to the list if you run into a roadblock.

Regards,

Matthew Roth
InterMedia Marketing Solutions
Software Engineer and Systems Developer