At the SBC, I delegate the registration to my asterisk server forwarding the REGISTER requests to it and resetting the contact to itself. This should allow my asterisk server to forward subsequent messages to the SBC rather than to the phone client directly. When the SBC receives a 200 OK from the asterisk registrar for the delegated REGISTER request, it saves the binding into its location database.<div>
<br></div><div>I am almost sure that the configuration at the SBC is right, the problem seems to be related with the asterisk behaviour, as it refuses with "407 Proxy Authentication Required" replay (if I use asterisk 1.4, or with <span class="Apple-style-span" style="border-collapse: collapse; font-family: arial, sans-serif; font-size: 13px; ">"401 Unauthorized" if I use asterisk 1.8</span>) those calls coming from the SBC as a trusted trunk for which I don't require authentication. Asterisk seems to "think" that those calls came from the phone whose registration has proxied at the SBC, and only accepts inbound calls from the SBC if its INVITEs carry that phone correct authentication.</div>
<div><br></div><div>Any ideas?</div><div><br></div><div>Thanks,</div><div>Ricardo.</div><div><br></div><div><br></div><div><br></div><div><br><div class="gmail_quote">On Tue, Feb 15, 2011 at 12:50 PM, Faisal Hanif <span dir="ltr"><<a href="mailto:faisal@vopium.com">faisal@vopium.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">You need to use relay request in your SBC instead of forward.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D"> </span></p><p class="MsoNormal"><b><span style="font-size:10.0pt">From:</span></b><span style="font-size:10.0pt"> <a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a> [mailto:<a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a>] <b>On Behalf Of </b>Pezhman Lali<br>
<b>Sent:</b> Tuesday, February 15, 2011 5:42 PM<br><b>To:</b> Asterisk Users Mailing List - Non-Commercial Discussion<br><b>Subject:</b> Re: [asterisk-users] unregistered trunks and registered phones coming from the same IP</span></p>
<div><div></div><div class="h5"><p class="MsoNormal"> </p><p class="MsoNormal" style="margin-bottom:12.0pt">please send your sip.conf, is any NAT procedure implemented in your network?<br><br></p><div><p class="MsoNormal">
On Mon, Feb 14, 2011 at 10:16 PM, Ricardo Carvalho <<a href="mailto:rjcarvalho.lists@gmail.com" target="_blank">rjcarvalho.lists@gmail.com</a>> wrote:</p><p class="MsoNormal">Hi,</p><div><p class="MsoNormal"> </p></div>
<div><p class="MsoNormal">I manage an SBC which stands between my company server farm and some SIP telco trunks. The system works fine, for inbound and outbound calls.</p></div><div><p class="MsoNormal"> </p></div><div><p class="MsoNormal">
Now I've configured the SBC to also act as a registration proxy, forwarding SIP registrations coming from the Internet to my asterisk servers.</p></div><div><p class="MsoNormal">It all seems fine, but it doesn't work well, because by the time at least one phone registers through the SBC to some asterisk server (lets say, server_A), future incoming calls coming from my SIP telco trunks to my server_A got refused by the asterisk running on that server, with "401 Unauthorized" messages back to the SBC.</p>
</div><div><p class="MsoNormal">Seems like that since the moment asterisk binds some contact to the IP of the SBC, because it registered through it, from that moment, asterisk only accepts calls from that IP if those INVITEs carry correct registration to my server (even if those calls came from my SBC, a trusted trunk, not registered in asterisk).</p>
</div><div><p class="MsoNormal">My phones are configured with type=friend. I've also tried type=peer and type=user, but it doesn't solve the problem.</p></div><div><p class="MsoNormal"> </p></div><div><p class="MsoNormal">
Any ideas to fix this?</p></div><div><p class="MsoNormal"> </p></div><div><p class="MsoNormal">Best regards,</p></div><div><p class="MsoNormal">Ricardo.</p></div><p class="MsoNormal"><br>--<br>_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>New to Asterisk? Join us for a live introductory webinar every Thurs:<br> <a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>asterisk-users mailing list<br>To UNSUBSCRIBE or update options visit:<br> <a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a></p>
</div><p class="MsoNormal"> </p></div></div></div></div><br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br></div>