Issue:
Cisco 7965G phone with SIP firmware doesn't register with Asterisk.
Thinks to check:
1. Confirm the auth id and password are correct.
2. Confirm the NAT settings match in Asterisk w/in the <sipProfile> tag.
<natEnabled>false</natEnabled>
<natReceivedProcessing>false</natReceivedProcessing>
<natAddress></natAddress>
(See the configuration file excerpt below.)
3. Confirm the proxy no longer has the IP, but has the phrase "USECALLMANAGER" w/in it.
<backupProxy>192.168.nn.1</backupProxy>
. . .
<proxy>USECALLMANAGER</proxy>
(See the configuration file excerpt below.)
4. Make sure the transportLayerProtocol matches Asterisk (example: UDP):
<transportLayerProtocol>2</transportLayerProtocol>
(See the configuration file excerpt below.)
e.g.
<sipProfile>
<natEnabled>false</natEnabled>
<natReceivedProcessing>false</natReceivedProcessing>
<natAddress></natAddress>
<sipProxies>
<registerWithProxy>true</registerWithProxy>
<outboundProxy></outboundProxy>
<outboundProxyPort></outboundProxyPort>
<backupProxy>192.168.nn.1</backupProxy>
<backupProxyPort>5060</backupProxyPort>
</sipProxies>
<preferredCodec>none</preferredCodec>
<phoneLabel>My Name</phoneLabel>
<sipLines>
<line button="1">
<featureID>9</featureID>
<featureLabel>101</featureLabel>
<proxy>USECALLMANAGER</proxy>
<port>5060</port>
<name>101</name>
<authName>123</authName>
<authPassword>abc123defg4567xyz</authPassword>
<messageWaitingLampPolicy>3</messageWaitingLampPolicy>
<messagesNumber>*97</messagesNumber>
</line>
</sipLines>
<dialTemplate>dialplan.xml</dialTemplate>
</sipProfile>
. . .
<networkLocaleInfo>
<name>United_States</name>
<uid>64</uid>
<version>1.0.0.0-1</version>
</networkLocaleInfo>
<transportLayerProtocol>2</transportLayerProtocol>
. . .
5. Make sure <phoneLabel> is 12 characters or less.
6. If phone is 7941, recheck IPTABLES and Fail2ban. Chances are if tcdump 69 shows connection but the phone shows timeout, the requests were likely blocked.
# iptables -L
...
Chain fail2ban-recidive (1 references)
target prot opt source destination
REJECT all -- 192.168.nn.123 anywhere reject-with icmp-port-unreachable
To unban an ip:
# fail2ban-client set recidive unbanip 192.168.22.88
If the output shows the reject similar to above, then shut them down again:
# service iptables stop
# service fail2ban stop
7. Look for an error in the asterisk/full log:
# tail -150 /var/log/asterisk/full
...
[2024-09-01 19:44:44] NOTICE[1764] chan_sip.c: Registration from '<sip:115@192.168.22.16>' failed for '192.168.22.88:50563' - Wrong password
...
7b. Password Issue w/Merhaba?
Device Password matched the device Secret in Merhaba, but the phone is still sending the "Wrong password".
- Edit the default hexadecimal password, remove characters from the middle, and save it again. (Make sure is under 32 characters.) Change the password again in the SEP<MAC>.cnf.xml file, again.
previous page
|