Приветствую коллеги. Впервые столкнулся с задачей настройкой телефонной станции на cisco2821 c подключением к провайдеру по SIP. Тема избитая насколько я понял, но решить задачу не получается. Прошу помощи у сообщества. Может кто уже обошел все эти грабли.
Данные полученные от провайдера
Useful information for registration
Registration/Authentication Number 2******1
SIP Credentials for registration
Connection Type: DSL
Domain or Realm: trunk.cyta.com.cy
Registrar server or proxy server: trunk.cyta.com.cy
Outbound Proxy server: trunk.cyta.com.cy
Gateway: 10.249.*.*
DNS Server: 10.224.*.*
PBX WAN IP Address: 10.249.*.*
Subnet Mask: 255.255.255.248
Username for Authentication:
2******1@trunk.cyta.com.cyPassword: **
На роутере три интерфейса
Gi0/0 -просто интернет
Gi0/1 - 10.249.*.* -SIP магистраль
vlan3-10.19.1/24 - внутренний: компьютеры, телефоны
Настройки роутера для подключения
**-rtr1#sh version
Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9_IVS-M), Version 15.1(4)M12a, RELEASE SOFTWARE (fc1)
***
System image file is "flash:c2800nm-adventerprisek9_ivs-mz.151-4.M12a.bin"
маршрут для доступа к SIP серверам провайдера ip route 10.224.0.0 255.255.0.0 10.249.*.*
voice service voip
ip address trusted list
ipv4 10.0.0.0 255.0.0.0
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
redirect ip2ip
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
sip
bind control source-interface GigabitEthernet0/1
bind media source-interface GigabitEthernet0/1
registrar server expires max 3600 min 3600
dial-peer voice 100 voip
destination-pattern .T
session protocol sipv2
session target dns:trunk.cyta.com.cy
voice-class codec 1
voice-class sip outbound-proxy dns:trunk.cyta.com.cy
voice-class sip bind control source-interface GigabitEthernet0/1
voice-class sip bind media source-interface GigabitEthernet0/1
dtmf-relay rtp-nte
no vad
sip-ua
credentials username 2******1 password 7 ** realm trunk.cyta.com.cy
authentication username
2******1@trunk.cyta.com.cy password 7 **
no remote-party-id
retry invite 2
retry bye 2
retry cancel 2
retry register 10
timers connect 100
timers keepalive active 300
registrar dns:trunk.cyta.com.cy expires 3600
sip-server dns:trunk.cyta.com.cy
connection-reuse
Доступность sip сервера провайдера
***-rtr1#ping trunk.cyta.com.cy
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.224.148.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/33/36 ms
Регистрация не наступает
***-rtr1#show sip-ua register status
Line peer expires(sec) registered P-Associ-URI
================================ ========== ============ ========== ============
2******1 -1 267 no
Лог
cyprus-rp-rtr1#show sip-ua register status
Jul 6 11:21:37.618: //-1/xxxxxxxxxxxx/SIP/Event/sipSPIEventInfo: Queued event from SIP SPI : SIPSPI_EV_OUTBOUND_REGISTER
Jul 6 11:21:37.618: //-1/xxxxxxxxxxxx/SIP/Event/sipSPIEventInfo: Queued event from SIP SPI : SIPSPI_EV_DNS_RESOLVE
Jul 6 11:21:37.686: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:trunk.cyta.com.cy:5060 SIP/2.0
Via: SIP/2.0/UDP 10.249.*.*:5060;branch=z9hG4bK3052549
From: <sip:2******1@trunk.cyta.com.cy>;tag=53A858C-E2
To: <sip:2******1@trunk.cyta.com.cy>
Date: Fri, 06 Jul 2018 11:21:37 GMT
Call-ID: 28ABFA69-803811E8-806BB67E-3A6DDE68
User-Agent: Cisco-SIPGateway/IOS-12.x
Max-Forwards: 70
Timestamp: 1530876097
CSeq: 54 REGISTER
Contact: <sip:2******01@10.249.*.*:5060>
Expires: 3600
Supported: path
Content-Length: 0
Jul 6 11:21:37.774: //603/000000000000/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 401 Unauthorized 11030230330
Via: SIP/2.0/UDP 10.249.*.*:5060;branch=z9hG4bK3052549
To: <sip:2******1@trunk.cyta.com.cy>;tag=h7g4Esbg_d5072243031cf92d70d17bbc68170ca7
From: <sip:2******1@trunk.cyta.com.cy>;tag=53A858C-E2
Call-ID: 28ABFA69-803811E8-806BB67E-3A6DDE68
CSeq: 54 REGISTER
Path: <sip:10.224.148.7;transport=udp;lr>
Service-Route: <sip:10.224.148.7:5060;transport=udp;lr>
WWW-Authenticate: Digest realm="fmc.cyta.com.cy",nonce="BCF11475CD503F5B000000007B06620C",algorithm=MD5,qop="auth"
Content-Length: 0
Jul 6 11:21:37.778: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
REGISTER sip:trunk.cyta.com.cy:5060 SIP/2.0
Via: SIP/2.0/UDP 10.249.168.186:5060;branch=z9hG4bK306C41
From: <sip:2******1@trunk.cyta.com.cy>;tag=53A858C-E2
To: <sip:2******1@trunk.cyta.com.cy>
Date: Fri, 06 Jul 2018 11:21:37 GMT
Call-ID: 28ABFA69-803811E8-806BB67E-3A6DDE68
User-Agent: Cisco-SIPGateway/IOS-12.x
Max-Forwards: 70
Timestamp: 1530876097
CSeq: 55 REGISTER
Contact: <sip:2******1@10.249.*.*:5060>
Expires: 3600
Authorization: Digest username="2******1@trunk.cyta.com.cy",realm="fmc.cyta.com.cy",uri="sip:trunk.cyta.com.cy:5060",response="fdbe1227abbc6de7927013ec6f719e4e",nonce="BCF11475CD503F5B000000007B06620C",cnonce="D247AD4E",qop=auth,algorithm=MD5,nc=00000001
Content-Length: 0
Jul 6 11:21:37.894: //603/000000000000/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 401 Unauthorized 1103023032F
Via: SIP/2.0/UDP 10.249.*.*:5060;branch=z9hG4bK306C41
To: <sip:2******1@trunk.cyta.com.cy>;tag=h7g4Esbg_d5072243031cf8a730d17bbc688d69d7
From: <sip:2******1@trunk.cyta.com.cy>;tag=53A858C-E2
Call-ID: 28ABFA69-803811E8-806BB67E-3A6DDE68
CSeq: 55 REGISTER
Service-Route: <sip:10.224.148.7:5060;transport=udp;lr>
WWW-Authenticate: Digest realm="fmc.cyta.com.cy",nonce="6EA51E1ECD503F5B00000000174E1573",algorithm=MD5,qop="auth"
Content-Length: 0
Jul 6 11:21:37.894: //603/000000000000/SIP/Error/ccsip_api_register_result_ind: Message Code Class 4xx Method Code 100 received for REGISTER
Jul 6 11:21:37.894: //603/000000000000/SIP/Error/sipSPIRegPthruProcessResponse: Error NO RPCB
---------------------------------------------------
---------------------------------------------------
И вторая проблема
voice service voip
ip address trusted list
ipv4 10.0.0.0 255.0.0.0
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
redirect ip2ip
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
sip
bind control source-interface GigabitEthernet0/1
bind media source-interface GigabitEthernet0/1
registrar server expires max 3600 min 3600
Если в voice service voip
bind стоит GigabitEthernet0/1 то регистрация у провайдера идет от правильного ip , но отваливаются свои телефоны(тоже подключены по sip)
Если bind стоит vlan 3 то свои телефоны регистрируются а к провайдеру запросы идут от 10.19.1.1 и соответственно он их отбрасывает
и не помогает
voice-class sip bind control source-interface GigabitEthernet0/1
voice-class sip bind media source-interface GigabitEthernet0/1
в dial-peer voice 100 voip
-------------------------------------------------
-------------------------------------------------
Наверняка я собрал большую часть грабель. Подскажите если несложно.
Спасибо.