<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hello,</p>
<p>finally I solved the issue. Cisco was sending calls from port
49507 not from 5060 and here are a check in kamailio <br>
</p>
<p> avp_db_query("select vpg.id from
provisioning.voip_peer_groups vpg left join
provisioning.voip_peer_hosts vph on vph.group_id = vpg.id where
vpg.has_inbound_rules = 1 and vph.ip = '$avp(s:ip)' and
(('$avp(s:protoid)' = '1' and vph.port = $avp(s:port)) or
('$avp(s:protoid)' != '1')) and vph.transport = $avp(s:protoid)
order by vpg.priority asc", "$avp(s:peer_group_ids)");</p>
<p>Thank you.<br>
</p>
<br>
<div class="moz-cite-prefix">El 10/01/18 a las 11:23, pushakk
escribió:<br>
</div>
<blockquote type="cite"
cite="mid:efc628ac-5a4f-3dc6-dc43-6f595eb78a6a@limbo.deathwing.net">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<p>Hello Daniel.<br>
</p>
<p>I have one inbound peering rule, in fact it is working with
digium epigy.</p>
<p>Thank you.<br>
</p>
<br>
<div class="moz-cite-prefix">El 10/01/18 a las 11:20, Daniel
Grotti escribió:<br>
</div>
<blockquote type="cite"
cite="mid:68434a97-e5c0-23b8-bb53-9d1160ee78f6@sipwise.com">
<meta http-equiv="Content-Type" content="text/html;
charset=utf-8">
<tt>Hi,<br>
you have to add, at leas, 1 entry (empty rule, if you don't
need inbound rules) in your INBOUND PEERING RULES, otherwise
the calls will be rejected with 403.<br>
<br>
Daniel<br>
<br>
<br>
<br>
</tt>On 01/10/2018 10:58 AM, pushakk wrote:<br>
<blockquote type="cite"
cite="mid:c29e9c9a-5057-aff2-a0c7-a606f9039699@limbo.deathwing.net">
<meta http-equiv="content-type" content="text/html;
charset=utf-8">
<p>Hello everyone,</p>
<p>I'm testing SPCE with two diferents MGW devs (CISCO and
DIGIUM EPIGY). <br>
</p>
<p><br>
</p>
<p> T1 ---------------- GW (Cisco or epygi)
---------------- spce -------------------------- asterisk</p>
<p><br>
</p>
<p>Cisco 10.0.1.13<br>
epygi 10.0.1.21</p>
<p>spce 10.0.1.25<br>
asterisk 10.0.1.20<br>
</p>
<p>I have configured a peering test group with two peering
servers and I can enable or disable each one in convenience.
I have configured an outbound peering rule and an inbound
peergin rule matching 'To domain: 10.0.1.25' (it's working
with epygi so i don't think it could be the problem on
CISCO). </p>
<p>With epigy, I can register my spce against a sip_tunnel
epygi configuration using the register in
/etc/ngcp-config/templates/etc/ngcp-sems/etc/reg_agent.conf.tt2.
Once registered, I can both receive and make calls without
any problem. <br>
</p>
<p>However with CISCO I can't find the way to register the
peer. Even so, I can make outbound calls but the inbound
calls are being rejected by spce with 403 Forbidden error
message. Is it mandatory to register against the peer
server? In the spce doc don't talk anything about that.<br>
</p>
<p>The log in lb and proxy are</p>
<p>First in lb the invite arrive and it is redirect to proxy</p>
<p>Jan 10 02:16:21 sip lb[26841]: NOTICE: <script>: New
request on lb - M=INVITE R=<a class="moz-txt-link-freetext"
href="sip:951******@10.0.1.25:5060" moz-do-not-send="true">sip:951******@10.0.1.25:5060</a>
F=<a class="moz-txt-link-freetext"
href="sip:620******@10.0.1.13" moz-do-not-send="true">sip:620******@10.0.1.13</a>
T=<a class="moz-txt-link-freetext"
href="sip:951******@10.0.1.25" moz-do-not-send="true">sip:951******@10.0.1.25</a>
IP=udp:10.0.1.13:58574 <a class="moz-txt-link-abbreviated"
href="mailto:ID=F54750FA-F4DA11E7-836FD6B1-F6498286@10.0.1.13"
moz-do-not-send="true">ID=F54750FA-F4DA11E7-836FD6B1-F6498286@10.0.1.13</a>
UA='Cisco-SIPGateway/IOS-12.x'<br>
</p>
<p>Jan 10 02:16:21 sip lb[26841]: NOTICE: <script>: <b>Relaying
request, du='<a class="moz-txt-link-freetext"
href="sip:127.0.0.1:5062" moz-do-not-send="true">sip:127.0.0.1:5062</a>'</b>,
fs='udp:127.0.0.1:5060' - R=<a class="moz-txt-link-freetext"
href="sip:95******@10.0.1.25:5060" moz-do-not-send="true">sip:95******@10.0.1.25:5060</a>
<a class="moz-txt-link-abbreviated"
href="mailto:ID=F54750FA-F4DA11E7-836FD6B1-F6498286@10.0.1.13"
moz-do-not-send="true">ID=F54750FA-F4DA11E7-836FD6B1-F6498286@10.0.1.13</a>
UA='Cisco-SIPGateway/IOS-12.x'</p>
<p>In proxy I have the error </p>
<p>Jan 10 09:44:31 sip proxy[21316]: NOTICE: <script>:
Call from PSTN - R=<a class="moz-txt-link-freetext"
href="sip:951******@10.0.1.25:5060" moz-do-not-send="true">sip:951******@10.0.1.25:5060</a>
<a class="moz-txt-link-abbreviated"
href="mailto:ID=90A0BD28-F51911E7-85C1D6B1-F6498286@10.0.1.13"
moz-do-not-send="true">ID=90A0BD28-F51911E7-85C1D6B1-F6498286@10.0.1.13</a>
UA='Cisco-SIPGateway/IOS-12.x'
<br>
</p>
<p>Jan 10 09:44:31 sip proxy[21316]: NOTICE: <script>: <b>No
matching inbound peer rule in any peering group, rejecting
call</b> - R=<a class="moz-txt-link-freetext"
href="sip:951******@10.0.1.25:5060" moz-do-not-send="true">sip:951******@10.0.1.25:5060</a>
<a class="moz-txt-link-abbreviated"
href="mailto:ID=90A0BD28-F51911E7-85C1D6B1-F6498286@10.0.1.13"
moz-do-not-send="true">ID=90A0BD28-F51911E7-85C1D6B1-F6498286@10.0.1.13</a>
UA='Cisco-SIPGateway/IOS-12.x' <br>
</p>
<p>And finally the lb return 403 Forbidden to Cisco</p>
<p>Jan 10 02:16:22 sip lb[26862]: NOTICE: <script>:
Reply from Inbound - S=100 - Trying M=INVITE
IP=udp:127.0.0.1:5062 <a class="moz-txt-link-abbreviated"
href="mailto:ID=F58C4827-F4DA11E7-8376D6B1-F6498286@10.0.1.13"
moz-do-not-send="true">ID=F58C4827-F4DA11E7-8376D6B1-F6498286@10.0.1.13</a>
UA='<null>'<br>
</p>
<p>Jan 10 02:16:22 sip lb[26862]: NOTICE: <script>:
Sending reply, fs='udp:10.0.1.25:5060' - <a
class="moz-txt-link-abbreviated"
href="mailto:ID=F58C4827-F4DA11E7-8376D6B1-F6498286@10.0.1.13"
moz-do-not-send="true">ID=F58C4827-F4DA11E7-8376D6B1-F6498286@10.0.1.13</a>
UA='<null>'<br>
</p>
<p>Jan 10 02:16:22 sip lb[26858]: NOTICE: <script>:
Reply from Inbound - <b>S=403 - Forbidden</b> M=INVITE
IP=udp:127.0.0.1:5062 <a class="moz-txt-link-abbreviated"
href="mailto:ID=F58C4827-F4DA11E7-8376D6B1-F6498286@10.0.1.13"
moz-do-not-send="true">ID=F58C4827-F4DA11E7-8376D6B1-F6498286@10.0.1.13</a>
UA='<null>'</p>
<p>I have readed a few times the spce doc about peering but it
is poor. I don't know if the "no matching inbound peer rule"
is causing the 403 forbidden or if the forbidden is causing
the "not matching inbound peer rule". <br>
</p>
<p>The traffic betwen Cisco GW and spce:</p>
<p>U 10.0.1.13:52734 -> 10.0.1.25:5060<br>
INVITE <a class="moz-txt-link-freetext"
href="sip:951******@10.0.1.25:5060" moz-do-not-send="true">sip:951******@10.0.1.25:5060</a>
SIP/2.0..Via: SIP/2.0/UDP
10.0.1.13:5060;branch=z9hG4bKB76177B..From: <a
class="moz-txt-link-rfc2396E"
href="sip:951******@10.0.1.13" moz-do-not-send="true"><sip:951******@10.0.1.13></a>;tag<br>
=1E6E2EA8-1F07..To: <a class="moz-txt-link-rfc2396E"
href="sip:951******@10.0.1.25" moz-do-not-send="true"><sip:951******@10.0.1.25></a>..Date:
Wed, 10 Jan 2018 09:48:50 GMT..Call-ID: <a
class="moz-txt-link-abbreviated"
href="mailto:4BD97EEF-F52211E7-86FCD6B1-F6498286@10.0.1"
moz-do-not-send="true">4BD97EEF-F52211E7-86FCD6B1-F6498286@10.0.1</a><br>
.13..Supported:
100rel,timer,resource-priority,replaces,sdp-anat..Min-SE:
1800..Cisco-Guid: 1272505031-4112650727-2225602586-380178028<br>
8..User-Agent: Cisco-SIPGateway/IOS-12.x..Allow: INVITE,
OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE,
NOTIFY, INFO, REGI<br>
STER..CSeq: 101 INVITE..Max-Forwards: 70..Timestamp:
1515577730..Contact: <a class="moz-txt-link-rfc2396E"
href="sip:951******@10.0.1.13:5060" moz-do-not-send="true"><sip:951******@10.0.1.13:5060></a>..Expires:
180..Allow-Events: t<br>
elephone-event..Supported: precondition..Content-Type:
multipart/mixed;boundary=uniqueBoundary..Mime-Version:
1.0..Content-Length: 778.<br>
...--uniqueBoundary..Content-Type:
application/sdp..Content-Disposition:
session;handling=required....v=0..o=CiscoSystemsSIP-GW-UserAge<br>
nt 2348 2527 IN IP4 10.0.1.13..s=SIP Call..c=IN IP4
10.0.1.13..t=0 0..a=rtr..m=audio 18014 RTP/AVP 8 19..c=IN
IP4 10.0.1.13..a=rtpmap:8<br>
PCMA/8000..a=rtpmap:19
CN/8000..a=ptime:20....--uniqueBoundary..Content-Type:
application/x-q931..Content-Disposition: signal;handling<br>
=optional..Content-Length:
47........................l.!.951******p..951******....--uniqueBoundary..Content-Type:
application/gtd..Cont<br>
ent-Disposition:
signal;handling=optional....IAM,..PRN,isdn*,,NET5*,..USI,rate,c,3,c,1..USI,lay1,alaw..TMR,02..CPN,00,,1,9<br>
#<br>
U 10.0.1.13 -> 10.0.1.25 +60@1480:119<br>
51771525..CGN,04,,1,y,4,951******..CPC,09..FCI,,,,,,,y,..GCI,4bd8e2c7f52211e784a8001ae29a9040......--uniqueBoundary--..<br>
#<br>
U 10.0.1.25:5060 -> 10.0.1.13:52734<br>
SIP/2.0 100 Trying..Via: SIP/2.0/UDP
10.0.1.13:5060;rport=52734;branch=z9hG4bKB76177B..From: <a
class="moz-txt-link-rfc2396E"
href="sip:951******@10.0.1.13" moz-do-not-send="true"><sip:951******@10.0.1.13></a>;tag=1E6E2EA8-1F0<br>
7..To: <a class="moz-txt-link-rfc2396E"
href="sip:951******@10.0.1.25" moz-do-not-send="true"><sip:951******@10.0.1.25></a>..Call-ID:
<a class="moz-txt-link-abbreviated"
href="mailto:4BD97EEF-F52211E7-86FCD6B1-F6498286@10.0.1.13..CSeq"
moz-do-not-send="true">4BD97EEF-F52211E7-86FCD6B1-F6498286@10.0.1.13..CSeq</a>:
101 INVITE..Server: Sipwise NGCP Proxy<br>
5.X..Content-Length: 0....<br>
#<br>
U 10.0.1.25:5060 -> 10.0.1.13:52734<br>
SIP/2.0 <b>403 Forbidden</b>..Via: SIP/2.0/UDP
10.0.1.13:5060;rport=52734;branch=z9hG4bKB76177B..From: <a
class="moz-txt-link-rfc2396E"
href="sip:951******@10.0.1.13" moz-do-not-send="true"><sip:951******@10.0.1.13></a>;tag=1E6E2EA8-<br>
1F07..To: <a class="moz-txt-link-rfc2396E"
href="sip:951******@10.0.1.25" moz-do-not-send="true"><sip:951******@10.0.1.25></a>;tag=1d24a28a0bded6c40d31e6db8aab9ac6.a227..Call-ID:
<a class="moz-txt-link-abbreviated"
href="mailto:4BD97EEF-F52211E7-86FCD6B1-F6498286@10.0.1.13"
moz-do-not-send="true">4BD97EEF-F52211E7-86FCD6B1-F6498286@10.0.1.13</a>..<br>
CSeq: 101 INVITE..Server: Sipwise NGCP Proxy
5.X..Content-Length: 0....</p>
<p>It is an 403 error directly, no auth challenge for the
invite 407 is sent previously.<br>
</p>
<p>Thank you very much.<br>
</p>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Spce-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Spce-user@lists.sipwise.com" moz-do-not-send="true">Spce-user@lists.sipwise.com</a>
<a class="moz-txt-link-freetext" href="https://lists.sipwise.com/listinfo/spce-user" moz-do-not-send="true">https://lists.sipwise.com/listinfo/spce-user</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Spce-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Spce-user@lists.sipwise.com" moz-do-not-send="true">Spce-user@lists.sipwise.com</a>
<a class="moz-txt-link-freetext" href="https://lists.sipwise.com/listinfo/spce-user" moz-do-not-send="true">https://lists.sipwise.com/listinfo/spce-user</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Spce-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Spce-user@lists.sipwise.com">Spce-user@lists.sipwise.com</a>
<a class="moz-txt-link-freetext" href="https://lists.sipwise.com/listinfo/spce-user">https://lists.sipwise.com/listinfo/spce-user</a>
</pre>
</blockquote>
<br>
</body>
</html>