[Spce-user] Subcriber IP authentication

[Marco Teixeira]

Hi Alessandro,

Beside allowed sources, you also need to add the IP to "trusted sources"...
to avoid asking for authentication.
I ususally don't use patterns, and set Protocol to any (to allow for TCP
fallback of the client, in case the SIP packet size exceeds the MTU)

About your permanent registration, that is not going to work, you need
something like sip:something at pbx.ip.ad.dr:5060
And if you need to send it over TCP, just add transport=tcp like:
 sip:something at pbx.ip.ad.dr:5060;transport=tcp
For asterisk peers this should work: sip:s at 1.1.1.1:5060



---
Cumprimentos / Best regards

Marco
---


On Mon, Oct 26, 2015 at 10:16 AM, Alessandro Bolletta <
alessandro at mediaspot.net> wrote:

> Hi,
>
> I configured a customer’s Asterisk PBX as a subscriber with IP
> authentication instead of registration in this way, is it correct and
> secure? It is now currently working for my customer but I’m not really sure
> about security:
>
>
>
> -under Subscriber -> subscriber’s Detail -> Preferences -> Trusted Source
> IP - > create
>
> Source IP: PBX_IP_Address
>
> Protocol: UDP
>
> From-Pattern: ^sip:.*
>
>
>
> - under Subscriber -> subscriber’s Detail -> Registered Device -> Create
> Permanent Registration
>
> Contact: sip:pbx_ip_address:5060
>
> Priority: 1
>
>
>
> _______________________________________________
> Spce-user mailing list
> Spce-user at lists.sipwise.com
> https://lists.sipwise.com/listinfo/spce-user
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20151026/0cdd8029/attachment-0001.html>