[Spce-user] R: Subcriber IP authentication

[Alessandro Bolletta]

Great Marco,
it seems to work!

Thanks,

--
Alessandro Bolletta
Mediaspot Srl



Da: Marco Teixeira [mailto:admin at marcoteixeira.com]
Inviato: lunedì 26 ottobre 2015 12.09
A: Alessandro Bolletta <alessandro at mediaspot.net>
Cc: spce-user at lists.sipwise.com
Oggetto: Re: [Spce-user] Subcriber IP authentication

Hi Alessandro,

Beside allowed sources, you also need to add the IP to "trusted sources"... to avoid asking for authentication.
I ususally don't use patterns, and set Protocol to any (to allow for TCP fallback of the client, in case the SIP packet size exceeds the MTU)

About your permanent registration, that is not going to work, you need something like sip:something at pbx.ip.ad.dr:5060
And if you need to send it over TCP, just add transport=tcp like:  sip:something at pbx.ip.ad.dr:5060;transport=tcp
For asterisk peers this should work: sip:s at 1.1.1.1:5060<http://sip:s@1.1.1.1:5060>



---
Cumprimentos / Best regards

Marco
---


On Mon, Oct 26, 2015 at 10:16 AM, Alessandro Bolletta <alessandro at mediaspot.net<mailto:alessandro at mediaspot.net>> wrote:
Hi,
I configured a customer’s Asterisk PBX as a subscriber with IP authentication instead of registration in this way, is it correct and secure? It is now currently working for my customer but I’m not really sure about security:

-under Subscriber -> subscriber’s Detail -> Preferences -> Trusted Source IP - > create
Source IP: PBX_IP_Address
Protocol: UDP
From-Pattern: ^sip:.*

- under Subscriber -> subscriber’s Detail -> Registered Device -> Create Permanent Registration
Contact: sip:pbx_ip_address:5060
Priority: 1


_______________________________________________
Spce-user mailing list
Spce-user at lists.sipwise.com<mailto:Spce-user at lists.sipwise.com>
https://lists.sipwise.com/listinfo/spce-user

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20151029/2d1bc558/attachment-0001.html>