[Spce-user] Help with Cisco call manager

[Clint Wiley]

We have the following issue. Any ideas?


  *   The outbound calls are still failing. We could see that provider is challenging the invite with 401 proxy authentication error, however, they are advertising our Cisco CUBE router’s WAN interface as Realm IP address in it. Due to this, the cube router is not sending another invite with a digest authentication field in it.
  *   Please check with them why are they changing the realm value in the challenge request.

INVITE sent to ITSP as per RFC:
*May 30 22:06:22.737: //42275/AC0199000000/SIP/Msg/ccsipDisplayMsg:
Sent:
INVITE sip:3016974552 at voice.nfis.com:5060 SIP/2.0
Via: SIP/2.0/TCP207.255.194.200:5060;branch=z9hG4bK8381A90
Remote-Party-ID: "Jennifer Ravenscroft" <sip:3047885305 at 207.255.194.200>;party=calling;screen=yes;privacy=off
From: "Jennifer Ravenscroft" <sip:3047885305 at 207.255.194.200>;tag=4000950D-23B1
To: <sip:3016974552 at voice.nfis.com>
Date: Thu, 30 May 2019 22:06:22 GMT
Call-ID:F3EAC4CD-825D11E9-9BD5DCDB-CC820C4 at 207.255.194.200<mailto:F3EAC4CD-825D11E9-9BD5DCDB-CC820C4 at 207.255.194.200>
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Min-SE:  1800
Cisco-Guid: 2885785856-0000065536-0000000004-0177602826
User-Agent: Cisco-SIPGateway/IOS-15.4.3.S4
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
CSeq: 101 INVITE
Timestamp: 1559253982<tel:1559253982>
Contact: <sip:3047885305 at 207.255.194.200:5060;transport=tcp>
Expires: 180
Allow-Events: telephone-event
Max-Forwards: 69
Session-Expires:  1800
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 421
v=0
o=CiscoSystemsSIP-GW-UserAgent 8563 5215<tel:8563%205215> IN IP4 207.255.194.200
s=SIP Call
c=IN IP4 207.255.194.200
t=0 0
m=audio 16628 RTP/AVP 9 0 8 18 100 101<tel:8%2018%20100%20101>
c=IN IP4 207.255.194.200
a=rtpmap:9 G722/8000
a=fmtp:9 bitrate=64
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=no
a=rtpmap:100 X-NSE/8000
a=fmtp:100 192-194<tel:100%20192-194>
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20

They challenged the INVITE for authentication with incorrect realm:
*May 30 22:06:22.766: //42275/AC0199000000/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/TCP 207.255.194.200:5060;rport=46173;branch=z9hG4bK8381A90
From: "Jennifer Ravenscroft" <sip:3047885305 at 207.255.194.200>;tag=4000950D-23B1
To: <sip:3016974552 at voice.nfis.com>;tag=1d24a28a0bded6c40d31e6db8aab9ac6.5d37
Call-ID:F3EAC4CD-825D11E9-9BD5DCDB-CC820C4 at 207.255.194.200<mailto:F3EAC4CD-825D11E9-9BD5DCDB-CC820C4 at 207.255.194.200>
CSeq: 101 INVITE
Proxy-Authenticate: Digest realm="207.255.194.200", nonce="XPBG4VzwRbUHcOVnGtn5tUA12ZXhCWB1"
Server: Sipwise NGCP Proxy 5.X
Content-Length: 0

The call fails after it as we don’t have any authentication configuration for this realm:

*May 30 22:06:22.767: //42275/AC0199000000/SIP/Error/sipSPIHandleAuthChallenge:
Error getting credentials
*May 30 22:06:22.767: //42275/AC0199000000/SIP/Error/act_recdproc_new_message_response:
Error handling AuthenticationChallenge




Thanks,
_________________________

Clint
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/mailman/private/spce-user_lists.sipwise.com/attachments/20190530/3e9ef7b2/attachment.html>