Тема: VOIB плата не могу зарегить на астере
Вы там все адреса заляпали. Астериск за NAT по отношению к плате VOIB? Если да, то почему в настройках платы не указан Firewall IP Address?
Вы там все адреса заляпали. Астериск за NAT по отношению к плате VOIB? Если да, то почему в настройках платы не указан Firewall IP Address?
стоит dlink потом cisco 5811 разрешения есть, Firewall отсутствует.
снифер в помощь
снифер в помощь
0.000000 10.245.255.11 -> 213.148.0.101 SIP Request: REGISTER sip:213.148.0.101
0.000226 213.148.0.101 -> 10.245.255.11 SIP Status: 401 Unauthorized (0 bindings)
0.043199 10.245.255.11 -> 213.148.0.101 SIP Request: REGISTER sip:213.148.0.101
0.043370 213.148.0.101 -> 10.245.255.11 SIP Status: 403 Forbidden (0 bindings)
59.850551 10.245.255.11 -> 213.148.0.101 SIP Request: REGISTER sip:213.148.0.101
59.850863 213.148.0.101 -> 10.245.255.11 SIP Status: 401 Unauthorized (0 bindings)
59.889533 10.245.255.11 -> 213.148.0.101 SIP Request: REGISTER sip:213.148.0.101
59.889790 213.148.0.101 -> 10.245.255.11 SIP Status: 403 Forbidden (0 bindings)
Это не снифер, это лог.
Содержимого сигнальных пакетов не видно, но и так ясно, что не проходит авторизация пользователя.
См. настройки авторизации.
В asterisk консоли набрать:
sip set debug on
Дальше ждать сообщений REGISTER и INVITE и выложить их сюда.
В asterisk консоли набрать:
sip set debug on
Дальше ждать сообщений REGISTER и INVITE и выложить их сюда.
sip set debug on ничего не дал, но есть вот это.
Frame 1 (441 bytes on wire, 441 bytes captured)
Arrival Time: May 27, 2014 11:16:44.700443000
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 441 bytes
Capture Length: 441 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
Ethernet II, Src: bc:16:65:c5:89:bf (bc:16:65:c5:89:bf), Dst: AsustekC_7c:d4:3f (20:cf:30:7c:d4:3f)
Destination: AsustekC_7c:d4:3f (20:cf:30:7c:d4:3f)
Address: AsustekC_7c:d4:3f (20:cf:30:7c:d4:3f)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: bc:16:65:c5:89:bf (bc:16:65:c5:89:bf)
Address: bc:16:65:c5:89:bf (bc:16:65:c5:89:bf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 10.245.255.11 (10.245.255.11), Dst: 213.148.0.101 (213.148.0.101)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 427
Identification: 0x13a1 (5025)
Flags: 0x02 (Don’t Fragment)
0.. = Reserved bit: Not Set
.1. = Don’t fragment: Set
..0 = More fragments: Not Set
Fragment offset: 0
Time to live: 250
Protocol: UDP (0x11)
Header checksum: 0x8ba6 [correct]
[Good: True]
[Bad : False]
Source: 10.245.255.11 (10.245.255.11)
Destination: 213.148.0.101 (213.148.0.101)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Source port: sip (5060)
Destination port: sip (5060)
Length: 407
Checksum: 0x0bb1 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Session Initiation Protocol
Request-Line: REGISTER sip:213.148.0.101 SIP/2.0
Method: REGISTER
Request-URI: sip:213.148.0.101
Request-URI Host Part: 213.148.0.101
[Resent Packet: False]
Message Header
From: <sip:4999656014>;tag=dadfc0-af5ff0b-13c4-40030-9ea-1ada4f24-9ea
SIP from address: sip:4999656014
SIP from address Host Part: 4999656014
SIP tag: dadfc0-af5ff0b-13c4-40030-9ea-1ada4f24-9ea
To: <sip:4999656014>
SIP to address: sip:4999656014
SIP to address Host Part: 4999656014
Call-ID: cf3a7c-af5ff0b-13c4-40030-9ea-6d147e1e-9ea
CSeq: 1 REGISTER
Sequence Number: 1
Method: REGISTER
Via: SIP/2.0/UDP 10.245.255.11:5060;branch=z9hG4bK-9ea-26bd08-eaf10dd
Transport: UDP
Sent-by Address: 10.245.255.11
Sent-by port: 5060
Branch: z9hG4bK-9ea-26bd08-eaf10dd
Max-Forwards: 70
Supported: 100rel,timer,replaces
Contact: <sip:4999656014@10.245.255.11>
Contact Binding: <sip:4999656014@10.245.255.11>
URI: <sip:4999656014@10.245.255.11>
SIP contact address: sip:4999656014@10.245.255.11
Expires: 600
Content-Length: 0
Frame 2 (589 bytes on wire, 589 bytes captured)
Arrival Time: May 27, 2014 11:16:44.700827000
[Time delta from previous captured frame: 0.000384000 seconds]
[Time delta from previous displayed frame: 0.000384000 seconds]
[Time since reference or first frame: 0.000384000 seconds]
Frame Number: 2
Frame Length: 589 bytes
Capture Length: 589 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
Ethernet II, Src: AsustekC_7c:d4:3f (20:cf:30:7c:d4:3f), Dst: bc:16:65:c5:89:bf (bc:16:65:c5:89:bf)
Destination: bc:16:65:c5:89:bf (bc:16:65:c5:89:bf)
Address: bc:16:65:c5:89:bf (bc:16:65:c5:89:bf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: AsustekC_7c:d4:3f (20:cf:30:7c:d4:3f)
Address: AsustekC_7c:d4:3f (20:cf:30:7c:d4:3f)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 213.148.0.101 (213.148.0.101), Dst: 10.245.255.11 (10.245.255.11)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 575
Identification: 0x6472 (25714)
Flags: 0x00
0.. = Reserved bit: Not Set
.0. = Don’t fragment: Not Set
..0 = More fragments: Not Set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0x3442 [correct]
[Good: True]
[Bad : False]
Source: 213.148.0.101 (213.148.0.101)
Destination: 10.245.255.11 (10.245.255.11)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Source port: sip (5060)
Destination port: sip (5060)
Length: 555
Checksum: 0xe236 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Session Initiation Protocol
Status-Line: SIP/2.0 401 Unauthorized
Status-Code: 401
[Resent Packet: False]
[Request Frame: 1]
[Response Time (ms): 0]
Message Header
Via: SIP/2.0/UDP 10.245.255.11:5060;branch=z9hG4bK-9ea-26bd08-eaf10dd;received=10.245.255.11;rport=5060
Transport: UDP
Sent-by Address: 10.245.255.11
Sent-by port: 5060
Branch: z9hG4bK-9ea-26bd08-eaf10dd
Received: 10.245.255.11
RPort: 5060
From: <sip:4999656014>;tag=dadfc0-af5ff0b-13c4-40030-9ea-1ada4f24-9ea
SIP from address: sip:4999656014
SIP from address Host Part: 4999656014
SIP tag: dadfc0-af5ff0b-13c4-40030-9ea-1ada4f24-9ea
To: <sip:4999656014>;tag=as737e6f3f
SIP to address: sip:4999656014
SIP to address Host Part: 4999656014
SIP tag: as737e6f3f
Call-ID: cf3a7c-af5ff0b-13c4-40030-9ea-6d147e1e-9ea
CSeq: 1 REGISTER
Sequence Number: 1
Method: REGISTER
Server: Asterisk PBX 10.12.3
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm=“wintera”, nonce=“197d3b65”
Authentication Scheme: Digest
Algorithm: MD5
Realm: “wintera”
Nonce Value: “197d3b65”
Content-Length: 0
Обратите внимание на From! <sip:4999656014>, а должно бы быть 4999656014@213.148.0.101, я полагаю. Похоже, вы не сделали то, о чем я вам вчера писал.
Опять подниму вопрос о Firewall IP Address, который не прописан. 10.245.255.11 - локальный адрес?
Кстати, а что это за логи? Где сняты?
Обратите внимание на From! <sip:4999656014>, а должно бы быть 4999656014@213.148.0.101, я полагаю. Похоже, вы не сделали то, о чем я вам вчера писал.
логи старые, до того как я поменял когда вы сказали. лог с севера астера.
Опять подниму вопрос о Firewall IP Address, который не прописан. 10.245.255.11 - локальный адрес?
Дрон - 28 Май 2014 03:23 P.M.
Вы там все адреса заляпали. Астериск за NAT по отношению к плате VOIB? Если да, то почему в настройках платы не указан Firewall IP Address?
стоит dlink потом cisco 5811 разрешения есть, Firewall отсутствует.
Проброс осуществляется напрямую.
Проброс осуществляется напрямую.
Это как??? Пишите уже так, чтобы не задавать уточняющих вопросов.
Видит Астериск, именно, 10.245.255.11?