PDA

View Full Version : phone over IPSEC VPN



mabbott
03-26-2008, 09:38 AM
I have a phone I would like to use over an IPSEC VPN. The phone is (Snom 370) registered with the Quadro (4.1.52), but when I try to place a call, I get a "404 Not Found" from the Quadro. Calls from the phone configured without the VPN are working correctly. Below are the sip logs of my call attempt, there is nothing in the call controlling logs about the call.


0:10:35 Receive SIP message # (26/03/2008 14:10:35:159 GMT) # UDP # 1215 bytes # from: 192.168.100.57:1024 # to: 192.168.1.1:5060

***************************** SIP message buffer start *****************************
INVITE sip:00@192.168.1.1;user=phone SIP/2.0
Via: SIP/2.0/UDP 192.168.100.57:1025;branch=z9hG4bK-6s13pph6mac7;rport
From: "home" <sip:locext214@192.168.1.1>;tag=jm6b58qtmm
To: <sip:00@192.168.1.1;user=phone>
Call-ID: 3c3652dbe343-6594ph1jslyr
CSeq: 1 INVITE
Max-Forwards: 70
Contact: <sip:locext214@192.168.100.57:1025;line=6dv6j6gr>;flow-id=1
P-Key-Flags: resolution="31x13", keys="4"
User-Agent: snom370/7.1.30
Accept: application/sdp
Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE, PRACK, MESSAGE, INFO
Allow-Events: talk, hold, refer, call-info
Supported: timer, 100rel, replaces, callerid
Session-Expires: 3600;refresher=uas
Min-SE: 90
Content-Type: application/sdp
Content-Length: 477

v=0
o=root 389447470 389447470 IN IP4 192.168.100.57
s=call
c=IN IP4 192.168.100.57
t=0 0
m=audio 50228 RTP/AVP 0 8 9 2 3 18 4 101
a=crypto:1 AES_CM_128_HMAC_SHA1_32 inline:+Qa4r1L6x+oQJWpbxYE4GjiQSa5BenZqwxMdk3mA
a=rtpmap:0 pcmu/8000
a=rtpmap:8 pcma/8000
a=rtpmap:9 g722/8000
a=rtpmap:2 g726-32/8000
a=rtpmap:3 gsm/8000
a=rtpmap:18 g729/8000
a=rtpmap:4 g723/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=ptime:20
a=encryption:optional
a=sendrecv
***************************** SIP message buffer end ******************************

10:10:35 Try to send SIP message # (26/03/2008 14:10:35:165 GMT) # UDP # 271 bytes # from: 192.168.1.1:5060 # to: 192.168.100.57:1024

***************************** SIP message buffer start *****************************
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 192.168.100.57:1025;rport=1024;branch=z9hG4bK-6s13pph6mac7
To: <sip:00@192.168.1.1;user=phone>
From: "home" <sip:locext214@192.168.1.1>;tag=jm6b58qtmm
CSeq: 1 INVITE
Call-ID: 3c3652dbe343-6594ph1jslyr
Content-Length: 0

***************************** SIP message buffer end ******************************

10:10:35 TLayer::MsgToTU # Msg type: 51 # TID: 60567 # DID: 0
10:10:35 UACore::TLReqMsgProc # Got INVITE SIP request
10:10:35 Try to send SIP message # (26/03/2008 14:10:35:185 GMT) # UDP # 453 bytes # from: 192.168.1.1:5060 # to: 192.168.100.57:1024

***************************** SIP message buffer start *****************************
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.100.57:1025;rport=1024;branch=z9hG4bK-6s13pph6mac7
To: <sip:00@192.168.1.1;user=phone>
From: "home" <sip:locext214@192.168.1.1>;tag=jm6b58qtmm
CSeq: 1 INVITE
Call-ID: 3c3652dbe343-6594ph1jslyr
Server: Epygi Quadro SIP User Agent/v4.1.52 (QUADRO-2X)
WWW-Authenticate: Digest realm="quadro.epygi-config.loc",nonce="e321eb0c277cc578b45cc91fea3a9855",opaque="1206540635"
Content-Length: 0

***************************** SIP message buffer end ******************************

10:10:35 Receive SIP message # (26/03/2008 14:10:35:470 GMT) # UDP # 374 bytes # from: 192.168.100.57:1024 # to: 192.168.1.1:5060

***************************** SIP message buffer start *****************************
ACK sip:00@192.168.1.1;user=phone SIP/2.0
Via: SIP/2.0/UDP 192.168.100.57:1025;branch=z9hG4bK-6s13pph6mac7;rport
From: "home" <sip:locext214@192.168.1.1>;tag=jm6b58qtmm
To: <sip:00@192.168.1.1;user=phone>
Call-ID: 3c3652dbe343-6594ph1jslyr
CSeq: 1 ACK
Max-Forwards: 70
Contact: <sip:locext214@192.168.100.57:1025;line=6dv6j6gr>;flow-id=1
Content-Length: 0

***************************** SIP message buffer end ******************************

10:10:35 Receive SIP message # (26/03/2008 14:10:35:485 GMT) # UDP # 1446 bytes # from: 192.168.100.57:1024 # to: 192.168.1.1:5060

***************************** SIP message buffer start *****************************
INVITE sip:00@192.168.1.1;user=phone SIP/2.0
Via: SIP/2.0/UDP 192.168.100.57:1025;branch=z9hG4bK-7i42b437vpaa;rport
From: "home" <sip:locext214@192.168.1.1>;tag=jm6b58qtmm
To: <sip:00@192.168.1.1;user=phone>
Call-ID: 3c3652dbe343-6594ph1jslyr
CSeq: 2 INVITE
Max-Forwards: 70
Contact: <sip:locext214@192.168.100.57:1025;line=6dv6j6gr>;flow-id=1
P-Key-Flags: resolution="31x13", keys="4"
User-Agent: snom370/7.1.30
Accept: application/sdp
Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE, PRACK, MESSAGE, INFO
Allow-Events: talk, hold, refer, call-info
Supported: timer, 100rel, replaces, callerid
Session-Expires: 3600;refresher=uas
Min-SE: 90
Authorization: Digest username="locext214",realm="quadro.epygi-config.loc",nonce="e321eb0c277cc578b45cc91fea3a9855",uri="sip:00@192.168.1.1;user=phone",response="bef5207ebba346c730069ce0d5387d76",opaque="1206540635",algorithm=MD5
Content-Type: application/sdp
Content-Length: 477

v=0
o=root 389447470 389447470 IN IP4 192.168.100.57
s=call
c=IN IP4 192.168.100.57
t=0 0
m=audio 50228 RTP/AVP 0 8 9 2 3 18 4 101
a=crypto:1 AES_CM_128_HMAC_SHA1_32 inline:+Qa4r1L6x+oQJWpbxYE4GjiQSa5BenZqwxMdk3mA
a=rtpmap:0 pcmu/8000
a=rtpmap:8 pcma/8000
a=rtpmap:9 g722/8000
a=rtpmap:2 g726-32/8000
a=rtpmap:3 gsm/8000
a=rtpmap:18 g729/8000
a=rtpmap:4 g723/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=ptime:20
a=encryption:optional
a=sendrecv
***************************** SIP message buffer end ******************************

10:10:35 Try to send SIP message # (26/03/2008 14:10:35:491 GMT) # UDP # 271 bytes # from: 192.168.1.1:5060 # to: 192.168.100.57:1024

***************************** SIP message buffer start *****************************
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 192.168.100.57:1025;rport=1024;branch=z9hG4bK-7i42b437vpaa
To: <sip:00@192.168.1.1;user=phone>
From: "home" <sip:locext214@192.168.1.1>;tag=jm6b58qtmm
CSeq: 2 INVITE
Call-ID: 3c3652dbe343-6594ph1jslyr
Content-Length: 0

***************************** SIP message buffer end ******************************

10:10:35 TLayer::MsgToTU # Msg type: 51 # TID: 60568 # DID: 0
10:10:35 UACore::TLReqMsgProc # Got INVITE SIP request
10:10:35 SipSessDlg: # Call ID Info # SID: 5182052568620575267 # 10:10:35 SipID: 3c3652dbe343-6594ph1jslyr
10:10:35 SipSessDlg::ChangeSessTimerFlag # user locext214 registered on UA # SessionTimer = 0
10:10:35 SipSessDlg::ChangeSessTimerFlag # user locext214 # SessionTimer = 0
10:10:35 SipSessDlg::IncInviteProc # Got INVITE message # OID: 60569 # SID: 5182052568620575267
10:10:35 TargetQualifier::QualifyTargets # Try to qualify targets for dest 192.168.100.57 # OID: 60569
10:10:35 TargetQualifier::NatHandling # Don't need nat settings - nat disconnected # OID: 60569
10:10:35 UA --> CM # MakeCall # from: locext214@192.168.1.1:, to: 00, child: (empty), media exist, GUID: (empty) # ContactInfo: 192.168.100.57 # SID: 5182052568620575267
10:10:35 CM --> UA # OnReportError # Error: UserNotFound # SIP error: 0 # OID: 60569 # SID: 5182052568620575267
10:10:35 SipSessDlg::TerminateTransactions # OID: 60569 # SIPID: 3c3652dbe343-6594ph1jslyr # SID: 5182052568620575267
10:10:35 Try to send SIP message # (26/03/2008 14:10:35:572 GMT) # UDP # 382 bytes # from: 192.168.1.1:5060 # to: 192.168.100.57:1024

***************************** SIP message buffer start *****************************
SIP/2.0 404 Not Found
Via: SIP/2.0/UDP 192.168.100.57:1025;rport=1024;branch=z9hG4bK-7i42b437vpaa
To: <sip:00@192.168.1.1;user=phone>;tag=1203610155629312fb-6217-4edd-a599-870f0c7a1b43
From: "home" <sip:locext214@192.168.1.1>;tag=jm6b58qtmm
CSeq: 2 INVITE
Call-ID: 3c3652dbe343-6594ph1jslyr
Server: Epygi Quadro SIP User Agent/v4.1.52 (QUADRO-2X)
Content-Length: 0

***************************** SIP message buffer end ******************************

10:10:35 Receive SIP message # (26/03/2008 14:10:35:683 GMT) # UDP # 425 bytes # from: 192.168.100.57:1024 # to: 192.168.1.1:5060

***************************** SIP message buffer start *****************************
ACK sip:00@192.168.1.1;user=phone SIP/2.0
Via: SIP/2.0/UDP 192.168.100.57:1025;branch=z9hG4bK-7i42b437vpaa;rport
From: "home" <sip:locext214@192.168.1.1>;tag=jm6b58qtmm
To: <sip:00@192.168.1.1;user=phone>;tag=1203610155629312fb-6217-4edd-a599-870f0c7a1b43
Call-ID: 3c3652dbe343-6594ph1jslyr
CSeq: 2 ACK
Max-Forwards: 70
Contact: <sip:locext214@192.168.100.57:1025;line=6dv6j6gr>;flow-id=1
Content-Length: 0

***************************** SIP message buffer end ******************************


Edit: This was posted in the wrong Thread, the is involving a 2x

AramK
03-27-2008, 03:14 AM
Hi, it's hard to say something about this problem, as it's not clear how the IP-Phone is configured with Quadro and what is the IPSEC's setup. Please clarify if Snom370 is placed on Quadro LAN or WAN side. If it is placed in Quadro WAN, is it configured as a Remote Extensions ? If it is in Quadro LAN, is it configured manually or via Quadro P-n-P or Autoprovisioning. What kind of IPSEC VPN is there ? I see in the logs an attempt of calling to AA. Is it local AA, on which the phone is registered, or it is an AA of another Quadro ? Full logs from Quadro also will be very helpful to examine this case.