Hi, yall. As they say.
I haven't yet tried tried the changes I mentioned. The system is presently working,
apparently OK, via the new NAT server with the registration expires time set to 30s.
In reply to puddy. I'm not sure what you mean by the "info the 'phone is requesting".
The ATA sends a normal "register" message. To show what's going on, and to illustrate
the authentication difference for MisterW, here are extracts of the logs. Hopefully my
notes are helpful, they are to me.
This forum won't let me attach them as a text file, so it's another mammoth
post and you'll have to try to sort out the long lines and the wrong formatting in some places,
(some proxy-authorization and proxy-authenticate header fields are split over two lines, I can't get this
to come out right here, it's OK in Notepad) I'm afraid. It really needs a fixed width font for the notes to
look right.
Thanks all.
John.
Registration via the old NAT server
------------------------------------
Shows the default registration expiry time, 3600s, on the ATA; the server reply with it's time
of 30s and no authentication requirement. Everything works, all sweetness and light.
**My annotations are like this**
syslog server(port:514) started on Fri Jan 29 21:39:04 2010 **
RSE_DEBUG: reference domain:legacy-nat.plus.net ** These messages are
- ->194.165.60.134:5082 ** not part of SIP.
- ->194.165.60.134:5082 **
**This is the register request from my ATA**
REGISTER sip:sip.plus.net SIP/2.0
Via: SIP/2.0/UDP 192.168.100.4:5060;branch=z9hG4bK-10f58fc3
From: Anon <sip:nnnnnnn@sip.plus.net>;tag=b7ced3d32bab9beo0
To: Anon <sip:nnnnnnn@sip.plus.net>
Call-ID:
b6bf3e73-e8b44ef3@192.168.100.4CSeq: 36530 REGISTER
Max-Forwards: 70
Proxy-Authorization: Digest username="nnnnnnn",realm="newsip",nonce="4b63549e000129d0a9be922f13a9872b5f444cded893fe50",uri="sip:sip.plus.net",algorithm=MD5,response="c4d367576f7283d00239ea6b3673755b",qop=auth,nc=0000000d,cnonce="cdc939d7"
Contact: Anon <sip:nnnnnnn@192.168.100.4:5060>;expires=3600 ** This is the default set on the ATA
User-Agent: Linksys/SPA3102-3.2.6(GWa)
Content-Length: 0Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFERSupported: x-sipura
- <<194.165.60.134:5082(329) ** Not part of SIP.
- <<194.165.60.134:5082(329) **
**This is the reply from the registrar server - successful registration, valid for 30s**
SIP/2.0 200 OK
To: Anon<sip:nnnnnnn@sip.plus.net>;tag=63bd6513
From: Anon<sip:nnnnnnn@sip.plus.net>;tag=b7ced3d32bab9beo0
Via: SIP/2.0/UDP 192.168.100.4:5060;branch=z9hG4bK-10f58fc3
Call-ID:
b6bf3e73-e8b44ef3@192.168.100.4CSeq: 36530 REGISTER
Contact: Anon<sip:nnnnnnn@192.168.100.4:5060>;expires=30 ** This is the registrar server time,
Content-Length: 0 the ATA uses this**
- RegOK. NextReg in 28 (1) ** More debug & helpful stuff, not
RSE_DEBUG: unref domain, legacy-nat.plus.net ** part of SIP. Shows the ATA will
RSE_DEBUG: last unref for domain legacy-nat.plus.net ** register again in 28s. Just what we want.
====================================================================================================
Registration via the new NAT server
-----------------------------------
This time the ATA was set for 120s, the server replies with the same value, but incoming calls
will only connect for the first 30s (or so, see my previous caveat). Authentication is now used.
The "stale" parameter in the Proxy-Authorization header field of the 407 message seems to be
present only if the "expires" time is longer than 30s.
syslog server(port:514) started on Sat Jan 30 00:17:38 2010 **
RSE_DEBUG: reference domain:nat.plus.net ** Not SIP mesages.
- ->79.135.125.160:5082 **
- ->79.135.125.160:5082 **
**The register request**
REGISTER sip:sip.plus.net SIP/2.0Via: SIP/2.0/UDP 192.168.100.4:5060;branch=z9hG4bK-a8aa0698
From: Anon <sip:nnnnnnn@sip.plus.net>;tag=663a2ed481a573o0
To: Anon <sip:nnnnnnn@sip.plus.net>Call-ID:
b6bf3e73-e8b44ef3@192.168.100.4CSeq: 37105 REGISTERMax-Forwards: 70
Proxy-Authorization: Digest username="nnnnnnn",realm="newsip",nonce="4b637abd00002d81e3f9835345585889af8d9ae178eedb94",uri="sip:sip.plus.net",algorithm=MD5,response="cadf5375e50301a5c1f4c4d31ea4fffa",qop=auth,nc=00000002,cnonce="eba66a51"
Contact: Anon <sip:nnnnnnn@192.168.100.4:5060>;expires=120 ** My ATA set to 120s**
User-Agent: Linksys/SPA3102-3.2.6(GWa)
Content-Length: 0Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
Supported: x-sipura
- <<79.135.125.160:5082(531) ** Not part of
- <<79.135.125.160:5082(531) ** SIP
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.168.100.4:5060;rport=5060;received=87.115.43.31;branch=z9hG4bK-a8aa0698
From: Anon <sip:nnnnnnn@sip.plus.net>;tag=663a2ed481a573o0
To: Anon <sip:nnnnnnn@sip.plus.net>;tag=14594fa2c5ed7a6c6e0806b484dcbe6b-0d31
Call-ID: b6bf3e73-e8b44ef3@192.168.100.4CSeq: 37105 REGISTER
Proxy-Authenticate: Digest realm="newsip", nonce="4b637b3300003fb5b32a22b6d44a77d3fc39e3a54121851b", qop="auth", stale=true **The stale parameter**
Server: OpenSIPS (1.5.3-notls (i386/linux))Content-Length: 0
RSE_DEBUG: reference domain:nat.plus.net ** Not part of
- ->79.135.125.160:5082 ** SIP
- ->79.135.125.160:5082 **
REGISTER sip:sip.plus.net SIP/2.0Via: SIP/2.0/UDP 192.168.100.4:5060;branch=z9hG4bK-dfa6b95d
From: Anon <sip:nnnnnnn@sip.plus.net>;tag=663a2ed481a573o0
To: Anon <sip:nnnnnnn@sip.plus.net>
Call-ID:
b6bf3e73-e8b44ef3@192.168.100.4CSeq: 37106 REGISTER
Max-Forwards: 70
Proxy-Authorization: Digest username="nnnnnnn",realm="newsip",nonce="4b637b3300003fb5b32a22b6d44a77d3fc39e3a54121851b",uri="sip:sip.plus.net",algorithm=MD5,response="0730eb7891b8aa220ac34d75f6071a13",qop=auth,nc=00000001,cnonce="a6554c5d"
Contact: Anon <sip:nnnnnnn@192.168.100.4:5060>;expires=120
User-Agent: Linksys/SPA3102-3.2.6(GWa)
Content-Length: 0Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
Supported: x-sipura
- <<79.135.125.160:5082(434) ** Not part of
- <<79.135.125.160:5082(434) ** SIP
**The reply from the registrar, successful registration, valid for 120s!!**
SIP/2.0 200 OK
Via: SIP/2.0/UDP 192.168.100.4:5060;rport=5060;received=87.115.43.31;branch=z9hG4bK-dfa6b95d
From: Anon <sip:nnnnnnn@sip.plus.net>;tag=663a2ed481a573o0
To: Anon <sip:nnnnnnn@sip.plus.net>;tag=14594fa2c5ed7a6c6e0806b484dcbe6b-c724
Call-ID: b6bf3e73-e8b44ef3@192.168.100.4CSeq: 37106 REGISTER
Contact: <sip:nnnnnnn @192.168.100.4:5060>;expires=120 ** The server returns the same value as the original request, 60s minimum**
Server: OpenSIPS (1.5.3-notls (i386/linux))
Content-Length: 0
- RegOK. NextReg in 118 (1) ** Not a SIP message, but shows that the ATA won't register again
for 118s. Not what we want. It appears that incoming calls won't
be connected for the last 88s of this. If the ATA is set to 3600,
they wait 59m30s... maybe**
====================================================================================================