Добрый день!
Прошу помощи в решении возникшей проблемы.Схема: CME(2911) -> cisco2811 -> SIP-Prov.
CME вызовы исходящие/входящие не работают. Не работает NAT или работает не правильно?!
CME:
voice service voip
allow-connections sip to sip
sip
. . .
interface GigabitEthernet0/2
ip address 10.4.0.5 255.255.0.0
duplex auto
speed auto
. . .
ip route 0.0.0.0 0.0.0.0 10.4.0.1
. . .
sip-ua
credentials username 12345 password vvv realm permngn.usi.ru
authentication username 12345 password vvv
no remote-party-id
retry invite 3
retry register 10
timers register 100
registrar dns:permngn.usi.ru expires 3600
sip-server dns:permngn.usi.ru
notify telephone-event max-duration 500
connection-reuse
host-registrar
presence enable
notify ignore substate
. . .
dial-peer voice 6 voip
description Mezhgor
translation-profile outgoing OUT
destination-pattern 8..........
session protocol sipv2
session target sip-server
voice-class codec 1
dtmf-relay h245-alphanumeric
no vad
CME шлюз VoIP провайдера видит и по адресу и по имени. Регистрация проходит успешно.
sh sip-ua reg sta
_______________________________________________________________________
Line peer expires(sec) registered P-Associated-URI
============ ============= ============ =========== ================
27006 -1 1857 yes
_________________________________________________________________________
cisco2811 шлюз в интернет:
interface FastEthernet0/0
description To ISP_FW_OUTSIDE
ip address xxx.yyy.zzz.18 255.255.255.252
ip access-group 160 in
ip nbar protocol-discovery
ip inspect SDM_LOW out
ip nat outside
ip virtual-reassembly in max-reassemblies 64
duplex full
speed 100
interface FastEthernet0/1
description To DMZ_FW_INSIDE
ip address xxx.yyy.zzz.193 255.255.255.192
ip access-group 170 in
ip nat inside
ip virtual-reassembly in
duplex full
speed 100
ip nat inside source static 10.4.0.5 xxx.yyy.zzz.214
. . .
access-list 160 permit udp host 62.148.237.145 host xxx.yyy.zzz.214 eq 5060
access-list 170 permit ip any any
deb ccsip calls
________________________________________________________________
Mar 23 12:53:41: //152/C0B7330D80EF/SIP/Call/sipSPICallInfo:
The Call Setup Information is:
Call Control Block (CCB) : 0x314B1780
State of The Call : STATE_DEAD
TCP Sockets Used : NO
Calling Number : 12345
Called Number : 8912xxxxxxx
Source IP Address (Sig ): 10.4.0.5
Destn SIP Req Addr:Port : 62.148.237.145:5060
Destn SIP Resp Addr:Port : 62.148.237.145:5060
Destination Name : permngn.usi.ru
Mar 23 12:53:41: //152/C0B7330D80EF/SIP/Call/sipSPIMediaCallInfo:
Number of Media Streams: 1
Media Stream : 1
Negotiated Codec : No Codec
Negotiated Codec Bytes : 0
Nego. Codec payload : 255 (tx), 255 (rx)
Negotiated Dtmf-relay : 0
Dtmf-relay Payload : 0 (tx), 0 (rx)
Source IP Address (Media): 10.4.0.5
Source IP Port (Media): 18606
Destn IP Address (Media): -
Destn IP Port (Media): 0
Orig Destn IP Address:Port (Media): [ - ]:0
Mar 23 12:53:41: //152/C0B7330D80EF/SIP/Call/sipSPICallInfo:
Disconnect Cause (CC) : 127
Disconnect Cause (SIP) : 407
________________________________________________________________
deb ccsip messages
________________________________________________________________
Mar 23 13:05:51: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
INVITE sip:89124815735@permngn.usi.ru:5060 SIP/2.0
Via: SIP/2.0/UDP 10.4.0.5:5060;branch=z9hG4bK71B5B
From: <sip:27006@permngn.usi.ru>;tag=43D94-1F15
To: <sip:8912xxxxxxx@permngn.usi.ru>
Date: Fri, 23 Mar 2012 07:05:51 GMT
Call-ID: 7568D68B-73ED11E1-801487A4-1000A545@10.4.0.5
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Min-SE: 1800
Cisco-Guid: 1949764963-1944916449-2148501412-0268477765
User-Agent: Cisco-SIPGateway/IOS-12.x
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
CSeq: 101 INVITE
Max-Forwards: 70
Timestamp: 1332486351
Contact: <sip:27006@10.4.0.5:5060>
Expires: 180
Allow-Events: telephone-event
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 239
v=0
o=CiscoSystemsSIP-GW-UserAgent 5744 1087 IN IP4 10.4.0.5
s=SIP Call
c=IN IP4 10.4.0.5
t=0 0
m=audio 31736 RTP/AVP 8 0 18
c=IN IP4 10.4.0.5
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=yes
Mar 23 13:05:51: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 100 Trying
From: <sip:27006@permngn.usi.ru>;tag=43D94-1F15
To: <sip:8912xxxxxxx@permngn.usi.ru>
Call-ID: 7568D68B-73ED11E1-801487A4-1000A545@10.4.0.5
CSeq: 101 INVITE
Via: SIP/2.0/UDP 10.4.0.5:5060;received=xxx.yyy.zzz.18;rport=1061;branch=z9hG4bK71B5B
Content-Length: 0
Mar 23 13:05:51: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 407 Proxy Authentication Required
From: <sip:27006@permngn.usi.ru>;tag=43D94-1F15
To: <sip:8912xxxxxxx@permngn.usi.ru>;tag=1559733666
Call-ID: 7568D68B-73ED11E1-801487A4-1000A545@10.4.0.5
CSeq: 101 INVITE
Via: SIP/2.0/UDP 10.4.0.5:5060;received=xxx.yyy.zzz.18;rport=1061;branch=z9hG4bK71B5B
contact: <sip:8912xxxxxxx@permngn.usi.ru:5060;maddr=62.148.237.145>
supported: com.nortelnetworks.firewall,p-3rdpartycontrol,nosec,join
proxy-authenticate: Digest realm="Realm",nonce="MTMzMjQ4NjMwNjQ1MjZjZTk3ZDEwZWY4ODc0ZWNkYTYzMjNiNmQ0MDJiNzMz",stale=false,algorit
hm=MD5,qop="auth,auth-int"
timestamp: 1332486351
Content-Length: 0
Mar 23 13:05:51: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
ACK sip:8912xxxxxxx@permngn.usi.ru:5060 SIP/2.0
Via: SIP/2.0/UDP 10.4.0.5:5060;branch=z9hG4bK71B5B
From: <sip:27006@permngn.usi.ru>;tag=43D94-1F15
To: <sip:8912xxxxxxx@permngn.usi.ru>;tag=1559733666
Date: Fri, 23 Mar 2012 07:05:51 GMT
Call-ID: 7568D68B-73ED11E1-801487A4-1000A545@10.4.0.5
Max-Forwards: 70
CSeq: 101 ACK
Allow-Events: telephone-event
Content-Length: 0
Mar 23 13:05:51: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
INVITE sip:8912xxxxxxx@permngn.usi.ru:5060 SIP/2.0
Via: SIP/2.0/UDP 10.4.0.5:5060;branch=z9hG4bK87FE
From: <sip:27006@permngn.usi.ru>;tag=43D94-1F15
To: <sip:8912xxxxxxx@permngn.usi.ru>
Date: Fri, 23 Mar 2012 07:05:51 GMT
Call-ID: 7568D68B-73ED11E1-801487A4-1000A545@10.4.0.5
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Min-SE: 1800
Cisco-Guid: 1949764963-1944916449-2148501412-0268477765
User-Agent: Cisco-SIPGateway/IOS-12.x
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
CSeq: 102 INVITE
Max-Forwards: 70
Timestamp: 1332486351
Contact: <sip:27006@10.4.0.5:5060>
Expires: 180
Allow-Events: telephone-event
Proxy-Authorization: Digest username="27006",realm="Realm",uri="sip:89124815735@permngn.usi.ru:5060",response="b039c0a386e85ccbc1
d6b26dd83d647c",nonce="MTMzMjQ4NjMwNjQ1MjZjZTk3ZDEwZWY4ODc0ZWNkYTYzMjNiNmQ0MDJiNzMz",cnonce="DB14E56E",qop=auth-int,algorithm=MD5
,nc=00000001
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 239
v=0
o=CiscoSystemsSIP-GW-UserAgent 5744 1087 IN IP4 10.4.0.5
s=SIP Call
c=IN IP4 10.4.0.5
t=0 0
m=audio 31736 RTP/AVP 8 0 18
c=IN IP4 10.4.0.5
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=yes
Mar 23 13:05:51: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 100 Trying
From: <sip:27006@permngn.usi.ru>;tag=43D94-1F15
To: <sip:8912xxxxxxx@permngn.usi.ru>
Call-ID: 7568D68B-73ED11E1-801487A4-1000A545@10.4.0.5
CSeq: 102 INVITE
Via: SIP/2.0/UDP 10.4.0.5:5060;received=xxx.yyy.zzz.18;rport=1061;branch=z9hG4bK87FE
Content-Length: 0
Mar 23 13:05:51: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 407 Proxy Authentication Required
From: <sip:27006@permngn.usi.ru>;tag=43D94-1F15
To: <sip:8912xxxxxxx@permngn.usi.ru>;tag=1813279223
Call-ID: 7568D68B-73ED11E1-801487A4-1000A545@10.4.0.5
CSeq: 102 INVITE
Via: SIP/2.0/UDP 10.4.0.5:5060;received=xxx.yyy.zzz.18;rport=1061;branch=z9hG4bK87FE
contact: <sip:8912xxxxxxx@permngn.usi.ru:5060;maddr=62.148.237.145>
supported: com.nortelnetworks.firewall,p-3rdpartycontrol,nosec,join
proxy-authenticate: Digest realm="Realm",nonce="MTMzMjQ4NjMwNjQ1MjZjZTk3ZDEwZWY4ODc0ZWNkYTYzMjNiNmQ0MDJiNzMz",stale=false,algorit
hm=MD5,qop="auth,auth-int"
timestamp: 1332486351
Content-Length: 0
Mar 23 13:05:51: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
ACK sip:8912xxxxxxx@permngn.usi.ru:5060 SIP/2.0
Via: SIP/2.0/UDP 10.4.0.5:5060;branch=z9hG4bK87FE
From: <sip:27006@permngn.usi.ru>;tag=43D94-1F15
To: <sip:8912xxxxxxx@permngn.usi.ru>;tag=1813279223
Date: Fri, 23 Mar 2012 07:05:51 GMT
Call-ID: 7568D68B-73ED11E1-801487A4-1000A545@10.4.0.5
Max-Forwards: 70
CSeq: 102 ACK
Allow-Events: telephone-event
Content-Length: 0
____________________________________________________________________
Если сделать интерфейсу СМЕ "белый" IP: xxx.yyy.zzz.214 то все работает замечательно.
Помоги чем сможете...
Вариант для распечатки
