grandstream phones constantly ringing after update

Status
Not open for further replies.
Grandstream GXP2130 1.0.9.58 connects fine to two 3CX v.15.5 SP3 (15.5.8801.3) build on Windows 10 Pro and Debian 8 though LAN option. If I choose STUN and change Provisioning URL on the phone, it takes a new template, but extension is not register. What is different in LAN and STUN templates for Grandstream phone? Yealink T23G works fine with the same.

02/17/2018 5:10:26 PM - [CM102001]: Authentication failed for AuthFail Recv Req REGISTER from [IP address]:5065 ***
Reason: Credentials don't match, check that authorization-ID and password match the ones in extension settings
 
Grandstream GXP2130 1.0.9.58 connects fine to two 3CX v.15.5 SP3 (15.5.8801.3) build on Windows 10 Pro and Debian 8 though LAN option. If I choose STUN and change Provisioning URL on the phone, it takes a new template, but extension is not register. What is different in LAN and STUN templates for Grandstream phone? Yealink T23G works fine with the same.

02/17/2018 5:10:26 PM - [CM102001]: Authentication failed for AuthFail Recv Req REGISTER from [IP address]:5065 ***
Reason: Credentials don't match, check that authorization-ID and password match the ones in extension settings

This is the part of the 3CX template that sets the sip server parameter on the phone when using STUN mode
Code:
    {IF network=REMOTESTUN}
    <!-- SIP Server configuration for remote using stun mode - External IP Address -->
    <P47>%%pbx_ip%%:%%param::sipport%%</P47>
    <!-- Outbound Proxy - The "P48" field contains the ip address and SIP port of the SIP Outbound Proxy - in this case 3CXPS. The "pbx_ip" and "param::sipport" variables will be replaced by the IP Address and SIP Port of 3CXPS. -->
    <P48></P48>
    <!-- Local SIP port (default 5060) -->
    <P40>%%phonesipport%%</P40>
    <!-- NAT Traversal. 0 - no, 1 - STUN, 2 - keep alive, 3 - UPnP, 4 - Auto, 5 - VPN -->
    <P52>1</P52>
    {ENDIF}
which in my opinion has a bug and should be corrected to
Code:
    {IF network=REMOTESTUN}
    <!-- SIP Server configuration for remote using stun mode - External IP Address -->
    <P47>%%param::PBXPUBLICIP%%:%%param::sipport%%</P47>
    <!-- Outbound Proxy - The "P48" field contains the ip address and SIP port of the SIP Outbound Proxy - in this case 3CXPS. The "pbx_ip" and "param::sipport" variables will be replaced by the IP Address and SIP Port of 3CXPS. -->
    <P48></P48>
    <!-- Local SIP port (default 5060) -->
    <P40>%%phonesipport%%</P40>
    <!-- NAT Traversal. 0 - no, 1 - STUN, 2 - keep alive, 3 - UPnP, 4 - Auto, 5 - VPN -->
    <P52>1</P52>
    {ENDIF}
 
This is the part of the 3CX template that sets the sip server parameter on the phone when using STUN mode
Code:
    {IF network=REMOTESTUN}
    <!-- SIP Server configuration for remote using stun mode - External IP Address -->
    <P47>%%pbx_ip%%:%%param::sipport%%</P47>
    <!-- Outbound Proxy - The "P48" field contains the ip address and SIP port of the SIP Outbound Proxy - in this case 3CXPS. The "pbx_ip" and "param::sipport" variables will be replaced by the IP Address and SIP Port of 3CXPS. -->
    <P48></P48>
    <!-- Local SIP port (default 5060) -->
    <P40>%%phonesipport%%</P40>
    <!-- NAT Traversal. 0 - no, 1 - STUN, 2 - keep alive, 3 - UPnP, 4 - Auto, 5 - VPN -->
    <P52>1</P52>
    {ENDIF}
which in my opinion has a bug and should be corrected to
Code:
    {IF network=REMOTESTUN}
    <!-- SIP Server configuration for remote using stun mode - External IP Address -->
    <P47>%%param::PBXPUBLICIP%%:%%param::sipport%%</P47>
    <!-- Outbound Proxy - The "P48" field contains the ip address and SIP port of the SIP Outbound Proxy - in this case 3CXPS. The "pbx_ip" and "param::sipport" variables will be replaced by the IP Address and SIP Port of 3CXPS. -->
    <P48></P48>
    <!-- Local SIP port (default 5060) -->
    <P40>%%phonesipport%%</P40>
    <!-- NAT Traversal. 0 - no, 1 - STUN, 2 - keep alive, 3 - UPnP, 4 - Auto, 5 - VPN -->
    <P52>1</P52>
    {ENDIF}
And it doesn't seem to be the only bug. Same error in the part of the template that set the stun server.
Code:
    {IF network=REMOTESTUN}
    <!-- Local RTP port. Default is 5004 -->
    <!-- Number: 1024 - 65535. Must be even number -->
    <!-- Mandatory -->
    <P39>%%rtp_port_min%%</P39>
    <!-- STUN server -->
    <!-- String -->
    <P76>%%pbx_ip%%:%%param::sipport%%</P76>
    {ENDIF}
which should look like
Code:
    {IF network=REMOTESTUN}
    <!-- Local RTP port. Default is 5004 -->
    <!-- Number: 1024 - 65535. Must be even number -->
    <!-- Mandatory -->
    <P39>%%rtp_port_min%%</P39>
    <!-- STUN server -->
    <!-- String -->
    <P76>%%param::PBXPUBLICIP%%:%%param::sipport%%</P76>
    {ENDIF}

I have not reviewed the template more to know if there are still more problems but the phone should work correctly if those two things are corrected.
 
  • Like
Reactions: Noob
Grandstream GXP2130 1.0.9.58 connects fine to two 3CX v.15.5 SP3 (15.5.8801.3) build on Windows 10 Pro and Debian 8 though LAN option. If I choose STUN and change Provisioning URL on the phone, it takes a new template, but extension is not register. What is different in LAN and STUN templates for Grandstream phone? Yealink T23G works fine with the same.

02/17/2018 5:10:26 PM - [CM102001]: Authentication failed for AuthFail Recv Req REGISTER from [IP address]:5065 ***
Reason: Credentials don't match, check that authorization-ID and password match the ones in extension settings


Hi,
Try to check the 3CX firewall. Usually when changing passwords or settings on phones, it gives authentication error because it blocks the associated IP. Adds the firewall's safe list to the range of IP's that are associated with the phones. If they are remote connections it adds public IP of the remote site to the firewall whitelist.

and

if the phones have the same network as the server, the URL LINK must be the IP of the server
Ex:

Sip server

192.168.x.x: 5001

if it is outside the same network segment the url link must be

Ex:

Sip server

company.3cx.eu
 
Last edited:
Hi,
Try to check the 3CX firewall. Usually when changing passwords or settings on phones, it gives authentication error because it blocks the associated IP. Adds the firewall's safe list to the range of IP's that are associated with the phones. If they are remote connections it adds public IP of the remote site to the firewall whitelist.

and

if the phones have the same network as the server, the URL LINK must be the IP of the server
Ex:

Sip server

192.168.x.x: 5001

if it is outside the same network segment the url link must be

Ex:

Sip server

company.3cx.eu


You are right, when a phone tries to register 3CX places its Public IP to Blacklist. I manually allowed such IPs.
When I change the phone Privisioning URL from LAN template to STUN template, it changes SIP server with its name like 3cx.us.com:5060 insted of LAN address, but Extention are not registered(
Also, I have mentioned that GXP2130 doesn't give me a prompt after rebooting where I should enter username (my extension) and password (Voicemail PIN)
 
You are right, when a phone tries to register 3CX places its Public IP to Blacklist. I manually allowed such IPs.
When I change the phone Privisioning URL from LAN template to STUN template, it changes SIP server with its name like 3cx.us.com:5060 insted of LAN address, but Extention are not registered(
Also, I have mentioned that GXP2130 doesn't give me a prompt after rebooting where I should enter username (my extension) and password (Voicemail PIN)

Probably the phones are by DHCP, every time you reboot the IP changes, you have to see which new IP is associated with each phone and try for another browser
 
1. Choosing Attended Transfer in 3CX provisioning instead of default BlindTransfer does not work. When you try to transfer, the only options on soft buttons are "BlindTxFr" so there seems to be no way to do an attended transfer.
On phone web configuration you have to go into Settings->Call Features. Search for the option Attended transfer mode and set its value to Dynamic.

From template, if I'm not wrong, that would be P number 1376 which value must be set to 1.
Code:
    <!-- Attended Transfer Mode. 0 - Static, 1 - Dynamic. Default is 0 -->
    <!-- Number: 0, 1 -->
    <!-- Mandatory -->
    <P1376>1</P1376>
What you configure on 3CX phone provisioning form is just the transfer method to use on VPKs.

2. The PC Port is now DISABLED by default. I tried re-enabling directly in phone web pages but there are 3 options: Enabled, Disabled and Mirror. Unfortunately I didnt have any luck getting any of them to re-enable the PC Port and had to resort to connecting via a switch.
You have to set it to enable. Mirror means that you want all network packages on the LAN interface to go through the PC port too. That's something you may want to use for debugging but not suggested if you want to use PC port.

I'm not using it but maybe it needs a reboot after enable.
 
Last edited:
Probably the phones are by DHCP, every time you reboot the IP changes, you have to see which new IP is associated with each phone and try for another browser
Yes, the phone uses DHCP in LAN, but I connect to 3CX using remoteSTUN mode and 3CX blacklist only my Public IP which is in white list now.
If I setup GXP2130 using LAN mode, it works fine (VPN to 3CX in Google Cloud)

I created a custom grandstream template and made recommended changes, reset MC01, but it doesn't help
 
Sorry, for my English

I solved the problem on my grandstream 1620 and 2130 phones

but most of my phones are 1450, and I can not find a fix for them, so far they have not caused any problems.

I invested a lot in this 3cx solution, and when I implemented everything it was compatible
how you adop the GXP2130? my phones are on 1.0.5.33 firmware
 
Status
Not open for further replies.

Latest Posts

Forum statistics

Threads
111,884
Messages
589,542
Members
164,742
Latest member
Zain101