Inbound from PSTN no Authentication

Discussion in '3CX Phone System - General' started by slickric01, Jun 25, 2008.

Thread Status:
Not open for further replies.
  1. slickric01

    Joined:
    Jun 25, 2008
    Messages:
    6
    Likes Received:
    0
    Hi,

    We're evaluating 3CX and so far we're very impressed. We're working on testing our current T1 using a CIsco 1760 we alreay have in place. After some tweaking, we've managed to get the outbound calls working. We're hitting a wall with inbound. The way our Cisco is configured is to not use authentication.

    We've configured the SPTN gateway in 3cx to not use authentication. We then had some errors in the logs about not identifying the source ([CM302001]: Authorization system can not identify source of...). We've subsequently gotten those errors to disappear.

    According to all of our settings, the incoming call should now work. We have a DID set and evrything looks good. Wehn we test it, all the caller hears is ringing. There are no log entries in the Server Status screen. We captured some packets and it seems that the server is receiving the invite and challenging with a SIP 407 Proxy Authentication required. In the 3CXPhoneSystem.trace.log I have the following lines:

    12:38:24.875|.\ServerAuthManager.cxx(48)|Trace5|Resip|::ResipLogger:ServerAuth requested info (requiresChallenge) SipReq: INVITE 6749@10.1.10.108:5060 tid=1343125 cseq=INVITE contact=9147506711@10.1.10.119:5060 / 101 from(wire)<br>
    12:38:24.875|.\CM_Stack.cpp(192)|Trace5|SipStack|CallMgr::Stack::isMyExternalIP:Compare IPs: incoming=10.1.10.119; external=65.161.85.50<br>
    12:38:24.875|.\CM_Stack.cpp(202)|Trace5|SipStack|CallMgr::Stack::isMyExternalIP:IPs do not match!<br>
    12:38:25.187|.\ServerAuthManager.cxx(64)|Trace5|Resip|::ResipLogger:ServerAuth got ChallengeInfo ChallengeInfo 0 : 1<br>
    12:38:25.187|.\ServerAuthManager.cxx(394)|Trace5|Resip|::ResipLogger:Sending challenge to SipReq: INVITE 6749@10.1.10.108:5060 tid=1343125 cseq=INVITE contact=9147506711@10.1.10.119:5060 / 101 from(wire)<br>
    12:38:25.187|.\ServerAuthManager.cxx(84)|Trace5|Resip|::ResipLogger:ServerAuth challenged request (after async) SipReq: INVITE 6749@10.1.10.108:5060 tid=1343125 cseq=INVITE contact=9147506711@10.1.10.119:5060 / 101 from(wire)<br>

    Shouldn't the server not be challenging if the source identifier matches?

    What am I missing?

    Thanks.
    Eric
     
  2. archie

    archie Well-Known Member
    3CX Support

    Joined:
    Aug 18, 2006
    Messages:
    1,299
    Likes Received:
    0
    PBX will challenge in any case - it is done due to security reason which i will not explain here. But if you have left password blank - it will accept any authentication.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. slickric01

    Joined:
    Jun 25, 2008
    Messages:
    6
    Likes Received:
    0
    If that's true, what else can I see in the logs as to why it's not ringing the extension after the challenge? Is there a way to turn up logging?

    Thanks,
    Eric
     
  4. slickric01

    Joined:
    Jun 25, 2008
    Messages:
    6
    Likes Received:
    0
    I'm taking another go at this 9 months later. Under the trunk advanced settings, I have "Require Authentication" set to do not require. On my cisco T1 gateway, i have no sip-ua settings since I'd like this to work with no authentication.

    Even with the above advanced setting, I still see a 407 Proxy Authentication Required in the trace.

    Is there any way to allow anonymous SIP connections as long as they match destination extensions?

    Thanks,
    Eric
     
  5. naluri2003

    Joined:
    May 31, 2011
    Messages:
    3
    Likes Received:
    0
    Hi,

    Did you eventually get a solution to this problem ?
     
  6. star1

    Joined:
    Apr 7, 2010
    Messages:
    40
    Likes Received:
    0
    No. Never got it working. Ended up switch to a Patton 4960.

    -Eric
     
Thread Status:
Not open for further replies.