Toggle sidebar Toggle sidebar

Trouble getting phone to provision

Status
Not open for further replies.

burt

Free User
Joined
Aug 24, 2020
Messages
8
Reaction score
0
Phone: Cisco SPA525G2, firmware is 7.6.1
3CX version 16
Hosted by 3CX

First off, I have using the 3CX hosting account, so I don't have access to the file system for the certain things like placing the phone firmware files in the provisioning folder. I did download and upgrade the firmware for this phone however directly on the phone with the firmware downloaded from 3CX. Essentially I can't get the phone to resync. I have tried using the instructions here:https://www.3cx.com/sip-phones/cisco-spa501g/ and here: https://www.3cx.com/sip-phones/cisco-spa/. I also tried directly on the phone itself via the "Profile Rule" option where I manally enter the url for the .xml file. It tries for about a minute then errors witht the message "Download Failed". I finally checked the Event logs in the 3CX system and I see the following:

SIP request (REGISTER) from 68.3.240.128 was rejected. Reason: Block WAN requests is ON. Message: REGISTER sip:128.199.14.46 SIP/2.0 Via: SIP/2.0/UDP 192.168.1.46:5060;branch=z9hG4bK-14292552;received=68.3.240.128 Max-Forwards: 70 Contact: "Desk" <sip:[email protected]:5060>;expires=3600 To: "Desk" <sip:[email protected]> From: "Desk" <sip:[email protected]>;tag=3ef2cd3acec939e8o0 Call-ID: [email protected] CSeq: 17487 REGISTER Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER, UPDATE Proxy-Authorization: Digest username="6776",realm="3CXPhoneSystem",nonce="414d53595f44901d44:073088b5d9392ddb4af86e455a83606a",uri="sip:128.199.14.46",algorithm=MD5,response="bee827b0f96fe119e251040105c655c5" Supported: replaces User-Agent: Cisco/SPA525G2-7.6.1 Content-Length: 0

Upon searching on the "Block WAN request" error, I then disabled the feature to "Disallow use of extension outside the LAN". Still no go.

I am running out of patience and options here and am hoping for a little help from someone. I am very new to this and just plowing through, but this roadblock is really slowing me down.
 
So, just to be clear, you have now allowed the extension to register outside of the LAN, and you still get the same log?
 
hmmm, well, I don't see updated messages in the log since I disabled that option. I just tried to reprovision is a couple differnet ways and still not getting anything updated in the log. I'm not sure what I'm doing differently.
 
So I realize now there is an activity log and an event log... weird. When I try to manually enter the settgins directly int the phone web interface and then save, I see this in the activity log:

08/24/2020 10:25:11 PM - [CM102001]: Authentication failed for AuthFail Recv Req REGISTER from 68.3.240.128:5060 tid=-d2b1abe0 [email protected]: REGISTER sip:ocb37.az.3cx.us SIP/2.0 Via: SIP/2.0/UDP 192.168.1.46:5060;branch=z9hG4bK-d2b1abe0;received=68.3.240.128 Max-Forwards: 70 Contact: "Desk1" <sip:[email protected]:5060>;expires=3600 To: "Desk1" <sip:[email protected].3cx.us> From: "Desk1" <sip:[email protected].3cx.us>;tag=15c7996c3a9e8b65o0 Call-ID: [email protected] CSeq: 58772 REGISTER Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER, UPDATE Proxy-Authorization: Digest username="6776",realm="3CXPhoneSystem",nonce="414d53595f44a0b713:4a9d61f06d9df861c840f52b2154e807",uri="sip:ocb37.az.3cx.us",algorithm=MD5,response="cf64b1e344b7ee615abc940e6361329e" Supported: replaces User-Agent: Cisco/SPA525G2-7.6.1 Content-Length: 0 ; Reason: Credentials don't match, check that authorization-ID and password match the ones in extension settings


Is the "Authorization ID and the "Authentication ID" the same thing? I am getting these from the "Phone Provsioning" tab via cut/paste, so I'm not sure why they would be wrong.
 
Look at the limitations https://www.3cx.com/Sip-Phones/Cisco-SPA/

These devices do not support stun , sbc setup, plus you need to copy some config files to the server

With the 3cx being hosted by 3cx, you are not going to get these to work

If you want to continue ,select another supported phone that works with SBC.

It has already been stated stun configurations will not get any support on this setup (3CX Hosted), as there are two many variables.
 
Last edited:
Thanks Saqqara. If it wont work, it wont work. I appreciate the help.
 
The SPA525G2 does , in fact support STUN, and having a (common Cisco/Linksys) GUI, are relatively easy to manually configure.

In your original post, you had only mentioned the SPA501G link, and I did not look over the log that closely to see that it was not, in fact, that set you were dealing with. They are different animals.
 
Last edited:
Leejor, I was trying to do it manually in the web interface but with no luck. Are there really files that need to be placed on the 3CX server though? That, I can not do because I am "hosted" with 3CX. Otherwise, I'd love to be able to keep this phone. I have tried putting the settings in manually based on some youtube videos I watched with no luck.. It seems like there is just a few settings needed and it appears quite simple.
 
Thanks Leejor. It is working. I did the following (not sure what was necessary, but it is working as far as I can tel):

In the SIP tab ->RTP Parameters

RTP Packet Size = 0.020

NAT Support Parameters

Handle VIA recieved = yes
Handle VIA rport = yes
Insert VIA recieved = yes
Insert VIA rport = yes

To use STUN

STUN Enable = yes
STUN server = stun.3cx.com (or any public STUN server)
EXT IP = blank

Then, under the Ext 1 settings I added the Proxy IP, a Display Name, the User ID is the Extension number, and the AuthID and Auth Password (as given by 3CX). Finally, it didn't work till I changed the setting to Use Auth ID: to YES.

Many thanks to everyone.
 
Status
Not open for further replies.

Latest Posts

Forum statistics

Threads
111,961
Messages
589,953
Members
164,862
Latest member
ARTipsadmin
3CX Logo Footer Copyright © Sitemap Privacy
Top Bottom