Voip Provider being challenged with 407

[fff]

My sip trunk provider (Telnet Worldwide in Michigan, telnetww.com) is complaining because my 3CX systems responds with a "407 proxy authentication required" every time they send an INVITE for an inbound call. It doesn't happen for the main trunk line but for the extra DIDs. My guess is 3CX (version 12 sp6) sees that the main number is authenticated and lets that through but challenges the sub-lines (various DIDs) are they are not authenticated. TelnetWW is saying their "new server" can't handle it and I will have to stop.

I have played with all settings of "Require Registration" in the voip provider setup to no avail. I can see the traffic with wireshark so I know 3cx is sending it.
I really am fine with trusting anything from my providers ip address but can't figure out how to turn off the challenge.
Any ideas?

 

[craigreilly]

Can the provider change to IP Registration instead of username/password?
Since they are not in the list of templates, I am assuming they have not done any interop testing with 3cx.

 

[fff]

They have not done any interop testing.
They are not rejecting my outbound calls. Those are working fine. The problem is when they send an inbound call.

1 0.000000000 us->them SIP 885 Request: REGISTER sip:us:5060 |
2 0.001759000 them->us SIP 462 Status: 200 OK (1 bindings) |

3 12.925519000 them->us SIP/SDP 1068 Request: INVITE sipurnum@us:5060;rinstance=7b0f3832e7d3b13b |
4 12.955514000 us->them SIP 623 Status: 407 Proxy Authentication Required |
5 12.956732000 them->us SIP 491 Request: ACK sipurnum@us:5060;rinstance=7b0f3832e7d3b13b |

6 25.131404000 us->them SIP 885 Request: REGISTER sip:them:5060 |
7 25.132724000 them->us SIP 462 Status: 200 OK (1 bindings) |

Is there a way in 3cx to change to IP registration?

 

[craigreilly]

I think the provider needs to support it, then you turn off the "require registration for:".
Then they only allow traffic to/from your single static IP address.

Just a thought...

 

[leejor]

Would allowing direct SIP calls make a difference, I wonder?

 

[ian.watts]

Port to FlowRoute and close the other account.