Cisco 7965 not registering to PJSIP

Asterisk Asterisk Endpoints
1

Hello!

I am new to asterisk, and recently set up my first FreePBX.

I got to the point where the PBX registers to my SIP provider and I can call the system, and it will (as I set it to do) put me on hold, play the hold music I set in the GUI and ring all phones.

So i went out and bought my first phones: I got 3 used Cisco 7965G and a POE switch to power them.

I updated them to second newest SIP firmware, reinstalled the TFTP server of the FreePBX (for some reason the one that came with the ISO was broken, and I had to run “yum reinstall tftp”), and wrote some config files for them (i also tried using ones from the internet, and even combining both).

The phones will see the TFTP, download their config files, locales, background images, etc… , check and accept them as valid files, and try to register to my FreePBX. (showing “registering” and the name of my phone line on the display and restarting after a while)

So far so good. Now on to PJSIP:

I set up one extension called “01”, and (because the first one wouldn’t work) i set up a second one called “02”.
There also is a third one for my provider’s SIP trunk, that i use as my outgoing line. (I will not mention it again, and will not post any config/aors/extensions for because it works fine and is irrelevant for solving this problem)

I replaced all private infos like IP’s with variables like “[PBX_IP]” before posting it, but in the file they are written in clear text. (IP format 123.456.789.012)
“[PBX_IP]” is my PBX’s internal IP
“[OUTSIDE_IP]” is my public IP
“[NET]” is the network the PBX is on.
“[PHONE_IP]” is the phones IP address.
“[AUTHPASSWORD0X]” is for auth passwords.
“[PRIVATE]” is for other private infos like passwords or usernames
“[MAC]” is the Phones mac address
The variables for the SEP[MAC].cnf.xml are the same as before, but with the addition of a few new ones, which schould be self explaining.

Here is my problem:
The phone will try to register, and I can see it doing that, when I run “asterisk -rvvvvvvvv” and then “pjsip set logger on”, but, after several minutes, it will fail to register and reboot.

The messages I get (even when the phone is off and unplugged) are:

<--- Transmitting SIP request (420 bytes) to UDP:[PHONE_IP]:5060 --->
OPTIONS sip:[PHONE_IP]:5060 SIP/2.0
Via: SIP/2.0/UDP [PBX_IP]:5060;rport;branch=[PRIVATE]
From: <sip:01@[PBX_IP]>;tag=[PRIVATE]
To: <sip:[PHONE_IP]>
Contact: <sip:01@[PBX_IP]:5060>
Call-ID: [PRIVATE]
CSeq: 35037 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-15.0.16.52(16.9.0)
Content-Length:  0

I get one of these about every second.

When I plug in the phone, I get this:

<--- Received SIP request (1209 bytes) from TCP:[PHONE_IP]:53020 --->
REGISTER sip:[PBX_IP] SIP/2.0
Via: SIP/2.0/TCP [PHONE_IP]:53020;branch=[PRIVATE]
From: <sip:01@[PBX_IP]>;tag=[PRIVATE]
To: <sip:01@[PBX_IP]>
Call-ID: [PRIVATE]@[PHONE_IP]
Max-Forwards: 70
Date: Mon, 16 Jan 2017 08:57:29 GMT
CSeq: 104 REGISTER
User-Agent: Cisco-CP7965G/9.3.1
Contact: <sip:01@[PHONE_IP]:53020;transport=tcp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-[MAC]>";+u.sip!devicename.ccm.cisco.com="SEP[MAC]";+u.sip!model.ccm.cisco.com="436"
Authorization: Digest username="01",realm="asterisk",uri="sip:[PBX_IP]",response="[PRIVATE]",nonce="[PRIVATE]/[AUTHPASSWORD_THAT_ISN’T_AUTHPASSWORD01]",opaque="[PRIVATE]",cnonce="[PRIVATE]",qop=auth,nc=[PRIVATE],algorithm=md5
Supported: replaces,join,sdp-anat,norefersub,resource-priority,extended-refer,X-cisco-callinfo,X-cisco-serviceuri,X-cisco-escapecodes,X-cisco-service-control,X-cisco-srtp-fallback,X-cisco-monrec,X-cisco-config,X-cisco-sis-6.0.0,X-cisco-xsi-8.5.1
Content-Length: 0
Reason: SIP;cause=200;text="cisco-alarm:24 Name=SEP[MAC] Load=term65.default Last=phone-reg-rej"
Expires: 3600


[2020-06-22 13:55:06] NOTICE[12508]: res_pjsip/pjsip_distributor.c:676 log_failed_request: Request 'REGISTER' from '<sip:01@[PBX_IP]>' failed for '[PHONE_IP]:53020' (callid: [PRIVATE]@[PHONE_IP]) - Failed to authenticate
<--- Transmitting SIP response (524 bytes) to TCP:[PHONE_IP]:53020 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/TCP [PHONE_IP]:53020;rport=53020;received=[PHONE_IP];branch=[PRIVATE]
Call-ID: [PRIVATE]@[PHONE_IP]
From: <sip:01@[PBX_IP]>;tag=[PRIVATE]
To: <sip:01@[PBX_IP]>;tag=[PRIVATE]
CSeq: 104 REGISTER
WWW-Authenticate: Digest realm="asterisk",nonce="[PRIVATE]/[AUTHPASSWORD_THAT_ISN’T_AUTHPASSWORD01]",opaque="[PRIVATE]",algorithm=md5,qop="auth"
Server: FPBX-15.0.16.52(16.9.0)
Content-Length:  0


<--- Received SIP request (955 bytes) from TCP:[PHONE_IP]:50781 --->
REGISTER sip:[PBX_IP] SIP/2.0
Via: SIP/2.0/TCP [PHONE_IP]:50781;branch=[PRIVATE]
From: <sip:01@[PBX_IP]>;tag=[PRIVATE]
To: <sip:01@[PBX_IP]>
Call-ID: [PRIVATE]@[PHONE_IP]
Max-Forwards: 70
Date: Mon, 22 Jun 2020 13:55:26 GMT
CSeq: 105 REGISTER
User-Agent: Cisco-CP7965G/9.3.1
Contact: <sip:01@[PHONE_IP]:50781;transport=tcp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-[MAC]>";+u.sip!devicename.ccm.cisco.com="SEP[MAC]";+u.sip!model.ccm.cisco.com="436"
Supported: replaces,join,sdp-anat,norefersub,resource-priority,extended-refer,X-cisco-callinfo,X-cisco-serviceuri,X-cisco-escapecodes,X-cisco-service-control,X-cisco-srtp-fallback,X-cisco-monrec,X-cisco-config,X-cisco-sis-6.0.0,X-cisco-xsi-8.5.1
Content-Length: 0
Reason: SIP;cause=200;text="cisco-alarm:24 Name=SEP[MAC] Load=term65.default Last=phone-reg-rej"
Expires: 3600


<--- Transmitting SIP response (524 bytes) to TCP:[PHONE_IP]:50781 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/TCP [PHONE_IP]:50781;rport=50781;received=[PHONE_IP];branch=[PRIVATE]
Call-ID: [PRIVATE]@[PHONE_IP]
From: <sip:01@[PBX_IP]>;tag=[PRIVATE]
To: <sip:01@[PBX_IP]>;tag=[PRIVATE]
CSeq: 105 REGISTER
WWW-Authenticate: Digest realm="asterisk",nonce="[PRIVATE]/[AUTHPASSWORD_THAT_ISN'T_AUTHPASSWORD01]",opaque="[PRIVATE]",algorithm=md5,qop="auth"
Server: FPBX-15.0.16.52(16.9.0)
Content-Length:  0


<--- Received SIP request (1209 bytes) from TCP:[PHONE_IP]:50781 --->
REGISTER sip:[PBX_IP] SIP/2.0
Via: SIP/2.0/TCP [PHONE_IP]:50781;branch=[PRIVATE]
From: <sip:01@[PBX_IP]>;tag=[PRIVATE]
To: <sip:01@[PBX_IP]>
Call-ID: [PRIVATE]@[PHONE_IP]
Max-Forwards: 70
Date: Mon, 22 Jun 2020 13:55:26 GMT
CSeq: 106 REGISTER
User-Agent: Cisco-CP7965G/9.3.1
Contact: <sip:01@[PHONE_IP]:50781;transport=tcp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-[MAC]>";+u.sip!devicename.ccm.cisco.com="SEP[MAC]";+u.sip!model.ccm.cisco.com="436"
Authorization: Digest username="01",realm="asterisk",uri="sip:[PBX_IP]",response="[PRIVATE]",nonce="[PRIVATE]/[AUTHPASSWORD_THAT_ISN’T_AUTHPASSWORD01]",opaque="[PRIVATE]",cnonce="[PRIVATE]",qop=auth,nc=[PRIVATE],algorithm=md5
Supported: replaces,join,sdp-anat,norefersub,resource-priority,extended-refer,X-cisco-callinfo,X-cisco-serviceuri,X-cisco-escapecodes,X-cisco-service-control,X-cisco-srtp-fallback,X-cisco-monrec,X-cisco-config,X-cisco-sis-6.0.0,X-cisco-xsi-8.5.1
Content-Length: 0
Reason: SIP;cause=200;text="cisco-alarm:24 Name=SEP[MAC] Load=term65.default Last=phone-reg-rej"
Expires: 3600


[2020-06-22 13:55:26] NOTICE[12508]: res_pjsip/pjsip_distributor.c:676 log_failed_request: Request 'REGISTER' from '<sip:01@[PBX_IP]>' failed for '[PHONE_IP]:50781' (callid: [PRIVATE]@[PHONE_IP]) - Failed to authenticate
<--- Transmitting SIP response (524 bytes) to TCP:[PHONE_IP]:50781 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/TCP [PHONE_IP]:50781;rport=50781;received=[PHONE_IP];branch=[PRIVATE]
Call-ID: [PRIVATE]@[PHONE_IP]
From: <sip:01@[PBX_IP]>;tag=[PRIVATE]
To: <sip:01@[PBX_IP]>;tag=[PRIVATE]
CSeq: 106 REGISTER
WWW-Authenticate: Digest realm="asterisk",nonce="[PRIVATE]/[AUTHPASSWORD_THAT_ISN’T_AUTHPASSWORD01]",opaque="[PRIVATE]",algorithm=md5,qop="auth"
Server: FPBX-15.0.16.52(16.9.0)
Content-Length:  0


<--- Received SIP request (1209 bytes) from TCP:[PHONE_IP]:50781 --->
REGISTER sip:[PBX_IP] SIP/2.0
Via: SIP/2.0/TCP [PHONE_IP]:50781;branch=[PRIVATE]
From: <sip:01@[PBX_IP]>;tag=[PRIVATE]
To: <sip:01@[PBX_IP]>
Call-ID: [PRIVATE]4@[PHONE_IP]
Max-Forwards: 70
Date: Mon, 22 Jun 2020 13:55:26 GMT
CSeq: 107 REGISTER
User-Agent: Cisco-CP7965G/9.3.1
Contact: <sip:01@[PHONE_IP]:50781;transport=tcp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-[MAC]>";+u.sip!devicename.ccm.cisco.com="[MAC]";+u.sip!model.ccm.cisco.com="436"
Authorization: Digest username="01",realm="asterisk",uri="sip:[PBX_IP]",response="[PRIVATE]",nonce="[PRIVATE]/[AUTHPASSWORD_THAT_ISN’T_AUTHPASSWORD01]",opaque="[PRIVATE]",cnonce="[PRIVATE]",qop=auth,nc=[PRIVATE],algorithm=md5
Supported: replaces,join,sdp-anat,norefersub,resource-priority,extended-refer,X-cisco-callinfo,X-cisco-serviceuri,X-cisco-escapecodes,X-cisco-service-control,X-cisco-srtp-fallback,X-cisco-monrec,X-cisco-config,X-cisco-sis-6.0.0,X-cisco-xsi-8.5.1
Content-Length: 0
Reason: SIP;cause=200;text="cisco-alarm:24 Name=[MAC] Load=term65.default Last=phone-reg-rej"
Expires: 3600


[2020-06-22 13:55:26] NOTICE[12508]: res_pjsip/pjsip_distributor.c:676 log_failed_request: Request 'REGISTER' from '<sip:01@[PBX_IP]>' failed for '[PHONE_IP]:50781' (callid: [PRIVATE]@[PHONE_IP]) - Failed to authenticate
<--- Transmitting SIP response (524 bytes) to TCP:[PHONE_IP]:50781 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/TCP [PHONE_IP]:50781;rport=50781;received=[PHONE_IP];branch=[PRIVATE]
Call-ID: [PRIVATE]4@[PHONE_IP]
From: <sip:01@[PBX_IP]>;tag=[PRIVATE]
To: <sip:01@[PBX_IP]>;tag=[PRIVATE]
CSeq: 107 REGISTER
WWW-Authenticate: Digest realm="asterisk",nonce="[PRIVATE]/[AUTHPASSWORD_THAT_ISN'T_AUTHPASSWORD01]",opaque="[PRIVATE]",algorithm=md5,qop="auth"
Server: FPBX-15.0.16.52(16.9.0)
Content-Length:  0


<--- Received SIP request (1209 bytes) from TCP:[PHONE_IP]:50781 --->
REGISTER sip:[PBX_IP] SIP/2.0
Via: SIP/2.0/TCP [PHONE_IP]:50781;branch=[PRIVATE]
From: <sip:01@[PBX_IP]>;tag=[PRIVATE]
To: <sip:01@[PBX_IP]>
Call-ID: [PRIVATE]@[PHONE_IP]
Max-Forwards: 70
Date: Mon, 22 Jun 2020 13:55:26 GMT
CSeq: 108 REGISTER
User-Agent: Cisco-CP7965G/9.3.1
Contact: <sip:01@[PHONE_IP]:50781;transport=tcp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-[MAC]>";+u.sip!devicename.ccm.cisco.com="SEP[MAC]";+u.sip!model.ccm.cisco.com="436"
Authorization: Digest username="01",realm="asterisk",uri="sip:[PBX_IP]",response="[PRIVATE]",nonce="[PRIVATE]/[AUTHPASSWORD_THAT_ISN'T_AUTHPASSWORD01]",opaque="[PRIVATE]",cnonce="[PRIVATE]",qop=auth,nc=[PRIVATE],algorithm=md5
Supported: replaces,join,sdp-anat,norefersub,resource-priority,extended-refer,X-cisco-callinfo,X-cisco-serviceuri,X-cisco-escapecodes,X-cisco-service-control,X-cisco-srtp-fallback,X-cisco-monrec,X-cisco-config,X-cisco-sis-6.0.0,X-cisco-xsi-8.5.1
Content-Length: 0
Reason: SIP;cause=200;text="cisco-alarm:24 Name=SEP[MAC] Load=term65.default Last=phone-reg-rej"
Expires: 3600


[2020-06-22 13:55:26] NOTICE[12508]: res_pjsip/pjsip_distributor.c:676 log_failed_request: Request 'REGISTER' from '<sip:01@[PBX_IP]>' failed for '[PHONE_IP]:50781' (callid: [PRIVATE]@[PHONE_IP]) - Failed to authenticate
<--- Transmitting SIP response (524 bytes) to TCP:[PHONE_IP]:50781 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/TCP [PHONE_IP]:50781;rport=50781;received=[PHONE_IP];branch=[PRIVATE]
Call-ID: [PRIVATE]@[PHONE_IP]
From: <sip:01@[PBX_IP]>;tag=[PRIVATE]
To: <sip:01@[PBX_IP]>;tag=[PRIVATE]
CSeq: 108 REGISTER
WWW-Authenticate: Digest realm="asterisk",nonce="[PRIVATE]/[AUTHPASSWORD_THAT_ISN'T_AUTHPASSWORD01]",opaque="[PRIVATE]",algorithm=md5,qop="auth"
Server: FPBX-15.0.16.52(16.9.0)
Content-Length:  0

This will infinitely continue.

I already tried everything I and google could bring up, and even ditched the FreePBX GUI for command line.

I just cant figure this out on my own anymore and need your help finding the issue.

Here I included my config files:

This is my pjsip.conf:

#include pjsip_custom.conf
#include pjsip.transports.conf
#include pjsip.transports_custom_post.conf
#include pjsip.endpoint.conf
#include pjsip.endpoint_custom_post.conf
#include pjsip.aor.conf
#include pjsip.aor_custom_post.conf
#include pjsip.auth.conf
#include pjsip.auth_custom_post.conf
#include pjsip.registration.conf
#include pjsip.registration_custom_post.conf
#include pjsip.identify.conf
#include pjsip.identify_custom_post.conf


[global]
type=global
user_agent=FPBX-15.0.16.52(16.9.0)
use_callerid_contact=no
default_outbound_endpoint=dpma_endpoint
endpoint_identifier_order=ip,header,username,auth_username,anonymous
default_outbound_endpoint=dpma_endpoint
#include pjsip_custom_post.conf

all “…_custom.conf” files are empty.

pjsip.transports.conf looks like this:

#include pjsip.transports_custom.conf

[[PBX_IP]-udp]
type=transport
protocol=udp
bind=[PBX_IP]
external_media_address=[OUTSIDE_IP]
external_signaling_address=[OUTSIDE_IP]
allow_reload=no
tos=cs3
cos=3
local_net=[NET]

[[PBX_IP]-tcp]
type=transport
protocol=tcp
bind=[PBX_IP]
external_media_address=[OUTSIDE_IP]
external_signaling_address=[OUTSIDE_IP]
allow_reload=no
tos=cs3
cos=3
local_net=[NET]

[[PBX_IP]-tls]
type=transport
protocol=tls
bind=[PBX_IP]:5061
external_media_address=[OUTSIDE_IP]
external_signaling_address=[OUTSIDE_IP]
ca_list_file=/etc/pki/tls/certs/ca-bundle.crt
cert_file=/etc/asterisk/keys/default.pem
priv_key_file=/etc/asterisk/keys/default.key
method=default
verify_client=no
verify_server=yes
allow_reload=no
tos=cs3
cos=3
local_net=[NET]

[[PBX_IP]-ws]
type=transport
protocol=ws
bind=[PBX_IP]
external_media_address=[OUTSIDE_IP]
external_signaling_address=[OUTSIDE_IP]
allow_reload=no
tos=cs3
cos=3
local_net=[NET]

[[PBX_IP]-wss]
type=transport
protocol=wss
bind=[PBX_IP]
external_media_address=[OUTSIDE_IP]
external_signaling_address=[OUTSIDE_IP]
allow_reload=no
tos=cs3
cos=3
local_net=[NET]

My pjsip.endpoint.conf looks like this:

#include pjsip.endpoint_custom.conf

[02]
type=endpoint
aors=02
auth=[AUTHPASSWORD02]
tos_audio=ef
tos_video=af41
cos_audio=5
cos_video=4
allow=ulaw,gsm,g726,g722,g723,g719,g729,h264,mpeg4,vp9,vp8,h263p,h263,h265,h261
context=from-internal
callerid=[PRIVATE] <02>

dtmf_mode=rfc4733
direct_media=yes
mailboxes=02@default

mwi_subscribe_replaces_unsolicited=yes
aggregate_mwi=yes
named_call_group=[PRIVATE]
use_avpf=no
rtcp_mux=no
max_audio_streams=3
max_video_streams=2
bundle=no
ice_support=no
media_use_received_transport=no
trust_id_inbound=yes
user_eq_phone=no
send_connected_line=yes
media_encryption=no
timers=yes
timers_min_se=90
media_encryption_optimistic=no
refer_blind_progress=yes
refer_blind_progress=yes
rtp_timeout=30
rtp_timeout_hold=15
send_pai=yes
rtp_symmetric=yes
rewrite_contact=yes
force_rport=yes
media_address=[PBX_IP]
bind_rtp_to_media_address=yes
language=en
one_touch_recording=on
record_on_feature=apprecord
record_off_feature=apprecord
language=en

[01]
type=endpoint
aors=01
auth=[AUTHPASSWORD01]
tos_audio=ef
tos_video=af41
cos_audio=5
cos_video=4
allow=ulaw,gsm,g726,g722,g723,g719,g729,h264,mpeg4,vp9,vp8,h263p,h263,h265,h261
context=from-internal
callerid=[PRIVATE] <01>

dtmf_mode=rfc4733
direct_media=yes
mailboxes=01@default

mwi_subscribe_replaces_unsolicited=yes
transport=[PBX_IP]-udp
aggregate_mwi=yes
use_avpf=no
rtcp_mux=no
max_audio_streams=1
max_video_streams=1
bundle=no
ice_support=no
media_use_received_transport=no
trust_id_inbound=yes
user_eq_phone=no
send_connected_line=yes
media_encryption=no
timers=yes
timers_min_se=90
media_encryption_optimistic=no
refer_blind_progress=yes
refer_blind_progress=yes
send_pai=yes
rtp_symmetric=yes
rewrite_contact=yes
force_rport=yes
media_address=[PBX_IP]
bind_rtp_to_media_address=yes
language=en
one_touch_recording=on
record_on_feature=apprecord
record_off_feature=apprecord

[anonymous]
type=endpoint
context=from-sip-external
allow=all


[dpma_endpoint]
type=endpoint
context=dpma-invalid
context=dpma-invalid

This is my pjsip.aors.conf:

#include pjsip.aor_custom.conf

[02]
type=aor
mailboxes=02@default

max_contacts=5
remove_existing=no
maximum_expiration=7200
minimum_expiration=60
qualify_frequency=10

[01]
type=aor
mailboxes=01@default

max_contacts=1
remove_existing=yes
maximum_expiration=7200
minimum_expiration=60
qualify_frequency=90
contact=SIP:[PHONE_IP]:5060;transport=tcp

Last but not least here is my current SEP[MAC].cnf.xml: (I think this one is from the internet)
(SEP[MAC].cnf.xml is the phones config file)

xml version="1.0" ?>
<device>
        <deviceProtocol>SIP</deviceProtocol>
        <vendorConfig>
        <webAccess>0</webAccess>
        <sshAccess>0</sshAccess>
        <sshPort>22</sshPort>
        </vendorConfig>
        <sshUserId>[PRIVATE]</sshUserId>
        <sshPassword>[PRIVATE]</sshPassword>
        <devicePool>
                <dateTimeSetting>
                        <dateTemplate>M/D/Y</dateTemplate>
                        <timeZone>[TIMEZONE]</timeZone>
                        <ntps>
                                  <ntp>
                                        <name>[NTP_IP]</name>
                                        <ntpMode>Unicast</ntpMode>
                                </ntp>
                        </ntps>
                </dateTimeSetting>
                <callManagerGroup>
                        <members>
                                <member priority="0">
                                        <callManager>
                                                <processNodeName>[PBX_IP]</processNodeName>
                                                <ports>
                                                          <sipPort>5060</sipPort>
                                                </ports>
                                        </callManager>
                                </member>
                        </members>
                </callManagerGroup>
        </devicePool>
        <sipProfile>
                <natEnabled></natEnabled>
                <natAddress></natAddress>
                <sipProxies>
                        <registerWithProxy>true</registerWithProxy>
                        <outboundProxy></outboundProxy>
                        <outboundProxyPort></outboundProxyPort>
                        <backupProxy>[PBX_IP]</backupProxy>
                        <backupProxyPort>5060</backupProxyPort>
                </sipProxies>
                <preferredCodec>none</preferredCodec>
                <phoneLabel>Ben</phoneLabel>
                <sipLines>

                        <line button="1">
                                <featureID>9</featureID>
                                <featureLabel>[PRIVATE]</featureLabel>
                                <proxy>USECALLMANAGER</proxy>
                                <port>5060</port>
                                <name>01</name>
                                <authName>[AUTHNAME01]</authName>
                                <authPassword>[AUTHPASSWORD_THAT_ISN'T_AUTHPASSWORD01]</authPassword>
                                <messageWaitingLampPolicy>3</messageWaitingLampPolicy>
                                <messagesNumber>*97</messagesNumber>
                        </line>

                </sipLines>
                <dialTemplate>dialplan.xml</dialTemplate>
        </sipProfile>

     <powerNegotiation>0</powerNegotiation>

  <transportLayerProtocol>1</transportLayerProtocol>
  <TLSResumptionTimer>3600</TLSResumptionTimer>

  <dndReminderTimer>5</dndReminderTimer>
  <dndCallAlert>1</dndCallAlert>

        <networkLocale>United_States</networkLocale><networkLocaleInfo><name>United_States</name><uid>64</uid><version>1.0.0.0-1</version></networkLocaleInfo>
</device>

I tried to use [AUTHPASSWORD01] as [AUTHPASSWORD_THAT_ISN’T_AUTHPASSWORD01], but it didn’t work.

Thanks for reading and replying!

2

Please don’t use the same obfuscation for different values. In practice, the call-id, and tag, values are not sensitive, and that probably applies to other instances of PRIVATE.

There is no type=auth section in your configuration.

There is no section called [AUTHPASSWORD01] or [AUTHPASSWORD02].

In general, it is not possible to go beyond saying the password is wrong without having the clear text of all the authentication data.

3

Ok. I am still relatively new and just blanked out anything that might have been sensitive.
I will correct this as soon as possible.

4

I would concentrate on the misuse of auth=.

5

Thanks!
I will try to correct that and report what happens.

6

I’m back!

While I was gone, I learned a lot about linux, asterisk and SIP, and found and corrected some mistakes I made.

Firstly " [AUTHPASSWORD01]" and “[AUTHPASSWORD02]” were the authnames, and i fixed that.

Because i had issues with FreePBX’s config structure I decided to completely rewrite my pjsip config.

My pjsip.conf now contains this: (I removed the config for the incoming line)


[0.0.0.0-udp]
type=transport
protocol=udp
bind=0.0.0.0

[01]
type=aor
mailboxes=01@default
max_contacts=1
remove_existing=yes
maximum_expiration=7200
minimum_expiration=60
qualify_frequency=5

[01-auth]
type=auth
auth_type=md5
md5_cred=[MD5HASH]
username=[PRIVATE]

[[USERNAME]1]
type=identify
endpoint=[USERNAME]1
match=[PHONE_IP]

[[USERNAME]1]
type=endpoint
aors=01
auth=01-auth
allow=all
context=default
trust_id_outbound=yes
callerid=[USERNAME]01
mailboxes=01@default
mwi_subscribe_replaces_unsolicited=yes
transport=[PBX_IP]-udp

[anonymous]
type=endpoint
context=from-sip-external
allow=all

and I entered my MD5 hash into the phone, too.

The incoming line (using a very similar config in the same file, just without the transport and with password and username instead of md5 and username) works perfectly.

When i now turn on the phone, and enable the pjsip logger, I get no error messages, but also nothing else related to the phone.

The phone will say “802.1x authentification timed out” once and keep rebooting.

I checked all infos and the SEP[MAC].cnf.xml 5 times and will try a different MD5 hash today.

Does anyone know what i’m doing wrong?

Thanks for replying!

7

Quick update: new (shorter) MD5 hash didn’t change anything.

Thanks for replying to this post!

8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.