There is also another problem which I am going to have to resolve before continuing with the above, and that is, when TLS is switched On, outgoing calls can be made, but incoming calls can not. The phone’s status becomes “Unreachable” in “sip show peers”.
On the CLI I am getting the following message:
[Feb 17 11:47:13] ERROR[18793]: tcptls.c:397 ast_tcptls_client_start: Unable to connect SIP socket to 192.168.0.1:5063: Connection refused
How port 5063 relates to this I do not know. Port 5061 is the default for TLS:
Your insecure parameter contains values that are no longer supported and when supported were more insecure than strictly necessary. canreinvite is deprecated.
I assume that port 5063 is the one from which the REGISTER was issued. I though you said that outgoing calls worked, as this error is for an outgoing call.
I’m also not sure that you need the insecurity of type=friend, here.
[quote=“david55”]Your insecure parameter contains values that are no longer supported and when supported were more insecure than strictly necessary. canreinvite is deprecated.
I assume that port 5063 is the one from which the REGISTER was issued. I though you said that outgoing calls worked, as this error is for an outgoing call.
I’m also not sure that you need the insecurity of type=friend, here.[/quote]
I have now changed caneinvite=no to directmedia=no.
I am not sure how to deal with the other issue. By my reading type=friend is the only way to deal with VoIP phones on IP addresses that might change.