IAX2 client won't register

I am trying to register an IAX2 client over a VPN connection. SIP works well, but IAX doesn’t.
My client won’t register. Any ideas?

Asterisk 11.
This is output of IAX2 debug and peer info:

  • Name : 1001
    Description :
    Secret :
    Context : from-internal
    Parking lot :
    Mailbox : 1001@device
    Dynamic : Yes
    Callnum limit: 0
    Calltoken req: Yes
    Trunk : No
    Encryption : No
    Callerid : “john” <1001>
    Expire : -1
    ACL : Yes
    Addr->IP : (Unspecified) Port 0
    Defaddr->IP : 0.0.0.0 Port 4569
    Username :
    Codecs : (g723|gsm|ulaw|alaw|g726|adpcm|slin|lpc10|g729|speex|ilbc|g726aal2|g722|slin16|siren7|siren14)
    Codec Order : (ulaw|alaw|gsm|h264|h263p|h263|h261)
    Status : UNKNOWN
    Qualify : every 60000ms when OK, every 10000ms when UNREACHABLE (sample smoothing Off)

Rx-Frame Retry[ No] – OSeqno: 000 ISeqno: 000 Type: IAX Subclass: REGREQ
Timestamp: 00002ms SCall: 00087 DCall: 00000 [192.168.1.254:4569]
USERNAME : 1001
REFRESH : 60
CALLTOKEN : Present
FW BLOCK DATA : 18 bytes

Tx-Frame Retry[ No] – OSeqno: 000 ISeqno: 001 Type: IAX Subclass: CTOKEN
Timestamp: 00002ms SCall: 00001 DCall: 00087 [192.168.1.254:4569]
CALLTOKEN : 51 bytes

Try disabling the calltokens. And configurring the iax.conf the options calltokenoptional & maxcallnumber

Applied below settings as you suggested.
Still not working.

1001]
deny=0.0.0.0/0.0.0.0
secret_origional=xxxxxxxxxxxxxxxxxxxxxxx
secret=xxxxxxxxxxxxxxxxxxxxxxxxx
transfer=yes
context=from-internal
host=dynamic
type=friend
port=4569
qualify=yes
dial=IAX2/1001
mailbox=1001@device
permit=0.0.0.0/0.0.0.0
requirecalltoken=no
callerid=johann <1001>
setvar=REALCALLERIDNUM=

mailboxdetail=yes
tos=ef
disallow=all
allow=ulaw
allow=alaw
allow=gsm
allow=h264
allow=h263p
allow=h263
allow=h261
calltokenoptional=0.0.0.0/0.0.0.0
maxcallnumbers=16382

codecpriority=host
bandwidth=high
delayreject=yes
bindport=4569
bindaddr=10.1.1.182
jitterbuffer=no
minregexpire=60
maxregexpire=3600

try putting In calltokenoptional your network and your mask