Unable to register, suddenly

Hi,

last wednesday i had a weird problem : on all phone was writen “no registered”, i restarted all : vm, service, not better and then suddenly it comes back to life.

Today, wednesday again, i have the same problem : since this morning phones are not registered.
Access to lan is direct (phones are on the same subnet as asterisk voice lan interface) and then no firewall.

On sngrep i can see many register attemps, i often get a 401 unauthorized.
On tcpdump i can see the same.
Sometimes it is ok i have one phone connected, but i don’t know why

Nothing was changed on the conf
I restored the monday VM : not better

We are using the database, access is ok

this is like something was banned but what ? No fail2ban on the vm…
i’m totally losted !

Any clue would be appreciated, tell me what info you’ll need

Thanks

Here are weird thing i can have on sngrep :

In CLI what do you get when you run : sip show peers ?
I’m assuming of course that you’re using chan_sip

Hi Franco,

i’m so in panic that i forgot to tell you i’m using pjsip

From the VM check that can you traceroute to phones

Hi,

in fact all is on the same LAN that is why i’m so surprised by that. No routing or so.

I found something : on the asterisk machines we created another database to manage phonebook, this database is synchronised with another machine (that is on the same lan, a “serv ice” machine). If i restart asterisk VM, and wait some time before starting this other VM all is then fine.

In fact this is like asterisk has some issue accessing database (or too much delay) and then isn’t able to reply to register from phones.
I don’t know why (this is working the same way on other installation) but i guess (i hope) i found the issue, resolving it will be another job

Hi all,

in fact problem is back, even with second machine down, then in fact this is not the issue :frowning:

Phone stil unable to register, they are on the same network, no routing or firewall, just they do not register.
Into full.log i have things like that, not sure this is important :

[Jul  5 14:06:00] VERBOSE[793] res_pjsip/pjsip_configuration.c: Endpoint user098 is now Reachable
[Jul  5 14:06:03] NOTICE[783] res_pjsip_exten_state.c: Endpoint 'user002' state subscription failed: Extension '306' does not exist in context 'from-internal' or has no associated hint
[Jul  5 14:06:05] VERBOSE[697] asterisk.c: Remote UNIX connection
[Jul  5 14:06:08] VERBOSE[765] res_pjsip_registrar.c: Added contact 'sip:user014@10.116.1.210;line=52718;x-ast-txp=transport-udp' to AOR 'user014' with expiration of 3600 seconds
[Jul  5 14:06:08] VERBOSE[793] res_pjsip/pjsip_configuration.c: Endpoint user014 is now Reachable
[Jul  5 14:06:29] VERBOSE[731] res_pjsip_registrar.c: Removed contact 'sip:user006@10.116.1.214;line=63431;x-ast-txp=transport-udp' from AOR 'user006' due to expiration
[Jul  5 14:06:29] VERBOSE[793] res_pjsip/pjsip_options.c: Contact user006/sip:user006@10.116.1.214;line=63431;x-ast-txp=transport-udp has been deleted
[Jul  5 14:06:29] VERBOSE[793] res_pjsip/pjsip_configuration.c: Endpoint user006 is now Unreachable
[Jul  5 14:06:59] VERBOSE[731] res_pjsip_registrar.c: Removed contact 'sip:user023@10.116.1.140:58907;line=mn3k65d1;x-ast-txp=transport-udp' from AOR 'user023' due to expiration
[Jul  5 14:06:59] VERBOSE[793] res_pjsip/pjsip_options.c: Contact user023/sip:user023@10.116.1.140:58907;line=mn3k65d1;x-ast-txp=transport-udp has been deleted
[Jul  5 14:06:59] VERBOSE[731] res_pjsip_registrar.c: Removed contact 'sip:user055@10.116.1.113:46112;line=7rtjm0uf;x-ast-txp=transport-udp' from AOR 'user055' due to expiration
[Jul  5 14:06:59] VERBOSE[793] res_pjsip/pjsip_options.c: Contact user055/sip:user055@10.116.1.113:46112;line=7rtjm0uf;x-ast-txp=transport-udp has been deleted
[Jul  5 14:06:59] VERBOSE[793] res_pjsip/pjsip_configuration.c: Endpoint user055 is now Unreachable

Comes reachable, then unreachable

sngrep is like the first post and tcp dump like that :

14:25:59.914877 IP 10.117.1.129.47962 > 10.116.1.1.5060: SIP: REGISTER sip:gastonpbx.joubert-group.com SIP/2.0
14:25:59.951020 IP 10.117.1.124.52507 > 10.116.1.1.5060: SIP: REGISTER sip:gastonpbx.joubert-group.com SIP/2.0
14:26:00.002776 IP 10.116.1.212.5060 > 10.116.1.1.5060: SIP: REGISTER sip:10.116.1.1 SIP/2.0
14:26:00.071740 IP 10.116.1.1.5060 > 10.116.1.108.52647: SIP: NOTIFY sip:user024@10.116.1.108:52647;line=u5ey32b1 SIP/2.0
14:26:00.082901 IP 10.116.1.108.52647 > 10.116.1.1.5060: SIP: SIP/2.0 200 Ok
14:26:00.106048 IP 10.116.1.1.5060 > 10.116.1.214.5060: SIP: SIP/2.0 401 Unauthorized
14:26:00.116320 IP 10.116.1.206.5060 > 10.116.1.1.5060: SIP: REGISTER sip:10.116.1.1 SIP/2.0
14:26:00.159541 IP 10.116.1.1.5060 > 10.117.1.209.5060: SIP: SIP/2.0 401 Unauthorized
14:26:00.160684 IP 10.116.1.212.5060 > 10.116.1.1.5060: SIP: REGISTER sip:10.116.1.1 SIP/2.0
14:26:00.179035 IP 10.116.1.135.38352 > 10.116.1.1.5060: SIP: REGISTER sip:gastonpbx.joubert-group.com SIP/2.0
14:26:00.254291 IP 10.117.1.201.5060 > 10.116.1.1.5060: SIP: REGISTER sip:10.116.1.1 SIP/2.0
14:26:00.414110 IP 10.116.1.214.5060 > 10.116.1.1.5060: SIP: REGISTER sip:10.116.1.1 SIP/2.0
14:26:00.480334 IP 10.116.1.212.5060 > 10.116.1.1.5060: SIP: REGISTER sip:10.116.1.1 SIP/2.0
14:26:00.485065 IP 10.116.1.135.38352 > 10.116.1.1.5060: SIP: REGISTER sip:gastonpbx.joubert-group.com SIP/2.0
14:26:00.509572 IP 10.116.1.1.5060 > 10.117.1.215.5060: SIP: SIP/2.0 401 Unauthorized
14:26:00.590285 IP 10.116.1.206.5060 > 10.116.1.1.5060: SIP: REGISTER sip:10.116.1.1 SIP/2.0
14:26:00.599086 IP 10.116.1.214.5060 > 10.116.1.1.5060: SIP: REGISTER sip:10.116.1.1 SIP/2.0

Really do not know what to do, any help would be appreciated

Thanks

In fact the big question is : which log could help me ?