HI All, I am still banging my head against the wall here try to get a Polycom 335 to register w/ FS. I have checked all the SERVER and USER/AUTH fields like 1000 times and 900 variations. I think my problem may be NAT related. I know on my CISCO 504G I had to enable several NAT features to work behind our firewall. I am totally new to Polycom, so some very basic help is needed. The server is remote but not behind a NAT there. The phones are NAT'ed to the internet. In the sofia sip trace I see this over and over: ------------------------------------------------------------------------ recv 552 bytes from udp/[71.127.152.57]:1026 at 16:26:07.358892: ------------------------------------------------------------------------ REGISTER sip:fs_bfis.bizfocused.com SIP/2.0 Via: SIP/2.0/UDP 10.10.40.47:5060;branch=z9hG4bKbf81dbdc8E687A5 From: "228 Sean" <sip:228@fs_bfis.bizfocused.com>;tag=3F42C046-B61A297 To: <sip:228@fs_bfis.bizfocused.com> CSeq: 1 REGISTER Call-ID: 2f482c2-2599cc43-1fb1a78@10.10.40.47 Contact: <sip:228@10.10.40.47:5060>;methods="INVITE, ACK, BYE, CANCEL, OPTIONS, INFO, MESSAGE, SUBSCRIBE, NOTIFY, PRACK, UPDATE, REFER" User-Agent: PolycomSoundPointIP-SPIP_335-UA/3.3.3.0069 Accept-Language: en Max-Forwards: 70 Expires: 600 Content-Length: 0 ------------------------------------------------------------------------ send 710 bytes to udp/[71.127.152.57]:5060 at 16:26:07.359067: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 10.10.40.47:5060;branch=z9hG4bKbf81dbdc8E687A5;received=71.127.152.57 From: "228 Sean" <sip:228@fs_bfis.bizfocused.com>;tag=3F42C046-B61A297 To: <sip:228@fs_bfis.bizfocused.com>;tag=t232me1NSD02S Call-ID: 2f482c2-2599cc43-1fb1a78@10.10.40.47 CSeq: 1 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.2.0-rc2+git~20120712T080314Z~435f28cefb+unclean~20120 712T101002Z Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: precondition, path, replaces WWW-Authenticate: Digest realm="fs_bfis.bizfocused.com", nonce="b9583359-0163-4bf2-9818-788f64c34207", algorithm=MD5, qop="auth" Content-Length: 0 If I understand correctly, the server should be sending back this 401 message with the nonce so the phone can re-attempt the registration with an encrypted password. If NAT is failing, the phone is never seeing the 401 w/ the nonce. So what do I do in the WEB config interface to enable NAT on this phone? Thanks, Sean