I don't believe the ACL works for registrations, only for phone calls. You'll still need to auth for the registration part. For the ACL, though, you can do "reloadacl" and confirm that your CIDR is getting added. When you send calls from TB to FS they should be let in via the ACL without an auth challenge.

-MC

On Tue, Feb 22, 2011 at 11:30 AM, Johannes Jakob <jjj@3js.de> wrote:
Fellow FreeSWITCH Admins,

I'm having a hard time, getting a Trixbox 2.8 box to register with our FreeSWITCH SBCs.

The FreeSWITCHes are running FreeSWITCH-mod_sofia/1.0.head-git-7847289, the asterisk on the trixbox is Asterisk 1.6.0.22-samy-r60.


The user's directory entry looks like this:


<include>
 <user id="748732" cidr="10.16.153.163/32">
   <params>
<!--
     <param name="password" value="Idsd67Hsa"/>
-->
     <param name="t38-passthru" value="true"/>
   </params>
   <variables>
     <variable name="client_asserted_identity" value="03023671836"/>
     <variable name="accountcode" value="748732"/>
     <variable name="contract" value="2253"/>
     <variable name="nibble_rate" value="1"/>
     <variable name="nibble_account" value="2253"/>

     <variable name="proxy_media" value="true"/>
     <variable name="bypass_media" value="false"/>
     <variable name="user_context" value="mysip.net"/>
     <variable name="default_language" value="de"/>
     <variable name="language" value="de"/>
   </variables>
 </user>
</include>


Asterisk's register string: 748732@mysip.net@sbc1.mysip.net/748732


I'm getting the "normal" FS errors for wrong credentials:

2011-02-22 18:03:57.484939 [WARNING] sofia_reg.c:1246 SIP auth challenge (REGISTER) on sofia profile 'internal' for [748732@mysip.net] from ip 10.16.153.163
2011-02-22 18:03:57.491471 [WARNING] sofia_reg.c:1204 SIP auth failure (REGISTER) on sofia profile 'internal' for [748732@mysip.net] from ip 10.16.153.163


but why am I getting these? I specified the right address in the cidr statement! Why is it even bothering with anything else but the right user@domain and IP-address?


There are some other asterisk boxes (> 1.8.2) registering to this SBC with equal settings just fine, what's wrong with this little trixbox system? ;)



Of course I did get you some SIP traces as well:


18:00:37.063410 IP 10.16.153.163.5060 > 10.16.133.66.5060: UDP, length: 419
E`..f...>.7.^...^..B.......-REGISTER sip:mysip.net SIP/2.0
Via: SIP/2.0/UDP 10.16.153.163:5060;branch=z9hG4bK3e70680b;rport
Max-Forwards: 70
From: <sip:748732@mysip.net>;tag=as77c8852d
To: <sip:748732@mysip.net>
Call-ID: 53d04cc277cfe60301bddb6d79033420@10.16.153.163
CSeq: 102 REGISTER
User-Agent: Asterisk PBX 1.6.0.22-samy-r60
Expires: 1800
Contact: <sip:748732@10.16.153.163>
Event: registration
Content-Length: 0



18:00:37.074085 IP 10.16.133.66.5060 > 10.16.153.163.5060: UDP, length: 657
E...F...?.Vc^..B^...........SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.16.153.163:5060;branch=z9hG4bK3e70680b;rport=5060
From: <sip:748732@mysip.net>;tag=as77c8852d
To: <sip:748732@mysip.net>;tag=5jD9Qcg3N9S6p
Call-ID: 53d04cc277cfe60301bddb6d79033420@10.16.153.163
CSeq: 102 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-7847289 2011-02-19 23-38-04 +0100
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, precondition, path, replaces
WWW-Authenticate: Digest realm="mysip.net", nonce="ce2bccbf-a27b-43c8-b7b0-a89ab429d8a7", algorithm=MD5, qop="auth"
Content-Length: 0



18:00:37.074969 IP 10.16.153.163.5060 > 10.16.133.66.5060: UDP, length: 672
E`..f...>.6.^...^..B........REGISTER sip:mysip.net SIP/2.0
Via: SIP/2.0/UDP 10.16.153.163:5060;branch=z9hG4bK30df5010;rport
Max-Forwards: 70
From: <sip:748732@mysip.net>;tag=as03431ba4
To: <sip:748732@mysip.net>
Call-ID: 53d04cc277cfe60301bddb6d79033420@10.16.153.163
CSeq: 103 REGISTER
User-Agent: Asterisk PBX 1.6.0.22-samy-r60
Authorization: Digest username="748732@mysip.net", realm="mysip.net", algorithm=MD5, uri="sip:mysip.net", nonce="ce2bccbf-a27b-43c8-b7b0-a89ab429d8a7", response="133a0ba843fe9f5afba67d1377fa8c11", qop=auth, cnonce="119cf18c", nc=00000001
Expires: 1800
Contact: <sip:748732@10.16.153.163>
Event: registration
Content-Length: 0


18:00:37.081517 IP 10.16.133.66.5060 > 10.16.153.163.5060: UDP, length: 532
E..0F...?.V.^..B^.........1.SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 10.16.153.163:5060;branch=z9hG4bK30df5010;rport=5060
From: <sip:748732@mysip.net>;tag=as03431ba4
To: <sip:748732@mysip.net>;tag=6U61S706jjgSj
Call-ID: 53d04cc277cfe60301bddb6d79033420@10.16.153.163
CSeq: 103 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-7847289 2011-02-19 23-38-04 +0100
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, precondition, path, replaces
Content-Length: 0


Can somebody point me in the right direction?


Thanks and best regards,

 John


_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org