[Freeswitch-users] SIP trunk without password and username

Tue Nov 8 10:47:24 MSK 2011

@Antonio and @Victor thank you very much!

Now it work. Just no let you know. I have also put this subnet to ACL 
domains part (<list name="domains" default="deny">)
as otherwise it was automatically denied.
BR,
Miha

On 11/7/2011 4:17 PM, Victor Chukalovskiy wrote:
> Hello Miha,
>
> Usually I do this to accept /incoming/ calls from a specifc IP. No 
> need to create a gateway:
>
> Create ACL:
> <list name="*strict*" default="*deny*"> <!-- you likely had a mistake 
> there by using allow as default -->
> <node type="allow" cidr="172.31.1.90/29"/>
> </list>
>
> In your SIP profile make use of this ACL:
> <param name="apply-inbound-acl" value="*strict*"/>
>
> Then incoming calls will hit your public dial-plan.
>
> For /outbound/, you'll need to create a gateway with register=false.
>
> Regards,
> Victor
>
>
> On 11/07/2011 10:03 AM, Miha Zoubek wrote:
>> I deleted gw trunk profil sip_profiles.
>>
>> I have add in acl.conf.xml my domain:
>>
>> <list name="domains" default="deny">
>> <!-- domain= is special it scans the domain from the directory to 
>> build the ACL -->
>> <node type="allow" domain="xxx.xxx.xxx.xxxx/29" />
>> <node type="allow" domain="$${domain}"/>
>> <!-- use cidr= if you wish to allow ip ranges to this domains acl. -->
>> <!-- <node type="allow" cidr="192.168.0.0/24"/> -->
>> </list>
>>
>> For xxx.xxx.xxx.xxx I tried to put ip and network but the error was 
>> always the same:
>>
>> 2011-11-07 15:18:57.966016 [CONSOLE] switch_core.c:1164 Created ip 
>> list domains default (deny)
>> 2011-11-07 15:18:57.966047 [WARNING] switch_core.c:1193 Cannot locate 
>> domain xxx.xxx.xxx.xxx/29
>>
>> P.s.: also add in public folder for dialplan.
>>
>> Please help me out!
>>
>> BR,
>> Miha
>>
>>
>>
>> On 11/7/2011 12:23 PM, Miha Zoubek wrote:
>>> Hi @Avi,
>>>
>>> now I am looking about this gw thing. This is trunk and we have only 
>>> option without authentication (just ip).
>>> Do I need to set up in sip_profiles gw? Or must I just allow it in 
>>> ACL list and that with dialplan redirect to right phone number?
>>>
>>> I have put this in acl.conf.xml
>>>
>>> <list name="strict" default="allow">
>>> <node type="allow" cidr="172.31.1.90/29"/>
>>> </list>
>>>
>>> and I get this after starting freeswitch, so I guess this is ok.
>>>
>>> 2011-11-07 11:39:30.062345 [NOTICE] switch_utils.c:248 Adding 
>>> 172.31.1.90/29(allow) [] to list strict
>>> 2011-11-07 11:39:30.062351 [NOTICE] switch_core.c:1233 Adding 
>>> 172.31.1.90/29 (allow) to list strict
>>>
>>> Freeswitch log (why this ip is rejacted if i put it in ACL?):
>>>
>>> 2011-11-07 11:32:17.662016 [NOTICE] switch_loadable_module.c:254 
>>> Adding Application 'auth_function'
>>> 2011-11-07 11:32:30.738908 [DEBUG] sofia.c:7269 IP  172.31.1.90 
>>> Rejected by acl "domains". Falling back to Digest auth.
>>>
>>> P.s.: I tried with some usr/pass but also get error with connection 
>>> to gw.
>>>
>>> Thank you for your help!
>>>
>>> BR,
>>> Miha
>>>
>>>
>>> On 11/7/2011 11:42 AM, Avi Marcus wrote:
>>>> You are trying to register to somewhere? Then just set whatever for 
>>>> the username/pass, if the other side doesn't ask for authentication 
>>>> then you'll never provide the username/pass.
>>>> -Avi
>>>>
>>>>
>>>> On Mon, Nov 7, 2011 at 10:47 AM, Miha Zoubek <miha at softnet.si 
>>>> <mailto:miha at softnet.si>> wrote:
>>>>
>>>>     Hi,
>>>>
>>>>     we are having all trunks on SBC without usr/pass.
>>>>     If i left param name and password empty I get  ERROR: username
>>>>     param is REQUIRED! and also same if I delete this param usr/pass.
>>>>
>>>>     How can I configure GW sip trunk without password and username.
>>>>     I would like to have only IP.
>>>>
>>>>     Thank you!
>>>>     BR,
>>>>     Miha
>>>>
>>>>
>>>>     FreeSWITCH-users mailing list
>>>>     FreeSWITCH-users at lists.freeswitch.org
>>>>     <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>>>     http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>     UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>     http://www.freeswitch.org
>>>>
>>>>
>>>>
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>> http://www.freeswitch.org
>>>
>>>
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>
>>
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>
>
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20111108/0132f822/attachment-0001.html 