403 forbidden (bad auth) on regsitration

General Help
1

HI,

I’m trying to setup a client PBX to register to our SIP server, and i keep getting 403 forbidden (bad auth) back.

We are running A2Billing on top of Freepbx. I have posted this on the A2Billing forums but thought i’d try here too.

I have checked the username & secret and these are correct. I’ve recreated the VOIP account as well; still no joy. The PBX is IPFX director; i know i can register this PBX type to this system because i’ve done it before, and i’m certain i have the same configuration settings

There is no NAT occurring, my VOIP settings from the account has NAT=NO. I have verified the account works by registering to it with ZOIPER from the same network as the IPFX server. I’m just not sure what setting is tripping me up with the IPFX registration; there’s not much i can configure on the IPFX server; just username, password, and IP of SIP server.

I’ll post the debug log from the serve after this for reference

We are running A2Billing 1.9.4 & FreePBX FPBX-2.8.1 (1.8.15.0) Hope someone can assist.

Thanks.
Adam

2

<— SIP read from UDP:10.10.10.100:5062 —>
REGISTER sip:172.31.250.100:5060 SIP/2.0
Via: SIP/2.0/UDP 10.10.10.100:5062;branch=z9hG4bK5317.2
Contact: sip:10.10.10.100:5062;transport=udp
Call-ID: 29F8-1EF5-5D35-F0E2
CSeq: 1 REGISTER
From: sip:172.31.250.100:5060;tag=FEFD-1B9F-AE31-4819
To: sip:172.31.250.100:5060
Content-Length: 0
Expires: 1800
User-Agent: IPFX-UA B2BUA-6.0.1.3530
Accept: application/sdp
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK
Max-Forwards: 70

<------------->
— (13 headers 0 lines) —
Sending to 10.10.10.100:5062 (NAT)

<— Transmitting (NAT) to 10.10.10.100:5062 —>
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.10.10.100:5062;branch=z9hG4bK5317.2;received=10.10.10.100;rport=5062
From: sip:172.31.250.100:5060;tag=FEFD-1B9F-AE31-4819
To: sip:172.31.250.100:5060;tag=as06557ca6
Call-ID: 29F8-1EF5-5D35-F0E2
CSeq: 1 REGISTER
Server: FPBX-2.8.1(1.8.15.0)
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce="12ac64ff"
Content-Length: 0

<— SIP read from UDP:10.10.10.100:5062 —>
REGISTER sip:172.31.250.100:5060 SIP/2.0
Via: SIP/2.0/UDP 10.10.10.100:5062;branch=z9hG4bKdd58.3
Contact: sip:10.10.10.100:5062;transport=udp
Authorization: Digest username=“2657549926”,realm=“asterisk”,nonce=“12ac64ff”,uri=“sip:172.31.250.100:5060”,response=“641484c01f7cf9a3b0e3330740c404c7”,algorithm=MD5
Call-ID: 29F8-1EF5-5D35-F0E2
CSeq: 2 REGISTER
From: sip:172.31.250.100:5060;tag=FEFD-1B9F-AE31-4819
To: sip:172.31.250.100:5060
Content-Length: 0
Expires: 1800
User-Agent: IPFX-UA B2BUA-6.0.1.3530
Accept: application/sdp
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK
Max-Forwards: 70

Sending to 10.10.10.100:5062 (NAT)

<— Transmitting (NAT) to 10.10.10.100:5062 —>
SIP/2.0 403 Forbidden (Bad auth)
Via: SIP/2.0/UDP 10.10.10.100:5062;branch=z9hG4bKdd58.3;received=10.10.10.100;rport=5062
From: sip:172.31.250.100:5060;tag=FEFD-1B9F-AE31-4819
To: sip:172.31.250.100:5060;tag=as06557ca6
Call-ID: 29F8-1EF5-5D35-F0E2
CSeq: 2 REGISTER
Server: FPBX-2.8.1(1.8.15.0)
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Content-Length: 0

3

<— SIP read from UDP:10.10.10.100:5062 —>
REGISTER sip:172.31.250.100:5060 SIP/2.0
Via: SIP/2.0/UDP 10.10.10.100:5062;branch=z9hG4bK5317.2
Contact: sip:10.10.10.100:5062;transport=udp
Call-ID: 29F8-1EF5-5D35-F0E2
CSeq: 1 REGISTER
From: sip:172.31.250.100:5060;tag=FEFD-1B9F-AE31-4819
To: sip:172.31.250.100:5060
Content-Length: 0
Expires: 1800
User-Agent: IPFX-UA B2BUA-6.0.1.3530
Accept: application/sdp
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK
Max-Forwards: 70

<------------->
— (13 headers 0 lines) —
Sending to 10.10.10.100:5062 (NAT)

<— Transmitting (NAT) to 10.10.10.100:5062 —>
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.10.10.100:5062;branch=z9hG4bK5317.2;received=10.10.10.100;rport=5062
From: sip:172.31.250.100:5060;tag=FEFD-1B9F-AE31-4819
To: sip:172.31.250.100:5060;tag=as06557ca6
Call-ID: 29F8-1EF5-5D35-F0E2
CSeq: 1 REGISTER
Server: FPBX-2.8.1(1.8.15.0)
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce="12ac64ff"
Content-Length: 0

<— SIP read from UDP:10.10.10.100:5062 —>
REGISTER sip:172.31.250.100:5060 SIP/2.0
Via: SIP/2.0/UDP 10.10.10.100:5062;branch=z9hG4bKdd58.3
Contact: sip:10.10.10.100:5062;transport=udp
Authorization: Digest username=“2657549926”,realm=“asterisk”,nonce=“12ac64ff”,uri=“sip:172.31.250.100:5060”,response=“641484c01f7cf9a3b0e3330740c404c7”,algorithm=MD5
Call-ID: 29F8-1EF5-5D35-F0E2
CSeq: 2 REGISTER
From: sip:172.31.250.100:5060;tag=FEFD-1B9F-AE31-4819
To: sip:172.31.250.100:5060
Content-Length: 0
Expires: 1800
User-Agent: IPFX-UA B2BUA-6.0.1.3530
Accept: application/sdp
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK
Max-Forwards: 70

Sending to 10.10.10.100:5062 (NAT)

<— Transmitting (NAT) to 10.10.10.100:5062 —>
SIP/2.0 403 Forbidden (Bad auth)
Via: SIP/2.0/UDP 10.10.10.100:5062;branch=z9hG4bKdd58.3;received=10.10.10.100;rport=5062
From: sip:172.31.250.100:5060;tag=FEFD-1B9F-AE31-4819
To: sip:172.31.250.100:5060;tag=as06557ca6
Call-ID: 29F8-1EF5-5D35-F0E2
CSeq: 2 REGISTER
Server: FPBX-2.8.1(1.8.15.0)
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Content-Length: 0