Cisco 8851 2 extensions

I am running FreePBX 16.0.40.7 and having a problem with a Cisco 8851 (pjsip and tls) when trying to add a 2nd extension on the phone. If I do 1 extension it is fine and I have 4 8851s registered this way.

The 2 extensions were previously on a Cisco 7970 that died. That phone was setup as pjsip and not using TLS. Both extensions worked fine. Here is the old sepmac.cnf.xml for the 7970.

<sipLines>
        <line button="1">
 	<featureID>9</featureID>
 	<featureLabel>5555</featureLabel>
 	<proxy>USECALLMANAGER</proxy>
 	<port>5062</port>
 	<name>5555</name>
 	<displayName>Telluride</displayName>
 	<autoAnswer>
		<autoAnswerEnabled>2</autoAnswerEnabled>
 		</autoAnswer>
 <callWaiting>3</callWaiting>
 <authName>5555</authName>
 <authPassword>password</authPassword>
 <sharedLine>false</sharedLine>
 <messageWaitingLampPolicy>3</messageWaitingLampPolicy>
 <messagesNumber>*97</messagesNumber>
 <ringSettingIdle>4</ringSettingIdle>
 <ringSettingActive>5</ringSettingActive>
 <contact>5555</contact>
 <forwardCallInfoDisplay>
 <callerName>true</callerName>
 <callerNumber>false</callerNumber>
 <redirectedNumber>false</redirectedNumber>
 <dialedNumber>true</dialedNumber>
 </forwardCallInfoDisplay>
	  </line>
  
	<phoneLabel>Telluride</phoneLabel>
 		<line button="2">
 	<featureID>9</featureID>
 	<featureLabel>7760</featureLabel>
 	<proxy>USECALLMANAGER</proxy>
 	<port>5062</port>
 	<name>7760</name>
 	<displayName>VMware</displayName>
 	<autoAnswer>
		<autoAnswerEnabled>2</autoAnswerEnabled>
 		</autoAnswer>
 <callWaiting>3</callWaiting>
 <authName>7760</authName>
 <authPassword>password</authPassword>
 <sharedLine>false</sharedLine>
 <messageWaitingLampPolicy>3</messageWaitingLampPolicy>
 <messagesNumber>*97</messagesNumber>
 <ringSettingIdle>4</ringSettingIdle>
 <ringSettingActive>5</ringSettingActive>
 <contact>7760</contact>
 <forwardCallInfoDisplay>
 <callerName>true</callerName>
 <callerNumber>false</callerNumber>
 <redirectedNumber>false</redirectedNumber>
 <dialedNumber>true</dialedNumber>
 </forwardCallInfoDisplay>
 	  </line>
      </sipLines>

Here is the 8851 config that just will not work when 2 lines are present. It will error out on registering ext 7760 with a failed to authenticate. It’s not a password because if I take the second extension out of the XML, it will authenticate just fine. I rea that the 2nd line shouldnt have an authname or auth password. For secondary lines, do not include <authName > and <authPassword > as the phones only support one set of credentials. I don’t find that to be the case because the 7960 could have 2 sets of credentials.

<sipLines>
        <line button="1" lineIndex="1">
           <featureID>9</featureID>
           <featureLabel>7760</featureLabel>
           <name>7760</name>
           <displayName>Jeff</displayName>
           <contact>7760</contact>
           <proxy>USECALLMANAGER</proxy>
           <port>5061</port>
           <autoAnswer>
           <autoAnswerEnabled>0</autoAnswerEnabled>
           </autoAnswer>
           <callWaiting>3</callWaiting>
           <authName>7760</authName>
           <authPassword>password</authPassword>
           <sharedLine>false</sharedLine>
           <messageWaitingLampPolicy>3</messageWaitingLampPolicy>
	   <messageWaitingAMWI>1</messageWaitingAMWI>
           <messagesNumber>*97</messagesNumber>
           <ringSettingIdle>4</ringSettingIdle>
           <ringSettingActive>5</ringSettingActive>
           <forwardCallInfoDisplay>
              <callerName>true</callerName>
              <callerNumber>false</callerNumber>
              <redirectedNumber>false</redirectedNumber>
              <dialedNumber>true</dialedNumber>
           </forwardCallInfoDisplay>
			<maxNumCalls>4</maxNumCalls>
			<busyTrigger>2</busyTrigger>
		</line>	
		<line button="2">
           <featureID>9</featureID>
           <featureLabel>5555</featureLabel>
           <name>5555</name>
           <displayName>Telluride</displayName>
           <contact>5555</contact>
           <proxy>USECALLMANAGER</proxy>
           <port>5061</port>
           <autoAnswer>
           <autoAnswerEnabled>0</autoAnswerEnabled>
           </autoAnswer>
           <callWaiting>3</callWaiting>
           <sharedLine>false</sharedLine>
           <messageWaitingLampPolicy>3</messageWaitingLampPolicy>
	   <messageWaitingAMWI>1</messageWaitingAMWI>
           <messagesNumber>*97</messagesNumber>
           <ringSettingIdle>4</ringSettingIdle>
           <ringSettingActive>5</ringSettingActive>
           <forwardCallInfoDisplay>
              <callerName>true</callerName>
              <callerNumber>false</callerNumber>
              <redirectedNumber>false</redirectedNumber>
              <dialedNumber>true</dialedNumber>
           </forwardCallInfoDisplay>
			<maxNumCalls>4</maxNumCalls>
			<busyTrigger>2</busyTrigger>
		</line>	
	</sipLines>

If I try the XML without the extension 5555 having credentials I will get:

[2024-05-06 20:35:09] NOTICE[11745] res_pjsip/pjsip_distributor.c: Request ‘REGISTER’ from ‘sip:[email protected]’ failed for ‘10.10.15.116:49367’ (callid: [email protected]) - Failed to authenticate
2770 [2024-05-06 20:35:09] NOTICE[26852] res_pjsip/pjsip_distributor.c: Request ‘REGISTER’ from ‘sip:[email protected]’ failed for ‘10.10.15.116:49367’ (callid: [email protected]) - Failed to authenticate
2771 [2024-05-06 20:35:09] NOTICE[20990] res_pjsip/pjsip_distributor.c: Request ‘REGISTER’ from ‘sip:[email protected]’ failed for ‘10.10.15.116:49367’ (callid: [email protected]) - Failed to authenticate
2772 [2024-05-06 20:35:09] NOTICE[15690] res_pjsip/pjsip_distributor.c: Request ‘REGISTER’

Adding credentials to the 2nd extension and line 7760 will error out like the above log and 5555 doesn’t show anything or register in the logs.

I am at a loss here. Like I said, I changed the physical phone and switched to TLS for both extensions. PJSIP was always in play and with 1 extension it works just fine. I can get either line to register on the phone, just not together.

Jeff

I know nothing about these phones, but I don’t understand what you are posting… Are you saying that adding
<authPassword>password</authPassword>
to the
<line button="2">
section
causes extension 5555 to no longer register, even if Secret is the same for both extensions? If so, do the Asterisk logs show 5555 no longer attempting to register, or is authentication failing? What do the phone logs show?

Hi @Stewart1

Actually if I have the authName / AuthPassword field in the 2nd extension it doesn’t make a difference as to registration. If it is in the 2nd line configuration neither line registers and the first extension 7760 errors out in the logs.

If I take it out of the 2nd line configuration, the 1st line (7760) registers, but the 2nd (5555) errors out.

As for the logs right now, I have the phone powered off as it just spams the logs over and over trying to register.

Your first post shows Line 2 with authName but without authPassword, which seems weird.

Please explain. FreePBX doesn’t have an authName field for an extension.

Please post Asterisk log for the attempts with pjsip logger turned on.

Likewise as above.

Hi @Stewart1

I just noticed that as well. It was from playing with the config. I will remove that. Regardless, doesn’t make a difference.

AuthName is a Cisco name for the SIP username.

I will get the logs tonight.

pbx logs:

2260	[2024-05-07 19:48:56] VERBOSE[20990] res_pjsip_registrar.c: Added contact 'sip:[email protected]:50772;transport=TLS' to AOR '7760' with expiration of 900 seconds	
2261	[2024-05-07 19:48:56] NOTICE[11745] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '10.10.15.116:50772' (callid: [email protected]) - Failed to authenticate	
2262	[2024-05-07 19:48:57] NOTICE[15690] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '10.10.15.116:50772' (callid: [email protected]) - Failed to authenticate	
2263	[2024-05-07 19:48:57] NOTICE[3158] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '10.10.15.116:50772' (callid: [email protected]) - Failed to authenticate	
2264	[2024-05-07 19:48:57] NOTICE[11745] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '10.10.15.116:50772' (callid: [email protected]) - Failed to authenticate	
2265	[2024-05-07 19:48:57] NOTICE[20990] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '10.10.15.116:50772' (callid: [email protected]) - Failed to authenticate	
2266	[2024-05-07 19:48:57] VERBOSE[26852] res_pjsip/pjsip_options.c: Contact 7760/sip:[email protected]:50772;transport=TLS is now Reachable. RTT: 178.509 msec	
2267	[2024-05-07 19:48:57] NOTICE[3158] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '10.10.15.116:50772' (callid: [email protected]) - Failed to authenticate	
2268	[2024-05-07 19:48:57] WARNING[1739] pjproject: SSL 6 [SSL_ERROR_ZERO_RETURN] (Read) ret: 0 len: 65535	
2269	[2024-05-07 19:48:57] VERBOSE[11745] res_pjsip_registrar.c: Removed contact 'sip:[email protected]:50772;transport=TLS' from AOR '7760' due to shutdown	
2270	[2024-05-07 19:48:57] VERBOSE[26852] res_pjsip/pjsip_options.c: Contact 7760/sip:[email protected]:50772;transport=TLS has been deleted	

It just repeats this over and over.

8851 logs are too big to attach.

Looks like we can close this. For reference PJSIP does not allow 2 lines from the same device with a Cisco 88xx series phone. The patched version of chan_sip does.

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.