Cisco Phone can't register on new install

I downloaded and setup a new FreePBX Distro box and used a working (at least on 1.6 asterisk) cfg.xml file for a Cisco 7941G phone. I see the phone hitting the sip port on the server and a reply back to the phone, but it won’t register. I don’t see anything in the cli and I can’t find anything blocking it from the asterisk process. Any ideas of where to look would be awsome. Thanks.

Version used FreePBX 2.9.0.7 on 172.16.0.251

[[email protected] asterisk]# asterisk -rvvvvv
Asterisk 1.8.6.0, Copyright © 1999 - 2011 Digium, Inc. and others.
Created by Mark Spencer [email protected]gium.com
Asterisk comes with ABSOLUTELY NO WARRANTY; type ‘core show warranty’ for details.
This is free software, with components licensed under the GNU General Public
License version 2 and other licenses; you are welcome to redistribute it under
certain conditions. Type ‘core show license’ for details.

== Parsing ‘/etc/asterisk/asterisk.conf’: == Found
Connected to Asterisk 1.8.6.0 currently running on dory (pid = 3174)
Verbosity is at least 5
dory*CLI> quit

[[email protected] ip-phones]# tcpdump -i eth0 port ‘5060’ -vv
21:02:51.329717 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto: TCP (6), length: 40) 172.16.0.251.sip > 172.16.0.8.50877: R, cksum 0xfd63 (correct), 0:0(0) ack 1053638650 win 0
21:05:57.710028 IP (tos 0x0, ttl 64, id 894, offset 0, flags [none], proto: TCP (6), length: 44) 172.16.0.8.53146 > 172.16.0.251.sip: S, cksum 0xbd8c (correct), 195916454:195916454(0) win 8192 <mss 1400>
21:05:57.710062 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto: TCP (6), length: 40) 172.16.0.251.sip > 172.16.0.8.53146: R, cksum 0xf4f9 (correct), 0:0(0) ack 195916455 win 0

[[email protected] ip-phones]# iptables --list
Chain INPUT (policy ACCEPT)
target prot opt source destination
fail2ban-BadBots tcp – anywhere anywhere multiport dports http,https
fail2ban-PBX-GUI tcp – anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain fail2ban-BadBots (1 references)
target prot opt source destination
RETURN all – anywhere anywhere

Chain fail2ban-FTP (0 references)
target prot opt source destination
RETURN all – anywhere anywhere

Chain fail2ban-PBX-GUI (1 references)
target prot opt source destination
RETURN all – anywhere anywhere

Chain fail2ban-SSH (0 references)
target prot opt source destination
RETURN all – anywhere anywhere

This info really does not help us know the problem. Please post the SIP packets from the capture and turn on sip debug in asterisk and post the messages when the phone tries to register.

So I went into asterisk cli and sip set debug on and nothing was output while the phone was trying to register. So then I did.

[[email protected] ~]# tcpdump -nnXSs 0 -i eth0 host 172.16.0.8
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
19:48:38.502978 IP 172.16.0.8.123 > 172.16.0.251.123: NTPv3, Client, length 48
0x0000: 4500 004c 0098 0000 4011 20e6 ac10 0008 E…L…@…
0x0010: ac10 00fb 007b 007b 0038 0000 db0f 06f9 …{.{.8…
0x0020: 0000 0ded 0002 2af1 ac10 00fb d26e d807 …*…n…
0x0030: 75ff ae15 0000 0000 0000 0000 0000 0000 u…
0x0040: 0000 0000 d26e d866 7d8f 35fc …n.f}.5.
19:48:38.503303 IP 172.16.0.251.123 > 172.16.0.8.123: NTPv3, Server, length 48
0x0000: 4500 004c 0000 4000 4011 e17d ac10 00fb E…L…@[email protected]…}…
0x0010: ac10 0008 007b 007b 0038 60e9 1c03 06ec …{.{.8`…
0x0020: 0000 0de4 0000 160b 4540 258d d26e d601 …[email protected]%…n…
0x0030: 9974 9085 d26e d866 7d8f 35fc d26e d866 .t…n.f}.5…n.f
0x0040: 80bc 14bb d26e d866 80be f621 …n.f…!
19:48:43.502551 arp who-has 172.16.0.8 tell 172.16.0.251
0x0000: 0001 0800 0604 0001 0030 18a5 d0f0 ac10 …0…
0x0010: 00fb 0000 0000 0000 ac10 0008 …
19:48:43.502832 arp reply 172.16.0.8 is-at 00:19:e8:8f:35:68
0x0000: 0001 0800 0604 0002 0019 e88f 3568 ac10 …5h…
0x0010: 0008 0030 18a5 d0f0 ac10 00fb 0000 0000 …0…
0x0020: 0000 0000 0000 0000 0000 0000 0000 …
19:49:42.488479 IP 172.16.0.8.123 > 172.16.0.251.123: NTPv3, Client, length 48
0x0000: 4500 004c 0099 0000 4011 20e5 ac10 0008 E…L…@…
0x0010: ac10 00fb 007b 007b 0038 0000 1b04 06f9 …{.{.8…
0x0020: 0000 0de7 0000 2e79 ac10 00fb d26e d866 …y…n.f
0x0030: 7dab c604 d26e d866 80be f621 d26e d866 }…n.f…!.n.f
0x0040: 7dab c604 d26e d8a6 7d8e 29e8 }…n…}.).
19:49:42.488832 IP 172.16.0.251.123 > 172.16.0.8.123: NTPv3, Server, length 48
0x0000: 4500 004c 0000 4000 4011 e17d ac10 00fb E…L…@[email protected]…}…
0x0010: ac10 0008 007b 007b 0038 e993 1c03 06ec …{.{.8…
0x0020: 0000 0de4 0000 164a 4540 258d d26e d601 …[email protected]%…n…
0x0030: 9974 9085 d26e d8a6 7d8e 29e8 d26e d8a6 .t…n…}.)…n…
0x0040: 7d1f 380e d26e d8a6 7d22 5c73 }.8…n…}"\s
19:49:47.487808 arp who-has 172.16.0.8 tell 172.16.0.251
0x0000: 0001 0800 0604 0001 0030 18a5 d0f0 ac10 …0…
0x0010: 00fb 0000 0000 0000 ac10 0008 …
19:49:47.488158 arp reply 172.16.0.8 is-at 00:19:e8:8f:35:68
0x0000: 0001 0800 0604 0002 0019 e88f 3568 ac10 …5h…
0x0010: 0008 0030 18a5 d0f0 ac10 00fb 0000 0000 …0…
0x0020: 0000 0000 0000 0000 0000 0000 0000 …

Thank you for any ideas you might have.

[[email protected] ~]# tcpdump -nnXSs 0 -i eth0 port 5060
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
19:41:52.898674 IP 172.16.0.8.51441 > 172.16.0.251.5060: S 1051024979:1051024979(0) win 8192 <mss 1400>
0x0000: 4500 002c 0062 0000 4006 2147 ac10 0008 E…,.b…@.!G…
0x0010: ac10 00fb c8f1 13c4 3ea5 5e53 0000 0000 …>.^S…
0x0020: 6002 2000 a590 0000 0204 0578 0000 ..........x.. 19:41:52.898932 IP 172.16.0.251.5060 > 172.16.0.8.51441: R 0:0(0) ack 1051024980 win 0 0x0000: 4500 0028 0000 4000 4006 e1ac ac10 00fb E..([email protected]@....... 0x0010: ac10 0008 13c4 c8f1 0000 0000 3ea5 5e54 ............>.^T 0x0020: 5014 0000 dcfd 0000 P....... 19:44:30.777247 IP 172.16.0.8.50309 > 172.16.0.251.5060: S 724056174:724056174(0) win 8192 <mss 1400> 0x0000: 4500 002c 007b 0000 4006 212e ac10 0008 E..,.{[email protected]!..... 0x0010: ac10 00fb c485 13c4 2b28 386e 0000 0000 ........+(8n.... 0x0020: 6002 2000 e35e 0000 0204 0578 0000…^…x…
19:44:30.777283 IP 172.16.0.251.5060 > 172.16.0.8.50309: R 0:0(0) ack 724056175 win 0
0x0000: 4500 0028 0000 4000 4006 e1ac ac10 00fb E…(…@[email protected]
0x0010: ac10 0008 13c4 c485 0000 0000 2b28 386f …+(8o
0x0020: 5014 0000 1acc 0000 P…

So today I installed a softphone on my PC and using the same user/pass as I put into the cisco phone, I was able to register and make calls. So it would appear that its got to be a cisco ip phone issue I guess.

I had this issue awhile back… funky sip issue with Cisco 794X and 796X; not sure if the issue exists in later sip firmwares.
In the extension settings try setting
qualify=no
nat=never

I already had those set that way in extension settings. From my further research there seems to be at least two versions of the 7941G. Mine is the 7941G V1 and there is a V2. The V2 has the red in the cisco logo and the V2 is noted on the model number sticker on the back.

I begining to think that these cisco phones are becoming more of a headache to get working with asterisk than they are worth. I think I’ll do another post to get advice on other sip phones that have all the same options as the 7941G series but are new and work well with Asterisk.

I have many customers with large installed bases of these phones. That are difficult to get running.

How many do you have? If they are in acceptable shape I will trade the for Cisco 504G’s they are much simpler to configured and well supported.

I have access to probably like 70 of the V1’s. I would say that 99pct of them are in good to great shape. They were all being used before this division was sold off and then down sized. I was able to get the V2’s to register with an AsteriskNow that someone else setup before I got on the scene. Sadly that setup is having stability issues with the console + ssh locking up, so I have to hard reboot the server to get the console and ssh ability back. Can you contact me off list at praetoriancode at gmail dot com about your offer.

I haven’t heard from you about the offer? I would like to get one so that I can continue testing. Please see my off list email above.

Thanks.

I am sorry should have written you. I could not do it for 70 of them.

I think I could move about 20.

Could we try swapping one to start? I want to try the 504G with the FreePBX distro I setup for testing. No use buying 504G’s if we can swap some. Any qty will work for me. I also don’t need them all at once. We can swap whatever you can over time. I understand these are tough times and inventory levels are a big concern for most shops. Please just email me at praetoriancode at gmail dot com to arrange for the swap of one soon, so I can continue testing. Thank you.