FREEPBX with PUBLIC IP - clients behind NAT can not register without STUN SERVER

FREEPBX - Stable-1.815.210.58, configured with PUBLIC IP with ASTERISK SIP SETTINGS:
NAT: yes
IP Configuration: Public IP

Extension:
Nat: yes
Transport: All – UPD Primary

Other settings – default.

Problem:
SIP Client (x-Lite) behind NAT is able to register only if I set STUN SERVER (e.g stun.sipgate.net) without this is not able to Register.
Moreover, after sometime client is missing, and I cannot make a call to them (service unavaible – The person you are calling is unavaible). After restarting client everything is working OK for a moment (10-20 minutes)?

Any idea?

FREEPBX - Stable-1.815.210.58, configured with PUBLIC IP with ASTERISK SIP SETTINGS:
NAT: yes
IP Configuration: Public IP

is kind of puzzling, either you will be expecting a NAT’ed SIP rewrite or not. If you are using a public IP then you probably need nat = no. yes?

(NAT = Network Address Translation)

So we would really need a fuller description of what is between your Asterisk box and the soft phone of which you speak, with particular reference to any or all routers and how they are configured and particularly what network everything is on.

The configuration:

FREEPBX (Public IP)<—>Internet<—>NAT<—>SIP Client (X-Lite)

I thought that in this situation I should use ASTERISK SIP SETTINGS:
NAT: yes

I tried to change ASTERISK SIP SETTINGS to:

NAT: no / never /route
IP Configuration: Public IP / Static IP

behavior is the same - can not register. When I add STUN SERVER on Client I can register.

then look at the client end pnat/router box for mis-configuration and of course the soft-phone’s configuration itself.

The sip packets can be checked with

sip set debug ip/peer

at the asterisk cli. The raw udp packets quickly with

tcpdump -nn -i (wan_interface) host

Client end working ok eg with sip.freeconet.pl and with othe sip services. But it is not working with my freepbx.

Are my ASTERISK SIP SETTINGS (NAT: yes and IP Configuration: Public IP) ok?

I can not issue sip set debug peer because client is not registered.

I issue:
sip set debug ip client_ip and there is a log:

<— SIP read from UDP:83.6.196.116:44360 —>
REGISTER sip:server.myserver.info SIP/2.0
Via: SIP/2.0/UDP 192.168.1.22:44360;branch=z9hG4bK-d8754z-5a55087f7d65f042-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:44360;rinstance=50b438b5ddea8e86
To: sip:[email protected]
From: sip:[email protected];tag=1448d67e
Call-ID: NTdjNWI1ZDI0YzRjYjcxOTZjZTg3YWVmNmVmMWI4OTk.
CSeq: 1 REGISTER
Expires: 60
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:44360 (NAT)

<— Transmitting (NAT) to 83.6.196.116:44360 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.22:44360;branch=z9hG4bK-d8754z-5a55087f7d65f042-1—d8754z-;received=83.6.196.116;rport=44360

From: sip:[email protected];tag=1448d67e

To: sip:[email protected];tag=as4aa7f9eb

Call-ID: NTdjNWI1ZDI0YzRjYjcxOTZjZTg3YWVmNmVmMWI4OTk.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“047ec941”

Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘NTdjNWI1ZDI0YzRjYjcxOTZjZTg3YWVmNmVmMWI4OTk.’ in 32000 ms (Method: REGISTER)

Any idea?

Do you notice that your soft phone is trying to Register a phone from somewhere in Poland 83.6.196.116 :-
.
.
REGISTER sip:server.myserver.info SIP/2.0
.
.

which is a machine in Japan. To which your Asterisk box replies

SIP/2.0 401 Unauthorized

?

Sorry, I would like to hide my server ip and changed 212.180.163.94 to server.myserver.info - so there is a real and complete log:

What is flustrating that everywhere is “SIP/2.0 401 Unauthorized”…

Please remember if i add STUN - Client is registering OK.

Any idea?

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2012.08.23 08:16:43 =~=~=~=~=~=~=~=~=~=~=~=

<— SIP read from UDP:83.6.196.116:55760 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55760;rinstance=c4403249ccf73a94
To: sip:[email protected]
From: sip:[email protected];tag=d970c223
Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55760 (NAT)

<— Transmitting (NAT) to 83.6.196.116:55760 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;received=83.6.196.116;rport=55760

From: sip:[email protected];tag=d970c223

To: sip:[email protected];tag=as1b181c54

Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“41af2b24”

Content-Length: 0

<------------>

server*CLI>
Scheduling destruction of SIP dialog ‘YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55760 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55760;rinstance=c4403249ccf73a94
To: sip:[email protected]
From: sip:[email protected];tag=d970c223
Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55760 (NAT)

<— Transmitting (NAT) to 83.6.196.116:55760 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;received=83.6.196.116;rport=55760

From: sip:[email protected];tag=d970c223

To: sip:[email protected];tag=as1b181c54

Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“41af2b24”

Content-Length: 0

<------------>

server*CLI>
Scheduling destruction of SIP dialog ‘YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55760 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55760;rinstance=c4403249ccf73a94
To: sip:[email protected]
From: sip:[email protected];tag=d970c223
Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55760 (NAT)

<— Transmitting (NAT) to 83.6.196.116:55760 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;received=83.6.196.116;rport=55760

From: sip:[email protected];tag=d970c223

To: sip:[email protected];tag=as1b181c54

Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“41af2b24”

Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55760 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55760;rinstance=c4403249ccf73a94
To: sip:[email protected]
From: sip:[email protected];tag=d970c223
Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55760 (NAT)

<— Transmitting (NAT) to 83.6.196.116:55760 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;received=83.6.196.116;rport=55760

From: sip:[email protected];tag=d970c223

To: sip:[email protected];tag=as1b181c54

Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“41af2b24”

Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55760 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55760;rinstance=c4403249ccf73a94
To: sip:[email protected]
From: sip:[email protected];tag=d970c223
Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55760 (NAT)

<— Transmitting (NAT) to 83.6.196.116:55760 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;received=83.6.196.116;rport=55760

From: sip:[email protected];tag=d970c223

To: sip:[email protected];tag=as1b181c54

Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“41af2b24”

Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55760 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55760;rinstance=c4403249ccf73a94
To: sip:[email protected]
From: sip:[email protected];tag=d970c223
Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55760 (NAT)

<— Transmitting (NAT) to 83.6.196.116:55760 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;received=83.6.196.116;rport=55760

From: sip:[email protected];tag=d970c223

To: sip:[email protected];tag=as1b181c54

Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“41af2b24”

Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55760 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55760;rinstance=c4403249ccf73a94
To: sip:[email protected]
From: sip:[email protected];tag=d970c223
Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55760 (NAT)

server*CLI>

<— Transmitting (NAT) to 83.6.196.116:55760 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;received=83.6.196.116;rport=55760

From: sip:[email protected];tag=d970c223

To: sip:[email protected];tag=as1b181c54

Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“41af2b24”

Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55760 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55760;rinstance=c4403249ccf73a94
To: sip:[email protected]
From: sip:[email protected];tag=d970c223
Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55760 (NAT)

<— Transmitting (NAT) to 83.6.196.116:55760 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;received=83.6.196.116;rport=55760

From: sip:[email protected];tag=d970c223

To: sip:[email protected];tag=as1b181c54

Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“41af2b24”

Content-Length: 0

<------------>

server*CLI>
Scheduling destruction of SIP dialog ‘YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55760 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55760;rinstance=c4403249ccf73a94
To: sip:[email protected]
From: sip:[email protected];tag=d970c223
Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55760 (NAT)

<— Transmitting (NAT) to 83.6.196.116:55760 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;received=83.6.196.116;rport=55760

From: sip:[email protected];tag=d970c223

To: sip:[email protected];tag=as1b181c54

Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“41af2b24”

Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55760 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55760;rinstance=c4403249ccf73a94
To: sip:[email protected]
From: sip:[email protected];tag=d970c223
Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55760 (NAT)

<— Transmitting (NAT) to 83.6.196.116:55760 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;received=83.6.196.116;rport=55760

From: sip:[email protected];tag=d970c223

To: sip:[email protected];tag=as1b181c54

Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“41af2b24”

Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55760 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55760;rinstance=c4403249ccf73a94
To: sip:[email protected]
From: sip:[email protected];tag=d970c223
Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55760 (NAT)

server*CLI>

<— Transmitting (NAT) to 83.6.196.116:55760 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55760;branch=z9hG4bK-d8754z-0a03e12b4a6c2356-1—d8754z-;received=83.6.196.116;rport=55760

From: sip:[email protected];tag=d970c223

To: sip:[email protected];tag=as1b181c54

Call-ID: YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“41af2b24”

Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘YTgyNmQ4MGIzYTU5YmY1ZTBjNWMxYWI4NWJhNWYyNmU.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55761 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55761;rinstance=b78ba9a1ca137071
To: sip:[email protected]
From: sip:[email protected];tag=6775ee6f
Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —

server*CLI>
Sending to 83.6.196.116:55761 (NAT)

server*CLI>

<— Transmitting (NAT) to 83.6.196.116:55761 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;received=83.6.196.116;rport=55761

From: sip:[email protected];tag=6775ee6f

To: sip:[email protected];tag=as723f2cac

Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“1a3692cf”

Content-Length: 0

<------------>

server*CLI>
Scheduling destruction of SIP dialog ‘NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55761 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55761;rinstance=b78ba9a1ca137071
To: sip:[email protected]
From: sip:[email protected];tag=6775ee6f
Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55761 (NAT)

server*CLI>

<— Transmitting (NAT) to 83.6.196.116:55761 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;received=83.6.196.116;rport=55761

From: sip:[email protected];tag=6775ee6f

To: sip:[email protected];tag=as723f2cac

Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“1a3692cf”

Content-Length: 0

<------------>

server*CLI>
Scheduling destruction of SIP dialog ‘NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55761 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55761;rinstance=b78ba9a1ca137071
To: sip:[email protected]
From: sip:[email protected];tag=6775ee6f
Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55761 (NAT)

<— Transmitting (NAT) to 83.6.196.116:55761 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;received=83.6.196.116;rport=55761

From: sip:[email protected];tag=6775ee6f

To: sip:[email protected];tag=as723f2cac

Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“1a3692cf”

Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55761 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55761;rinstance=b78ba9a1ca137071
To: sip:[email protected]
From: sip:[email protected];tag=6775ee6f
Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55761 (NAT)

server*CLI>

<— Transmitting (NAT) to 83.6.196.116:55761 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;received=83.6.196.116;rport=55761

From: sip:[email protected];tag=6775ee6f

To: sip:[email protected];tag=as723f2cac

Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“1a3692cf”

Content-Length: 0

<------------>

server*CLI>
Scheduling destruction of SIP dialog ‘NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55761 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55761;rinstance=b78ba9a1ca137071
To: sip:[email protected]
From: sip:[email protected];tag=6775ee6f
Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55761 (NAT)

server*CLI>

<— Transmitting (NAT) to 83.6.196.116:55761 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;received=83.6.196.116;rport=55761

From: sip:[email protected];tag=6775ee6f

To: sip:[email protected];tag=as723f2cac

Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“1a3692cf”

Content-Length: 0

<------------>

server*CLI>
Scheduling destruction of SIP dialog ‘NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.’ in 32000 ms (Method: REGISTER)

server*CLI>

<— SIP read from UDP:83.6.196.116:55761 —>
REGISTER sip:212.180.163.94 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;rport
Max-Forwards: 70
Contact: sip:[email protected]:55761;rinstance=b78ba9a1ca137071
To: sip:[email protected]
From: sip:[email protected];tag=6775ee6f
Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

<------------->
— (12 headers 0 lines) —
Sending to 83.6.196.116:55761 (NAT)

server*CLI>

<— Transmitting (NAT) to 83.6.196.116:55761 —>
SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.20:55761;branch=z9hG4bK-d8754z-5d6794051b098a43-1—d8754z-;received=83.6.196.116;rport=55761

From: sip:[email protected];tag=6775ee6f

To: sip:[email protected];tag=as723f2cac

Call-ID: NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.

CSeq: 1 REGISTER

Server: FPBX-2.10.1(1.8.15.0)

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH

Supported: replaces, timer

WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“1a3692cf”

Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘NmViZjdlM2Y2Y2ExMTg4YWJhMWRkZmM3ZTdhNWE0ZTY.’ in 32000 ms (Method: REGISTER)

server*CLI>

Love it, you publish the IP of your PBX that is open to the world, no firewall or ports locked down. I guess you are in the free phone call free mail relay business?

Your long line is not helpful. Something in the NAT chain is mangling your packets.

My public IP is: 212.180.163.94 - all ports are open. Please notice that after adding STUN on client everything is OK.

Please notice that my long listing seems be OK - but I am not an expert.

No I am not “the free phone call free mail relay business”.

When you enable stun you are essentially hard coding the outside IP. Have you tried from another remote location?

If you dont want to provide free service I suggest you lock down your box.

I tested on my phone that have public IP and it registered sucessfully. So problem is when Client is behind a NAT.

Maybe MTU - any idea?

The server will provide only internal call so locking down is important but not most important.

Not the MTU, it’s just mis-configured, that’s three times I have suggested you look at the router configuration, and SkyKing once also, come on, just try fixing the router firs, it will save you a lot of time.

You are right! After reconfiguring router everything is OK!
Thank you!