PBX Version: 16.0.45
PBX Distro: 12.7.8-2306-1.sng7
Asterisk Version: 16.30.0
This system has been running fine for many years. As of yesterday, no phones will register. They simply fail the registration. I’m looking at the logs and I don’t see anything to do with endpoints failing to register. I’ve restarted the server and phones to no avail.
Any suggestions on what to look for or how to troubleshoot?
Check the IP address isn’t banned by Fail2Ban.
That was the first place I looked. I’ve whitelisted the subnets previously. I tried stopping Fail2Ban as well and no change. What I have found though is that one single phone can still register. I tried to change the secret to force it to fail registration and it did and it complained about the credentials in the log file. As soon as I put the password back to correct, it registered right away.
From the UI on one of the phones that don’t register, check its IP address. If it’s not on the correct subnet, trace why it is misprovisioned. If the subnet is correct, try to ping it from the PBX. If the ping fails, this is a simple network problem.
If the ping is ok, check whether the phone shows the correct date and time. If not, check router/firewall, etc. If ok, log into the phone’s web interface and check server address, username, password. If the server is specified by domain name (rather than IP address), check that the name resolves correctly. There may be useful info on the ‘status’ page of the web interface.
If you still have trouble, run sngrep on the PBX. If registration attempts don’t appear there, check router/firewall, VLANs, etc. If requests appear (to the correct port) but no responses, FreePBX firewall is somehow blocking them. If responses are present, there should be info in the Asterisk log (/var/log/asterisk/full).
I have the phones on various VLANs so I opened up everything from-to VLAN where the phone server is to the VLAN where one of my phones are located. Once I did that, I was able to ping the phone from the server no problem. Still no registration. I ran sngrep and only one phone is showing any sort of registration messages and it’s on our Accounting VLAN. All other phones besides that one will not register. I disconnected that one phone and still not able to register any other phones on any VLAN. This is just so crazy because this has been working for years and nothing has changed.
So, log into the phone and see if it is sending the registration to the correct IP address and port. If so, you should be able to use port mirroring/monitoring on the various switches to see where it is getting blocked.
If not, look at the provisioning setting and the provisioning data to see why it is wrong.
I didn’t figure this out but it kind of forced me to do what I have wanted to do. Mainly to put the PBX in the DMZ on our router. I moved it to the DMZ and with a bit of reconfiguration I was able to get it working. Not sure what the original issue was but now I’m where I wanted to be long term anyway. Thanks for the suggestions Stewart.
This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.