SIP Trunk with Aethra SBC

Good Morning Colleagues
I hope you are doing well . One of our customers has purchased local trunk from the local SIP trunk provider in Egypt . They provide him with Aethra SBC at his premise.

We need to create SIP trunk between our FreePBX to Aethra SBC. The customer receiving numbers from local SIP provider starting from 48811700

Trunk is not working.

Below is the configuration of SIP Trunk:


Below is SIP message output from sngrep (nothing received from Aethra side)

///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

2024/04/01 10:19:18.039819 10.0.12.23:5060 → 10.0.12.22:5060
OPTIONS sip:10.0.12.22:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.12.23:5060;rport;branch=z9hG4bKPje906ac75-e2ea-4a79-baf6-635f049cdee6
From: sip:[email protected];tag=72e95b19-ef02-4290-a3eb-53a737d26114
To: sip:10.0.12.22
Contact: sip:[email protected]:5060
Call-ID: 450ba51b-455c-484b-804c-e2caf19e3061
CSeq: 7115 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-16.0.33(18.16.0)
Content-Length: 0

2024/04/01 10:19:18.539893 10.0.12.23:5060 → 10.0.12.22:5060
OPTIONS sip:10.0.12.22:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.12.23:5060;rport;branch=z9hG4bKPje906ac75-e2ea-4a79-baf6-635f049cdee6
From: sip:[email protected];tag=72e95b19-ef02-4290-a3eb-53a737d26114
To: sip:10.0.12.22
Contact: sip:[email protected]:5060
Call-ID: 450ba51b-455c-484b-804c-e2caf19e3061
CSeq: 7115 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-16.0.33(18.16.0)
Content-Length: 0

2024/04/01 10:19:19.540225 10.0.12.23:5060 → 10.0.12.22:5060
OPTIONS sip:10.0.12.22:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.12.23:5060;rport;branch=z9hG4bKPje906ac75-e2ea-4a79-baf6-635f049cdee6
From: sip:[email protected];tag=72e95b19-ef02-4290-a3eb-53a737d26114
To: sip:10.0.12.22
Contact: sip:[email protected]:5060
Call-ID: 450ba51b-455c-484b-804c-e2caf19e3061
CSeq: 7115 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-16.0.33(18.16.0)
Content-Length: 0

2024/04/01 10:19:21.540245 10.0.12.23:5060 → 10.0.12.22:5060
OPTIONS sip:10.0.12.22:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.12.23:5060;rport;branch=z9hG4bKPje906ac75-e2ea-4a79-baf6-635f049cdee6
From: sip:[email protected];tag=72e95b19-ef02-4290-a3eb-53a737d26114
To: sip:10.0.12.22
Contact: sip:[email protected]:5060
Call-ID: 450ba51b-455c-484b-804c-e2caf19e3061
CSeq: 7115 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-16.0.33(18.16.0)
Content-Length: 0

2024/04/01 10:19:25.539892 10.0.12.23:5060 → 10.0.12.22:5060
OPTIONS sip:10.0.12.22:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.12.23:5060;rport;branch=z9hG4bKPje906ac75-e2ea-4a79-baf6-635f049cdee6
From: sip:[email protected];tag=72e95b19-ef02-4290-a3eb-53a737d26114
To: sip:10.0.12.22
Contact: sip:[email protected]:5060
Call-ID: 450ba51b-455c-484b-804c-e2caf19e3061
CSeq: 7115 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-16.0.33(18.16.0)
Content-Length: 0

2024/04/01 10:19:29.540194 10.0.12.23:5060 → 10.0.12.22:5060
OPTIONS sip:10.0.12.22:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.12.23:5060;rport;branch=z9hG4bKPje906ac75-e2ea-4a79-baf6-635f049cdee6
From: sip:[email protected];tag=72e95b19-ef02-4290-a3eb-53a737d26114
To: sip:10.0.12.22
Contact: sip:[email protected]:5060
Call-ID: 450ba51b-455c-484b-804c-e2caf19e3061
CSeq: 7115 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-16.0.33(18.16.0)
Content-Length: 0

2024/04/01 10:19:33.540562 10.0.12.23:5060 → 10.0.12.22:5060
OPTIONS sip:10.0.12.22:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.12.23:5060;rport;branch=z9hG4bKPje906ac75-e2ea-4a79-baf6-635f049cdee6
From: sip:[email protected];tag=72e95b19-ef02-4290-a3eb-53a737d26114
To: sip:10.0.12.22
Contact: sip:[email protected]:5060
Call-ID: 450ba51b-455c-484b-804c-e2caf19e3061
CSeq: 7115 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-16.0.33(18.16.0)
Content-Length: 0

2024/04/01 10:19:37.539714 10.0.12.23:5060 → 10.0.12.22:5060
OPTIONS sip:10.0.12.22:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.12.23:5060;rport;branch=z9hG4bKPje906ac75-e2ea-4a79-baf6-635f049cdee6
From: sip:[email protected];tag=72e95b19-ef02-4290-a3eb-53a737d26114
To: sip:10.0.12.22
Contact: sip:[email protected]:5060
Call-ID: 450ba51b-455c-484b-804c-e2caf19e3061
CSeq: 7115 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-16.0.33(18.16.0)
Content-Length: 0

2024/04/01 10:19:41.540625 10.0.12.23:5060 → 10.0.12.22:5060
OPTIONS sip:10.0.12.22:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.12.23:5060;rport;branch=z9hG4bKPje906ac75-e2ea-4a79-baf6-635f049cdee6
From: sip:[email protected];tag=72e95b19-ef02-4290-a3eb-53a737d26114
To: sip:10.0.12.22
Contact: sip:[email protected]:5060
Call-ID: 450ba51b-455c-484b-804c-e2caf19e3061
CSeq: 7115 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-16.0.33(18.16.0)
Content-Length: 0

2024/04/01 10:19:45.541500 10.0.12.23:5060 → 10.0.12.22:5060
OPTIONS sip:10.0.12.22:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.12.23:5060;rport;branch=z9hG4bKPje906ac75-e2ea-4a79-baf6-635f049cdee6
From: sip:[email protected];tag=72e95b19-ef02-4290-a3eb-53a737d26114
To: sip:10.0.12.22
Contact: sip:[email protected]:5060
Call-ID: 450ba51b-455c-484b-804c-e2caf19e3061
CSeq: 7115 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-16.0.33(18.16.0)
Content-Length: 0

2024/04/01 10:19:49.540621 10.0.12.23:5060 → 10.0.12.22:5060
OPTIONS sip:10.0.12.22:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.12.23:5060;rport;branch=z9hG4bKPje906ac75-e2ea-4a79-baf6-635f049cdee6
From: sip:[email protected];tag=72e95b19-ef02-4290-a3eb-53a737d26114
To: sip:10.0.12.22
Contact: sip:[email protected]:5060
Call-ID: 450ba51b-455c-484b-804c-e2caf19e3061
CSeq: 7115 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-16.0.33(18.16.0)
Content-Length: 0

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

Below is Aethra Configuration (This configuration has been modified later by changing transport protocol from TCP to UDP)

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
top
set system intservices http 0
set system intservices https 443
add aaa PROFILE Login2Athera
add aaa RAC-ACCOUNT local_Database admin {–aes256–}wPHLD+3P6qNBckYu02zuKw== ADMIN any
add aaa RAC-ACCOUNT local_Database sbc {–aes256–}7c+O0MSohnP/0Ux2UeGm1w== any
set system name SBC
set system ftp-username admin
set system aaa-profile Login2Athera
set system crypted-passwords aes-256
set aaa login2athera account-group local_database
set dpa on
add bridges BRIDGE 0
set bridges bridge0 on
add certificate PROFILE Aethra
set certificate aethra ca-cert ca-cert/Root_CA.pem
set certificate aethra cert cert/Cert_AE70819042705222000018.Aethra.com.pem
set certificate aethra private-key private-key/Key_AE70819042705222000018.Aethra.com.pem
add interfaces IFC eth0-1 eth0-1
add interfaces IFC eth0-2 eth0-2
add interfaces IFC eth0-3 eth0-3
add interfaces IFC eth0-4 eth0-4
add interfaces IFC bridge0 eth0
add interfaces IFC eth1 802.1QP 878 wan_1
add interfaces IFC eth1 802.1QP 100 eth1.100
add bridges bridge0 IFC eth0-1
add bridges bridge0 IFC eth0-2
add bridges bridge0 IFC eth0-3
add bridges bridge0 IFC eth0-4
set interfaces eth0 ip address 10.0.12.22/24
more…[y][n]? y

set interfaces wan_1 ip address 10.191.0.190/31
set interfaces eth1.100 ip address 10.100.100.2/30
add ip route 10.241.94.112 255.255.255.255 10.191.0.191 1
add ip route 10.241.94.113 255.255.255.255 10.191.0.191 1
add ip route 0.0.0.0 0.0.0.0 10.191.0.191 1
add sip-services translations RULE calling1 20 match (70.) replace +20248811\1
add sip-services translations RULE calling1 21 match (71.) replace +20248811\1
add sip-services translations RULE calling1 22 match (72.) replace +20248811\1
add sip-services translations RULE calling1 23 match (73.) replace +20248811\1
add sip-services translations RULE calling1 24 match (74.) replace +20248811\1
add sip-services translations RULE calling1 25 match (75.) replace +20248811\1
add sip-services translations RULE calling1 26 match (76.) replace +20248811\1
add sip-services translations RULE calling1 27 match (77.) replace +20248811\1
add sip-services translations RULE calling1 28 match (78.) replace +20248811\1
add sip-services translations RULE called1 30 match +20248811(…) replace \1
add sip-services translations PROFILE calling-test CALLING calling1
add sip-services translations PROFILE called-test CALLED called1
add sip-services sbc SBC-SERVER sbc0
add sip-services sbc sbc0 DOMAIN dom_lan 10.0.12.22
set sip-services sbc sbc0 on
add sip-services sbc sbc0 signalling LISTENER lan
add sip-services sbc sbc0 signalling LISTENER wan
set sip-services sbc sbc0 signalling loglevel 5
set sip-services sbc sbc0 signalling si-lan transport tcp
set sip-services sbc sbc0 signalling si-lan sip-ip-address eth0
set sip-services sbc sbc0 signalling si-wan transport tls
set sip-services sbc sbc0 signalling si-wan sip-ip-address wan_1
set sip-services sbc sbc0 signalling si-wan sip-port 5061
add sip-services sbc sbc0 media LISTENER lan
add sip-services sbc sbc0 media LISTENER wan
more…[y][n]? y

set sip-services sbc sbc0 media mi-lan rtp-ip-address eth0
set sip-services sbc sbc0 media mi-wan rtp-ip-address wan_1
add sip-services sbc sbc0 profiles GROUP-PROFILE gprof_lan
add sip-services sbc sbc0 profiles GROUP-PROFILE gprof_wan
add sip-services sbc sbc0 profiles TARGET-PROFILE provider
add sip-services sbc sbc0 profiles TARGET-PROFILE pbx
add sip-services sbc sbc0 profiles tgt-provider APPEND-HEADER user-defined P-Access-Network-Info IEEE802.11;“locationinfo=10.191.0.190”;“ue-ip=10.191.0.190”;"ue-port=5061
set sip-services sbc sbc0 profiles tgt-provider user-param phone
add sip-services sbc sbc0 sip-security SECURITY-PROFILE sec_lan
add sip-services sbc sbc0 sip-security SECURITY-PROFILE sec_wan
set sip-services sbc sbc0 sip-security tls-enable on
set sip-services sbc sbc0 sip-security tls-method TLSv1.2
set sip-services sbc sbc0 sip-security certificate-profile Aethra
set sip-services sbc sbc0 sip-security verify-client-certificate off
set sip-services sbc sbc0 sip-security require-client-certificate off
add sip-services sbc sbc0 signalling-groups GROUP grp_lan
add sip-services sbc sbc0 signalling-groups GROUP grp_wan
set sip-services sbc sbc0 signalling-groups grp_lan si-listener si-lan
set sip-services sbc sbc0 signalling-groups grp_lan mi-listener mi-lan
set sip-services sbc sbc0 signalling-groups grp_lan group-profile grp-gprof_lan
set sip-services sbc sbc0 signalling-groups grp_lan security-profile sec_lan
set sip-services sbc sbc0 signalling-groups grp_wan side external
set sip-services sbc sbc0 signalling-groups grp_wan si-listener si-wan
set sip-services sbc sbc0 signalling-groups grp_wan mi-listener mi-wan
set sip-services sbc sbc0 signalling-groups grp_wan group-profile grp-gprof_wan
set sip-services sbc sbc0 signalling-groups grp_wan security-profile sec_wan
add sip-services sbc sbc0 peers VOIP-PEER Lan-PBX
add sip-services sbc sbc0 peers TRUNK-PEER IMS-TRUNK
set sip-services sbc sbc0 peers voip-lan-pbx signalling-group-name grp_lan
set sip-services sbc sbc0 peers voip-lan-pbx peer-host 10.0.12.23
more…[y][n]? y

set sip-services sbc sbc0 peers voip-lan-pbx transport tcp
set sip-services sbc sbc0 peers voip-lan-pbx sip-local-ip-address 10.0.12.22
set sip-services sbc sbc0 peers voip-lan-pbx rtp-local-ip-address 10.0.12.22
set sip-services sbc sbc0 peers trnk-ims-trunk signalling-group-name grp_wan
set sip-services sbc sbc0 peers trnk-ims-trunk sip-domain ims.te.eg
set sip-services sbc sbc0 peers trnk-ims-trunk peer-host 10.241.94.112
set sip-services sbc sbc0 peers trnk-ims-trunk peer-port 5061
set sip-services sbc sbc0 peers trnk-ims-trunk transport tls
set sip-services sbc sbc0 peers trnk-ims-trunk src-tcp-port 5061
set sip-services sbc sbc0 peers trnk-ims-trunk sip-local-ip-address 10.191.0.190
set sip-services sbc sbc0 peers trnk-ims-trunk sip-local-port 5061
set sip-services sbc sbc0 peers trnk-ims-trunk rtp-local-ip-address 10.191.0.190
set sip-services sbc sbc0 peers trnk-ims-trunk keep-alive-enable on
set sip-services sbc sbc0 registrar on
set sip-services sbc sbc0 registrar check-user-reg on
add sip-services sbc sbc0 sip-routing RULE from-provider
add sip-services sbc sbc0 sip-routing RULE to-provider
add sip-services sbc sbc0 sip-routing ROUTE IN grp_wan from-provider voip-Lan-PBX tgt-pbx called-test
add sip-services sbc sbc0 sip-routing ROUTE out grp_lan to-provider trnk-IMS-TRUNK tgt-provider calling-test
add sip-services sbc sbc0 sip-security TRUSTED-HOST Trust trnk-IMS-TRUNK 10.241.94.112 32 any-port
add sip-services sbc sbc0 sip-security TRUSTED-HOST lan-trust voip-Lan-PBX 10.0.12.23 32 any-port
set sip-services sbc sbc0 sip-routing from-provider on
set sip-services sbc sbc0 sip-routing from-provider from-uri .*
set sip-services sbc sbc0 sip-routing from-provider request-uri .*
set sip-services sbc sbc0 sip-routing to-provider on
set web server0 http OFF
set web server0 https 443
Command executed
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

Below is part of full log related to this issue:

So kindly advice.

Best Regards