Wired extension registration from voice vlan and from non voice vlan

hello, just noticed this on a few phones of Yealink t46S - 20% out of 80%

PBX is in network 192.168.168.0/24 which is vlan 1 default on cisco
all phones are in voice vlan 192.168.200.0/24 and most of them can easly register to 192.168.168.20

Some phones however cannot register at all showing yellow color of extension,

From layer 2 of network all is fine: port is trunk with dafault vlan 1 and voice 200 and that works ok, phone gets IP from vlan 200 while pbx is in vlan 1 - on router all traffic allowed, disabled firewall and fail2ban and no luck, trying to get SIP debugging using tcpdump but only see this:

2020-11-02 16:20:04.942694 IP 192.168.168.250.5160 > 192.168.168.1.sip: UDP, length 538
E`.6.B…@…(…"…SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.180.44:5060;branch=z9hG4bK2951948056;received=192.168.168.1
From: “1033” sip:[email protected]:5160;tag=1708926742
To: “1033” sip:[email protected]:5160;tag=as233bc7dc
Call-ID: [email protected]
CSeq: 1 REGISTER
Server: FPBX-15.0.16.38(16.6.2)
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“3e1092a5”
Content-Length: 0

this is really wired since most of the same phone model phones works just fine - what am I missing here?

me dummy NAT on the extension cannot be no - I changed to YES and viola

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.