Yealink t53W phones keeps disconnecting

FreePBX: FreePBX 13.0.197.31
I have some Yealink T53W phones.
Every 30sec or so I get the traffic listed below. The phones disconnect/reconnect. They go offline briefly (Seconds) during this time which cuts off any calls but the problem happens without any active calls.

On the my Sonicwall TZ205 I have enable consistent NAT, upped UDP timeout to 300. Not sure where else to look. It feels like some sort of NAT/Network issue I haven;t been able to pin down.

== Contact 3503/sip:3503@DevicePublicIP:14870 has been deleted
== Endpoint 3503 is now Unreachable
– Removed contact ‘sip:3504@DevicePublicIP:15203’ from AOR ‘3504’ due to request
== Contact 3504/sip:3504@DevicePublicIP:15203 has been deleted
== Endpoint 3504 is now Unreachable
– Removed contact ‘sip:3502@DevicePublicIP:14842’ from AOR ‘3502’ due to request
== Contact 3502/sip:3502@DevicePublicIP:14842 has been deleted
== Endpoint 3502 is now Unreachable
– Removed contact ‘sip:3501@DevicePublicIP:14909’ from AOR ‘3501’ due to request
== Contact 3501/sip:3501@DevicePublicIP:14909 has been deleted
== Endpoint 3501 is now Unreachable
– Removed contact ‘sip:3505@DevicePublicIP:14848’ from AOR ‘3505’ due to request
== Contact 3505/sip:3505@DevicePublicIP:14848 has been deleted
== Endpoint 3505 is now Unreachable
– Attempted to remove non-existent contact ‘sip:3503@DevicePublicIP:14870’ from AOR ‘3503’ by request
– Attempted to remove non-existent contact ‘sip:3504@DevicePublicIP:15203’ from AOR ‘3504’ by request
– Attempted to remove non-existent contact ‘sip:3502@DevicePublicIP:14842’ from AOR ‘3502’ by request
– Attempted to remove non-existent contact ‘sip:3505@DevicePublicIP:14848’ from AOR ‘3505’ by request
– Attempted to remove non-existent contact ‘sip:3501@DevicePublicIP:14909’ from AOR ‘3501’ by request
– Added contact ‘sip:3503@DevicePublicIP:14870’ to AOR ‘3503’ with expiration of 3600 seconds
== Endpoint 3503 is now Reachable
– Contact 3503/sip:3503@DevicePublicIP:14870 is now Reachable. RTT: 24.719 msec
– Added contact ‘sip:3504@DevicePublicIP:15203’ to AOR ‘3504’ with expiration of 3600 seconds
== Endpoint 3504 is now Reachable
– Contact 3504/sip:3504@DevicePublicIP:15203 is now Reachable. RTT: 26.783 msec
– Added contact ‘sip:3502@DevicePublicIP:14842’ to AOR ‘3502’ with expiration of 3600 seconds
== Endpoint 3502 is now Reachable
– Contact 3502/sip:3502@DevicePublicIP:14842 is now Reachable. RTT: 24.870 msec
– Added contact ‘sip:3505@DevicePublicIP:14848’ to AOR ‘3505’ with expiration of 3600 seconds
– Added contact ‘sip:3501@DevicePublicIP:14909’ to AOR ‘3501’ with expiration of 3600 seconds
== Endpoint 3505 is now Reachable
– Contact 3505/sip:3505@DevicePublicIP:14848 is now Reachable. RTT: 23.341 msec
== Endpoint 3501 is now Reachable
– Contact 3501/sip:3501@DevicePublicIP:14909 is now Reachable. RTT: 23.537 msec

Big picture? If you have an on-site PBX and the T53Ws are on the same LAN, the phones should not have any NAT traversal enabled, should be talking directly to the PBX, Contacts should be LAN addresses and the Sonicwall should not be in the path at all.

If these are remote phones with the PBX at headquarters, describe the networking at HQ.

If these are remote phones with a cloud PBX, describe any firewall setup for the cloud server.

Phones are remote. They talk to a FreePBX server at a Data Center not run by me. I have several hundred other phones from a variety of IP’s that connect to the same data center. The only Firewall things I have managed for other deployments is the FreePBX firewall. This site has a static IP which is trusted by FreePBX.

In the T53W, for each active account, try setting register expires to 120 (default is 3600).

If no luck, post a new log from /var/log/asterisk/full (so timestamps are included).

3504 is the only ext. I am making changes on. I did change transport to TCP to see if it made a difference. It did not.

[2024-06-12 08:57:10] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:10.859-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3505”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14848”,UsingPassword=“1”
[2024-06-12 08:57:10] VERBOSE[1029] res_pjsip_registrar.c: Removed contact ‘sip:3505@DevicePublicIP:14848’ from AOR ‘3505’ due to request
[2024-06-12 08:57:10] VERBOSE[31568] res_pjsip/pjsip_options.c: Contact 3505/sip:3505@DevicePublicIP:14848 has been deleted
[2024-06-12 08:57:10] VERBOSE[31568] res_pjsip/pjsip_configuration.c: Endpoint 3505 is now Unreachable
[2024-06-12 08:57:10] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:10.972-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3501”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14909”,UsingPassword=“1”
[2024-06-12 08:57:10] VERBOSE[11316] res_pjsip_registrar.c: Removed contact ‘sip:3501@DevicePublicIP:14909’ from AOR ‘3501’ due to request
[2024-06-12 08:57:10] VERBOSE[11181] res_pjsip/pjsip_options.c: Contact 3501/sip:3501@DevicePublicIP:14909 has been deleted
[2024-06-12 08:57:11] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:11.011-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3502”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14842”,UsingPassword=“1”
[2024-06-12 08:57:11] VERBOSE[3798] res_pjsip_registrar.c: Removed contact ‘sip:3502@DevicePublicIP:14842’ from AOR ‘3502’ due to request
[2024-06-12 08:57:11] VERBOSE[6061] res_pjsip/pjsip_options.c: Contact 3502/sip:3502@DevicePublicIP:14842 has been deleted
[2024-06-12 08:57:11] VERBOSE[6061] res_pjsip/pjsip_configuration.c: Endpoint 3502 is now Unreachable
[2024-06-12 08:57:11] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:11.184-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3503”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14870”,UsingPassword=“1”
[2024-06-12 08:57:11] VERBOSE[10132] res_pjsip_registrar.c: Removed contact ‘sip:3503@DevicePublicIP:14870’ from AOR ‘3503’ due to request
[2024-06-12 08:57:11] VERBOSE[10132] res_pjsip/pjsip_options.c: Contact 3503/sip:3503@DevicePublicIP:14870 has been deleted
[2024-06-12 08:57:11] VERBOSE[10132] res_pjsip/pjsip_configuration.c: Endpoint 3503 is now Unreachable
[2024-06-12 08:57:11] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:11.350-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3504”,SessionID="[email protected]",LocalAddress=“IPV4/TCP/PBXPublicIP/5061”,RemoteAddress=“IPV4/TCP/DevicePublicIP/16869”,UsingPassword=“1”
[2024-06-12 08:57:11] VERBOSE[31568] res_pjsip_registrar.c: Removed contact ‘sip:3504@DevicePublicIP:16869;transport=TCP’ from AOR ‘3504’ due to request
[2024-06-12 08:57:11] VERBOSE[23078] res_pjsip/pjsip_options.c: Contact 3504/sip:3504@DevicePublicIP:16869;transport=TCP has been deleted
[2024-06-12 08:57:11] VERBOSE[23078] res_pjsip/pjsip_configuration.c: Endpoint 3504 is now Unreachable
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“ChallengeSent”,EventTV=“2024-06-12T08:57:12.371-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3505”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14848”,Challenge=“”
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:12.387-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3505”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14848”,UsingPassword=“1”
[2024-06-12 08:57:12] VERBOSE[19711] res_pjsip_registrar.c: Attempted to remove non-existent contact ‘sip:3505@DevicePublicIP:14848’ from AOR ‘3505’ by request
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“ChallengeSent”,EventTV=“2024-06-12T08:57:12.464-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3501”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14909”,Challenge=“”
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:12.480-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3501”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14909”,UsingPassword=“1”
[2024-06-12 08:57:12] VERBOSE[6229] res_pjsip_registrar.c: Attempted to remove non-existent contact ‘sip:3501@DevicePublicIP:14909’ from AOR ‘3501’ by request
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“ChallengeSent”,EventTV=“2024-06-12T08:57:12.507-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3502”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14842”,Challenge=“”
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:12.525-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3502”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14842”,UsingPassword=“1”
[2024-06-12 08:57:12] VERBOSE[2674] res_pjsip_registrar.c: Attempted to remove non-existent contact ‘sip:3502@DevicePublicIP:14842’ from AOR ‘3502’ by request
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“ChallengeSent”,EventTV=“2024-06-12T08:57:12.698-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3503”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14870”,Challenge=“”
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:12.719-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3503”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14870”,UsingPassword=“1”
[2024-06-12 08:57:12] VERBOSE[3447] res_pjsip_registrar.c: Attempted to remove non-existent contact ‘sip:3503@DevicePublicIP:14870’ from AOR ‘3503’ by request
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“ChallengeSent”,EventTV=“2024-06-12T08:57:12.869-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3505”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14848”,Challenge=“”
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:12.886-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3505”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14848”,UsingPassword=“1”
[2024-06-12 08:57:12] VERBOSE[11490] res_pjsip_registrar.c: Added contact ‘sip:3505@DevicePublicIP:14848’ to AOR ‘3505’ with expiration of 3600 seconds
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“ChallengeSent”,EventTV=“2024-06-12T08:57:12.907-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3505”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14848”,Challenge=“”
[2024-06-12 08:57:12] VERBOSE[28200] res_pjsip/pjsip_configuration.c: Endpoint 3505 is now Reachable
[2024-06-12 08:57:12] VERBOSE[28200] res_pjsip/pjsip_options.c: Contact 3505/sip:3505@DevicePublicIP:14848 is now Reachable. RTT: 25.042 msec
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:12.923-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3505”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14848”,UsingPassword=“1”
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“ChallengeSent”,EventTV=“2024-06-12T08:57:12.949-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3505”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14848”,Challenge=“”
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“ChallengeSent”,EventTV=“2024-06-12T08:57:12.963-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3501”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14909”,Challenge=“”
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:12.968-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3505”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14848”,UsingPassword=“1”
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“SuccessfulAuth”,EventTV=“2024-06-12T08:57:12.980-0600”,Severity=“Informational”,Service=“PJSIP”,EventVersion=“1”,AccountID=“3501”,SessionID="[email protected]",LocalAddress=“IPV4/UDP/PBXPublicIP/5061”,RemoteAddress=“IPV4/UDP/DevicePublicIP/14909”,UsingPassword=“1”
[2024-06-12 08:57:12] VERBOSE[20865] res_pjsip_registrar.c: Added contact ‘sip:3501@DevicePublicIP:14909’ to AOR ‘3501’ with expiration of 3600 seconds
[2024-06-12 08:57:12] SECURITY[1504] res_security_log.c: SecurityEvent=“ChallengeSent”,EventTV="2024-06-12T08:57:12.994-

Here is a pastebin link to the full log I pulled. [2024-06-12 08:57:10] SECURITY[1504] res_security_log.c: SecurityEvent="Successf - Pastebin.com

Well, it has to do something with EPM. I factory reset the phones than manually configured and have so far not run into any issues.