CS1000E rls 6.0 cant register to SIP GW

[hellzb33]

Hi everyone,

I am currently installing a sip trunk between my cs1k v6.0 and my bcm 50. The BCM endpoint has successfully registered with the gateway but the cs1000 endpoint for some reason is unable to do so. I have checked endpoints names and passwords and they all match. Everything else seems ok, I guess untill I can have it registered, theres nothing else I can do. Here is what I have as the output for SipGwShow Command :

SIPNPM Status : Active
Primary Proxy IP address : 192.168.20.10
Primary Proxy port : 5060
Primary Proxy Transport : TCP
Secondary Proxy IP address : 0.0.0.0
Secondary Proxy port : 5060
Secondary Proxy Transport : UDP
Active Proxy : Primary :Not Registered
Time To Next Registration : 5 Seconds
Channels Busy / Idle / Total : 0 / 4 / 4
Stack version : 4.0.0.30
TLS Security Policy : Security Disabled
SIP Gw Registration Trace : OFF
Output Type Used : RPT
Channel tracing : -1

NRS settings :

Server Configuration

Host name cs1000
Primary TLAN IP address 192.168.20.10
Secondary TLAN IP address 0.0.0.0
Secondary server host name cs1000
Control priority 40
Server mate communication port 1720
Realm name cs1000
Server role Primary

H.323 Gatekeeper Settings
Location request (LRQ) response timeout 3

SIP Server Settings
Public name for non-trusted networks cs1000
Public number for non-trusted networks 000-000
UDP Transport enabled
Primary server UDP IP 192.168.20.10
Primary server UDP port 5060
Secondary server UDP IP 0.0.0.0
Secondary server UDP port 5060
TCP Transport enabled
Primary server TCP IP 192.168.20.10
Primary server TCP port 5060
Secondary server TCP IP 0.0.0.0
Secondary server TCP port 5060
TLS Transport enabled
Primary server TLS IP 192.168.20.10
Primary server TLS port 5061
Secondary server TLS IP 0.0.0.0
Secondary server TLS port 5061

Transport Layer Security (TLS) Settings
Maximum session cache 2048000
Session cache timeout 600
Renegotiation in byte 2048000
X509 Certificate authentication
Client authentication
Network Connection Server (NCS) Settings
Primary NCS port 16500
Secondary NCS port 16500
Primary NCS timeout 10


What would you check first, aside the endpoints names in NRS or Node config ? Im lost..

Thanks !

 

[Reusser]

when it tries to registar what messages are you seeing?

Does the domain name match in both SigServer setting and NRS?

 

[hellzb33]

Hi Reusser !

Does the domain name match in both SigServer setting and NRS? (YES)

when it tries to registar what messages are you seeing?

How can I see these messages? I have just turned SIP Gw Registration Trace to ON, but I dont know where/how to read the logs.

Thanks

 

[hellzb33]

anyone ?

 

[allenmac]

Are all your elements in the CS1000 registered to your security domain?

 

[hellzb33]

Hello Allenmac,

I am unsure on how to validate this, I know the security domain issue is a pain for a lot of people in 6.0 release and so far I havent had a problem with this but i am not too much familiar with it.


=> reg ucm sys
Command aborted.

=>
SEC019 Logged in user: admin1 doesn't have SEC_ADMIN privilege.

 

[allenmac]

If you can log into an element without using an admin level security password, then it is not registered.

Also, the element manager should show the registration status of all your elements.

From your message above, that element is not registered. What packages are running on that server?

 

[hellzb33]

Host Name Address Node Id Base Version Server Status Current Operation Deployed Applications
cs1k(primary) 192.168.20.10 2009 6.00.18 Deployed(6.00.18)

CS+SS+NRS+EM

 

[allenmac]

All those packages need to register to the security domain in order to function properly.

Is this also your Primary Security Server?

 

[hellzb33]

I was able to get a result from that command using admin password with Security privileges.

=> reg ucm sys

SEC037 Security domain membership has been granted. (Centralized authentication is now
enabled.)
DONE !
IP address of the Primary Security Server [192.168.20.10]: 192.168.0.10
User Name (UCM): admin
Password (admin):

There are no elements to request security domain membership.

=>

 

[allenmac]

Alright!

is the SIP GW registered now also?

 

[hellzb33]

Unfortunately... its not.

SIPNPM Status : Active
Primary Proxy IP address : 192.168.20.10
Primary Proxy port : 5060
Primary Proxy Transport : UDP
Secondary Proxy IP address : 0.0.0.0
Secondary Proxy port : 5060
Secondary Proxy Transport : UDP
Active Proxy : Primary :Not Registered
Time To Next Registration : 1 Seconds
Channels Busy / Idle / Total : 0 / 4 / 4
Stack version : 4.0.0.30
TLS Security Policy : Security Disabled
SIP Gw Registration Trace : ON
Output Type Used : RPT
Channel tracing : -1

 

[allenmac]

Is your IP node built?

 

[hellzb33]

Of course. There is a BCM 50 that is successfully registered with the same gatekeeper.

 

[hellzb33]

Hi all,

I have checked the Signalling server log, here is what I found :

------------------------------

16917 Jan 8 15:27:39 vtrk: (INFO) tSSG: SIPGwRegTrace: #012Incoming SIP 403 Forbidden #012NRS IP: 192.168.20.10:5060(Primary) #012Address of Record:<SIP:cs1000@voipgalaxy.com>

16918 Jan 8 15:28:05 vtrk: (INFO) tSSG: SIPGwRegTrace: #012Outgoing SIP method REGISTER #012NRS IP:192.168.20.10:5060(Primary) #012Address of Record:<SIP:cs1000@voipgalaxy.com> #012Contacts:192.168.20.5:5060:UDP:expires=30;

16919 Jan 8 15:28:05 vtrk: (INFO) tSSG: SIPGwRegTrace: #012Incoming SIP 403 Forbidden #012NRS IP: 192.168.20.10:5060(Primary) #012Address of Record:<SIP:cs1000@voipgalaxy.com>

I dont know if this might help anybody to help me but we will see...

Thanks !

 

[allenmac]

Can you ping cs1000@voipgalaxy.com by name?

If not, then you need to add cs1000 to the host table in element manager.