SIP Lifesize conf phone registration

[teletechman]

I have an issue with registering a lifesize conf unit. The unit will register fine then it will unregister after about a minute or so. We have swapped the unit to test the account on the IP Office and the other SIP Phone work fine with no issue. This tells me that it is the unit but the provider says that is not the case. I see it register with a 200 OK then the phone tries to re-register and gets a 4010 unauthorized then a 4030 forbidden. Then after about a minute it will start this over again with it registering then being unregister. I have the trace when it happens but see nothing. The failing ext is 7098. Any ideas?
Mike

 

[snowman50]

If you can access the actual phone settings try and change the transport from UDP to TCP..

With B179 phones I have to do this in order for them to register and stay working

 

[teletechman]

Tried this and it would not even register. I made sure it was enabled in the IPO.
Mike

 

[bahmonkeys]

The IPO blocked the B179 phone. If you go into SSA you will see the blocked B179 phone.
Try changing to TLS for Sip register and upload the rootca to the B179 phone. This should resolve your issue.

 

[janni78]

Is the IP of the Lifesize unit really 192.168.128.254 ?

Looks like it's a firewall doing NAT.

"Trying is the first step to failure..." - Homer

 

[bahmonkeys]

Janni78 read the Sip trace....
It says "11:30:18 232422031mS Sip: Add extn 7098 (192.168.128.254) to quarantined"
The IPO quarantined the phone.
There is Authentication issue which needs to be solved.

 

[janni78]

Janni78 read the Sip trace

Are you kidding me? Where do you think I got the IP from?

The question is why is it quarantined, as the REGISTER works fine the first time?
And part of that answer probably lies in the fact that INVITEs come in from different ports and it's unlikely that the unit has a .254 IP address.

"Trying is the first step to failure..." - Homer

 

[janni78]

Also if we look at other SIP devices which I assume he doesn't have a problem with their SIP signaling comes from port 5060, only this seems to use random ports.

"Trying is the first step to failure..." - Homer

 

[bahmonkeys]

Janni my apologies.

I had a look more closely and saw that there is 2 different units trying to register from the same 192.168.128.254, which suggests that it is behind NAT.
LifeSize Icon 450/LS_RM3_4.4.0
Symetrix VoIP 6.16

If you enable NAT-T this will solve the Nat issue that janni78 originally posted.

 

[teletechman]

I just got back from the weekend and will look into these issues. I know the unit is not .254 not sure what is I am trying to talk to the Lifesize vendor to work with them on this. I will let you all know a resolution or ask more questions soon.
Mike