Jump to content

AXON with Cisco 7940 Error "SIP/2.0 401 Unauthorized"


kamilsey

Recommended Posts

Hi All

 

I just got a few Cisco 7940 in and am having problems connecting them to AXON. I have 6 Cisco 7912 connected fine but have spent 3 days trying to get the 7940 to work.

 

I have uploaded the most recent sip firmware from cisco and it all seems to work. But i just doesnt connect.

 

At first i noticed that i would only get an error in AXON if the extention was not there. IE "Unknown ID trying to register." So i played around and realised that it must be connecting but not properly.

 

So i looked at the SIP Trace logs and find that it constantly returns "SIP/2.0 401 Unauthorized" and thats a few hundred a second.

 

The SIP Logs are:

 

18:05:36 UDP Packet Received from 192.168.1.82:50970 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

REGISTER sip:192.168.1.11 SIP/2.0

Via: SIP/2.0/UDP 192.168.1.82:5061;branch=z9hG4bK239cc116

From: <sip:121@192.168.1.11>;tag=0006d737d15a00273f7a9931-528120a4

To: <sip:121@192.168.1.11>

Call-ID: 0006d737-d15a0003-3acce808-747e07bc@192.168.1.82

Max-Forwards: 70

CSeq: 120 REGISTER

User-Agent: Cisco-CP7940G/8.0

Contact: <sip:121@192.168.1.82:5061;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0006d737d15a>";+u.sip!model.ccm.cisco.com="8"

Content-Length: 0

Expires: 0

 

 

----------------------------------------------------------------

 

18:05:36 UDP Packet Sent to 192.168.1.82:50970 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.82:5061;branch=z9hG4bK239cc116

To: <sip:121@192.168.1.11>

From: <sip:121@192.168.1.11>;tag=0006d737d15a00273f7a9931-528120a4

Call-ID: 0006d737-d15a0003-3acce808-747e07bc@192.168.1.82

CSeq: 120 REGISTER

User-Agent: NCH Swift Sound Axon Virtual PBX 2.00

WWW-Authenticate: Digest realm="axon@voip_server",nonce="v16765qaq65223w",opaque="",stale=FALSE,algorithm=MD5

Content-Length: 0

 

 

It is just these 2 repeated alot.

 

 

I have tried changing the extention and also downgrading the SIP firmware, and also tried 3 different 7940 phones.

 

Next i will try connecting to another SIP server.

 

Any ideas are very very welcome.

 

Cheers Guys

 

Alex

Link to comment
Share on other sites

Error 401 (Unauthorized) means the phone is connecting to the Axon server, but the extension number or password is wrong.

 

Make sure you create (or edit) an extension in the Axon web interface for the phone (e.g. 121) and then set a password you will remember. Copy over the username/extension and password exactly into the phone's web configuration interface and you should be good to go. The error "Unknown ID trying to register" usually is indicative of a phone that is trying to register with an invalid/non-existing extension.

 

In general Cisco and Linksys products work pretty well with Axon and you shouldn't have too much trouble after you sort out the authentication error.

Link to comment
Share on other sites

Error 401 (Unauthorized) means the phone is connecting to the Axon server, but the extension number or password is wrong.

 

Make sure you create (or edit) an extension in the Axon web interface for the phone (e.g. 121) and then set a password you will remember. Copy over the username/extension and password exactly into the phone's web configuration interface and you should be good to go. The error "Unknown ID trying to register" usually is indicative of a phone that is trying to register with an invalid/non-existing extension.

 

In general Cisco and Linksys products work pretty well with Axon and you shouldn't have too much trouble after you sort out the authentication error.

 

I thought that at the beginging but that is not the issue. I have been reconfiguring these for 4 days and that was my first thought. I have tried it with differernt extensions and passwords and on different phones. Still the same issue. I think there might be a problem with the SIP headers in some way but really cant figure it out.

Link to comment
Share on other sites

Just to let you know i have now spent another day and still yet to find a solution.

 

 

 

I am on my 4th 7940 and i have also tried to register with my asterisk pbx and still no joy.

 

 

 

As pythonpoole suggests it is a password error i spent all day checking. I have checked and rechecked all day long but still nothing. However if i put in the wrong password i get the same 401 error but the sip trace is different.

 

 

 

----------------------------------------------------------------

 

19:12:56 UDP Packet Received from 192.168.1.85:5060 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

REGISTER sip:192.168.1.11 SIP/2.0

Via: SIP/2.0/UDP 192.168.1.85:5060;branch=z9hG4bK43bb5d79

From: sip:121@192.168.1.11

To: sip:121@192.168.1.11

Call-ID: 0006d737-cdbc0003-768131c7-7399f99d@192.168.1.85

CSeq: 102 REGISTER

User-Agent: CSCO/6

Contact: <sip:121@192.168.1.85:5060>

Authorization: Digest username="UNPROVISIONED",realm="axon@voip_server",uri="sip:192.168.1.11",response="9958d961632c1d0775596eef71ff7c49",nonce="v45812qaq39952w",opaque="",algorithm=MD5

Content-Length: 0

Expires: 3600

 

 

----------------------------------------------------------------

 

19:12:56 UDP Packet Sent to 192.168.1.85:5060 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.1.85:5060;branch=z9hG4bK43bb5d79

To: sip:121@192.168.1.11

From: sip:121@192.168.1.11

Call-ID: 0006d737-cdbc0003-768131c7-7399f99d@192.168.1.85

CSeq: 102 REGISTER

User-Agent: NCH Swift Sound Axon Virtual PBX 2.00

WWW-Authenticate: Digest realm="axon@voip_server",nonce="v45812qaq39952w",opaque="",stale=FALSE,algorithm=MD5

Content-Length: 0

 

 

What i noticed is that it has not changed the port number, so i assume that previously it has been connecting but something is stopping it.

 

 

 

Any help guys would amazing.

 

 

 

Alex

Link to comment
Share on other sites

I think the major problem is this line:

Authorization: Digest username="UNPROVISIONED" [....]

 

To me this is saying that your IP phone is not using the username/extension number set-up with Axon, but is instead sending out the username 'UNPROVISIONED' this would explain perfectly why Axon is reporting that no such extension exists.

 

Make sure both 'Username' and 'Authorization Username' (or something to that effect) are both set to your Axon extension number. I suggest you go into advanced mode of the web interface for the phone (if there is one) and scrutinize for any instance where the word UNPROVISIONED appears. If you cannot find such an instance of the word, perhaps contact Cisco and ask if it means anything.

 

Also, perhaps I or someone else can help better if you provide the configuration file for the phone. (i.e. in firefox browse to the web inteface and save as..).. if it is anything like other Cisco/Linksys products it usually saves the whole configuration as an HTML page which someone else can then open up and refer to.

Link to comment
Share on other sites

Hi Pythonpoole

 

Thanks for all your help.

 

The 7940 is configured using sip.cnf and default.cnf files. I have tried the full config files and included every parameter you can set and also tried just having the basics.

 

This is the SIP(MAC).cnf File

 

# Line 1 Parameters

line1_name: 121

line1_displayname: 121

line1_password: test

 

phone_prompt: "SIP Phone"

phone_password: "cisco"

 

This is what the SIPDefault.cnf file contains.

 

image_version: P0S3-06-3-00

proxy1_address: 192.168.1.11

proxy_register: 1

 

If i purposely set the password wrong i get the second sip error. (When i try and dial, i immeditily get beeping as you would if you have dialed a wrong extention) When the password is correct i get the first sip error and no beeping (the line shows as if its trying to connect.)

Link to comment
Share on other sites

hmm ok, I'm so used to IP phones and ATAs having web interfaces I just made the assumption this did too.

 

I really have no idea though, sorry. You can try adding line1_authname: "121" to the config, but I doubt it will make much difference.

 

 

One thing to watch out for, I noticed you're using port 50970. Apart from the fact that it's really high, Axon is also known for some problems on non-standard ports. Perhaps try using 5060 or 5061 to see if it makes any difference.

 

Also in the first SIP trace you gave.. is it just me or was there no password transmitted in the trace?

Link to comment
Share on other sites

hI Pythonpoole

 

Just to let you know i managed to solve it.

 

When you mentioned the port number being high i looking into it closer.

Even though the sip port was set at 5060 if the extention existed and the password was correct it would change the port to something very high and random. So i went through the whole config on everysite i could find and found a setting i haddent seen before. "Voip control port" When i set this i kept the port at 5060 instead of changing it and alowed the phone to register.

 

So thanks for all your help and im off to find the next problem.

 

Alex

Link to comment
Share on other sites

  • 6 months later...

Hello,

 

I've the same problem. But I don't found any solution. Could you please help?

 

Here are my axon Log:

 

----------------------------------------------------------------

 

18:51:00 UDP Packet Received from 192.168.0.22:51008 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

REGISTER sip:192.168.0.250 SIP/2.0

Via: SIP/2.0/UDP 192.168.0.22:5060;branch=z9hG4bK4a543bb1

From: <sip:102@192.168.0.250>;tag=0014a9bed3250002348c8254-5bf26fc2

To: <sip:102@192.168.0.250>

Call-ID: 0014a9be-d3250002-25151895-62aa677e@192.168.0.22

Max-Forwards: 70

CSeq: 101 REGISTER

User-Agent: Cisco-CP7940G/8.0

Contact: <sip:102@192.168.0.22:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0014a9bed325>";+u.sip!model.ccm.cisco.com="8"

Content-Length: 0

Expires: 3600

 

 

----------------------------------------------------------------

 

18:51:00 UDP Packet Sent to 192.168.0.22:51008 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

SIP/2.0 401 Unauthorized

Via: SIP/2.0/UDP 192.168.0.22:5060;branch=z9hG4bK4a543bb1

To: <sip:102@192.168.0.250>

From: <sip:102@192.168.0.250>;tag=0014a9bed3250002348c8254-5bf26fc2

Call-ID: 0014a9be-d3250002-25151895-62aa677e@192.168.0.22

CSeq: 101 REGISTER

User-Agent: NCH Swift Sound Axon 1.20

WWW-Authenticate: Digest realm="axon@pbx",nonce="v4307qaq60887w",opaque="",stale=FALSE,algorithm=MD5

Content-Length: 0

 

-----------------------------------------------------------------

 

 

 

Here are my phone config files

 

 

SIP-formyphone.cnf

 

# THIS FILE NEEDS TO BE CALLED SIPxxxxxxxxxxxx.cnf WHERE 123456789A12 IS YOUR CISCO PHONES MAC ADDRESS 
# CONFIG FOR SIP 8.2 
# SIP Phone Specific Configuration File for Cisco 7940 For MAC Address xxxxxxxxxxxx (start) 
# description 


# Line 1 Settings 

line1_name: "102" ; Line 1 Your user id 

# line1_displayname: "102" ; Line 1 Display Name against buttons on right of screen 

line1_password: "cisco" ; Line 1 Your password 

line1_shortname: "102" 




# Phone Label (Text desired to be displayed in upper right hand corner) 

phone_label: "Bureau" ; Has no effect on SIP messaging 



# Voice mail options 

messages_uri: "xxxx" ; number to dial for voice mail 

mwi_status : "1" 



# Time Zone phone will reside in 

time_zone: GMT 



# Telnet options for this phone 

telnet_level: "2" ; 0-Disabled (default), 1-Enabled, 2-Privileged 

phone_prompt: "Cisco7940" ; Telnet/Console Prompt 

phone_password: "cisco" ; Telnet/Console Password 


# SIP Phone Specific Configuration File for Cisco 7940 For MAC Address xxxxxxxxxxxx (end) 

 

 

 

SIPDefault.cnf

 

# Image Version 
image_version: "P0S3-08-11-00" 

# Proxy Server 
proxy1_address: "192.168.0.250" 
proxy2_address: "" 
proxy3_address: "" 
proxy4_address: "" 
proxy5_address: "" 
proxy6_address: "" 

# Proxy Server Port (default - 5060) 
proxy1_port:"5060" 
proxy2_port:"" 
proxy3_port:"" 
proxy4_port:"" 
proxy5_port:"" 
proxy6_port:"" 

# Emergency Proxy info 
proxy_emergency: "192.168.0.250" 
proxy_emergency_port: "5060" 

# Backup Proxy info 
proxy_backup: "0" 
proxy_backup_port: "5060" 

# Outbound Proxy info 
outbound_proxy: "0" 
outbound_proxy_port: "5060" 

# NAT/Firewall Traversal 
nat_enable: "0" 
nat_address: "" 
voip_control_port: "5060" 
start_media_port: "12000" 
end_media_port: "20000" 
nat_received_processing: "0" 

# Proxy Registration (0-disable (default), 1-enable) 
proxy_register: "1" 

# Phone Registration Expiration [1-3932100 sec] (Default - 3600) 
timer_register_expires: "3600" 

# Codec for media stream (g711ulaw (default), g711alaw, g729) 
preferred_codec: "1" 

# TOS bits in media stream [0-5] (Default - 5) 
tos_media: "5" 

# Enable VAD (0-disable (default), 1-enable) 
enable_vad: "0" 

# Allow for the bridge on a 3way call to join remaining parties upon hangup 
cnf_join_enable: "1" ; 0-Disabled, 1-Enabled (default) 

# Allow Transfer to be completed while target phone is still ringing 
semi_attended_transfer: "0" ; 0-Disabled, 1-Enabled (default) 

# Telnet Level (enable or disable the ability to telnet into this phone 
telnet_level: "0" ; 0-Disabled (default), 1-Enabled, 2-Privileged 

# Inband DTMF Settings (0-disable, 1-enable (default)) 
dtmf_inband: "1" 

# Out of band DTMF Settings (none-disable, avt-avt enable (default), avt_always - always avt ) 
dtmf_outofband: "avt" 

# DTMF dB Level Settings (1-6dB down, 2-3db down, 3-nominal (default), 4-3db up, 5-6dB up) 
dtmf_db_level: "3" 

# SIP Timers 
timer_t1: "500" ; Default 500 msec 
timer_t2: "4000" ; Default 4 sec 
sip_retx: "10" ; Default 11 
sip_invite_retx: "6" ; Default 7 
timer_invite_expires: "180" ; Default 180 sec 

# Setting for Message speeddial to UOne box 
messages_uri: "*97" 

#********* Release 2 new config parameters ********** 

# TFTP Phone Specific Configuration File Directory 
tftp_cfg_dir: "./" 

# Time Server 
sntp_mode: "unicast" 
sntp_server: "129.132.2.21" 
time_zone: "EST" 
dst_offset: "1" 
dst_start_month: "April" 
dst_start_day: "" 
dst_start_day_of_week: "Sun" 
dst_start_week_of_month: "1" 
dst_start_time: "02" 
dst_stop_month: "Oct" 
dst_stop_day: "" 
dst_stop_day_of_week: "Sunday" 
dst_stop_week_of_month: "8" 
dst_stop_time: "2" 
dst_auto_adjust: "1" 

# Do Not Disturb Control (0-off, 1-on, 2-off with no user control, 3-on with no user control) 
dnd_control: "0" ; Default 0 (Do Not Disturb feature is off) 

# Caller ID Blocking (0-disabled, 1-enabled, 2-disabled no user control, 3-enabled no user control) 
callerid_blocking: "0" ; Default 0 (Disable sending all calls as anonymous) 

# Anonymous Call Blocking (0-disbaled, 1-enabled, 2-disabled no user control, 3-enabled no user control) 
anonymous_call_block: "0" ; Default 0 (Disable blocking of anonymous calls) 

# Call Waiting (0-disabled, 1-enabled, 2-disabled with no user control, 3-enabled with no user control) 
call_waiting: "1" ; Default 1 (Call Waiting enabled) 

# DTMF AVT Payload (Dynamic payload range for AVT tones - 96-127) 
dtmf_avt_payload: "101" ; Default 100 

# XML file that specifies the dialplan desired 
dial_template: "syncinfo" 

# Network Media Type (auto, full100, full10, half100, half10) 
network_media_type: "auto" 

#Autocompletion During Dial (0-off, 1-on [default]) 
autocomplete: "1" 

#Time Format (0-12hr, 1-24hr [default]) 
time_format_24hr: "1" 

# URL for external Phone Services 
# services_url: "http://192.168.1.149/cisco/services/index_cisco.php" 

# URL for external Directory location 
# directory_url: "http://192.168.1.149/cisco/services/PhoneDirectory.php" 

# URL for branding logo 
# logo_url: "http://192.168.0.149/cisco/bmp/xcall2logo.bmp" 

 

 

Please help Me...

 

Best Regards.

 

Dan.

Link to comment
Share on other sites

  • 4 weeks later...
  • 2 years later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...