After 10 minutes drop all the extensions

This site is best viewed in a modern browser with JavaScript enabled.

After 10 minutes drop all the extensions

pparodi

Sip set debug ip PHONE-EXTERNAL-IP-ADDRESS

<------------->
Really destroying SIP dialog 'ZDIxYjViZDQ4NWZmNjFhODUwOWQxZjhkM2QyMTk2OTE.' Method: BYE

<--- SIP read from UDPHONE-EXTERNAL-IP-ADDRESS:61446 --->
INVITE sip:299@PBX-IP-ADDRESS:5060 SIP/2.0
Via: SIP/2.0/UDP PHONE-LOCAL-IP-ADDRESS:61446;branch=z9hG4bK-d8754z-4c06ca335b60f675-1---d8754z-;rport
Max-Forwards: 70
Contact: <sip:104@PHONE-LOCAL-IP-ADDRESS:61446;rinstance=b04569da076865f7>
To: <sip:299@PBX-IP-ADDRESS:5060>
From: "104 - Softphone"<sipHONE-EXTENSION-A@PBX-IP-ADDRESS:5060>;tag=c80b6155
Call-ID: NDkzYzVhMDgwYTM0Y2Q0MmZmODlkZDEyYjFlZTNiZGM.
CSeq: 1 INVITE
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE
Content-Type: application/sdp
Supported: replaces
User-Agent: 3CXPhone 6.0.26523.0
Content-Length: 407

v=0
o=3cxVCE 390460005 231604545 IN IP4 PHONE-LOCAL-IP-ADDRESS
s=3cxVCE Audio Call
c=IN IP4 PHONE-LOCAL-IP-ADDRESS
t=0 0
m=audio 40030 RTP/AVP 3 8 0 101
a=rtpmap:3 GSM/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
a=sendrecv
m=video 40028 RTP/AVP 34
c=IN IP4 PHONE-LOCAL-IP-ADDRESS
a=rtpmap:34 H263/90000
a=fmtp:34 QCIF=1;CIF=1;SQCIF=1;CIF4=1
a=sendrecv

<------------->
--- (13 headers 18 lines) ---
Sending to PHONE-EXTERNAL-IP-ADDRESS:61446 (NAT)
Sending to PHONE-EXTERNAL-IP-ADDRESS:61446 (NAT)
Using INVITE request as basis request - NDkzYzVhMDgwYTM0Y2Q0MmZmODlkZDEyYjFlZTNiZGM.
Found peer '104' for '104' from PHONE-EXTERNAL-IP-ADDRESS:61446

<--- Reliably Transmitting (NAT) to PHONE-EXTERNAL-IP-ADDRESS:61446 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP PHONE-LOCAL-IP-ADDRESS:61446;branch=z9hG4bK-d8754z-4c06ca335b60f675-1---d8754z-;received=PHONE-EXTERNAL-IP-ADDRESS;rport=61446
From: "104 - Softphone"<sip:104@PBX-IP-ADDRESS:5060>;tag=c80b6155
To: <sip:299@PBX-IP-ADDRESS:5060>;tag=as3617d26f
Call-ID: NDkzYzVhMDgwYTM0Y2Q0MmZmODlkZDEyYjFlZTNiZGM.
CSeq: 1 INVITE
Server: FPBX-2.8.1(11.25.0)
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="3e715fa3"
Content-Length: 0

<------------>
Scheduling destruction of SIP dialog 'NDkzYzVhMDgwYTM0Y2Q0MmZmODlkZDEyYjFlZTNiZGM.' in 32000 ms (Method: INVITE)
Retransmitting #1 (NAT) to PHONE-EXTERNAL-IP-ADDRESS:61446:
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP PHONE-LOCAL-IP-ADDRESS:61446;branch=z9hG4bK-d8754z-4c06ca335b60f675-1---d8754z-;received=PHONE-EXTERNAL-IP-ADDRESS;rport=61446
From: "104 - Softphone"<sip:104@PBX-IP-ADDRESS:5060>;tag=c80b6155
To: <sip:299@PBX-IP-ADDRESS:5060>;tag=as3617d26f
Call-ID: NDkzYzVhMDgwYTM0Y2Q0MmZmODlkZDEyYjFlZTNiZGM.
CSeq: 1 INVITE
Server: FPBX-2.8.1(11.25.0)
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="3e715fa3"
Content-Length: 0

pparodi

CALL FLOW:
xINVITE sip:299@PBX-IP-ADDRESS:5060 SIP/2.0
PHONE-EXTERNAL-IP-ADDRESS:61446 PBX-IP-ADDRESS:5060 192.168.10.254:5060xVia: SIP/2.0/UDP PHONE-LOCAL-IP-ADDRESS:61446;branch=z9hG4bK-d8754z-9d4780076e6b886e-
qqqqqqqqqqwqqqqqqqqq qqqqqqqqqqwqqqqqqqqq qqqqqqqqqqwqqqqqqqqqx--d8754z-;rport
x INVITE (SDP) x x xMax-Forwards: 70
04:01:38.758185 x qqqqqqqqqqqqqqqqqqqqqqqqqq> x x xContact: <sip:104@PHONE-LOCAL-IP-ADDRESS:61446;rinstance=b04569da076865f7>
+0.000548 x 401 Unauthorized x xTo: <sip:299@PBX-IP-ADDRESS:5060>
04:01:38.758733 x <qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq x xFrom: "104 - Softphone"<sip:104@PBX-IP-ADDRESS:5060>;tag=8c2d262b
+0.498311 x INVITE (SDP) x x xCall-ID: NjQ2Yjc2NmVjYzkzYTk2Y2E1ZDY2MTNhMzRmYzE3OWY.
04:01:39.257044 x qqqqqqqqqqqqqqqqqqqqqqqq>>> x x xCSeq: 1 INVITE
+0.001416 x 401 Unauthorized x xAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER
04:01:39.258460 x <<<qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq x xINFO, MESSAGE
+0.999521 x 401 Unauthorized x xContent-Type: application/sdp
04:01:40.257981 x <<<qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq x xSupported: replaces
+0.000968 x INVITE (SDP) x x xUser-Agent: 3CXPhone 6.0.26523.0
04:01:40.258949 x qqqqqqqqqqqqqqqqqqqqqqqq>>> x x xContent-Length: 407
+1.999782 x INVITE (SDP) x x x
04:01:42.258731 x qqqqqqqqqqqqqqqqqqqqqqqq>>> x x xv=0
+0.000326 x 401 Unauthorized x xo=3cxVCE 348437625 213370980 IN IP4 PHONE-LOCAL-IP-ADDRESS
04:01:42.259057 x <<<qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq x xs=3cxVCE Audio Call
+3.999173 x 401 Unauthorized x xc=IN IP4 PHONE-LOCAL-IP-ADDRESS
04:01:46.258230 x <<<qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq x xt=0 0
+0.000944 x INVITE (SDP) x x xm=audio 40036 RTP/AVP 3 8 0 101
04:01:46.259174 x qqqqqqqqqqqqqqqqqqqqqqqq>>> x x xa=rtpmap:3 GSM/8000
+3.999158 x 401 Unauthorized x xa=rtpmap:8 PCMA/8000
04:01:50.258332 x <<<qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq x xa=rtpmap:0 PCMU/8000
x x x xa=rtpmap:101 telephone-event/8000
x x x xa=fmtp:101 0-15
x x x xa=ptime:20
x x x xa=sendrecv
x x x xm=video 40034 RTP/AVP 34
x x x xc=IN IP4 PHONE-LOCAL-IP-ADDRESS
x x x xa=rtpmap:34 H263/90000
x x x xa=fmtp:34 QCIF=1;CIF=1;SQCIF=1;CIF4=1
x x x xa=sendrecv

pparodi

PBX*CLI> sip show settings

Global Settings:

UDP Bindaddress: 0.0.0.0:5060
TCP SIP Bindaddress: Disabled
TLS SIP Bindaddress: Disabled
Videosupport: No
Textsupport: No
Ignore SDP sess. ver.: No
AutoCreate Peer: Off
Match Auth Username: No
Allow unknown access: No
Allow subscriptions: Yes
Allow overlap dialing: Yes
Allow promisc. redir: No
Enable call counters: No
SIP domain support: No
Realm. auth: No
Our auth realm asterisk
Use domains as realms: No
Call to non-local dom.: Yes
URI user is phone no: No
Always auth rejects: Yes
Direct RTP setup: No
User Agent: FPBX-2.8.1(11.25.0)
SDP Session Name: Asterisk PBX 11.25.0
SDP Owner Name: root
Reg. context: (not set)
Regexten on Qualify: No
Trust RPID: No
Send RPID: No
Legacy userfield parse: No
Send Diversion: Yes
Caller ID: Unknown
From: Domain:
Record SIP history: Off
Call Events: On
Auth. Failure Events: Off
T.38 support: No
T.38 EC mode: Unknown
T.38 MaxDtgrm: 4294967295
SIP realtime: Disabled
Qualify Freq : 60000 ms
Q.850 Reason header: No
Store SIP_CAUSE: No

Network Settings:

SIP address remapping: Disabled, no localnet list
Externhost: <none>
Externaddr: (null)
Externrefresh: 10

Global Signalling Settings:

Codecs: (gsm|ulaw|alaw|g729)
Codec Order: g729:20,gsm:20,alaw:20,ulaw:20
Relax DTMF: No
RFC2833 Compensation: No
Symmetric RTP: Yes
Compact SIP headers: No
RTP Keepalive: 0 (Disabled)
RTP Timeout: 30
RTP Hold Timeout: 300
MWI NOTIFY mime type: application/simple-message-summary
DNS SRV lookup: No
Pedantic SIP support: No
Reg. min duration 60 secs
Reg. max duration: 360 secs
Reg. default duration: 120 secs
Sub. min duration 60 secs
Sub. max duration: 360 secs
Outbound reg. timeout: 40 secs
Outbound reg. attempts: 0
Outbound reg. retry 403:0
Notify ringing state: Yes
Include CID: No
Notify hold state: Yes
SIP Transfer mode: open
Max Call Bitrate: 384 kbps
Auto-Framing: No
Outb. proxy: <not set>
Session Timers: Accept
Session Refresher: uas
Session Expires: 1800 secs
Session Min-SE: 90 secs
Timer T1: 500
Timer T1 minimum: 100
Timer B: 32000
No premature media: Yes
Max forwards: 70

Default Settings:

Allowed transports: UDP
Outbound transport: UDP
Context: from-sip-external
Record on feature: automon
Record off feature: automon
Force rport: Yes
DTMF: rfc2833
Qualify: 0
Keepalive: 60
Use ClientCode: No
Progress inband: Never
Language: es
Tone zone: <Not set>
MOH Interpret: default
MOH Suggest:
Voice Mail Extension: *97

PBX*CLI> sip show peer 104

Name : 104
Description :
Secret : <Set>
MD5Secret : <Not set>
Remote Secret: <Not set>
Context : from-internal
Record On feature : automon
Record Off feature : automon
Subscr.Cont. : <Not set>
Language : es
Tonezone : <Not set>
AMA flags : Unknown
Transfer mode: open
CallingPres : Presentation Allowed, Not Screened
Callgroup :
Pickupgroup :
Named Callgr :
Nam. Pickupgr:
MOH Suggest :
Mailbox : 104@device
VM Extension : *97
LastMsgsSent : 0/0
Call limit : 2147483647
Max forwards : 0
Dynamic : Yes
Callerid : "device" <104>
MaxCallBR : 384 kbps
Expire : 91
Insecure : no
Force rport : Yes
Symmetric RTP: Yes
ACL : Yes
DirectMedACL : No
T.38 support : No
T.38 EC mode : Unknown
T.38 MaxDtgrm: 4294967295
DirectMedia : No
PromiscRedir : No
User=Phone : No
Video Support: No
Text Support : No
Ign SDP ver : No
Trust RPID : No
Send RPID : No
TrustIDOutbnd: Legacy
Subscriptions: Yes
Overlap dial : Yes
DTMFmode : info
Timer T1 : 500
Timer B : 32000
ToHost :
Addr->IP : PHONE-EXTERNAL-IP-ADDRESS:61446
Defaddr->IP : (null)
Prim.Transp. : UDP
Allowed.Trsp : UDP
Def. Username: 104
SIP Options : (none)
Codecs : (gsm|ulaw|alaw|g729)
Codec Order : (g729:20,gsm:20,alaw:20,ulaw:20)
Auto-Framing : No
Status : OK (44 ms) - DESPUES DE 10 minutos se pone en
Useragent : 3CXPhone 6.0.26523.0
Reg. Contact : sip:104@PHONE-LOCAL-IP-ADDRESS:61446;rinstance=b04569da076865f7
Qualify Freq : 60000 ms
Keepalive : 60000 ms
Sess-Timers : Accept
Sess-Refresh : uas
Sess-Expires : 1800 secs
Min-Sess : 90 secs
RTP Engine : asterisk
Parkinglot :
Use Reason : No
Encryption : No

PBX*CLI>

pparodi

10 minutes after a reboot all the extension are UNREACHEBLE
[2017-07-02 04:46:16] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '104' is now UNREACHABLE! Last qualify: 161
[2017-07-02 04:46:16] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '105' is now UNREACHABLE! Last qualify: 45
[2017-07-02 04:46:16] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5330' is now UNREACHABLE! Last qualify: 42
[2017-07-02 04:46:16] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '103' is now UNREACHABLE! Last qualify: 0
[2017-07-02 04:46:16] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '725' is now UNREACHABLE! Last qualify: 58
== Extension Changed 725[ext-local] new state Unavailable for Notify User 814
[2017-07-02 04:46:17] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '216' is now UNREACHABLE! Last qualify: 56
[2017-07-02 04:46:17] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5312' is now UNREACHABLE! Last qualify: 51
[2017-07-02 04:46:17] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5313' is now UNREACHABLE! Last qualify: 53
[2017-07-02 04:46:18] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5310' is now UNREACHABLE! Last qualify: 43
[2017-07-02 04:46:18] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5311' is now UNREACHABLE! Last qualify: 53
[2017-07-02 04:46:18] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5317' is now UNREACHABLE! Last qualify: 53
[2017-07-02 04:46:18] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5314' is now UNREACHABLE! Last qualify: 46
[2017-07-02 04:46:18] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5315' is now UNREACHABLE! Last qualify: 55
[2017-07-02 04:46:18] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5318' is now UNREACHABLE! Last qualify: 41
[2017-07-02 04:46:18] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '1792' is now UNREACHABLE! Last qualify: 47
[2017-07-02 04:46:18] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '1793' is now UNREACHABLE! Last qualify: 57
[2017-07-02 04:46:18] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '1790' is now UNREACHABLE! Last qualify: 50
[2017-07-02 04:46:18] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '1796' is now UNREACHABLE! Last qualify: 61
[2017-07-02 04:46:19] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '1797' is now UNREACHABLE! Last qualify: 43
[2017-07-02 04:46:19] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '1794' is now UNREACHABLE! Last qualify: 47
[2017-07-02 04:46:19] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '1795' is now UNREACHABLE! Last qualify: 40
[2017-07-02 04:46:20] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5303' is now UNREACHABLE! Last qualify: 62
[2017-07-02 04:46:20] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5302' is now UNREACHABLE! Last qualify: 56
[2017-07-02 04:46:20] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5301' is now UNREACHABLE! Last qualify: 69
[2017-07-02 04:46:20] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5307' is now UNREACHABLE! Last qualify: 43
[2017-07-02 04:46:20] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5306' is now UNREACHABLE! Last qualify: 59
[2017-07-02 04:46:20] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5305' is now UNREACHABLE! Last qualify: 59
[2017-07-02 04:46:20] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5304' is now UNREACHABLE! Last qualify: 56
[2017-07-02 04:46:20] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5309' is now UNREACHABLE! Last qualify: 55
[2017-07-02 04:46:20] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5308' is now UNREACHABLE! Last qualify: 52
[2017-07-02 04:46:21] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5350' is now UNREACHABLE! Last qualify: 49
[2017-07-02 04:46:21] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5351' is now UNREACHABLE! Last qualify: 31
[2017-07-02 04:46:22] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5364' is now UNREACHABLE! Last qualify: 50
[2017-07-02 04:46:23] WARNING[3739]: chan_sip.c:4038 retrans_pkt: Retransmission timeout reached on transmission e4139b990ca48555@192.168.1.2 for seqno 105 (Critical Request) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
Packet timed out after 6373ms with no response
[2017-07-02 04:46:25] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '5340' is now UNREACHABLE! Last qualify: 55
[2017-07-02 04:46:25] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '2021' is now UNREACHABLE! Last qualify: 16
[2017-07-02 04:46:27] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '781' is now UNREACHABLE! Last qualify: 665
[2017-07-02 04:46:30] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '2011' is now UNREACHABLE! Last qualify: 20
[2017-07-02 04:46:30] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '814' is now UNREACHABLE! Last qualify: 59
== Extension Changed 814[ext-local] new state Unavailable for Notify User 725
[2017-07-02 04:46:30] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '2018' is now UNREACHABLE! Last qualify: 0
[2017-07-02 04:46:30] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '813' is now UNREACHABLE! Last qualify: 81
== Extension Changed 813[ext-local] new state Unavailable for Notify User 814
== Extension Changed 813[ext-local] new state Unavailable for Notify User 725
[2017-07-02 04:46:31] NOTICE[3739]: chan_sip.c:29901 sip_poke_noanswer: Peer '793' is now UNREACHABLE! Last qualify: 21

navaismo

This is a network issue, you need to start troubleshooting the network, also set your externhost or externip and set accordingly your Nat settings. Is better to use a VPN in most of the cases.

pparodi

navaismo Thanks for helping!
Can you give me an orientation about troubleshooting the network ?

pparodi

Thanks Very Much for your response NAVAISMO.

Implement a VPN is very difficult.
The topology is a VPS with Elastix 2.4, with an Internet IP Address, and several softphones and hardphones ditribuited in different places. This was working fine on this mode for some years without problems.

How must I troubleshoot the network ?
BTW If I restart the linux server all the endpoints start to work fine but just by 10 minutes. This issue started 2 days ago and don't know how to solve it.
I think the "Correct auth, but based on stale nonce received from" and the "401 - Rejected" message are related. There is any workaround for this ?
How do you suspect the provider firewall impact on this ?
( I saw you helped on similar issue some years ago, thanks very much for the reply)

pparodi

I really apreciate your help.
I just set the externip parameter in the sip_general_additional.conf
Then restarted the pbx. It workied ok for 10 minutes and then:
[2017-07-02 13:05:25] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5330' is now UNREACHABLE! Last qualify: 39
[2017-07-02 13:05:25] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '725' is now UNREACHABLE! Last qualify: 57
== Extension Changed 725[ext-local] new state Unavailable for Notify User 814 (queued)
[2017-07-02 13:05:25] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '814' is now UNREACHABLE! Last qualify: 57
== Extension Changed 814[ext-local] new state Unavailable for Notify User 725 (queued)
[2017-07-02 13:05:26] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '104' is now UNREACHABLE! Last qualify: 88
[2017-07-02 13:05:28] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5318' is now UNREACHABLE! Last qualify: 40
[2017-07-02 13:05:28] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5308' is now UNREACHABLE! Last qualify: 62
[2017-07-02 13:05:29] WARNING[3676]: chan_sip.c:4038 retrans_pkt: Retransmission timeout reached on transmission 66f890ff8f6b4c8c@192.168.1.3 for seqno 105 (Critical Request) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
Packet timed out after 6400ms with no response
[2017-07-02 13:05:29] WARNING[3676]: chan_sip.c:4038 retrans_pkt: Retransmission timeout reached on transmission 93708c088f0a8366@192.168.1.2 for seqno 106 (Critical Request) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
Packet timed out after 6401ms with no response
[2017-07-02 13:05:30] WARNING[3676]: chan_sip.c:4038 retrans_pkt: Retransmission timeout reached on transmission 3980b1a0abe4f91c@192.168.1.3 for seqno 106 (Critical Request) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
Packet timed out after 6401ms with no response
[2017-07-02 13:05:30] WARNING[3676]: chan_sip.c:4038 retrans_pkt: Retransmission timeout reached on transmission e8d1192982050576@192.168.1.2 for seqno 105 (Critical Request) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
Packet timed out after 6400ms with no response
[2017-07-02 13:05:32] WARNING[3676]: chan_sip.c:4038 retrans_pkt: Retransmission timeout reached on transmission c7e8deb8b8813c71@192.168.1.3 for seqno 105 (Critical Request) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
Packet timed out after 6400ms with no response
[2017-07-02 13:05:32] WARNING[3676]: chan_sip.c:4038 retrans_pkt: Retransmission timeout reached on transmission b9e5344668593fd0@192.168.1.2 for seqno 105 (Critical Request) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
Packet timed out after 6400ms with no response
[2017-07-02 13:05:32] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '105' is now UNREACHABLE! Last qualify: 46
[2017-07-02 13:05:35] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '1792' is now UNREACHABLE! Last qualify: 42
[2017-07-02 13:05:36] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '216' is now UNREACHABLE! Last qualify: 65
[2017-07-02 13:05:37] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '1795' is now UNREACHABLE! Last qualify: 42
[2017-07-02 13:05:37] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5310' is now UNREACHABLE! Last qualify: 48
[2017-07-02 13:05:38] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '1797' is now UNREACHABLE! Last qualify: 37
[2017-07-02 13:05:38] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5350' is now UNREACHABLE! Last qualify: 48
[2017-07-02 13:05:38] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '1793' is now UNREACHABLE! Last qualify: 58
[2017-07-02 13:05:38] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5301' is now UNREACHABLE! Last qualify: 57
[2017-07-02 13:05:38] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5317' is now UNREACHABLE! Last qualify: 51
[2017-07-02 13:05:40] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '1790' is now UNREACHABLE! Last qualify: 46
[2017-07-02 13:05:41] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '813' is now UNREACHABLE! Last qualify: 70
[2017-07-02 13:05:41] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '1794' is now UNREACHABLE! Last qualify: 56
[2017-07-02 13:05:41] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5315' is now UNREACHABLE! Last qualify: 49
[2017-07-02 13:05:41] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5313' is now UNREACHABLE! Last qualify: 47
[2017-07-02 13:05:41] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '1796' is now UNREACHABLE! Last qualify: 55
[2017-07-02 13:05:41] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5302' is now UNREACHABLE! Last qualify: 49
[2017-07-02 13:05:42] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5309' is now UNREACHABLE! Last qualify: 46
[2017-07-02 13:05:42] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5314' is now UNREACHABLE! Last qualify: 49
[2017-07-02 13:05:42] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5312' is now UNREACHABLE! Last qualify: 55
[2017-07-02 13:05:42] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5306' is now UNREACHABLE! Last qualify: 52
[2017-07-02 13:05:42] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5303' is now UNREACHABLE! Last qualify: 49
[2017-07-02 13:05:43] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5307' is now UNREACHABLE! Last qualify: 46
[2017-07-02 13:05:44] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5305' is now UNREACHABLE! Last qualify: 49
[2017-07-02 13:05:45] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '5311' is now UNREACHABLE! Last qualify: 49
[2017-07-02 13:05:47] NOTICE[3676]: chan_sip.c:29901 sip_poke_noanswer: Peer '2011' is now UNREACHABLE! Last qualify: 31

How can I troubleshoot the FW of the provider? There is any signaling I must capture with tcpdump ?

pparodi

Hello, Can anyone give me some tips on this issue?

navaismo

Have you clicked on the link on the log: https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions

VPN on VPS is quite easier, mostly because all the peers register against public IP, but anyway the issue here is that asterisk is sending packages to qualify your peers and your peers never acknowledge back after your 10minutes. If it was working fine then think what changed recently. Troubleshooting your network using tcpdump on server side and on client side with Wireshark per example. The correct nonce thing is telling you that someone is using an expired nonce to authenticate.

Finally this is a open source forum, if you need immediate assistance hire support hours from Issabel team or any other developers of the community. We can answer during free period times over the day.

pparodi

navaismo Thanks a lot Navaismo. I will capture both sides to compare and get new informations.
Sorry for the rush!

pparodi

navaismo Just to know, the link you sent me is really interesting and I get the tcpdumps of both sides, but seems to be more related with this errro
chan_sip.c:4038 retrans_pkt: Retransmission timeout reached on transmission b9e5344668593fd0@192.168.1.2 for seqno 105 (Critical Request) --
than this other:
chan_sip.c:29901 sip_poke_noanswer: Peer '1792' is now UNREACHABLE! Last qualify: 42 (maybe related with the Correct auth, but based on stale nonce)

I think the main issue is the "correct auth but base on stale nonce". Am I right?

navaismo

Listen, all the issues that you described here are related to each other. Restransmission ends with an Unreachable peer. And the stale nonce is because is an old or expired transaction. If you put a new firewall in the middle or something start there, If you already have the tcpdumps then start analyzing it. Basically you lost network connectivity for some reason or your packages are delayed by router or something. Then again, if you added recntly something new into your network start from there.