Topic: Received response: "Forbidden"

[ldkeen]

Hi,
I have two networks connected together using OpenVPN.
Network A - 192.168.11.1 (Static IP)
Network B - 192.168.12.1 (Dynamic IP)
Network A has a few snoms connected to a sme 7.5 server with Sail 2.6.1-9 and works great. Network B has one snom 320 connected to network A over the tunnel and is registered at 192.168.11.1. They can make calls fine from this extension, however when anyone tries to call the remote snom they recive the following:
[Jan 14 18:03:22] WARNING[8838]: chan_sip.c:13053 handle_response_invite: Received response: "Forbidden" from '"xxxxxxxxxx" <sip:xxxxxxxxxx@60.xxx.xxx.xxx>;tag=as69a343c0
Network B has a dynamic IP which changes very frequently. If I set the remote snom to register at the external IP of Network A and do:
config setprop SIP AllowHosts xxx.xxx.xxx.xxx
It works fine until the IP address changes. Does anyone have any ideas how to get this remote snom behind a dynamic IP to work. Any suggestions would be greatly appreciated.
Ta, Lloyd

[SARK devs]

I'm assuming the 403 is coming from Asterisk and not the remote Snom

Correct?

Best

Jeff

[ldkeen]

Hey Jeff,
Yep, sorry. Thats straight from the console of the asterisk box at Network A.
Lloyd

[SARK devs]

It suggests the phone isn't registered.  What happens when you try to register the phone manually (press the register button in the account entry in the Snom itself?

[ldkeen]

What happens when you try to register the phone manually (press the register button in the account entry in the Snom itself?

I haven't tried that yet. I'll give it a go. The remote Snom can call all the other extensions OK and can call external numbers OK but cannot recieve calls. Another strange problem is when I push the VM retrieve button (*50*) it show up "asterisk" on the screen. The remote phone is registering to the *internal" IP (192.168.11.1) of asterisk. I don't have physical access to the machine so I'll have to try the manual setup next time I go there.
Lloyd

[Jáder]

[warning mode] THIS IS A WILD GUESS

Allway I have problems to receive but do not have to make calls I discovered it´s a NAT problem.
Most of time you can solve it by using a STUN proxy (NOT SURE ABOUT SECURITY RISKS!).
There are at least one free/open STUN server you can use: proxy01.sipphone.com

[/warning mode]

[ldkeen]

it´s a NAT problem.

Yeah, I think you're right on the money here. Maybe I'll try to install Sail/Asterisk on the remote server which should open those ports.
Lloyd