Re: Able to make inbound calls through SIP Trunk but outbound calls fa

willie.mitchell2 · ‎02-16-2022

Hi there,

My team and I have recently configured a SIP Trunk between client router (CUBE0 and service provider CUBE.

The challenge is that inbound calls are successful but outbound calls are failing, when outbound call is made a fast busy tone is presented.

Any ideas what the problem is will be appreciated.

Elliot Dierksen · ‎02-16-2022

I suspect the SIP message debug (debug ccsip mess) will tell you why. It is hard to speculate without that information, but my guess would be dial peers aren't being correctly matched.

Roger Kallberg · ‎02-16-2022

To start with please share your running configuration and the output from debug ccsip message. Without information we can not really give you any specific help as there can be many different reasons for why this isn’t working.

willie.mitchell2 · ‎02-16-2022

Hi Roger,

Below please see running config and debug traces attached.

The debug does indicate (No dial peer match) however I am not sure what I'm missing. already **bleep**-eyed looking and solutions.

EELNZSM01R#sh run
Building configuration...

Current configuration : 14133 bytes
!
! Last configuration change at 08:49:05 GMT Thu Feb 17 2022 by mitchellw
! NVRAM config last updated at 08:49:07 GMT Thu Feb 17 2022 by mitchellw
!
version 15.5
service nagle
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
service password-encryption
!
hostname EELNZSM01R
!
boot-start-marker
boot-end-marker
!
!
logging buffered 64000
enable secret 5 $1$P0mW$AYG4klle4otCq8fUqYWS21
!
aaa new-model
!
!
aaa authentication login default group tacacs+ local
aaa authorization console
aaa authorization exec default group tacacs+ local
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
!
!
!
!
!
aaa session-id common
ethernet lmi ce
clock timezone GMT 2 0
network-clock-participate wic 1
network-clock-participate wic 2
!
!
!
!
!
!
no ip source-route
no ip gratuitous-arps
!
!
!
!
ip dhcp pool Cisco_WiFi_APs
network 10.69.161.0 255.255.255.192
default-router 10.69.161.1
dns-server 10.69.200.100 10.69.200.101
option 60 ascii "Cisco AP c2800"
option 43 hex f104.0a45.ca46
option 150 ip 10.69.202.70
lease infinite
!
!
!
no ip bootp server
ip domain name saps.gov.za
ip host 27406555440.saps20.stdsiptrunk.telkom 165.148.64.114
ip name-server 165.148.252.33
ip name-server 165.148.248.33
ip dhcp-server 10.69.200.134
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
cts logging verbose
!
crypto pki trustpoint TP-self-signed-232328569
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-232328569
revocation-check none
rsakeypair TP-self-signed-232328569
!
!
crypto pki certificate chain TP-self-signed-232328569
certificate self-signed 01
30820229 30820192 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32333233 32383536 39301E17 0D313630 33323730 30303833
365A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3233 32333238
35363930 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
A887229A 595A47F4 96F5062C 5166F437 398C4935 946A76B0 3516B45F BAB1C18B
995608C0 F22C1C0C B8A79915 A52BBA3C 1E68A2CD 111AE26B E6994276 E4964C18
C21164A2 602E6AA1 FAE3D3FE 46984699 C6A647BD 09B9C634 1960D84A 7E7ECD1D
886D2FDA 4A4DEAD9 DFB9CE2E D6334DAE 64359C7C 15B5F4CC 2620DDE7 284D8F29
02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F 0603551D
23041830 168014EC A5E78C04 49A99550 6E6CDA6A 1D0D0656 332F3F30 1D060355
1D0E0416 0414ECA5 E78C0449 A995506E 6CDA6A1D 0D065633 2F3F300D 06092A86
4886F70D 01010505 00038181 00328A05 4078ED5D FB41943B C7AED454 E0C9F625
52589BAC 4343168A E3ABBFBA B10BFD8E E8DC7D73 9D9CAC4D 71380EE1 CA850F91
81EB4145 1FAD3769 395ED315 BD95BF33 3DAF7DC0 131C5A91 4B9639DC F8FF616B
B877983E 56A6A31B 426C8A1E DD1F457E 28CF1A5A 80F73EA7 2A7E959A 3CF7197A
158BE7CD 17DD15C7 84D1EC5E B1
quit
voice-card 0
dsp services dspfarm
!
!
voice rtp send-recv
!

ip address trusted list
ipv4 165.148.64.114 255.255.255.255
ipv4 10.69.202.161 255.255.255.255
ipv4 10.69.202.162 255.255.255.255
address-hiding
mode border-element license capacity 10
allow-connections sip to sip
no supplementary-service sip moved-temporarily
no supplementary-service sip refer
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711alaw
sip
header-passing
error-passthru
asymmetric payload full
no update-callerid
early-offer forced
midcall-signaling passthru
g729 annexb-all
!
!
voice class uri CUCM sip
host ipv4:10.69.202.161
host ipv4:10.69.202.162
voice class codec 1
codec preference 1 g729r8
codec preference 2 g711alaw
codec preference 3 g711ulaw
!
voice class codec 2
codec preference 1 g729r8
codec preference 2 g711alaw
!
!
voice class sip-profiles 1
request INVITE sip-header Allow-Header modify "UPDATE," ""
request REINVITE sip-header Allow-Header modify "UPDATE," ""
response 200 sip-header Allow-Header modify "UPDATE," ""
response 180 sip-header Allow-Header modify "UPDATE," ""
!
voice class sip-profiles 2
response ANY sip-header Call-ID modify "(.*@10.71.249.137):5060>" "\1"
request ANY sip-header Call-ID modify "(.*@10.71.249.137):5060>" "\1"
response ANY sip-header Call-ID modify "(.*@10.71.249.137):5060>" "\1"
!
!
voice class e164-pattern-map 1
description *** To CUCM - ITSP - Internal ***
e164 27406555440
e164 274065554[4-9].$
e164 27406555...$
!
!
voice class e164-pattern-map 2
description *** To ITSP ***
e164 .T
!
!
voice class dpg 1
!
voice class dpg 2
dial-peer 100
!
voice class server-group 1
ipv4 10.69.202.161 preference 1
ipv4 10.69.202.162 preference 2
description *** CUCM - Prioritized Server List ***
!
voice class server-group 2
ipv4 165.148.64.114 preference 1
!
voice class sip-options-keepalive 1
description *** CUCM Cluster ***
down-interval 35
up-interval 65
retry 3
transport udp
!
voice class sip-options-keepalive 2
description *** ITSP ***
down-interval 10
up-interval 65
retry 2
transport udp
!
!
voice iec syslog
voice cause-code
!
!
!
voice translation-rule 1
rule 1 /^$5...$$/ /040655\1/
!
voice translation-rule 100
rule 1 /^\+27/ /0/
rule 2 /^\+/ /00/
!
voice translation-rule 200
rule 1 /\+27/ /0/
!
!
voice translation-profile INBOUND-CLI
translate calling 200
!
voice translation-profile OUTBOUND-CLI
translate calling 100
!
voice translation-profile PSTN-INBOUND
translate called 1
!
voice translation-profile PSTN-OUTBOUND
translate called 100
!
!
!
license udi pid CISCO2911/K9 sn FGL201311WX
hw-module pvdm 0/0
!
!
!
username Support privilege 15 password 7 15011E1C1425393079
!
redundancy
!
!
!
!
lldp run
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.215.213 255.255.255.255
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description : Uplink to EELNZSM01C Port: Ge-0/0/24
ip address 10.69.161.253 255.255.255.252
duplex auto
speed auto
!
interface GigabitEthernet0/1
description TELKOM METRO-E LINK TO EAST LONDON SWITCHING CENTER
bandwidth 2000
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1.1034
description EELNZSM01R - ZWELITSHA UNIFORM, CID site id 6599 cir 720362822
bandwidth 2000
encapsulation dot1Q 1034
ip address 10.71.249.134 255.255.255.252
ip flow ingress
ip ospf network point-to-point
ip ospf bfd
bfd interval 500 min_rx 500 multiplier 50
!
interface GigabitEthernet0/2
description { Telkom ISP SIP link}
ip address 10.71.249.137 255.255.255.252
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
encapsulation ppp
shutdown
clock rate 2000000
!
interface BRI0/1/0
no ip address
shutdown
!
interface BRI0/1/1
no ip address
shutdown
!
interface BRI0/2/0
no ip address
shutdown
!
interface BRI0/2/1
no ip address
shutdown
!
router ospf 1
router-id 192.168.215.213
area 722 stub no-summary
redistribute static subnets
network 10.69.161.252 0.0.0.3 area 722
network 10.71.249.132 0.0.0.3 area 722
network 192.168.215.213 0.0.0.0 area 722
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip route 165.148.64.114 255.255.255.255 10.71.249.138
ip route 165.148.248.33 255.255.255.255 10.71.249.138
ip route 165.148.252.33 255.255.255.255 10.71.249.138
ip tacacs source-interface Loopback0
!
logging trap debugging
logging host 172.16.0.28
logging host 172.16.0.187
!
!
snmp-server community 5AP5@ELN RW
snmp-server community 1w1lln0t RO
snmp-server community NMSCWRW RW 21
snmp-server ifindex persist
snmp-server queue-limit notification-host 100
snmp-server location "6599_Zwelitsha - Uniform CID; Bldg:PROV OFFICE BLOCK; Floor:G; Room:18; Web:1181379"
snmp-server contact "SITA HelpDesk, Tel:0800202627"
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
no snmp-server enable traps entity-sensor threshold
snmp-server host 172.16.0.12 1w1lln0t
snmp-server host 172.16.0.52 1w1lln0t
tacacs-server host 172.16.1.252
tacacs-server key 7 15005801543E78
access-list 21 permit 172.16.0.187
access-list 21 permit 172.16.0.52
access-list 21 permit 172.16.0.28
access-list 21 permit 172.16.0.12
access-list 21 permit 172.16.0.14
access-list 21 deny any
!
!
control-plane
!
!
voice-port 0/1/0
!
voice-port 0/1/1
!
voice-port 0/2/0
!
voice-port 0/2/1
!
!
!
!
!
no mgcp timer receive-rtcp
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
sccp local Loopback0
sccp ccm 192.168.215.213 identifier 3 priority 3 version 7.0
sccp ccm 10.69.202.161 identifier 1 priority 1 version 7.0
sccp ccm 10.69.202.162 identifier 2 priority 2 version 7.0
sccp
!
sccp ccm group 1
bind interface Loopback0
associate ccm 1 priority 1
associate ccm 2 priority 2
associate ccm 3 priority 3
associate profile 1 register 6599-CFB
associate profile 2 register 6599-XCODE
associate profile 3 register 6599-MTP
switchback method uptime timeout 60
switchback interval 30
!
ccm-manager music-on-hold
!
no ccm-manager fax protocol cisco
!
dspfarm profile 2 transcode
description *** XCODER ***
codec g729abr8
codec g729ar8
codec g711alaw
codec g729r8
codec g729br8
codec pass-through
codec g711ulaw
maximum sessions 2
associate application SCCP
!
dspfarm profile 1 conference
description *** CFB ***
codec g729br8
codec g729r8
codec g729abr8
codec g729ar8
codec g711alaw
codec g711ulaw
maximum sessions 3
associate application SCCP
!
dspfarm profile 3 mtp
description *** MTP ***
codec pass-through
codec g711alaw
maximum sessions software 100
associate application SCCP
!
dial-peer cor custom
name EMERGENCY
name NATIONAL
name MOBILE
name INTERNATIONAL
name PREMIUM
!
!
dial-peer voice 100 voip
description *** CUCM ***
preference 1
session protocol sipv2
session transport udp
session server-group 1
destination dpg 1
destination e164-pattern-map 1
incoming uri via CUCM
voice-class codec 1
voice-class sip bind control source-interface GigabitEthernet0/1.1034
voice-class sip bind media source-interface GigabitEthernet0/1.1034
dtmf-relay rtp-nte sip-kpml
ip qos dscp cs3 signaling
no vad
!
dial-peer voice 200 voip
description *** Outbound calls via SAPS Router to Telkom/BCX Cube ***
session protocol sipv2
session target sip-server
session transport udp
destination dpg 2
destination e164-pattern-map 2
incoming called-number .
voice-class codec 2
voice-class sip bind control source-interface GigabitEthernet0/2
voice-class sip bind media source-interface GigabitEthernet0/2
dtmf-relay rtp-nte cisco-rtp sip-kpml
no vad
!
!
gateway
timer receive-rtp 1200
!
sip-ua
credentials username 27406555440 password 7 062816204154080D001B190401557878 realm cbs1.wr1.stdstrunk.qos.telkomvoip.co.za
authentication username 27406555440 password 7 14390B0A011E2B3F2124383A2F425545
retry invite 3
retry response 3
retry bye 3
retry cancel 3
retry register 3
timers connect 100
timers register 150
registrar dns:27406555440.saps20.stdsiptrunk.telkom expires 3600
sip-server dns:cbs1.wr1.stdstrunk.qos.telkomvoip.co.za
!
!
!
gatekeeper
shutdown

b.winter · ‎02-17-2022

Your voice class dpg 1 doesn't contain any dial-peers.

That's probably why CUBE can't select any outgoing dial-peers.

Roger Kallberg · ‎02-17-2022

As @b.winter wrote the outbound call is failing since it does not know what dial peer to use as the DPG is empty. It fails with this error.

Feb 16 20:48:51.368: %VOICE_IEC-3-GW: C SCRIPTS: Internal Error (No dialpeer match): IEC=1.1.128.11.5.0 on callID 137 GUID=13D9F10000010000000007C7A1CA450A

Add this to your configuration.

voice class dpg 1
 dial-peer 200

If it still does not work get the output from these two debugs running at the same time.

debug ccsip message
debug voip ccapi inout

Roger Kallberg · ‎02-17-2022

Apart from the other change suggested I would also recommend you to do these changes. Although these are not related to the problem with outbound calls.

voice class uri ITSP sip
 host ipv4:165.148.64.114

dial-peer voice 200 voip
 no incoming called-number .
 incoming uri via ITSP

The reason is that it’s a much better inbound match statement than what you currently have.

willie.mitchell2 · ‎02-17-2022

Hi Roger,

I have added the configuration as suggested but still the outbound calls fail.

I am looking at the cause codes and errors that I getting from the debug traces, hopefully I will get a solution

Roger Kallberg · ‎02-18-2022

Please post the output from the suggested debugs.

willie.mitchell2 · ‎02-22-2022

Hi Roger Kallberg,

Apologies for the delay to respond.

The service provider was requested to upgrade their cube IOS since the version they were running is known for bugs.

Their cube was upgraded to IOS 17.3.3 hoping that this would have a positive outcome since we struggled with this issue before.

Unfortunately the outcome was negative with the tests as a result i am only posting the debug now.

Hoping that you can assist.

b.winter · ‎02-22-2022

The provider isn't answering your Re-INVITES with the authentication header included.

In this case, only the provider can tell you, what is wrong.

Maybe you are missing some headers, or headers are wrong / have the wrong value, ...

For outbound calls (doesn't matter which provider or technology), the provider has to give you the info, how the outgoing call needs to be formatted.

Otherwise it's like trying to read someone's mind (which obviously is not possible).

Roger Kallberg · ‎02-23-2022

You send the re-invite 4 times to the SP with authentication, but as @b.winter mention you does not seem to get a reply. So after awhile the call fails with this.

SIP/2.0 408 Request Timeout
Via: SIP/2.0/UDP 10.69.202.161:5060;branch=z9hG4bK8b2b9b286bbfa
From: "0406555440" <sip:27406555440@10.69.202.161>;tag=43244561~82794ea5-60a1-4f46-8022-01fab0552507-34513473
To: <sip:0833766821@10.71.249.134>;tag=991D1E8-256A
Date: Tue, 22 Feb 2022 15:26:50 GMT
Call-ID: d9a69e80-215100ba-769def-a1ca450a@10.69.202.161
CSeq: 101 INVITE
Allow-Events: kpml, telephone-event
Server: Cisco-SIPGateway/IOS-15.5.3.M
Reason: Q.850;cause=102
Content-Length: 0

You need to check with your SP why you're not getting a reply to the authentication you send.

nnikolaev · ‎03-04-2022

check sip-ua registration status

because

Received:
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.71.249.137:5060;branch=z9hG4bK7121CD9
From: "0406555440" <sip:27406555440@165.148.64.114>;tag=991B480-184A
To: <sip:0833766821@cbs1.wr1.stdstrunk.qos.telkomvoip.co.za>;tag=snl_0027432546
Call-ID: B08F1B75-932A11EC-AC56A3FA-3C9AF23A@10.71.249.137
CSeq: 101 INVITE
Timestamp: 1645543610
WWW-Authenticate: Digest realm="telkom", nonce="2791655612-8f2aae7780d6aec06a10906c0c317dc8", algorithm=MD5, qop="auth"
Content-Length: 0

and then a few invites without an answer

Able to make inbound calls through SIP Trunk but outbound calls fail