<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Hi Jon<div><br></div><div>Thanks for that. Trying to translate between the txt version and the xml version, most of the settings seem to be about right. </div><div><br></div><div>I think the problem might be with the way we’re referring to the sip server in the xml. The previous advice I got was to do it using the call manager section;</div><div><br></div><div><div><callManagerGroup></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><members> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><member priority="0"> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><callManager> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><ports></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><ethernetPhonePort>2000</ethernetPhonePort> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><sipPort>5060</sipPort></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><securedSipPort>5061</securedSipPort> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span></ports></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><processNodeName>1.2.3.4</processNodeName></div><div><span class="Apple-tab-span" style="white-space:pre"> </span></callManager></div><div><span class="Apple-tab-span" style="white-space:pre"> </span></member></div><div><span class="Apple-tab-span" style="white-space:pre"> </span></members></div><div></callManagerGroup></div><div> </div><div>and then later in the config</div><div><br></div><div><sipLines> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><line button="1"> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><featureID>9</featureID> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><featureLabel>SIPACCOUNT</featureLabel> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><name>SIPACCOUNT</name> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><displayName>SIPACCOUNT</displayName> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><contact>SIPACCOUNT</contact> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><proxy>USECALLMANAGER</proxy> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><port>5060</port> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><authName>SIPACCOUNT</authName> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><authPassword>MYPASSWORD</authPassword> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span><sharedLine>false</sharedLine> </div><div><span class="Apple-tab-span" style="white-space:pre"> </span></line></div><div></sipLines></div><div apple-content-edited="true"><br class="Apple-interchange-newline"><br></div><div apple-content-edited="true">It seems to be seeing the line name etc but never trying to contact the server.
</div><div apple-content-edited="true"><br></div><div apple-content-edited="true"><br></div><div apple-content-edited="true">Putting the SIP servers IP in the <proxy> field doesn’t seem to make any difference.</div><div apple-content-edited="true"><br></div><div apple-content-edited="true">Cheers</div><div apple-content-edited="true"><br></div><div apple-content-edited="true">Mark</div><div apple-content-edited="true"><br></div>
<br><div><div>On 19 Jun 2014, at 11:51, Jonathan Hunter <<a href="mailto:hunterj91@hotmail.com">hunterj91@hotmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div class="hmmessage" style="font-size: 12pt; font-family: Calibri; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div dir="ltr">Hi Mark,<div><br></div><div>Yes we had exactly the same issue with a 7940.</div><div><br></div><div>It is with the .cnf xml file.</div><div><br></div><div>You need to make sure that the line name is populated;</div><div><br></div><div><span style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);">line1_name: "<<USERNAME>>"</span><br style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);"><br style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);"><span style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);">line1_authname: "<<USERNAME>>"</span><br style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);"><br style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);"><span style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);">line1_password: "supersecret"</span></div><div><span style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);"><br></span></div><div><span style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);">See an example file attached, hopefully will give you an idea.</span></div><div><span style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);"><br></span></div><div><span style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);">Thanks</span></div><div><span style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);"><br></span></div><div><span style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);">Jon</span></div><div><span style="font-family: monospace; font-size: 15.555556297302246px; background-color: rgb(255, 255, 255);"><br></span></div><div><font face="monospace"><br></font></div><div><font face="monospace"><br></font><br><div><hr id="stopSpelling">From: <a href="mailto:mark@darkorigins.com">mark@darkorigins.com</a><br>Date: Thu, 19 Jun 2014 11:03:25 +0100<br>To: <a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br>Subject: Re: [SR-Users] Cisco 79XX Series Phones and TLS integration with kamailio<br><br>Hi Jon<div><br></div><div>I’m working with a variety of routers here at the moment (testing / lab environment :-) ranging from Mikrotik, Draytek to Firebricks.</div><div><br></div><div>So far;</div><div><br></div><div>- Phone on test is a 7970</div><div><br></div><div>- Variety of routers here at the moment (testing / lab environment :-) ranging from Mikrotik, Draytek to Firebricks. All configured to NAT, no firewall filtering</div><div><br></div><div>- SIP v9.3(1)SR4 firmware on the phone</div><div><br></div><div>- Provisioning side ‘appears’ to be working. In that it requests the files, says ‘registering’</div><div><br></div><div>- Doesn’t appear to generate any SIP traffic during registration (tcpdump on router/kamailio server)</div><div><br></div><div><br></div><div>Wondering if I’ve got something wrong in the .cnf xml …</div><div><br></div><div>Cheers</div><div><br></div><div><br></div><div>Mark</div><div><div><div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; word-wrap: break-word;"><div style="font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; word-wrap: break-word;"><span class="ecxApple-style-span" style="border-collapse: separate; border-spacing: 0px;"><div style="word-wrap: break-word;"><span class="ecxApple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px;"><div style="word-wrap: break-word;"><br></div></span></div></span></div></div></div><br><div><div>On 19 Jun 2014, at 10:48, Jonathan Hunter <<a href="mailto:hunterj91@hotmail.com">hunterj91@hotmail.com</a>> wrote:</div><br class="ecxApple-interchange-newline"><blockquote><div class="ecxhmmessage" style="font-size: 12pt; font-family: Calibri; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div dir="ltr">Hi Mark,<div><br></div><div>Sure of course, they are some what painful to get working due to their asymmetric NAT behaviour.</div><div><br></div><div>What handset models are you working with, and what firewall devices do you have on site, as I have them working with a Cisco ASA on the network edge.</div><div><br></div><div>Then I can give you some more details on at least them trying to register to kamailio.</div><div><br></div><div>Thanks</div><div><br></div><div>Jon<br><br><div><hr id="ecxstopSpelling">From:<span class="Apple-converted-space"> </span><a href="mailto:mark@darkorigins.com">mark@darkorigins.com</a><br>Date: Thu, 19 Jun 2014 10:37:42 +0100<br>To:<span class="Apple-converted-space"> </span><a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br>Subject: Re: [SR-Users] Cisco 79XX Series Phones and TLS integration with kamailio<br><br>Hi Jon<div><br></div><div>It sounds like you’re a few steps in front of me. I’m just starting to try and get a working set of config files etc for provisioning to the phones. Which at the moment is going through the motions of registering but not actually sending anything.</div><div><br></div><div>Would you mind sharing your experiences so far?</div><div><br></div><div>Thanks</div><div><br></div><div>Mark<br><div><div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; word-wrap: break-word;"><div style="font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; word-wrap: break-word;"><span class="ecxApple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px;"><div style="word-wrap: break-word;"><span class="ecxApple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px;"><div style="word-wrap: break-word;"><br></div></span></div></span></div></div></div><br><div><div>On 19 Jun 2014, at 09:50, Jonathan Hunter <<a href="mailto:hunterj91@hotmail.com">hunterj91@hotmail.com</a>> wrote:</div><br class="ecxApple-interchange-newline"><blockquote><div class="ecxhmmessage" style="font-size: 12pt; font-family: Calibri; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div dir="ltr">Hi All,<div><br></div><div>As you guys might remember I have been doing alot of work with these legacy handsets recently, in particular the Cisco IP phones 7945G and 7965G.</div><div><br></div><div>They work well now with kamailio, using UDP or TCP as the transport protocol.</div><div><br></div><div>I am now looking to implement SIP over TLS with them, and wondered if anyone had completed the same, as it appears they were designed very much to support SIP over TLS and SRTP but with Cisco call manager and not other SIP devices.</div><div><br></div><div>I am trying to understand if its possible to integrate with kamailio, as from Cisco documentation it appears a CTL file (client trust list) is required which seems to be generated by cisco software, and the handset needs it before it will try to initiate a SIP connection over TLS.</div><div><br></div><div>I have implemented TLS /SRTP with Cisco SPA's, Bria etc on kamailio fine, so its more a question around the handset and if anyone has achieved this.</div><div><br></div><div>Thanks</div><div><br></div><div>Jon</div></div>_______________________________________________<br>SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br><a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br><a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a></div></blockquote></div><br></div><br>_______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<span class="Apple-converted-space"> </span><a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><span class="Apple-converted-space"> </span><a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a></div></div></div>_______________________________________________<br>SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br><a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br><a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a></div></blockquote></div><br></div><br>_______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list <a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a> <a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a></div></div></div><span><7940examplefile.txt></span>_______________________________________________<br>SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br><a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br><a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a></div></blockquote></div><br></div></body></html>