BINDs on CUBEs are evil. It will use the egress interface automatically without binds, and as you have found, you cannot change binds with calls up.
From: cisco-voip [mailto:[email protected]] On Behalf Of Nick Barnett Sent: Wednesday, May 04, 2016 8:32 AM To: Brian Meade <[email protected]> Cc: Cisco VoIP Group <[email protected]> Subject: Re: [cisco-voip] Authenticating sip trunk to ITSP from CUBE? I'm binding control and media to my inside interface: sip bind control source-interface GigabitEthernet0/0 bind media source-interface GigabitEthernet0/0 I suspect this is the issue... is there any way to make the REGISTER messages come from the outside gi0/1 interface? The reason I'm binding to inside is that we have a a very fluid internal network. I have to make and modify internal dial peers almost daily. When I need to create a dial peer and put the bind statements on the dial peer, it won't bind properly since there are active SIP calls on the CUBE... so I bound it globally. My external dial peers rarely change, so I bind those directly to gi0/1 (on the DP). I was under the impression that REGISTER events can take place without a dial peer... but is there a way to, i dunno, make a dial peer for register messages? Can I use SIP profile magic to get it working as is? I found this article which is pretty much exactly what I'm dealing with, but it doesn't mention REGISTER at all... https://supportforums.cisco.com/blog/154506 <https://urldefense.proofpoint.com/v2/url?u=https-3A__supportforums.cisco.com_blog_154506&d=CwMFAg&c=M-KQspD_LQogCbR-BWCHOaeDEPOhF8vWqHZTaiwxT3c&r=T9uVLZucbHG2NKKKzOrp-o5cpdReHj02PkJJsCVkgfwcv7S0R5lDeFJg2VRbiNih&m=UIAzGDQs8RCZld9kCbExwqpJhTgzpDVwM0k8_I7JRqU&s=jZN-R2pRsZOWN3r5is-aSivDlf9hqddUzDIoOWRWc3E&e=> On Wed, May 4, 2016 at 9:06 AM, Brian Meade <[email protected] <mailto:[email protected]> > wrote: Do you already have the SIP bind under voice service voip? voice service voice sip bind all source-interface FastEthernet0 On Wed, May 4, 2016 at 9:58 AM, Nick Barnett <[email protected] <mailto:[email protected]> > wrote: I've never dealt with an authenticated SIP trunk before and I'm having some issues. I was wondering if anyone has had a similar experience. I already have 2 SIP trunks from ITSP-1 that do NOT require authentication. These are working fine and have been for years. We are adding ITSP-2 and their SIP service DOES require auth. I've followed their integration guide (which left a lot to be desired) and their acceptance team is telling me my auth is coming from our private class A address. Our CUBE is in HA with an inside (10.x.x.x) and outside (public) IP address. They are seeing REGISTER messages sourcing the inside VIP. I was looking around for an auth BIND statement or something like that, but I haven't had any luck. Any pointers? Thanks, Nick _______________________________________________ cisco-voip mailing list [email protected] <mailto:[email protected]> https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________ cisco-voip mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-voip
