[bunji99]

I have setup broadvoice with cme using a config on this forum. Oddly enough inbound calls work, mwi indications work, but outbound calls fail. According to broadvoice the calls dont even hit there servers. The sip logs indicate a 403 error (forbidden) when I attempt to make calls. the firewall is wide open so I am not sure where to go with this. Any similar problems out there?

thanks
bunji99

[jfanelli]

Post your config.. I use Broadvoice with CME.. works great.

[willettj]

I am also using CME with Broadvoice.. I have found that you can't use any of the proxies. under sip-ua you must enter sip-server dns:sip.broadvoice.com

Also I have new problem that just started today I can't figure out.. all of a sudden only inbound calls get an audio path. If a place an outbound call, the destination phone rings and the call gets connected, but no audio in either direction. Nothing has changed on my end so I think this is another Broadvoice outage of somekind, like when their Chicago site went down a little over a week ago.

Anybody else have this today? Started at 5:00 pm for me

Joe

[jfanelli]

I use Broadvoice with CME as well (my only home phone service). I do find I need to occasionally change the SIP Proxy, as inbound calls will occasionally stop, or I will get bad echo on a given proxy server and the only fix is to change to another proxy.

Here's my relevant config. I keep dns host entries in my IOS config to make it easy to remember the different proxy servers, and so I can easily ping them by name and change proxy servers quickly if need be (even remotely, if I find that I can't call the house).

Also note, I don't use Broadvoice for voicemail, but my config is enabled for it to work (mwi settings under sip-ua):

i'm running 12.4(15)T3 on a ISR 3845:

ip host sip.broadvoice.com 147.135.20.221 <--the proxy i'm using, lowest ping time
ip host proxy.lax.broadvoice.com 147.135.8.128
ip host proxy.dca.broadvoice.com 147.135.0.128
ip host proxy.mia.broadvoice.com 147.135.4.128
ip host proxy.atl.broadvoice.com 147.135.28.128
ip host proxy.chi.broadvoice.com 147.135.12.221
ip host proxy.bos.broadvoice.com 147.135.32.221
ip host proxy.nyc.broadvoice.com 147.135.20.221

voice service VoIP
clid network-provided
allow-connections sip to sip
supplementary-service h450.12
no supplementary-service sip moved-temporarily
no supplementary-service sip refer
fax protocol t38 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711ulaw
h323
call service stop <--disables h323 so no one call relay calls through me!
sip
registrar server expires max 3600 min 3600 <--needed for my sip phones to register, you won't need this when using Cisco SCCP protocol phones

voice source-group SIP_Trunks
access-list 50
!
voice translation-rule 1 <--sets outbound caller ID to my Broadvoice #
rule 1 /^.*/ /5865551212/
!
voice translation-rule 2 <--sets inbound calls to my Broadvoice# to the right extension
rule 1 /5865551212/ /1212/
!
voice translation-rule 3
rule 1 /^586(.*)/ /\1/
rule 2 /\(..........\)/ /1\1/
!

!
!
voice translation-profile Broadvoice_IN
translate calling 3
translate called 2
!
voice translation-profile Broadvoice_OUT
translate calling 1

voice source-group SIP_Trunks <--locks down inbound SIP connections to the ACl defined below; make sure broadvoice proxy ip's are in there!
access-list 50

access-list 50 remark Inbound SIP traffic allowed list
access-list 50 permit 71.245.181.14 log
access-list 50 permit 64.192.112.13 log
access-list 50 permit 192.168.48.0 0.0.7.255
access-list 50 permit 192.168.100.0 0.0.0.255 log
access-list 50 permit 147.135.0.0 0.0.255.255 log
access-list 50 permit 69.90.0.0 0.0.255.255 log
access-list 50 permit 66.54.140.0 0.0.0.255 log
access-list 50 permit 192.168.0.0 0.0.255.255 log
access-list 50 deny any

sip-ua
authentication username 5865551212 password 7 xxxxx realm BroadWorks
no remote-party-id
retry register 3
retry options 1
mwi-server dns:sip.broadvoice.com expires 3600 port 5060 transport udp unsolicited
registrar dns:sip.broadvoice.com expires 3600

dial-peer voice 1 VoIP
description ** Outgoing Broadvoice 10-digit **
translation-profile outgoing Broadvoice_OUT
preference 2
destination-pattern .T
voice-class codec 1
session protocol sipv2
session target dns:sip.broadvoice.com
dtmf-relay rtp-nte
ip qos dscp cs5 media
ip qos dscp cs4 signaling
no vad
!
dial-peer voice 86 VoIP <--so I can call Broadvoice voicemail
description ** Outgoing Broadvoice Voice-Mail **
destination-pattern *86
voice-class codec 1
session protocol sipv2
session target dns:sip.broadvoice.com
dtmf-relay rtp-nte
ip qos dscp cs5 media
no vad
!
dial-peer voice 5551212 VoIP
description ** Incoming Broadvoice **
translation-profile incoming Broadvoice_IN
voice-class sip dtmf-relay force rtp-nte
session protocol sipv2
session target sip-server
incoming called-number 5865551212
dtmf-relay rtp-nte
codec g711ulaw
fax protocol pass-through g711ulaw
ip qos dscp cs5 media
ip qos dscp cs4 signaling
no vad


if anyone has more specific questions, just ask. the rest of my config is somewhat complex, with hardware conferencing etc.

[willettj]

My config is similar to yours.. I am also using sip.broadvoice.com for the proxy but that is because it is the only one that will work. Have you tried using one of the others? I suspect you will get 403 errors if you try...

I also don't have the ACL on the SIP trunks.. I can't really see in your config how that is working though..can't see where it is applied.

I am using SCCP phones, and have a Unity 5.0 server for VM

Joe

[willettj]

Here are the relevant entries from my config:

voice service VoIP
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
supplementary-service h450.12
no supplementary-service sip moved-temporarily
fax protocol t38 ls-redundancy 0 hs-redundancy 0 fallback cisco
h323
sip
registrar server expires max 3600 min 3600
!
!
voice class codec 1
codec preference 1 g711ulaw
codec preference 2 g729r8
codec preference 3 ilbc
!

voice translation-rule 1
rule 1 /^1/ //
!
!
voice translation-profile SIP-LD
translate called 1


dial-peer voice 3 VoIP
description ** Local 10 digit SIP **
preference 1
destination-pattern [3-4].........
voice-class sip dtmf-relay force rtp-nte
session protocol sipv2
session target sip-server
dtmf-relay sip-notify rtp-nte
fax rate disable
fax protocol t38 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711ulaw
clid network-number 4079579686
no vad

sip-ua
authentication username XXXXXXXXXX password 7 XXXXXXXXXX
no remote-party-id
mwi-server dns:sip.broadvoice.com expires 3600 port 5060 transport udp unsolicited
registrar dns:sip.broadvoice.com expires 3600
sip-server dns:sip.broadvoice.com


telephony-service
video
maximum bit-rate 768
fxo hook-flash
load 7960-7940 P00308000400
load 7920 cmterm_7920.4.0-03-02
max-ephones 24
max-dn 48
ip source-address 172.16.100.1 port 2000
auto assign 21 to 24
service phone videoCapability 1
system message The Willett Family
url services http://phone-xml.berbee.com/menu.xml
voicemail 600
max-conferences 4 gain -6
moh enyablue.au
multicast moh 239.2.2.2 port 2000
dn-webedit
time-webedit
transfer-system full-consult
create cnf-files version-stamp 7960 Mar 05 2008 18:53:39

[Patrick_Mc]

Oddly enough, I was running into the same issue when I moved to BroadVoice yesterday - inbound worked right off the bat, outbound took awhile, with 403 disconnects. After debugging and fiddling around, the only way I got it to work was using info off a Microsoft Technet discussing using BV, Exch2007, and CME. Little nugget in there used the following in sip-ua

sip-ua
authentication username 9999999999 password 7 XXXXXXXXX
credentials username 9999999999 password 7 xxxxxxxxx realm BroadWorks

As soon as I added the credentials entry, outbound worked. Also, as part of my config, I'm also mapping the proxies to sip.broadvoice.com, otherwise the SIP Invite says mynum@proxy..... vs. mynum@sip.bv...... Still trying to figure out SIP - seems like a lot of stuff is necessary but that it can also be a very picky protocol.

[willettj]

Thanks for the info.. I'll try adding that and see if it works for me..

Post an example of your proxy "mapping" if you can.

Thanks,

Joe

[Patrick_Mc]

I'm using a Cisco 2621XM running adventservice-k9.12.4-9. Here's what I believe are the relevant config pieces:

! Maps sip.broadvoice.com to IP of functional SIP proxy (proxy-nyc this case)
ip host sip.broadvoice.com 147.135.0.128

! Ensures SIP traffic uses my internet-facing connection - more a guarantee
! than a necessity for me.
voice service VoIP
sip
bind control source-interface FastEthernet0/0
bind media source-interface FastEthernet0/0
registrar server expires max 3600 min 3600

! Following translations require me to dial 9 for outside line, but strip it
! before the digits are sent to the provider - also changes my internal
! extension to my number.
voice translation-profile LongDistance
translate calling 7
translate called 4

voice translation-rule 4
rule 1 /91+/ /1/
!
voice translation-rule 7
rule 1 /2.../ /9315389999/
!
! Example dial-peer showing my settings. Using target of
! proxy.nyc.broadvoice.com caused the call to fail. Debugging SIP
! showed that my INVITE was showing 9315389999@proxy.nyc.bv.com
! Hence, I resolved the IP and used the host mapping above.

dial-peer voice 913 VoIP
translation-profile outgoing LongDistance
destination-pattern 91[2-9]..[2-9]......
session protocol sipv2
session target dns:sip.broadvoice.com
dtmf-relay rtp-nte
codec g711ulaw
no vad

! My user agent config - I added the credentials off a microsoft Exch 2007 ! interop reference and it allowed outgoing calls to succeed - no more
! 403s. Not positive that realm is needed for auth, but is needed for
! credential line.
sip-ua
credentials username 9315389999 password 071B25424C0C2913013630 realm BroadWorks
authentication username 9315389999 password 071B25424C0C2913013630 realm BroadWorks
no remote-party-id
retry register 3
mwi-server dns:sip.broadvoice.com expires 3600 port 5060 transport udp unsolicited
registrar dns:sip.broadvoice.com expires 3600
!

Any questions, lemme know.

[willettj]

I am just curiuos if anyone has moh working across the Broadvoice SIP trunk? It worked for me some time ago and then it just quit. MOH works fine ip phone to ip phone and ip phone to PSTN FXO port, but not across Broadvoice.

I am not sure if CME is sending it via multicast, and maybe Broadvoice started blocking it?

Joe