TIPS 401 on inbound calls

chayn123

New Member
Joined
Jun 9, 2011
Messages
14
Reaction score
1
Hello,

I installed an EC2 green version and was really happy with it, except there was a fatal error with the clock and the CPU would get to 100% at which point everything stopped working for several minutes at a time.

I gave up on that and install the purple version in a different AWS zone hoping this would for the clock issue. Outbound calls are no problem, but I keep getting a 401 on any inbound calls.

IPTables is set to allow our switch, and outbound is fine. From the asterisk CLI I don't see any activity on inbound. The EC2 firewall is open to our switch and the purple instance is registered there. I've run Wireshark between the switch and the purple. All I can see is 401 unauthorized.

I setup two inbound routes off the same trunk with separate DIDs directed towards two separate extensions. One is a Zoiper softphone on my PC, the other and Aastra 6753i. Both registered, and both can make outbound calls. They both receive calls from other accounts on different PBXs.

I'm hopeful somebody will have some suggestions on where I might see what is blocking the inbound.

I'll be daring and ask a couple of other somewhat related questions concerning my inability to see the call flow.

Is Webmin installed as part of purple? It was installed on the green version.

How can I permanently increase the CLI verbosity higher than 3. I've set it as 7 as an option in asterisk.conf with no effect.

If anybody has any thoughts about the clock timing in the green version I would prefer to go back to that, but I need to get something working.

I don't use forums a lot. Hopefully I didn't ask too many questions in one thread.
This all is under "Help me"

Thank you very much,

Claude
 

Hyksos

Guru
Joined
May 28, 2011
Messages
474
Reaction score
70
Salut Claude,

Too many questions is not that bad when they are documented and clear. Read my attempt at an answer below. But you should read many of the sticky at the top of the help section because it's hard to answer your questions as they are.

Hello,

I installed an EC2 green version and was really happy with it, except there was a fatal error with the clock and the CPU would get to 100% at which point everything stopped working for several minutes at a time.

Not sure what you mean here, maybe I never heard of that. If you want us to follow you on that, you'll have to give a whole lot more information about it. Right now I can't even try to guess what you mean.

I gave up on that and install the purple version in a different AWS zone hoping this would for the clock issue. Outbound calls are no problem, but I keep getting a 401 on any inbound calls.

IPTables is set to allow our switch, and outbound is fine. From the asterisk CLI I don't see any activity on inbound. The EC2 firewall is open to our switch and the purple instance is registered there. I've run Wireshark between the switch and the purple. All I can see is 401 unauthorized.

So, you see the PBX answering you a 401 but no activity in the CLI. Doesn't make sense until you fix your log and start seeing the asterisk activity.
asterisk -rvvvvvvvvv then "sip set debug on"
401 is usually bad credentials, but you need the logs and we need the logs.
You should also post a complete screenshot of your sanitized trunk config from which these incoming calls are supposed to come from.
Guessing is hard, maybe you have a register string for outbound calls but incoming calls are authenticated against the rest of the trunk config and it's not valid or not defined enough. Maybe not, hence why showing the trunk config might be key.

I setup two inbound routes off the same trunk with separate DIDs directed towards two separate extensions. One is a Zoiper softphone on my PC, the other and Aastra 6753i. Both registered, and both can make outbound calls. They both receive calls from other accounts on different PBXs.

I'm hopeful somebody will have some suggestions on where I might see what is blocking the inbound.

I'll be daring and ask a couple of other somewhat related questions concerning my inability to see the call flow.

Is Webmin installed as part of purple? It was installed on the green version.
Webmin is always there. You should see it with "netstat -lnptu".

How can I permanently increase the CLI verbosity higher than 3. I've set it as 7 as an option in asterisk.conf with no effect.
You could show us your asterisk.conf and have you restarted afterward for it to take effect?
asterisk -rvvvvvvvv then sip set debug on should fix that anyway.

If anybody has any thoughts about the clock timing in the green version I would prefer to go back to that, but I need to get something working.

I don't use forums a lot. Hopefully I didn't ask too many questions in one thread.
This all is under "Help me"

Thank you very much,

Claude
 

chayn123

New Member
Joined
Jun 9, 2011
Messages
14
Reaction score
1
Thank you for your reply.

I got the green version to receive calls. It was the setting in the trunk. It might be particular to our switch...

I added: insecure=port,invite to the peer details and changed the user to type=friend and everything started to flow.


I find myself frequently confused, but with netstat-Inptu I see the results below.
Is tcp 0 0 0.0.0.0:9001 0.0.0.0:* LISTEN 1835/perl indicative of Webmin running?


Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:9001 0.0.0.0:* LISTEN 1835/perl
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 1275/mysqld
tcp 0 0 0.0.0.0:5038 0.0.0.0:* LISTEN 1514/asterisk
tcp 0 0 127.0.0.1:32975 0.0.0.0:* LISTEN 1787/nrservice
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 956/rpcbind
tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN 1514/asterisk
tcp 0 0 0.0.0.0:56336 0.0.0.0:* LISTEN 1006/rpc.statd
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1134/sshd
tcp 0 0 0.0.0.0:1720 0.0.0.0:* LISTEN 1514/asterisk
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1336/sendmail
tcp 0 0 0.0.0.0:4445 0.0.0.0:* LISTEN 1566/perl
tcp 0 0 :::111 :::* LISTEN 956/rpcbind
tcp 0 0 :::80 :::* LISTEN 1353/httpd
tcp 0 0 :::83 :::* LISTEN 1353/httpd
tcp 0 0 :::22 :::* LISTEN 1134/sshd
tcp 0 0 :::9080 :::* LISTEN 1353/httpd
tcp 0 0 :::443 :::* LISTEN 1353/httpd
tcp 0 0 :::53506 :::* LISTEN 1006/rpc.statd
udp 0 0 0.0.0.0:69 0.0.0.0:* 1142/xinetd
udp 0 0 0.0.0.0:847 0.0.0.0:* 919/portreserve
udp 0 0 0.0.0.0:4569 0.0.0.0:* 1514/asterisk
udp 0 0 0.0.0.0:111 0.0.0.0:* 956/rpcbind
udp 0 0 0.0.0.0:758 0.0.0.0:* 1006/rpc.statd
udp 0 0 0.0.0.0:631 0.0.0.0:* 919/portreserve
udp 0 0 0.0.0.0:57720 0.0.0.0:* 1006/rpc.statd
udp 0 0 10.611.158.173:123 0.0.0.0:* 1150/ntpd
udp 0 0 127.0.0.1:123 0.0.0.0:* 1150/ntpd
udp 0 0 0.0.0.0:123 0.0.0.0:* 1150/ntpd
udp 0 0 0.0.0.0:647 0.0.0.0:* 919/portreserve
udp 0 0 0.0.0.0:5000 0.0.0.0:* 1514/asterisk
udp 0 0 0.0.0.0:783 0.0.0.0:* 919/portreserve
udp 0 0 0.0.0.0:2727 0.0.0.0:* 1514/asterisk
udp 0 0 0.0.0.0:4520 0.0.0.0:* 1514/asterisk
udp 0 0 0.0.0.0:9001 0.0.0.0:* 1835/perl
udp 0 0 0.0.0.0:707 0.0.0.0:* 956/rpcbind
udp 0 0 0.0.0.0:5060 0.0.0.0:* 1514/asterisk
udp 0 0 0.0.0.0:68 0.0.0.0:* 847/dhclient
udp 0 0 :::111 :::* 956/rpcbind
udp 0 0 fe80::2000:aff:feec:b9ad:123 :::* 1150/ntpd
udp 0 0 ::1:123 :::* 1150/ntpd
udp 0 0 :::123 :::* 1150/ntpd
udp 0 0 :::35361 :::* 1006/rpc.statd
udp 0 0 :::707 :::* 956/rpcbind


I frequently restart and backup. After 30 years in software product development I've finally learned it pays to do this.
(I'm not a developer, I'm an evangelist, but I am frequently subject to their creations ...)

Here is my asterisk.conf

[directories]
astetcdir => /etc/asterisk
astmoddir => /usr/lib/asterisk/modules
astvarlibdir => /var/lib/asterisk
astagidir => /var/lib/asterisk/agi-bin
astspooldir => /var/spool/asterisk
astrundir => /var/run/asterisk
astlogdir => /var/log/asterisk

[options]
transmit_silence_during_record = yes

[options]
app_set=1.6

[options]
app_set=1.8

[options]
verbose=7

I've never seen one so empty. This is what I got from the installation with the exception of [options] verbose=7 which I added, and which makes no difference.


I'm in a fire up the green version and capture the log file to show you what I'm writing about. It would be definitely my preference to use that one versus purple.


This is my second time of interacting with this form and I'm very impressed with the intelligence, and speed of response. This is very encouraging.

Thank you,

Claude
 

Hyksos

Guru
Joined
May 28, 2011
Messages
474
Reaction score
70
Is tcp 0 0 0.0.0.0:9001 0.0.0.0:* LISTEN 1835/perl indicative of Webmin running?
Yes

Here is my asterisk.conf

[directories]
astetcdir => /etc/asterisk
astmoddir => /usr/lib/asterisk/modules
astvarlibdir => /var/lib/asterisk
astagidir => /var/lib/asterisk/agi-bin
astspooldir => /var/spool/asterisk
astrundir => /var/run/asterisk
astlogdir => /var/log/asterisk

[options]
transmit_silence_during_record = yes

[options]
app_set=1.6

[options]
app_set=1.8

[options]
verbose=7

I've never seen one so empty. This is what I got from the installation with the exception of [options] verbose=7 which I added, and which makes no difference.

(We don't know the version of freepbx your running, you haven't posted the result of the "status" command.)
Also I'm not sure you should mess with this, I fail to see the point. Why are you trying to change that? Keep the default setting you got with the install and enter the cli with asterisk -rvvvvvvvvvvvvv then use sip set debug when necessary.
No point trying to change the default verbose level.
Also, I don't know how you could know if your change works or not. How are you checking what verbose level is set?
I think the CLI used to say it when you changed the level with "core set verbose X" but right now I can only test on 11.5 and I can't tell what the verbose level is... I can change it.. but I can't know what it was. How do you know your attempt at changing the default verbose level is not working?
 

chayn123

New Member
Joined
Jun 9, 2011
Messages
14
Reaction score
1
Hi,

I think everything is good!

Webmin is up now on both instances.

On the verbose level, I always have it set as 7 in asterisk.conf as my personal preference. If there is no known way to change this lets leave it alone.

For grins;

Status on the Green version:
┌────────────────────────SYSTEM INFORMATION───────────────────────────┐
│ Asterisk = ONLINE | Zap/Dahdi = UNKNOWN | MySQL = ONLINE │
│ SSH = ONLINE | Apache = ONLINE | Iptables = ONLINE │
│ Fail2ban = ONLINE | Internet = ONLINE | Ip6Tables = ONLINE │
│ Disk Free = ADEQUATE| Mem Free = CHECK | NTPD = ONLINE │
│ SendMail = ONLINE | Samba = OFFLINE | Webmin = ONLINE │
│ Ethernet0 = ONLINE | Ethernet1 = N/A | Wlan0 = N/A │
│ │
│ PIAF Installed Version = 2.0.6.3 under *XEN* │
│ FreePBX Version = 2.11.0.11 │
│ Running Asterisk Version = 11.2.1 │
│ Asterisk Source Version = 1.8.20.1 │
│ Zap/Dahdi Source Version = N/A │
│ Libpri Source Version = 1.4.12 │
│ IP Address = 10.112.71.6 on eth0 │
│ Operating System = CentOS release 6.3 (Final) <> │
│ Kernel Version = 2.6.32-279.1.1.el6.x86_64 - 64 Bit │
│ Incredible Version = 11.4 │
└─────────────────────────────────────────────────────────────────────┘

Status on the Purple version:

┌────────────────────────SYSTEM INFORMATION───────────────────────────┐
│ Asterisk = ONLINE | Zap/Dahdi = UNKNOWN | MySQL = ONLINE │
│ SSH = ONLINE | Apache = ONLINE | Iptables = ONLINE │
│ Fail2ban = ONLINE | Internet = ONLINE | Ip6Tables = ONLINE │
│ Disk Free = ADEQUATE| Mem Free = CHECK | NTPD = ONLINE │
│ SendMail = ONLINE | Samba = OFFLINE | Webmin = ONLINE │
│ Ethernet0 = ONLINE | Ethernet1 = N/A | Wlan0 = N/A │
│ │
│ PIAF Installed Version = 2.0.6.3 under *XEN* │
│ FreePBX Version = 2.11.0.11 │
│ Running Asterisk Version = 11.2.1 │
│ Asterisk Source Version = 1.8.20.1 │
│ Zap/Dahdi Source Version = N/A │
│ Libpri Source Version = 1.4.12 │
│ IP Address = 10.212.79.7 on eth0 │
│ Operating System = CentOS release 6.3 (Final) <> │
│ Kernel Version = 2.6.32-279.1.1.el6.x86_64 - 64 Bit │
│ Incredible Version = 11.4 │
└─────────────────────────────────────────────────────────────────────

Thank you again,

Claude
 

Members online

No members online now.

Forum statistics

Threads
25,782
Messages
167,509
Members
19,202
Latest member
pbxnewguy
Get 3CX - Absolutely Free!

Link up your team and customers Phone System Live Chat Video Conferencing

Hosted or Self-managed. Up to 10 users free forever. No credit card. Try risk free.

3CX
A 3CX Account with that email already exists. You will be redirected to the Customer Portal to sign in or reset your password if you've forgotten it.
Top