Why can’t I register my VoIP device?

Why can’t I register my VoIP device?

Why can’t I register my VoIP device?

Firewalls are a common cause of SIP registration failure where the firewall blocks incoming traffic as part of the normal SIP registration process.

To explain, the process of any SIP registration consists of sequential number of requests and challenges between your handset and our registration server. The underlying logic is our systems authenticate your username and password credentials storing your IP address and port number at successful registration. On our side we redirect incoming calls to the phones last recorded registered IP address and port. If your router blocks our incoming traffic, the call will fail.

Registration – Inbound only

We don’t require you to register to make an outbound call as we check your credentials on each call. Registration is merely the mechanism we use to direct incoming calls through to your router/firewall and ultimately phone or PBX (if using registration).

SIP Keep-Alive

For security, routers are oblivious to the requirements of SIP and by design, regularly close the ports required to communicate with the PBX or handset. Resetting the phones “Keep Alive” values down from 3600 seconds (1 hour) to 180-second intervals, is generally well inside the period most routers close their incoming ports. This means every 3 minutes your phone updates our registration server with its latest IP address and port setting. When an incoming call is received to our network, we can be confident of your IP and port numbers.

Recommendations

  • SIP ALG: We recommend disabling SIP ALG as most implementations outside of Juniper and Cisco incorrectly modify SIP and ultimately corrupt SIP packets rendering them unreadable causing unexpected behaviors such as registration and incoming calls failing.
  • TLS: This is a reliable workaround that alleviates interference caused by SIP ALG as TLS packets are encrypted ultimately preventing corruption. To use TLS set your phones or endpoints to port 5061.
  • Port Forwards: If port forwarding set UDP port 5060 or TLS 5061 to your device. Additionally, we recommend set the firewall access control lists (ACL) to limit to traffic on 5060/5061 to our trunking IP address (103.55.116.65) or our subnet 103.55.116.0/24.

    • Related Articles

    • Generic SIP VoIP device settings & configuration Guide

      Generic SIP VoIP device settings & configuration Guide SIPcity supports most SIP-based VoIP devices including Analog Telephone Adaptors (ATA), IP Phones, IP PBX systems, and Softphones. While our goal is to make all installations as easy as possible, ...
    • VoIP Number Formats | Dial Plan Format

      VoIP Number Formats | Dial Plan Format VoIP Number Formats | Dial Plan Format For VoIP number formats calls in local, national and mobile cases we use 10 digit dialing (xx xxxx xxxx), with international calls prefixed with 0011+ [CountryCode] and ...
    • Manage VoIP Numbers

      Manage VoIP Numbers You can view, add and manage your VoIP numbers in your Account settings. Firstly you will need to add numbers to your account or port your existing numbers over. Every account needs numbers and channels. The number of channels on ...
    • Does VoIP Solution Support Faxing?

      Does VoIP Solution Support Faxing? A vFax number replaces a physical fax machine by using email to send and receive faxes using our fax gateway as a go-between your office and the sending or receiving fax machine. T.38 Fax protocol explained Our fax ...
    • Configuring an IP phone to our Business VoIP Service

      Configuring an IP phone to our Business VoIP Service We support two mechanisms of connecting to our service, Registration and secondly SIP Peering. If connecting via Registration your handset or phone system requires a UserName (the phone number) and ...