Yealink Forums

Full Version: "Forbidden" error when calling
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hi, I've installed one W60B + 2 W56H on my office using my Spanish ISP SIP settings. The issue I've found is that, it does register properly (apparently), and sometimes (only sometimes), it can receive and send calls, nevertheless, almost every other time, one of the call attempts says "forbidden" on the screen of the phone. Then, after 30" or 1' approximately, if I ty it again, it seems to work.

I've downloaded the logs from the W60B and I can see it full of messages like this:
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.


Relevant Data:

- My provider is Movistar Spain, whose SIP parameters are well known:

Proxy/registrar: 10.31.255.134:5070
Domain/realm: telefonica.net
STUN: [empty]
Username: [#TELEPHONE-NUMBER]
Password: [#TELEPHONE-NUMBER]

- Both Handsets (w56H) as well as the Base (W60B) are on their latest available firmware today.
- Base HW version is: 77.0.0.48.0.0.0


- If I configure those parameters on a desktop application (phoner Lite), it does work flawlesly


Any help will be much appreciated,

Thanks in advance

Best
(08-30-2021 05:03 AM)w60B-Spain Wrote: [ -> ]Hi, I've installed one W60B + 2 W56H on my office using my Spanish ISP SIP settings. The issue I've found is that, it does register properly (apparently), and sometimes (only sometimes), it can receive and send calls, nevertheless, almost every other time, one of the call attempts says "forbidden" on the screen of the phone. Then, after 30" or 1' approximately, if I ty it again, it seems to work.

I've downloaded the logs from the W60B and I can see it full of messages like this:
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.


Relevant Data:

- My provider is Movistar Spain, whose SIP parameters are well known:

Proxy/registrar: 10.31.255.134:5070
Domain/realm: telefonica.net
STUN: [empty]
Username: [#TELEPHONE-NUMBER]
Password: [#TELEPHONE-NUMBER]

- Both Handsets (w56H) as well as the Base (W60B) are on their latest available firmware today.
- Base HW version is: 77.0.0.48.0.0.0


- If I configure those parameters on a desktop application (phoner Lite), it does work flawlesly


Any help will be much appreciated,

Thanks in advance

Best

Hi,

This issue sounds like typical router problems.
Check if the SIP ALG function is disabled, the correct ports are open and forwarded to the W60B.
You might also consider using STUN.

Hope this will help.
Hi, Thanks a lot for the suggestion complex1,

Indeed one of the first thing I tried was disabling any SIP ALG functionality from the router (Edgerouter from Unifi), but sadly it did not change anything, the behaviour was still the same. The router itself is almost blank in terms of configuration, there are no firewall rules applied for either in or out of the interface, nor there is anything else but ports redirection for 5060-5070 UDP ports as well as some RTP ports used on teh configuration. Despite those 2 things, the rest is pretty much basic stuff. :-(

Any other ideas? Is there any other part of the log I could look into to gather more information to trace it?

Thanks in advance!

Best




(08-30-2021 08:18 PM)complex1 Wrote: [ -> ]
(08-30-2021 05:03 AM)w60B-Spain Wrote: [ -> ]Hi, I've installed one W60B + 2 W56H on my office using my Spanish ISP SIP settings. The issue I've found is that, it does register properly (apparently), and sometimes (only sometimes), it can receive and send calls, nevertheless, almost every other time, one of the call attempts says "forbidden" on the screen of the phone. Then, after 30" or 1' approximately, if I ty it again, it seems to work.

I've downloaded the logs from the W60B and I can see it full of messages like this:
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.
<131>Aug 26 14:08:15 sua [1423.1781]: REG <3+error > [000] <AEM> code=0x04000009, rid=4, reason=-3,'wrong state'.


Relevant Data:

- My provider is Movistar Spain, whose SIP parameters are well known:

Proxy/registrar: 10.31.255.134:5070
Domain/realm: telefonica.net
STUN: [empty]
Username: [#TELEPHONE-NUMBER]
Password: [#TELEPHONE-NUMBER]

- Both Handsets (w56H) as well as the Base (W60B) are on their latest available firmware today.
- Base HW version is: 77.0.0.48.0.0.0


- If I configure those parameters on a desktop application (phoner Lite), it does work flawlesly


Any help will be much appreciated,

Thanks in advance

Best

Hi,

This issue sounds like typical router problems.
Check if the SIP ALG function is disabled, the correct ports are open and forwarded to the W60B.
You might also consider using STUN.

Hope this will help.
(08-31-2021 03:53 PM)w60B-Spain Wrote: [ -> ]Hi, Thanks a lot for the suggestion complex1,

Indeed one of the first thing I tried was disabling any SIP ALG functionality from the router (Edgerouter from Unifi), but sadly it did not change anything, the behaviour was still the same. The router itself is almost blank in terms of configuration, there are no firewall rules applied for either in or out of the interface, nor there is anything else but ports redirection for 5060-5070 UDP ports as well as some RTP ports used on teh configuration. Despite those 2 things, the rest is pretty much basic stuff. :-(

Any other ideas? Is there any other part of the log I could look into to gather more information to trace it?

Thanks in advance!

Best

Hi,

Please try using STUN.

Network > NAT > STUN
Active: Enable
STUN Server: stun.sipgate.net
STUN Port: 3478
Thanks for the suggestion @complex1

I tried with STUN Enabled and the parameters you suggested but the results are the same :-( , I still get a "Forbidden" message every other call...

This is driving me crazy



(08-31-2021 05:53 PM)complex1 Wrote: [ -> ]
(08-31-2021 03:53 PM)w60B-Spain Wrote: [ -> ]Hi, Thanks a lot for the suggestion complex1,

Indeed one of the first thing I tried was disabling any SIP ALG functionality from the router (Edgerouter from Unifi), but sadly it did not change anything, the behaviour was still the same. The router itself is almost blank in terms of configuration, there are no firewall rules applied for either in or out of the interface, nor there is anything else but ports redirection for 5060-5070 UDP ports as well as some RTP ports used on teh configuration. Despite those 2 things, the rest is pretty much basic stuff. :-(

Any other ideas? Is there any other part of the log I could look into to gather more information to trace it?

Thanks in advance!

Best

Hi,

Please try using STUN.

Network > NAT > STUN
Active: Enable
STUN Server: stun.sipgate.net
STUN Port: 3478
(08-31-2021 11:30 PM)w60B-Spain Wrote: [ -> ]Thanks for the suggestion @complex1

I tried with STUN Enabled and the parameters you suggested but the results are the same :-( , I still get a "Forbidden" message every other call...

This is driving me crazy



(08-31-2021 05:53 PM)complex1 Wrote: [ -> ]
(08-31-2021 03:53 PM)w60B-Spain Wrote: [ -> ]Hi, Thanks a lot for the suggestion complex1,

Indeed one of the first thing I tried was disabling any SIP ALG functionality from the router (Edgerouter from Unifi), but sadly it did not change anything, the behaviour was still the same. The router itself is almost blank in terms of configuration, there are no firewall rules applied for either in or out of the interface, nor there is anything else but ports redirection for 5060-5070 UDP ports as well as some RTP ports used on teh configuration. Despite those 2 things, the rest is pretty much basic stuff. :-(

Any other ideas? Is there any other part of the log I could look into to gather more information to trace it?

Thanks in advance!

Best

Hi,

Please try using STUN.

Network > NAT > STUN
Active: Enable
STUN Server: stun.sipgate.net
STUN Port: 3478

Hi,

I think you did everything you could have done.
I suggest you contact your VoIP provider and ask them to assist you. Maybe they know a solution to this problem?
I think I found the issue , at least "partially" (so far, I haven't had any more errors on the log).

The issue seems to come from the ONT device that connects to the Fiber Optics and that routes to the VoIP Vlan. Within the same ONT configuration there is a section that enables or disables the internal SIP client that is later on attached to the POTS interface (RHJ11) of the same ONT. I think that, given that the ONT was already registered on the SIP server, when I tried to also register the W60B with the same configuration, there was some sort of "overlap" on the registration, which allowed the base to beregistered, but that in the end, seemed to generate some sort of conflict...

Having said so, the other Issue I've realised is that the "end call" functionality doesn't seem to work very good, as when I reject one call (on my mobile) that goes my office to my mobile, on the Yealink device I still can hear perfectly the tone of the ongoing call request... Nevertheless I'll open a new thread for that, as this one is solved ;-)

Thanks a lot for your support @complex1

Best


(09-01-2021 01:16 AM)complex1 Wrote: [ -> ]
(08-31-2021 11:30 PM)w60B-Spain Wrote: [ -> ]Thanks for the suggestion @complex1

I tried with STUN Enabled and the parameters you suggested but the results are the same :-( , I still get a "Forbidden" message every other call...

This is driving me crazy



(08-31-2021 05:53 PM)complex1 Wrote: [ -> ]
(08-31-2021 03:53 PM)w60B-Spain Wrote: [ -> ]Hi, Thanks a lot for the suggestion complex1,

Indeed one of the first thing I tried was disabling any SIP ALG functionality from the router (Edgerouter from Unifi), but sadly it did not change anything, the behaviour was still the same. The router itself is almost blank in terms of configuration, there are no firewall rules applied for either in or out of the interface, nor there is anything else but ports redirection for 5060-5070 UDP ports as well as some RTP ports used on teh configuration. Despite those 2 things, the rest is pretty much basic stuff. :-(

Any other ideas? Is there any other part of the log I could look into to gather more information to trace it?

Thanks in advance!

Best

Hi,

Please try using STUN.

Network > NAT > STUN
Active: Enable
STUN Server: stun.sipgate.net
STUN Port: 3478

Hi,

I think you did everything you could have done.
I suggest you contact your VoIP provider and ask them to assist you. Maybe they know a solution to this problem?
Reference URL's