INVITE с Grandstream GXW-4108 - Failed to authenticate

[Downloader]

Добрый день.
Имеется FreePBX 15.0.17.63, к которой нужно подключить 8 аналоговых линий (на каждой отдельный номер).
Для этого был приобретен FXO-шлюз Grandstream GXW-4108.
Для VoIP-выделена своя подсеть 192.168.101.0/24.
Клиентам данной сети выдаются статичные IP по DHCP.
Поэтому, насколько я понимаю, регистрация (FreePBX <-> GXW-4108) не требуется.
FreePBX - 192.168.101.250
GXW - 192.168.101.249

Проблема в следующем:
при поступлении входящего вызова по аналоговой линии на FreePBX выдается следующая ошибка
4060[2021-10-29 10:56:01] NOTICE[20409] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:Private@192.168.101.250>' failed for '192.168.101.249:5062' (callid: 3e775c35fe70f6f3cf63e28470714940@192.168.101.249) - Failed to authenticate
Исходящие работают.
Причем для 1 линии всё работает, а другие настроенные по аналогии - нет.
Проблема актуальна для PJSIP: для SIP всё работает.
Во вложениях приведу информацию по 3-м линиям
7XX9 (FXO-2 на шлюзе, порт 5062) - не работают входящие
7XX1 (FXO-3 на шлюзе, порт 5064) - все работает
4XX8 (FXO-8 на шлюзе, порт 5074) - не работают входящие
линии 7XX9 и 7XX1 приходят от 1 провайдера
линия 4XX8 от другого.
Это отражается на CallerID: для 4XX8 он определяется, для остальных - "Private".

Из наблюдений:
Шлюз не проверяет пароль - единственное опция безопасности
Accept Proxy INVITE Only: Yes - т.е. проверка src-IP

Пробовал отключать аутентификацию для транка на FreePBX - безрезультатно.
ИМХО, для sip работает из-за этой строчки - insecure=port
Для pjsip пробовал
rtp_symmetric=no
force_rport=no
rewrite_contact=no
Как вместе, так и по отдельности - не помогло

[Downloader]

PRIME_BBCODE_SPOILER_SHOW PRIME_BBCODE_SPOILER: PJSIP-настройки

[7XX1]
type=endpoint
transport=0.0.0.0-udp
context=from-pstn
disallow=all
allow=ulaw
aors=7XX1
send_connected_line=false
language=ru
outbound_auth=7XX1
auth=7XX1
from_user=7XX1
contact_user=7XX1
user_eq_phone=no
t38_udptl=no
t38_udptl_ec=none
fax_detect=no
trust_id_inbound=no
t38_udptl_nat=no
direct_media=no
rtp_symmetric=yes
dtmf_mode=info

[7XX9]
type=endpoint
transport=0.0.0.0-udp
context=from-trunk
disallow=all
allow=ulaw
aors=7XX9
send_connected_line=false
language=ru
outbound_auth=7XX9
auth=7XX9
from_user=7XX9
contact_user=7XX9
user_eq_phone=no
t38_udptl=no
t38_udptl_ec=none
fax_detect=no
trust_id_inbound=no
t38_udptl_nat=no
force_rport=no
direct_media=no
dtmf_mode=rfc4733
// Было все так же как и в 7XX1, но не работало

[4XX8]
type=endpoint
transport=0.0.0.0-udp
context=from-pstn
disallow=all
allow=ulaw
aors=4XX8
send_connected_line=false
language=ru
outbound_auth=4XX8
from_user=4XX8
contact_user=4XX8
user_eq_phone=no
t38_udptl=no
t38_udptl_ec=none
fax_detect=no
trust_id_inbound=no
t38_udptl_nat=no
direct_media=no
rtp_symmetric=yes
dtmf_mode=rfc4733


##############
# AORS #
##############

[7XX1]
type=aor
qualify_frequency=60
contact=sip:192.168.101.249:5064

[4XX8]
type=aor
qualify_frequency=60
contact=sip:192.168.101.249:5074

[7XX9]
type=aor
qualify_frequency=60
contact=sip:192.168.101.249:5062

##############
# IDENTIFY #
##############

[7XX1]
type=identify
endpoint=7XX1
match=192.168.101.249

[4XX8]
type=identify
endpoint=4XX8
match=192.168.101.249

[7XX9]
type=identify
endpoint=7XX9
match=192.168.101.249

PRIME_BBCODE_SPOILER_SHOW PRIME_BBCODE_SPOILER: SIP-настройка

[7XX9] - Outgoing
type=peer
secret=XXXXXXXXXXXXXXXXXXX
qualify=yes
port=5062
insecure=port
host=192.168.101.249
dtmfmode=rfc2833
disallow=all
context=from-pstn
allow=ulaw

[4XX8] - Outgoing
type=peer
secret=XXXXXXXXXXXXXX
qualify=yes
port=5074
insecure=port
host=192.168.101.249
dtmfmode=rfc2833
disallow=all
context=from-pstn
allow=ulaw

PRIME_BBCODE_SPOILER_SHOW PRIME_BBCODE_SPOILER: GXW-4108

Accounts

Account - 1
General settings
Account Name - FreePBX-pjsip
SIP Server: 192.168.101.250
Outbound Proxy: 192.168.101.250

SIP Settings
SIP Registration: No
SIP transport: UDP
Accept Proxy INVITE Only: Yes

Audio Settings: - PCMU

Call Settings
User ID is phone number: No
Early Dial: No
INVITE Ring-no-answer Timeout: 40

User Account
2 - 7XX9 - 7XX9 - Account 1
3 - 7XX1 - 7XX1 - Account 1
8 - 4XX8 - 4XX8 - Account 1


Settings
Channel Settings
DTMF Methods(1-7): ch1-8:2;
Local SIP Listen Port: ch1-8:5060++; // Отсюда и берутся порты 5062, 5064, 5074
Calling to VoIP
Unconditional Call Forward to Following:
ch2:8495XXX7XX9;
ch3:8495XXX7XX1;
ch8:804XX8;
SIP Server: ch1-8:p1;
SIP Destination Port: ch1-8:5060; // Для SIP использовал ch1-8:5160;

FXO lines
AC Termination Impedance: ch1-8:0; // 0 - 600 Ohm ( North American ) тест линий рекоммендовал эту настройку
Port Caller ID Setting
Number of Rings Before Pickup: ch1-8:4;
------------------------------------------------------------------
Caller ID Scheme: ch1-8:1;
Пробовал следующие схемы
1 - Bellcore/Telcordia
2 - ETSI-FSK during ringing
3 - ETSI-FSK prior to ringing with DTAS
4 - ETSI-FSK prior to ringing with LR
5 - ETSI-FSK prior to ringing with RP
Caller ID Scheme
1, 2 и 5 работают, но разницы не видно
------------------------------------------------------------------
Caller ID Transport Type: ch1-8:1;

1 - Relay via SIP From
2 - Disabled
3 - Send Anonymous
4 - Relay via SIP P-Asserted-Identity

Caller ID Transport Type – 4 (Relay via SIP P-Asserted-Identity)
заменяет UserID в invite на UserID, установленный для порта.
Например,

27002[2021-10-28 16:37:02] NOTICE[20409] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"Org73" <sip:478@192.168.101.250>' failed for '192.168.101.249:5074' (callid: d8358d73dc5222c06df1627302f3a624@192.168.101.249) - Failed to authenticate
// 478 реальный CID входящего абонента
заменяет на
[2021-11-08 18:13:48] NOTICE[15057] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:804XX8@192.168.101.250>' failed for '192.168.101.249:5074' (callid: 8340dff70ee153c69b1111267ed468d0@192.168.101.249) - Failed to authenticate
// 804XX8 - это либо Settings - Channel Settings - Calling to VoIP - Unconditional Call Forward to Following: ch8:804XX8; ,
либо UserID, установленный для данного порта

PRIME_BBCODE_SPOILER_SHOW PRIME_BBCODE_SPOILER: Логи

Звонок с 4XX8

4
<--- History Entry 4 Received from 192.168.101.249:5074 at 1638183107 --->
INVITE sip:4XX8@192.168.101.250 SIP/2.0
Via: SIP/2.0/UDP 192.168.101.249:5074;received=192.168.101.249;branch=z9hG4bK40d7df72d7535e05
From: "Org73" <sip:478@192.168.101.250>;tag=8cc63877d861d1c0
To: <sip:4XX8@192.168.101.250>
Contact: <sip:192.168.101.249:5074>
Supported: replaces, timer, path
Call-ID: bea521343130d8f280273e2114c42937@192.168.101.249
CSeq: 12839 INVITE
User-Agent: Grandstream GXW4108 (HW 2.3, Ch:0) 1.4.1.5
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, INFO, SUBSCRIBE, UPDATE, PRACK
Content-Type: application/sdp
Content-Length: 219
Content-Type: application/sdp
Content-Length: 219

v=0
o=system 8000 8000 IN IP4 192.168.101.249 !!!
s=SIP Call
c=IN IP4 192.168.101.249
t=0 0
m=audio 5004 RTP/AVP 0 101 !!!
a=sendrecv
a=rtpmap:0 PCMU/8000
a=ptime:20
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-11



5
<--- History Entry 5 Sent to 192.168.101.249:5074 at 1638183107 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.101.249:5074;rport=5074;received=192.168.101.249;branch=z9hG4bK40d7df72d7535e05
Call-ID: bea521343130d8f280273e2114c42937@192.168.101.249
From: "Org73" <sip:478@192.168.101.250>;tag=8cc63877d861d1c0
To: <sip:4XX8@192.168.101.250>;tag=z9hG4bK40d7df72d7535e05
CSeq: 12839 INVITE
WWW-Authenticate: Digest realm="asterisk",nonce="1638183107/b81d7b8dd1579ae3df1960a8536aec84",opaque="7ef854c66cb8320c",algorithm=md5,qop="auth"
Server: FPBX-15.0.17.63(16.20.0)
Content-Length: 0


Подключение Endpoint

17
<--- History Entry 17 Sent to 192.168.101.249:5074 at 1638183129 --->
OPTIONS sip:192.168.101.249:5074 SIP/2.0
Via: SIP/2.0/UDP 192.168.101.250:5060;rport;branch=z9hG4bKPjad6b8ff6-07ad-4c99-909f-8371832bbd7c
From: <sip:4XX8@192.168.101.250>;tag=4d47e4b2-7e0e-44ac-9c1d-8d6aaea0b321
To: <sip:192.168.101.249>
Contact: <sip:4XX8@192.168.101.250:5060>
Call-ID: b166dbb9-844a-4cbb-8eea-cbd238b70dba
CSeq: 40718 OPTIONS
Max-Forwards: 70
User-Agent: FPBX-15.0.17.63(16.20.0)
Content-Length: 0

18
<--- History Entry 18 Received from 192.168.101.249:5074 at 1638183129 --->
SIP/2.0 200 OK
Via: SIP/2.0/UDP 192.168.101.250:5060;rport;branch=z9hG4bKPjad6b8ff6-07ad-4c99-909f-8371832bbd7c
From: <sip:4XX8@192.168.101.250>;tag=4d47e4b2-7e0e-44ac-9c1d-8d6aaea0b321
To: <sip:192.168.101.249>;tag=02308a579567ad61
Call-ID: b166dbb9-844a-4cbb-8eea-cbd238b70dba
CSeq: 40718 OPTIONS
User-Agent: Grandstream GXW4108 (HW 2.3, Ch:15) 1.4.1.5
Contact: <sip:4XX8@192.168.101.249:5074;transport=udp>
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, INFO, SUBSCRIBE, UPDATE, PRACK
Supported: replaces, timer, 100rel, path
Content-Length: 0
Content-Length: 0




Звонок с 7XX1

21
<--- History Entry 21 Received from 192.168.101.249:5064 at 1638183138 --->
INVITE sip:8495XXX7XX1@192.168.101.250 SIP/2.0
Via: SIP/2.0/UDP 192.168.101.249:5064;received=192.168.101.249;branch=z9hG4bK8e253fd133354ae1
From: <sip:Private@192.168.101.250>;tag=14262264c2d061d7
To: <sip:8495XXX7XX1@192.168.101.250>
Contact: <sip:192.168.101.249:5064>
Supported: replaces, timer, path
Call-ID: 94c08842d863e4f236a5ec510122c4e7@192.168.101.249
CSeq: 24041 INVITE
User-Agent: Grandstream GXW4108 (HW 2.3, Ch:1) 1.4.1.5
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, INFO, SUBSCRIBE, UPDATE, PRACK
Content-Type: application/sdp
Content-Length: 219
Content-Type: application/sdp
Content-Length: 219

v=0
o=system 8001 8000 IN IP4 192.168.101.249
s=SIP Call
c=IN IP4 192.168.101.249
t=0 0
m=audio 5008 RTP/AVP 0 101
a=sendrecv
a=rtpmap:0 PCMU/8000
a=ptime:20
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-11



22

CLI Command

<--- History Entry 22 Sent to 192.168.101.249:5064 at 1638183138 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.101.249:5064;rport=5064;received=192.168.101.249;branch=z9hG4bK8e253fd133354ae1
Call-ID: 94c08842d863e4f236a5ec510122c4e7@192.168.101.249
From: <sip:Private@192.168.101.250>;tag=14262264c2d061d7
To: <sip:8495XXX7XX1@192.168.101.250>;tag=z9hG4bK8e253fd133354ae1
CSeq: 24041 INVITE
WWW-Authenticate: Digest realm="asterisk",nonce="1638183138/2a7fa8af45ebba862d1b0347afda2451",opaque="12603a634de6c1a0",algorithm=md5,qop="auth"
Server: FPBX-15.0.17.63(16.20.0)
Content-Length: 0




23
<--- History Entry 23 Received from 192.168.101.249:5064 at 1638183138 --->
ACK sip:8495XXX7XX1@192.168.101.250 SIP/2.0
Via: SIP/2.0/UDP 192.168.101.249:5064;received=192.168.101.249;branch=z9hG4bK8e253fd133354ae1
From: <sip:Private@192.168.101.250>;tag=14262264c2d061d7
To: <sip:8495XXX7XX1@192.168.101.250>;tag=z9hG4bK8e253fd133354ae1
Contact: <sip:7XX1@192.168.101.249:5064;transport=udp>
Call-ID: 94c08842d863e4f236a5ec510122c4e7@192.168.101.249
CSeq: 24041 ACK
User-Agent: Grandstream GXW4108 (HW 2.3, Ch:1) 1.4.1.5
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, INFO, SUBSCRIBE, UPDATE, PRACK
Content-Length: 0
Content-Length: 0


24
<--- History Entry 24 Received from 192.168.101.249:5064 at 1638183138 --->
INVITE sip:8495XXX7XX1@192.168.101.250 SIP/2.0
Via: SIP/2.0/UDP 192.168.101.249:5064;received=192.168.101.249;branch=z9hG4bKcd222851fd23a365
From: <sip:Private@192.168.101.250>;tag=14262264c2d061d7
To: <sip:8495XXX7XX1@192.168.101.250>
Contact: <sip:192.168.101.249:5064>
Supported: replaces, timer, path
Authorization: Digest username="7XX1", realm="asterisk", nonce="1638183138/2a7fa8af45ebba862d1b0347afda2451", uri="sip:8495XXX7XX1@192.168.101.250", response="8256629aadb6262fae1357c1ba078b0c", algorithm=MD5, cnonce="077431f2ce059b95", opaque="12603a634de6c1a0", qop=auth, nc=00000001
Call-ID: 94c08842d863e4f236a5ec510122c4e7@192.168.101.249
CSeq: 24042 INVITE
User-Agent: Grandstream GXW4108 (HW 2.3, Ch:1) 1.4.1.5
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, INFO, SUBSCRIBE, UPDATE, PRACK
Content-Type: application/sdp
Content-Length: 219
Content-Type: application/sdp
Content-Length: 219

v=0
o=system 8001 8001 IN IP4 192.168.101.249
s=SIP Call
c=IN IP4 192.168.101.249
t=0 0
m=audio 5008 RTP/AVP 0 101
a=sendrecv
a=rtpmap:0 PCMU/8000
a=ptime:20
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-11

[ded]

Не используйте PJSIP, используйте chan_sip

[Downloader]

Почему?

[ded]

Определитесь: вам ехать, или шашечки? Если ехать - используйте chan_sip и не морочьте себе голову.

[sasa]

service asterisk stop
rm -rf chan_sip.so
service asterisk start
core set debug 9
core set verbose 9

и изучайте
модуль pjsip_* какой то не догружен
или еще что то

[Zavr2008]

sip:Private@192.168.101.250

Ничего не говорит это? Нет CallerId..

[Downloader]

service asterisk stop
rm -rf chan_sip.so
service asterisk start
core set debug 9
core set verbose 9

и изучайте
модуль pjsip_* какой то не догружен
или еще что то

Спасибо.
Попробуем.

[Downloader]

sip:Private@192.168.101.250

Ничего не говорит это? Нет CallerId..

Говорит, проблема также приведена в описании.
CallerID не определяется для линий 7XX1, 7XX9,
но это не мешает 7XX1 принимать вызовы.

[Downloader]

service asterisk stop
rm -rf chan_sip.so
service asterisk start
core set debug 9
core set verbose 9

и изучайте
модуль pjsip_* какой то не догружен
или еще что то

Логи входящего вызова на 7ХХ9

PRIME_BBCODE_SPOILER_SHOW PRIME_BBCODE_SPOILER:

[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Could not find matching transaction for Request msg INVITE/cseq=21669 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Calculated serializer pjsip/distributor-00000054 to use for Request msg INVITE/cseq=21669 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Source address 192.168.101.249:5062 matches identify '7XX1'
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Identify '7XX1' SIP message matched to endpoint 7XX1
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_authenticator_digest.c: Using default realm 'asterisk' on incoming auth '7XX1'.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_authenticator_digest.c: Realm: asterisk Username: 7XX1 Result: NOAUTH
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.250' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.250' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_nat.c: Request is being sent to local address, skipping NAT manipulation
[2021-12-13 18:48:28] DEBUG[15604] manager.c: Examining AMI event:
Event: ChallengeSent
Privilege: security,all
EventTV: 2021-12-13T18:48:28.187+0300
Severity: Informational
Service: PJSIP
EventVersion: 1
AccountID: 7XX1
SessionID: b063d74012037a85efe3102410975d77@192.168.101.249
LocalAddress: IPV4/UDP/192.168.101.250/5060
RemoteAddress: IPV4/UDP/192.168.101.249/5062
Challenge:


[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Could not find matching transaction for Request msg ACK/cseq=21669 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Calculated serializer pjsip/distributor-00000054 to use for Request msg ACK/cseq=21669 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Source address 192.168.101.249:5062 matches identify '7XX1'
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Identify '7XX1' SIP message matched to endpoint 7XX1
[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Could not find matching transaction for Request msg INVITE/cseq=21670 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Calculated serializer pjsip/distributor-00000054 to use for Request msg INVITE/cseq=21670 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Source address 192.168.101.249:5062 matches identify '7XX1'
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Identify '7XX1' SIP message matched to endpoint 7XX1
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_authenticator_digest.c: Using default realm 'asterisk' on incoming auth '7XX1'.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_authenticator_digest.c: Calculated nonce 1639410508/aa771e279943b5f25b1c8923371a5059. Actual nonce is 1639410508/aa771e279943b5f25b1c8923371a5059
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_authenticator_digest.c: Realm: asterisk Username: 7XX1 Result: FAIL
[2021-12-13 18:48:28] NOTICE[8298] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:Private@192.168.101.250>' failed for '192.168.101.249:5062' (callid: b063d74012037a85efe3102410975d77@192.168.101.249) - Failed to authenticate
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.250' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.250' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_nat.c: Request is being sent to local address, skipping NAT manipulation
[2021-12-13 18:48:28] DEBUG[15604] manager.c: Examining AMI event:
Event: ChallengeResponseFailed
Privilege: security,all
EventTV: 2021-12-13T18:48:28.191+0300
Severity: Error
Service: PJSIP
EventVersion: 1
AccountID: 7XX1
SessionID: b063d74012037a85efe3102410975d77@192.168.101.249
LocalAddress: IPV4/UDP/192.168.101.250/5060
RemoteAddress: IPV4/UDP/192.168.101.249/5062
Challenge: 1639410508/aa771e279943b5f25b1c8923371a5059
Response: c484a337c7b189c440bf8a0d7f7c9edf
ExpectedResponse:


[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Could not find matching transaction for Request msg ACK/cseq=21670 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Calculated serializer pjsip/distributor-00000054 to use for Request msg ACK/cseq=21670 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Source address 192.168.101.249:5062 matches identify '7XX1'
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Identify '7XX1' SIP message matched to endpoint 7XX1
[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Could not find matching transaction for Request msg INVITE/cseq=21671 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Calculated serializer pjsip/distributor-00000054 to use for Request msg INVITE/cseq=21671 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Source address 192.168.101.249:5062 matches identify '7XX1'
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Identify '7XX1' SIP message matched to endpoint 7XX1
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_authenticator_digest.c: Using default realm 'asterisk' on incoming auth '7XX1'.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_authenticator_digest.c: Calculated nonce 1639410508/aa771e279943b5f25b1c8923371a5059. Actual nonce is 1639410508/aa771e279943b5f25b1c8923371a5059
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_authenticator_digest.c: Realm: asterisk Username: 7XX1 Result: FAIL
[2021-12-13 18:48:28] NOTICE[8298] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:Private@192.168.101.250>' failed for '192.168.101.249:5062' (callid: b063d74012037a85efe3102410975d77@192.168.101.249) - Failed to authenticate
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.250' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.250' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_nat.c: Request is being sent to local address, skipping NAT manipulation
[2021-12-13 18:48:28] DEBUG[15604] manager.c: Examining AMI event:
Event: ChallengeResponseFailed
Privilege: security,all
EventTV: 2021-12-13T18:48:28.194+0300
Severity: Error
Service: PJSIP
EventVersion: 1
AccountID: 7XX1
SessionID: b063d74012037a85efe3102410975d77@192.168.101.249
LocalAddress: IPV4/UDP/192.168.101.250/5060
RemoteAddress: IPV4/UDP/192.168.101.249/5062
Challenge: 1639410508/aa771e279943b5f25b1c8923371a5059
Response: b179a857c928874d4a00d58b5f0155c5
ExpectedResponse:


[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Could not find matching transaction for Request msg ACK/cseq=21671 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[2225] res_pjsip/pjsip_distributor.c: Calculated serializer pjsip/distributor-00000054 to use for Request msg ACK/cseq=21671 (rdata0x7fc3a00021e8)
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: Splitting '192.168.101.249' into...
[2021-12-13 18:48:28] DEBUG[8298] netsock2.c: ...host '192.168.101.249' and port ''.
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Source address 192.168.101.249:5062 matches identify '7XX1'
[2021-12-13 18:48:28] DEBUG[8298] res_pjsip_endpoint_identifier_ip.c: Identify '7XX1' SIP message matched to endpoint 7XX1
[2021-12-13 18:48:28] DEBUG[28079] manager.c: Running action 'Login'
[2021-12-13 18:48:28] DEBUG[15604] manager.c: Examining AMI event:
Event: SuccessfulAuth
Privilege: security,all
EventTV: 2021-12-13T18:48:28.528+0300
Severity: Informational
Service: AMI
EventVersion: 1
AccountID: admin
SessionID: 0x7fc3b0000b10
LocalAddress: IPV4/TCP/0.0.0.0/5038
RemoteAddress: IPV4/TCP/127.0.0.1/40488
UsingPassword: 0
SessionTV: 2021-12-13T18:48:28.528+0300

Что-то очень странное:
1) Почему Source address 192.168.101.249:5062 matches identify '7XX1' ?
Хотя порт 5062 соответствуюет 7ХХ9

2) Почему result
1. [2021-12-13 18:48:28] DEBUG[8298] res_pjsip_authenticator_digest.c: Realm: asterisk Username: 7871 Result: NOAUTH
2. [2021-12-13 18:48:28] DEBUG[8298] res_pjsip_authenticator_digest.c: Realm: asterisk Username: 7871 Result: FAIL
3. [2021-12-13 18:48:28] DEBUG[8298] res_pjsip_authenticator_digest.c: Realm: asterisk Username: 7871 Result: FAIL
4. [2021-12-13 18:48:28] DEBUG[15604] manager.c: Examining AMI event:
Event: SuccessfulAuth
?
При том, что вызов не прошел:
[2021-12-13 18:48:28] NOTICE[8298] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:Private@192.168.101.250>' failed for '192.168.101.249:5062' (callid: b063d74012037a85efe3102410975d77@192.168.101.249) - Failed to authenticate