Коллеги есть задача организовать на CUCME 8.6, работающем на 2821 sip транки на провайдеров Comtube, Skype, Multifon и Эр-Телеком(Дом.ру). Задача казалось довольно простой пока не наступил на грабли с которых слезь самостоятельно не могу.
На первом же транке sip.comtube.com исходящие вызовы заработали без проблем с входящими бьюсь 5 день и никак. Помогите советом.
Конфиг прилагаю:

version 15.1
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname xxxxxxxxxxx
!
boot-start-marker
boot system flash:c2800nm-adventerprisek9-mz.151-4.M7.bin
boot-end-marker
!
!
no logging buffered
enable secret 4 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication login ciscocp_vpn_xauth_ml_1 local
aaa authorization network ciscocp_vpn_group_ml_1 local
!
!
!
!
!
aaa session-id common
!
clock timezone MSK 4 0
!
crypto pki token default removal timeout 0
!
crypto pki trustpoint tti
revocation-check crl
!
crypto pki trustpoint xxxxxxxxxxx.xxxxxxxxxxxx.com
enrollment selfsigned
serial-number
revocation-check crl
!
!
crypto pki certificate chain tti
crypto pki certificate chain xxxxxxxxxxxxxxxxxxxxxxx
certificate self-signed 0D
30820245 308201AE A0030201 0202010D 300D0609 2A864886 F70D0101 05050030
-----------------------------------------------------------------------
B0BA2228 124A8800 C8
quit
dot11 syslog
ip source-route
!
!
ip cef
ip cef load-sharing algorithm include-ports source destination
!
ip dhcp excluded-address 10.10.1.20 10.10.1.30
ip dhcp excluded-address 10.10.2.20 10.10.2.30
!
ip dhcp pool hq-users
network 10.10.1.0 255.255.255.224
domain-name xxxxxxxxxxxxxxxx
dns-server 10.10.0.1 10.10.0.2
default-router 10.10.1.30
lease 0 16
!
ip dhcp pool hq-voip
network 10.10.2.0 255.255.255.224
option 150 ip 10.10.2.30
default-router 10.10.2.30
domain-name xxxxxxxxxxxxx.com
dns-server 10.10.0.1 10.10.0.2
lease 0 16
!
!
ip flow-cache timeout inactive 30
ip domain timeout 1
ip domain name xxxxxxxxxxxxxx
ip name-server 208.67.222.222
ip name-server 208.67.220.220
ip inspect name BLACK_LIST http urlfilter alert on
ip urlfilter allow-mode on
ip urlfilter cache 0
ip urlfilter audit-trail
login delay 10
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
trunk group FXO
hunt-scheme round-robin
!
!
!
voice service voip
ip address trusted list
ipv4 10.10.1.0 255.255.255.224
ipv4 10.10.2.0 255.255.255.224
ipv4 85.192.44.73 255.255.255.255
allow-connections sip to sip
no supplementary-service sip refer
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
h323
emptycapability
bearercap-ie signaling-only standard
sip
registrar server
!
voice class codec 1
codec preference 1 g711ulaw
codec preference 2 g711alaw
!
voice class codec 2
codec preference 1 g711ulaw
codec preference 2 g711alaw
codec preference 4 g729r8
!
voice class codec 3
codec preference 1 g711ulaw
codec preference 2 g711alaw
codec preference 4 g729r8
codec preference 5 ilbc
codec preference 6 gsmamr-nb
!
voice class sip-profiles 2
request INVITE sip-header From modify "<sip:298245@(.*)>" "<sip:298245@sip.comtube.com>"
!
!
voice register global
mode cme
max-dn 20
max-pool 8
tftp-path flash:
!
!
!
voice translation-rule 9
rule 1 /^98\(.*\)/ /7\1/
!
voice translation-rule 1000
rule 1 /^.*/ /012/
!
!
voice translation-profile in-comtube
translate calling 1000
!
voice translation-profile out-comtube
translate called 9
!
!
voice-card 0
dsp services dspfarm
!
!
!
license udi pid CISCO2821 sn FCZ1130750P
file prompt quiet
------------------------------------------------
!
redundancy
!
!
no ip ftp passive
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
!
track 1 ip sla 1 reachability
delay down 10 up 5
!
track 2 ip sla 2 reachability
delay down 10 up 5
!
crypto ctcp
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group sunray
key xxxxxxxxxxxxxxxx
pool SDM_POOL_1
acl 100
include-local-lan
max-users 10
!
crypto isakmp client configuration group vdesktop
key xxxxxxxxxxxxxxxxx
pool SDM_POOL_3
acl 100
!
crypto isakmp client configuration group ucs
key xxxxxxxxxxxxxxxxxxxx
dns 10.10.0.1 10.10.0.2
domain xxxxxxxxxxxxxxxx
pool VPN-UCS
acl 105
include-local-lan
max-users 5
crypto isakmp profile ciscocp-ike-profile-1
match identity group sunray
client authentication list ciscocp_vpn_xauth_ml_1
isakmp authorization list ciscocp_vpn_group_ml_1
client configuration address respond
virtual-template 1
crypto isakmp profile vdesktop-ike-profile-1
match identity group vdesktop
client authentication list ciscocp_vpn_xauth_ml_1
isakmp authorization list ciscocp_vpn_group_ml_1
client configuration address respond
virtual-template 3
crypto isakmp profile ucs-ike-profile-1
match identity group ucs
client authentication list ciscocp_vpn_xauth_ml_1
isakmp authorization list ciscocp_vpn_group_ml_1
client configuration address respond
virtual-template 4
!
!
crypto ipsec transform-set newset esp-3des esp-sha-hmac
!
crypto ipsec profile CiscoCP_Profile1
set transform-set newset
set isakmp-profile ciscocp-ike-profile-1
!
crypto ipsec profile ucs
set transform-set newset
set isakmp-profile ucs-ike-profile-1
!
crypto ipsec profile vdesktop
set transform-set newset
set isakmp-profile vdesktop-ike-profile-1
!
!
crypto map map1 9 ipsec-isakmp
! Incomplete
set peer 84.47.149.100
set peer 84.47.149.174
set transform-set newset
set pfs group1
match address VPN4
!
!
interface Loopback0
ip address 192.168.12.1 255.255.255.0
!
interface Loopback2
ip address 10.40.17.1 255.255.255.0
!
interface Loopback4
ip address 10.10.5.14 255.255.255.240
!
interface Tunnel1
no ip address
!
interface GigabitEthernet0/0
description =inside=
no ip address
ip route-cache policy
duplex auto
speed auto
!
interface GigabitEthernet0/0.1
description #n-vlan#
encapsulation dot1Q 1 native
ip address 10.0.0.62 255.255.255.192
ip flow ingress
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/0.2
description #hosts#
encapsulation dot1Q 10
ip address 10.1.0.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/0.3
description #iSCSI#
encapsulation dot1Q 11
ip address 10.1.1.254 255.255.255.0
ip virtual-reassembly in
shutdown
!
interface GigabitEthernet0/0.4
description #vm-srv#
encapsulation dot1Q 12
ip address 10.10.0.62 255.255.255.192
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/0.5
description #hq-users#
encapsulation dot1Q 15
ip address 10.10.1.30 255.255.255.224
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/0.6
description #hq-voip#
encapsulation dot1Q 16
ip address 10.10.2.30 255.255.255.224
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/0.7
description #hq-cctv#
encapsulation dot1Q 18
ip address 10.10.4.14 255.255.255.240
ip flow ingress
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/0.8
description #host-mgt#$ETH-LAN$
encapsulation dot1Q 19
ip address 10.2.0.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/0.4020
description #IaaS#$ETH-LAN$
encapsulation dot1Q 4020
ip address 10.40.20.254 255.255.255.0
ip flow ingress
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/1
description #ISP1#$ETH-WAN$
ip address xxx.xxxx.xxxx.155 255.255.255.128
ip nat outside
ip virtual-reassembly in
ip route-cache policy
load-interval 30
duplex auto
speed auto
crypto map map1
!
interface FastEthernet0/0/0
description #ISP2#$ETH-WAN$
ip address 172.16.0.1 255.255.255.224
ip nat outside
ip virtual-reassembly in
load-interval 30
shutdown
duplex auto
speed auto
crypto map map1
!
interface Virtual-Template1 type tunnel
ip unnumbered Loopback0
tunnel mode ipsec ipv4
tunnel protection ipsec profile CiscoCP_Profile1
!
interface Virtual-Template3 type tunnel
ip unnumbered Loopback2
tunnel mode ipsec ipv4
tunnel protection ipsec profile vdesktop
!
interface Virtual-Template4 type tunnel
ip unnumbered Loopback4
tunnel mode ipsec ipv4
tunnel protection ipsec profile ucs
!
ip local pool SDM_POOL_1 192.168.12.2 192.168.12.200
ip local pool SDM_POOL_3 10.40.17.2 10.40.17.250
ip local pool VPN-UCS 10.10.5.2 10.10.5.13
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http max-connections 1
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip flow-export source GigabitEthernet0/0
ip flow-export version 5
!
ip dns view default
domain timeout 1
ip dns server
ip nat translation timeout 3600
ip nat translation tcp-timeout 3600
ip nat translation pptp-timeout 10
ip nat translation dns-timeout 30
ip nat translation icmp-timeout 10
ip nat pool ISP1-Pool xxx.xxxx.xxxx.155 xxx.xxxx.xxxx.155 netmask 255.255.255.128
ip nat pool ISP2-Pool 172.16.0.1 172.16.0.1 netmask 255.255.255.224
ip nat inside source route-map ISP1 pool ISP1-Pool overload
ip nat inside source route-map ISP2 pool ISP2-Pool overload
ip nat inside source static tcp 10.10.0.10 21 xxx.xxxx.xxxx.155 21 route-map ISP1 extendable
ip nat inside source static tcp 10.10.0.3 25 xxx.xxxx.xxxx.155 25 route-map ISP1 extendable
ip nat inside source static tcp 10.10.0.5 443 xxx.xxxx.xxxx.155 443 route-map ISP1 extendable
ip nat inside source static tcp 10.10.0.12 5655 xxx.xxxx.xxxx.155 5655 route-map ISP1 extendable
ip nat inside source static tcp 10.10.0.15 8080 xxx.xxxx.xxxx.155 8080 route-map ISP1 extendable
ip nat inside source static tcp 10.10.0.10 21 172.16.0.1 21 route-map ISP2 extendable
ip nat inside source static tcp 10.10.0.3 25 172.16.0.1 25 route-map ISP2 extendable
ip nat inside source static tcp 10.10.0.5 443 172.16.0.1 443 route-map ISP2 extendable
ip nat inside source static tcp 10.10.0.12 5655 172.16.0.1 5655 route-map ISP2 extendable
ip nat inside source static tcp 10.10.0.15 8080 172.16.0.1 8080 route-map ISP2 extendable
ip route 0.0.0.0 0.0.0.0 xxx.xxxx.xxxx.254 track 1
ip route 0.0.0.0 0.0.0.0 172.16.0.30 250
ip route 208.67.220.220 255.255.255.255 172.16.0.30
ip route 208.67.222.222 255.255.255.255 xxx.xxxx.xxxx.254
!
ip access-list extended LAN
permit ip 10.0.0.0 0.0.0.255 any
permit ip 10.1.0.0 0.0.0.255 any
permit ip 10.10.0.0 0.0.0.255 any
permit ip 10.10.1.0 0.0.0.255 any
permit ip 10.10.2.0 0.0.0.255 any
permit ip 10.40.20.0 0.0.0.255 any
permit ip 10.2.0.0 0.0.0.255 any
ip access-list extended VPN4
!
ip sla 1
icmp-echo 208.67.222.222 source-interface GigabitEthernet0/1
threshold 500
timeout 1000
frequency 2
ip sla schedule 1 life forever start-time now
ip sla 2
icmp-echo 208.67.220.220 source-interface FastEthernet0/0/0
threshold 500
timeout 1000
frequency 2
ip sla schedule 2 life forever start-time now
access-list 1 permit 10.0.0.0 0.0.0.255
access-list 1 permit 10.1.0.0 0.0.0.255
access-list 1 permit 10.2.0.0 0.0.0.255
access-list 1 permit 10.10.0.0 0.0.0.255
access-list 1 permit 10.10.1.0 0.0.0.255
access-list 1 permit 10.10.2.0 0.0.0.255
access-list 1 permit 10.10.3.0 0.0.0.255
access-list 1 permit 10.10.4.0 0.0.0.255
access-list 1 permit 10.40.20.0 0.0.0.255
access-list 1 permit 10.10.5.0 0.0.0.255
access-list 100 permit ip 10.40.20.0 0.0.0.255 any
access-list 105 permit ip 10.0.0.0 0.0.0.255 any
access-list 105 permit ip 10.1.0.0 0.0.0.255 any
access-list 105 permit ip 10.2.0.0 0.0.0.255 any
access-list 105 permit ip 10.10.0.0 0.0.0.255 any
access-list 105 permit ip 10.10.1.0 0.0.0.255 any
access-list 105 permit ip 10.10.2.0 0.0.0.255 any
access-list 105 permit ip 10.10.3.0 0.0.0.255 any
access-list 105 permit ip 10.10.4.0 0.0.0.255 any
access-list 105 permit ip 10.40.20.0 0.0.0.255 any
!
!
!
!
route-map ISP2 permit 10
match ip address LAN
match interface FastEthernet0/0/0
!
route-map ISP1 permit 10
match ip address LAN
match interface GigabitEthernet0/1
!
!
tftp-server flash:Firmware/SCCP11.9-3-1SR4-1S.loads alias SCCP11.9-3-1SR4-1S.loads
tftp-server flash:Firmware/apps11.9-3-1ES26.sbn alias apps11.9-3-1ES26.sbn
tftp-server flash:Firmware/cnu11.9-3-1ES26.sbn alias cnu11.9-3-1ES26.sbn
tftp-server flash:Firmware/cvm11sccp.9-3-1ES26.sbn alias cvm11sccp.9-3-1ES26.sbn
tftp-server flash:Firmware/dsp11.9-3-1ES26.sbn alias dsp11.9-3-1ES26.sbn
tftp-server flash:Firmware/jar11sccp.9-3-1ES26.sbn alias jar11sccp.9-3-1ES26.sbn
tftp-server flash:Firmware/term06.default.loads alias term06.default.loads
tftp-server flash:Firmware/term11.default.loads alias term11.default.loads
tftp-server flash:Firmware/SCCP45.9-3-1SR4-1S.loads alias SCCP45.9-3-1SR4-1S.loads
tftp-server flash:Firmware/apps45.9-3-1ES26.sbn alias apps45.9-3-1ES26.sbn
tftp-server flash:Firmware/cnu45.9-3-1ES26.sbn alias cnu45.9-3-1ES26.sbn
tftp-server flash:Firmware/cvm45sccp.9-3-1ES26.sbn alias cvm45sccp.9-3-1ES26.sbn
tftp-server flash:Firmware/dsp45.9-3-1ES26.sbn alias dsp45.9-3-1ES26.sbn
tftp-server flash:Firmware/jar45sccp.9-3-1ES26.sbn alias jar45sccp.9-3-1ES26.sbn
tftp-server flash:Firmware/term45.default.loads alias term45.default.loads
tftp-server flash:Firmware/term65.default.loads alias term65.default.loads
!
!
!
control-plane
!
call threshold global cpu-avg low 68 high 75
call threshold global total-mem low 75 high 85
call threshold global total-calls low 88 high 100
!
voice-port 0/1/0
trunk-group FXO 1
supervisory disconnect dualtone mid-call
supervisory answer dualtone
no battery-reversal
disc_pi_off
cptone RU
timeouts interdigit 2
timeouts call-disconnect 1
timeouts ringing 60
timeouts wait-release 1
timing guard-out 500
connection plar 3000
description 3075316
caller-id enable
!
voice-port 0/1/1
supervisory disconnect dualtone mid-call
supervisory answer dualtone
no battery-reversal
disc_pi_off
cptone RU
timeouts interdigit 2
timeouts call-disconnect 1
timeouts ringing 60
timeouts wait-release 1
timing guard-out 500
connection plar 1000
description 3075317
caller-id enable
!
voice-port 0/1/2
shutdown
!
voice-port 0/1/3
shutdown
!
!
!
mgcp profile default
!
sccp local GigabitEthernet0/0.6
sccp
!
dspfarm profile 1 transcode
codec g729r8
codec g729br8
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
maximum sessions 10
associate application SCCP
shutdown
!
dspfarm profile 2 conference
codec ilbc
codec g722-64
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum conference-participants 16
associate application SCCP
shutdown
!
dial-peer voice 1 pots
trunkgroup FXO
description #call out/in PSTN temp#
!
dial-peer voice 2 voip
description #call out comtube#
translation-profile outgoing out-comtube
destination-pattern 9T
session protocol sipv2
session target dns:sip.comtube.com
voice-class codec 2
voice-class sip dtmf-relay force rtp-nte
voice-class sip profiles 2
dtmf-relay rtp-nte
clid network-number 298245
no vad
!
dial-peer voice 3 voip
description #call inc comtube#
translation-profile incoming in-comtube
session protocol sipv2
session target dns:sip.comtube.com
incoming called-number .%
voice-class codec 2
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
!
sip-ua
credentials username 298245 password 7 xxxxxxxxxxxxxxxxxxxx realm sip.comtube.com
authentication username 298245 password 7 xxxxxxxxxxxxxxxxxxxxxx realm sip.comtube.com
nat symmetric check-media-src
no remote-party-id
registrar 1 dns:sip.comtube.com expires 1800
sip-server dns:sip.comtube.com
connection-reuse
host-registrar
!
!
!
telephony-service
sdspfarm units 1
sdspfarm transcode sessions 10
sdspfarm tag 1 trandsp2
conference hardware
no auto-reg-ephone
max-ephones 50
max-dn 150
ip source-address 10.10.2.30 port 2000
timeouts interdigit 2
system message voip.xxxxxxxxxxx.com
cnf-file location flash:
load 7911 SCCP11.9-3-1SR4-1S.loads
load 7965 SCCP45.9-3-1SR4-1S.loads
time-zone 35
time-format 24
date-format dd-mm-yy
max-conferences 8 gain -6
call-forward pattern T
call-forward pattern .T
moh flash:music-on-hold.au
multicast moh 239.0.0.1 port 2000
web admin system name tkalenko.m secret 5 xxxxxxxxxxxxxxxxxxxxxxx
time-webedit
transfer-system full-consult
transfer-pattern T
create cnf-files version-stamp 7960 Mar 12 2014 12:46:41
!
!
ephone-dn 1
number 011
label 011
name xxxxxxxxxxxx
preference 1
allow watch
no huntstop
!
!
ephone-dn 2
number 021
label 021
name xxxxxxxxxxxxxx
preference 1
allow watch
no huntstop
!
!
ephone-dn 3
number 031
label 031
name xxxxxxxxxxxxxx
allow watch
!
!
ephone-dn 4
number 041
label 041
preference 1
allow watch
no huntstop
!
!
ephone-dn 5 dual-line
number 051 secondary 052
label 051
allow watch
no huntstop
!
!
ephone-dn 6 dual-line
number 061 secondary 062
label 061
allow watch
no huntstop
!
!
ephone-dn 7
number 071
label 071
description FAX
preference 1
allow watch
no huntstop
!
!
ephone-dn 8
number 012
label 012
name xxxxxxxxxxxx
allow watch
no huntstop
!
!
ephone-dn 9
number 032
label 032
name xxxxxxxxxxxxxx
allow watch
no huntstop
!
!
ephone-dn 10
number 022
label 022
allow watch
no huntstop
!
!
ephone 1
device-security-mode none
mac-address 0024.9735.1EC3
type 7965
button 1:3 2:9
!
!
!
ephone 2
device-security-mode none
mac-address 0024.9735.1FF9
type 7965
button 1:2 2:10
!
!
!
ephone 3
device-security-mode none
mac-address 0024.C4FE.57D8
type 7911
button 1:4
!
!
!
ephone 4
device-security-mode none
mac-address 0025.4593.69EC
type 7911
button 1:5
!
!
!
ephone 5
device-security-mode none
mac-address 0025.4593.6B55
type 7911
button 1:6
!
!
!
ephone 6
device-security-mode none
mac-address 0024.9735.1F29
type 7965
button 1:1 2:8
!
!
!
ephone 7
device-security-mode none
mac-address 0025.84A1.DAE2
max-calls-per-button 2
type ata
button 1:7
!
!
ephone-hunt 1 sequential
pilot 1000
list 022, 061
final 022
timeout 5, 5
no-reg pilot
description #helpdesk#
!
!
ephone-hunt 2 peer
pilot 2000
list 061, 012
final 061
timeout 5, 5
no-reg pilot
!
ephone-hunt 3 sequential
pilot 3000
list 021, 031, 011
final 031
timeout 5, 15, 5
no-reg pilot
description #sales#
!
!
voice-gateway system 1
create cnf-files
!
!
!
!
line con 0
privilege level 15
line aux 0
privilege level 15
line vty 0 4
exec-timeout 60 0
privilege level 15
logging synchronous
transport input all
transport output all
!
scheduler allocate 20000 1000
ntp source GigabitEthernet0/0
ntp master
ntp update-calendar
ntp server 10.10.0.1 prefer source GigabitEthernet0/0.4
ntp server 10.10.0.2 source GigabitEthernet0/0.4
event manager applet ISP1-UP
event track 1 state up
action 1.0 cli command "enable"
action 1.1 cli command "clear ip nat trans *"
action 1.2 syslog msg "ISP1 is UP"
event manager applet ISP1-DOWN
event track 1 state down
action 1.0 cli command "enable"
action 1.1 cli command "clear ip nat trans *"
action 1.2 syslog msg "ISP1 is DOWN"
!
end

Вы здесь все IP-адресы SIP-серверов описали?





h323 клиентов нет?





А остальные провайдеры разве не требуют регистрации? Кроме comtube? Если требуют, то придётся лёгкий финт сделать... Но для начала дайте знать ответ на вопрос, нужна ли им всем регистрация.

В этой части
ip address trusted list
Мои сети для возможных SIP телефонов
ipv4 10.10.1.0 255.255.255.224
ipv4 10.10.2.0 255.255.255.224
Сеть Comtube
ipv4 85.192.44.73 255.255.255.255
Согласно параметров выданных провайдером
Login: Display name, User name, Authorization name, Auth ID, User ID, Account, Phone number: 298245
Password:ваш пароль в Comtube
Proxy server:sip.comtube.com или 85.192.44.73
Registrar server:sip.comtube.com или 85.192.44.73
DomainProxy, SIP Proxy, SIP Registrar, SIP Domain, SIP Realm:sip.comtube.com или 85.192.44.73
Port proxy:5060 или 6060
Транспорт:UDP
Аудиокодеки:G.729, G.711
STUN:stun.comtube.com, порт 3478

В части
allow-connections sip to sip
h323 клиентов нет, и пока не предполагается
только SCCP и SIP телефоны, и sip-транки на провов.


В части
sip-ua
credentials username 298245 password 7 xxxxxxxxxxxxxxxxxxxx realm sip.comtube.com
authentication username 298245 password 7 xxxxxxxxxxxxxxxxxxxxxx realm sip.comtube.com
nat symmetric check-media-src
no remote-party-id
registrar 1 dns:sip.comtube.com expires 1800
sip-server dns:sip.comtube.com
connection-reuse
host-registrar

Остальные конечно потребуют, но когда столкнулся с проблемой входящего звонка от Comtube, решил сначала решить её потом настраивать других.
Но насколько я понимаю, конструкция в этой части будет типа

sip-ua
credentials username 298245 password xxxxxxxxxxxx realm sip.comtube.com
authentication username 298245 password xxxxxxxxxxxxx realm sip.comtube.com

credentials username 99XXXXX password 7 xxxxxxxxxxxx realm sip.skype.com
authentication username 99XXXXX password 7 xxxxxxxxx realm sip.skype.com

credentials username 79282705150 password xxxxxxxxxxx realm BREDBAND
authentication username 79282705150 password xxxxxxxxxxxx realm BREDBAND

nat symmetric check-media-src
no remote-party-id
registrar 1 dns:sip.comtube.com expires 1800
registrar 2 dns:sip.skype.com expires 360
registrar 3 dns:multifon.ru:5060 expires 360
sip-server dns:sip.comtube.com
connection-reuse
host-registrar

Ну что же, давайте настроим Comtube для начала.

Перво-наперво добавьте (во всех ДН):

ephone-dn 1
number 011 no-reg
....

Где два номера - добавляйте no-reg both

Это позволит избежать блокировки провайдером из-за множества безуспешных попыток зарегистрироваться.

Далее:

sip
rel1xx disable
outbound-proxy ipv4:85.192.44.73

И

voice service voip
ip address trusted list
ipv4 85.192.44.73

Также лучше поправить DP:

dial-peer voice 3 voip
....
incoming called-number .% < убираем
incoming called-number 298245
....

После чего покажите, пожалуйста, sh sip registe statu

имхо достаточно


исправить на

В части исправить на
voice translation-profile in-comtube
translate calling1000 исправить на translate called 1000

и
АЛЛЕЛУЯ!!!!! Чёрт возьми! Работает!)))
Как иногда всё таки полезен свежий и незамыленный взгляд!
Пошёл я дальше, работать напильником, модератора прошу тему не закрывать, т.к. ещё 3 транка настроить нужно))

Спасибо и за Ваш вариант. его делать пока не стал, т.к. простое изменение команды помогло, и я пошёл дальше.