Sip Message Authentication Example - AudioCodes Mediant 600 User Manual

User's Manual

To register or un-register the device to a Proxy/Registrar:

Click the Register button to register.

Click Un-Register button to un-register.
Instead of registering the entire device, you can register specific entities as listed below by
using the Register button located on the page in which these entities are configured:

FXS/FXO endpoints, BRI endpoints, Trunk Groups - Trunk Group Table page (see
Configuring Trunk Group Table on page 291)

Accounts - Account table (see 'Configuring Account Table' on page 225)
Click the Proxy Set Table
groups of proxy addresses. Alternatively, you can open this page from the Proxy Sets
Table page item (see 'Configuring Proxy Sets Table' on page
page).

17.3.1 SIP Message Authentication Example

The device supports basic and digest (MD5) authentication types, according to SIP RFC
3261 standard. A proxy server might require authentication before forwarding an INVITE
message. A Registrar/Proxy server may also require authentication for client registration. A
proxy replies to an unauthenticated INVITE with a 407 Proxy Authorization Required
response, containing a Proxy-Authenticate header with the form of the challenge. After
sending an ACK for the 407, the user agent can then re-send the INVITE with a Proxy-
Authorization header containing the credentials.
User agents, Redirect or Registrar servers typically use the SIP 401 Unauthorized
response to challenge authentication containing a WWW-Authenticate header, and expect
the re-INVITE to contain an Authorization header.
The following example shows the Digest Authentication procedure, including computation
of user agent credentials:
1. The REGISTER request is sent to a Registrar/Proxy server for registration:
REGISTER sip:10.2.2.222 SIP/2.0
Via: SIP/2.0/UDP 10.1.1.200
From: <sip: 122@10.1.1.200>;tag=1c17940
To: <sip: 122@10.1.1.200>
Call-ID: 634293194@10.1.1.200
User-Agent: Sip-Gateway/Mediant 1000/v.6.60.010.006
CSeq: 1 REGISTER
Contact: sip:122@10.1.1.200:
Expires:3600
2. Upon receipt of this request, the Registrar/Proxy returns a 401 Unauthorized
response:
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.2.1.200
From: <sip:122@10.2.2.222 >;tag=1c17940
To: <sip:122@10.2.2.222 >
Call-ID: 634293194@10.1.1.200
Cseq: 1 REGISTER
Date: Mon, 30 Jul 2012 15:33:54 GMT
Server: Columbia-SIP-Server/1.17
Content-Length: 0
WWW-Authenticate: Digest realm="audiocodes.com",
nonce="11432d6bce58ddf02e3b5e1c77c010d2",
stale=FALSE,
algorithm=MD5
Version 6.6
button to Open the Proxy Sets Table page to configure
229
17. SIP Definitions
219 for a description of this
Mediant 600 & Mediant 1000