Sip Authentication Example - 3Com VCX V7122 SIP User Manual

To: <sip:1000@10.8.201.10>;tag=1c7345
Call-ID: 534366556655skKw-8000--1000@10.8.201.108
CSeq: 18154 BYE
Supported: 100rel,em
Content-Length: 0

SIP Authentication Example

The VCX V7122/SIP Gateway supports basic and digest authentication types, according to
the SIP standard. A proxy server might require authentication before forwarding an INVITE
message. A registrar server may also require authentication for client registration. A proxy
replies to an unauthenticated INVITE with a 407 Proxy Authorization Required response,
containing a Proxy-Authenticate header with the form of the challenge. After sending an ACK
for the 407, the User Agent can then resend the INVITE with a Proxy-Authorization header
containing the credentials.
User Agent, Redirect, or Registrar servers typically use 401 Unauthorized responses to
challenge authentication containing a WWW-Authenticate header, and expect the re-INVITE
to contain an Authorization header.
The following example describes the Digest Authentication procedure including computation
of User Agent credentials.
The REGISTER request is sent to Registrar server for registration, as follows:
1
REGISTER sip:10.2.2.222 SIP/2.0
Via: SIP/2.0/UDP 10.1.1.200
From: <sip: 122@10.1.1.200>;tag=1c17940
To: <sip: 122@10.1.1.200>
Call-ID: 634293194@10.1.1.200
CSeq: 1 REGISTER
Contact: sip:122@10.1.1.200:
Expires:3600
On receiving this request the registrar returns 401 Unauthorized response.
2
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.2.1.200
From: <sip:122@10.2.2.222 >;tag=1c17940
To: <sip:122@10.2.2.222 >
Call-ID: 634293194@10.1.1.200
Cseq: 1 REGISTER
Date: Mon, 30 Jul 2001 15:33:54 GMT
Server: Columbia-SIP-Server/1.17
Content-Length: 0
WWW-Authenticate: Digest realm="3com.com",
nonce="11432d6bce58ddf02e3b5e1c77c010d2",
stale=FALSE,
algorithm=MD5
According to the sub-header present in the WWW-Authenticate header the correct
REGISTER request is formed.
Since the algorithm used is MD5, we use:
3
The user name from the INI file: VCX V7111 8FXS-3Com
The realm return by the proxy: 3com.com
The password from the INI file: 3Com
3Com VCX V7122/SIP VoIP Gateway User Manual
57