Knowledgebase:
Why am getting a "503 Service Unavailableā€ SIP message when sending a SIP call to the SN?
Posted by Danny Staub, Last modified by Daniel Lizaola on 20 December 2017 12:51 PM

One of the main reasons for this is that the SmartNode does not allow for any "untrusted" host IP Addresses to pass through whenever the "trust" command is configured in the SIP interface.

 

Managing trusted hosts:

A list of trusted remote peers can be configured on SIP interfaces. If configured, only connections with peers in that list will be accepted. The list may contain IP-addresses or FQDNs or "remote".  If no trusted peers are configured all connections are accepted.

The SmartNode responds with a SIP "503 Service Unavailable” to requests received from hosts which are not trusted. 

interface sip IF_SIP
bind context sip-gateway GW_SIP
route call dest-interface IF_FXO
remote 10.10.10.10 5060
local 10.10.10.10 5060
trust remote

In the example above, only requests coming from the IP address 10.10.10.10 will be accepted.  Anything else will receive the "503 Service Unavailable" from the SmartNode.

 

In some cases, it is desirable not to send an answer back to an untrusted SIP host. For those cases, in the context sip-gateway, this behavior can be changed. By default the SmartNode responds with a “503 Service Unavailable” to SIP requests received from hosts which are not trusted. With the [no] form of the command below, the SmartNode will not send any message to untrusted hosts.

[node](sip-gw)[name]# [no] answer-untrusted-hosts

context sip-gateway GW_SIP_0

interface LAN
bind interface IF_IP_LAN context router port 5060

context sip-gateway GW_SIP_0
bind location-service LOC_SVC
no answer-untrusted-hosts
no shutdown

The SmartNode will no longer respond to untrusted hosts when the "no answer-untrusted-hosts" command is configured.

 

(8748 vote(s))
Helpful
Not helpful

Comments (0)
Post a new comment
 
 
Full Name:
Email:
Comments:
CAPTCHA Verification 
 
Please enter the text you see in the image into the textbox below (we use this to prevent automated submissions).