Re: Securitydenial problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




for carrier interconnection usually direct H.225 signalling is used, not an 
RRQ registration to the gatekeeper.

Configure the link to them as a permanent endpoint and remove the [Endpoint] 
section from your config file.


On Thursday 02 December 2004 12:26, Mohamed Shurrab wrote:
> Hi,
>
> I am running GNUGK on Windows 2000 Advanced Server. I
> want to provide Pc to Phone calls. If users try to go
> into their account it works. The users get their
> account info like money and so on. I have configured
> GNUGk so it will use the terminator for calls. The
> terminator company gave me and a h323 id and password
> so I can go into their gateway. Directly when I open
> GNUGK it gives me a secrity denial problem. Even
> before a call is done. This is my configuatio file:
>
> [Gatekeeper::Main]
> Fourtytwo=42
> Name=GNUGK
> Home=217.164.252.213
> ;StatusPort=7000
>
> [RoutedMode]
> GKRouted=1
> H245Routed=1
> CallSignalPort=0
> CallSignalHandlerNumber=1
> RemoveH245AddressOnTunneling=1
> AcceptNeighborsCalls=1
> AcceptUnregisteredCalls=0
> SupportNATedEndpoints=1
> DropCallsByReleaseComplete=1
> RemoveCallOnDRQ=1
> SendReleaseCompleteOnDRQ=1
> ForwardOnFacility=1
> ShowForwarderNumber=1
> Q931PortRange=20000-20999
> H245PortRange=30000-30999
> ConnectTimeout=60000
>
> [GkStatus::Auth]
> rule=allow
> default=allow
>
>
> [RasSrv::RRQAuth]
> default=allow
>
>
>
> [RasSrv::RRQFeatures]
> #OverwriteEPOnSameAddress=1
> #AcceptEndpointIdentifier=1
> AcceptGatewayPrefixes=1
>
>
>
> [RasSrv::ARQFeatures]
> ArjReasonRouteCallToSCN=1
> ArjReasonRouteCallToGatekeeper=1
> CallUnregisteredEndpoints=1
> RemoveTrailingChar=#
> ParseEmailAliases=1
>
>
>
> [RasSrv::LRQFeatures]
> NeighborTimeout=2
> ForwardHopCount=2
> AlwaysForwardLRQ=1
> AcceptForwardedLRQ=1
> IncludeDestinationInfoInLCF=1
> CiscoGKCompatible=1
>
> #### Configuration section for Gatekeeper
> Authenticateion module
>
> [Gatekeeper::Auth]
> RadAuth=required;RRQ,ARQ
> default=allow
>
>
> [RadAuth]
>
> Servers=217.164.252.213:2723
> SharedSecret=mysecret
> LocalInterface=217.164.252.213
> #RadiusPortRange=10000-11000
> #RequestTimeout=2000
> #IdCacheTimeout=9000
> #SocketDeleteTimeout=60000
> AppendCiscoAttributes=1
> IncludeEndpointIP=1
> #RequestRetransmissions=2
>
>
> #### Configuration section for Gatekeeper Accounting
> module
>
> [Gatekeeper::Acct]
> RadAcct=required;start,stop
> default=accept
>
>
> [RadAcct]
>
> Servers=217.164.252.213:2724
> LocalInterface=217.164.252.213
> SharedSecret=mysecret
> #RadiusPortRange=10000-11000
> #RequestTimeout=3500
> #IdCacheTimeout=9000
> #SocketDeleteTimeout=60000
> RequestRetransmissions=4
> RoundRobinServers=1
> AppendCiscoAttributes=1
>
>
> #### Configuration section for PermanentEndpoints
> module
>
> [RasSrv::GWPrefixes]
> GW=*
>
> [RasSrv::PermanentEndpoints]
> 217.206.202.67=GW;*
> ;202.79.221.70=GW;*
>
> [Endpoint]
> Gatekeeper=217.206.202.67
> Type=Gateway
> H323ID=********
> Password=********
> Prefix=*
> TimeToLive=300
> RRQRetryInterval=10
> ARQTimeout=10
> UnregisterOnReload=1
>
> Directly when I start GNUGK i get this:
>
>   }
> 2004/12/02 00:41:25.656 2             RasSrv.cxx(152)
>  RAS     Read from 217.20
> 6.202.67:1719
> 2004/12/02 00:41:25.671 3             RasSrv.cxx(191)
>  RAS
> registrationReject {
>     requestSeqNum = 2
>     protocolIdentifier = 0.0.8.2250.0.4
>     rejectReason = securityDenial <<null>>
>   }
> 2004/12/02 00:41:25.671 2             RasSrv.cxx(1222)
>  RAS     Trapped RRJ
> 2004/12/02 00:41:25.671 1           GkClient.cxx(871)
>  GKC     Registration Rej
> ected: securityDenial
>
>
> Please help me. I ave been looking for a solution for
> a long time. Thank You
>
>
>
> ______________________________________________________________________
> Post your free ad now! http://personals.yahoo.ca
>
>
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users.
> Discover which products truly live up to the hype. Start reading now.
> http://productguide.itmanagersjournal.com/
>
> _______________________________________________________
>
> List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> Homepage: http://www.gnugk.org/

-- 
Best regards,
 
Teodor Georgiev
Information Services Plc. 
Tel : +359 2 9656208
Mobile: +359 887 508989


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/

_______________________________________________________

List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux