Q.  how can i get IP-IP auth but get INBOUND to work for xxxx⊙sc

e164 work but not ext to ext

i tried Global resources (IP auth) .

I tried PBX connection (invite format username@domain) with IP static auth OR PBX connection with IP / Domain Auth

i get a 604 nope nope nope

sudo_root: try a device that does auth-by-ip

like a device like sip device

in kazoo logs it shows   no 'Realm' in CCVs, checking FS props

probably unrelated

the ip is associated with the account in registrar i believe

it has a /25 to allow but i tried PBX auth by domain name inbound

but yes, via the /devices API, an auth by ip device should work

oh so the monster-ui wont for auth-by-ip from devices

so local-resources is only from kazoo==> carrier then

no idea on UI stuff, just do API myself

hehe ya i see the devices endpoint shows more then what UI shows at least to add IP device. I wonder if i have all extensions and its just IP-IP auth do i justput the domain From carrier as the IP aut hcause they have like /25 to allow

sudo_root: i don't think carrier would work since there's no account identifier

afaik kazoo doesn't trust the realm on the INVITE since there's no auth on that

carrier IP in ACLs + DID mapped to account

device IP in ACLs is mapped to the account

and username/password of device can be mapped to the account

but extensions obviously don't uniquely map to an account

and SIP realm, while it maps, isn't a good enough auth mechanism

oh interesting

would invite format on device-authIP be  contact or route

whatever your device would accept

i assume route (which uses the request URI's user portion

oh i guess it auto added username/password so ill have to adjust it  still getting a 604 nope nope nope

hmmm

@IPADDED-to-Devices---|ecallmgr_fs_channel:767(<0.32369.334>) no 'Realm' in CCVs, checking FS props

ya ifi. do sup - n ecallmgr carrier_acls now it shows authorizing type (device) But if it matches then i get 604 nope nope nope  (NO route to destination)

oh it worked. so device via ip/auth  (i wonder if i can add a CIDR/ on that)

ha

it took a bit to register when i removed ACLs i guess