Registration State: Can't connect to login server

Have a question or problem with your Fongo application? This forum is the place to get help from both staff and fellow community members.

Registration State: Can't connect to login server

Postby blue_man » 11/02/2018

Hey - I've been using Freephoneline for years via my Linksys PAP and a couple days ago noticed that I could no longer connect to voip.freephonline.ca.

I tried restarting the Linksys PAP a few times and re-entered my password but to no avail.

Any thoughts on what could be causing the connection problem all of a sudden?

Thanks
blue_man
Just Passing Thru
 
Posts: 2
Joined: 11/02/2018
SIP Device Name: PAP2T
Firmware Version: 5.1.6(LS}
ISP Name: Teksavvy
Computer OS: Win10
Router: Orbi

Share On:

Re: Registration State: Can't connect to login server

Postby Liptonbrisk » 11/02/2018

Are Freephoneline’s SIP servers down? My ATA isn’t registered.

Your SIP Username and SIP Password can be found after logging in at https://www.freephoneline.ca/showSipSetting


A. Visit http://status.fongo.com/ to check server status.

B. If the service status website doesn’t note any issues, then chances are the problem is on your end.
In your PAP2T, Navigate to Line 1 (or whatever you're using for FPL)-->SIP settings, change SIP Port to a random number between 30000 and 60000

Just pick a port number in that range. Change to a new port number in that range. Afterwards, reboot the ATA.


If changing the local SIP Port works, you were dealing with a corrupted NAT connection in your router.
Possibly a NAT router connection was never disconnected or never timed out properly. And, then, the
ATA keeps the corrupted connection in a persistent state over and over again. (Credit goes to Mango for
this information). Possibly, this problem is due to the router's UDP timeout being in excess of the ATA's
Failure Retry timer. With FPL, that's 120 seconds.

Thanks to Mango, many of us now understand that in order for ATAs to remain registered and working properly
with a VoIP SIP provider like Freephoneline, in particular after power failures, the following conditions must be met:

UDP Unreplied Timeout (in your router) < NAT Keep-alive Interval < UDP Assured Timeout (in your router) < SIP Registration Failure Retry Wait Time (Reg Retry Intvl)

“<“ means less than.


When a modem leases a new IP address, a problem can arise where prior associations using the old IP
address are maintained in the router. When the ATA attempts to communicate using the old IP address,
the response is unreplied, and then if the UDP Unreplied timeout is greater than the Keep Alive Interval
(and UDP Unreplied timeout is often set to 30 by default in consumer routers) a problem arises where
the corrupted connection persists. If UDP Unreplied timeout is, for example, 10, and the NAT Keep
Alive Interval is 20, then the corrupted connection will timeout or close. A new connection will be
created, and everything will work fine.

Another problem can occur when the Keep-Alive interval is greater than UDP Assured Timeout (often
180 by default in consumer routers): the NAT hole will close due to the ATA not communicating
frequently enough with the SIP server. In turn, incoming calls may, intermittently, not reach the ATA.
Again, NAT Keep Alive Intvl is supposed to be 20 with FPL.
Your PDF setup guide is found here: viewtopic.php?f=15&t=310#p1366.

Getting access to both UDP Unreplied Timeout and UDP Assured Timeout settings in consumer routers may be
difficult, if not impossible. Asuswrt-Merlin, third party firmware for Asus routers, does offer easy access to these two
settings, which are found under General–>Tools-->Other settings. My understanding is that third party Tomato firmware has these two settings
as well. So if your router supports Tomato firmware, that may be another option.
The keep alive interval for FPL is 20. The SIP Registration Failure Retry Wait Time (Reg Retry Intvl setting in your ATA) is 120. I use 10 for UDP
Unreplied Timeout and 117 for UDP Assured Timeout.

C. Double check your Registration timers.

i. Register Expires must be set to 3600 seconds
ii. Navigate to Voice-->SIP-->SIP Timer Values (sec)-->Reg Retry Intvl should be 120 seconds
https://support.freephoneline.ca/hc/en- ... redentials

If your ATA makes more than 5 registration attempts in 5 minutes (each time your reboot your ATA, it's attempting to register with Freephoneline; if the reg retry interval or Register Expires is too low, you also run the risk of getting temporarily IP banned), you may end up being temporarily IP banned by the specific FPL server the ATA was sending registration requests to. If you're temporarily IP banned, you could then try switching Proxy to a different FPL server than the one you were previously using
(voip.freephoneline.ca, voip2.freephoneline.ca, or voip4.freephoneline.ca:6060), unless you need to use voip4.freephoneline.ca:6060 because you have SIP ALG forced on in your router. The purpose of voip4.freephoneline.ca:6060 is to circumvent (buggy) SIP ALG features in routers.


From https://community.freepbx.org/t/trunk-s ... ca/22479/8
"As May 2013, our servers will rate limit REGISTER requests to a maximum of 10 requests per 5 minutes. Each authentication round usually consumes 2 requests (digest auth), so it is a fair number given our guidelines. Also, it does not affect INVITES (which are also authenticated)...

This rate limit is applied per IP address as our service is tailored to residential Canadian users (ADSL/Cable)."

If you're temporarily IP banned, you could then try switching Primary SIP Server to a different FPL server than the one you were previously using (voip.freephoneline.ca, voip2.freephoneline.ca, or voip4.freephoneline.ca:6060), unless you need to use voip4.freephoneline.ca:6060 because you have SIP ALG forced on in your router. The purpose of voip4.freephoneline.ca:6060 is to circumvent SIP ALG features in routers. Or you can disable FPL SIP registration in all devices (turn off your ATA) and wait a few hours until the temporary ban clears.

D. Note that only one registration per FPL account is allowed at any time. When there are multiple devices/softphones using the same account, only the most recent registration is valid. The previous device will lose registration. This is especially important to consider if someone else is using your SIP credentials (username and password) that are found after logging in at https://www.freephoneline.ca/showSipSettings (or if you're trying to register your FPL account with a smartphone SIP app or with another device). Registration is required for incoming calls. It is not required for outgoing calls. If you simply want to make outgoing calls using your FPL number, configure, but don't register the account, on the SIP app being used. This is also important to consider if you're using Freephoneline's desktop application (don't have it running while using your ATA with the same FPL account). Additionally, keep in mind that if someone else is also attempting to register the same SIP credentials on another device where you live, too many registration attempts can result in a temporary IP ban.
Always check registration status in the ATA and also your SIP status after logging in at https://www.freephoneline.ca/showSipSettings.
If you see a device listed under SIP User Agent that you don't recognize, you've either been hacked or someone else is using your Freephoneline SIP username and SIP Password.

To help avoid being hacked don't port forward and don't use DMZ in your router. Do not use default device passwords for any devices connected to the the internet.

E. For testing purposes, try disabling SIP ALG in your router.
For a generic example, visit https://www.obitalk.com/info/faq/sip-al ... ter-failed

If your router (modem/router combo or gateway) was issued by your ISP, contact your ISP for assistance.
Buggy SIP ALG features in routers can cause problems: https://www.voip-info.org/routers-sip-alg/.


F. If you don't believe you're IP banned, and if the ATA is completely unable to reach FPL's Proxy Servers, you may want to try specifying alternate DNS servers in your ATA. Google DNS is one example: https://developers.google.com/speed/public-dns/. You should only need to do this if you're experiencing a DNS issue.

G. Proper device reboot order is always modem–>router (wait for Wi-Fi SSIDs to populate first)–>ATA (in that order).
Please do not send me emails; I do not work for nor represent Freephoneline or Fongo. Post questions on the forums so that others may learn from responses or assist you. Thank you. If you have an issue with your account or have a billing issue, submit a ticket here: https://support.fongo.com/hc/en-us/requests/new. Visit http://status.fongo.com/ to check FPL/Fongo service status. Freephoneline setup guides can be found at viewforum.php?f=15.
User avatar
Liptonbrisk
Technical Support
 
Posts: 773
Joined: 04/26/2010
SIP Device Name: OBi202
Firmware Version: 3.2.2 (Build:5921EX)
ISP Name: Cable
Computer OS: Windows 10 x64 Pro
Router: Asuswrt-Merlin

Re: Registration State: Can't connect to login server

Postby blue_man » 11/05/2018

Thank you for this!

I am wondering if setting up a dedicated internal IP address for my Linksys PAP would also help eliminate the UDP timeout issue?
blue_man
Just Passing Thru
 
Posts: 2
Joined: 11/02/2018
SIP Device Name: PAP2T
Firmware Version: 5.1.6(LS}
ISP Name: Teksavvy
Computer OS: Win10
Router: Orbi

Re: Registration State: Can't connect to login server

Postby Liptonbrisk » 11/05/2018

blue_man wrote:Thank you for this!

I am wondering if setting up a dedicated internal IP address for my Linksys PAP would also help eliminate the UDP timeout issue?



No; static LAN IPs have nothing to do with UDP timeouts.



Typically, for VoIP SIP services, especially for freephoneline, you want

1) a router that does not have a full cone NAT,

Visit https://www.think-like-a-computer.com/2 ... es-of-nat/.
Mango from the Obitalk.com forums writes,
“Use a restricted cone NAT router, and do not use port forwarding or DMZ. Restricted cone NAT will only permit
inbound traffic from the service provider you're registered to. If you have a full cone NAT router, it will allow traffic
from any source. This is probably not what you intend.
If you have a Windows computer, you can test your router using the utility here:
http://www.dslreports.com/forum/remark,22292023. To run it, use stun stun.ekiga.net from a command prompt.”
Essentially, you download the stun-test.zip file; extract the stun.exe file from within the zip file to an easily
accessible location; use an elevated command prompt (visit
http://www.thewindowsclub.com/how-to-ru ... inistrator); change directory (cd) to the
directory or location where you extracted stun.exe (visit
http://www.digitalcitizen.life/command- ... c-commands); and type “stun stun.ekiga.net” without
the quotation marks followed by the enter/return button on your keyboard.
Asus routers, at the time of this writing, produce port restricted cone NAT routers, for example and are fine,
provided you’re using one with Asuswrt-Merlin, third party firmware installed: https://asuswrt.lostrealm.ca/about.

2) a router that lets you disable SIP ALG if it's buggy,

To understand why SIP ALG often causes horrible problems, please visit
http://www.voip-info.org/wiki/view/Routers+SIP+ALG (scroll down to the section on SIP ALG problems).

If you're dealing with a modem/router combo issued by an ISP or a router with SIP ALG forced on, you may have
to use voip4.freephoneline.ca:6060 for the Proxy Server. The purpose of voip4.freephoneline.ca:6060 is to circumvent
faulty SIP ALG features in routers.

3) a router that allows you to set QoS or assign highest priority to your ATA or IP Phone over all other devices on your LAN (local area network),

For a very general description of what QoS can do for you, visit https://www.voipmechanic.com/qos-for-voip.htm.
The basic idea is if you're torrenting or have a bunch of other computers, smartphones, tablets, etc. downloading and uploading (hogging all your available bandwidth), you don't want
your ATA not to have access to enough bandwidth to make or receive calls properly. So QoS or a Bandwidth Monitor feature (which is just another form of QoS) is a really good idea for VoIP users.

I often get an occasional relative complaining to me, "Hey my calls sound choppy." And then when I go visit, some kids are playing MMOs on a computer, while another person is downloading a huge file,
and another person is backing up files to a cloud service all at the same time someone else is trying to talk on the phone. All those devices, without QoS enabled, are fighting over available bandwidth along with the ATA.

and 4) A router that lets you adjust both Unreplied and Assured UDP timeouts.

Thanks to Mango, many of us now understand that in order for ATAs to remain registered and working properly with a VoIP SIP provider like Freephoneline, in particular after power failures, the following conditions must be met:

UDP Unreplied Timeout (in your router) < NAT Keep-alive Interval (in your ATA; for Obihai ATAs this is X_KeepAliveExpires) < UDP Assured Timeout (in your router) < SIP Registration Failure Retry Wait Time (or RegisterRetryInterval in Obihai ATAs)

“<“ means less than.

When a modem leases a new IP address, a problem can arise where prior associations using the old IP address are maintained in the router. When the ATA attempts to communicate using the old IP address, the response is unreplied, and then if the UDP Unreplied timeout is greater than the Keep Alive Interval (and UDP Unreplied timeout is often set to 30 by default in consumer routers) a problem arises where the corrupted connection persists. If UDP Unreplied timeout is, for example, 10, and the NAT Keep Alive Interval is 20, then the corrupted connection will timeout or close. A new connection will be created, and everything will work fine.

Another problem can occur when the Keep-Alive interval is greater than UDP Assured Timeout (often 180 by default in consumer routers): the NAT hole will close due to the ATA not communicating frequently enough with the SIP server. In turn, incoming calls may, intermittently, not reach the ATA. Again, X_Keepalives expires is supposed to be 20 with FPL.

(the above settings are making reference to those in Obihai ATAs)

Getting access to both UDP Unreplied Timeout and UDP Assured Timeout settings in consumer routers may be difficult, if not impossible. Asuswrt-Merlin (I would avoid any model below an RT-AC68U), third party firmware for Asus routers, does offer easy access to these two settings, which are found under General–>Tools-->Other settings. My understanding is that third party Tomato firmware has these two settings as well. So if your router supports Tomato firmware, that may be another option. Note that I will not be held accountable any damage resulting from failed firmware updates.

The keep alive interval for FPL is 20. The SIP Registration Failure Retry Wait Time is 120. I use 10 for UDP Unreplied Timeout and 117 for UDP Assured Timeout.



ISPs do not issue customers routers that can do all four things I just listed. Typically it's far better to have your own router with strong QoS functions and a restricted cone NAT firewall,
disable whatever SIP ALG feature is enabled in the router, and stick whatever modem/router combo your ISP gives you into bridge mode. For Bell Hubs, visit http://forums.redflagdeals.com/please-s ... r-1993629/. For Rogers, visit https://www.rogers.com/customer/support ... ridgemodem.
Please do not send me emails; I do not work for nor represent Freephoneline or Fongo. Post questions on the forums so that others may learn from responses or assist you. Thank you. If you have an issue with your account or have a billing issue, submit a ticket here: https://support.fongo.com/hc/en-us/requests/new. Visit http://status.fongo.com/ to check FPL/Fongo service status. Freephoneline setup guides can be found at viewforum.php?f=15.
User avatar
Liptonbrisk
Technical Support
 
Posts: 773
Joined: 04/26/2010
SIP Device Name: OBi202
Firmware Version: 3.2.2 (Build:5921EX)
ISP Name: Cable
Computer OS: Windows 10 x64 Pro
Router: Asuswrt-Merlin

Re: Registration State: Can't connect to login server

Postby Liptonbrisk » 11/05/2018

Liptonbrisk wrote:4) A router that lets you adjust both Unreplied and Assured UDP timeouts[

Getting access to both UDP Unreplied Timeout and UDP Assured Timeout settings in consumer routers may be difficult, if not impossible. Asuswrt-Merlin (I would avoid any model below an RT-AC68U), third party firmware for Asus routers, does offer easy access to these two settings, which are found under General–>Tools-->Other settings. My understanding is that third party Tomato firmware has these two settings as well. So if your router supports Tomato firmware, that may be another option. Note that I will not be held accountable any damage resulting from failed firmware updates.


Apparently, Mikrotik routers also allow users to change both Assured and Unreplied UDP timeout settings as well:
https://forums.redflagdeals.com/recomme ... #p28056619.
Please do not send me emails; I do not work for nor represent Freephoneline or Fongo. Post questions on the forums so that others may learn from responses or assist you. Thank you. If you have an issue with your account or have a billing issue, submit a ticket here: https://support.fongo.com/hc/en-us/requests/new. Visit http://status.fongo.com/ to check FPL/Fongo service status. Freephoneline setup guides can be found at viewforum.php?f=15.
User avatar
Liptonbrisk
Technical Support
 
Posts: 773
Joined: 04/26/2010
SIP Device Name: OBi202
Firmware Version: 3.2.2 (Build:5921EX)
ISP Name: Cable
Computer OS: Windows 10 x64 Pro
Router: Asuswrt-Merlin

Re: Registration State: Can't connect to login server

Postby Liptonbrisk » 11/14/2018

Also, Mango suggests the SIP T1 default setting is too aggressive, and to help resolve potential registration issues, T1 should be set to 1.
In your ATA, Navigate to Voice-->SIP-->SIP Timer Values-->SIP T1
Change SIP T1 to 1
Please do not send me emails; I do not work for nor represent Freephoneline or Fongo. Post questions on the forums so that others may learn from responses or assist you. Thank you. If you have an issue with your account or have a billing issue, submit a ticket here: https://support.fongo.com/hc/en-us/requests/new. Visit http://status.fongo.com/ to check FPL/Fongo service status. Freephoneline setup guides can be found at viewforum.php?f=15.
User avatar
Liptonbrisk
Technical Support
 
Posts: 773
Joined: 04/26/2010
SIP Device Name: OBi202
Firmware Version: 3.2.2 (Build:5921EX)
ISP Name: Cable
Computer OS: Windows 10 x64 Pro
Router: Asuswrt-Merlin


Return to Customer Support

Who is online

Users browsing this forum: No registered users and 4 guests

cron