djanjic Posted February 8, 2023 Report Share Posted February 8, 2023 We ordered a new batch of Yealink W73P DECT phones,. Tried to register few of those on hosted version 68.0.14. via MAC address. None of them, three, could register. I read in their release notes that they now support TLS 1.3. I am wondering if that is the case and if there is any way to forced to use TLS 1.2. They have a field for it but I don't know where will I change that on the PBX? Quote Link to comment Share on other sites More sharing options...
Vodia PBX Posted February 9, 2023 Report Share Posted February 9, 2023 I doubt that the TLS version is the issue, but you should set the minimum version to 1.2 because many browsers today bark at TLS 1.1 or even 1.0. I would try with TCP if that works. Then check if the device is able to pull the configuration template with TLS/HTTPS. That would mean that the TLS version is not the problem. If SIP/TLS does not work its probably because Yealink does not send the SNI extension by default for SIP/TLS (it does for HTTP though) and the PBX is struggling to figure out what tenant is being used. If that is the case please make sure that the system management DNS address is set and has a valid certificate — this is the one the PBX sends when the Yealink base wants to use TLS for SIP. Quote Link to comment Share on other sites More sharing options...
djanjic Posted February 17, 2023 Author Report Share Posted February 17, 2023 Well, we tried all these options and none of them work. I am wondering if it has to do with new MAC addresses with Yealink? The only registration that works is via UDP with account username and the SIP password. Quote Link to comment Share on other sites More sharing options...
Vodia PBX Posted February 22, 2023 Report Share Posted February 22, 2023 If UDP works but the other transport layers not, you can rule out problems with the MAC address range. If TCP does not work, I would bet 90 % on problems with the firewall, and for TLS I would think that it has to do with the certificate and the chain of trust. Quote Link to comment Share on other sites More sharing options...
djanjic Posted February 24, 2023 Author Report Share Posted February 24, 2023 UDP works only with username and password, not with the MAC address. Firewall, I can register any other phone behind this firewall, just not the new batch of phones we recently ordered. The phone, base, simply doesn't react to the address of the domain weather is https://mydomain.com or http://mydomain.com. The certificate on the server is current. Unfortunately Yealink doesn't have any logs we can look at to determine what is wrong. Quote Link to comment Share on other sites More sharing options...
djanjic Posted February 24, 2023 Author Report Share Posted February 24, 2023 Actually, I do have a syslog file from the phone, would be glad to submit it. But .tar file exceeds the file size allowed here. Quote Link to comment Share on other sites More sharing options...
Vodia PBX Posted February 25, 2023 Report Share Posted February 25, 2023 Please open a ticket o the support site and attach it there. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.