X_EnforceRequestUserID: and a CISCO phone off an Asterisk Server

[lrosenman]

I have an Asterisk PBX-In-A-Flash server on the same (private) LAN as my OBIHAI 202. 

Setting up a couple of Cisco 7960 IP Phones off the Asterisk server to talk out via GoogleVoice on the OBIHAI.

I had to UNCHECK X_EnforceRequestUserID.

Is this a problem when NO ports are exposed from either the PIAF or OBI to the internet (everything is behind a Hardware Firewall/Router/NAT).

What EXACTLY does this parameter do?

What I saw was the OBI rejecting calls from ASTERISK with a 404 until I unchecked X_EnforceRequestUserID

thanks.

[lrosenman]

anyone have any ideas here?

[MarkObihai]

The option X_EnforceRequestUserID is to help fight against a problem commonly known as "ghost calls", where a machine/hacker may be scanning for SIP devices.

This option ensures that the SIP INVITE received by the OBi device has a request userid that matches the SIP account ID as configured on the device.

So in this case the option is best left disabled.

[lrosenman]

Thanks Mark!