[2010-04-20 notes given to me by Rob Seastrom]

this was developed under P003-8-12-00 
no guarantees for ancient loads.

useful cisco 7960 tidbits

turn off debugging: 
tty mon 0 (stops looking at it)
undebug [item] (actually turns it off)

various debugging:
debug sip-reg-state
debug sip-state
debug sip-task
debug sip-messages

all of these are quite chatty and you might want to cut your config down
to just one line (the problem child) first.

Like any cisco hardware, "debug all" is ill-advised.

---

phone reset (* + 6 + settings) may not clear out all the cruft.
leftovers from previous configs may be left in the phone, particularly
if you did not overwrite.

to start with a clean slate, * + 6 + settings, then, while the POST
light sequence is happening hold down # until "reset sequence detected"
displays on the screen.  Immediately dial 123456789*0#, then 2 when prompted
to not retain network settings.

---

To smoke out weird errors in the config (actually getting debug messages
for parse errors, etc) the following incantations may be useful:

SIP Phone> debug xml-events 
SIP Phone> debug xml-vars 
SIP Phone> erase protflash 

---

7960 inside NAT, Asterisk box outside NAT

I have a passel of 7960s at my house, and Asterisk running on a box with a
static IP address in colo.

Current generation NAT boxes tend to end up configured to *not* randomize
source port whenever possible on an outbound translation.  This is necessary
in order to have popular applications and protocols like STUN, ichat av, skype
video, and bittorrent work.

I run a pf-based firewall (pf is the packet filter in OpenBSD, FreeBSD, and others),
and it is not smart enough to "try something else" if the tuple {srcip, srcport,
dstip, dstport} is already in use.  As a result, the second and later registrations
to the same server end up fighting with each other.

The solution is to do both randomization and non-randomization simultaneously,
based on port and destination.  192.0.2.3 is the address of the SIP server in colo.
pf.conf fragment is:

       nat on $extif from $natnets port 5060 to 192.0.2.3 -> ($extif)
       nat on $extif from $natnets to any -> ($extif) static-port

Config for the phone includes:

line1_authname:    "test-rs-3"
line1_password:    "mypassword"
#line1_displayname: "Robert Seastrom"
line1_name:        "test-rs-3"
line1_shortname:   "Test"
proxy1_address:   "192.0.2.3"
proxy1_port:       5060

nat_enable: 1                   ; 0-Disabled (default), 1-Enabled
nat_address: ""                 ; WAN IP address of NAT box (dotted IP or DNS A record only)