исходящий звонок неофон от ютел - "SIP/2.0 487 LR2 - User not registered on this client"

Здравствуйте.

Asterisk 1.8.5 стоит на debian'е 6. Установлен из репозитория с asterisk.org Сам asterisk смотрит одним концом в интернет, одним в локалюную сеть.

Входящий звонок приходит нормально. При попытке исходящего tumenngn.usi.ru отвечает: SIP/2.0 487 LR2 - User not registered on this client

Помогите, пожалуйста, привести минимальный конфиг к рабочему виду.

вот extensions.conf (тут XXXXX-номер телефона, YYY - пароль):

[globals]

[general]

[default]
exten => XXXXXX,1,Verbose(1, 'dial from neofon default')
exten => XXXXXX,n,Answer()
exten => XXXXXX,n,Dial(SIP/1000)
exten => XXXXXX,n,Hangup()

[incoming_calls]
exten => XXXXXX,1,Verbose(1, 'dial from neofon incoming_calls')
exten => XXXXXX,n,Answer()
exten => XXXXXX,n,Dial(SIP/1000)
exten => XXXXXX,n,Hangup()

[outgoing_calls]

; внутренние звонки
[internal]
exten => 1000,1,Dial(SIP/1000)
exten => 1000,n,Congestion()
exten => 1000,n,Hangup()

exten => 2000,1,Answer
exten => 2000,n,Playback(vm-goodbye)

exten => _9.,1,Verbose(1, 'dial via neofon')
exten => _9.,n,Dial(SIP/utel/${EXTEN:1})

sip.conf:

[general]
tcpenable=yes
srvlookup=yes
localnet=192.168.1.0/255.255.255.0
enterip=xxx.xxx.xxx.xxx
nat=yes
allowguest=no
; работают обе строчки но если писать neofonXXXXXX в место XXXXXX, тогда отказ авторизации
;register = tcp://neofonXXXXXX:YYY@tumenngn.usi.ru/XXXXXX
register = tcp://XXXXXX:YYY:neofonXXXXXX@tumenngn.usi.ru/XXXXXX

[XXXXXX]
type=user
secret=YYY
username=XXXXXX
fromuser=neofonXXXXXX
context=incoming_calls
canreinvite=no

[utel]
disallow=all
username=neofonXXXXXX
type=peer
secret=YYY
quality=yes
insecure=invite,port
host=tumenngn.usi.ru
fromuser=XXXXXX
fromdomain=tumenngn.usi.ru
dtmfmode=auto
canreinvite=yes
allow=alaw
allow=ulaw
context=incoming_calls
nat=yes

[1000]
type=friend
context=internal
host=dynamic
secret=123
deny=0.0.0.0/0
permit=192.168.1.0/24

Вот это кусок debug'а:

<------------>
    -- Executing [989222ZZZZZZ@internal:1] Verbose("SIP/1000-00000000", "1, 'dial via neofon'") in new stack
  'dial via neofon'
    -- Executing [989222ZZZZZZ@internal:2] Dial("SIP/1000-00000000", "SIP/utel/89222ZZZZZZ") in new stack
  == Using SIP RTP CoS mark 5
Audio is at 5060
Adding codec 0x4 (ulaw) to SDP
Adding codec 0x8 (alaw) to SDP
Adding non-codec 0x1 (telephone-event) to SDP
Reliably Transmitting (NAT) to 62.148.237.159:5060:
INVITE sip:89222ZZZZZZ@tumenngn.usi.ru SIP/2.0
Via: SIP/2.0/UDP xxx.xxx.xxx.xxx:5060;branch=z9hG4bK5ea102e2;rport
Max-Forwards: 70
From: "yo" <sip:XXXXXX@tumenngn.usi.ru>;tag=as2531f685
To: <sip:89222ZZZZZZ@tumenngn.usi.ru>
Contact: <sip:XXXXXX@xxx.xxx.xxx.xxx:5060>
Call-ID: 6e77cd0a034eea3822e170936850ea14@tumenngn.usi.ru
CSeq: 102 INVITE
User-Agent: Asterisk PBX 1.8.5.0-1digium1~squeeze
Date: Tue, 23 Aug 2011 11:35:43 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Content-Type: application/sdp
Content-Length: 281

v=0
o=root 1575581397 1575581397 IN IP4 xxx.xxx.xxx.xxx
s=Asterisk PBX 1.8.5.0-1digium1~squeeze
c=IN IP4 xxx.xxx.xxx.xxx
t=0 0
m=audio 17958 RTP/AVP 0 8 101
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=ptime:20
a=sendrecv

---
    -- Called SIP/utel/89222ZZZZZZ

<--- SIP read from UDP:62.148.237.159:5060 --->
SIP/2.0 100 Trying
From: "yo"<sip:XXXXXX@tumenngn.usi.ru>;tag=as2531f685
To: <sip:89222ZZZZZZ@tumenngn.usi.ru>
Call-ID: 6e77cd0a034eea3822e170936850ea14@tumenngn.usi.ru
CSeq: 102 INVITE
Via: SIP/2.0/UDP xxx.xxx.xxx.xxx:5060;rport=1029;branch=z9hG4bK5ea102e2
Content-Length: 0

<------------->
--- (7 headers 0 lines) ---

<--- SIP read from UDP:62.148.237.159:5060 --->
SIP/2.0 487 LR2 - User not registered on this client
From: "yo"<sip:XXXXXX@tumenngn.usi.ru>;tag=as2531f685
To: <sip:89222ZZZZZZ@tumenngn.usi.ru>;tag=1011993032
Call-ID: 6e77cd0a034eea3822e170936850ea14@tumenngn.usi.ru
CSeq: 102 INVITE
Via: SIP/2.0/UDP xxx.xxx.xxx.xxx:5060;rport=1029;branch=z9hG4bK5ea102e2
contact: <sip:89222ZZZZZZ@tumenngn.usi.ru:5060;maddr=62.148.237.159>
supported: com.nortelnetworks.firewall,p-3rdpartycontrol,nosec,join
Content-Length: 0