Клиент за нат, регистрация 403 Forbidden

Посмотрите, пожалуйста, лог и подскажите куда копать. В консоли ругается Wrong password, но пароль 100% верный.

[nat-test]
type=friend
host=dynamic
nat=yes
qualify=300
insecure=port,invite
context=from-nat-test
dtmfmode=info
canreinvite=no
disallow=all
allow=alaw
call-limit=1
username=111
secret=12345

Via: SIP/2.0/UDP 10.0.0.10:54463;branch=z9hG4bK-d8754z-881d3976c34b9200-1---d8754z-;rport
Max-Forwards: 70
Contact: <sip:111@173.194.32.136:62603;transport=UDP;rinstance=41ef901a52799e95>
To: "111"<sip:111@77.88.21.3:5060>
From: "111"<sip:111@77.88.21.3:5060>;tag=120f6e63
Call-ID: ZDNiZjQ5ZDZkNDc4NDJmNWQ5NjZlNjJkNjMxMTlmNjA.
CSeq: 1 REGISTER
Expires: 120
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE
Supported: replaces
User-Agent: 3CXPhone 6.0.26523.0
Content-Length: 0

SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.0.0.10:54463;branch=z9hG4bK-d8754z-881d3976c34b9200-1---d8754z-;received=173.194.32.136;rport=62604
From: "111"<sip:111@77.88.21.3:5060>;tag=120f6e63
To: "111"<sip:111@77.88.21.3:5060>;tag=as623da919
Call-ID: ZDNiZjQ5ZDZkNDc4NDJmNWQ5NjZlNjJkNjMxMTlmNjA.
CSeq: 1 REGISTER
Server: Asterisk PBX 1.8.15-cert2
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="27140108"
Content-Length: 0

REGISTER sip:77.88.21.3:5060 SIP/2.0
Via: SIP/2.0/UDP 10.0.0.10:54463;branch=z9hG4bK-d8754z-c10d723e104bfa01-1---d8754z-;rport
Max-Forwards: 70
Contact: <sip:111@173.194.32.136:62603;transport=UDP;rinstance=41ef901a52799e95>
To: "111"<sip:111@77.88.21.3:5060>
From: "111"<sip:111@77.88.21.3:5060>;tag=120f6e63
Call-ID: ZDNiZjQ5ZDZkNDc4NDJmNWQ5NjZlNjJkNjMxMTlmNjA.
CSeq: 2 REGISTER
Expires: 120
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE
Supported: replaces
User-Agent: 3CXPhone 6.0.26523.0
Authorization: Digest username="111",realm="asterisk",nonce="27140108",uri="sip:77.88.21.3:5060",response="b80c959e96ab4f25dccbdd1e9e5ac7ef",algorithm=MD5
Content-Length: 0

SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 10.0.0.10:54463;branch=z9hG4bK-d8754z-c10d723e104bfa01-1---d8754z-;received=173.194.32.136;rport=62604
From: "111"<sip:111@77.88.21.3:5060>;tag=120f6e63
To: "111"<sip:111@77.88.21.3:5060>;tag=as623da919
Call-ID: ZDNiZjQ5ZDZkNDc4NDJmNWQ5NjZlNjJkNjMxMTlmNjA.
CSeq: 2 REGISTER
Server: Asterisk PBX 1.8.15-cert2
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Content-Length: 0