Ben
10/21/2025, 11:34 AMVapi Support Bot
10/21/2025, 11:35 AM44.229.228.186/32
- 44.238.177.138/32
Allowlisting these IPs is required for proper SIP signaling and media flow between Vapi and your SIP provider, and missing this step can cause connection failures ([Vapi SIP Trunk documentation](https://docs.vapi.ai/advanced/sip/sip-trunk)).
Once confirmed, I can suggest the next troubleshooting step.
Source:
- [Vapi SIP Trunk documentation](https://docs.vapi.ai/advanced/sip/sip-trunk)Ben
10/21/2025, 11:45 AMGIDEON
10/21/2025, 2:19 PMBen
10/22/2025, 2:53 AMGIDEON
10/22/2025, 5:55 AMGIDEON
10/22/2025, 9:53 AMGIDEON
10/22/2025, 9:55 AMChiranjeet Mishra
10/23/2025, 1:11 AM{
"provider": "byo-sip-trunk",
"name": "My SIP Trunk",
"gateways": [
{
"ip": "sip.provider.com",
"port": 5060,
"outboundEnabled": true,
"inboundEnabled": false,
"outboundProtocol": "udp"
},
{
"ip": "203.0.113.10",
"port": 5060,
"outboundEnabled": false,
"inboundEnabled": true
}
]
}
Once you have configured the SIP trunk, you will receive a value for credentialId. Save that and use it for the next step of assigning the SIP trunk to a phone number, as that is a required value for setting up the phone number.
If you encounter any issues with the setup, please feel free to reach out.Ben
10/23/2025, 5:07 AMChiranjeet Mishra
10/24/2025, 11:28 PM203.0.113.10 value in my example was just a placeholder to show that this field requires an IP address (and not a domain name).
Once you’ve set it to your provider’s IP, the configuration should work as expected.
Best,
KyleBen
10/25/2025, 8:38 AMChiranjeet Mishra
10/29/2025, 1:58 AMBen
10/29/2025, 3:08 AMChiranjeet Mishra
10/30/2025, 11:44 PMBen
11/04/2025, 12:16 PMChiranjeet Mishra
11/06/2025, 4:20 AMBen
11/07/2025, 8:32 AMBen
11/12/2025, 1:31 PMBen
11/13/2025, 2:20 AMBen
11/14/2025, 1:57 AMChiranjeet Mishra
11/15/2025, 2:24 AMBen
11/18/2025, 8:05 AMChiranjeet Mishra
11/25/2025, 7:42 AMBen
12/02/2025, 12:19 PMBen
12/08/2025, 11:27 AMChiranjeet Mishra
12/11/2025, 1:26 AMBen
12/11/2025, 2:39 AMChiranjeet Mishra
12/13/2025, 1:59 AMsip:+81367470237@sip.vapi.ai
- Vapi correctly responds with 401 Unauthorized (this is expected as part of SIP digest authentication).
- However, Biztel does not retry the INVITE with authentication, because it cannot match the SIP realm.
Root cause: For BYO SIP Trunks, Vapi requires the credential ID to be included in the SIP hostname. This is how Vapi identifies the correct trunk, organization, and authentication realm.
Currently, the credential ID is missing from the SIP URI, so authentication fails.
Correct SIP URI format (required):
sip:+81367470237@e52af04e-3899-4bc8-9330-46b2be953deb.sip.vapi.ai
What Biztel needs to change: Update their Asterisk/SIP configuration to use the credential ID in the hostname.
Example Asterisk dialplan change:
Current (incorrect):
Dial(SIP/+81367470237@sip.vapi.ai,,)
Correct:
Dial(SIP/+81367470237@e52af04e-3899-4bc8-9330-46b2be953deb.sip.vapi.ai,,)
Or, if using a SIP peer:
host=e52af04e-3899-4bc8-9330-46b2be953deb.sip.vapi.ai
Why this fixes it:
- Each BYO SIP Trunk has a unique SIP realm: <credential_id>.sip.vapi.ai
- Once Biztel sends the INVITE to that hostname, Asterisk will correctly respond to the 401 challenge with authentication
- The call should then proceed normally (401 → authenticated INVITE → 200 OK)
This behavior is expected and required for BYO SIP Trunk routing and authentication.
Let us know once Biztel updates the configuration, or if you’d like us to review another SIP trace after the change.
Best,
KyleBen
12/15/2025, 1:52 AMBen
12/23/2025, 7:04 AM