diff --git a/resources/templates/conf/sip_profiles/external-ipv6.xml.noload b/resources/templates/conf/sip_profiles/external-ipv6.xml.noload
index 88535e7ddf..d41740e9f4 100644
--- a/resources/templates/conf/sip_profiles/external-ipv6.xml.noload
+++ b/resources/templates/conf/sip_profiles/external-ipv6.xml.noload
@@ -57,6 +57,10 @@
 		<param name="inbound-codec-negotiation" value="generous"/>
 		<param name="nonce-ttl" value="60"/>
 		<param name="auth-calls" value="true"/>
+		<param name="auth-subscriptions" value="true"/>
+		<!-- on authed calls, authenticate *all* the packets not just invite -->
+		<param name="auth-all-packets" value="false"/>
+
 		<!-- ip address to use for rtp, DO NOT USE HOSTNAMES ONLY IP ADDRESSES -->
 		<param name="rtp-ip" value="$${local_ip_v6}"/>
 		<!-- ip address to bind to, DO NOT USE HOSTNAMES ONLY IP ADDRESSES -->