7942G VPN on CUCM 8.6

I've followed the steps listed on the page of:
http://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/115785-anyconnect-vpn-00.html
and the user has successfully downloaded the LSC file when the phone was connected to the LAN (LSC status: Upgrade Success).
When the users takes the phone home and plugs it into her home network, it starts up, says, "Registering", then "Configuring IP", and then displays a date/time that is years off, and then cycles through it all again.
I've looked through the application, syslog, and sdi and I don't see much along the line of it failing to register during the timeframe when I know it should have shown up.
I don't understand the output the the phone is giving. Any ideas?

Make sure you have hard set the alternate TFTP on the phone. Do you have auto network detect enabled on the VPN profile? If not, the user needs to manually go into the settings to try to connect to the VPN.
You'll want to pull the console logs from the phone's webpage as these have detailed information about the VPN connection attempt and why it fails if it attempts to connect at all. Completely reboot the phone removing power as well then boot it up and pull the logs after 5 minutes. That should show the full process of the phone booting up, reading in the VPN config, and then trying to connect.
Edit: You'll need to access the phone's webpage using the local IP address from a PC connected to the same remote router. If web access isn't currently enabled, you'll need to bring the phone back into the LAN to enable web access first.

Similar Messages

Cisco DX650 CUCM registration over VPN

Hi
i've installed a CUCM 9.1.2 cluster with Cisco 8945s, Cisco 9971s all running SIP Protocol. We have introduced the Cisco DX650 into the voice network, and all features are working normal on the Local LAN. We are now testing the DX650 for a remote worker. the Problem i'm seeing is that the DX650 will VPN into the network, email, Jabber, Calendar, Internet all work fine and is on the network via VPN. the one issue is that the DX650 will not register with Call Manager. we have allowed all the necessary ports through the firewall. i've tested with Cisco IP Communicator and it registers fine for the remote worker, but the DX650 will not register.
What can I do to troubleshoot this or see where it's getting hung up at? I want to see logs which shows the DX650 making an attempt or not.
Any ideas??

I am setting up my first Dx650 across the VPN and I am having the same problem. I used the exact same Anyconnect path and account I use for my iPhone Jabber instance but the DX will not register. If I move it into the PtoP VPN network, it registers just fine. But when on an open internet with Anyconnect, the phone won't register.
What do I look at?
Sent from Cisco Technical Support iPhone App

IP Phone SSL VPN to ASA for multiple CUCM (CallManager)

hi all,
I have a case to support multiple CallManager clusters in different locations for internet SSL VPN IP Phone. We will deploy one ASA firewall for SSL VPN IP Phone connections. So, can we use single ASA firewall for mulitple CUCM clusters?? In order words, Internet IP Phone will connect to different CUCM via a single ASA firewall (by using SSL VPN).
I tested I need to upload the ASA's certificate into CUCM and upload CUCM's certificate into ASA for one ASA to one CUCM. If I create multiple profile (e.g. different URL for phone logins) for different CUCM. Is it possible to do that?
thanks for your input!
Samuel

Samuel,
Did you ever find an answer to your question? I have a similar scenario.
Any input would be appreciated.

CUCM 8.6 VPN Advance Feature Missing

As per the title, i have installed Cisco UCM 8.6. I am deploying SSL VPN on the router and Cisco IP-Phones as SSL client to be connected to CUCM.
I cannot find any VPN service/feature in CUCM 8.6 which i have recently installed. There is no VPN option under Advance features under CUCM OS administration. Also during issuer cert upload, there is no Phone-VPN-Trust.
Either i am missing a license feature here or might be some thing to do with Demo. Can one kindly assist me this .Regards.

Thnx for the prompt response. Can you kindly tell me how to find out whether its restricted or not.
I am just saying its going to support 15 VoIP phone as i have not installed the licenses. and what do u mean by HTH and Java?
I cannot find any other feature missing from CUCM other than VPN

7942s randomly lose connection to CUCM Thru VPN Tunnel

One of my remote branches has 7 7942s plugged into a 2960 POE and then to a 2901. The computer are connected to the telephone tandum.
1.All the phones dont drop at the same time (maybe 2 or 3 together)
2.The VPN Tunnel never drops when the phones lose the CUCM.(Computers are still online and able to see the network on other side of tunnel)
3.The computer that is connected to the dropped phone does not lose connectivity to the inside network or thru the vpn tunnel (whether in fallback mode or connected or in transit)
4. when a couple of phones are down, I can reach both CUCMs. (Publisher and Subscriber)
Any help would be appreciated.

Hi Earl,
Try to do wire shark and see if you can capture anything.
Its looks like keep live message dropping some where before they reaching phones. Is there high utilization on site?
Check if any firewall filtering packets.
Phone reboots itself and tries to register again. Check interface if there is any watchdog timers error.
Please do rate if the given information helps
Thanks

CUCM 8 demo - there is no advance features VPN

Hi,
I have just installed
CUCM_UNRST_8.6.2.10000-14 on VMWare
Questions :
- There is no advance features -> VPN
is that something that not availabile on demo license ?
Thanks

Hi David,
The newer versions of the Security guide do show this caveat/restriction
Note The VPN menu and its options are not available in the U.S. export unrestricted version of Cisco Unified Communications Manager. We see from above that you have installed the unrestricted version so this is why you are hitting this;
CUCM_UNRST_8.6.2.10000-14
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/security/8_6_1/secugd/secuvpn.html
Cheers!
Rob
"go easy...step lightly...stay free "
- The Clash

CUCM Jabber iPhone 9.1.1 VPN unexpected Disconnect

Hi like-minded :-),
We Setup a CUCM 9.1.1. with iPhones Jabber 9.1 as TCT Device and the iPhone Device Register at CUCM via Wifi and VPN. All works fine, also Dial via Office, Dial via Internet and Dial Automaticly.
Also, when we move from Wifi to VPN during an active Call, the call are not drop. Also good!
Also when have only VPN active and VPN goes down for a short time, when VPN comes back, the call is still there.
Means in all cases the active call is in hold, when Wifi or VPn goes down for a short time.
But one thing I had expected, but it will not work.
When the iPhone is in a active call via VPN or Wifi and both goes unexpected down, that CUCM hold the Call and Call me back at my iPhones via mobile network.
This will not work. The call is in hold for a period of time and then goes in disconnect.
Knows someone is this normal, or something is configure wrong?
THX in advance

Hi,
Have you checked that the Jabber Voice application has access to the iPhone microphone, when first running the app users may get a prompt to give the app access to it. This could explain why normal calls work.
You can check this by accessing General Settings > Privacy > Microphone

Jabber call to voice mail fails with fast busy over VPN

I have an issue that I ran into with CIPC phones over a VPN. If a CIPC phone called over a VPN and started ringing a phone the call would fail with fast busy at the time the call would be forwarded to voicemail. I found the issue was when remote the CIPC phone would negotiate the g.729 codec, when forwarded to a voicemail pilot over a SIP trunk set to g.711 the call would fail due to codec missmatch when no transcoders are present.
So now I am running into what I believe to be the same issue with Jabber, when on premise the calls to voice mail work just fine, but when remote they fail. I can directly call the voicemail pilot without error, but if calling a phone the call gets fast busy at the point we are forwarded to voicemail. Even though all my regions are set to talk to all other regions on G.711 and the voicemail SIP trunk is set to G.711, I believe with the new features in CUCM9 that a lower speed codec has been negotiated since the we are going over the VPN, or Jabber has done this as it knows it's over VPN (not sure). WIth CIPC I could go into the settings and turn off the Optimize for Bandwidth check box and the call would negotiate G.711. With Jabber I can't find anything that would tell my Jabber client to stay on G.711 and I can only imagine this is a codec missmatch as the following are true.
1. CIPC and Jabber share the same line
2. VPN established and CIPC optimised for low bandwidth un-checked
3. Over the same VPN the CIPC phone can leave a voicemail
4. Over the same VPN the Jabber client gets fast busy once forwarded to voicemail
5. Voicemail environment is Exchange-UM over SIP trunk
6. SIP trunk is assigned a Device Pool, that is assigned to a region that all other regions communicate G.711 to
7. On CIPC if optimised for low bandwidth is checked I get the exact same issue as I get with the Jabber client (fast busy when forwarded to voicemail)
Would anyone know what I can do in CUCM 9 to fix this issue, as said no issue when all devices are on premise. Wondering if there is a service parameter or a way to change the codec selection so the Jabber client attempts to always negotiate G.711. The correct answer would be to get some PVDM DSP resources and kick up a transcoder in my resource group, and that may be what I talk them into doing if I have no other options.

We have been getting the exact same thing for almost a year now... since switching to FiOS Digital Voice in May of last year! Every time I call in to report it they 'escalate' the issue but it never gets resolved. The problem seems to be in the initial connection. Most of the time it works fine but, several times a month, after I call to get messages and it starts to play the new message it goes dead and I get the busy signal. I get the same message when I call back: “I’m sorry – that account is in use at this time. Please try again later!” I have even called in with my cell phone and get the same message! I HAVE EVEN used the Internet to see if I could get my messages and, when I hit Play, I get a pop-up saying: “Your Voice Mail box is currently in being accessed; please try again later. If the problem continues, please contact our Customer Support Center at 1-888-553-1555. We apologize for any inconvenience.” This is obviously a software bug that Verizon has no clue on how to troubleshoot OR fix!!! I wonder how many people have the problem and just don’t bother reporting it because of the hassle? When it first started happening they destroyed my entire mailbox and I had to re-enter the complete mailbox setup again – 3 times!!! NEVER let them talk you into that!!! It’s their problem and they need to fix it!!!!!!! I wish I could go back to the ‘normal’ voicemail we originally had… they want hundred$ to switch back because I’d be breaking my #$@%^&* contract! Good luck if you have Verizon………

Phone Service disconnected over VPN

Hello,
I'm using Version 9.2.1 (147214) of Jabber for OS X and I'm using a VPN to connect to my work network with AnyConnect Secure Mobility Client.
My issue is that Phone Services are disconnected while the Voicemail and Meeting Accounts are functioning as expected.
My server settings are configured automatically, and I'm using the same saved credentials that work when I'm at the office.
Any ideas?
- Ken

This issue is fixed.
Once I changed the automatic configuration of the CCMCIP from an IP address to the hostname that my CUCM uses, my phone service registered across the VPN.

Cisco phone proxy will support on cucm 8.6 or not

Hi as per document i can see that Cisco phone proxy . Without using vpn connect . Customer want to keep configured Cucm on there Jabber or cisco mobile on the iphone and need to get connected when ever they have an internet access .
And also by keeping a small end router at branches havin only one cisco phone needs to connect to the corprate office using proxy.
Is that possible and also is it possible on 8.6 cucm version . Here am just attaching a document info which says version supported
Supported Cisco UCM and IP Phones for the Phone Proxy
Cisco Unified Communications Manager
The following release of the Cisco Unified Communications Manager are supported with the phone proxy:
•Cisco Unified CallManager Version 4.x
•Cisco Unified CallManager Version 5.0
•Cisco Unified CallManager Version 5.1
•Cisco Unified Communications Manager 6.1
•Cisco Unified Communications Manager 7.0

I understand the VPN solution is a good one, but we have already 100 proxy phones deployed and from what I read I'd need to first set up a VPN phone on the cluster before deploying it in the field. This would be difficult to do with users all over the country. Or am I missing something?
I have a question about our ASA though if anyone can answer it. We have to move from an ASA 5510 to a 5520 due to the 100 UC proxy-phone license limitation (even though we have 70 phones it appears that a UC license is taken up for each TFTP server configured on the phone - primary and secondary). When I configured the 5520 I can register new phones no problem. None of the existing phones will register until the CTL file is manually deleted on each phone. Is there a way to seamlessly migrate to the 5520? Such as using the same certs, CTL file etc.. on the 5520? When I configured it it generated it's own self-signed key and CTL file. I did import the certificates from CUCM...

Jabber cannot Call - Integration with CUCM/AD

Dear all,
I installed CUCM 9.1.1 and CUPS 9.1.1 with Jabber client 9.0.1.
when I run Jabber on a joined domain PC (login with AD username and password), there are no problem with the calling ability.
But when I try to use a non-join domain PC (I am using VPN to connect to office network and using my personal PC), only the chatting feature that are available. I cannot loggin to phone accounts and cannot make any calls with my Jabber client.
Should I use UDS integration with AD?
Thanks,
Hasan

Hi Hasan,
Can you take a look on this thread:
https://supportforums.cisco.com/message/3914353#3914353
If you still have problem connecting, can you try with newer version of Jabber?
Regards,
Srdjan

Jabber on iphone connects no audio with VPN

I recently upgraded my Cisco call manager so I could leverage the Cisco jabber client. Once installed and configured on my LAN it was flawless. We are just using the soft phone feature on iPhone . After installing the Cisco any connect mobile VPN client I was able to connect The jabber client to my call manager. I can place a call when the other party picks up the line goes silent. I hear a ring and then nothing.
Call manger is 7.1.5 ( the last 7 versions not 100% sure)
Asa5520
Any ideas?
Sent from Cisco Technical Support iPad App

Hi Kurt,
Is the ASA allowing the RTP packets to go through? Can you check if the RTP ports are open?
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/port/8_0_2/portlist802.html
Jorge Armijo
Please remember to rate helpful responses and identify helpful or correct answers.

Jabber for iphone with CUCM 8.5

Hello,
I did the config on the CUCM for my iphone so now jabber on my iphone is connected succesfuly to the CUCM and everythings works well except desk phone intergration, I followed the process below descripted on the Cisco site but cannot understand the step below (underlined)
http://www.cisco.com/en/US/docs/voice_ip_comm/jabber/iPhone/8.6/JABI_BK_J29330BB_00_jabber-for-iphone-admin-guide_chapter_011.html#JABI_TK_E9D245B2_00
Step 1
Sign in to the Unified CM Administration portal.
Step 2
Navigate to the device page.
•a. In the Device Information section, click Device Association and search for the desk phone you want to associate with the mobile device.
(here my question is which device they are talking about? We have device profile for each user and we have mobility on our company and we can connect to any phone on our company with our profile, and in our CUCM I cannot find Device information or Device Association field??
•b. Select the device you want to associate with the mobile device, and click Save Selected/Changes.
•c. Navigate back to the End User page.
•d. Ensure that the Allow Control of Device from CTI check box is checked.
•e. Select the primary extension for the desk phone you want to associate with the mobile device.
•f. In the Permissions Information section, add Standard CTI Enabled to the User Groups list.
For 8900 and 9900 series phones, also add Standard CTI Allow Control of Phones supporting Connected Xfer and conf.
•g. Note the user ID of this user for use later in this procedure.
•h. Select Save.
Step 3
Navigate to the Device Information page for the desk phone you want to associate with the mobile device.
•i. Verify that the value for Owner User ID is the correct end user.
•j. Ensure that the Allow Control of Device from CTI check box is checked.
If this option does not appear in the Device Information section of the Phone Configuration window, the phone does not support this feature.
•k. Select Save.
Step 4
Navigate to the Cisco Dual Mode Device for iPhone page.
•l. Verify that the value for Owner User ID is the correct end user.
•m. In the Product Specific Layout Configuration section, for CTI Control Username, enter the user ID from the End User page.
•n. Select Save.
Step 5
Navigate to the Directory Number Information page and verify:
the Allow Control of Device from CTI check box is checked
the Associated Devices box displays the desk phone and the mobile device
Step 6
Restart the mobile device and the desk phone.
Thanks for your help
Bel

Hello,
By 'Use Mobile Network' I am assuming that you want to transfer the VoIP call to GSM using the Mobility Softkey on the iPhone. There are a couple of defects that you should be aware of when using this functionality:
1) CSCtu15500 - Call drop after user handoff VoIP call to mobile using Anyconnect (VPN)
2) CSCty91386 - Client can't handle send-to-mobile message
Workarounds: For the first defect, if you are using AnyConnect (VPN), please try transfer to mobile, with out using VPN. The the second defect, you must use the US English as the User Locale.
HTH,
--Vincent

Jabber for IPhone over AnyConnect VPN calls to SIP Gateway - One Way Audio

Hello,
I am wondering if anyone has seen this before. I have the latest version of Anyconnect for the IPhone and Jabber app, running on the newest version of CUCM 8.6 and Jabber 8.6.
The Jabber phone registers fine and I can make internal calls without an issue. I also can make external calls to H323 and HGCP PRI gateways without an issue. However, when I make a call from the Jabber client that goes out a SIP gateway and SIP trunk I get one way audio. I do not see any packets even trying to leave inside interface of the ASA headed toward the SIP trunk IP.
I've also verified that useing the same VPN profile I can make 2 way audio calls out the SIP trunk from a softphone running on windows.
Anyone have any ideas what could be the problem?
Thanks.

Hi,
try to disable early media on 180 under sip profile settings for jabber client.
HTH
Anas
please rate if itnis helpful
Sent from Cisco Technical Support Android App

Jabber for IPhone/IPad and Anyconnect VPN

I have just setup Jabber for iPhone and iPad in a CUCM 8.6/Presence 8.6 enviornment. Works great when on my wireless network at work.
The problem I have is that it doesn't work with Anyconnect VPN. Running 8.4 code and can access the CUPS website from the iPhone/iPad when on vpn. It just will not connect the Jabber clients. I have attached the logs for review.
There is only one difference in our wireless connectivity and VPN connectivity that I can think of at this point. Could it be my DHCP configuration not offering option 150 for tftp on the VPN? I am using a local pool on the ASA but it doesn't offer option 150 for tftp.

It's been a while so I don't recall exactly what I did. That said: I want to say that I connected it via the wireless network to let it pull down it's configuration and after it pulled down the initial configuration I was good to go on VPN.

7942G VPN on CUCM 8.6

Similar Messages

Maybe you are looking for