Cisco 9971 phone over VPN

Hi
I am trying to set up a anyconnect VPN for Cisco 9971, so that I can use it at home. the tunnel has up, I've tested it but Phone got the following error message:
11:56:11 Updating Trust List
11:56:11 Trust List updated
11:56:12 SEP0011111111.cnf.xml.sgn (HTTP)
11:56:13 VPN Error: VPN is not Configured.
12:14:40 Reset requested by CUCM
12:15:14 DNS Timeout
12:15:14 Updating Trust List
12:15:14 Trust List updated
12:15:15 SEP0011111111.cnf.xml.sgn (HTTP)
12:15:16 VPN Error: VPN is not Configured.
Any help would be appreciated.
By the way, this is a SIP phone.

Hi,
You can purchase the phone proxy license. This elimiates the need to build a VPN tunnel for voice traffic.
It is not mandatory to purchase this license however.
From the ASA configuration guide:
http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/unified_comm_phoneproxy.html#wp1144845
"The Cisco Phone Proxy on the adaptive security appliance bridges IP telephony between the corporate IP telephony network and the Internet in a secure manner by forcing data from remote phones on an untrusted network to be encrypted. "
Don't forget to rate all posts that are helpful.

Similar Messages

ASA license for Cisco IP Phone over VPN

Hi,
Are there special licenses required on the ASA to use Cisco IP Phones (Hard phone) over SSL VPN connection?
Thanks

Hi,
You can purchase the phone proxy license. This elimiates the need to build a VPN tunnel for voice traffic.
It is not mandatory to purchase this license however.
From the ASA configuration guide:
http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/unified_comm_phoneproxy.html#wp1144845
"The Cisco Phone Proxy on the adaptive security appliance bridges IP telephony between the corporate IP telephony network and the Internet in a secure manner by forcing data from remote phones on an untrusted network to be encrypted. "
Don't forget to rate all posts that are helpful.

Configuring Cisco 8800 phones for VPN

Does anyone know how to configure 8800 phones for VPN? I am particularly interested on 8861/8851 models.
Thanks,
Carlos

So I opened a TAC case and they provided me with the solution:
"Usually you upload the Cisco_Manufacturing_CA certificate on the ASA but with the new models we should upload the Cisco_Manufacturing_CA_SHA2 creating a new trustpoint on the ASA"
The security guide does not specify about this cert, it only mentions Cisco_Manufacturing_CA .
Thanks,
Carlos

Problem with IP phone over VPN

         |   UC520   | ------------------------ |     861     |
                 |                                                  |
              LAN                                             LAN
Scenario:
UC520 box is at HQ and serving as a EZVPN server and 861 at branch as a EZVPN client. There is no problem with VPN i can communicate with HQ network. My ip phone get registered but facing these problems.
1) Dialling out and in OK
2) Connects OK after picking up
3) NO sound either way
4) Cannot end call from this side. End call button does not work
5) When other end hangs up - message "UCM down, features disabled". Then phone registers again.
Identical symptoms for both softphone and 7941.

This document provides a sample configuration for Quality of Service (QoS) for Voice over IP (VoIP) traffic on VPN tunnels that terminate on the PIX/ASA Security Appliances.
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008080dfa7.shtml

Cisco IP Phone 7965 VPN Requirements

We are currently running CUCM System version: 8.6.2.21900-5. We are having issues setting up and getting IP phones to connect from some employee homes. We have the licensing, and I know the setup works as I have been able to successfully confingure & connect several phones to our PBX from my home network.
What I cannot seem to find is a list of routers that are or are not compatible with the IP phone/vpn. I also need to find "checklist" of what to look for or what should be set up on a home network to make this setup for the users and IT staff easier.
I should note, that these users report that they can connect to our vpn fine via Anyconnect and their computers. 1 user even had access to other routers and on the 3rd router was able to get a connection and place a call.
I am in the process of getting the home router/modem make and models from these users if it helps.

There is no such list. Phone uses SSL VPN that are regular TCP/UDP packets so nothing special in that for the home router and any should work.

Cisco SIP Phone 9971 won't register on CME 8.6 or 8.5 Please HELP

Please help me , I have problem with registering Cisco SIP phone 9971 with CME 8.6 on ISR 2901.
I configured CME for SIP clients, then I add configuration for 9971 phone and create profiles. Phone downloaded SEP...xml file from CME,after that phone look for g4-tones.xml and gd-sip.jar files, I added them to CME after that phone downloaded them and reboot. Now phone is stuck in some kind of loop and does not register on CME.
On phone log I can see repeting next few messeges.
12:01:58a No DNS Server IP
12:01:59a Updating Trust list
12:01:59a No Trust List instaled
12:01:59a SEP04C5AB03B0D.cnf.xml (TFTP) // at this time phone download SEP...xml file from CME
12:02:00a VPN Error: VPN is not Configured
on CME if issue DEBUG TFTP EVENTS i receive next few lines
*Aug 18 18:20:19.891: TFTP: Looking for CTLSEP04C5A4B03B0D.tlv
*Aug 18 18:20:19.987: TFTP: Looking for ITLSEP04C5A4B03B0D.tlv
*Aug 18 18:20:20.083: TFTP: Looking for ITLFile.tlv
*Aug 18 18:20:20.347: TFTP: Looking for SEP04C5A4B03B0D.cnf.xml
*Aug 18 18:20:20.351: TFTP: Opened flash:/SEP04C5A4B03B0D.cnf.xml, fd 14, size 4585 for process 141
*Aug 18 18:20:20.363: TFTP: Finished flash:/SEP04C5A4B03B0D.cnf.xml, time 00:00:00 for process 141
here you can see verison info of CME
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Thu 24-Mar-11 15:31 by prod_rel_team
ROM: System Bootstrap, Version 15.0(1r)M9, RELEASE SOFTWARE (fc1)
ELTOSAN_ROUTER uptime is 1 hour, 50 minutes
System returned to ROM by reload at 16:29:20 UTC Thu Aug 18 2011
System image file is "flash:/c2900-universalk9-mz.SPA.151-4.M.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command
Cisco CISCO2901/K9 (revision 1.0) with 471040K/53248K bytes of memory.
Processor board ID FGL1508252Y
3 Gigabit Ethernet interfaces
2 terminal lines
1 Virtual Private Network (VPN) Module
4 Voice FXO interfaces
4 Voice FXS interfaces
1 Internal Services Module (ISM) with Services Ready Engine (SRE)
   Survivable Remote Site Voicemail (SRSV) on Cisco Unity Express (CUE) 8.5.1 in slot/sub-slot 0/0
DRAM configuration is 64 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
254464K bytes of ATA System CompactFlash 0 (Read/Write)
License Info:
License UDI:
Device#   PID                   SN
*0        CISCO2901/K9          xxxxxxxxxxxxx
Technology Package License Information for Module:'c2900'
Technology    Technology-package          Technology-package
              Current       Type          Next reboot
ipbase        ipbasek9      Permanent     ipbasek9
security      securityk9    Permanent     securityk9
uc            uck9          Permanent     uck9
data          None          None          None
Configuration register is 0x2102
this is RUNNING CONFIGURATION
! Last configuration change at 16:10:12 UTC Thu Aug 18 2011
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname ELTOSAN_ROUTER
boot-start-marker
boot system flash:/c2900-universalk9-mz.SPA.151-4.M.bin
boot-end-marker
no aaa new-model
no ipv6 cef
ip source-route
no ip routing
no ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.5.1 192.168.5.10
ip dhcp excluded-address 192.168.5.200 192.168.5.255
ip dhcp pool phone
   network 192.168.5.0 255.255.255.0
   default-router 192.168.5.251
   option 150 ip 192.168.5.251
ip dhcp pool data
   relay source 192.168.2.0 255.255.255.0
   relay destination 192.168.2.201
multilink bundle-name authenticated
crypto pki token default removal timeout 0
voice-card 0
voice service voip
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
supplementary-service h450.12
fax protocol pass-through g711alaw
sip
registrar server expires max 3600 min 120
voice register global
mode cme
source-address 192.168.5.251 port 5060
max-dn 6
max-pool 6
load 9971 sip9971.9-1-1SR1.loads
authenticate register
tftp-path flash:
create profile sync 0005135312289902
voice register dn 1
number 207
allow watch
name GossaVM
label 207
voice register dn 3
number 101
name Dejan
label 101
mwi
voice register pool 1
id mac 000C.29C5.0011
number 1 dn 1
dtmf-relay sip-notify
username testvm password testera
codec g711alaw
voice register pool 3
id mac 04C5.A4B0.3B0D
type 9971
number 3 dn 3
presence call-list
dtmf-relay rtp-nte
username dejan password 1234
codec g711alaw
no vad
license udi pid CISCO2901/K9 sn xxxxxxxxxxxx
hw-module ism 0
hw-module pvdm 0/0
redundancy
interface GigabitEthernet0/0
description INTERFACE INTERNAL
no ip address
no ip route-cache
duplex auto
speed auto
no mop enabled
interface GigabitEthernet0/0.2
description LAN DATA
encapsulation dot1Q 2
ip address 192.168.2.251 255.255.255.0
no ip route-cache
interface GigabitEthernet0/0.5
description LAN VOICE
encapsulation dot1Q 5
ip address 192.168.5.251 255.255.255.0
no ip route-cache
interface ISM0/0
no ip address
no ip route-cache
shutdown
!Application: SRSV-CUE Running on ISM
interface GigabitEthernet0/1
no ip address
no ip route-cache
shutdown
duplex auto
speed auto
interface ISM0/1
description Internal switch interface connected to Internal Service Module
shutdown
interface Vlan1
no ip address
no ip route-cache
shutdown
ip forward-protocol nd
no ip http server
no ip http secure-server
snmp-server community public RO
tftp-server flash:dkern9971.100609R2-9-1-1SR1.sebn alias dkern9971.100609R2-9-1-1SR1.sebn
tftp-server flash:kern9971.9-1-1SR1.sebn alias kern9971.9-1-1SR1.sebn
tftp-server flash:rootfs9971.9-1-1SR1.sebn alias rootfs9971.9-1-1SR1.sebn
tftp-server flash:sboot9971.031610R1-9-1-1SR1.sebn alias sboot9971.031610R1-9-1-1SR1.sebn
tftp-server flash:skern9971.022809R2-9-1-1SR1.sebn alias skern9971.022809R2-9-1-1SR1.sebn
tftp-server flash:sip9971.9-1-1SR1.loads alias sip9971.9-1-1SR1.loads
tftp-server flash:United_States/g4-tones.xml
tftp-server flash:English_United_States/gd-sip.jar
control-plane
voice-port 0/0/0
voice-port 0/0/1
voice-port 0/0/2
voice-port 0/0/3
voice-port 0/1/0
voice-port 0/1/1
voice-port 0/1/2
voice-port 0/1/3
mgcp profile default
gatekeeper
shutdown
line con 0
line aux 0
line 67
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password jebiga
login
transport input all
end
I did not have any kind of problem with X-LITE to register to CME. also try with few SCCP phones 7940 and I did not any kind of problem .
this is content of SEP....xml file for 9971
<device>
<deviceProtocol>SIP</deviceProtocol>
<devicePool>
<dateTimeSetting>
<dateTemplate>M/D/YA</dateTemplate>
<timeZone>Pacific Standard/Daylight Time</timeZone>
<ntps>
<ntp priority="0">
<name>0.0.0.0</name>
<ntpMode>unicast</ntpMode>
</ntp>
</ntps>
</dateTimeSetting>
<callManagerGroup>
<members>
<member priority="0">
<callManager>
<ports>
<sipPort>5060</sipPort>
</ports>
<processNodeName>192.168.5.251</processNodeName>
</callManager>
</member>
</members>
</callManagerGroup>
</devicePool>
<sipProfile>
<sipProxies>
<registerWithProxy>true</registerWithProxy>
</sipProxies>
<sipCallFeatures>
<cnfJoinEnabled>true</cnfJoinEnabled>
<localCfwdEnable>true</localCfwdEnable>
<callForwardURI>service-uri-cfwdall</callForwardURI>
<callPickupURI>service-uri-pickup</callPickupURI>
<callPickupGroupURI>service-uri-gpickup</callPickupGroupURI>
<callHoldRingback>2</callHoldRingback>
<semiAttendedTransfer>true</semiAttendedTransfer>
<anonymousCallBlock>2</anonymousCallBlock>
<callerIdBlocking>2</callerIdBlocking>
<dndControl>2</dndControl>
<remoteCcEnable>true</remoteCcEnable>
</sipCallFeatures>
<sipStack>
<remotePartyID>true</remotePartyID>
</sipStack>
<sipLines>
<line button="1" lineIndex="1">
<featureID>9</featureID>
<featureLabel></featureLabel>
<proxy>USECALLMANAGER</proxy>
<port>5060</port>
<name></name>
<displayName></displayName>
<autoAnswer>
<autoAnswerEnabled>2</autoAnswerEnabled>
</autoAnswer>
<callWaiting>1</callWaiting>
<authName>dejan</authName>
<authPassword>1234</authPassword>
<sharedLine>false</sharedLine>
<messagesNumber></messagesNumber>
<ringSettingActive>5</ringSettingActive>
<forwardCallInfoDisplay>
<callerName>true</callerName>
<callerNumber>true</callerNumber>
<redirectedNumber>true</redirectedNumber>
<dialedNumber>true</dialedNumber>
</forwardCallInfoDisplay>
</line>
<line button="2" lineIndex="2">
<featureID>9</featureID>
<featureLabel>101</featureLabel>
<proxy>USECALLMANAGER</proxy>
<port>5060</port>
<name>101</name>
<displayName>Dejan Rakic</displayName>
<autoAnswer>
<autoAnswerEnabled>2</autoAnswerEnabled>
</autoAnswer>
<callWaiting>1</callWaiting>
<authName>dejan</authName>
<authPassword>1234</authPassword>
<sharedLine>false</sharedLine>
<messagesNumber></messagesNumber>
<ringSettingActive>5</ringSettingActive>
<forwardCallInfoDisplay>
<callerName>true</callerName>
<callerNumber>true</callerNumber>
<redirectedNumber>true</redirectedNumber>
<dialedNumber>true</dialedNumber>
</forwardCallInfoDisplay>
</line>
</sipLines>
<enableVad>true</enableVad>
<preferredCodec>g711alaw</preferredCodec>
<dialTemplate></dialTemplate>
<kpml>1</kpml>
<phoneLabel></phoneLabel>
<stutterMsgWaiting>2</stutterMsgWaiting>
<disableLocalSpeedDialConfig>true</disableLocalSpeedDialConfig>
<dscpForAudio>184</dscpForAudio>
<dscpVideo>136</dscpVideo>
</sipProfile>
<commonProfile>
<phonePassword>1234</phonePassword>
<callLogBlfEnabled>2</callLogBlfEnabled>
</commonProfile>
<featurePolicyFile>featurePolicyDefault.xml</featurePolicyFile>
<loadInformation>sip9971.9-1-1SR1.loads</loadInformation>
<vendorConfig>
</vendorConfig>
<commonConfig>
<videoCapability>0</videoCapability>
<ciscoCamera>0</ciscoCamera>
</commonConfig>
<sshUserId>dejan</sshUserId>
<sshPassword>1234</sshPassword>
<userId></userId>
<phoneServices>
<provisioning>2</provisioning>
<phoneService type="1" category="0">
<name>Missed Calls</name>
<phoneLabel></phoneLabel>
<url>Application:Cisco/MissedCalls</url>
<vendor></vendor>
<version></version>
</phoneService>
<phoneService type="1" category="0">
<name>Received Calls</name>
<phoneLabel></phoneLabel>
<url>Application:Cisco/ReceivedCalls</url>
<vendor></vendor>
<version></version>
</phoneService>
<phoneService type="1" category="0">
<name>Placed Calls</name>
<phoneLabel></phoneLabel>
<url>Application:Cisco/PlacedCalls</url>
<vendor></vendor>
<version></version>
</phoneService>
<phoneService type="2" category="0">
<name>Voicemail</name>
<phoneLabel></phoneLabel>
<url>Application:Cisco/Voicemail</url>
<vendor></vendor>
<version></version>
</phoneService>
</phoneServices>
<versionStamp>0131511014412102</versionStamp>
<userLocale>
<name>English_United_States</name>
<langCode>en</langCode>
</userLocale>
<networkLocale>United_States</networkLocale>
<networkLocaleInfo>
<name>United_States</name>
</networkLocaleInfo>
<authenticationURL></authenticationURL>
<directoryURL></directoryURL>
<servicesURL>http://192.168.5.251:80/CMEserverForPhone/serviceurl</servicesURL>
<dscpForSCCPPhoneServices>0</dscpForSCCPPhoneServices>
<dscpForCm2Dvce>96</dscpForCm2Dvce>
<transportLayerProtocol>2</transportLayerProtocol>
</device>

Hello,
I'm facing exactly the same problem, that is:
a Cisco SIP Phone 9971 won't register on CME 8.6 running on a 2811
I have read all the postings to this Forum, but I have not been able to solve it.
In my case the commands voice register dn and voice register pool are OK.
So frankly, I have no idea what I could be missing.
I'm pasting the Router's config.
I hope somebody is able to point me in the right direction.
Here is the config. Thank you!
C2811#sh run
Building configuration...
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname C2811
no aaa new-model
dot11 syslog
ip source-route
ip cef
ip dhcp excluded-address 172.25.140.1 172.25.140.10
ip dhcp excluded-address 172.35.140.1 172.35.140.10
ip dhcp pool Data
network 172.25.140.0 255.255.255.0
default-router 172.25.140.1
option 150 ip 172.25.140.1
dns-server 172.25.140.1
ip dhcp pool Voice
network 172.35.140.0 255.255.255.0
default-router 172.35.140.1
option 150 ip 172.35.140.1
dns-server 172.35.140.1
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
voice service voip
allow-connections sip to sip
sip
registrar server expires max 3600 min 120
voice register global
mode cme
source-address 172.25.140.1 port 5060
max-dn 40
max-pool 42
load 9971 sip9971.9-4-1-9.loads
authenticate register
authenticate realm cisco
tftp-path flash:
create profile sync 0004820400584603
voice register dn 1
number 1010
allow watch
name Phone10
label Phone10
mwi
voice register pool 1
id mac 189C.5DB6.BD09
type 9971
number 1 dn 1
presence call-list
dtmf-relay rtp-nte
username adm password adm
call-forward b2bua busy 68600
codec g711ulaw
no vad
camera
video
voice-card 0
crypto pki token default removal timeout 0
crypto pki trustpoint TP-self-signed-1879153754
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1879153754
revocation-check none
rsakeypair TP-self-signed-1879153754
crypto pki certificate chain TP-self-signed-1879153754
certificate self-signed 01
(details ommited)
license udi pid CISCO2811 sn FTX1146A44H
username admin privilege 15 password 0 admin
redundancy
interface FastEthernet0/0
no ip address
duplex auto
speed auto
interface FastEthernet0/0.25
description Data VLAN
encapsulation dot1Q 25
ip address 172.25.140.1 255.255.255.0
interface FastEthernet0/0.35
description Voice VLAN
encapsulation dot1Q 35
ip address 172.35.140.1 255.255.255.0
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
tftp-server flash:P00308010200.bin
tftp-server flash:P00308010200.sbn
tftp-server flash:P00308010200.sb2
tftp-server flash:P00308010200.loads
tftp-server flash:SCCP42.9-3-1SR3-1S.loads
tftp-server flash:apps42.9-3-1ES19.sbn
tftp-server flash:cnu42.9-3-1ES19.sbn
tftp-server flash:cvm42sccp.9-3-1ES19.sbn
tftp-server flash:dsp42.9-3-1ES19.sbn
tftp-server flash:jar42sccp.9-3-1ES19.sbn
tftp-server flash:term42.default.loads
tftp-server flash:term62.default.loads
tftp-server flash:SCCP45.9-3-1SR3-1S.loads
tftp-server flash:apps45.9-3-1ES19.sbn
tftp-server flash:cnu45.9-3-1ES19.sbn
tftp-server flash:cvm45sccp.9-3-1ES19.sbn
tftp-server flash:dsp45.9-3-1ES19.sbn
tftp-server flash:jar45sccp.9-3-1ES19.sbn
tftp-server flash:term45.default.loads
tftp-server flash:term65.default.loads
tftp-server flash:/Ringtones/Ringlist.xml alias Ringlist.xml
tftp-server flash:/Ringtones/DistinctiveRingList.xml alias DistinctiveRingList.x
ml
tftp-server flash:sip9971.9-4-1-9.loads
tftp-server flash:kern9971.9-4-1-9.sebn
tftp-server flash:rootfs9971.9-4-1-9.sebn
tftp-server flash:dkern9971.100609R2-9-4-1-9.sebn
tftp-server flash:sboot9971.031610R1-9-4-1-9.sebn
tftp-server flash:skern9971.022809R2-9-4-1-9.sebn
tftp-server flash:/g4-tones.xml alias United_States/g4-tones.xml
tftp-server flash:/gd-sip.jar alias English_United_States/gd-sip.jar
control-plane
mgcp profile default
telephony-service
max-ephones 24
max-dn 48
ip source-address 172.25.140.1 port 2000
cnf-file location flash:
load 7960-7940 P00308010200
load 7942 SCCP42.9-3-1SR3-1S.loads
load 7945 SCCP45.9-3-1SR3-1S.loads
load 7962 SCCP42.9-3-1SR3-1S.loads
load 7965 SCCP45.9-3-1SR3-1S.loads
max-conferences 8 gain -6
dn-webedit
transfer-system full-consult
create cnf-files version-stamp 7960 Feb 11 2014 07:18:32
ephone-dn 1
number 1001
description Phone 1
name Phone 1
hold-alert 30 originator
ephone-dn 2
number 1002
description Phone 2
name Phone 2
hold-alert 30 originator
ephone-dn 3
number 1003
description Phone 3
name Phone 3
hold-alert 30 originator
ephone 1
device-security-mode none
mac-address 001C.58FB.6E0F
button 1:1
ephone 2
device-security-mode none
mac-address 0014.A981.7F8A
button 1:2
ephone 3
device-security-mode none
mac-address 0006.5356.A4B8
button 1:3
alias exec con conf t
alias exec sib show ip int brief
alias exec srb show run | b
alias exec sri show run int
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
transport output telnet ssh
line vty 5 15
privilege level 15
login local
transport input telnet ssh
transport output telnet ssh
scheduler allocate 20000 1000
ntp master 1
end
C2811#

Cisco DX650 CUCM registration over VPN

Hi
i've installed a CUCM 9.1.2 cluster with Cisco 8945s, Cisco 9971s all running SIP Protocol. We have introduced the Cisco DX650 into the voice network, and all features are working normal on the Local LAN. We are now testing the DX650 for a remote worker. the Problem i'm seeing is that the DX650 will VPN into the network, email, Jabber, Calendar, Internet all work fine and is on the network via VPN. the one issue is that the DX650 will not register with Call Manager. we have allowed all the necessary ports through the firewall. i've tested with Cisco IP Communicator and it registers fine for the remote worker, but the DX650 will not register.
What can I do to troubleshoot this or see where it's getting hung up at? I want to see logs which shows the DX650 making an attempt or not.
Any ideas??

I am setting up my first Dx650 across the VPN and I am having the same problem. I used the exact same Anyconnect path and account I use for my iPhone Jabber instance but the DX will not register. If I move it into the PtoP VPN network, it registers just fine. But when on an open internet with Anyconnect, the phone won't register.
What do I look at?
Sent from Cisco Technical Support iPhone App

IP phone CP7911G over VPN

Hi,
is there voice problem with CP7911G over VPN? I have a CP7911G that works fine on my network, but when i call another extension on VPN, i hear some noise during the call.

Tomcat port needs to be manually modified per following instructions:
1. Change the http port in server.xml file in \conf
value="org.apache.tomcat.service.http.HttpConnectionHandler"/>
value="8088"/> <---------- Change this to 80
2. Restart Tomcat from Windows Service Control Manager
3. Change the Cisco IP Phone Services URL's Port to 80 or remove the port from the url.
For instance,
http://:8088/ipphone/jsp/sciphonexml/IPAgentInitial.jsp
to
http:///ipphone/jsp/sciphonexml/IPAgentInitial.jsp
4. Change the URL authentication parameter is applicable. This required IPPhone to be reset via the power cord.
For instance,
http://:8088/ipphone/jsp/sciphonexml/IPAgentAuthenticate.jsp
to
http:///ipphone/jsp/sciphonexml/IPAgentAuthenticate.jsp

Cisco SIP Phone 9971 will not register on CME 8.6

Hello,
I'm trying to configure a Cisco SIP Phone 9971,
but it won't register on CME 8.6, which is running on a 2811
The Phone shows this error message: Phone Not Registered.
And when I check the the Status Messages in the Phone, I see the following:
VPN Error: vpn is not configured
Actually, it shows all these 4 messages in a constant Loop:
12:01:59a SEP189C5DB6BD09.cnf.xml (TFTP)
12:01:59a No Trust List instaled
12:01:59a Updating Trust list
12:02:00a VPN Error: VPN is not Configured
It seems that this VPN Error is keeping the Phone from registering.
This is repeated for ever and the Phone never registers; at least that's what it appears.
However, when I do a sh voice register pool, I get the following:
C2811#sh voice register pool 1
Pool Tag 1
Config:
Mac address is 189C.5DB6.BD09
Type is 9971
Number list 1 : DN 1
Proxy Ip address is 0.0.0.0
Current Phone load version is Cisco-CP9971/9.4.1
DTMF Relay is enabled, rtp-nte
Call Waiting is enabled
DnD is disabled
Video is enabled
Camera is enabled
Busy trigger per button value is 0
call-forward b2bua busy 68600
keep-conference is enabled
registration expires timer max is 3600 and min is 120
username adm password adm
kpml signal is enabled
Lpcor Type is none
blf call list is enabled
Transport type is udp
service-control mechanism is supported
registration Call ID is [email protected]
Registration method: per line
Privacy feature is not configured.
Privacy button is disabled
active primary line is: 1010
contact IP address: 172.35.140.12 port 5060
Phone SIS Version: 6.0.2
GW SIS Version: 1.0.0
Dialpeers created:
Dial-peers for Pool 1:
dial-peer voice 40001 voip
destination-pattern 1010
session target ipv4:172.35.140.12:5060
session protocol sipv2
dtmf-relay rtp-nte
digit collect kpml
codec g711ulaw bytes 160
no vad
call-fwd-busy        68600
after-hours-exempt   FALSE
Statistics:
Active registrations : 4
Total SIP phones registered: 1
Total Registration Statistics
    Registration requests : 4
    Registration success   : 4
    Registration failed    : 0
    unRegister requests    : 0
    unRegister success     : 0
    unRegister failed      : 0
    Attempts to register
           after last unregister : 0
    Last register request time   : 18:11:43.551 UTC Mon Feb 24 2014
    Last unregister request time :
    Register success time        : 18:11:43.551 UTC Mon Feb 24 2014
    Unregister success time      :
C2811#
This sh voice register pool seems to indicate that the Phone has actually registered.
But I still get the Phone Not Registered message on the screen!
I did some Debugs and they also seem to indicate that the Phone has indeed registered:
Feb 24 18:01:12.399: VOICE_REG_POOL: Creating param container for dial-peer 4000
1.VOICE_REG_POOL pool->tag(1), dn->tag(1), submask(1)
VOICE_REG_POOL pool_tag(1), dn_tag(1)
Feb 24 18:01:12.399: VOICE_REG_POOL: Created dial-peer entry of type 0
Feb 24 18:01:12.399: VOICE_REG_POOL: Registration successful for 1010, registration id is 1
Feb 24 18:01:12.411: VOICE_REG_POOL: Contact matches pool 1 number list 1
Feb 24 18:01:12.411: VOICE_REG_POOL: GW SIS: X-cisco-cme-sis-1.0.0
Feb 24 18:01:12.411: VOICE REGISTER POOL-1 has registered.
                               Name:SEP189C5DB6BD09 IP:172.35.140.12 DeviceType:Phone
So frankly, I have no idea why the Phone keeps showing the Phone Not Registered message.
I'm pasting the Router's config.
I hope somebody is able to point me in the right direction.
Here is the config. Thank you!
C2811#sh run
Building configuration...
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname C2811
no aaa new-model
dot11 syslog
ip source-route
ip cef
ip dhcp excluded-address 172.25.140.1 172.25.140.10
ip dhcp excluded-address 172.35.140.1 172.35.140.10
ip dhcp pool Data
network 172.25.140.0 255.255.255.0
default-router 172.25.140.1
option 150 ip 172.25.140.1
dns-server 172.25.140.1
ip dhcp pool Voice
network 172.35.140.0 255.255.255.0
default-router 172.35.140.1
option 150 ip 172.35.140.1
dns-server 172.35.140.1
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
voice service voip
allow-connections sip to sip
sip
registrar server expires max 3600 min 120
voice register global
mode cme
source-address 172.25.140.1 port 5060
max-dn 40
max-pool 42
load 9971 sip9971.9-4-1-9.loads
authenticate register
authenticate realm cisco
tftp-path flash:
create profile sync 0004820400584603
voice register dn 1
number 1010
allow watch
name Phone10
label Phone10
mwi
voice register pool 1
id mac 189C.5DB6.BD09
type 9971
number 1 dn 1
presence call-list
dtmf-relay rtp-nte
username adm password adm
call-forward b2bua busy 68600
codec g711ulaw
no vad
camera
video
voice-card 0
crypto pki token default removal timeout 0
crypto pki trustpoint TP-self-signed-1879153754
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1879153754
revocation-check none
rsakeypair TP-self-signed-1879153754
crypto pki certificate chain TP-self-signed-1879153754
certificate self-signed 01
(details ommited)
license udi pid CISCO2811 sn FTX1146A44H
username admin privilege 15 password 0 admin
redundancy
interface FastEthernet0/0
no ip address
duplex auto
speed auto
interface FastEthernet0/0.25
description Data VLAN
encapsulation dot1Q 25
ip address 172.25.140.1 255.255.255.0
interface FastEthernet0/0.35
description Voice VLAN
encapsulation dot1Q 35
ip address 172.35.140.1 255.255.255.0
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
tftp-server flash:P00308010200.bin
tftp-server flash:P00308010200.sbn
tftp-server flash:P00308010200.sb2
tftp-server flash:P00308010200.loads
tftp-server flash:SCCP42.9-3-1SR3-1S.loads
tftp-server flash:apps42.9-3-1ES19.sbn
tftp-server flash:cnu42.9-3-1ES19.sbn
tftp-server flash:cvm42sccp.9-3-1ES19.sbn
tftp-server flash:dsp42.9-3-1ES19.sbn
tftp-server flash:jar42sccp.9-3-1ES19.sbn
tftp-server flash:term42.default.loads
tftp-server flash:term62.default.loads
tftp-server flash:SCCP45.9-3-1SR3-1S.loads
tftp-server flash:apps45.9-3-1ES19.sbn
tftp-server flash:cnu45.9-3-1ES19.sbn
tftp-server flash:cvm45sccp.9-3-1ES19.sbn
tftp-server flash:dsp45.9-3-1ES19.sbn
tftp-server flash:jar45sccp.9-3-1ES19.sbn
tftp-server flash:term45.default.loads
tftp-server flash:term65.default.loads
tftp-server flash:/Ringtones/Ringlist.xml alias Ringlist.xml
tftp-server flash:/Ringtones/DistinctiveRingList.xml alias DistinctiveRingList.x
ml
tftp-server flash:sip9971.9-4-1-9.loads
tftp-server flash:kern9971.9-4-1-9.sebn
tftp-server flash:rootfs9971.9-4-1-9.sebn
tftp-server flash:dkern9971.100609R2-9-4-1-9.sebn
tftp-server flash:sboot9971.031610R1-9-4-1-9.sebn
tftp-server flash:skern9971.022809R2-9-4-1-9.sebn
tftp-server flash:/g4-tones.xml alias United_States/g4-tones.xml
tftp-server flash:/gd-sip.jar alias English_United_States/gd-sip.jar
control-plane
mgcp profile default
telephony-service
max-ephones 24
max-dn 48
ip source-address 172.25.140.1 port 2000
cnf-file location flash:
load 7960-7940 P00308010200
load 7942 SCCP42.9-3-1SR3-1S.loads
load 7945 SCCP45.9-3-1SR3-1S.loads
load 7962 SCCP42.9-3-1SR3-1S.loads
load 7965 SCCP45.9-3-1SR3-1S.loads
max-conferences 8 gain -6
dn-webedit
transfer-system full-consult
create cnf-files version-stamp 7960 Feb 11 2014 07:18:32
ephone-dn 1
number 1001
description Phone 1
name Phone 1
hold-alert 30 originator
ephone-dn 2
number 1002
description Phone 2
name Phone 2
hold-alert 30 originator
ephone-dn 3
number 1003
description Phone 3
name Phone 3
hold-alert 30 originator
ephone 1
device-security-mode none
mac-address 001C.58FB.6E0F
button 1:1
ephone 2
device-security-mode none
mac-address 0014.A981.7F8A
button 1:2
ephone 3
device-security-mode none
mac-address 0006.5356.A4B8
button 1:3
alias exec con conf t
alias exec sib show ip int brief
alias exec srb show run | b
alias exec sri show run int
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
transport output telnet ssh
line vty 5 15
privilege level 15
login local
transport input telnet ssh
transport output telnet ssh
scheduler allocate 20000 1000
ntp master 1
end
C2811#

VPN is not Configured prints on all phones now with the built-in VPN client if VPN isn't configured. That's normal and is just cosmetic. That should not be causing your registration issues.

Jabber 9.5 phone service not registering over VPN

TCT devices register fine over Any Connect VPN until I upgraded to 9.5!
After upgrade IM/P and Voice Mail services connect successfully over VPN but phone service indicates it fails to get configuration from server.
Everything works locally. Any ideas what might have changed with 9.5 release that would impact ASA config!

We've come across this issue also except ours is different we can't even login. Just says username or password is invalid.
Works ok on corporate wifi
Does not work on anyconnect over internet wifi.
Does not work on anyconnect over 3G cellular data network.
I can see it connects to the TFTP server pulls the XML files down connects to each CUP server in HA but both return wrong username and password.
-- 2013-11-06 17:33:30.594 ERROR [6dee000] - [JabberWerx][log] [CupSoapCli]: login cup failed, reason: Wrong username/password
-- 2013-11-06 17:33:30.598 ERROR [3c04618c] - [JabberWerx][log] [LoginMgr]: CLoginCup::OnLoginFailed, -1, Wrong username/password
-- 2013-11-06 17:33:30.599 ERROR [3c04618c] - [JabberWerx][log] [assert]: /Users/jingwliu/depot/jwcpp/branches/s201301mobile/jwcpp/LoginMgr/LoginContext.cpp(940): CacheCupServer, ASSERT(!"CacheCupServer() not implemented.") failed!
-- 2013-11-06 17:33:30.600 INFO [3c04618c] - [JabberWerx][log] [LoginMgr]: OnStateChanged CLoginStop::OnStateChanged
-- 2013-11-06 17:33:30.601 INFO [3c04618c] - [JabberWerx][log] [LoginMgr]: conn, canceled due to no needs. supposed:0, signning-on:0, signed-on:0
-- 2013-11-06 17:33:30.601 ERROR [3c04618c] - [JabberWerx][log] [LoginMgr]: login, OnError, 10
-- 2013-11-06 17:33:30.602 ERROR [3c04618c] - [JabberWerx][log] [JabberWerxCPP]: JWLoginSink::OnError, lerr:10
-- 2013-11-06 17:33:30.602 INFO [3c04618c] - [csf-unified.imp.Login][OnLoginError] ****************************************************************
-- 2013-11-06 17:33:30.602 INFO [3c04618c] - [csf-unified.imp.Login][OnLoginError] OnLoginError: LERR_CUP_AUTH: <10>. data: 0
-- 2013-11-06 17:33:30.603 INFO [3c04618c] - [csf-unified.imp.Login][OnLoginError] **************************************************************** -- 2013-11-06 17:33:30.594 ERROR [6dee000] - [JabberWerx][log] [CupSoapCli]: login cup failed, reason: Wrong username/password
-- 2013-11-06 17:33:30.598 ERROR [3c04618c] - [JabberWerx][log] [LoginMgr]: CLoginCup::OnLoginFailed, -1, Wrong username/password
-- 2013-11-06 17:33:30.599 ERROR [3c04618c] - [JabberWerx][log] [assert]: /Users/jingwliu/depot/jwcpp/branches/s201301mobile/jwcpp/LoginMgr/LoginContext.cpp(940): CacheCupServer, ASSERT(!"CacheCupServer() not implemented.") failed!
-- 2013-11-06 17:33:30.600 INFO [3c04618c] - [JabberWerx][log] [LoginMgr]: OnStateChanged CLoginStop::OnStateChanged
-- 2013-11-06 17:33:30.601 INFO [3c04618c] - [JabberWerx][log] [LoginMgr]: conn, canceled due to no needs. supposed:0, signning-on:0, signed-on:0
-- 2013-11-06 17:33:30.601 ERROR [3c04618c] - [JabberWerx][log] [LoginMgr]: login, OnError, 10
-- 2013-11-06 17:33:30.602 ERROR [3c04618c] - [JabberWerx][log] [JabberWerxCPP]: JWLoginSink::OnError, lerr:10
-- 2013-11-06 17:33:30.602 INFO [3c04618c] - [csf-unified.imp.Login][OnLoginError] ****************************************************************
-- 2013-11-06 17:33:30.602 INFO [3c04618c] - [csf-unified.imp.Login][OnLoginError] OnLoginError: LERR_CUP_AUTH: <10>. data: 0
-- 2013-11-06 17:33:30.603 INFO [3c04618c] - [csf-unified.imp.Login][OnLoginError] ****************************************************************
I've opened a support call with our vendor.

IP Phone Over SSL VPN Registering Issue

I have a Cisco 7945G phone that I have setup with a VPN profile so it can be used remotely. This device was configured properly, tested at multiple locations and implemented. This device worked fine for several months but recently the end user has moved into a new house and now has a new service provider (Verizon FIOS). Now for some reason the phone will not get past the Registering process and doesn't prompt her for her VPN credentials. Nothing has changed with the phone so I am assuming it is either her new ISP or the Modem/Router they provided her. The device gets an IP address via DHCP from her home network but then just sits as the registering screen. She is able to use the Anyconnect client on her laptop to connect to our SSL VPN that way so I don't think the provider is blocking VPN traffic; but there is something that is stoping the phone from getting out.

Honestly best thing you could try is download the console logs from the phone and review the VPN bootup process. Check if it's able to establish a TCP connection to the URL of the VPN.
Maybe their DHCP doesn't give it a DNS server, and phone is unable to resolve your VPN URL? (a shoot in the dark)
If the phone console logs don't reveal a lot of info, your best shot is a capture at the user site, so we could review the process.

Cisco ip phone 9971 registration failed with CME 8.6 on WAN

Dear Sir
Subject: Cisco ip
phone 9971 registration failed
with CME 8.6 on WAN
I have a WAN simulation with one Cisco2811 router one Cisco1841 router (connected with fast Ethernet interface) plus one layer 2 switch.
I upgraded the 2811 IOS to 15.4M and installed CME8.6, when we tried to add 9971 sip phone If the traffic goes throw LAN (Same subnet- directly from switch to 2811) everything is fine and the SIP phone (9971) added with no problem but when I change the subnet and traffic goes throw WAN
( from 1841 routed to 2811 with default route) my phone didn't register.
It will be great if anybody could help!!
If you can solve my problem, I will be happy to compensate.

Try binding SIP to an interface on which Phone can reach (Use "voice service voip" "sip" and then bind)
Udit

Cisco SIP Phone 9971 won't register on CME 8.6

Hello,
I'm facing a very strange problem:
a Cisco SIP Phone 9971 won't register on CME 8.6 running on a 2811
I have read all the related-postings to this and other Forum, but I have not been able to solve it.
One of the "potential solutions" was to make sure that the Phone had a Line configured.
But I think that the commands voice register dn and voice register pool are properly configured (see config below)
So frankly, I have no idea what I could be missing.
I'm pasting the Router's config.
I hope somebody is able to point me in the right direction.
Here is the config. Thank you!
C2811#sh run
Building configuration...
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname C2811
no aaa new-model
dot11 syslog
ip source-route
ip cef
ip dhcp excluded-address 172.25.140.1 172.25.140.10
ip dhcp excluded-address 172.35.140.1 172.35.140.10
ip dhcp pool Data
network 172.25.140.0 255.255.255.0
default-router 172.25.140.1
option 150 ip 172.25.140.1
dns-server 172.25.140.1
ip dhcp pool Voice
network 172.35.140.0 255.255.255.0
default-router 172.35.140.1
option 150 ip 172.35.140.1
dns-server 172.35.140.1
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
voice service voip
allow-connections sip to sip
sip
registrar server expires max 3600 min 120
voice register global
mode cme
source-address 172.25.140.1 port 5060
max-dn 40
max-pool 42
load 9971 sip9971.9-4-1-9.loads
authenticate register
authenticate realm cisco
tftp-path flash:
create profile sync 0004820400584603
voice register dn 1
number 1010
allow watch
name Phone10
label Phone10
mwi
voice register pool 1
id mac 189C.5DB6.BD09
type 9971
number 1 dn 1
presence call-list
dtmf-relay rtp-nte
username adm password adm
call-forward b2bua busy 68600
codec g711ulaw
no vad
camera
video
voice-card 0
crypto pki token default removal timeout 0
crypto pki trustpoint TP-self-signed-1879153754
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1879153754
revocation-check none
rsakeypair TP-self-signed-1879153754
crypto pki certificate chain TP-self-signed-1879153754
certificate self-signed 01
(details ommited)
license udi pid CISCO2811 sn FTX1146A44H
username admin privilege 15 password 0 admin
redundancy
interface FastEthernet0/0
no ip address
duplex auto
speed auto
interface FastEthernet0/0.25
description Data VLAN
encapsulation dot1Q 25
ip address 172.25.140.1 255.255.255.0
interface FastEthernet0/0.35
description Voice VLAN
encapsulation dot1Q 35
ip address 172.35.140.1 255.255.255.0
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
tftp-server flash:P00308010200.bin
tftp-server flash:P00308010200.sbn
tftp-server flash:P00308010200.sb2
tftp-server flash:P00308010200.loads
tftp-server flash:SCCP42.9-3-1SR3-1S.loads
tftp-server flash:apps42.9-3-1ES19.sbn
tftp-server flash:cnu42.9-3-1ES19.sbn
tftp-server flash:cvm42sccp.9-3-1ES19.sbn
tftp-server flash:dsp42.9-3-1ES19.sbn
tftp-server flash:jar42sccp.9-3-1ES19.sbn
tftp-server flash:term42.default.loads
tftp-server flash:term62.default.loads
tftp-server flash:SCCP45.9-3-1SR3-1S.loads
tftp-server flash:apps45.9-3-1ES19.sbn
tftp-server flash:cnu45.9-3-1ES19.sbn
tftp-server flash:cvm45sccp.9-3-1ES19.sbn
tftp-server flash:dsp45.9-3-1ES19.sbn
tftp-server flash:jar45sccp.9-3-1ES19.sbn
tftp-server flash:term45.default.loads
tftp-server flash:term65.default.loads
tftp-server flash:/Ringtones/Ringlist.xml alias Ringlist.xml
tftp-server flash:/Ringtones/DistinctiveRingList.xml alias DistinctiveRingList.x
ml
tftp-server flash:sip9971.9-4-1-9.loads
tftp-server flash:kern9971.9-4-1-9.sebn
tftp-server flash:rootfs9971.9-4-1-9.sebn
tftp-server flash:dkern9971.100609R2-9-4-1-9.sebn
tftp-server flash:sboot9971.031610R1-9-4-1-9.sebn
tftp-server flash:skern9971.022809R2-9-4-1-9.sebn
tftp-server flash:/g4-tones.xml alias United_States/g4-tones.xml
tftp-server flash:/gd-sip.jar alias English_United_States/gd-sip.jar
control-plane
mgcp profile default
telephony-service
max-ephones 24
max-dn 48
ip source-address 172.25.140.1 port 2000
cnf-file location flash:
load 7960-7940 P00308010200
load 7942 SCCP42.9-3-1SR3-1S.loads
load 7945 SCCP45.9-3-1SR3-1S.loads
load 7962 SCCP42.9-3-1SR3-1S.loads
load 7965 SCCP45.9-3-1SR3-1S.loads
max-conferences 8 gain -6
dn-webedit
transfer-system full-consult
create cnf-files version-stamp 7960 Feb 11 2014 07:18:32
ephone-dn 1
number 1001
description Phone 1
name Phone 1
hold-alert 30 originator
ephone-dn 2
number 1002
description Phone 2
name Phone 2
hold-alert 30 originator
ephone-dn 3
number 1003
description Phone 3
name Phone 3
hold-alert 30 originator
ephone 1
device-security-mode none
mac-address 001C.58FB.6E0F
button 1:1
ephone 2
device-security-mode none
mac-address 0014.A981.7F8A
button 1:2
ephone 3
device-security-mode none
mac-address 0006.5356.A4B8
button 1:3
alias exec con conf t
alias exec sib show ip int brief
alias exec srb show run | b
alias exec sri show run int
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
transport output telnet ssh
line vty 5 15
privilege level 15
login local
transport input telnet ssh
transport output telnet ssh
scheduler allocate 20000 1000
ntp master 1
end
C2811#

Thank you for your reply.
I did some debugs and the results are very strange!
This is what I got:
Feb 24 18:01:12.219: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 400 Bad Request
Via: SIP/2.0/UDP 172.35.140.12:5060;branch=z9hG4bK08011844
From: ;tag=189c5db6bd09000260cf3daf-289a76d1
To: ;tag=52488-160A
Date: Mon, 24 Feb 2014 18:01:12 GMT
Call-ID: [email protected]
CSeq: 1000 REFER
Content-Length: 0
Contact:
Feb 24 18:01:12.291: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
REGISTER sip:172.25.140.1 SIP/2.0
Via: SIP/2.0/UDP 172.35.140.12:5060;branch=z9hG4bK1e9ad079
From: ;tag=189c5db6bd0900032df02e9c-25d79707
To:
Call-ID: [email protected]
Max-Forwards: 70
Date: Fri, 01 Jan 1982 00:02:41 GMT
CSeq: 101 REGISTER
User-Agent: Cisco-CP9971/9.4.1
Contact: ;+sip.instance="
000000-0000-0000-0000-189c5db6bd09>";+u.sip!devicename.ccm.cisco.com="SEP189C5DB
6BD09";+u.sip!model.ccm.cisco.com="493";video
Supported: replaces,join,sdp-anat,norefersub,resource-priority,extended-refer,X-
cisco-callinfo,X-cisco-serviceuri,X-cisco-escapecodes,X-cisco-service-control,X-
cisco-srtp-fallback,X-cisco-monrec,X-cisco-config,X-cisco-sis-6.0.2,X-cisco-xsi-
8.0.1
Content-Length: 0
Reason: SIP;cause=200;text="cisco-alarm:22 Name=SEP189C5DB6BD09 ActiveLoad=sip99
71.9-4-1-9.loads InactiveLoad=sip9971.9-3-2SR1-1.loads Last=reset-reset"
Expires: 3600
Feb 24 18:01:12.395: voice_reg_get_reg_expires_timer: no voice register pool found
Feb 24 18:01:12.395: VOICE_REG_POOL: Register request for (1010) from (172.35.140.12)
Feb 24 18:01:12.395: VOICE_REG_POOL: Contact matches pool 1 number list 1
Feb 24 18:01:12.395: VOICE_REG_POOL: No entry for (172.35.140.12) found in srst contact table
Feb 24 18:01:12.395: VOICE_REG_POOL: key(1010) contact(172.35.140.12:5060) add to contact table
Feb 24 18:01:12.395: VOICE_REG_POOL: No entry for (1010) found in contact table
Feb 24 18:01:12.399: VOICE_REG_POOL: key(1010) contact(172.35.140.12) added to contact table
Feb 24 18:01:12.399: VOICE_REG_POOL: key(172.35.140.12) contact(1010) add to srst contact table
Feb 24 18:01:12.399: VOICE_REG_POOL: No entry for (172.35.140.12) found in srst contact table
Feb 24 18:01:12.399: VOICE_REG_POOL: key(172.35.140.12) contact(1010) added to srst contact table
Feb 24 18:01:12.399: VOICE_REG_POOL pool->tag(1), dn->tag(1), submask(1)
But right after these errors, I get the following:
Feb 24 18:01:12.399: VOICE_REG_POOL: Creating param container for dial-peer 4000
1.VOICE_REG_POOL pool->tag(1), dn->tag(1), submask(1)
VOICE_REG_POOL pool_tag(1), dn_tag(1)
Feb 24 18:01:12.399: VOICE_REG_POOL: Created dial-peer entry of type 0
Feb 24 18:01:12.399: VOICE_REG_POOL: Registration successful for 1010, registration id is 1
Feb 24 18:01:12.411: VOICE_REG_POOL: Contact matches pool 1 number list 1
Feb 24 18:01:12.411: VOICE_REG_POOL: GW SIS: X-cisco-cme-sis-1.0.0
Feb 24 18:01:12.411: VOICE REGISTER POOL-1 has registered.
                               Name:SEP189C5DB6BD09 IP:172.35.140.12 DeviceType:Phone
Feb 24 18:01:12.411: VOICE_REG_POOL: Pool[1]: service-control (reset type: 2) message sent to sip:[email protected]
Feb 24 18:01:12.411: voice_reg_privacy_update_to_phone: delay sending privacy update during bulk registration
Feb 24 18:01:12.415: //1/7B0070C28003/SIP/Msg/ccsipDisplayMsg:
====================
And when I do a sh voice register pool, I get the following:
C2811#sh voice register pool 1
Pool Tag 1
Config:
Mac address is 189C.5DB6.BD09
Type is 9971
Number list 1 : DN 1
Proxy Ip address is 0.0.0.0
Current Phone load version is Cisco-CP9971/9.4.1
DTMF Relay is enabled, rtp-nte
Call Waiting is enabled
DnD is disabled
Video is enabled
Camera is enabled
Busy trigger per button value is 0
call-forward b2bua busy 68600
keep-conference is enabled
registration expires timer max is 3600 and min is 120
username adm password adm
kpml signal is enabled
Lpcor Type is none
blf call list is enabled
Transport type is udp
service-control mechanism is supported
registration Call ID is [email protected]
Registration method: per line
Privacy feature is not configured.
Privacy button is disabled
active primary line is: 1010
contact IP address: 172.35.140.12 port 5060
Phone SIS Version: 6.0.2
GW SIS Version: 1.0.0
Dialpeers created:
Dial-peers for Pool 1:
dial-peer voice 40001 voip
destination-pattern 1010
session target ipv4:172.35.140.12:5060
session protocol sipv2
dtmf-relay rtp-nte
digit collect kpml
codec g711ulaw bytes 160
no vad
call-fwd-busy        68600
after-hours-exempt   FALSE
Statistics:
Active registrations : 4
Total SIP phones registered: 1
Total Registration Statistics
    Registration requests : 4
    Registration success   : 4
    Registration failed    : 0
    unRegister requests    : 0
    unRegister success     : 0
    unRegister failed      : 0
    Attempts to register
           after last unregister : 0
    Last register request time   : 18:11:43.551 UTC Mon Feb 24 2014
    Last unregister request time :
    Register success time        : 18:11:43.551 UTC Mon Feb 24 2014
    Unregister success time      :
C2811#
So apparently the Phone is actually registered!
However, the Phone screens still shows this message: Phone Not Registered.
So frankly I don't understand what's going on!
I really hope somebody can help. Thanks!

Voice Over IP Phone - Physical Device Cisco IP PHONE 7940

Hi Every body,
This is to announce in the forum , I have alot trouble facing in the IP Phone .
This is causing my production & Client interaction Problems. my Network has 2 Mpbs Leased line I have around 10 IP Phones and only 3 three are critical, In my network stability and the switch environment is also good but when i have all IP Phones are working in sudden one IP Phone the model Cisco IP Phone 7940 series makes reboot every day atleast 7 to 8 times .Do you think the IP Phone required separate Leased line provided or can we manage the environment with out fail by adding any additional component like powerful intelligent switch.Please reply back this query , it is an urgent issue in my environment.

If phone freeze, it's a firmware bug.
Which firmware are you running ?
Please do not solicit for urgent answer on a free volunteered forum, if you need guaranteed support buy a contract.

SoftPhone over VPN audio issue

Having a "one-way" audio issue when IPC connects over VPN to any Main Office IP Phones (7960). Remote IPC (softphone) shows "0 Received" Packets, but the IP Phone shows them as being sent.
This does NOT happen if IPC contacts another IPC on a PC at Main Site, or any kind of phone at the other branch offices.
Have looked at all of the audio settings on the VPN IPC unit, they are correct.
Any ideas?

Try to sniff the Ethernet traffic during call setup at the CallManager. When Callmanager sends Call Control messages to remote party, it could send wrong IP address or UDP port as an RTP parameters.
Another components could block the traffic are firewalls. How do you have your VPN tunnel built? Do you use Cisco VPN Client? What terminates your VPN traffic at the central location? PIX, VPN3000 or Router? Traffic may go one way without a change, and some protocol FixUp may be triggered for this traffic on the way back. If you have access to firewall logs, check if you have any traffic dropped.
Good luck,
Mike
http://www.headsetadapter.com

Cisco 9971 phone over VPN

Similar Messages

Maybe you are looking for