Configuring AAA with 2811 IPIP Voice Gateway

Hi,
I am trying to configure 2811 Gateway for IP to IP VoIP calls as a carrier and need to calls to be Authenticated/Accounted on Radius Billing Server. The problem is that when a call comes into the GW, the call is forwarded on the second leg without authenticated but the accounting messages are coming properly.
Cisco TAC advised that I need to run TCL which I don't understand why. I am NOT using any IVR for the incoming calls, but still they insist using it.
Anyone has any experience in this implementation.

TCL != IVR
TCL is just a scripting language.
There is such a TCL script that authenticates IP-to-IP calls.
So what the TAC has advised you is right.
Just configure the proper TCL script at your dial-peer and it will handle the authentication for you (will send authentication/authorization messages to the Radius server).

Similar Messages

  • Trouble with 2811 IP-IP gateway

    After replacing IP-IP gateway 2611XM with 2811(various version IOS) all calls via this gateway originated from Call Manager (or othes sources when signaling and media address are different) to Cisco AS5350 are disconnects with code 47 (no resource).
    All voip settings of 2611XM and 2811 are same.
    Is anybody have this troubles?

    Have the same scenario with a 2801 IPIP GW SIP to H.323:
    CCM-->H323IPIPGWSIP--->SIPGW.
    Calls are completed ok only from CCM to outside but not on the opposite direction;
    When call flow from SIPGW-->SIPIPIPGWH323-->CCM the call is completed but there is no audio, 5 secs after completed the call is released by de CCM.
    CCM Release is 4.1(3) and IPIP GW I have tried with c2801-adventerprisek9_ivs-mz.124-4.T7, c2801-adventerprisek9-mz.124-11.XJ and c2801-spservicesk9-mz.124-6.T2.bin and have the same result.
    I also tried the same scenario but with H.323 to H.323 on the IPIP GW and have encountered the same problem. Anyone can help me with this?
    Thanks in advance

  • Configuring ASA5510 with 2811 ISR

    Hello,
    I have a 2811 ISR configured to provide the following services to my network:
    Internet access to LAN users
    Cisco Call Manager Express
    Site-to-stie VPN to 3rd party networks
    VPN server to provide VPN access to remote users
    Security Zone configurations
    Static NAT configurations
    Now I recently just got the ASA5510 device and I am not sure how to go about with the setup, whether to put the ASA in between the internet and the ISR (Internet - ASA - ISR - LAN), or put the ISR in between the internet and the ASA (Internet - ISR - ASA - LAN)?
    While i know I can move most of the config unto the ASA, i know that the CME cannot be moved, hence I would like to do the setup such that users on the network still have access to CME.
    Suggestions please.
    Regards,
    Femi

    Hi,
    Sorry about that. Wasnt sure where to post the question. So any suggestion?
    Regards,
    Femi

  • Configure AAA with ANM, ACS and ACE

    I am seeking for best practices with deployment of ANM and ACS to manage ACEs. Configuration guides suggest that authorization can be on ACS 5.2 or ANM.
    I found that an admin user can be assigned to a single role only. What I would like to do, is set myself as an adnmin user have different roles for different ACEs. For example, I want to be a system admin for one ACE and network-monitor role for another ACE.
    Would you someone offer me any suggestions?

    thank you

  • Etherchannel on a Voice Gateway

    We're considering etherchannel on a 2851 voice gateway. The goal is to use both of the dual Gig LAN interfaces for redundancy. Anyone with recommendations please let me know.
    Thanks

    Hi,
    Instead of Etherchannel, how about using the backup interface command on the second NIC of the router.
    The benefit is we can use the same IP on the second NIC as the first/primary NIC.
    The backup interface remains in standby mode and becomes alive only when the primary NIC is down.When the primary NIC comes up the secondary automatically goes in standby mode.
    Advantages : "Backup interface" command is independent of routing protocols. That is, it does not depend on routing protocol convergence, route stability and so on.
    Each of the voice gateway NICs can be conencted physically to LAN swiches.
    The Voice gateway protocol which can be easily used with this setup is H323 or SIP, not sure on MGCP though.
    Only thing is the calls active calls will drop when the primary interface goes down, or comes back again(the secondary NIC goes to standby mode) which is the normal behaviour.
    Can you please feedback on the usage of "backup interface" command for configuring NIC resilience on the voice gateway?

  • ISR as CUBE and Voice Gateway

    Can I set an ISR 2951 as CUBE to receive SIP trunks and configure the same box as voice gateway to deliver TDM E1 voice channels to an enterprise PBx?
    Thanks
    Sent from Cisco Technical Support iPhone App

    Yes You can...
    Please rate all useful posts
    "The essence of christianity is not the enthronement but the obliteration of self --William Barclay"

  • AAA with RADIUS on ASA

    Hey Everyone,
    I am configuring AAA with RADIUS on our remote ASA firewalls.  This is pretty straight forward, but I have some firewalls that this is not working on.  I have upgraded the IOS image on the ASA 5510 to ASA804-K8.BIN on all of them.  The strange part is some of them are working and some of them are not working.
    Just wondering if anyone else has come across this before and what info do you need to give me an assist.
    Thanks in advance,
    Kimberly

    Hi Kimberly,
    just curious: why 8.0.4 and not 8.0.5 ?
    What are you using radius for ? What is the radius server? Did you configure all the ASAs on the radius server(s) ? Did you use the correct shared secret?
    Is there anything different between the working ASAs and the failing ones? Configuration, location in the network, etc?
    If the above doesn't help please post the config of a failing ASA (or at least the relevant parts, and make sure to remove any sensitive data) and the output of:
    debug radius
    debug aaa authen
    debug aaa common 254
    You can test just the radius part with the cli command "test aaa-server authentication ..."
    hth
    Herbert

  • Configure E1 card on voice gateway

    Hi
    I have CUCM 9 and Cisco 2801 voice gateway
    There is 2 card on cisco 2801 : VIC2-4FXO and VWIC3-1MFT-T1/E1
    I would like to know how I will configure the gateway in the CUCM (H323, MGCP ...)
    Should I add H323 or MGCP gateway or something else ?
    I also need to know how I will configure E1 card on the Cisco 2801 to handle CUCM PSTN incoming and outgoing call
    I will apreciate if you help with some how to document
    Thanks in advance
    Regards

    Which protocol to use, is up to you, you should know the requirements of your customer to define that.

  • Can't establish a Voice gateway (cisco 2911) using SIP with CUCM 9.1

    I have configured a Cisco 2911 as a Voice Gateway using SIP (the configuration is attached), but unfortunately can't establish a test call to a phone (CUPC 8.6 SCCP) using csim start. I have done logging the ccsip debug and ccapi debug and attached them. Could anyone help me to solve this problem?

    I just did some research on my end and csim is not supported for SIP. The Invite will never be created and sent to the CUCM to initate the call. It disconnects in the router itself with normal cause.
    *Apr 18 08:58:48.086: //40/7D08458F8077/SIP/Error/sipSPIOutgoingCallSDP: 
     Could not create source SDP for Outgoing Call
    *Apr 18 08:58:48.086: //40/7D08458F8077/SIP/Error/sipSPICreateOutboundSDP: 
     Error in creating an SDP for the outbound call - Check for supported codecs
    *Apr 18 08:58:48.086: //40/7D08458F8077/SIP/Error/preprocessSetup: 
     Error during outbound SDP creation
    *Apr 18 08:58:48.086: //40/7D08458F8077/SIP/Info/sipSPIInitiateDisconnect: Initiate call disconnect(16) for outgoing call
    Please use an actual call to test your dial-peer and integration with call manager. csim will not work.
    Hantale
    Sree

  • Could CUOM back up voice gateway configuration?

    Hello all,
    I wonder if CUOM could back up voice gateway configuration.
    And, I assume Cisco works back up router/VGW config in most of cases,  is it correct?
    Thank you in advance,
    master001

    By design, the iphone will sync itunes content with ONE computer at a time. If you attempt to sync such content with a second computer, ALL itunes content will first be erased from your phone & then replaced with the content from the second computer. This is a design feature & cannot be overridden. Because you formatted your computer, the iphone will see your computer as a "new" computer.
    1.First, disable auto sync when an ipod/iphone is connected, in preferences, in itunes, which in windows is in the edit menu.
    2. Put one contact & one event in whatever programs you use for that purpose on your computer, they can be fake, doesn't matter, the important point is to have one entry in each.
    3. Connect your phone, itunes running, DO NOT SYNC.
    4. Go up to Store>Authorize this Computer.
    5. Go up to File>Transfer Purchases. All of the purchased itunes content on your phone will be transferred, music you ripped on your own will not be transferred. You will have to use third party software to first extract that music from your phone BEFORE YOU DO ANYTHING. Same for photos not in your camera roll, the photo sync is one way...computer to phone. This is one example:
    http://www.wideanglesoftware.com/touchcopy/index.php
    6. Right click the phone in the device pane & select Reset Warnings.
    7. Right click the phone, again, & select Backup.
    8. Right click the phone, again, & select Restore from Backup. Select the backup you just made. Voice Memos are included in the iphone's backup.
    9. This MUST be followed by a sync to restore your itunes content, which you select as before from the various tabs.
    You'll get a popup regarding your contacts & calendars asking to merge or replace, select merge.
    This article details what's included in the backup you'll make & restore from:
    http://support.apple.com/kb/HT1766

  • Call Manager register fxs port with voice gateway- problem

    I have a CUCM 6 and a Voice Gateway V224. I've configured the voice gateway's voice FXS ports as MGCP.
    I have a Voip connected and registered to the CUCM and a Pots phone connected to the Voice Gateway.
    If i dial from the Voip to the Pots phone it rings. The problem is that i cannot ring from the Pots to the Voip phone.
    I have no dial tone.
    If i write no shut down on the  voice port i have a tone. If i configure mgcp on the voice port i have a busy ringtone.
    I've entered no mgcp and mgcp commands and i've reset the voice gateway.
    How can i call from the pots to the voip phone?
    The ios version on the voice gateway is Version 12.4(22)T4.
    Here is an outghtput from the Voice gateway.
    ccm-manager mgcp
    ccm-manager fax protocol cisco
    ccm-manager music-on-hold
    ccm-manager config server 10.1.1.33
    ccm-manager config
    mgcp
    mgcp call-agent CCMIOSS 2427 service-type mgcp version 0.1
    mgcp rtp unreachable timeout 1000 action notify
    mgcp modem passthrough voip mode nse
    mgcp package-capability rtp-package
    mgcp package-capability sst-package
    no mgcp package-capability res-package
    no mgcp timer receive-rtcp
    mgcp sdp simple
    mgcp validate domain-name
    mgcp rtp payload-type g726r16 static
    mgcp profile default
    timeout tone busy 600
    timeout tone dial 600
    dial-peer voice 999223 pots
    service mgcpapp
    port 2/23
    dial-peer voice 999222 pots
    service mgcpapp
    port 2/22
    dial-peer voice 999888 pots
    service mgcpapp
    port 2/23
    The CUCM 6 is registered with the voice gateway.

    Is your campaign using CPA? If so, what's the behavior if CPA is not enabled? 
    I think the best thing to do is to run a trace...
    Call Manager > Cisco Unified Serviceability > Trace > Configurations
    Select a CUCM server - any subscriber would work. 
    Service Group - CM Services
    Cisco CallManager (Inactive)
    Enable SIP Stack Trace and apply to all nodes. Download and install RTMT
    Make a bunch of outbound tests and then open RTMT > Trace & Log Central > Collect Files > Check "All Servers" for Cisco CallManager > Next > Next > Relative Range if you made the test calls within the last X minutes, otherwise you can set a From and To datetime. Click Finish and go through your SDL logs and see what errors you find and post them here. 
    Also, make sure your phone is in the correct CSS in Call Manager

  • Recommended configuration for load balanced Portal with load balancer, multiple gateways and multiple servers.

    Does anyone have a recommended network, hardware and software configuration guide for a Portal installation running with multiple gateways load balanced (ie one URL) that talk to multiple servers?

    David,
    We've used Resonate (software) to load balance the gateways. It allows
    you to group all the gateways under 1 virtual URL and load balance the
    incoming connections over each gateway depending on the rules that you
    define in Resonate. Look in the SUN portal whitepapers there is one that
    talks about it specifically.
    As far as load balancing the calls to the portals, the gateways will
    automatically load balance across all the portals that they know about
    using a simple round-robin rotation. You may be able to use Resonate in
    front of the portals but you may need to activate persistance within
    Resonate to ensure that the user always ends up on the portal that he
    established his initial connection on (if you want that), check with Sun
    on this one.
    David Broeren wrote:
    Recommended configuration for load balanced Portal with load balancer,
    multiple gateways and multiple servers.
    Does anyone have a recommended network, hardware and software
    configuration guide for a Portal installation running with multiple
    gateways load balanced (ie one URL) that talk to multiple servers?
    Try our New Web Based Forum at http://softwareforum.sun.com
    Includes Access to our Product Knowledge Base!

  • Configuring TNT in IOS Voice Gateway

                       Hello all
    1. Is TNT, Take Back And Transfer, supported in IOS voice gateway in general?
    2. If yes, is there any specific IOS configuration needed at the voice gateway?
    (I do not see any need as the DTMF digits(-tones) will be sent in-band as in normal voice stream to the PSTN (which supported/subscribe to TNT).
    Please advise. thanks
    Paul

    No need to configure anything for TNT as the transfer DTMF sequence is sent inband.
    Chris

  • Rightfax server with Brooktrout Analogue interfaces to cisco Voice gateway

    Hi,
    I have Rightfax server that will be connecting into a Cisco Voice Gateway via analogue interfaces. The Brooktrout card is model : Brooktrout TR114-P4L. Could anyone advise what type of VIC module I require. I will need to support DID and DTMF-relay on these interfaces.
    thanks

    We have made these work a few times in the past. The cards expect work as a FXO interface, and expect battery feed from the external device. To make these work on IOS gateways, use a FXS card on the router, and H323 operation to allow the POTS dial peer to send digits out the voie port.
    The cards will answer on ring signal from the FXS port and expect DTMF digits to route the call to the correct fax mailbox number. This is why you need H323 operation - MGCP will supress the DTMF tones from being sent out the voice port. You also need a 'prefix ,,' to add a delay as the cards are a bit slow to answer.
    A config like this should work -
    dial-peer voice 1000 pots
    description - fxs port to fax card
    destination-pattern 1...
    port 0/1/0
    prefix ,,1
    This will send numbers in the range 1XXX towards the fax card

  • Setup of 2 B-channel transfer (TBCT) on Cisco Voice Gateway

    Hi all,
    In my scenario, I have several remote locations, each with their own T1-PRI connection to the PSTN via Cisco voice gateways.
    The call flow has the caller calling a PSTN number at the remote location.  This call hits a CUCM translation pattern and is immediately hairpinned/tromboned out to a PSTN number located at the UCCE central location.
    The customer would like to perform a 2 b-channel transfer back up to the CO switch, to free up B-channels to the remote location.
    My question is this:  Assuming my switch type is supported and the PSTN provider supports 2 b-channel transfers, do I simply need to add "isdn supp-service tbct" to my serial interface configuration?
    I have seen discussions that it is as simple as this, to needing some tcl/xml code, to also requiring aaa to be setup.
    As there are over 100 locations being considered for this enhancement, the customer would like to know if it is 15 minutes or 2 hours per location to implement.
    Thanks,
    Joe

    Thanks Paolo,
    That was my expectation.
    They have this going on the VG's utilized by CVP, so I will ask them to review the XML in use there for tweaking for the remote locations.
    Thanks again!
    Joe

Maybe you are looking for