CUCM 9.1.1.2 - NTP unsynchronised

Hello,
I have a problem with the ntp service. The publisher is unsynchronised.
However, the ntp server is reachable by the publisher.
I tried to restart the ntp service but nothing change.
Do I need to restart the server?
Thanks
Frederic

Hello Manish,
the CUCM version is : 9.1.1.20000-5. there are 4 servers. The NTP server is the core switch with a stratum at 1.
Here the result of utils dbreplication status :
Mon Jan 26 17:43:22 2015 main() DEBUG: Replication cluster summary:
SERVER                 ID STATE    STATUS     QUEUE CONNECTION CHANGED
D_sub_ccm9_1_1_20000_5    6 Active   Connected       0 Jan 6 19:26:14
A_ccm9_1_1_20000_5                  2 Active   Local           0
B_sub_ccm9_1_1_20000_5    7 Active   Connected       0 Jan 6 19:26:14
C_sub_ccm9_1_1_20000_5    5 Active   Connected    1060 Jan 6 19:26:37
For NTP service, what file do you need? ntpd?
I checked the logs before to restart the service and the NTP service had already been restarted by itself.

Similar Messages

NTP Syncronization to Microsoft DC

Hi, all,
I want to sync time for CUCM 6.0(1) by NTP from windows Domain Controller, which in turn runs NNTP service.
That's why I've configured DC's IP address (A.B.C.D) in CUCM OS
Administration interface, which says 'The NTP service is accessible' after that.
Then I've checked ntp status & config; it show the following:
admin:utils ntp config
This node is configured to synchronize with one of the following NTP server(s):
A.B.C.D
admin:utils ntp status
ntpd (pid 18410) is running...
remote refid st t when poll reach delay offset jitter
==============================================================================
127.127.1.0 127.127.1.0 10 l 17 64 1 0.000 0.000 0.008
A.B.C.D .LOCL. 1 u 12 64 1 0.355 -96181. 0.008
unsynchronised
time server re-starting
polling server every 16 s
Current time in UTC is : Tue Jun 3 11:58:07 UTC 2008
Current time in Europe/Moscow is : Tue Jun 3 15:58:07 MSD 2008
admin:
As a result IP Phones get theirs time from previously configured static time in CUCM.
I've entered it before going to NTP. But eventually due to NTP status is unsynchronised
IP Phones continue to use statically configured time in CUCM.
How can this be resolved ? Any ideas ?

Hi,
All depends on how important your time sync is.
My personal preference is always hardware over software.
Your most important point is to get an authorative time source.. Probably the 2 easiest options...
1. NTP server on the internet, either from your ISP, or sometimes from a local university. Google for free NTP servers in your location.
2. Buy a hardware clock / time source.. you can most likely point routers, switches, ccm, servers all directly to these servers. Same thing goolge for some product options.
Start here for Cisco NTP info..
http://www.cisco.com/en/US/tech/tk648/tk362/tk461/tsd_technology_support_sub-protocol_home.html
Not sure what version of windows you are running.. but try this for W2k3 server
http://support.microsoft.com/kb/816042
Cheers,
Tim

NTP Settings

Dear All,
I have CUCM ver 6.1.3.1, I try to enable it to update from SNTP server via Cisco Unified OS Administration/Settings/NTP and in the NTP Servers List I add the SNTP Server IP and upon saving I get the message "The NTP service not accessible.". is there any other setting I should set to allow this work?

SNTP is not supported by Cisco devices including CUCM, routers, switches etc.
Try synching CUCM directly to a "proper" NTP source rather than to SNTP - I assume that your SNTP source is a Windows server?
For more details check out the link below:
http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a0080a23d02.shtml#wtm

CUCM 7.X NTP sync to Windows DC

How do I sync up CUCM 7.x ntp to a windows server? Thx

Depending on your Windows version, there are some registry settings you need to set:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPServer\Enabled
Changing the ‘Enabled’ flag to the value 1 enables the NTP Server.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type
Change the server type to NTP by specifying ‘NTP’ in the ‘Type’ registry entry.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\AnnounceFlags
Set the ‘Announce Flags’ registry entry to 5, to indicate a reliable time source.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\LocalClockDispersion
Set 'LocalClockDispersion' to 0
The last one is most important one.
After changing registry, you need to restart "Windows Time" service.
Then you may go to CUCM > OS Administration > Settings > NTP Server to configure the time source(windows DC) address.
Michael
http://htluo.blogspot.com

NTP error in RTMT of CUCM 8.6(2a) VM

Hello
We have migrated and upgraded an existing CUCM to 8.6(2a) on UCS using ESXi 4.1.
Everything seems to be fine exept that we are getting Syslogs in RTMT that are stating that there is something wrong with NTP (see Syslog message below).
At Sun Oct 16 13:40:30 CEST 2011 on node 10.0.128.24; the following SyslogSeverityMatchFound events generated: SeverityMatch : Critical MatchedEvent : Oct 16 13:40:04 NOS-CH-WBN-CM01 user 2 ntpRunningStatus.sh: The local NTP client is off by more than the acceptable threshold of 3 seconds from its remote NTP system peer. The normal remedy is for NTP Watch Dog to automatically restart NTP. However; an unusual number of automatic NTP restarts have already occurred on this node. No additional automatic NTP restarts will be done until NTP time synchronization stabilizes. This is likely due to an excessive number of VMware Virtual Machine migrations or Storage VMotions. Please consult your VMware Infrastructure Support Team. AppID : Cisco Syslog Agent ClusterID : NodeID : NOS-CH-WBN-CM01 TimeStamp : Sun Oct 16 13:40:04 CEST 2011
However when we check the NTP status on the CUCM itself, there doesn't seems to be anything wrong (see CLI output below).
admin:utils ntp status
ntpd (pid 23400) is running...
     remote           refid      st t when poll reach   delay   offset jitter
==============================================================================
*172.16.2.241    192.53.103.108   2 u   49 128 377    0.755    3.376   0.771
172.16.1.241    172.16.2.241     3 u   71 128 377    7.399    2.603   1.052
synchronised to NTP server (172.16.2.241) at stratum 3
   time correct to within 35 ms
   polling server every 128 s
Current time in UTC is : Sun Oct 16 11:42:59 UTC 2011
Current time in Europe/Zurich is : Sun Oct 16 13:42:59 CEST 2011
admin:
Regarding the Syslog message, we haven't done any WM migrations and the storage is on the local disks of the UCS C200. So ther has not been any storage VMotions at all.
The guest is not synchronising the time with the ESXi host (unchecked in the VMware tools settings on the guest)
Has anyone faced a similar problem?
Does anyone know if the problem is caused by VMware or CUCM 8.6(2a)?
Any help and input is appreciated.
Many thanks in advance
Regards
Stefan Christen

Hello,
Could you copy 2 or 3 lines around this message ? It should specify to which remote peer talks about.
For ex I have the same issue on a CUCM 8.5.1 on UCS (ESX 4.0) when being testing 2 NTP relays, one in a Windows machine and another in a router.
I have the same message error for the ntp peer corresponding to the windows machine ("normal") and does not synchronize but I do not have any error message for the peer corresponding to the router.
Oct 27 06:13:06, HQ17-CUCM1, Warning, ntpRunningStatus.sh, : The local NTP client is off by more than the acceptable threshold of 3 seconds from NTP server 10.110.114.11. Restarting NTP ..., 71
                          ^^^^^^^^^^^^^
Oct 27 06:13:06, HQ17-CUCM1, Critical, ntpRunningStatus.sh, : The local NTP client is off by more than the acceptable threshold of 3 seconds from its remote NTP system peer. The normal remedy is for NTP Watch Dog to automatically restart NTP. However, an unusual number of automatic NTP restarts have already occurred on this node. No additional automatic NTP restarts will be done until NTP time synchronization stabilizes. This is likely due to an excessive number of VMware Virtual Machine migrations or Storage VMotions. Please consult your VMware Infrastructure Support Team., 72
In your case, verify if this message does not refer to 172.16.1.241, in which case does not seem an issue because your CUCM is in synch and prefers 172.16.2.241.
If that is the case, remove 172.16.1.241 as NTP server and check the logs.
You need perhaps another backup NTP server but it does not look to me very useful to point as backup NTP to a relay which is based on your primary NTP relay.
Let me know,
Brgrds
Jordi

CSCum76937 - CUCM Distributed denial-of-service vulnerability on NTP server

I'd request that the built-in iptables on the CUCM, which we users can't adjust at all, could be autoadjusted by the CUCM itself to remove this DDOS vector, namely by restricting NTP to/from the CUCM only to these hosts:
the NTP server(s) it talks with, as configured in 'System>Phone NTP Reference'
the device(s) subscribed to it, who get their time from it.
why can that not be done?

thanks, Wes--that response helps to frame the sometime-conflicting tensions between preserving performance and providing security.
I've been thinking about that, and the really excellent Cymru 'secure NTP template' (see
http://www.team-cymru.org/ReadingRoom/Templates/secure-ntp-template.html)
, trying to think about what could be done to offer better protection from the NTP attacks with less dynamicness, thinking that it's still important to offer something--all of my CUCMs that are outside firewalls have been attacked and participated in NTP-amplification attacks--and offer these suggestions as to things that the iptables might be leveraged to protect the CUCM, and at least as importantly everyone else FROM the CUCM, in a more static way:
* turn off control queries TO the CM--these are the vector into the CM that results in the amplification DDOS
* permit NTP into the CM only from the configured NTP servers the CM is using--yes, that's slightly 'dynamic', but will only occur infrequently and can be discretely done--scale is very small.
* the remaining really-dynamic part would be "only serve ntp to configured clients", and I can (reluctantly) understand why you push back on that. but if the first two points could be provided for, particularly the control-query filter which is the vector for at least the present threat, that's a huge improvement now.
the Cyrmu template under Unix NTP endsystems has some useful suggestions that could be adapted for CUCM iptables:
(quote from Cyrmu):
You can use your standard host firewall filtering capabilities to limit who the NTP process talks to. If you're using Linux and the host is acting as an NTP client only, the following iptables rules could be adapted to shield your NTP listener from unwanted remote hosts.
-A INPUT -s 0/0 -d 0/0 -p udp --source-port 123:123 -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -s 0/0 -d 0/0 -p udp --destination-port 123:123 -m state --state NEW,ESTABLISHED -j
(end quote)

Does Phone NTP Server reference change my licensed files, (CUCM)?

Hi all,
Good day.
I just wanted to know of on my CUCM Admin web page, on PHONE NTP REFERENCE, if adding or deleting NTP's does make my CUCM to re-host my active licensed files.
Because I changed the NTP server on the CLI call manager, (delete it and added one). And now all my licenses are invalid
I have a few more questions.
Which are the differences between of the Phone NTP Reference Server and NTP reference servers (CLI)?
Which one I do not must change?
If mi licenses say "Invalid", what is the worst case scenario could happen with my current configurations of IP Phones/GW/GK/Trunks/CSS?
Thanks in advice.
John

I assume you are using a UCS server,,,
The license MAC is generated by hashing the following user-configured parameters:
◊ Time zone
◊ NTP server 1 (or ?none?)
◊ NIC speed (or ?auto?)
◊ Hostname
◊ IP Address (or ?dhcp?)
◊ IP Mask (or ?dhcp?)
◊ Gateway Address (or ?dhcp?)
◊ Primary DNS (or ?dhcp?)
◊ SMTP server (or ?none?)
◊ Certificate Information (Organization, Unit, Location, State, Country)
When you change any of the parameters that create the license MAC, the license that you obtained with it becomes invalid. You must request a rehosting of the license to obtain a valid license. The old license continues to work for a 30-day grace period.
To rehost your licenses, you must open a case with the licensing team. Contact the licensing team at [email protected]
During the grace period, you can change the settings back to the licensed values to make your original license valid again. If you need more than 30 days of grace period, change your settings back to the licensed values, then change them back to the new values that you want to use. You will get another 30- day grace period.
Please rate all useful posts
"opportunity is a haughty goddess who waste no time with those who are unprepared"

Cisco CUCM NTP documentation/requirements

Hello all,
Just wondering about the "actual" NTP clock Stratum version requirements when
installing Cisco CUCM. As the three sources below show varying results;
So first we have the install guides;
Note
Cisco recommends that you use an external NTP server to ensure accurate system time on the first node. Ensure the external NTP server is stratum 9 or higher (meaning stratums 1-9). Subsequent nodes in the cluster will get their time from the first node.When you are installing Cisco Unity Connection on a virtual machine, you must specify an external NTP server.
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/install/8_6_1/install/cmins861.html#wp804989
Then the SRND;
Unified CM automatically synchronizes the NTP time of all subscribers in the cluster to the publisher. During installation, each subscriber is automatically configured to point to an NTP server running on the publisher. The publisher considers itself to be a master server and provides time for the cluster based on its internal hardware clock unless it is configured to synchronize from an external server. Cisco highly recommends configuring the publisher to point to a Stratum-1, Stratum-2, or Stratum-3 NTP server to ensure that the cluster time is synchronized with an external time source.
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/8x/netstruc.html#wpxref14097
And finally the NTP White Paper;
For Cisco Unified CallManager Versions 5.0 and later:
– Manual configuration of the ntpd.conf file is not allowed.
– Cisco Unified CallManager prompts the administrator to specify the external NTP server at publisher installation and automatically populates the ntpd.conf file on the publisher server.
– The ntpd.conf files of all other cluster servers are automatically configured to point to the publisher as the NTP source.
• Configure the publisher to point to a traceable stratum 1 clock source.
• Configure network latency between the publisher and the dedicated clock source so that it is within 40 milliseconds round-trip time (RTT).
http://www.cisco.com/en/US/prod/collateral/voicesw/ps6788/vcallcon/ps556/prod_white_paper0900aecd8037fdb5.html
Thanks for any light you can shed on this.
Cheers!
Rob
"Spend your life waiting,
for a moment that just don't come,
Well, don't waste your time waiting"
-Springsteen

Leo,
Do you have reference for this.
Still murky waters:
In 9.1 release Stratum 5 no longer enforced.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/9_1_1/CUCM_BK_RD7D4696_00_cucm-release-notes-911a/CUCM_BK_RD7D4696_00_release-notes-for-cisco-unified_chapter_0110.html
External NTP Server Requirements
The procedure "Set up first node" has been updated to remove the requirement that the external NTP server be Stratum 5 or higher. When you configure the first node, Cisco recommends configuring the publisher to point to a Stratum 1, Stratum 2, or Stratum 3 NTP server to ensure that the cluster time is synchronized with an external time source.

NTP server error

Hi All
I have problem in NTP server I configured my Domain server as ntp server when add the ntp server in the cucm 7 Pub by ip of my domain server (192.168.1.7) the status showing "The NTP service not accessible".
I login the ssh to the call mamager server ssh
admin:utils ntp status
ntpd (pid 19919) is running...
     remote           refid      st t when poll reach   delay   offset jitter
==============================================================================
127.127.1.0     LOCAL(0)        10 l   63   64    1    0.000    0.000   0.004
192.168.1.7     .INIT.          16 u    -   64    0    0.000    0.000 4000.00
unsynchronised
time server re-starting
   polling server every 64 s
Current time in UTC is : Sun Oct 27 12:25:19 UTC 2013
Current time in Asia/Riyadh is : Sun Oct 27 15:25:19 AST 2013
Thanks

Hello
Abdo , if you use Windows as NTP server , there is a problem to synchronize with Cisco CUCM linux OS.Please find the below link
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCte17541
Thank you
Please rate all useful information

UCCX 8.5 HA NTP issues (virtual servers)

Hello,
I'm working with an UCCX HA server that is having NTP issues. It reports that it is synchronized, but at stratum 16, which is considered to be unsynchronized. Also, it's always exactly 3 seconds off. I'm not sure if this is related, yet, but every time the servers failover, agents get licensing errors and cannot log into CAD.
PRIMARY UCCX
admin:utils ntp status
ntpd (pid 17380) is running...
     remote           refid      st t when poll reach   delay   offset jitter
==============================================================================
*198.147.23.5    139.78.135.14    2 u 291 512 377   37.758    5.479   0.298
+173.203.211.73 71.252.193.25    3 u 164 512 377   14.891   -1.871   0.106
+204.13.164.164 140.142.16.34    2 u 157 512 377   68.322   -0.486   0.053
synchronised to NTP server (198.147.23.5) at stratum 3
   time correct to within 57 ms
   polling server every 512 s
Current time in UTC is : Mon Mar 11 16:01:09 UTC 2013
Current time in America/Denver is : Mon Mar 11 10:01:09 MDT 2013
HA UCCX
admin:utils ntp status
ntpd (pid 16801) is running...
     remote           refid      st t when poll reach   delay   offset jitter
==============================================================================
*10.10.130.12    198.147.23.5     3 u   24   64   17   56.269 -2318.6   1.887
synchronised to NTP server (STEP) at stratum 16
   time correct to within 251 ms
   polling server every 64 s
Current time in UTC is : Mon Mar 11 16:01:12 UTC 2013
Current time in America/Denver is : Mon Mar 11 10:01:11 MDT 2013
Additionally, the following alert shows up in RTMT
At Wed Feb 13 11:11:17 MST 2013 on node 10.10.111.12; the following SyslogSeverityMatchFound events generated: SeverityMatch : Critical MatchedEvent : Feb 13 11:11:06 MVTUCCXHA2 user 2 ntpRunningStatus.sh: The local NTP client is off by more than the acceptable threshold of 3 seconds from its remote NTP system peer. The normal remedy is for NTP Watch Dog to automatically restart NTP. However; an unusual number of automatic NTP restarts have already occurred on this node. No additional automatic NTP restarts will be done until NTP time synchronization stabilizes. This is likely due to an excessive number of VMware Virtual Machine migrations or Storage VMotions. Please consult your VMware Infrastructure Support Team. AppID : Cisco Syslog Agent ClusterID : NodeID : MVTUCCXHA2 TimeStamp : Wed Feb 13 11:11:06 MST 2013
The servers are installed in a VMWare vSphere virtual environment on Cisco-approved IBM hosts. They have not been vmotioned or storage vmotioned.
Originally, the servers were configured to get time from Microsoft domain controllers. Since they use SNTP and UC servers require NTPv4, I configured the primary UCCX server to use public NTPv4 servers. I have updated vmware tools on both servers and rebooted the servers and restarted ntp services, but nothing will get time to synchronize on the HA server.
Finally, there are other UC servers (CUCM & CUC) set up to use the same NTP servers, but the HA servers cannot synchronize their time no matter what I do. I've tried different NTP servers both on the LAN and public ones. I thought I would include this detail since my gut is telling me that this issue has something to do with the virtual environment.
HA CUC
admin:utils ntp status
ntpd (pid 14554) is running...
     remote           refid      st t when poll reach   delay   offset jitter
==============================================================================
10.10.111.11    204.13.164.164   3 u    -   64    1   50.504 431.491 221.689
unsynchronised
time server re-starting
   polling server every 64 s
Current time in UTC is : Mon Mar 11 15:20:22 UTC 2013
Current time in America/Denver is : Mon Mar 11 09:20:22 MDT 2013
I can see NTP traffic between the two servers:
admin:utils network capture port 123
Executing command with options:
size=128                count=1000              interface=eth0
src=                    dest=                   port=123
ip=
09:29:28.051951 IP MVTCUCNXHA.mvte.com.ntp > MVTCUCNXPRI.mvte.com.ntp: NTPv4, Client, length 48
09:29:28.105679 IP MVTCUCNXPRI.mvte.com.ntp > MVTCUCNXHA.mvte.com.ntp: NTPv4, Server, length 48
09:29:30.049773 IP MVTCUCNXHA.mvte.com.ntp > MVTCUCNXPRI.mvte.com.ntp: NTPv4, Client, length 48
09:29:30.100371 IP MVTCUCNXPRI.mvte.com.ntp > MVTCUCNXHA.mvte.com.ntp: NTPv4, Server, length 48
09:29:32.051282 IP MVTCUCNXHA.mvte.com.ntp > MVTCUCNXPRI.mvte.com.ntp: NTPv4, Client, length 48
09:29:32.103161 IP MVTCUCNXPRI.mvte.com.ntp > MVTCUCNXHA.mvte.com.ntp: NTPv4, Server, length 48
09:29:34.049279 IP MVTCUCNXHA.mvte.com.ntp > MVTCUCNXPRI.mvte.com.ntp: NTPv4, Client, length 48
09:29:34.100112 IP MVTCUCNXPRI.mvte.com.ntp > MVTCUCNXHA.mvte.com.ntp: NTPv4, Server, length 48
09:29:36.050723 IP MVTCUCNXHA.mvte.com.ntp > MVTCUCNXPRI.mvte.com.ntp: NTPv4, Client, length 48
09:29:36.101990 IP MVTCUCNXPRI.mvte.com.ntp > MVTCUCNXHA.mvte.com.ntp: NTPv4, Server, length 48
09:29:38.052193 IP MVTCUCNXHA.mvte.com.ntp > MVTCUCNXPRI.mvte.com.ntp: NTPv4, Client, length 48
09:29:38.103854 IP MVTCUCNXPRI.mvte.com.ntp > MVTCUCNXHA.mvte.com.ntp: NTPv4, Server, length 48
09:29:40.050156 IP MVTCUCNXHA.mvte.com.ntp > MVTCUCNXPRI.mvte.com.ntp: NTPv4, Client, length 48
09:29:40.100831 IP MVTCUCNXPRI.mvte.com.ntp > MVTCUCNXHA.mvte.com.ntp: NTPv4, Server, length 48
Any ideas?
Thanks!
Pashtoun

Thanks for the reply Graham! I'm aware that windows does not implement NTP correctly, which is why I was trying NTPv4 and IOS time servers.The NTP issue I was troubleshooting actually ended up being a combination of a couple issues:
1. Cisco Bug CSCtw46611
2. The virtual UC servers need to be configured with the same NTP server as those configured on the VMWare hosts they run in.
The time issue on CUCM and CUC was resolved by the workaround in (1) and the changes made on the hosts regarding (2). The time issue on UCCX was resolved by (2) since it is not affected by the bug. There were some really bizarre issues that went away once NTP was fixed: UCCX would lose data sync with CUCM every time CUCM was rebooted, the voice ports on the HA CUC server had terrible voice quality or would never pick up (eternal ringback), and UCCX failover didn't work (licensing errors, etc as explain in my original post).

Callcentric SIP Trunk (ITSP -- 2811 CUBE -- CUCM 8.6

I have a SIP trunk from call centric that goes into my lab gear - they appear to be a good sip service due to cost but I'm having some trouble getting calls to route correctly. The call flow is Callcentric.com ITSP (SIP) --> 2811 (acting as cube) -->SIP Trunk --> CUCM 8.6. Phones are registered to CUCM.
I have the sip trunk registered and calls come in to the router (I see them in ccsip message/call debugs) The 2811 running 15.1(4)M7). Callcentric sends the username of the customer in the sip Invite instead of the called number, the called number is in the TO field. I have several DID’s from Callcentric (18452055544, 18452055545, 18452055546) for my lab. There are a few configs on here for CME where the customer number (17772253754) is simply translated to their phone DN - which is fine if you only have 1 DN with callcentric but more than 1 and thats not feasible since every inbound did will be matched to that 17772253754 translation/phone dn.
I’m using the a guide from http://tblog.cisco.be/2011/02/17/cube-conditional-sip-profiles/ using the Copy function as described http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-software-release-15-1-3-t/product_bulletin_c25-635704.html
I haven’t been able to find anything where they actually explain all the header fields so Its mostly trial and error.. so far mostly error. I think I’m close.. but who knows. Any assistance would be greatly appreciated
voice class sip-profiles 1
request INVITE peer-header sip TO copy ".sip:(.*)@." u01
request INVITE sip-header SIP-Req-URI modify ".*@(.*)" "INVITE sip:\u01@\1"
CUCM (single/pub)- 192.168.1.200
2811 acting as cube - 192.168.1.203
Calling Number - 18165297500
Called Number - 18452055544
vrtr1#show sip register status
Line                             peer       expires(sec) registered P-Associ-URI
================================ ========== ============ ========== ============
17772253754                      -1         20           yes
vrtr1#
The Call Setup Information is:
Call Control Block (CCB) : 0x49646C28
State of The Call        : STATE_DEAD
TCP Sockets Used         : NO
Calling Number           : 18165297500
Called Number            : 17772253754 (my customer number not called number)
Source IP Address (Sig ): 192.168.1.203 (my 2811 router)
Destn SIP Req Addr:Port : 204.11.192.159:5080
Destn SIP Resp Addr:Port : 204.11.192.159:5080
Destination Name         : 204.11.192.159
Feb 14 11:20:53.303: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
INVITE sip:[email protected]:5060 SIP/2.0
v: SIP/2.0/UDP 204.11.192.159:5080;branch=z9hG4bK-805ff2443b18502ff96181045b62dd74
f: <sip:[email protected]>;tag=3601387252-874282
t: <sip:[email protected]>
i: [email protected]
CSeq: 1 INVITE
Max-Forwards: 8
m: <sip:[email protected]:5080;transport=udp>
Supported: timer
c: application/sdp
l: 350
v=0
o=NexTone-MSW 2147483647 2147483647 IN IP4 204.11.192.159
s=sip call
c=IN IP4 204.11.192.159
t=0 0
m=audio 61094 RTP/AVP 18 0 8 101
a=fmtp:18 annexb=no
a=fmtp:101 0-15
a=rtpmap:101 telephone-event/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:18 G729/8000
a=ptime:20
a=sendrecv
a=silenceSupp:off - - - -
a=setup:actpass
Feb 14 11:20:53.327: //936/310B294680AD/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 204.11.192.159:5080;branch=z9hG4bK-805ff2443b18502ff96181045b62dd74
From: <sip:[email protected]>;tag=3601387252-874282
To: <sip:[email protected]>
Date: Fri, 14 Feb 2014 17:20:53 GMT
Call-ID: [email protected]
CSeq: 1 INVITE
Allow-Events: telephone-event
Server: Cisco-SIPGateway/IOS-12.x
Content-Length: 0
Feb 14 11:20:53.327: //936/310B294680AD/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 404 Not Found
Via: SIP/2.0/UDP 204.11.192.159:5080;branch=z9hG4bK-805ff2443b18502ff96181045b62dd74
From: <sip:[email protected]>;tag=3601387252-874282
To: <sip:[email protected]>;tag=35399D8-63
Date: Fri, 14 Feb 2014 17:20:53 GMT
Call-ID: [email protected]
CSeq: 1 INVITE
Allow-Events: telephone-event
Server: Cisco-SIPGateway/IOS-12.x
Reason: Q.850;cause=1
Content-Length: 0
Feb 14 11:20:53.419: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
ACK sip:[email protected]:5060 SIP/2.0
v: SIP/2.0/UDP 204.11.192.159:5080;branch=z9hG4bK-805ff2443b18502ff96181045b62dd74
f: <sip:[email protected]>;tag=3601387252-874282
t: <sip:[email protected]>;tag=35399D8-63
i: [email protected]
CSeq: 1 ACK
Max-Forwards: 10
l: 0
u all
Feb 14 11:20:57.067: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
ACK sip:18452055544;cic=0288;rn=6465471001;[email protected]:5070 SIP/2.0
v: SIP/2.0/UDP 204.11.192.159:5080;branch=z9hG4bK-6bceae47efe9f53b4234698a32ac8beb
f: <sip:[email protected]>;tag=3601387252-874282
t: <sip:[email protected]>;tag=35399D8-63
i: [email protected]
CSeq: 1 ACK
Max-Forwards: 8
l: 0
************************** Running Config **************************
sh run
vrtr1#sh running-config
Building configuration...
Current configuration : 4189 bytes
! Last configuration change at 00:34:03 CST Fri Feb 14 2014
! NVRAM config last updated at 20:26:58 CST Thu Feb 13 2014
! NVRAM config last updated at 20:26:58 CST Thu Feb 13 2014
version 15.1
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
no service password-encryption
hostname vrtr1
boot-start-marker
boot system flash:
boot system flash flash:c2800nm-ipvoicek9-mz.151-4.M7.bin
boot-end-marker
card type t1 0 0
logging buffered 4096 notifications
enable password cisco
no aaa new-model
memory-size iomem 5
clock timezone CST -6 0
clock summer-time CST recurring
no network-clock-participate wic 0
dot11 syslog
ip source-route
ip cef
ip name-server 192.168.1.9
no ipv6 cef
multilink bundle-name authenticated
voice service voip
ip address trusted list
ipv4 192.168.1.0 255.255.255.0
ipv4 204.11.192.0 255.255.255.0
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
supplementary-service h450.12
no supplementary-service sip moved-temporarily
no supplementary-service sip refer
sip
bind control source-interface FastEthernet0/0
bind media source-interface FastEthernet0/0
registrar server expires max 1800 min 1800
localhost dns:callcentric.com
outbound-proxy dns:callcentric.com
voice class codec 1
codec preference 1 g729r8
codec preference 2 g711ulaw
voice class sip-profiles 1
request INVITE peer-header sip TO copy ".sip:(.*)@." u01
request INVITE sip-header SIP-Req-URI modify ".*@(.*)" "INVITE sip:\u01@\1"
voice-card 0
crypto pki token default removal timeout 0
license udi pid CISCO2811 sn FTX1133A4QR
controller T1 0/0/0
cablelength long 0db
interface FastEthernet0/0
description ** LAN **
ip address 192.168.1.203 255.255.255.0
duplex auto
speed auto
h323-gateway voip interface
h323-gateway voip bind srcaddr 192.168.1.203
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
ip forward-protocol nd
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 192.168.1.1
snmp mib persist circuit
control-plane
voice-port 0/1/0
voice-port 0/1/1
voice-port 0/1/2
voice-port 0/1/3
ccm-manager mgcp
no ccm-manager fax protocol cisco
ccm-manager music-on-hold
ccm-manager config server 192.168.1.200
ccm-manager config
mgcp
mgcp call-agent 192.168.1.200 2427 service-type mgcp version 0.1
mgcp dtmf-relay voip codec all mode out-of-band
mgcp rtp unreachable timeout 1000 action notify
mgcp modem passthrough voip mode nse
mgcp package-capability rtp-package
mgcp package-capability sst-package
mgcp package-capability pre-package
no mgcp package-capability res-package
no mgcp package-capability fxr-package
no mgcp timer receive-rtcp
mgcp sdp simple
mgcp fax t38 inhibit
mgcp rtp payload-type g726r16 static
mgcp bind control source-interface FastEthernet0/0
mgcp bind media source-interface FastEthernet0/0
mgcp profile default
dial-peer voice 999100 pots
service mgcpapp
port 0/1/0
dial-peer voice 999101 pots
service mgcpapp
port 0/1/1
dial-peer voice 999102 pots
service mgcpapp
port 0/1/2
dial-peer voice 999103 pots
service mgcpapp
port 0/1/3
dial-peer voice 999010 pots
service mgcpapp
port 0/1/0
dial-peer voice 6 voip
description ## INBOUND DID to CUCM ##
session protocol sipv2
session target ipv4:192.168.1.200
incoming called-number 17772253754
voice-class sip profiles 1
dtmf-relay h245-alphanumeric
no vad
dial-peer voice 7 voip
description ## INBOUND DID to CUCM ##
session protocol sipv2
session target ipv4:192.168.1.200
incoming called-number 1845205554[4-5]
voice-class sip profiles 1
dtmf-relay h245-alphanumeric
no vad
sip-ua
credentials username 17772253754 password 7 106C1B49111F17194D realm callcentric.com
authentication username 17772253754 password 7 08035E1E1D11000553 realm callcentric.com
no remote-party-id
retry invite 2
retry register 10
timers connect 100
mwi-server dns:callcentric.com expires 3600 port 5060 transport udp
registrar dns:callcentric.com expires 3600
sip-server dns:callcentric.com
host-registrar
line con 0
line aux 0
line vty 0 4
password cisco
login
transport input all
scheduler allocate 20000 1000
ntp server 199.102.46.72
ntp server 23.227.162.123 prefer
end
exit

Thank you for the reply. I've updated the dial-peers as sugested. I'm now seeing an invite go out to my CUCM however the call fails with a 403 (forbidden) which appears to come from the ITSP (Callcentric). I've included a new set of ccsip message debugs and the dial-peers as adjusted. Please let me know what you think.
dial-peer voice 6 voip
description ## INBOUND CALL from ITSP ##
session protocol sipv2
session target sip-server
incoming called-number 17772253754
voice-class sip profiles 1
dtmf-relay rtp-nte
no vad
dial-peer voice 100 voip
description ## INBOUND DID to CUCM ##
destination-pattern 17772253754
session protocol sipv2
session target ipv4:192.168.1.200
voice-class sip profiles 1
dtmf-relay rtp-nte
no vad
dial-peer voice 7 voip
description ## INBOUND DID to CUCM ##
session protocol sipv2
session target ipv4:192.168.1.200
incoming called-number 1845205554[4-5]
voice-class sip profiles 1
dtmf-relay rtp-nte
no vad
Feb 15 10:18:11.424: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
INVITE sip:[email protected]:5060 SIP/2.0
v: SIP/2.0/UDP 204.11.192.164:5080;branch=z9hG4bK-d78945b444598bc22c8509d069f4789d
f: ;tag=3601469891-655
t: [email protected]>
i: [email protected]
CSeq: 1 INVITE
Max-Forwards: 8
m:
Supported: timer
c: application/sdp
l: 350
v=0
o=NexTone-MSW 2147483647 2147483647 IN IP4 204.11.192.164
s=sip call
c=IN IP4 204.11.192.164
t=0 0
m=audio 61782 RTP/AVP 18 0 8 101
a=fmtp:18 annexb=no
a=fmtp:101 0-15
a=rtpmap:101 telephone-event/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:18 G729/8000
a=ptime:20
a=sendrecv
a=silenceSupp:off - - - -
a=setup:actpass
Feb 15 10:18:11.456: //2419/9933162D820E/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 204.11.192.164:5080;branch=z9hG4bK-d78945b444598bc22c8509d069f4789d
From: ;tag=3601469891-655
To: [email protected]>
Date: Sat, 15 Feb 2014 16:18:11 GMT
Call-ID: [email protected]
CSeq: 1 INVITE
Allow-Events: telephone-event
Server: Cisco-SIPGateway/IOS-12.x
Content-Length: 0
Feb 15 10:18:11.460: //2420/9933162D820E/SIP/Msg/ccsipDisplayMsg:
Sent:
INVITE sip:@192.168.1.200:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.203:5060;branch=z9hG4bK9A91F35
From: [email protected]>;tag=8408644-12C8
To:
Date: Sat, 15 Feb 2014 16:18:11 GMT
Call-ID: [email protected]
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Min-SE: 1800
Cisco-Guid: 2570262061-2509443555-2182021079-2501285341
User-Agent: Cisco-SIPGateway/IOS-12.x
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
CSeq: 101 INVITE
Timestamp: 1392481091
Contact:
Expires: 180
Allow-Events: telephone-event
Max-Forwards: 7
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 273
v=0
o=CiscoSystemsSIP-GW-UserAgent 2786 1511 IN IP4 192.168.1.203
s=SIP Call
c=IN IP4 192.168.1.203
t=0 0
m=audio 18168 RTP/AVP 18 101
c=IN IP4 192.168.1.203
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=no
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
Feb 15 10:18:11.552: //2420/9933162D820E/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 407 Proxy Authentication Required
v: SIP/2.0/UDP 192.168.1.203:5060;branch=z9hG4bK9A91F35;rport=57100;received=24.123.98.94
f: [email protected]>;tag=8408644-12C8
t:
i: [email protected]
CSeq: 101 INVITE
Proxy-Authenticate: Digest realm="callcentric.com", domain="sip:callcentric.com", nonce="8ae6b7b1cea74cf401e8a26fd3c7371b", opaque="", stale=TRUE, algorithm=MD5
l: 0
Feb 15 10:18:11.560: //2420/9933162D820E/SIP/Msg/ccsipDisplayMsg:
Sent:
ACK sip:[email protected]:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.203:5060;branch=z9hG4bK9A91F35
From: [email protected]>;tag=8408644-12C8
To:
Date: Sat, 15 Feb 2014 16:18:11 GMT
Call-ID: [email protected]
Max-Forwards: 70
CSeq: 101 ACK
Allow-Events: telephone-event
Content-Length: 0
Feb 15 10:18:11.560: //2420/9933162D820E/SIP/Msg/ccsipDisplayMsg:
Sent:
INVITE sip:@192.168.1.200:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.203:5060;branch=z9hG4bK9AA1BA3
From: [email protected]>;tag=8408644-12C8
To:
Date: Sat, 15 Feb 2014 16:18:11 GMT
Call-ID: [email protected]
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Min-SE: 1800
Cisco-Guid: 2570262061-2509443555-2182021079-2501285341
User-Agent: Cisco-SIPGateway/IOS-12.x
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
CSeq: 102 INVITE
Timestamp: 1392481091
Contact:
Expires: 180
Allow-Events: telephone-event
Proxy-Authorization: Digest username="17772253754",realm="callcentric.com",uri="sip:[email protected]:5060",response="a381f10fbbfbd255b444569fef0dddfe",nonce="8ae6b7b1cea74cf401e8a26fd3c7371b",opaque="",algorithm=MD5
Max-Forwards: 7
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 273
v=0
o=CiscoSystemsSIP-GW-UserAgent 2786 1511 IN IP4 192.168.1.203
s=SIP Call
c=IN IP4 192.168.1.203
t=0 0
m=audio 18168 RTP/AVP 18 101
c=IN IP4 192.168.1.203
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=no
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
Feb 15 10:18:11.648: //2420/9933162D820E/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 403 Incorrect Authentication
v: SIP/2.0/UDP 192.168.1.203:5060;branch=z9hG4bK9AA1BA3;rport=57100;received=24.123.98.94
f: [email protected]>;tag=8408644-12C8
t:
i: [email protected]
CSeq: 102 INVITE
l: 0
Feb 15 10:18:11.660: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
ACK sip:[email protected]:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.203:5060;branch=z9hG4bK9AA1BA3
From: [email protected]>;tag=8408644-12C8
To:
Date: Sat, 15 Feb 2014 16:18:11 GMT
Call-ID: [email protected]
Max-Forwards: 70
CSeq: 102 ACK
Allow-Events: telephone-event
Content-Length: 0
Feb 15 10:18:11.660: //2419/9933162D820E/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 204.11.192.164:5080;branch=z9hG4bK-d78945b444598bc22c8509d069f4789d
From: ;tag=3601469891-655
To: [email protected]>;tag=8408714-B60
Date: Sat, 15 Feb 2014 16:18:11 GMT
Call-ID: [email protected]
CSeq: 1 INVITE
Allow-Events: telephone-event
Server: Cisco-SIPGateway/IOS-12.x
Reason: Q.850;cause=57
Content-Length: 0
Feb 15 10:18:11.752: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
apsc-vrtr1#ACK sip:[email protected]:5060 SIP/2.0
v: SIP/2.0/UDP 204.11.192.164:5080;branch=z9hG4bK-d78945b444598bc22c8509d069f4789d
f: ;tag=3601469891-655
t: [email protected]>;tag=8408714-B60
i: [email protected]
CSeq: 1 ACK
Max-Forwards: 10
l: 0
vrtr1#u al
Feb 15 10:18:14.776: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
ACK sip:18452055544;cic=0288;rn=6465471001;[email protected]:5070 SIP/2.0
v: SIP/2.0/UDP 204.11.192.164:5080;branch=z9hG4bK-e437c2c5cac5f1a6e147c1cd7c98aad7
f: ;tag=3601469891-655
t: [email protected]>;tag=8408714-B60
i: [email protected]
CSeq: 1 ACK
Max-Forwards: 8
l: 0

Connectivity issues for random phones in CUCM 8.6 on Vmware

I have a client that has problems with around half of there ip phones (6921 & 7945) after a situation with overheating in the serverroom.
The solutions was a 1 Publisher, 1 subscriber setup with each on a separate Vmware server.
The Publisher is connected to the Core Switch which is further connected to 4 distribution switches which again connect to 5 more distribution switches. They have around 200 ip phones connected to these switches that get assigned IP's with DHCP.
The physical disk that the Subscriber was on was destroyed the incident. The Publisher they recovered, but to do this they had to recreate the vm descriptor file and attach it to the flat-file.
So the current situation is that the system is running with only 1 Publisher and no Subscriber.
There is also a license warning in the CCM Admin section, stating a License Overage (2 nodes used, but only 1 licensed.)
The license status is not invalid though, and the license state is "Uploaded". This second node I suppose might be the Subscirber that no longer exists? The phones have more than enough licenses.
When powered up the system seems to run as it should, but only about half the phones have connectivity to and can register with CUCM.
I have tried to reboot some phones remotely by cutting the power on the switch interfaces where they are attached, but that made no difference.
The console log on the phones that are down show TFTP Timeout & File Transfer Error.
The phones that are up and running can be pinged successfully from the CUCM cli, but when pinging the others I get "Destination Host Unreachable".
The strange thing is that it seems completely random as to what phones are up or down. On all switches there are connected phones with both working and non-working connections to CUCM.
To try to pinpoint the fault I chose 2 devices on the same switch and compared the config for each interface, one that has connectivity and is registered, and one that does not have connectivity and is unreachable.
Everything seems to be identical so I can't see what causes this error on the one, but not on the other.
Also when I ping the ip phone with no connectivity to CUCM from any of the switches, the ping is successful.
Anyone know what could be the cause of this behaviour?

Hello and thank you for your time.
The phones get there IP’s from a DHCP Server (Not the built in one in CUCM, but an external server). I have tested that the DHCP process works by powering off a phone (one of the phones with connectivity issues), deleting the lease, and then powering the phone back on and seeing the device request and receive a new lease.
There is only one CCM group active and both servers are in this group with the Publisher as highest priority server. All phones are in the same Device Pool attached to this group.
There are a lot of warnings regarding dbReplication & missing node due to the subscriber being gone. Also there is an issue with NTP server (see below). I will post more on this tomorrow morning.
I have also attached the console log from one of the phones that can't register.
NTP Alert:
At Tue Jan 13 21:24:10 BRST 2015 on node 192.168.50.2; the following SyslogSeverityMatchFound events generated: SeverityMatch : Critical MatchedEvent : Jan 13 21:23:49 CUCMPUB user 2 ntpRunningStatus.sh: Primary node NTP server; 192.168.50.6; is currently inaccessible or down. Verify the network between the primary and secondary nodes. Check the status of NTP on both the primary and secondary nodes via CLI 'utils ntp status'. If the network is fine; try restarting NTP using CLI 'utils ntp restart'. AppID : Cisco Syslog Agent ClusterID : NodeID : CUCMPUB TimeStamp : Tue Jan 13 21:23:49 BRST 2015 SeverityMatch : Critical MatchedEvent : Jan 13 21:23:53 CUCMPUB user 2 ntpRunningStatus.sh: The local NTP client is off by more than the acceptable threshold of 3 seconds from its remote NTP system peer. The normal remedy is for NTP Watch Dog to automatically restart NTP. However; an unusual number of automatic NTP restarts have already occurred on this node. No additional automatic NTP restarts will be done until NTP time synchronization stabilizes. This is likely due to an excessive number of VMware Virtual Machine migrations or Storage VMotions. Please consult your VMware Infrastructure Support Team. AppID : Cisco Syslog Agent ClusterID : NodeID : CUCMPUB TimeStamp : Tue Jan 13 21:23:53 BRST 2015

Problem migrating CUCM 7.1.5 to 9.1(2) (Jump Upgrade)

Hello all,
I am facing an issue when trying to upgrade from CUCM 7.1.5.30000-1 to 9.1(2) over UCS following the jump upgrade procedure.
I have installed 7.1.5 CUCM software on the UCS using the 9.1(2) ova. (two nodes cluster), and after that restored the CUCM backup.
I have loaded "ciscocm.refresh_upgrade_v1.3.cop" file before the upgrade on both nodes.
The connectivity with NTP server is good.
The upgrade file I am using is "UCSInstall_UCOS_9.1.2.11900-12.sgn".
The installation begins on Publisher but after three hours and when it is ending it fails. I have checked the installation logs and this is what it shows:
05/23/2014 17:45:51 component_install|(CAPTURE) Fri May 23 17:41:46 2014 cm-dbl-install DEBUG: cm-dbl-install [0]|<LVL::Debug>
05/23/2014 17:45:51 component_install|(CAPTURE) Fri May 23 17:41:46 2014 cm-dbl-install DEBUG: <--|<LVL::Debug>
05/23/2014 17:45:51 component_install|File:/opt/cisco/install/bin/component_install:756, Function: exec_progmeter(), /opt/cisco/install/bin/progmeter failed (1)|<LVL::Error>
05/23/2014 17:45:51 appmanager.sh|Internal Error, File:/usr/local/bin/base_scripts/appmanager.sh:269, Function: refresh_upgrade(), failed to refresh_upgrade infrastructure_post components|<LVL::Critical>
05/23/2014 17:45:51 post_install|File:/opt/cisco/install/bin/post_install:911, Function: install_applications(), /usr/local/bin/base_scripts/appmanager.sh -refresh-upgrade failed (1)|<LVL::Error>
05/23/2014 17:45:51 post_install|Exiting with result 1|<LVL::Info>
05/23/2014 17:45:51 post_install|INSTALL_TYPE="Refresh Upgrade"|<LVL::Debug>
05/23/2014 17:45:51 post_install|Process refresh upgrade failure|<LVL::Info>
05/23/2014 17:45:51 post_install|(CAPTURE) Mail notification cancelled - smtp server address for email not found! [/usr/local/platform/conf/platformConfig.xml]|<LVL::Debug>
05/23/2014 17:45:51 post_install|Retore grub.conf from grub.conf.recovery|<LVL::Info>
05/23/2014 17:45:51 post_install|Copy recovery file, /grub/boot/grub/grub.conf.recovery, to /grub/boot/grub/grub.conf|<LVL::Debug>
05/23/2014 17:45:51 post_install|Retore of grub.conf complete|<LVL::Info>
05/23/2014 17:45:51 post_install|Invalidate upgrade partition|<LVL::Info>
05/23/2014 17:45:51 post_install|Removing master RPM|<LVL::Debug>
05/23/2014 17:45:52 post_install|Removing /etc/opt/cisco/install.conf|<LVL::Debug>
05/23/2014 17:45:52 post_install|Invalidate any product configuration file|<LVL::Debug>
05/23/2014 17:45:52 post_install|Setting product and deployment version attributes in /etc/opt/cisco/install/conf/callmanager_product.conf to 0.0.0.0000-0000|<LVL::Debug>
05/23/2014 17:45:52 post_install|Cleanup refresh upgrade staging areas|<LVL::Debug>
05/23/2014 17:46:14 post_install|Parse argument status=upgrade.stage.error|<LVL::Debug>
05/23/2014 17:46:14 post_install|_set_upgrade_status_attribute: status set to upgrade.stage.error|<LVL::Debug>
05/23/2014 17:46:14 post_install|File:/opt/cisco/install/bin/post_install:580, Function: handle_refresh_upgrade_failure(), Refresh upgrade failed. Trying to reboot to currently active version.|<LVL::Error>
05/23/2014 17:47:19 hardware_check.sh|Initializing hardware library on boot|<LVL::Info>
05/23/2014 17:47:19 ServerApiManager|In main with args -|initialize|- called file |/usr/local/bin/base_scripts/server_api_manager.sh| - and current mode=HSSI_Mode |<LVL::Debug>
05/23/2014 17:47:19 ServerApiManager||Method: initialize args: |- current mode=HSSI_Mode completed with code [0]|<LVL::Debug>
05/23/2014 17:47:19 ServerApiManager|In main with args -|initHardwareLibrary|- called file |/usr/local/bin/base_scripts/server_api_manager.sh| - and current mode=HSSI_Mode |<LVL::Debug>
05/23/2014 17:47:19 ServerApiManager|Sam_reset being called|
I think it is similar to this other case: https://supportforums.cisco.com/discussion/12181161/cucm-vm-715-912-migration-error#comment-9719721
Can anyone help me with this? I am stuck on the migration.
Thanks!!
Héctor

Just for the record. I found the solution to my problem. Checking more logs I read this:
The installation has encountered a unrecoverable internal error. For further assistance report the following information to your support provider.
"/usr/local/cm/script/cm-dbl-ontape_backup-install RU PostInstall 9.1.2.11900-12 7.1.5.30000-1 /usr/local/cm/ /common/component/database /common/log/install/capture.txt " terminated. Exceeded max time (240)
The system will now halt.
So I accessed the Dissaster Recovery Section on CUCM and deleted the tape backup device that was configured there. After deleting it the upgrade went well.

CUE 8.5.1 NME-CUE web page setup no setup initialization and error: Login to CUCME failed

When first login in via the web page. When going to Configure menu and choosing CUCME to enter it manually, I get:
Error: Login to CUCME failed with the new values. Check the new CUCME configuration and enter the correct values.
hostname: 172.23.0.1
web user name: admin
web password: cisco
Sip gateway hostname: 172.23.0.1
ccn reporting historical
database local
description "se-172-23-0-2"
end reporting
ccn subsystem sip
gateway address "172.23.0.1"
mwi sip unsolicited
end subsystem
BR2-ROUTER#sh run
Building configuration...
Current configuration : 5264 bytes
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname BR2-ROUTER
boot-start-marker
boot-end-marker
card type t1 0 3
logging message-counter syslog
logging buffered 51200 warnings
no aaa new-model
clock timezone MST -7
clock summer-time MDT recurring
network-clock-participate wic 3
dot11 syslog
ip source-route
ip cef
ip dhcp excluded-address 172.21.0.1 172.21.0.49
ip dhcp excluded-address 172.21.0.59 172.21.0.254
ip dhcp excluded-address 172.20.0.1 172.20.0.10
ip dhcp pool CME
   network 172.21.0.0 255.255.255.0
   option 150 ip 172.21.0.1
   default-router 172.21.0.1
ip dhcp pool LAPTOPS
   network 172.20.0.0 255.255.255.0
   default-router 172.20.0.2
   dns-server 10.10.10.1
no ip domain lookup
ip domain name wilson.com
no ipv6 cef
multilink bundle-name authenticated
voice service voip
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
no supplementary-service h225-notify cid-update
sip
bind control source-interface GigabitEthernet0/0.20
bind media source-interface GigabitEthernet0/0.20
registrar server expires max 600 min 60
voice register global
mode cme
source-address 172.21.0.1 port 5060
max-dn 4
max-pool 4
authenticate register
timezone 12
time-format 24
date-format YY-M-D
voicemail 3600
tftp-path flash:
create profile sync 0021447056000116
ntp-server 174.137.67.50 mode directedbroadcast
voice register dn 1
number 3006
call-forward b2bua busy 3600
call-forward b2bua mailbox 3006
call-forward b2bua noan 3600 timeout 12
name rp-sip-1-16
label SIP 511-5016
mwi
voice register pool 1
id mac FCFB.FBCA.30CE
type 7965
number 1 dn 1
dtmf-relay rtp-nte
username 3006 password cisco
description 687-3006
codec g711ulaw
voice-card 0
username admin privilege 15 secret 5 $1$..D.$orbTsqgPSvNkMpfjjkg5q.
archive
log config
hidekeys
controller T1 0/3/0
cablelength long 0db
controller T1 0/3/1
cablelength long 0db
interface Loopback0
ip address 172.23.0.1 255.255.255.252
ip ospf network point-to-point
interface GigabitEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
no ip address
duplex auto
speed auto
interface GigabitEthernet0/0.10
encapsulation dot1Q 10 native
ip address 172.20.0.2 255.255.255.0
interface GigabitEthernet0/0.20
encapsulation dot1Q 20
ip address 172.21.0.1 255.255.255.0
interface GigabitEthernet0/0.30
encapsulation dot1Q 30
ip address 172.22.0.1 255.255.255.0
interface GigabitEthernet0/1
ip address 192.168.1.138 255.255.252.0
duplex auto
speed auto
interface Integrated-Service-Engine1/0
ip unnumbered Loopback0
service-module ip address 172.23.0.2 255.255.255.252
service-module ip default-gateway 172.23.0.1
no keepalive
ip forward-protocol nd
ip route 172.23.0.2 255.255.255.255 Integrated-Service-Engine1/0
ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip http path flash:/gui
access-list 23 permit 10.10.10.0 0.0.0.7
nls resp-timeout 1
cpd cr-id 1
control-plane
ccm-manager fax protocol cisco
mgcp fax t38 ecm
dial-peer voice 3600 voip
destination-pattern 36..
session protocol sipv2
session target ipv4:192.168.1.144
dtmf-relay sip-notify
codec g711ulaw
no vad
sip-ua
retry invite 3
timers trying 400
mwi-server ipv4:192.168.1.144 expires 3600 port 5060 transport udp
gatekeeper
shutdown
telephony-service
no auto-reg-ephone
em logout 0:0 0:0 0:0
max-ephones 10
max-dn 10 no-reg both
ip source-address 172.23.0.1 port 2000
voicemail 3600
max-conferences 8 gain -6
call-forward pattern .T
web admin system name admin password cisco
dn-webedit
transfer-system full-consult
transfer-pattern .T
create cnf-files version-stamp Jan 01 2002 00:00:00
ephone-dn 1
number 3007
description 687-9898-3007
name Vatos locos
call-forward busy 3600
call-forward noan 3600 timeout 12
ephone-dn 2
number 3008
description 687-9898-3008
name Vatos locos2
call-forward busy 3600
call-forward noan 3600 timeout 12
ephone-dn 3 octo-line
number 3009
huntstop channel 6
ephone-dn 4
number 7999....
mwi on
ephone-dn 5
number 7998....
mwi off
ephone 1
device-security-mode none
description TESTTTTT
mac-address FCFB.FBCA.3406
max-calls-per-button 5
busy-trigger-per-button 4
type 7965
button 1:1 2:3
ephone 2
device-security-mode none
description TESTTTTT
mac-address FCFB.FBCA.3030
max-calls-per-button 4
busy-trigger-per-button 3
type 7965
button 1:2 2:3
line con 0
exec-timeout 0 0
logging synchronous
login local
line aux 0
line 66
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120
line vty 0 4
access-class 23 in
privilege level 15
login local
transport input telnet
line vty 5 15
access-class 23 in
privilege level 15
login local
transport input telnet
scheduler allocate 20000 1000
ntp server 174.137.67.50
end
BR2-ROUTER#
Apr 12 2011 16:23:12 gui/admin_user.js
122     585532 Mar 30 2011 05:48:46 phone/7975/cnu75.8-3-2-27.sbn
123    2453636 Mar 30 2011 05:48:56 phone/7975/cvm75sccp.8-3-2-27.sbn
124     326315 Mar 30 2011 05:48:58 phone/7975/dsp75.8-3-2-27.sbn
125     557786 Mar 30 2011 05:49:00 phone/7975/jar75sccp.8-3-2-27.sbn
126        638 Mar 30 2011 05:49:02 phone/7975/SCCP75.8-3-3S.loads
127        642 Mar 30 2011 05:49:02 phone/7975/term75.default.loads
128          0 Mar 30 2011 05:49:02 phone/7941-7961
129    2494499 Mar 30 2011 05:49:12 phone/7941-7961/apps41.8-3-2-27.sbn
130     547146 Mar 30 2011 05:49:16 phone/7941-7961/cnu41.8-3-2-27.sbn
131       2340 Apr 02 2011 03:55:02 April012011.txt
132       3579 Apr 12 2011 03:52:42 softkeyDefault_kpml.xml
133         69 Apr 12 2011 03:52:40 syncinfo.xml
134       2682 Apr 12 2011 03:52:42 SEPFCFBFBCA30CE.cnf.xml
135       1882 Apr 12 2011 03:52:42 SIPDefault.cnf
136       3613 Apr 12 2011 03:52:42 softkeyDefault.xml
137       3987 Apr 12 2011 16:23:10 gui/admin_user.html
138       1029 Apr 12 2011 16:23:14 gui/CiscoLogo.gif
139        617 Apr 12 2011 16:23:14 gui/CME_GUI_README.TXT
140        953 Apr 12 2011 16:23:14 gui/Delete.gif
141      16344 Apr 12 2011 16:23:14 gui/dom.js
142        864 Apr 12 2011 16:23:16 gui/downarrow.gif
143       6146 Apr 12 2011 16:23:16 gui/ephone_admin.html
144       4558 Apr 12 2011 16:23:16 gui/logohome.gif
145       3866 Apr 12 2011 16:23:16 gui/normal_user.html
146      78428 Apr 12 2011 16:23:18 gui/normal_user.js
147       1347 Apr 12 2011 16:23:18 gui/Plus.gif
148        843 Apr 12 2011 16:23:18 gui/sxiconad.gif
149        174 Apr 12 2011 16:23:18 gui/Tab.gif
150       2431 Apr 12 2011 16:23:20 gui/telephony_service.html
151        870 Apr 12 2011 16:23:20 gui/uparrow.gif
152       9968 Apr 12 2011 16:23:20 gui/xml-test.html
153       3412 Apr 12 2011 16:23:20 gui/xml.template

Fixed. Routing issue:
Routing issue:
ip http access-class 23 !!!!!! Preconfigured from Factory
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip http path flash:/gui
access-list 23 permit 10.10.10.0 0.0.0.7 !!!!!! Preconfigured from Factory
To fix
No ip http access-class 23

CUCM 8.6.1 Refresh upgrade to 10.5 fails with Internal Error (Function: ipmReadNormalizedInputLine) [SOLVED]

Hi,
we are upgrading our CUCM 8.6.1 to 10.5.1 on VMWare Enviroment (vSphere 5.5 running on UCS).
We are running this upgrade in a sandbox, in order to avoid any problem in the production cluster.
We followed the refresh upgrade guide ( http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/upgrade/10_0_1/CUCM_BK_U4214F9D_00_upgrade-guide-cucm-100.pdf)
Pre-configuration steps
Take a clone of the running publisher and put it in the sandbox
Remove DNS servers (they are not available in the sandbox)
Change the NTP Server with a ntp that is recheable from the sandbox
Check that Gateway and NTP connectivity are OK for the CUCM
Pre-upgrade:
Run the cop files to update keys and increase disk space (log partition is 80% full)
Shutdown the CUCM VM and
Increase disk space on the VM configuration
change VM OS from RedHat5 (32bit) to RedHat 6 (64bits)
change VM nic from flexible to VMNIX3
Restart the VM
Upgrade
1. mount the iso
2. connect to OS Administration web interface and perform the Software installation from CD/DVD
3. upgrade process works fine up to the post-installation task
During post-installation tasks (after completing the DB Load and Transforming Copy) the Upgrade process always fails fails with an internal error
IPM|Internal Error, File:ipm.c:2011, Function: ipmReadNormalizedInputLine(), "/usr/local/cm/script/cm-dbl-install RU PostInstall 10.5.1.10000-7 8.6.1.21019-1 /usr/local/cm/ /common/component/database /common/log/install/capture.txt " failed (1)|<LVL::Critical>
IPM| end-of-session "Installing database component": 1109.369 secs.|<LVL::Info>
IPM|Close progress meter "Component Install"|<LVL::Info>
We also tried the intermediate steps:
- upgrade from 8.6.1 to 9.1 : worked
- from 9.1 to 10.5: Failed with the same error
- from 9.1 to 10.1: Failed with the same error
any help will be greatly appreciated, thanks
Stefano

Issue was related to Dial Plans, the logs showed
16:45:46.204 |   DBUtil::BlockCopyTable ### *ERROR* ###: (diagnosis): Bulk Data Migration for table availdialplan failed due to data constraint issue, (-971).
16:45:46.611 |   DBUtil::BlockCopyTable *
16:46:16.555 |*ERROR* Error fetching column information: [Informix][Informix ODBC Driver][Informix]Could not position within a table (informix.systables).
16:46:16.588 |   DataConverter_5to6::CopyTables *ERROR* BlockCopyTable failed to process table (availdialplan)
16:47:52.395 |   installFull *ERROR* Prior Cancel or Error Processing convert5to6()
Cisco TAC fixed by updating the primary key in the DB.
After the fix we were able to perform the RU as expected.

CUCM 9.1.1.2 - NTP unsynchronised

Similar Messages

Maybe you are looking for