FAC in CME 9.1

Hello ,
I need a help in configuring FAC for international calls in CME 9.1, I m following the below link but i am confused for the configuration text highlighted below.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm/cmefac.html
voice lpcor enable
voice lpcor custom
group 11 LocalUser
group 12 AnalogPhone
voice lpcor policy LocalUser
service fac
accept LocalUser fac
accept AnalogPhone fac
voice lpcor policy AnalogPhone
service fac
accept LocalUser fac
accept AnalogPhone fac
application
package auth
param passwd-prompt flash:en_bacd_welcome.au -----from where i will get this files ??
param passwd 54321
param user-prompt flash:en_bacd_enter_dest.au-----from where i will get this files ???
param term-digit #
param abort-digit *
param max-digits 32
thanks

Hi,
the FAC in CME is a bit tricky.
FAC call flow in CME like follow
1) IP Phone user dials a particular pattern (international destination, for example)
2) If this destination is enabled for FAC, the user will hear a voice prompt asking for an Account number and PIN
3) The user enters the Account/PIN pair. If valid, the call proceeds, if not the call is dropped.
- If the authentication fails after three retries, the call drops without notification.
Configuration Steps:
1- upload "enter_account.au" and "enter_pin.au" to the flash files. you can record these files.
2- Enter the following commands in configuration mode (in this example the Account and PIN are three digits long).  This forces a user id and pid length, but it not required:
application                          
 service clid_authen_collect         
  param uid-len 3              *length id 3 characters (can be user ext)
  param pin-len 3              *length pin 3 characters 
3- Create usernames for authentication. Notice that the username/password will represent the Account and PIN that the caller will have to dial to be successfully authenticated. You can create multiple usernames and then hand those out to select personnel that will be allowed to place premium calls. In this example both Account and PIN are three digits long.
aaa new-model
aaa authentication login h323 local 
aaa authorization exec h323 local and network authorization 
aaa authorization network h323 local for h323
username 107 password 123
username 107 autocommand exit
4- Create dial-peer cor
voice lpcor custom
 group 1 manager
 group 2 users
voice lpcor policy manager
 service fac
 accept manager fac
 accept users fac
dial-peer cor custom
 name international
  name fac-int
 name user-fac
dial-peer cor list int
 member international
dial-peer cor list fac-int
 member fac-int
dial-peer cor list user-fac
 member user-fac
5- Create a dial-peer for each pattern that you want cover using this application.
dial-peer voice 400 voip
 corlist incoming fac-int
 corlist outgoing user-fac
 service clid_authen_collect
 destination-pattern 900T
 session target ipv4:CME address
 incoming called-number 900T
 dtmf-relay h245-alphanumeric
 codec g711ulaw
 no vad
dial-peer voice 69 pots
 corlist outgoing fac-int
 translation-profile outgoing DiscardDigit9
 preference 3
 destination-pattern 900T
 port 0/0/0
 forward-digits all
 no sip-register
6- assign the proper cor list to match voip dial-peer for FAC
HTH
Anas
don't forget to rate the helpful posts

Similar Messages

  • Cisco CP-78XX SIP Phone Pickup Not Work on CME

    Hi,
    I configured some SIP phones (CP-7821, CP-7841) with pickup function. Is it the Pickup / GPickup soft keys not function as the SIP phone? If yes, then I can use the FAC to access that? And I tried the FAC std. / custom as the pickup / gpickup  .. both not work ... I don't know how to use the FAC on CME? As the FAC std., if I pickup local, that I should press (**3) > call?
    Ref.:
    http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm/cmecover.html#45535
    http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm/cmefacs.html#30064
    This is the configuration:
    CME-SIP-Phone#sh run
    Building configuration...
    Current configuration : 5413 bytes
    ! Last configuration change at 11:06:12 UTC Fri Nov 28 2014 by mtlops
    version 15.4
    no service pad
    service tcp-keepalives-in
    service tcp-keepalives-out
    service timestamps debug datetime msec localtime show-timezone
    service timestamps log datetime msec localtime show-timezone
    service password-encryption
    service sequence-numbers
    hostname CME-SIP-Phone
    boot-start-marker
    boot system flash:c2900-universalk9-mz.SPA.154-2.T1.bin
    boot-end-marker
    ! card type command needed for slot/vwic-slot 0/0
    enable secret 5 $XXXXXXXXXXXXXXXXXXXXXXXX
    aaa new-model
    aaa authentication login default local
    aaa authorization console
    aaa authorization exec default local
    aaa session-id common
    ip cef
    no ipv6 cef
    multilink bundle-name authenticated
    stcapp feature access-code
    voice-card 0
     dspfarm
     dsp services dspfarm
    voice service pots
    voice service voip
     ip address trusted list
      ipv4 10.118.0.0 255.255.255.0
     allow-connections h323 to h323
     allow-connections h323 to sip
     allow-connections sip to h323
     allow-connections sip to sip
     supplementary-service h450.12
     no supplementary-service h225-notify cid-update
     redirect ip2ip
     fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
     h323
      no h225 timeout keepalive
      call preserve
     sip
      bind control source-interface GigabitEthernet0/0
      bind media source-interface GigabitEthernet0/0
      registrar server expires max 600 min 60
    voice class codec 1
     codec preference 1 g711ulaw
     codec preference 2 g711alaw
     codec preference 3 g729r8
    voice class h323 1
      h225 timeout tcp establish 3
      call preserve
    voice class custom-cptone ABC-Company
     dualtone disconnect
      frequency 425
      cadence 500 500
    voice register pool-type  7821
     description Cisco IP Phone 7821
     reference-pooltype 6921
    voice register pool-type  7841
     description Cisco IP Phone 7841
     reference-pooltype 6941
    voice register global
     mode  cme
     source-address 10.118.0.10 port 5060
     timeouts interdigit 2
     max-dn 200
     max-pool 100
     authenticate register
     authenticate realm all
     timezone 42
     time-format 24
     date-format D/M/Y
     mwi stutter
     mwi reg-e164
     voicemail 5000
     call-feature-uri pickup http://10.118.0.10/pickup
     call-feature-uri gpickup http://10.118.0.10/gpickup
     tftp-path flash:
     file text
     create profile sync 0001170446349417
     ntp-server 10.118.0.10 mode unicast
     ip qos dscp af11 media
     ip qos dscp cs2 signal
     ip qos dscp af43 video
     ip qos dscp 25 service
     camera
     video
    voice register dn  2
     number 1000
     pickup-call any-group
     pickup-group 1
     name BB Leung
     label BB Leung
    voice register dn  3
     number 1001
     pickup-call any-group
     pickup-group 1
     name CC Chan
     label CC Chan
    voice register dn  4
     number 1002
     pickup-call any-group
     pickup-group 1
     name DD Leung
     label DD Leung
    voice register dn  50
     mwi
    voice register template  1
     softkeys hold  Newcall Resume
     softkeys idle  Newcall Redial Gpickup Pickup Cfwdall DND
     softkeys seized  Cfwdall Endcall Redial
     softkeys connected  Confrn Endcall Hold Trnsfer
    voice register pool  1
     busy-trigger-per-button 1
     id mac A8XX.XXXX.XXXX
     type 7841
     number 1 dn 2
     template 1
     dtmf-relay sip-notify
     username 1001 password 112233
     codec g711ulaw
     no vad
    voice register pool  2
     busy-trigger-per-button 1
     id mac 50XX.XXXX.XXXX
     type 7841
     number 1 dn 3
     template 1
     dtmf-relay sip-notify
     username 1002 password 112233
     codec g711ulaw
     no vad
    voice register pool  3
     busy-trigger-per-button 1
     id mac 00XX.XXXX.XXXX
     type 7821
     number 1 dn 4
     template 1
     dtmf-relay sip-notify
     username 1003 password 112233
     codec g711ulaw
     no vad
    license udi pid CISCO2921/K9 sn FHK1407F25D
    license accept end user agreement
    license boot c2900 technology-package uck9
    hw-module pvdm 0/0
    hw-module sm 1
    username mtlops privilege 15 secret 5 $1$0qqx$1WGdfRW.flJrwmY7k8eUy0
    redundancy
    interface Embedded-Service-Engine0/0
     no ip address
     shutdown
    interface GigabitEthernet0/0
     ip address 10.118.0.10 255.255.255.0
     duplex auto
     speed auto
    interface GigabitEthernet0/1
     no ip address
     shutdown
     duplex auto
     speed auto
    interface GigabitEthernet0/2
     no ip address
     shutdown
     duplex auto
     speed auto
    interface SM1/0
     no ip address
     shutdown
     service-module fail-open
    interface SM1/1
     no ip address
    interface Vlan1
     no ip address
    ip forward-protocol nd
    no ip http server
    no ip http secure-server
    ip route 0.0.0.0 0.0.0.0 10.118.0.1
    control-plane
    mgcp behavior rsip-range tgcp-only
    mgcp behavior comedia-role none
    mgcp behavior comedia-check-media-src disable
    mgcp behavior comedia-sdp-force disable
    mgcp profile default
    dspfarm profile 1 conference
     codec g711ulaw
     codec g711alaw
     codec g729ar8
     codec g729abr8
     codec g729r8
     codec g729br8
     maximum sessions 7
     associate application SCCP
     shutdown
    gatekeeper
     shutdown
    telephony-service
     max-conferences 8 gain -6
     transfer-system full-consult
     fac standard
    line con 0
    line aux 0
    line 2
     no activation-character
     no exec
     transport preferred none
     transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
     stopbits 1
    line 67
     no activation-character
     no exec
     transport preferred none
     transport input all
     transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
     stopbits 1
    line vty 0 4
     transport input all
    scheduler allocate 20000 1000
    end
    CME-SIP-Phone#sh telephony-service fac
      telephony-service fac standard
        callfwd all **1
        callfwd cancel **2
        pickup local **3
        pickup group **4
        pickup direct **5
        park **6
        dnd **7
        redial **8
        voicemail **9
        ephone-hunt join *3
        ephone-hunt cancel #3
        ephone-hunt hlog *4
        ephone-hunt hlog-phone *5
        trnsfvm *6
        dpark-retrieval *0
        cancel call waiting *1

    VPN is not Configured prints on all phones now with the built-in VPN client if VPN isn't configured.  That's normal and is just cosmetic.  That should not be causing your registration issues.

  • Forced Authorization Codes in CME

    Hi,
    My company is migrating our telephony system from Mitel to CME and one of the features that we need to have in CME is FAC. Making some research I have found a workaround to use FAC  with UC500. My question is:
    can I use this same configuration with CME? I already have the audio files, but I don't have the script.
    the link where I found the workaround is this :  https://supportforums.cisco.com/docs/DOC-9795/#Can_UC500CME_be_configured_to_prompt_a_caller_for_a_PIN_before_placing_a_call
    Does anybody know of a method to enforce FAC with CME?
    Thanks

    I think I found the script. It seems that the script is compiled into the image. It authenticates using (ani, dnis) for (account, password). If that fails, it collects account and pin number, then authenticates using (account, pin). The script's name is Clid_authen_collect.tcl.
    The last thing  to know now, is where can I configure each user's PIN number.
    The link to see the script is: http://www.cisco.com/en/US/docs/routers/access/as5350/software/feature/guide/pull_ivr.html#wp1021162
    Any help will be much appreciated.

  • FAC LPCOR IS NOT WORKING IN CME SIP PHONES

    Dear Team,
    We are planning to put FAC on SIP (7821) phones for calling long distance.
    CME version is 10.0
    Please find the config
    gw-accounting aaa
    aaa new-model
    aaa authentication login h323 local
    aaa authorization exec h323 local 
    aaa authorization network h323 local 
    aaa session-id common
    voice register global
     mode  cme
     source-address 10.X.X.X port 5060
     timeouts interdigit 5
     max-dn 500
     max-pool 475
     load 7821 sip78xx.10-2-1-12
     authenticate register
     authenticate realm router.local
     timezone 35
     tftp-path flash:
     create profile sync 0003478159444525
    voice lpcor enable
    voice lpcor custom
     group 1 national-FAC
    voice lpcor policy national-FAC
     service fac
     accept national-FAC fac
    application
     package auth
      param max-retries 0
      param passwd-prompt flash0:/enter_pin.au
      param abort-digit *
      param user-prompt flash0:/enter_account.au
      param passwd 12345
      param term-digit #
      param max-digits 32
    username 1111 password 7 1446435A5D
    voice register pool  2
     lpcor type local
     lpcor incoming national-FAC
     lpcor outgoing national-FAC
     busy-trigger-per-button 1
     id mac F09E.636F.0F4B
     type 7821
     number 1 dn 2
     template 1
     cor incoming NATIONALACCESS 1 3002
     dtmf-relay rtp-nte sip-notify
     username user2 password cisco
     codec g711ulaw
    voice register dn  2
     number 3002
     call-forward b2bua noan 5000 timeout 20
     allow watch
     name 3002
     label 3002
    dial-peer voice 117 voip
     destination-pattern 905[0256].......$
     lpcor outgoing national-FAC
     session protocol sipv2
     session target ipv4:10.X.X.X
     incoming called-number .
     codec g711ulaw
     no vad
     label 3004
    CME#dir flash:
    Directory of flash0:/
        1  -rw-    96910452  Oct 21 2014 03:35:18 +04:00  c3900e-universalk9-mz.SPA.153-3.M3.bin
        2  -rw-        3064  Oct 21 2014 03:49:06 +04:00  cpconfig-39xx.cfg
        3  drw-           0  Nov 12 2014 14:09:54 +04:00  its
       14  drw-           0  Nov 12 2014 15:16:46 +04:00  GUI
       32  drw-           0  Oct 21 2014 03:49:32 +04:00  ccpexp
      273  -rw-        2464  Oct 21 2014 03:51:18 +04:00  home.shtml
      274  -rw-      116608  Nov 12 2014 15:10:32 +04:00  CME-GUI.rar
      275  -rw-     3090800  Nov 12 2014 16:35:04 +04:00  kern78xx.10-2-1-12.sbn
      276  -rw-    36307280  Nov 12 2014 16:36:00 +04:00  rootfs78xx.10-2-1-12.sbn
      277  -rw-      364072  Nov 12 2014 16:36:10 +04:00  sboot78xx.10-2-1-12.sbn
      278  -rw-        1228  Nov 12 2014 16:36:32 +04:00  sip78xx.10-2-1-12.loads
      279  -rw-      496521  Nov 12 2014 17:01:40 +04:00  music-on-hold.au
      280  -rw-       23660  Nov 19 2014 14:48:40 +04:00  enter_account.au
      281  -rw-       24164  Nov 19 2014 14:48:48 +04:00  enter_pin.au
    261324800 bytes total (120594432 bytes free)
    But when ever iam trying mobile calls call is disconnecting. please find the debugs
    Nov 19 20:04:34.661: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_peer:
       peer tag 40001, direction 0
    Nov 19 20:04:34.661: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
       lpcor International-FAC
    Nov 19 20:04:34.661: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
       lpcor International-FAC index 1
    Nov 19 20:04:34.661: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_peer:
       Return Lpcor Index 1 for Peer Tag 40001
    DAMAC_AKOYA-CME#
    Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
       lpcor International-FAC
    Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
       lpcor International-FAC index 1
    Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_index_is_valid:
       lpcor index 1 is valid
    Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_policy_validate_internal:
       Source LPCOR Index=1, Target LPCOR Policy=International-FAC
    Nov 19 20:04:39.225: -Traceback= 19E34D6z 581A4DCz 581AC7Fz 55B3588z 55B3063z 55AEA34z 55B6A53z 55B7255z 55B649Bz 55F5AF5z 5583EEFz 55894B6z 5589734z 55F5AF5z 558A44Az 55CF04Ez
    DAMAC_AKOYA-CME#
    Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_policy_validate_internal:
       Validate Pass; lpcor (source[1] target[1])
    Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_policy_validate_get_service:
       FAC is enabled; lpcor (source[1] target[1])
    Please advise. If iam missing any steps in this.
    Thanks,
    LAJAN JALEEL

    Dear Amit,
    The configuration is working fine. We find out what is the exact issue.
    *****Issue******
    Debug voice application auth was giving an out put that 
    user prompt url is not found , Even though the exact directory was there under flash0:
    CME#dir flash:
    Directory of flash0:/
        1  -rw-    96910452  Oct 21 2014 03:35:18 +04:00  c3900e-universalk9-mz.SPA.153-3.M3.bin
        2  -rw-        3064  Oct 21 2014 03:49:06 +04:00  cpconfig-39xx.cfg
        3  drw-           0  Nov 12 2014 14:09:54 +04:00  its
       14  drw-           0  Nov 12 2014 15:16:46 +04:00  GUI
       32  drw-           0  Oct 21 2014 03:49:32 +04:00  ccpexp
      273  -rw-        2464  Oct 21 2014 03:51:18 +04:00  home.shtml
      274  -rw-      116608  Nov 12 2014 15:10:32 +04:00  CME-GUI.rar
      275  -rw-     3090800  Nov 12 2014 16:35:04 +04:00  kern78xx.10-2-1-12.sbn
      276  -rw-    36307280  Nov 12 2014 16:36:00 +04:00  rootfs78xx.10-2-1-12.sbn
      277  -rw-      364072  Nov 12 2014 16:36:10 +04:00  sboot78xx.10-2-1-12.sbn
      278  -rw-        1228  Nov 12 2014 16:36:32 +04:00  sip78xx.10-2-1-12.loads
      279  -rw-      496521  Nov 12 2014 17:01:40 +04:00  music-on-hold.au
      280  -rw-       23660  Nov 19 2014 14:48:40 +04:00  enter_account.au
      281  -rw-       24164  Nov 19 2014 14:48:48 +04:00  enter_pin.au
    261324800 bytes total (120594432 bytes free)
    my application configuration was like this:
    application
    package auth
      param passwd-prompt flash0:/enter_pin.au
      param max-retries 0
      param term-digit #
      param user-prompt flash0:/enter_account.au
      param abort-digit *
      param passwd 12345
      param max-digits 32
    *****Resolution*****
    changed user prompt and password prompt from flash0:/ to flash:/
    application
    package auth
      param passwd-prompt flash:/enter_pin.au
      param max-retries 0
      param term-digit #
      param user-prompt flash:/enter_account.au
      param abort-digit *
      param passwd 12345
      param max-digits 32
    Right now lpcor is working fine for Long Distance calls with the same config.
    Thanks All

  • CME and FAC support?

    Hi.. Is there some way to enable forced authorization codes on CallManager Express 4.0 natively on CME or by using another application?
    Thanks in advanced,
    -Jose

    You can use dial-peers as an alternate solution. For example, if you want to use 12345 as your FAC and your normal dial-peer is something like this
    dial-peer voice 10 pots
    destination-pattern 9T
    port 1/0/0
    Change this dial-peer to
    dial-peer voice 10 pots
    destination-pattern 123459T
    port 1/0/0
    Users would need to enter the FAC followed by the DNIS to place calls.
    Regards,
    Anup

  • FAC Commands for CME

    Hi All,
    I would like to restrict the international dialing for couple of users. Please let me know the FAC configuration details for CME. Its only for specific phone not for all the phone. I am using router 2900 with flash c2900-universalk9-mz.SPA.150-1.M4.bin.
    Please help me here and thanks in advance.

    Configuration guides are always a nice point to start looking for.
    Configuring Forced Authorization
    http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cucme/admin/configuration/guide/cmefac.html
    HTH
    java
    If this helps, please rate
    www.cisco.com/go/pdihelpdesk

  • Issue with LPCOR on CME 10.5

    Dear All,
    I am facing issues with LPCOR configuration on CME 10.5. For International calls the Authentication Prompts triggers some times and some times doen not.
    Also when a local call is dialed the Authentication Prompt is triggered some times.Below is the config and debug logs. Need your help to resolve this.
    voice lpcor enable
    voice lpcor custom
     group 10 endusers
     group 11 pstn
    voice lpcor policy endusers
     service fac
     accept endusers fac
     accept pstn fac
    voice lpcor policy pstn
     service fac
     accept endusers fac
     accept pstn fac
    application
     package auth
      param passwd-prompt flash:enter_pin.au
      param max-retries 0
      param abort-digit *
      param term-digit #
      param user-prompt flash:enter_account.au
      param passwd 12345
      param max-digits 32
    interface GigabitEthernet0/1.1
     encapsulation dot1Q 1 native
     ip address 10.25.76.1 255.255.255.0
    interface GigabitEthernet0/1.201
     encapsulation dot1Q 201
     ip address 10.25.77.1 255.255.255.0
    voice-port 0/0/0
     lpcor outgoing pstn
     trunk-group ALL_FXO 1
     supervisory disconnect dualtone mid-call
     supervisory custom-cptone 2n-gsm
     no battery-reversal
     input gain -6
     output attenuation -3
     cptone SA
     timeouts call-disconnect 1
     timeouts wait-release 1
     timing sup-disconnect 50
     connection plar 5040
     caller-id enable
     cable-detect
    dial-peer cor custom
     name local
     name longdistance
     name 911
     name Internal
     name fac-int
     name user-fac
    dial-peer cor list local
     member local
    dial-peer cor list call-local
     member local
    dial-peer cor list call-longdistance
     member longdistance
    dial-peer cor list user1
     member local
     member 911
    dial-peer cor list user2
     member local
     member longdistance
     member 911
     member user-fac
    dial-peer cor list user3
     member 911
    dial-peer cor list call-911
     member 911
    dial-peer cor list call-internal
     member Internal
    dial-peer cor list fac-int
     member local
     member 911
     member fac-int
    dial-peer cor list user-fac
     member user-fac
    dial-peer voice 96 pots
     trunkgroup ALL_FXO
     corlist outgoing call-911
     destination-pattern 9[2-6]......
     forward-digits 7
    dial-peer voice 901 pots
     trunkgroup ALL_FXO
     corlist outgoing call-911
     destination-pattern 901[2-4,6-8].......
     forward-digits 10
    dial-peer voice 800 pots
     trunkgroup ALL_FXO
     destination-pattern 9800T
     prefix 800
    dial-peer voice 900 pots
     destination-pattern 9T
     port 0/0/3
     prefix 9
    dial-peer voice 11 pots
     destination-pattern 901........
     port 0/0/3
     forward-digits 10
    dial-peer voice 9051 pots
     trunkgroup ALL_FXO
     corlist outgoing call-local
     destination-pattern 905........
     forward-digits 10
    dial-peer voice 19 pots
     trunkgroup ALL_FXO
     corlist outgoing fac-int
     destination-pattern 900T
     translate-outgoing called 1
     forward-digits all
    dial-peer voice 20 voip
     description International calling
     service clid_authen_collect
     destination-pattern 900T
     lpcor outgoing pstn
     session target ipv4:10.25.76.1
     incoming called-number 9T
     dtmf-relay h245-alphanumeric
     codec g711ulaw
     no vad
    ephone-dn  1
     number 4121
     name John
     corlist incoming fac-int
    ephone  1
     lpcor type local
     lpcor incoming endusers
     mac-address E0D1.730A.21DE
     ephone-template 2
     type 7942
     button  1:1
    voice register dn  33
     number 4163
     call-forward b2bua busy 5000 
     call-forward b2bua noan 5000 timeout 20
     call-forward b2bua unregistered 5000 
     allow watch
     name Joseph
     mwi
    voice register pool  33
     busy-trigger-per-button 4
     id mac BC67.1C31.C8AA
     type 7821
     number 1 dn 33
     cor incoming fac-int 1 4163
     dtmf-relay rtp-nte
     codec g711ulaw
     transfer max-length 4
    Debug Logs
    DAMAC-CME-ANOUD#DEBUg VOIce lpcor all
    voip lpcor all debugging is on
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#term
    DAMAC-CME-ANOUD#terminal i
    DAMAC-CME-ANOUD#terminal i
    Apr 12 16:22:39.825: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 1, ConnectionId F692C420E06611E4BB0CE7FDC5486EA5, SetupTime 16:22:35.615 UTC Sun Apr 12 2015, PeerAddress 4130, PeerSubAddress , DisconnectCause 10  , DisconnectText normal call clearing (16), ConnectTime 16:22:39.825 UTC Sun Apr 12 2015, DisconnectTime 16:22:39.825 UTC Sun Apr 12 2015, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0
    Apr 12 16:22:39.825: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:04/12/2015 16:22:35.609,cgn:4130,cdn:,frs:0,fid:2599,fcid:F692C420E06611E4BB0CE7FDC5486EA5,legID:284C,bguid:F692C420E06611E4BB0CE7FDC5486EA5mon
    DAMAC-CME-ANOUD#terminal imon
                              ^
    % Invalid input detected at '^' marker.
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    Apr 12 16:22:44.089: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
       lpcor endusers
    Apr 12 16:22:44.089: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
       lpcor endusers index 10
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#show debug
    VOIP LPCOR:
      debug voip lpcor error call is ON (filter is OFF)
      debug voip lpcor error call informational is ON (filter is OFF)
      debug voip lpcor error software is ON
      debug voip lpcor error software informational is ON
      debug voip lpcor detail is ON (filter is OFF)
      debug voip lpcor function is ON (filter is OFF)
      debug voip lpcor inout is ON (filter is OFF)
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    Apr 12 16:23:22.889: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 1, ConnectionId FBA1532AE06611E4BB10E7FDC5486EA5, SetupTime 16:22:44.089 UTC Sun Apr 12 2015, PeerAddress 4130, PeerSubAddress , DisconnectCause 10  , DisconnectText normal call clearing (16), ConnectTime 16:23:02.009 UTC Sun Apr 12 2015, DisconnectTime 16:23:22.889 UTC Sun Apr 12 2015, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 1038, ReceiveBytes 166080
    Apr 12 16:23:22.889: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:04/12/2015 16:22:44.093,cgn:4130,cdn:,frs:0,fid:2600,fcid:FBA1532AE06611E4BB10E7FDC5486EA5,legID:284D,bguid:FBA1532AE06611E4BB10E7FDC5486EA5
    Apr 12 16:23:22.905: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 1, ConnectionId FBA1532AE06611E4BB10E7FDC5486EA5, SetupTime 16:22:57.795 UTC Sun Apr 12 2015, PeerAddress 0097150107659, PeerSubAddress , DisconnectCause 10  , DisconnectText normal call clearing (16), ConnectTime 16:23:02.015 UTC Sun Apr 12 2015, DisconnectTime 16:23:22.905 UTC Sun Apr 12 2015, CallOrigin 1, ChargedUnits 0, InfoType 2, TransmitPackets 1038, TransmitBytes 174384, ReceivePackets 1043, ReceiveBytes 166880
    Apr 12 16:23:22.905: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:04/12/2015 16:22:57.785,cgn:4130,cdn:0097150107659,frs:0,fid:2601,fcid:FBA1532AE06611E4BB10E7FDC5486EA5,legID:284E,bguid:FBA1532AE06611E4BB10E7FDC5486EA5
    Apr 12 16:23:25.317: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
       lpcor endusers
    Apr 12 16:23:25.317: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
       lpcor endusers index 10
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#un all
    All possible debugging has been turned off
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#
    DAMAC-CME-ANOUD#!ok just send me these logs
    DAMAC-CME-ANOUD#!i have to move from here
    Apr 12 16:24:02.153: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 1, ConnectionId 14343755E06711E4BB16E7FDC5486EA5, SetupTime 16:23:25.323 UTC Sun Apr 12 2015, PeerAddress 4130, PeerSubAddress , DisconnectCause 10  , DisconnectText normal call clearing (16), ConnectTime 16:23:43.393 UTC Sun Apr 12 2015, DisconnectTime 16:24:02.153 UTC Sun Apr 12 2015, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 930, ReceiveBytes 148800
    Apr 12 16:24:02.153: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:Tnow
    DAMAC-CME-ANOUD#\WC,ft:04/12/2015 16:23:25.321,cgn:4130,cdn:,frs:0,fid:2602,fcid:14343755E06711E4BB16E7FDC5486EA5,legID:2850,bguid:14343755E06711E4BB16E7FDC5486EA5
    Apr 12 16:24:02.169: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 1, ConnectionId 14343755E06711E4BB16E7FDC5486EA5, SetupTime 16:23:39.169 UTC Sun Apr 12 2015, PeerAddress 0097150107659, PeerSubAddress , DisconnectCause 10  , DisconnectText normal call clearing (16), ConnectTime 16:23:43.389 UTC Sun Apr 12 2015, DisconnectTime 16:24:02.169 UTC Sun Apr 12 2015, CallOrigin 1, ChargedUnits 0, InfoType 2, TransmitPackets 930, TransmitBytes 156240, ReceivePackets 937, ReceiveBytes 149920
    Apr 12 16:24:02.169: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:04/12/2015 16:23:39.169,cgn:4130,cdn:0097150107659,frs:0,fid:2603,fcid:14343755E06711E4BB16E7FDC5486EA5,legID:2851,bguid:14343755E06711E4BB16E7FDC5486EA5

    We have come across this issue today in 10.9.5 (so affects 10.9.4 as well) but it was occurring in Sydney as well with a client and for me in Melbourne.

  • Really Need Some Help with CME 8.6 using IOS as Firewall and Anyconnect VPN on Phones

    Hello,
    I have a 2911 Router with IOS Security and Voice enabled and we are using CME 8.6.  I am using a built-in Anyconnect VPN on 3 phones that are for remote users and thus I needed to enable security zones on the router which works because the remote phones will boot up, get their phone configs and I am able to call those remote phones from an outside line.
    The issue I am having is that when I try to dial a remote phone connected via the VPN through port g0/0 from and internal office phone, i.e., NOT involving the PSTN then there is no audio.  It's as if no audio is going back and forth.  When I take off the security zones from the virtual-template interface and the g0/0 interface then the audio works great and I can reach the phone from internal as I am supposed to.
    Could someone take a peek at my security config and see why audio would not be traveling through the VPN when I have my security zones turned on?
    clock timezone PST -8 0
    clock summer-time PST recurring
    network-clock-participate wic 0 
    network-clock-select 1 T1 0/0/0
    no ipv6 cef
    ip source-route
    ip cef
    ip dhcp excluded-address 192.168.8.1 192.168.8.19
    ip dhcp pool owhvoip
     network 192.168.8.0 255.255.248.0
     default-router 192.168.8.1 
     option 150 ip 192.168.8.1 
     lease 30
    multilink bundle-name authenticated
    isdn switch-type primary-ni
    crypto pki server cme_root
     database level complete
     grant auto
     lifetime certificate 7305
     lifetime ca-certificate 7305
    crypto pki token default removal timeout 0
    crypto pki trustpoint cme_root
     enrollment url http://192.168.8.1:80
     revocation-check none
     rsakeypair cme_root
    crypto pki trustpoint cme_cert
     enrollment url http://192.168.8.1:80
     revocation-check none
    crypto pki trustpoint TP-self-signed-2736782807
     enrollment selfsigned
     subject-name cn=IOS-Self-Signed-Certificate-2736782807
     revocation-check none
     rsakeypair TP-self-signed-2736782807
    voice-card 0
     dspfarm
     dsp services dspfarm
    voice service voip
     allow-connections h323 to h323
     allow-connections h323 to sip
     allow-connections sip to h323
     allow-connections sip to sip
     fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
     vpn-group 1
      vpn-gateway 1 https://66.111.111.111/SSLVPNphone
      vpn-trustpoint 1 trustpoint cme_cert leaf
     vpn-profile 1
      host-id-check disable
    voice class codec 1
     codec preference 1 g711ulaw
    voice class custom-cptone jointone
     dualtone conference
      frequency 600 900
      cadence 300 150 300 100 300 50
    voice class custom-cptone leavetone
     dualtone conference
      frequency 400 800
      cadence 400 50 200 50 200 50
    voice translation-rule 1
     rule 1 /9400/ /502/
     rule 2 /9405/ /215/
     rule 3 /9410/ /500/
    voice translation-rule 2
     rule 1 /.*/ /541999999/
    voice translation-rule 100
     rule 1 /^9/ // type any unknown plan any isdn
    voice translation-profile Inbound_Calls_To_CUE
     translate called 1
    voice translation-profile InternationalType
     translate called 100
    voice translation-profile Local-CLID
     translate calling 2
    license udi pid CISCO2911/K9 sn FTX1641AHX3
    hw-module pvdm 0/0
    hw-module pvdm 0/1
    hw-module sm 1
    username routeradmin password 7 091649040910450B41
    username cmeadmin privilege 15 password 7 03104803040E375F5E4D5D51
    redundancy
    controller T1 0/0/0
     cablelength long 0db
     pri-group timeslots 1-12,24
    class-map type inspect match-any sslvpn
     match protocol tcp
     match protocol udp
     match protocol icmp
    class-map type inspect match-all router-access
     match access-group name router-access
    policy-map type inspect firewall-policy
     class type inspect sslvpn
      inspect 
     class class-default
      drop
    policy-map type inspect outside-to-router-policy
     class type inspect router-access
      inspect 
     class class-default
      drop
    zone security trusted
    zone security internet
    zone-pair security trusted-to-internet source trusted destination internet
     service-policy type inspect firewall-policy
    zone-pair security untrusted-to-trusted source internet destination trusted
     service-policy type inspect outside-to-router-policy
    interface Loopback0
     ip address 192.168.17.1 255.255.248.0
    interface Embedded-Service-Engine0/0
     no ip address
     shutdown
    interface GigabitEthernet0/0
     description Internet
     ip address dhcp
     no ip redirects
     no ip proxy-arp
     zone-member security internet
     duplex auto
     speed auto
    interface GigabitEthernet0/1
     ip address 192.168.8.1 255.255.248.0
     duplex auto
     speed auto
    interface GigabitEthernet0/2
     no ip address
     shutdown
     duplex auto
     speed auto
    interface Serial0/0/0:23
     no ip address
     encapsulation hdlc
     isdn switch-type primary-ni
     isdn incoming-voice voice
     no cdp enable
    interface Integrated-Service-Engine1/0
     ip unnumbered Loopback0
     service-module ip address 192.168.17.2 255.255.248.0
     !Application: CUE Running on NME
     service-module ip default-gateway 192.168.17.1
     no keepalive
    interface Virtual-Template1
     ip unnumbered GigabitEthernet0/0
     zone-member security trusted
    ip local pool SSLVPNPhone_pool 192.168.9.1 192.168.9.5
    ip forward-protocol nd
    ip http server
    ip http authentication local
    no ip http secure-server
    ip http path flash:/cme-gui-8.6.0
    ip route 192.168.17.2 255.255.255.255 Integrated-Service-Engine1/0
    ip access-list extended router-access
     permit tcp any host 66.111.111.111 eq 443
    tftp-server flash:apps31.9-3-1ES26.sbn
    control-plane
    voice-port 0/0/0:23
    voice-port 0/3/0
    voice-port 0/3/1
    mgcp profile default
    sccp local GigabitEthernet0/1
    sccp ccm 192.168.8.1 identifier 1 priority 1 version 7.0 
    sccp
    sccp ccm group 1
     bind interface GigabitEthernet0/1
     associate ccm 1 priority 1
     associate profile 1 register CME-CONF
    dspfarm profile 1 conference  
     codec g729br8
     codec g729r8
     codec g729abr8
     codec g729ar8
     codec g711alaw
     codec g711ulaw
     maximum sessions 4
     associate application SCCP
    dial-peer voice 500 voip
     destination-pattern 5..
     session protocol sipv2
     session target ipv4:192.168.17.2
     dtmf-relay sip-notify
     codec g711ulaw
     no vad
    dial-peer voice 10 pots
     description Incoming Calls To AA
     translation-profile incoming Inbound_Calls_To_CUE
     incoming called-number .
     port 0/0/0:23
    dial-peer voice 20 pots
     description local 10 digit dialing
     translation-profile outgoing Local-CLID
     destination-pattern 9[2-9].........
     incoming called-number .
     port 0/0/0:23
     forward-digits 10
    dial-peer voice 30 pots
     description long distance dialing
     translation-profile outgoing Local-CLID
     destination-pattern 91..........
     incoming called-number .
     port 0/0/0:23
     forward-digits 11
    dial-peer voice 40 pots
     description 911
     destination-pattern 911
     port 0/0/0:23
     forward-digits all
    dial-peer voice 45 pots
     description 9911
     destination-pattern 9911
     port 0/0/0:23
     forward-digits 3
    dial-peer voice 50 pots
     description international dialing
     translation-profile outgoing InternationalType
     destination-pattern 9T
     incoming called-number .
     port 0/0/0:23
    dial-peer voice 650 pots
     huntstop
     destination-pattern 650
     fax rate disable
     port 0/3/0
    gatekeeper
     shutdown
    telephony-service
     protocol mode ipv4
     sdspfarm units 5
     sdspfarm tag 1 CME-CONF
     conference hardware
     moh-file-buffer 90
     no auto-reg-ephone
     authentication credential cmeadmin tshbavsp$$4
     max-ephones 50
     max-dn 200
     ip source-address 192.168.8.1 port 2000
     service dnis dir-lookup
     timeouts transfer-recall 30
     system message Oregon's Wild Harvest
     url services http://192.168.17.2/voiceview/common/login.do 
     url authentication http://192.168.8.1/CCMCIP/authenticate.asp  
     cnf-file location flash:
     cnf-file perphone
     load 7931 SCCP31.9-3-1SR4-1S.loads
     load 7936 cmterm_7936.3-3-21-0.bin
     load 7942 SCCP42.9-3-1SR4-1S.loads
     load 7962 SCCP42.9-4-2-1S.loads
     time-zone 5
     time-format 24
     voicemail 500
     max-conferences 8 gain -6
     call-park system application
     call-forward pattern .T
     moh moh.wav
     web admin system name cmeadmin secret 5 $1$60ro$u.0r/cno/OD2JmtvPq4w9.
     dn-webedit 
     transfer-digit-collect orig-call
     transfer-system full-consult
     transfer-pattern .T
     fac standard
     create cnf-files version-stamp Jan 01 2002 00:00:00
    ephone-template  1
     softkeys connected  Hold Park Confrn Trnsfer Endcall ConfList TrnsfVM
     button-layout 7931 2
    ephone-template  2
     softkeys idle  Dnd Gpickup Pickup Mobility
     softkeys connected  Hold Park Confrn Mobility Trnsfer TrnsfVM
     button-layout 7931 2
    ephone-dn  1  dual-line
     number 200
     label Lisa
     name Lisa Ziomkowsky
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  2  dual-line
     number 201
     label Dylan
     name Dylan Elmer
     call-forward busy 500
     call-forward noan 500 timeout 12
    ephone-dn  3  dual-line
     number 202
     label Kimberly
     name Kimberly Krueger
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  4  dual-line
     number 203
     label Randy
     name Randy Buresh
     mobility
     snr calling-number local
     snr 915035042317 delay 5 timeout 15 cfwd-noan 500
     call-forward busy 500
     call-forward noan 500 timeout 12
    ephone-dn  5  dual-line
     number 204
     label Mark
     name Mark McBride
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  6  dual-line
     number 205
     label Susan
     name Susan Sundin
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  7  dual-line
     number 206
     label Rebecca
     name Rebecca Vaught
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  8  dual-line
     number 207
     label Ronnda
     name Ronnda Daniels
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  9  dual-line
     number 208
     label Matthew
     name Matthew Creswell
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  10  dual-line
     number 209
     label Nate
     name Nate Couture
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  11  dual-line
     number 210
     label Sarah
     name Sarah Smith
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  12  dual-line
     number 211
     label Janis
     name Janis McFerren
     call-forward busy 500
     call-forward noan 500 timeout 12
    ephone-dn  13  dual-line
     number 212
     label Val
     name Val McBride
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  14  dual-line
     number 213
     label Shorty
     name Arlene Haugen
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  15  dual-line
     number 214
     label Ruta
     name Ruta Wells
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  16  dual-line
     number 215
     label 5415489405
     name OWH Sales
     call-forward busy 500
     call-forward noan 500 timeout 12
    ephone-dn  17  dual-line
     number 216
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  18  dual-line
     number 217
     call-forward busy 500
     call-forward noan 500 timeout 12
    ephone-dn  19  dual-line
     number 218
     call-forward busy 500
     call-forward noan 500 timeout 12
    ephone-dn  20  dual-line
     number 219
     call-forward busy 500
     call-forward noan 500 timeout 12
    ephone-dn  21  dual-line
     number 220
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  22  dual-line
     number 221
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  23  dual-line
     number 222
     label Pam
     name Pam Buresh
     call-forward busy 500
     call-forward noan 500 timeout 12
    ephone-dn  24  dual-line
     number 223
     call-forward busy 500
     call-forward noan 500 timeout 12
    ephone-dn  25  dual-line
     number 224
     call-forward busy 500
     call-forward noan 500 timeout 12
    ephone-dn  26  dual-line
     number 225
     label Elaine
     name Elaine Mahan
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  27  octo-line
     number 250
     label Shipping
     name Shipping
    ephone-dn  28  dual-line
     number 251
     label Eli
     name Eli Nourse
     call-forward busy 500
     call-forward noan 500 timeout 10
    ephone-dn  29  dual-line
     number 252
    ephone-dn  30  dual-line
     number 253
    ephone-dn  31  octo-line
     number 100
     label Customer Service
     name Customer Service
     call-forward busy 500
     call-forward noan 500 timeout 12
    ephone-dn  32  octo-line
     number 101
     label Sales
     name Sales
     call-forward busy 214
     call-forward noan 214 timeout 12
    ephone-dn  33  dual-line
     number 260
     label Conference Room
     name Conference Room
     call-forward busy 100
     call-forward noan 100 timeout 12
    ephone-dn  100
     number 300
     park-slot timeout 20 limit 2 recall
     description Park Slot For All Company
    ephone-dn  101
     number 301
     park-slot timeout 20 limit 2 recall
     description Park Slot for All Company
    ephone-dn  102
     number 302
     park-slot timeout 20 limit 2 recall
     description Park Slot for All Company
    ephone-dn  103
     number 700
     name All Company Paging
     paging ip 239.1.1.10 port 2000
    ephone-dn  104
     number 8000...
     mwi on
    ephone-dn  105
     number 8001...
     mwi off
    ephone-dn  106  octo-line
     number A00
     description ad-hoc conferencing
     conference ad-hoc
    ephone-dn  107  octo-line
     number A01
     description ad-hoc conferencing
     conference ad-hoc
    ephone-dn  108  octo-line
     number A02
     description ad-hoc conferencing
     conference ad-hoc
    ephone  1
     device-security-mode none
     mac-address 001F.CA34.88AE
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:2 2:31
    ephone  2
     device-security-mode none
     mac-address 001F.CA34.8A03
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:12
    ephone  3
     device-security-mode none
     mac-address 001F.CA34.898B
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
    ephone  4
     device-security-mode none
     mac-address 001F.CA34.893F
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
    ephone  5
     device-security-mode none
     mac-address 001F.CA34.8A71
     ephone-template 1
     max-calls-per-button 2
     username "susan"
     paging-dn 103
     type 7931
     button  1:6
    ephone  6
     device-security-mode none
     mac-address 001F.CA34.8871
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:7 2:31 3:32
    ephone  7
     device-security-mode none
     mac-address 001F.CA34.8998
     ephone-template 1
     max-calls-per-button 2
     username "matthew"
     paging-dn 103
     type 7931
     button  1:9
    ephone  8
     device-security-mode none
     mac-address 001F.CA36.8787
     ephone-template 1
     max-calls-per-button 2
     username "nate"
     paging-dn 103
     type 7931
     button  1:10
    ephone  9
     device-security-mode none
     mac-address 001F.CA34.8805
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:5
    ephone  10
     device-security-mode none
     mac-address 001F.CA34.880C
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:14
    ephone  11
     device-security-mode none
     mac-address 001F.CA34.8935
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:3
    ephone  12
     device-security-mode none
     mac-address 001F.CA34.8995
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:8 2:31
    ephone  13
     device-security-mode none
     mac-address 0021.5504.1796
     ephone-template 2
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:4
    ephone  14
     device-security-mode none
     mac-address 001F.CA34.88F7
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:23
    ephone  15
     device-security-mode none
     mac-address 001F.CA34.8894
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:26
    ephone  16
     device-security-mode none
     mac-address 001F.CA34.8869
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:28 2:27
    ephone  17
     device-security-mode none
     mac-address 001F.CA34.885F
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:11
    ephone  18
     device-security-mode none
     mac-address 001F.CA34.893C
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:27
    ephone  19
     device-security-mode none
     mac-address 001F.CA34.8873
     ephone-template 1
     max-calls-per-button 2
     paging-dn 103
     type 7931
     button  1:27
    ephone  20
     device-security-mode none
     mac-address A456.3040.B7DD
     paging-dn 103
     type 7942
     vpn-group 1
     vpn-profile 1
     button  1:13
    ephone  21
     device-security-mode none
     mac-address A456.30BA.5474
     paging-dn 103
     type 7942
     vpn-group 1
     vpn-profile 1
     button  1:15 2:16 3:32
    ephone  22
     device-security-mode none
     mac-address A456.3040.B72E
     paging-dn 103
     type 7942
     vpn-group 1
     vpn-profile 1
     button  1:1
    ephone  23
     device-security-mode none
     mac-address 00E0.75F3.D1D9
     paging-dn 103
     type 7936
     button  1:33
    line con 0
    line aux 0
    line 2
     no activation-character
     no exec
     transport preferred none
     transport input all
     transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
     stopbits 1
    line 67
     no activation-character
     no exec
     transport preferred none
     transport input all
     transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
    line vty 0 4
     transport input all
    scheduler allocate 20000 1000
    ntp master
    ntp update-calendar
    ntp server 216.228.192.69
    webvpn gateway sslvpn_gw
     ip address 66.111.111.111 port 443  
     ssl encryption 3des-sha1 aes-sha1
     ssl trustpoint cme_cert
     inservice
    webvpn context sslvpn_context
     ssl encryption 3des-sha1 aes-sha1
     ssl authenticate verify all
     policy group SSLVPNphone
       functions svc-enabled
       hide-url-bar
       svc address-pool "SSLVPNPhone_pool" netmask 255.255.248.0
       svc default-domain "bendbroadband.com"
     virtual-template 1
     default-group-policy SSLVPNphone
     gateway sslvpn_gw domain SSLVPNphone
     authentication certificate
     ca trustpoint cme_root
     inservice
    end

    I think your ACL could be the culprit.
    ip access-list extended router-access
     permit tcp any host 66.111.111.111 eq 443
    Would you be able to change the entry to permit ip any any (just for testing purpose) and then test to see if the calls function properly.  If they work fine then we know that we need to open som ports there.
    Please remember to select a correct answer and rate helpful posts

  • Minimum Router's RAM requirement for Cisco CME

    Hi,
    Does anyone ever try to use below 1 GB RAM when installing CME for router 29XX? I know that Cisco recommend to use 1 GB RAM. I just want to know, what problem we will may face, if we implement CME with 2921 router for 50 users with default RAM (512 MB).

    Hello,
    As you mentioned; for 2911 routers the recommended is to use 1 GB of RAM as per the link below:
    http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/requirements/guide/cme105spc.html
    As you also going to deploy it with its maximum ip phones that can support, I'd highly recommend you to use 1 GB. If you use 512 RAM,  you may fall into performance issues and your setup will not be supported by Cisco TAC.
    Thank you,
    Shadi

  • UC560 Forced Authorization Codes (FAC)

    Hi All,
    Has anyone gotten FAC to work with the UC560? The box only crashing when the voip is enabled. When i shutdown the voip it makes the calls successfully.
    can help is greatly appreciated
    here is the configuration
    Place the files in flash enter_account.au and enter_pin.au
    aaa authentication login default local
    aaa authentication login sdm_vpn_xauth_ml_1 local
    aaa authentication login h323 local
    aaa authorization exec default local
    aaa authorization exec h323 local
    aaa authorization network sdm_vpn_group_ml_1 local
    aaa authorization network h323 local
    application
    service clid_authen_collect
      param uid-len 3
      param pin-len 6
    dial-peer voice 50 voip
    service clid_authen_collect
    destination-pattern 9[2-8]......
    session target ipv4:192.168.20.1
    incoming called-number 9[2-8]......
    dtmf-relay h245-alphanumeric
    codec g711ulaw
    no vad
    dial-peer voice 100 pots
    destination-pattern 9[2-8]......
    preference 1
    port 0/1/0
    forward-digits 7

    Hello Andrian,
    There are a few things I noticed, not sure if they are just left out, or not configured.
    Your config does not have any usernames/passwords configured, and the dial-peer is pointing to the CME address.  Here is the info I found, with the steps to configure FAC.
    https://supportforums.cisco.com/docs/DOC-9795/
    application
    service clid_authen_collect
      param uid-len 3
      param pin-len 3
    aaa new-model
    aaa authentication login h323 local
    aaa authorization exec h323 local
    aaa authorization network h323 local
    username 201 password 123
    username 201 autocommand exit
    username 202 password 321
    username 202 autocommand exit
    dial-peer voice 5500 voip
    description International Calls
    service clid_authen_collect
    destination-pattern 9011.T
    session target ipv4:10.1.1.1
    incoming called-number 9011.T
    dtmf-relay h245-alphanumeric
    codec g711ulaw
    no vad
    Thank you,
    Darren

  • Re: CME and Analog Phones

    I have CME running on a Cisco 2801 router and I have installed a 4FXS card. I have an analog phone connected to the port 0/2/0 of the FXS card and the following is configured.
    dial-peer voice 201 pots
    destination-pattern 4015
    port 0/2/0
    I am able to initiate calls from this unit however calls to this DN (analog) phone I receive a fast busy.
    Also how do I transfer a call from an analog phone in this setup?

    This is the feature explained:
    http://www.cisco.com/en/US/docs/ios/12_4t/12_4t2/ht1vg224.html
    After the basic is working, you can configure a fac to access various functions:
    http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4_6xe/htfeatmd.html

  • CME Translation Rule issue

    i have CME run om 3945 router with IOS c3900-universalk9-mz.SPA.152-4.M2.bin and we apply translation rule for the incoming and the outgoing calls through E1 and we configured the translation profile under the dial peers , the issue is every random period of time and always we face it first working day after the weed end that the translation profile under the dial peers removed automatically and the calls can't done , so every time we have to reconfigure the translation profile under the dial peer , any one can help ?   

    kindly find attached , 
    i am planing to upgrade the IOS version , is there any recommendation about it to not face any  problem with the configuration or files on the flash or the router license ,
    thanks ....

  • CME User/Extension Has Lost Dial Tone

    I have an extension that has lost dial-tone.  This phone has been in service for over two years and has been working properly until now.  Other buttons configured on the same phone work fine and the user can dial out, but not if using his extension.  I have tried the following with no success:
    -Checked the speakerphone and cabling
    -Tried dialing out using the same extension on another phone (no dial-tone for the same extension on the other phones)
    -Resetting the phone to factory defaults
    -Removing the phone and configuring a brand new phone
    Incoming calls to the extension work fine and everything looks correct on the display.  The environment is Cisco CME 7 and the phone in question is a 7962.

    Hi,
    You have a user/extension which has lost Dial tone i.e of IP phone 7962.It may be because of the following factors :
    1.You are not connected to Extension mobility services.
    2.the system requires a Client matter code (CMC) or Forced authorization code(FAC) after dialing a number.(SCCP phones only).
    3.Change the time-of-day restrictions that prevent you from using some features during certain hours of the day.
    http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cuipph/7962g_7961g_7961g-ge_7942g_7941g_7941g-ge/8_0/english/user/guide/62enu80/62614241trb.html
    Regards
    Aateek Singh
    Network Engineer
    Spooster IT Services

  • CME 10.0 BLF Pickup 9971

    Hello,
    I have 10 post 9971 phones with ISR 2921 and 10.0 CME
    All work properly.
    Only the pickup does not work and I can not seem to understand how.
    I need to make a pickup from the BLF buttons that users can retrieve the call.
    Anyone know how?

    that's what I try
    voice register dn <dn-tag>
    pickup-group 1
    Call pickup any-group
    but I can not see a key pickup or group pickup on these positions.
    I try to make a custom button with a fac but that does not work
    Do you know how to display the buttons on 9971 because the soft key does not work

  • Account with an icon of a face and a question mark

    Same issue of other user in Yosemite Apple Support.
    Following advises on that thread I also installed the ETRECHECK software tool, report is as follows:
    Problem description:
    At the login screen I find an icon with a face and a question mark in it - with a message it needs an update.
    EtreCheck version: 2.1.5 (108)
    Report generated 02 gennaio 2015 12:37:26 CET
    Click the [Support] links for help with non-Apple products.
    Click the [Details] links for more information about that line.
    Click the [Adware] links for help removing adware.
    Hardware Information: ℹ️
      MacBook Pro (13-inch, Mid 2012) (Verified)
      MacBook Pro - model: MacBookPro9,2
      1 2.5 GHz Intel Core i5 CPU: 2-core
      16 GB RAM Upgradeable
      BANK 0/DIMM0
      8 GB DDR3 1600 MHz ok
      BANK 1/DIMM0
      8 GB DDR3 1600 MHz ok
      Bluetooth: Good - Handoff/Airdrop2 supported
      Wireless:  en1: 802.11 a/b/g/n
    Video Information: ℹ️
      Intel HD Graphics 4000
      Color LCD 1280 x 800
    System Software: ℹ️
      OS X 10.10.1 (14B25) - Uptime: 1:22:54
    Disk Information: ℹ️
      APPLE HDD HTS545050A7E362 disk0 : (500,11 GB)
      EFI (disk0s1) <not mounted> : 210 MB
      Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB
      Macintosh HD (disk1) / : 498.89 GB (467.03 GB free)
      Encrypted AES-XTS Unlocked
      Core Storage: disk0s2 499.25 GB Online
      MATSHITADVD-R   UJ-8A8 
    USB Information: ℹ️
      Apple Inc. FaceTime HD Camera (Built-in)
      Apple Computer, Inc. IR Receiver
      Apple Inc. BRCM20702 Hub
      Apple Inc. Bluetooth USB Host Controller
      Apple Inc. Apple Internal Keyboard / Trackpad
    Thunderbolt Information: ℹ️
      Apple Inc. thunderbolt_bus
    Gatekeeper: ℹ️
      Mac App Store and identified developers
    Launch Daemons: ℹ️
      [loaded] com.adobe.fpsaud.plist [Support]
    User Login Items: ℹ️
      iTunesHelper Applicazione (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
      Dropbox ApplicazioneHidden (/Applications/Dropbox.app)
    Internet Plug-ins: ℹ️
      FlashPlayer-10.6: Version: 16.0.0.235 - SDK 10.6 [Support]
      Flash Player: Version: 16.0.0.235 - SDK 10.6 [Support]
      QuickTime Plugin: Version: 7.7.3
      Default Browser: Version: 600 - SDK 10.10
    Safari Extensions: ℹ️
      Pin It Button [Installed]
      Save to Pocket [Installed]
      Add To Amazon Wish List [Installed]
    3rd Party Preference Panes: ℹ️
      Flash Player  [Support]
    Time Machine: ℹ️
      Time Machine not configured!
    Top Processes by CPU: ℹ️
          14% WindowServer
          3% hidd
          2% Safari
          1% Dock
          0% fontd
    Top Processes by Memory: ℹ️
      333 MB com.apple.WebKit.WebContent
      155 MB mds_stores
      137 MB Safari
      137 MB Finder
      86 MB Dropbox
    Virtual Memory Information: ℹ️
      7.76 GB Free RAM
      4.88 GB Active RAM
      3.28 GB Inactive RAM
      1.26 GB Wired RAM
      4.73 GB Page-ins
      0 B Page-outs
    Diagnostics Information: ℹ️
      Jan 2, 2015, 11:15:06 AM Self test - passed
      Jan 2, 2015, 12:06:57 AM /Library/Logs/DiagnosticReports/Dropbox109_2015-01-02-000657_[redacted].cpu_res ource.diag [Details]
    ---------- is there any troubleshooting for delete that fake account every time I start my Macbook Pro?
    thanks and regards
    Edoardo

    Smiley face with a ? means a bootable system is not found.
    There maybe  a problem with either system software or hard drive itself.
    Try this.
    Repair Disk
    Steps 2 through 8
    http://support.apple.com/kb/PH5836
    Best.

Maybe you are looking for

  • My aux does not work on my ipad mini

    Hi all! My ipad mini worked just fine, but suddenly , when i played spotify, it stopped work. is my phono aux broken? I have tried to play music wiih my iphone without any problems. What can be the problem? it is not the stereo and it is not the cabl

  • Specifying text font in a scroll pane

    Below is a fragment of code that attempts to display text in a scroll pane. Basically this works OK, except for the following: 1. Changing the font doesn't seem to make any difference. I tried "Arial", as shown, and "Curier", the display looks identi

  • View PDF link in new window

    From my "main" pdf, how can i view an attached (or embedded) pdf link in a new window? Currently the link opens in the same window as the main pdf. I selected "go to page view" and viewing in new window isn't an option.

  • Safari 4.0.5 Screen image is small

    All of a sudden my Safari image only occupies about a third of the screen

  • After updating to 1.2 then restarted, I have seen only blue screen

    I have seen only blue screen after Apple logo startup, and now it is stuck like that. Nothing happen anymore. What a bad luck I am with this new iMac, I have to hand in my assignments in 2 days and I cannot even go to finder. If i can do that at leas