FAC in CME 9.1
Hello ,
I need a help in configuring FAC for international calls in CME 9.1, I m following the below link but i am confused for the configuration text highlighted below.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm/cmefac.html
voice lpcor enable
voice lpcor custom
group 11 LocalUser
group 12 AnalogPhone
voice lpcor policy LocalUser
service fac
accept LocalUser fac
accept AnalogPhone fac
voice lpcor policy AnalogPhone
service fac
accept LocalUser fac
accept AnalogPhone fac
application
package auth
param passwd-prompt flash:en_bacd_welcome.au -----from where i will get this files ??
param passwd 54321
param user-prompt flash:en_bacd_enter_dest.au-----from where i will get this files ???
param term-digit #
param abort-digit *
param max-digits 32
thanks
Hi,
the FAC in CME is a bit tricky.
FAC call flow in CME like follow
1) IP Phone user dials a particular pattern (international destination, for example)
2) If this destination is enabled for FAC, the user will hear a voice prompt asking for an Account number and PIN
3) The user enters the Account/PIN pair. If valid, the call proceeds, if not the call is dropped.
- If the authentication fails after three retries, the call drops without notification.
Configuration Steps:
1- upload "enter_account.au" and "enter_pin.au" to the flash files. you can record these files.
2- Enter the following commands in configuration mode (in this example the Account and PIN are three digits long). This forces a user id and pid length, but it not required:
application
service clid_authen_collect
param uid-len 3 *length id 3 characters (can be user ext)
param pin-len 3 *length pin 3 characters
3- Create usernames for authentication. Notice that the username/password will represent the Account and PIN that the caller will have to dial to be successfully authenticated. You can create multiple usernames and then hand those out to select personnel that will be allowed to place premium calls. In this example both Account and PIN are three digits long.
aaa new-model
aaa authentication login h323 local
aaa authorization exec h323 local and network authorization
aaa authorization network h323 local for h323
username 107 password 123
username 107 autocommand exit
4- Create dial-peer cor
voice lpcor custom
group 1 manager
group 2 users
voice lpcor policy manager
service fac
accept manager fac
accept users fac
dial-peer cor custom
name international
name fac-int
name user-fac
dial-peer cor list int
member international
dial-peer cor list fac-int
member fac-int
dial-peer cor list user-fac
member user-fac
5- Create a dial-peer for each pattern that you want cover using this application.
dial-peer voice 400 voip
corlist incoming fac-int
corlist outgoing user-fac
service clid_authen_collect
destination-pattern 900T
session target ipv4:CME address
incoming called-number 900T
dtmf-relay h245-alphanumeric
codec g711ulaw
no vad
dial-peer voice 69 pots
corlist outgoing fac-int
translation-profile outgoing DiscardDigit9
preference 3
destination-pattern 900T
port 0/0/0
forward-digits all
no sip-register
6- assign the proper cor list to match voip dial-peer for FAC
HTH
Anas
don't forget to rate the helpful posts
Similar Messages
-
Cisco CP-78XX SIP Phone Pickup Not Work on CME
Hi,
I configured some SIP phones (CP-7821, CP-7841) with pickup function. Is it the Pickup / GPickup soft keys not function as the SIP phone? If yes, then I can use the FAC to access that? And I tried the FAC std. / custom as the pickup / gpickup .. both not work ... I don't know how to use the FAC on CME? As the FAC std., if I pickup local, that I should press (**3) > call?
Ref.:
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm/cmecover.html#45535
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm/cmefacs.html#30064
This is the configuration:
CME-SIP-Phone#sh run
Building configuration...
Current configuration : 5413 bytes
! Last configuration change at 11:06:12 UTC Fri Nov 28 2014 by mtlops
version 15.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
hostname CME-SIP-Phone
boot-start-marker
boot system flash:c2900-universalk9-mz.SPA.154-2.T1.bin
boot-end-marker
! card type command needed for slot/vwic-slot 0/0
enable secret 5 $XXXXXXXXXXXXXXXXXXXXXXXX
aaa new-model
aaa authentication login default local
aaa authorization console
aaa authorization exec default local
aaa session-id common
ip cef
no ipv6 cef
multilink bundle-name authenticated
stcapp feature access-code
voice-card 0
dspfarm
dsp services dspfarm
voice service pots
voice service voip
ip address trusted list
ipv4 10.118.0.0 255.255.255.0
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
supplementary-service h450.12
no supplementary-service h225-notify cid-update
redirect ip2ip
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
h323
no h225 timeout keepalive
call preserve
sip
bind control source-interface GigabitEthernet0/0
bind media source-interface GigabitEthernet0/0
registrar server expires max 600 min 60
voice class codec 1
codec preference 1 g711ulaw
codec preference 2 g711alaw
codec preference 3 g729r8
voice class h323 1
h225 timeout tcp establish 3
call preserve
voice class custom-cptone ABC-Company
dualtone disconnect
frequency 425
cadence 500 500
voice register pool-type 7821
description Cisco IP Phone 7821
reference-pooltype 6921
voice register pool-type 7841
description Cisco IP Phone 7841
reference-pooltype 6941
voice register global
mode cme
source-address 10.118.0.10 port 5060
timeouts interdigit 2
max-dn 200
max-pool 100
authenticate register
authenticate realm all
timezone 42
time-format 24
date-format D/M/Y
mwi stutter
mwi reg-e164
voicemail 5000
call-feature-uri pickup http://10.118.0.10/pickup
call-feature-uri gpickup http://10.118.0.10/gpickup
tftp-path flash:
file text
create profile sync 0001170446349417
ntp-server 10.118.0.10 mode unicast
ip qos dscp af11 media
ip qos dscp cs2 signal
ip qos dscp af43 video
ip qos dscp 25 service
camera
video
voice register dn 2
number 1000
pickup-call any-group
pickup-group 1
name BB Leung
label BB Leung
voice register dn 3
number 1001
pickup-call any-group
pickup-group 1
name CC Chan
label CC Chan
voice register dn 4
number 1002
pickup-call any-group
pickup-group 1
name DD Leung
label DD Leung
voice register dn 50
mwi
voice register template 1
softkeys hold Newcall Resume
softkeys idle Newcall Redial Gpickup Pickup Cfwdall DND
softkeys seized Cfwdall Endcall Redial
softkeys connected Confrn Endcall Hold Trnsfer
voice register pool 1
busy-trigger-per-button 1
id mac A8XX.XXXX.XXXX
type 7841
number 1 dn 2
template 1
dtmf-relay sip-notify
username 1001 password 112233
codec g711ulaw
no vad
voice register pool 2
busy-trigger-per-button 1
id mac 50XX.XXXX.XXXX
type 7841
number 1 dn 3
template 1
dtmf-relay sip-notify
username 1002 password 112233
codec g711ulaw
no vad
voice register pool 3
busy-trigger-per-button 1
id mac 00XX.XXXX.XXXX
type 7821
number 1 dn 4
template 1
dtmf-relay sip-notify
username 1003 password 112233
codec g711ulaw
no vad
license udi pid CISCO2921/K9 sn FHK1407F25D
license accept end user agreement
license boot c2900 technology-package uck9
hw-module pvdm 0/0
hw-module sm 1
username mtlops privilege 15 secret 5 $1$0qqx$1WGdfRW.flJrwmY7k8eUy0
redundancy
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
ip address 10.118.0.10 255.255.255.0
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
interface SM1/0
no ip address
shutdown
service-module fail-open
interface SM1/1
no ip address
interface Vlan1
no ip address
ip forward-protocol nd
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 10.118.0.1
control-plane
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
mgcp profile default
dspfarm profile 1 conference
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum sessions 7
associate application SCCP
shutdown
gatekeeper
shutdown
telephony-service
max-conferences 8 gain -6
transfer-system full-consult
fac standard
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line 67
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
transport input all
scheduler allocate 20000 1000
end
CME-SIP-Phone#sh telephony-service fac
telephony-service fac standard
callfwd all **1
callfwd cancel **2
pickup local **3
pickup group **4
pickup direct **5
park **6
dnd **7
redial **8
voicemail **9
ephone-hunt join *3
ephone-hunt cancel #3
ephone-hunt hlog *4
ephone-hunt hlog-phone *5
trnsfvm *6
dpark-retrieval *0
cancel call waiting *1VPN is not Configured prints on all phones now with the built-in VPN client if VPN isn't configured. That's normal and is just cosmetic. That should not be causing your registration issues.
-
Forced Authorization Codes in CME
Hi,
My company is migrating our telephony system from Mitel to CME and one of the features that we need to have in CME is FAC. Making some research I have found a workaround to use FAC with UC500. My question is:
can I use this same configuration with CME? I already have the audio files, but I don't have the script.
the link where I found the workaround is this : https://supportforums.cisco.com/docs/DOC-9795/#Can_UC500CME_be_configured_to_prompt_a_caller_for_a_PIN_before_placing_a_call
Does anybody know of a method to enforce FAC with CME?
ThanksI think I found the script. It seems that the script is compiled into the image. It authenticates using (ani, dnis) for (account, password). If that fails, it collects account and pin number, then authenticates using (account, pin). The script's name is Clid_authen_collect.tcl.
The last thing to know now, is where can I configure each user's PIN number.
The link to see the script is: http://www.cisco.com/en/US/docs/routers/access/as5350/software/feature/guide/pull_ivr.html#wp1021162
Any help will be much appreciated. -
FAC LPCOR IS NOT WORKING IN CME SIP PHONES
Dear Team,
We are planning to put FAC on SIP (7821) phones for calling long distance.
CME version is 10.0
Please find the config
gw-accounting aaa
aaa new-model
aaa authentication login h323 local
aaa authorization exec h323 local
aaa authorization network h323 local
aaa session-id common
voice register global
mode cme
source-address 10.X.X.X port 5060
timeouts interdigit 5
max-dn 500
max-pool 475
load 7821 sip78xx.10-2-1-12
authenticate register
authenticate realm router.local
timezone 35
tftp-path flash:
create profile sync 0003478159444525
voice lpcor enable
voice lpcor custom
group 1 national-FAC
voice lpcor policy national-FAC
service fac
accept national-FAC fac
application
package auth
param max-retries 0
param passwd-prompt flash0:/enter_pin.au
param abort-digit *
param user-prompt flash0:/enter_account.au
param passwd 12345
param term-digit #
param max-digits 32
username 1111 password 7 1446435A5D
voice register pool 2
lpcor type local
lpcor incoming national-FAC
lpcor outgoing national-FAC
busy-trigger-per-button 1
id mac F09E.636F.0F4B
type 7821
number 1 dn 2
template 1
cor incoming NATIONALACCESS 1 3002
dtmf-relay rtp-nte sip-notify
username user2 password cisco
codec g711ulaw
voice register dn 2
number 3002
call-forward b2bua noan 5000 timeout 20
allow watch
name 3002
label 3002
dial-peer voice 117 voip
destination-pattern 905[0256].......$
lpcor outgoing national-FAC
session protocol sipv2
session target ipv4:10.X.X.X
incoming called-number .
codec g711ulaw
no vad
label 3004
CME#dir flash:
Directory of flash0:/
1 -rw- 96910452 Oct 21 2014 03:35:18 +04:00 c3900e-universalk9-mz.SPA.153-3.M3.bin
2 -rw- 3064 Oct 21 2014 03:49:06 +04:00 cpconfig-39xx.cfg
3 drw- 0 Nov 12 2014 14:09:54 +04:00 its
14 drw- 0 Nov 12 2014 15:16:46 +04:00 GUI
32 drw- 0 Oct 21 2014 03:49:32 +04:00 ccpexp
273 -rw- 2464 Oct 21 2014 03:51:18 +04:00 home.shtml
274 -rw- 116608 Nov 12 2014 15:10:32 +04:00 CME-GUI.rar
275 -rw- 3090800 Nov 12 2014 16:35:04 +04:00 kern78xx.10-2-1-12.sbn
276 -rw- 36307280 Nov 12 2014 16:36:00 +04:00 rootfs78xx.10-2-1-12.sbn
277 -rw- 364072 Nov 12 2014 16:36:10 +04:00 sboot78xx.10-2-1-12.sbn
278 -rw- 1228 Nov 12 2014 16:36:32 +04:00 sip78xx.10-2-1-12.loads
279 -rw- 496521 Nov 12 2014 17:01:40 +04:00 music-on-hold.au
280 -rw- 23660 Nov 19 2014 14:48:40 +04:00 enter_account.au
281 -rw- 24164 Nov 19 2014 14:48:48 +04:00 enter_pin.au
261324800 bytes total (120594432 bytes free)
But when ever iam trying mobile calls call is disconnecting. please find the debugs
Nov 19 20:04:34.661: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_peer:
peer tag 40001, direction 0
Nov 19 20:04:34.661: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
lpcor International-FAC
Nov 19 20:04:34.661: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
lpcor International-FAC index 1
Nov 19 20:04:34.661: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_peer:
Return Lpcor Index 1 for Peer Tag 40001
DAMAC_AKOYA-CME#
Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
lpcor International-FAC
Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
lpcor International-FAC index 1
Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_index_is_valid:
lpcor index 1 is valid
Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_policy_validate_internal:
Source LPCOR Index=1, Target LPCOR Policy=International-FAC
Nov 19 20:04:39.225: -Traceback= 19E34D6z 581A4DCz 581AC7Fz 55B3588z 55B3063z 55AEA34z 55B6A53z 55B7255z 55B649Bz 55F5AF5z 5583EEFz 55894B6z 5589734z 55F5AF5z 558A44Az 55CF04Ez
DAMAC_AKOYA-CME#
Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_policy_validate_internal:
Validate Pass; lpcor (source[1] target[1])
Nov 19 20:04:39.225: //-1/xxxxxxxxxxxx/LPCOR/lpcor_policy_validate_get_service:
FAC is enabled; lpcor (source[1] target[1])
Please advise. If iam missing any steps in this.
Thanks,
LAJAN JALEELDear Amit,
The configuration is working fine. We find out what is the exact issue.
*****Issue******
Debug voice application auth was giving an out put that
user prompt url is not found , Even though the exact directory was there under flash0:
CME#dir flash:
Directory of flash0:/
1 -rw- 96910452 Oct 21 2014 03:35:18 +04:00 c3900e-universalk9-mz.SPA.153-3.M3.bin
2 -rw- 3064 Oct 21 2014 03:49:06 +04:00 cpconfig-39xx.cfg
3 drw- 0 Nov 12 2014 14:09:54 +04:00 its
14 drw- 0 Nov 12 2014 15:16:46 +04:00 GUI
32 drw- 0 Oct 21 2014 03:49:32 +04:00 ccpexp
273 -rw- 2464 Oct 21 2014 03:51:18 +04:00 home.shtml
274 -rw- 116608 Nov 12 2014 15:10:32 +04:00 CME-GUI.rar
275 -rw- 3090800 Nov 12 2014 16:35:04 +04:00 kern78xx.10-2-1-12.sbn
276 -rw- 36307280 Nov 12 2014 16:36:00 +04:00 rootfs78xx.10-2-1-12.sbn
277 -rw- 364072 Nov 12 2014 16:36:10 +04:00 sboot78xx.10-2-1-12.sbn
278 -rw- 1228 Nov 12 2014 16:36:32 +04:00 sip78xx.10-2-1-12.loads
279 -rw- 496521 Nov 12 2014 17:01:40 +04:00 music-on-hold.au
280 -rw- 23660 Nov 19 2014 14:48:40 +04:00 enter_account.au
281 -rw- 24164 Nov 19 2014 14:48:48 +04:00 enter_pin.au
261324800 bytes total (120594432 bytes free)
my application configuration was like this:
application
package auth
param passwd-prompt flash0:/enter_pin.au
param max-retries 0
param term-digit #
param user-prompt flash0:/enter_account.au
param abort-digit *
param passwd 12345
param max-digits 32
*****Resolution*****
changed user prompt and password prompt from flash0:/ to flash:/
application
package auth
param passwd-prompt flash:/enter_pin.au
param max-retries 0
param term-digit #
param user-prompt flash:/enter_account.au
param abort-digit *
param passwd 12345
param max-digits 32
Right now lpcor is working fine for Long Distance calls with the same config.
Thanks All -
Hi.. Is there some way to enable forced authorization codes on CallManager Express 4.0 natively on CME or by using another application?
Thanks in advanced,
-JoseYou can use dial-peers as an alternate solution. For example, if you want to use 12345 as your FAC and your normal dial-peer is something like this
dial-peer voice 10 pots
destination-pattern 9T
port 1/0/0
Change this dial-peer to
dial-peer voice 10 pots
destination-pattern 123459T
port 1/0/0
Users would need to enter the FAC followed by the DNIS to place calls.
Regards,
Anup -
Hi All,
I would like to restrict the international dialing for couple of users. Please let me know the FAC configuration details for CME. Its only for specific phone not for all the phone. I am using router 2900 with flash c2900-universalk9-mz.SPA.150-1.M4.bin.
Please help me here and thanks in advance.Configuration guides are always a nice point to start looking for.
Configuring Forced Authorization
http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cucme/admin/configuration/guide/cmefac.html
HTH
java
If this helps, please rate
www.cisco.com/go/pdihelpdesk -
Issue with LPCOR on CME 10.5
Dear All,
I am facing issues with LPCOR configuration on CME 10.5. For International calls the Authentication Prompts triggers some times and some times doen not.
Also when a local call is dialed the Authentication Prompt is triggered some times.Below is the config and debug logs. Need your help to resolve this.
voice lpcor enable
voice lpcor custom
group 10 endusers
group 11 pstn
voice lpcor policy endusers
service fac
accept endusers fac
accept pstn fac
voice lpcor policy pstn
service fac
accept endusers fac
accept pstn fac
application
package auth
param passwd-prompt flash:enter_pin.au
param max-retries 0
param abort-digit *
param term-digit #
param user-prompt flash:enter_account.au
param passwd 12345
param max-digits 32
interface GigabitEthernet0/1.1
encapsulation dot1Q 1 native
ip address 10.25.76.1 255.255.255.0
interface GigabitEthernet0/1.201
encapsulation dot1Q 201
ip address 10.25.77.1 255.255.255.0
voice-port 0/0/0
lpcor outgoing pstn
trunk-group ALL_FXO 1
supervisory disconnect dualtone mid-call
supervisory custom-cptone 2n-gsm
no battery-reversal
input gain -6
output attenuation -3
cptone SA
timeouts call-disconnect 1
timeouts wait-release 1
timing sup-disconnect 50
connection plar 5040
caller-id enable
cable-detect
dial-peer cor custom
name local
name longdistance
name 911
name Internal
name fac-int
name user-fac
dial-peer cor list local
member local
dial-peer cor list call-local
member local
dial-peer cor list call-longdistance
member longdistance
dial-peer cor list user1
member local
member 911
dial-peer cor list user2
member local
member longdistance
member 911
member user-fac
dial-peer cor list user3
member 911
dial-peer cor list call-911
member 911
dial-peer cor list call-internal
member Internal
dial-peer cor list fac-int
member local
member 911
member fac-int
dial-peer cor list user-fac
member user-fac
dial-peer voice 96 pots
trunkgroup ALL_FXO
corlist outgoing call-911
destination-pattern 9[2-6]......
forward-digits 7
dial-peer voice 901 pots
trunkgroup ALL_FXO
corlist outgoing call-911
destination-pattern 901[2-4,6-8].......
forward-digits 10
dial-peer voice 800 pots
trunkgroup ALL_FXO
destination-pattern 9800T
prefix 800
dial-peer voice 900 pots
destination-pattern 9T
port 0/0/3
prefix 9
dial-peer voice 11 pots
destination-pattern 901........
port 0/0/3
forward-digits 10
dial-peer voice 9051 pots
trunkgroup ALL_FXO
corlist outgoing call-local
destination-pattern 905........
forward-digits 10
dial-peer voice 19 pots
trunkgroup ALL_FXO
corlist outgoing fac-int
destination-pattern 900T
translate-outgoing called 1
forward-digits all
dial-peer voice 20 voip
description International calling
service clid_authen_collect
destination-pattern 900T
lpcor outgoing pstn
session target ipv4:10.25.76.1
incoming called-number 9T
dtmf-relay h245-alphanumeric
codec g711ulaw
no vad
ephone-dn 1
number 4121
name John
corlist incoming fac-int
ephone 1
lpcor type local
lpcor incoming endusers
mac-address E0D1.730A.21DE
ephone-template 2
type 7942
button 1:1
voice register dn 33
number 4163
call-forward b2bua busy 5000
call-forward b2bua noan 5000 timeout 20
call-forward b2bua unregistered 5000
allow watch
name Joseph
mwi
voice register pool 33
busy-trigger-per-button 4
id mac BC67.1C31.C8AA
type 7821
number 1 dn 33
cor incoming fac-int 1 4163
dtmf-relay rtp-nte
codec g711ulaw
transfer max-length 4
Debug Logs
DAMAC-CME-ANOUD#DEBUg VOIce lpcor all
voip lpcor all debugging is on
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#term
DAMAC-CME-ANOUD#terminal i
DAMAC-CME-ANOUD#terminal i
Apr 12 16:22:39.825: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 1, ConnectionId F692C420E06611E4BB0CE7FDC5486EA5, SetupTime 16:22:35.615 UTC Sun Apr 12 2015, PeerAddress 4130, PeerSubAddress , DisconnectCause 10 , DisconnectText normal call clearing (16), ConnectTime 16:22:39.825 UTC Sun Apr 12 2015, DisconnectTime 16:22:39.825 UTC Sun Apr 12 2015, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0
Apr 12 16:22:39.825: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:04/12/2015 16:22:35.609,cgn:4130,cdn:,frs:0,fid:2599,fcid:F692C420E06611E4BB0CE7FDC5486EA5,legID:284C,bguid:F692C420E06611E4BB0CE7FDC5486EA5mon
DAMAC-CME-ANOUD#terminal imon
^
% Invalid input detected at '^' marker.
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
Apr 12 16:22:44.089: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
lpcor endusers
Apr 12 16:22:44.089: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
lpcor endusers index 10
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#show debug
VOIP LPCOR:
debug voip lpcor error call is ON (filter is OFF)
debug voip lpcor error call informational is ON (filter is OFF)
debug voip lpcor error software is ON
debug voip lpcor error software informational is ON
debug voip lpcor detail is ON (filter is OFF)
debug voip lpcor function is ON (filter is OFF)
debug voip lpcor inout is ON (filter is OFF)
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
Apr 12 16:23:22.889: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 1, ConnectionId FBA1532AE06611E4BB10E7FDC5486EA5, SetupTime 16:22:44.089 UTC Sun Apr 12 2015, PeerAddress 4130, PeerSubAddress , DisconnectCause 10 , DisconnectText normal call clearing (16), ConnectTime 16:23:02.009 UTC Sun Apr 12 2015, DisconnectTime 16:23:22.889 UTC Sun Apr 12 2015, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 1038, ReceiveBytes 166080
Apr 12 16:23:22.889: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:04/12/2015 16:22:44.093,cgn:4130,cdn:,frs:0,fid:2600,fcid:FBA1532AE06611E4BB10E7FDC5486EA5,legID:284D,bguid:FBA1532AE06611E4BB10E7FDC5486EA5
Apr 12 16:23:22.905: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 1, ConnectionId FBA1532AE06611E4BB10E7FDC5486EA5, SetupTime 16:22:57.795 UTC Sun Apr 12 2015, PeerAddress 0097150107659, PeerSubAddress , DisconnectCause 10 , DisconnectText normal call clearing (16), ConnectTime 16:23:02.015 UTC Sun Apr 12 2015, DisconnectTime 16:23:22.905 UTC Sun Apr 12 2015, CallOrigin 1, ChargedUnits 0, InfoType 2, TransmitPackets 1038, TransmitBytes 174384, ReceivePackets 1043, ReceiveBytes 166880
Apr 12 16:23:22.905: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:04/12/2015 16:22:57.785,cgn:4130,cdn:0097150107659,frs:0,fid:2601,fcid:FBA1532AE06611E4BB10E7FDC5486EA5,legID:284E,bguid:FBA1532AE06611E4BB10E7FDC5486EA5
Apr 12 16:23:25.317: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
lpcor endusers
Apr 12 16:23:25.317: //-1/xxxxxxxxxxxx/LPCOR/lpcor_get_index_by_name:
lpcor endusers index 10
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#un all
All possible debugging has been turned off
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#
DAMAC-CME-ANOUD#!ok just send me these logs
DAMAC-CME-ANOUD#!i have to move from here
Apr 12 16:24:02.153: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 1, ConnectionId 14343755E06711E4BB16E7FDC5486EA5, SetupTime 16:23:25.323 UTC Sun Apr 12 2015, PeerAddress 4130, PeerSubAddress , DisconnectCause 10 , DisconnectText normal call clearing (16), ConnectTime 16:23:43.393 UTC Sun Apr 12 2015, DisconnectTime 16:24:02.153 UTC Sun Apr 12 2015, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 930, ReceiveBytes 148800
Apr 12 16:24:02.153: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:Tnow
DAMAC-CME-ANOUD#\WC,ft:04/12/2015 16:23:25.321,cgn:4130,cdn:,frs:0,fid:2602,fcid:14343755E06711E4BB16E7FDC5486EA5,legID:2850,bguid:14343755E06711E4BB16E7FDC5486EA5
Apr 12 16:24:02.169: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 1, ConnectionId 14343755E06711E4BB16E7FDC5486EA5, SetupTime 16:23:39.169 UTC Sun Apr 12 2015, PeerAddress 0097150107659, PeerSubAddress , DisconnectCause 10 , DisconnectText normal call clearing (16), ConnectTime 16:23:43.389 UTC Sun Apr 12 2015, DisconnectTime 16:24:02.169 UTC Sun Apr 12 2015, CallOrigin 1, ChargedUnits 0, InfoType 2, TransmitPackets 930, TransmitBytes 156240, ReceivePackets 937, ReceiveBytes 149920
Apr 12 16:24:02.169: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:04/12/2015 16:23:39.169,cgn:4130,cdn:0097150107659,frs:0,fid:2603,fcid:14343755E06711E4BB16E7FDC5486EA5,legID:2851,bguid:14343755E06711E4BB16E7FDC5486EA5We have come across this issue today in 10.9.5 (so affects 10.9.4 as well) but it was occurring in Sydney as well with a client and for me in Melbourne.
-
Really Need Some Help with CME 8.6 using IOS as Firewall and Anyconnect VPN on Phones
Hello,
I have a 2911 Router with IOS Security and Voice enabled and we are using CME 8.6. I am using a built-in Anyconnect VPN on 3 phones that are for remote users and thus I needed to enable security zones on the router which works because the remote phones will boot up, get their phone configs and I am able to call those remote phones from an outside line.
The issue I am having is that when I try to dial a remote phone connected via the VPN through port g0/0 from and internal office phone, i.e., NOT involving the PSTN then there is no audio. It's as if no audio is going back and forth. When I take off the security zones from the virtual-template interface and the g0/0 interface then the audio works great and I can reach the phone from internal as I am supposed to.
Could someone take a peek at my security config and see why audio would not be traveling through the VPN when I have my security zones turned on?
clock timezone PST -8 0
clock summer-time PST recurring
network-clock-participate wic 0
network-clock-select 1 T1 0/0/0
no ipv6 cef
ip source-route
ip cef
ip dhcp excluded-address 192.168.8.1 192.168.8.19
ip dhcp pool owhvoip
network 192.168.8.0 255.255.248.0
default-router 192.168.8.1
option 150 ip 192.168.8.1
lease 30
multilink bundle-name authenticated
isdn switch-type primary-ni
crypto pki server cme_root
database level complete
grant auto
lifetime certificate 7305
lifetime ca-certificate 7305
crypto pki token default removal timeout 0
crypto pki trustpoint cme_root
enrollment url http://192.168.8.1:80
revocation-check none
rsakeypair cme_root
crypto pki trustpoint cme_cert
enrollment url http://192.168.8.1:80
revocation-check none
crypto pki trustpoint TP-self-signed-2736782807
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2736782807
revocation-check none
rsakeypair TP-self-signed-2736782807
voice-card 0
dspfarm
dsp services dspfarm
voice service voip
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
vpn-group 1
vpn-gateway 1 https://66.111.111.111/SSLVPNphone
vpn-trustpoint 1 trustpoint cme_cert leaf
vpn-profile 1
host-id-check disable
voice class codec 1
codec preference 1 g711ulaw
voice class custom-cptone jointone
dualtone conference
frequency 600 900
cadence 300 150 300 100 300 50
voice class custom-cptone leavetone
dualtone conference
frequency 400 800
cadence 400 50 200 50 200 50
voice translation-rule 1
rule 1 /9400/ /502/
rule 2 /9405/ /215/
rule 3 /9410/ /500/
voice translation-rule 2
rule 1 /.*/ /541999999/
voice translation-rule 100
rule 1 /^9/ // type any unknown plan any isdn
voice translation-profile Inbound_Calls_To_CUE
translate called 1
voice translation-profile InternationalType
translate called 100
voice translation-profile Local-CLID
translate calling 2
license udi pid CISCO2911/K9 sn FTX1641AHX3
hw-module pvdm 0/0
hw-module pvdm 0/1
hw-module sm 1
username routeradmin password 7 091649040910450B41
username cmeadmin privilege 15 password 7 03104803040E375F5E4D5D51
redundancy
controller T1 0/0/0
cablelength long 0db
pri-group timeslots 1-12,24
class-map type inspect match-any sslvpn
match protocol tcp
match protocol udp
match protocol icmp
class-map type inspect match-all router-access
match access-group name router-access
policy-map type inspect firewall-policy
class type inspect sslvpn
inspect
class class-default
drop
policy-map type inspect outside-to-router-policy
class type inspect router-access
inspect
class class-default
drop
zone security trusted
zone security internet
zone-pair security trusted-to-internet source trusted destination internet
service-policy type inspect firewall-policy
zone-pair security untrusted-to-trusted source internet destination trusted
service-policy type inspect outside-to-router-policy
interface Loopback0
ip address 192.168.17.1 255.255.248.0
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
description Internet
ip address dhcp
no ip redirects
no ip proxy-arp
zone-member security internet
duplex auto
speed auto
interface GigabitEthernet0/1
ip address 192.168.8.1 255.255.248.0
duplex auto
speed auto
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
interface Serial0/0/0:23
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn incoming-voice voice
no cdp enable
interface Integrated-Service-Engine1/0
ip unnumbered Loopback0
service-module ip address 192.168.17.2 255.255.248.0
!Application: CUE Running on NME
service-module ip default-gateway 192.168.17.1
no keepalive
interface Virtual-Template1
ip unnumbered GigabitEthernet0/0
zone-member security trusted
ip local pool SSLVPNPhone_pool 192.168.9.1 192.168.9.5
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
ip http path flash:/cme-gui-8.6.0
ip route 192.168.17.2 255.255.255.255 Integrated-Service-Engine1/0
ip access-list extended router-access
permit tcp any host 66.111.111.111 eq 443
tftp-server flash:apps31.9-3-1ES26.sbn
control-plane
voice-port 0/0/0:23
voice-port 0/3/0
voice-port 0/3/1
mgcp profile default
sccp local GigabitEthernet0/1
sccp ccm 192.168.8.1 identifier 1 priority 1 version 7.0
sccp
sccp ccm group 1
bind interface GigabitEthernet0/1
associate ccm 1 priority 1
associate profile 1 register CME-CONF
dspfarm profile 1 conference
codec g729br8
codec g729r8
codec g729abr8
codec g729ar8
codec g711alaw
codec g711ulaw
maximum sessions 4
associate application SCCP
dial-peer voice 500 voip
destination-pattern 5..
session protocol sipv2
session target ipv4:192.168.17.2
dtmf-relay sip-notify
codec g711ulaw
no vad
dial-peer voice 10 pots
description Incoming Calls To AA
translation-profile incoming Inbound_Calls_To_CUE
incoming called-number .
port 0/0/0:23
dial-peer voice 20 pots
description local 10 digit dialing
translation-profile outgoing Local-CLID
destination-pattern 9[2-9].........
incoming called-number .
port 0/0/0:23
forward-digits 10
dial-peer voice 30 pots
description long distance dialing
translation-profile outgoing Local-CLID
destination-pattern 91..........
incoming called-number .
port 0/0/0:23
forward-digits 11
dial-peer voice 40 pots
description 911
destination-pattern 911
port 0/0/0:23
forward-digits all
dial-peer voice 45 pots
description 9911
destination-pattern 9911
port 0/0/0:23
forward-digits 3
dial-peer voice 50 pots
description international dialing
translation-profile outgoing InternationalType
destination-pattern 9T
incoming called-number .
port 0/0/0:23
dial-peer voice 650 pots
huntstop
destination-pattern 650
fax rate disable
port 0/3/0
gatekeeper
shutdown
telephony-service
protocol mode ipv4
sdspfarm units 5
sdspfarm tag 1 CME-CONF
conference hardware
moh-file-buffer 90
no auto-reg-ephone
authentication credential cmeadmin tshbavsp$$4
max-ephones 50
max-dn 200
ip source-address 192.168.8.1 port 2000
service dnis dir-lookup
timeouts transfer-recall 30
system message Oregon's Wild Harvest
url services http://192.168.17.2/voiceview/common/login.do
url authentication http://192.168.8.1/CCMCIP/authenticate.asp
cnf-file location flash:
cnf-file perphone
load 7931 SCCP31.9-3-1SR4-1S.loads
load 7936 cmterm_7936.3-3-21-0.bin
load 7942 SCCP42.9-3-1SR4-1S.loads
load 7962 SCCP42.9-4-2-1S.loads
time-zone 5
time-format 24
voicemail 500
max-conferences 8 gain -6
call-park system application
call-forward pattern .T
moh moh.wav
web admin system name cmeadmin secret 5 $1$60ro$u.0r/cno/OD2JmtvPq4w9.
dn-webedit
transfer-digit-collect orig-call
transfer-system full-consult
transfer-pattern .T
fac standard
create cnf-files version-stamp Jan 01 2002 00:00:00
ephone-template 1
softkeys connected Hold Park Confrn Trnsfer Endcall ConfList TrnsfVM
button-layout 7931 2
ephone-template 2
softkeys idle Dnd Gpickup Pickup Mobility
softkeys connected Hold Park Confrn Mobility Trnsfer TrnsfVM
button-layout 7931 2
ephone-dn 1 dual-line
number 200
label Lisa
name Lisa Ziomkowsky
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 2 dual-line
number 201
label Dylan
name Dylan Elmer
call-forward busy 500
call-forward noan 500 timeout 12
ephone-dn 3 dual-line
number 202
label Kimberly
name Kimberly Krueger
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 4 dual-line
number 203
label Randy
name Randy Buresh
mobility
snr calling-number local
snr 915035042317 delay 5 timeout 15 cfwd-noan 500
call-forward busy 500
call-forward noan 500 timeout 12
ephone-dn 5 dual-line
number 204
label Mark
name Mark McBride
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 6 dual-line
number 205
label Susan
name Susan Sundin
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 7 dual-line
number 206
label Rebecca
name Rebecca Vaught
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 8 dual-line
number 207
label Ronnda
name Ronnda Daniels
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 9 dual-line
number 208
label Matthew
name Matthew Creswell
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 10 dual-line
number 209
label Nate
name Nate Couture
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 11 dual-line
number 210
label Sarah
name Sarah Smith
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 12 dual-line
number 211
label Janis
name Janis McFerren
call-forward busy 500
call-forward noan 500 timeout 12
ephone-dn 13 dual-line
number 212
label Val
name Val McBride
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 14 dual-line
number 213
label Shorty
name Arlene Haugen
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 15 dual-line
number 214
label Ruta
name Ruta Wells
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 16 dual-line
number 215
label 5415489405
name OWH Sales
call-forward busy 500
call-forward noan 500 timeout 12
ephone-dn 17 dual-line
number 216
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 18 dual-line
number 217
call-forward busy 500
call-forward noan 500 timeout 12
ephone-dn 19 dual-line
number 218
call-forward busy 500
call-forward noan 500 timeout 12
ephone-dn 20 dual-line
number 219
call-forward busy 500
call-forward noan 500 timeout 12
ephone-dn 21 dual-line
number 220
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 22 dual-line
number 221
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 23 dual-line
number 222
label Pam
name Pam Buresh
call-forward busy 500
call-forward noan 500 timeout 12
ephone-dn 24 dual-line
number 223
call-forward busy 500
call-forward noan 500 timeout 12
ephone-dn 25 dual-line
number 224
call-forward busy 500
call-forward noan 500 timeout 12
ephone-dn 26 dual-line
number 225
label Elaine
name Elaine Mahan
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 27 octo-line
number 250
label Shipping
name Shipping
ephone-dn 28 dual-line
number 251
label Eli
name Eli Nourse
call-forward busy 500
call-forward noan 500 timeout 10
ephone-dn 29 dual-line
number 252
ephone-dn 30 dual-line
number 253
ephone-dn 31 octo-line
number 100
label Customer Service
name Customer Service
call-forward busy 500
call-forward noan 500 timeout 12
ephone-dn 32 octo-line
number 101
label Sales
name Sales
call-forward busy 214
call-forward noan 214 timeout 12
ephone-dn 33 dual-line
number 260
label Conference Room
name Conference Room
call-forward busy 100
call-forward noan 100 timeout 12
ephone-dn 100
number 300
park-slot timeout 20 limit 2 recall
description Park Slot For All Company
ephone-dn 101
number 301
park-slot timeout 20 limit 2 recall
description Park Slot for All Company
ephone-dn 102
number 302
park-slot timeout 20 limit 2 recall
description Park Slot for All Company
ephone-dn 103
number 700
name All Company Paging
paging ip 239.1.1.10 port 2000
ephone-dn 104
number 8000...
mwi on
ephone-dn 105
number 8001...
mwi off
ephone-dn 106 octo-line
number A00
description ad-hoc conferencing
conference ad-hoc
ephone-dn 107 octo-line
number A01
description ad-hoc conferencing
conference ad-hoc
ephone-dn 108 octo-line
number A02
description ad-hoc conferencing
conference ad-hoc
ephone 1
device-security-mode none
mac-address 001F.CA34.88AE
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:2 2:31
ephone 2
device-security-mode none
mac-address 001F.CA34.8A03
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:12
ephone 3
device-security-mode none
mac-address 001F.CA34.898B
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
ephone 4
device-security-mode none
mac-address 001F.CA34.893F
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
ephone 5
device-security-mode none
mac-address 001F.CA34.8A71
ephone-template 1
max-calls-per-button 2
username "susan"
paging-dn 103
type 7931
button 1:6
ephone 6
device-security-mode none
mac-address 001F.CA34.8871
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:7 2:31 3:32
ephone 7
device-security-mode none
mac-address 001F.CA34.8998
ephone-template 1
max-calls-per-button 2
username "matthew"
paging-dn 103
type 7931
button 1:9
ephone 8
device-security-mode none
mac-address 001F.CA36.8787
ephone-template 1
max-calls-per-button 2
username "nate"
paging-dn 103
type 7931
button 1:10
ephone 9
device-security-mode none
mac-address 001F.CA34.8805
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:5
ephone 10
device-security-mode none
mac-address 001F.CA34.880C
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:14
ephone 11
device-security-mode none
mac-address 001F.CA34.8935
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:3
ephone 12
device-security-mode none
mac-address 001F.CA34.8995
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:8 2:31
ephone 13
device-security-mode none
mac-address 0021.5504.1796
ephone-template 2
max-calls-per-button 2
paging-dn 103
type 7931
button 1:4
ephone 14
device-security-mode none
mac-address 001F.CA34.88F7
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:23
ephone 15
device-security-mode none
mac-address 001F.CA34.8894
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:26
ephone 16
device-security-mode none
mac-address 001F.CA34.8869
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:28 2:27
ephone 17
device-security-mode none
mac-address 001F.CA34.885F
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:11
ephone 18
device-security-mode none
mac-address 001F.CA34.893C
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:27
ephone 19
device-security-mode none
mac-address 001F.CA34.8873
ephone-template 1
max-calls-per-button 2
paging-dn 103
type 7931
button 1:27
ephone 20
device-security-mode none
mac-address A456.3040.B7DD
paging-dn 103
type 7942
vpn-group 1
vpn-profile 1
button 1:13
ephone 21
device-security-mode none
mac-address A456.30BA.5474
paging-dn 103
type 7942
vpn-group 1
vpn-profile 1
button 1:15 2:16 3:32
ephone 22
device-security-mode none
mac-address A456.3040.B72E
paging-dn 103
type 7942
vpn-group 1
vpn-profile 1
button 1:1
ephone 23
device-security-mode none
mac-address 00E0.75F3.D1D9
paging-dn 103
type 7936
button 1:33
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line 67
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
line vty 0 4
transport input all
scheduler allocate 20000 1000
ntp master
ntp update-calendar
ntp server 216.228.192.69
webvpn gateway sslvpn_gw
ip address 66.111.111.111 port 443
ssl encryption 3des-sha1 aes-sha1
ssl trustpoint cme_cert
inservice
webvpn context sslvpn_context
ssl encryption 3des-sha1 aes-sha1
ssl authenticate verify all
policy group SSLVPNphone
functions svc-enabled
hide-url-bar
svc address-pool "SSLVPNPhone_pool" netmask 255.255.248.0
svc default-domain "bendbroadband.com"
virtual-template 1
default-group-policy SSLVPNphone
gateway sslvpn_gw domain SSLVPNphone
authentication certificate
ca trustpoint cme_root
inservice
endI think your ACL could be the culprit.
ip access-list extended router-access
permit tcp any host 66.111.111.111 eq 443
Would you be able to change the entry to permit ip any any (just for testing purpose) and then test to see if the calls function properly. If they work fine then we know that we need to open som ports there.
Please remember to select a correct answer and rate helpful posts -
Minimum Router's RAM requirement for Cisco CME
Hi,
Does anyone ever try to use below 1 GB RAM when installing CME for router 29XX? I know that Cisco recommend to use 1 GB RAM. I just want to know, what problem we will may face, if we implement CME with 2921 router for 50 users with default RAM (512 MB).Hello,
As you mentioned; for 2911 routers the recommended is to use 1 GB of RAM as per the link below:
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/requirements/guide/cme105spc.html
As you also going to deploy it with its maximum ip phones that can support, I'd highly recommend you to use 1 GB. If you use 512 RAM, you may fall into performance issues and your setup will not be supported by Cisco TAC.
Thank you,
Shadi -
UC560 Forced Authorization Codes (FAC)
Hi All,
Has anyone gotten FAC to work with the UC560? The box only crashing when the voip is enabled. When i shutdown the voip it makes the calls successfully.
can help is greatly appreciated
here is the configuration
Place the files in flash enter_account.au and enter_pin.au
aaa authentication login default local
aaa authentication login sdm_vpn_xauth_ml_1 local
aaa authentication login h323 local
aaa authorization exec default local
aaa authorization exec h323 local
aaa authorization network sdm_vpn_group_ml_1 local
aaa authorization network h323 local
application
service clid_authen_collect
param uid-len 3
param pin-len 6
dial-peer voice 50 voip
service clid_authen_collect
destination-pattern 9[2-8]......
session target ipv4:192.168.20.1
incoming called-number 9[2-8]......
dtmf-relay h245-alphanumeric
codec g711ulaw
no vad
dial-peer voice 100 pots
destination-pattern 9[2-8]......
preference 1
port 0/1/0
forward-digits 7Hello Andrian,
There are a few things I noticed, not sure if they are just left out, or not configured.
Your config does not have any usernames/passwords configured, and the dial-peer is pointing to the CME address. Here is the info I found, with the steps to configure FAC.
https://supportforums.cisco.com/docs/DOC-9795/
application
service clid_authen_collect
param uid-len 3
param pin-len 3
aaa new-model
aaa authentication login h323 local
aaa authorization exec h323 local
aaa authorization network h323 local
username 201 password 123
username 201 autocommand exit
username 202 password 321
username 202 autocommand exit
dial-peer voice 5500 voip
description International Calls
service clid_authen_collect
destination-pattern 9011.T
session target ipv4:10.1.1.1
incoming called-number 9011.T
dtmf-relay h245-alphanumeric
codec g711ulaw
no vad
Thank you,
Darren -
Re: CME and Analog Phones
I have CME running on a Cisco 2801 router and I have installed a 4FXS card. I have an analog phone connected to the port 0/2/0 of the FXS card and the following is configured.
dial-peer voice 201 pots
destination-pattern 4015
port 0/2/0
I am able to initiate calls from this unit however calls to this DN (analog) phone I receive a fast busy.
Also how do I transfer a call from an analog phone in this setup?This is the feature explained:
http://www.cisco.com/en/US/docs/ios/12_4t/12_4t2/ht1vg224.html
After the basic is working, you can configure a fac to access various functions:
http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4_6xe/htfeatmd.html -
i have CME run om 3945 router with IOS c3900-universalk9-mz.SPA.152-4.M2.bin and we apply translation rule for the incoming and the outgoing calls through E1 and we configured the translation profile under the dial peers , the issue is every random period of time and always we face it first working day after the weed end that the translation profile under the dial peers removed automatically and the calls can't done , so every time we have to reconfigure the translation profile under the dial peer , any one can help ?
kindly find attached ,
i am planing to upgrade the IOS version , is there any recommendation about it to not face any problem with the configuration or files on the flash or the router license ,
thanks .... -
CME User/Extension Has Lost Dial Tone
I have an extension that has lost dial-tone. This phone has been in service for over two years and has been working properly until now. Other buttons configured on the same phone work fine and the user can dial out, but not if using his extension. I have tried the following with no success:
-Checked the speakerphone and cabling
-Tried dialing out using the same extension on another phone (no dial-tone for the same extension on the other phones)
-Resetting the phone to factory defaults
-Removing the phone and configuring a brand new phone
Incoming calls to the extension work fine and everything looks correct on the display. The environment is Cisco CME 7 and the phone in question is a 7962.Hi,
You have a user/extension which has lost Dial tone i.e of IP phone 7962.It may be because of the following factors :
1.You are not connected to Extension mobility services.
2.the system requires a Client matter code (CMC) or Forced authorization code(FAC) after dialing a number.(SCCP phones only).
3.Change the time-of-day restrictions that prevent you from using some features during certain hours of the day.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cuipph/7962g_7961g_7961g-ge_7942g_7941g_7941g-ge/8_0/english/user/guide/62enu80/62614241trb.html
Regards
Aateek Singh
Network Engineer
Spooster IT Services -
CME 10.0 BLF Pickup 9971
Hello,
I have 10 post 9971 phones with ISR 2921 and 10.0 CME
All work properly.
Only the pickup does not work and I can not seem to understand how.
I need to make a pickup from the BLF buttons that users can retrieve the call.
Anyone know how?that's what I try
voice register dn <dn-tag>
pickup-group 1
Call pickup any-group
but I can not see a key pickup or group pickup on these positions.
I try to make a custom button with a fac but that does not work
Do you know how to display the buttons on 9971 because the soft key does not work -
Account with an icon of a face and a question mark
Same issue of other user in Yosemite Apple Support.
Following advises on that thread I also installed the ETRECHECK software tool, report is as follows:
Problem description:
At the login screen I find an icon with a face and a question mark in it - with a message it needs an update.
EtreCheck version: 2.1.5 (108)
Report generated 02 gennaio 2015 12:37:26 CET
Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Adware] links for help removing adware.
Hardware Information: ℹ️
MacBook Pro (13-inch, Mid 2012) (Verified)
MacBook Pro - model: MacBookPro9,2
1 2.5 GHz Intel Core i5 CPU: 2-core
16 GB RAM Upgradeable
BANK 0/DIMM0
8 GB DDR3 1600 MHz ok
BANK 1/DIMM0
8 GB DDR3 1600 MHz ok
Bluetooth: Good - Handoff/Airdrop2 supported
Wireless: en1: 802.11 a/b/g/n
Video Information: ℹ️
Intel HD Graphics 4000
Color LCD 1280 x 800
System Software: ℹ️
OS X 10.10.1 (14B25) - Uptime: 1:22:54
Disk Information: ℹ️
APPLE HDD HTS545050A7E362 disk0 : (500,11 GB)
EFI (disk0s1) <not mounted> : 210 MB
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
Macintosh HD (disk1) / : 498.89 GB (467.03 GB free)
Encrypted AES-XTS Unlocked
Core Storage: disk0s2 499.25 GB Online
MATSHITADVD-R UJ-8A8
USB Information: ℹ️
Apple Inc. FaceTime HD Camera (Built-in)
Apple Computer, Inc. IR Receiver
Apple Inc. BRCM20702 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Inc. Apple Internal Keyboard / Trackpad
Thunderbolt Information: ℹ️
Apple Inc. thunderbolt_bus
Gatekeeper: ℹ️
Mac App Store and identified developers
Launch Daemons: ℹ️
[loaded] com.adobe.fpsaud.plist [Support]
User Login Items: ℹ️
iTunesHelper Applicazione (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
Dropbox ApplicazioneHidden (/Applications/Dropbox.app)
Internet Plug-ins: ℹ️
FlashPlayer-10.6: Version: 16.0.0.235 - SDK 10.6 [Support]
Flash Player: Version: 16.0.0.235 - SDK 10.6 [Support]
QuickTime Plugin: Version: 7.7.3
Default Browser: Version: 600 - SDK 10.10
Safari Extensions: ℹ️
Pin It Button [Installed]
Save to Pocket [Installed]
Add To Amazon Wish List [Installed]
3rd Party Preference Panes: ℹ️
Flash Player [Support]
Time Machine: ℹ️
Time Machine not configured!
Top Processes by CPU: ℹ️
14% WindowServer
3% hidd
2% Safari
1% Dock
0% fontd
Top Processes by Memory: ℹ️
333 MB com.apple.WebKit.WebContent
155 MB mds_stores
137 MB Safari
137 MB Finder
86 MB Dropbox
Virtual Memory Information: ℹ️
7.76 GB Free RAM
4.88 GB Active RAM
3.28 GB Inactive RAM
1.26 GB Wired RAM
4.73 GB Page-ins
0 B Page-outs
Diagnostics Information: ℹ️
Jan 2, 2015, 11:15:06 AM Self test - passed
Jan 2, 2015, 12:06:57 AM /Library/Logs/DiagnosticReports/Dropbox109_2015-01-02-000657_[redacted].cpu_res ource.diag [Details]
---------- is there any troubleshooting for delete that fake account every time I start my Macbook Pro?
thanks and regards
EdoardoSmiley face with a ? means a bootable system is not found.
There maybe a problem with either system software or hard drive itself.
Try this.
Repair Disk
Steps 2 through 8
http://support.apple.com/kb/PH5836
Best.
Maybe you are looking for
-
My aux does not work on my ipad mini
Hi all! My ipad mini worked just fine, but suddenly , when i played spotify, it stopped work. is my phono aux broken? I have tried to play music wiih my iphone without any problems. What can be the problem? it is not the stereo and it is not the cabl
-
Specifying text font in a scroll pane
Below is a fragment of code that attempts to display text in a scroll pane. Basically this works OK, except for the following: 1. Changing the font doesn't seem to make any difference. I tried "Arial", as shown, and "Curier", the display looks identi
-
From my "main" pdf, how can i view an attached (or embedded) pdf link in a new window? Currently the link opens in the same window as the main pdf. I selected "go to page view" and viewing in new window isn't an option.
-
Safari 4.0.5 Screen image is small
All of a sudden my Safari image only occupies about a third of the screen
-
After updating to 1.2 then restarted, I have seen only blue screen
I have seen only blue screen after Apple logo startup, and now it is stuck like that. Nothing happen anymore. What a bad luck I am with this new iMac, I have to hand in my assignments in 2 days and I cannot even go to finder. If i can do that at leas