Failover config for Extension Mobility

Hi,
I have CCM3.3(3) loaded on publisher & subscriber.Extension mobility,Tomcat service is running on both servers.In IP phone services URL, I have givem publishers ip address.In Cisco Extension Mobility Logout,I have configured "True" for Login Service Enabled field in both the servers.
When I shutdown Publisher,EM is not working on all the phones.When I shutdown Subscriber,EM is not working on few phones.But EM is working on all phones when both servers are up.
Should I configure something additional to build redundancy .I want to configure subscriber as primary & Publisher as secondary for EM.
I am using 7940 IP phones.
Regds
Jagadish

Text below from Cisco Engineer Marcos Massakawa, about TAC case of this problem with extension mobility.
The problem, as you noted, is that the "Login" and "Logout" service URLs can really only point to
one IP address. In your case, you'd probably have these set up to point to whichever server you
wanted to be the primary one for Extension Mobility. However, if that server failed, the "Login"
and "Logout" services will no longer be useable, since they point to an IP that is no longer
reachable. If you want to enable users to be able to login and logout from the backup server, you'd
have to install EM on the other server, and create a slightly different service name that would show
up on the users' phones as a valid service, such as "Login2"/"Logout2", or "Login Backup"/"Logout
Backup", etc. The service URL for these services would point to the IP of the backup server. It
seems kind of clumsy, but it's a limitation of only being able to put one IP in the service URL.
Best Regards
Joao Medeiros

Similar Messages

Reports for extension mobility

Hi,
Is there any report on CUCM 6.x shows when the user login and logout using extension mobility feature during period of time for example one month.

There is a solution for this. it is called ALM PRO+.
ALM PRO+ allows companies to view ExtensionMobility usage and is able to run detailed reports for usage and management purposes.
Centralised administration for all sites/locations using ALM PRO
License management and control
Advanced reporting on EM usage
Extended management reporting options
Calculating work space usage
Manage user and group profiles
Web-based administration
Drop me a PM for more information

Extension Mobility Failover mode

CCM 4.1(3)
We discovered yesterday during failover testing that Extension Mobility does not function when CCM PUB is down. When pressing the services button on the phone the message "Requesting" displays, and the services menu does not populate. Is this an expected loss of functionality with the PUB down or does this sound like a Configuration problem? EM functions normally with the PUB on line. Thanks

There is no failover for EM in 4.1(3)
There are some features and functions that require access to the master database on the publisher because they make modifications to records and therefore need write access. The publisher is the only server in a Cisco CallManager cluster that has a read and write configuration database. The main features and functions that require access to the publisher for write access include:
?Configuration additions, changes, and deletions
?Extension Mobility
?User speed dials
?Cisco CallManager User page options requiring the database
?Cisco CallManager software upgrades
?Call Forward All changes
?Message Waiting Indicator (MWI) state
Other services or applications might also be affected, and their ability to function without the publisher should be verified when deployed.
http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_implementation_design_guide_chapter09186a0080447510.html#wp1045103
Regarding the services, the URL may be pointing to the PUB, and HTTP request are sent to PUB.For this you need to create a DNS entry which responds to this request no matter if Primary server is offline.
G

CME Extension Mobility, SIP configuration

Hi,
Need help with CME Extension Mobility with SIP Phones (7841). I'm using CME 10.5 and I configured the parameters below for extension mobility but the phones won't register right after I put the logout profile in the voice register pool.
They work normally when not in Extension Mobility though. Please help I need to deploy this to my customer soon.
hostname Router
boot-start-marker
boot system flash:c3900-universalk9-mz.SPA.154-3.M2.bin
boot-end-marker
no aaa new-model
no authentication logging verbose
ip dhcp excluded-address 192.168.1.1 192.168.1.20
ip dhcp excluded-address 192.168.1.254
ip dhcp pool Phones
network 192.168.1.0 255.255.255.0
default-router 192.168.1.254
option 150 ip 192.168.1.254
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
cts logging verbose
voice-card 0
voice service voip
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
sip
bind control source-interface GigabitEthernet0/1.10
bind media source-interface GigabitEthernet0/1.10
registrar server expires max 600 min 60
voice register global
mode cme
source-address 192.168.1.254 port 5060
max-dn 110
max-pool 110
load 7841 sip78xx.10-1-1SR1-4
time-format 24
date-format D/M/Y
service https
url authentication http://192.168.1.254/CCMCIP/authenticate.asp
tftp-path flash:
create profile sync 0002641841434163
voice register dn 1
number 6001
name Poh Huat - 6001
label Poh Huat - 6001
voice register dn 4
number 6005
name Coordinator - 6005
label Coordinator - 6005
voice register pool 1
logout-profile 100
busy-trigger-per-button 2
id mac 547C.69D6.1AB6
type 7841
voice register pool 4
logout-profile 100
busy-trigger-per-button 2
id mac 547C.69D6.1A2F
type 7841
voice logout-profile 100
pin 1234
user 6000 password 12345
number 6000 type normal
speed-dial 1 999 label "EMERGENCY"
voice user-profile 1
pin 12345
user richard password richard
number 6001 type normal
speed-dial 1 996506901 label "Richard"
voice user-profile 2
pin 12345
user 6005 password 12345
number 6005 type normal
license udi pid C3900-SPE100/K9 sn FOC16145MQA
license boot module c3900 technology-package uck9
username xtra privilege 15 secret 5 $1$STRs$Qsuesm8dF23Okof.vRyf5.
redundancy
ip ftp username xtra
ip ftp password xtra2006admin
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
ip address dhcp
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
interface GigabitEthernet0/1.10
encapsulation dot1Q 10 native
ip address 192.168.1.254 255.255.255.0
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
ip forward-protocol nd
ip http server
no ip http secure-server
ip http path flash:
nls resp-timeout 1
cpd cr-id 1
tftp-server flash:PHONES/sip78xx.10-1-1SR1-4.loads alias sip78xx.10-1-1SR1-4.loads
control-plane
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
mgcp profile default
gatekeeper
shutdown
telephony-service
authentication credential 6000 12345
em keep-history
max-ephones 110
max-dn 110
service phone webAccess 0
max-conferences 8 gain -6
transfer-system full-consult
create cnf-files version-stamp 7960 Mar 05 2015 15:50:52
I have turned on debug ip http all and debug voice em-profile on and right after I entered the logout profile 100 under pool i get the following logs.
Router(config-register-pool)#
Mar 5 16:15:28.299: Thu, 05 Mar 2015 16:15:28 GMT 192.168.1.21 /CMEserverForPhone/serviceurl ok
Protocol = HTTP/1.1 Method = GET Query = locale=English_United_States&name=SEP547C69D61A2F
Mar 5 16:15:28.299:
Mar 5 16:15:28.299: Getting SIP phone index by IP address 192.168.1.21
Mar 5 16:15:28.299: SIP phone 4 found with contact IP address 192.168.1.21
Mar 5 16:15:33.363: Thu, 05 Mar 2015 16:15:33 GMT 192.168.1.21 /CMEserverForPhone/serviceurl ok
Protocol = HTTP/1.1 Method = GET Query = locale=English_United_States&name=SEP547C69D61A2F
Mar 5 16:15:33.363:
Mar 5 16:15:33.363: Getting SIP phone index by IP address 192.168.1.21
Mar 5 16:15:33.363: SIP phone 4 found with contact IP address 192.168.1.21
Mar 5 16:15:37.539: Thu, 05 Mar 2015 16:15:37 GMT 192.168.1.21 /CMEserverForPhone/extensionmobility ok
Protocol = HTTP/1.1 Method = GET
Mar 5 16:15:37.539:
Mar 5 16:15:37.539: Getting SIP phone index by IP address 192.168.1.21
Mar 5 16:15:37.539: SIP phone 4 found with contact IP address 192.168.1.21
After this the phones are still not registering, I'm suspecting it is the url authentication command, as i can't put the application-name and password after the command, any suggestions would be appreciated. THanks in advance.
-richard

Try adding:
voice register global
url authentication http://192.168.1.254/CCMCIP/authenticate.asp secretname psswrd
if still doesn't work try to compare your config with the reference guide here:
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm/cmemobl.html#pgfId-1163414
-Terry
Please rate all helpful posts

Extension Mobility in CUCM 7.1: How to send Userid and Pin with Service Par

Hi at all
is it possible to configure the IP Phone Service (CUCM 7.1)for Extension mobility so that when a user login in EM they dont need to insert the UserID and UserPin???
I think it could work with the Service Parameter but I dont know how.
Have somebody an idea?
Thanks.
kind regards
JosÃ©

Hi!
As far as I know that's not possible and it will defeat the purpose of using Extension Mobility as anyone could login from a phone with no credentials. Porbably you could configure a script or something that allows you to accomplish this, but it won't be supported.
Regards,
Teresa.
If you find this post helpful, please rate! :)

Extension mobility redundancy in CUCM 8.5

Hi ,
I have a doubt in cucm 8.5 extension mobility redundancy.
I have 3 call managers in cluster.
1. X.X.X.1 - punlisher
2. X.X.X.2 - sub1
3. X.x.X.3 - sub3
i have configured CUCM X.X.X.2 (sub 1) for extension mobility URL and in exterprise parameter configuration also (service URL). all phones are subscribed this URL and users login.
my schenerio is,
if SUB1 goes down, i change enterprise parameter service URL IP to punblisher. is that enough for users to login to extension mobility?
my doubt is,
in the above schenerio,
users press services button, request will go to enterprise parameter URL> enterprise URL will check for subscribed services> and route the request to the subscribed services for the phones . but here i have subscribed only EM service which has sub1 IP address.
how user can login?
if users can login meas, how that works.
or do i need to create 2 EM service (one for SUB1 IP, another one for PUB IP) and subscribe all the phones with both the services?
so that if subscriber fails user will login another service with has publisher IP?
I have activated EM service in all call managers inthe cluster.
please clarify my doubts.
thanks

Hi
Yes , the extension mobilty HA is avilable starting from V8 .On earlier verions as v 7 is not supported, Please find the below link:-
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/8x/cmapps.html#wp1189079
I think you have to deploy SLB (server load balancer) to distribute requests through servers . You can use load balancer as (F5 , or DNS round robin).
Note:The problem , is that the "Login" and "Logout" service URLs can really only point to one IP address. Please find the below solution based on DNS:-
- create multiple DNS records for the same name which will point to two CCM servers running the EM service
- point your EM service URL at that hostname which you have created on 1 step.
- ensure your phones have valid DNS servers assigned to resolve the above
Note: the problem on the DNS is the delay between requests.
Thank you
please rate all useful information

IP Telephony: CCME extension mobility any third party options?

We have a requirement for extension mobility with several CCME deployemnst (100 offices globaly).
Are there "any" options available
If not there should be as this is a common PBX feature and in the SMB (20-60) user market there is a massive requirement.
Cisco do shareholders a favour and increase shareholder profit therfore wack it in 4.1 of CCME criky what are you not thinking.

It may be roadmapped..
Probably a good question for CME product manager
I am not aware of a third party suite that supports this. I will check to see if there are any.
Sankar.

Extension mobility - can i have 2 extension mobility profiles with the same extension for a 7970 phone and a 7975 phone?

extension mobility - can i have 2 extension mobility profiles with the same extension for a 7970 phone and a 7975 phone? thanks

Yes, or simply configure 1 UDP and default device profile for the other one.
EDIT: and actually with those models, you should be able to use just one
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/10_0_1/ccmfeat/CUCM_BK_F3AC1C0F_00_cucm-features-services-guide-100/CUCM_BK_F3AC1C0F_00_cucm-features-services-guide-100_chapter_011000.html#CUCM_RF_EDCB3C30_00

Need Oracle JDeveloper extension for ADF Mobile

Hi Expertises,
I am doing internal task for demo purpose, so needed Oracle JDeveloper extension for ADF Mobile.
Could you provide me,
if i get this by tomorrow that would be a great help from you.
Thanks
Jyothi.Y

Hi,
the ADF Mobile framework extension is not available for public consumption at this point in time.
Frank

Is there an about:config command I can create for Firefox Mobile to remove the list of "Top sites?"

So it would seem that there is no add-on or feature to wipe or hide the "Top sites" list from Firefox mobile.
If there is no built in method of removing this information, could I make an entry in the about:config of the mobile platform to remove this information? I am satisfied if it is simply hidden, but would prefer if I could delete this information all together.
Any help in constructing this script would be greatly appreciated.

There is no way to change the about:home page at this time. It is something we are looking into but it will be a while before it is part of Firefox.

Extension Mobility not working during fail over

Hello All
I am John. I have a cluster that has 2 subscribers and 1 publisher. We are running 8.5.1. Yesterday I had a case where my one subscriber had failed and everything failed over to the other subscriber. Everything but extension mobility seemed to work. I checked all my certs, I checked the services, I checked the url for the services. Everything seemed to check out correctly. The url is pointed to the publisher and the publisher was available.
What i saw during failover:
When the services button was activated I received the requesting notice. after a while the message changed to Host not found. Then the next message was select service.
I did a restart on the extension mobility service with no effect. The other web applications (such as corp directory) all seem to be working correctly. Extension Mobility is the only service I have running.
When the failover ended and my lost subscriber was available, extension mobility and the services started working again.
Any help or ideas would be greatly appreciated.
Thank you
John

Hi John,
As suggested by iptuser55, switch on the EM service on both the nodes. This is the only way failover would work. There are 2 services in CUCM, Extension Mobility and EMApp. The EMApp runs on all the nodes, and its job is to keep a list of the nodes with the EM service activated. When the top node in that list goes down, the EMApp will then point to the next node in the list, which will act as the Failover.
Here's the architecture of the EM service.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/srnd/8x/uc8x/cmapps.html#wp1187822

CUCM 8.6.2 - SURL Buttons Issue related to Extension Mobility

Hello Guys,
we are running a CUCM 8.6.2.22900-2 with the extension mobility service. One the user device profiles we have applied several third application services via SURL buttons. Actually I though it does not matter, what device type I choose during the UDP Creation. The Buttons should appear on every model, which support SURL.
When I log into a 8945 with a 9971 user device profile, the SURL buttons do not show. It only works, if I create a dedicate UDP Profile with the 8945 type as base. The same for other models of the 89er/99er Series.
Can you help? Is this a bug?
Thanks.

Chris:
Thanks for the input. We do have the LDAP configured, we are using LDAPS. It is looking like port 636 form the CUP server is trying to reach out to the AD server so we are opening up that port to test if that is out issue. 636 is open from CUCM to AD but not CUP to AD.
TD

Updating Azure Svc Mgmnt for Extensions

Greetings! We are getting the following error on one of our Web Roles:
DiagnosticsPlugin.exe Information: 0 : [3/18/2015 7:39:07 PM] Decrypting private configuration
DiagnosticsPlugin.exe Warning: 0 : [3/18/2015 7:39:07 PM] No certficate with given thumbprint found in the certificate store. Thumbprint:<thumbprint>
At which point the Diagnostics extension is unable to initialize. I have verified that this certificate exists in Azure and is associated with this specific role. I have checked in the certificate management console and we do not see the certificate
being installed on the instance. Upon reviewing AppAgentRuntime.log on the instance, we can see that our SSL certificate and Remote Desktop certificate are being deployed, but not the service management certificate.
I have compared these logs with the logs from a working instance in order to verify what I should be seeing.
At this point, I have determined that we have one of two options:
Re-upload the Azure Service Management for Extensions into our environment.
Create a new Service Management certificate, upload it, and configure our role to use this certificate when decrypting the PrivateConfig for our instances.
We run into the following problems, however:
I cannot download the existing Service Management certificate as it was auto-generated by Azure. I can pull down the public certificate, but not the full certificate in order to re-upload it.
Having reviewed all of the PowerShell commands, Visual Studio options, and Management interface, I cannot see how to update the configuration for Azure such that a different certificate is used to encrypt the private config and is used to decrypt the same.
We have tried disabling and re-enabling diagnostics on our role -- both via Visual Studio and PowerShell. We have also attempted restarting our instances after making diagnostics changes -- to no effect.
Any help would be appreciated!
Thanks,
Bobby D

Hi,
Thank you for reaching out to us. Let me engage this post with someone who is more familiar with the topic. We shall revert back to you with an update at the earliest. Sincerely appreciate your patience.
Regards,
Prasant

Extension mobility logout issues UCM v 6.1

Hi, I am using UCM v6.1, with a Pub and Sub. I have deployed handsets out using auto-reg. I have created user device profiles and associated those the users. I have subscribed the services to the autoregistered phones by using BAT to bulk update , using bulk admin->phones->update phones->phones query.
The users press the services key and have the extension mobility and logout options. They can login to their Device profiles ok but when I attempt to log them out i receive an error on the lcd "logout unsuccessful [6] database error".
I have attempted to locate the actual device and log the user out manually using the CCMadmin GUI, however i receive a message ,
"Error occurred while retrieving information from database. No LOGOUT device profile".
According to the documentation, wgen selecting a log out device profile you choose "use current device settings". I left this as default when bulk updating the phones.
I have restarted the extension mobility service on Publisher and Subscriber, and have also shutdown the servers and rebooted - but to no avail.
I am doing something fundamentally wrong or could this be a bug? I have found a few in v6.0, which is why i upgraded to 6.1. thanks.

Hi Stuart,
It does sound like this bug (somewhat);
CSCsj33055 Bug Details
bulk insert phone or UDP does not add phone service if no svc parameters
Symptom:
Insert UDP fails to insert IP Phone Service if there are no parameters to all
Device Profiles.
Conditions:
'Insert UDP' in Bulk Administration Tool [BAT] doesn't insert IP Phone Service
for all the Device Profiles if no parameter is defined on the Phone Service.
This also happens when the UDP template is not subscribed to the Phone Service.
And this Insert UDP works fine in inserting the IP Phone Service to all DPs if
you are doing one record at a time, it fails if you do it in a BULK.
Workaround:
For Device Profiles:
1. Using a template
- Add a dummy parameter to the EM service. Save it and click on Update
Subscriptions.
- Subscribe EM service on the UDP template. Ignore if already done.
- Upload the Insert file for specific details transaction.
- Submit a job with the uploaded file and the UDP template on which EM is
subscribed.
2. Using a CSV file
- Add a dummy parameter to the EM service
- Specify this dummy parameter with blank values in the CSV. Sample file below
- Upload the Insert file for specific details transaction and submit a job
Once you have inserted DPs, you can go to IP phone service page, select the EM
service. Delete the dummy parameter and click update subscriptions.
sample:
DEVICE PROFILE NAME,DESCRIPTION,DIRECTORY NUMBER 1,SERVICE NAME 1,SUBSCRIBED
SERVICE NAME 1,SUBSCRIBED SERVICE NAME ASCII 1,PARAMETER NAME 1,PARAMETER VALUE 1
DP-1,DP1,2001,Extension Mobility,Extension Mobility,Extension Mobility,dummy,
DP-2,DP2,2002,Extension Mobility,Extension Mobility,Extension Mobility,dummy,
For phone devices:
1. create bat phone template and subscribed it to the EM service
2. define an update phones job:
enable extension mobility
log out profile: use current device settings
add services from this teamplate: run immediatelyMake sure to check the box to the left of the line item in the BAT job definition. That signifies to BAT that wish to synchronize all selected phones to the value specified.
I would open a TAC Case.
Hope this helps!
Rob

Cisco ISE configs for switch

I suppose Cisco ISE sends a URL redirect to the switch and the switch presents it to the client in case of guest Access getting a URL redirect with User Acceptance Page (Wired Guests and not wireless).
My question here is, Do we need to configure http and https server on the switches (both supplicant and authenticator)?
I am sure it will need but just wanted a confirmation..
I have checked the configuration for supplicant and Authenticator switches for ISE and it has no where mentioned that part of the config.
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_troubleshooting.html (a problem of URL redirection and possible cause is mentioned) ------- makes me sure that the config is needed.
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x_cg/b_sec_152ex_2960-x_cg_chapter_010000.html
(config of supplicant and authenticator switch)---- nowhere mentioned of the http/https config for both switches.

Yes, its needed. The http/s server within the swtich is used to grab the http user traffic and redirect the traffic to the CWA portal, or a device registration portal, or even to the Mobile Device Management (MDM) onboarding portal. .
ip http server
ip http secure-server
The info below I grabbed from Cisco ISE for BYOD and secure unified access book.
"Many organization want to ensure that this redirection process using the switch's internal HTTP server is decoupled from the management of the switch itself, in order to limit the chances of an end user interacting with the management intervace and control plane of a switch. this may be accomplished by running the following two commands from global configuration mode:
ip http active-session-modules none
ip http secure-active-session-modules none"

Failover config for Extension Mobility

Similar Messages

Maybe you are looking for