Gateway priority configuration on IOS Gatekeeper

Hi,
I am trying to route international calls to specific gateways that are registered on my gatekeeper with prefix 00*. I issue the command
zone prefix "local_zone" 00* gw-priority 10 "H323_alias1" "H323_alias2" and verify that the two gateways are registered with the highest priority but calls are routed alsso to the gateways with prefix 00* and priority 5.
I am running 12.3(8)T1 IOS on a C3640.
Any ideas?

You may like to verify your configuration with some of the config examples given in the following document
Understanding Cisco IOS Gatekeeper Call Routing
http://www.cisco.com/en/US/tech/tk652/tk701/technologies_tech_note09186a00800a8928.shtml

Similar Messages

VRF configuration on IOS-XR 4.1.

Hi
I have some questions about VRF configuration on IOS-XR 4.1.
I'm trying to configure BGP routing with vrf and I get the
following error when trying to commit my config:
===================================================
address-family ipv4 unicast
!!% 'BGP' detected the 'warning' condition 'The parent address family
has not been initialized'
===================================================
However, It is solved by configure "address-family vpnv4 unicast"
before committing the vrfs.
But, I'm not sure about that above configure are best practice or not.
Q1. Do you have a best practice configuration of BGP with VRF?
or
Q2. I have to use "address-family vpnv4 unicast" on IOS-XR ?
Please advice me.
Best regards,
Kim

Hi Kim ,
you must configure "address-family vpnv4 unicast" on BGP globally so you will be able to commit the configuration for the address-family.
You can refer the below link to understand how MPLS L3VPN's are configured on IOS-Xr.
http://www.cisco.com/en/US/docs/ios_xr_sw/iosxr_r3.5/mpls/configuration/guide/gc35v3.html#wp1026378

IOS gatekeeper : how to control registrations

Hi,
I'd like to be able to control what videoconference station can register on a Cisco IOS Gatekeeper based on the IP address or E.164 name.
Is there a way to do that ?
Thanks !
Steve Saindon

Hi Steve,
One option is to use the zone subnet command to specify a host or subnet that can or cannot register.
to allow a subnet to a zone:
gatekeeper
zone subnet myzone 10.2.3.0/24 enable
or to prevent a host from registering a zone:
gatekeeper
no zone subnet myzone 192.168.85.1/32 enable
Michael

Apple Configurator custom iOS version option

As of last week, Apple Configurator custom iOS version option seems to be failing out.Previously we were able to install or upgrade to iOS 8.1.3 instead of iOS 8.2 until we have tested applications to confirm they are working on the latest iOS version. When using the custom iOS version, it fails out during the iOS install issue.
It also appears the iTunes will no longer let a device be restored to the 8.1.3 ipsw either.
Has anyone else experienced this issue?

Dear HyperNova,
Firstly I thank you for your prompt reply to my question. However I do object to your response that you "seriously doubt anyone from Apple would tell me that" - are you seriously questioning my integrity that I would post that if not true! It is no wonder that people shy away from posting on forums when they get that sort of response.
I was advised by the support person I spoke to that it was intended for developer previews but that I could try it for earlier versions of iOS. It may not be a "supported' feature - but I WAS advised by Apple support that I could do this and it worked.

SCOM gateway server configuration steps

Can anybody share the SCOM gateway server configuration steps?

In addition, I would like to share the following with you for your reference:
Deploying Gateway Server in the Multiple Server, Single Management Group Scenario
http://technet.microsoft.com/en-us/library/bb432149.aspx
Deploying Gateway Server on Windows Server 2008
http://technet.microsoft.com/en-us/library/dd789059.aspx
Managing Gateway Servers in Operations Manager 2007
http://technet.microsoft.com/en-us/library/cc540382.aspx
Two items regarding the Gateway Server
http://blogs.technet.com/b/momteam/archive/2007/08/09/two-items-regarding-the-gateway-server.aspx
Powershell Commands to configure Gateway Server / Agent Failover
http://blogs.technet.com/b/jimmyharper/archive/2010/07/23/powershell-commands-to-configure-gateway-server-agent-failover.aspx
Hope this helps.
Thanks.
Nicholas Li - MSFT
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Qestion about clear configuration under IOS XR

Hi, All
I am currently having issue with clearing configuration under IOS XR. There is no command like write erase or delete start-up configuration.
I have read some documents for IOS XR, the CFS seems to be the place where the configuration store. So I tried to delete files under disk0:/configure/running and disk0:/configure/lr/running/absref1. But after reboot, the configuration still exists.
Could anybody help me by telling me the way to clear all the configuration under IOS XR? It is too painful to put no before all the sentences.
Thank you very much
Yuyang

Yuyang,
In the XR world if you wanted to do the equivalent "write erase" is to do a "commit replace" with a blank config.
For example, that would erase the config of the router.
RP/0/RP0/CPU0:crs-c#conf t
Thu Dec 9 16:41:11.349 EST
RP/0/RP0/CPU0:crs-c(config)#commit replace
Thanks,
Bryan

IOS gatekeeper Load Balancing?

To the experts
I have 3662 running IOS 12.3T with GK enabled.
I wonder if I can load balanced outgoing calls via different 02 GKs? (weighted or fair balanced 1-1)
Call1: MyGK (local zone) --> GK1 (remote zone1)
Call2: MyGK (local zone) --> GK2 (remote zone1, same zone)
Call3: MyGk (local zone)--> GK1 (remote zone1)
... so on ...
I think sequencial and blast does not help here. Also, GK1 and GK2 is not Cisco Based (3rd party GK)
Question: Is there any way for this scenario? DNS round-robin will help if I declare only one remote zone with DNS and I configure my BIND DNS Server to return multiple IP address to MyGk for load balancing?
Brgds
Thai Duy Hoa

The Cisco High-Performance Gatekeeper feature introduces new gatekeeper functionality and modifications for facilitating carrier class reliability, security, and performance into Cisco's Voice Network solution portfolio. These H.323 standard-based features have carrier grade reliability and performance characteristics with a robust open application protocol interface to enable development of enhanced applications like voice VPNs and wholesale voice solutions.
The new gatekeeper is characterized by the following:
"Increased support for back end applications.
"Increased performance on a single gatekeeper.
"Alternate gatekeeper support to the gatekeeper. Each alternate gatekeeper, or GK node, shares its local zone information so that the cluster can effectively manage all local zones within the cluster. Each alternate gatekeeper has a unique local zone. Clusters provide a mechanism for distributing call processing seamlessly across a converged IP network infrastructure to support IP telephony, facilitate redundancy, and provide feature transparency and scalability.

Can We Configure the iOS 7 Control Center?

Is there a way to individually configure the Control Center?
I added the suggestion below to www.apple.com/feedback, but should have asked first.
Subject: Add Cellular Data & Location Buttons to iOS 7 Control Center
We often have days when we don't have the opportunity to recharge our iPhones adequately. At such times conserving battery power is paramount. However, the buttons for Cellular Data and Location require several steps each to turn on and off.
Please add buttons for Cellular Data and Location to the Control Center so they can be accessed easily to better conserve battery power.

No, it is a core component of iOS and not user configurable, with one exception. On the iPad, under general settings, there is the option of what to use the side switch for - mute, or lock rotation. Changing that will change the corresponding (right-most) button in NC. However, that does not apply to an iPhone anyway.
BTW, just us fellow users here, so submitting this via the Apple feedback link was the right way to actually get the idea seen by Apple.

Apple configurator with ios 7.1

Hi,
I realized for a client deployment 170 ipads Air in ios 7.04 and 7.06 no problem with appleconfigurator.
Since the arrival of the ios 7.1 the following difficulties arrived (even putting it all updates):
-impossible to avoid a startup screen
-impossible to attach automatically a wireless network
-impossible to install in automatic mode (after deployment) profiles configurations
Since the last update ios 7.1 I must be enroll all the ipads in 2 stages for completion, in addition to manipulations joining the wireless network, why? How to go back one step?

I've just seen this message for the first time and it's showing on 10 devices.
What I really love about Apple Configurator is the copious amount of context driven help offered to you.
"Unable to send ClearPasscode command to device.
The device was disconnected.
Check the USB connection to the device."

OIM SAP UM Connector gateway port configuration

Hi All,
On SAP Target System, port for gateway communication is not the default 3300, but 3301. How do I go about configuring OIM to establish connection on 3301 instead of 3300?
Thanks in advance
Edited by: user13015045 on Aug 31, 2011 3:24 PM

Hello 790345,
You said:
There is a variable on SAP called "SYSTEM NUMBER". it takes two digit value .eg : 01.
port number is derived for that system number. so from above example gateway port will be (33<system number>) i.e., 3301
If I understand correctly, this variable SYSTEM_NUMBER is on SAP system side (target).
How about on OIM SAP connector side (source)? have you managed to make it connect to 3301 instead of 3000?
If yes, how did you do it?
Thanks,
Adr.

Apple configurator and ios 6.1 cannot install config profile

I'm using the Apple Configurator v1.2.1 to install my enterprise app into iPad 2's. First of all, I am unable to upgrade from iOS 6.0.1 to 6.1.2. It either fails or gets stuck and I have to "stop". My work around is to upgrade via the device (which is actually pretty fast). My big problem is that I am also installing provisioning and configuration profiles, which include files for the app. Every things seems to go ok, the app and all the data installs properly, so does the profisioning profile, until the end where the configurator tells me to "tap device to install profile" but the profile prompt never appears on the iPad. The iPad goes into setup as if it's a new iPad and the config profile nevers gets installed. I do get a warning saying it can't install the profile. I'm forced to update the configuration manually. I'm updating about a dozen each time, so it's starting to get tedious as well as error-prone. Any ideas would be greatly appreciated.

Use whatever method you wish to update iOS
Go though,the setup as needed
Then try apple Configurator to install your profiles
From memory updating iOS with apple Configurator
Causes the setup to run like a new device the same if you used iTunes to update
As the complete OS is installed
However it will only download iOS once, providing all your devices are the same
Updating iOS on the device still has a setup but it's only for iCloud
And you'd have to download the (smaller) update each time
I would think it is the iOS update and setup that's causing your profiles etc
to fail there maybe to much going on at the same time

Gateway Security configuration

Hello,
I have a question regarding the security configuration of the SAP-gateway with regard to the SAP online help.
[SAP online help|http://help.sap.com/saphelp_nw04/helpdata/en/0a/64861a386e481c90400401e6f20bba/content.htm]
It says that there is a secinfo and a reginfo file for configuration.
Is it correct to say that the reginfo file works as the secinfo file BUT the reginfo file offers additional options such as NO (number of registrations allowed) and an ACCESS / CANCEL list for the execution and canceling of the application?
The secinfo parameters are as follows:
USER=<user>, [PWD=<pwd>,] [USER-HOST=<user_host>,] HOST=<host>,TP=<tp>;
Although the user entry is not used, you must specify it.
The secinfo parameters are:
TP=<tp> [HOST=<hostname>,...] [NO=<n>] [ACCESS=<hostname,...>] [CANCEL=<hostname,...>]
Besides the PWD parameter both seem to operate the same way...
Thank you!

No. They serve a different purpose, but the control files have a similar format.
First of all I recommend using the [NW70Ehp1 docs|http://help.sap.com/saphelp_nw70ehp1/helpdata/en/48/b2096b7895307be10000000a42189b/frameset.htm] and not the NW04 ones and please also read the OSS notes on the two control files for more detailed information about changes to them and what they are intended for.
You can compare secinfo and reginfo (from the "use-case" for security usage) to the security settings which a reverse proxy performs, as compared to a forward proxy in the http protocol world.
The reginfo protects external systems from the SAP system so that they cannot be "hijacked" once a (possibly) legitimate program is being communicated with from the SAP system via the gateway.
The secinfo protects the SAP system's own server programs from being started from legitimate hosts. These will typically be "local" programs started from the system itself (this also includes the "local" context of a remotely called RFC enabled ABAP function module on the aplpication server!), but they can also be started remotely without the typical ABAP control options (authentication, authorization, some configuration)... which is what you should want to control!
In addition to previous SDN related threads (use the search) you can also check the blog space for the term "SAPTechEd hacker's lunch".
Please note that there have been some changes in this area, so you must keep your kernel and SP levels in mind.
It is not an easy topic you have chosen... Concentrate on the HOST parameters for quick (and imprortant) wins with low effort - pass the granular security to the applications (if you can trust them on those hosts).
Cheers,
Julius

RSVP Configuration in IOS XR

Hello, does anyone knows if this commands are available in Cisco IOS XR 3.8.4?
ip rsvp signalling hello
ip rsvp signalling hello bfd
ip rsvp signalling hello statistics
I'm migrating a configuration and I cannot find any information regarding this specific commands.
thanks a lot,
Jose

Hello Jose,
RSVP command reference for IOS XR 3.8 is
http://www.cisco.com/en/US/docs/ios_xr_sw/iosxr_r3.8/mpls/command/reference/gr38rsvp.html#wp1483174
And this is the configuration guide
http://www.cisco.com/en/US/docs/ios_xr_sw/iosxr_r3.8/mpls/configuration/guide/gc38rsvp.html
I agree the commands that you have listed are not present
Hope to help
Giuseppe

Expiring Certificate in Threat Management Gateway workgroup configuration

Can someone point me to documentation on how to renew a expiring certificate in a Threat Management Gateway in an workgroup configuration. The certificate is tied to the ISASTGCTL service.
Thanks in advanced.

Thanks a Lot Anders but I could not understand "one server cert for each array member issued to the fqdn
of the member" . Does it mean
1 . different certificate for each array member (i.e server01.workgroup.local for server01 and server02.workgroup.local
for server02)?
OR
2. Single server certificate (server01.workgroup.local) for both the servers. server01 in the primary
member of the array.
I am asking this because at present I can see that there is same server certificate present (i,e server01.workgroup.local)
on both the servers under ADAM_ISASTGCTRL\personal certificate store.
could you please throw some light on it.
Thanks and regards
Lalit

Router ios gatekeeper proxy mode for security

All
Will ios router gk proxy increase the security or h323 gw to make the call?
do you all have related link about proxy mode gk configuration?
thx

These commands can be used to configure proxy
http://www.cisco.com/en/US/products/sw/iosswrel/ps1830/products_feature_guide09186a0080087a41.html#wp10683

Gateway priority configuration on IOS Gatekeeper

Similar Messages

Maybe you are looking for