Gateway Redundancy
Hello All, can someone tell me how Lync 2013 handles PSTN gateway redundancy? I currently have two cisco gateways connected to my Lync 2013 environment. It appears that under normal operation, Lync just round robins between the two gateways. If I purposely
take one of the gateways down, almost every other outgoing Lync call will fail. Do I have to do something within Lync so that it can detect when a gateway is unavailable and use the surviving one?
Also, how can I make sure that Lync will use the other gateway if the first one is out of T1 channels.
That is probably the explanation. If you want to research further you will have to look at what error the gateway is providing Lync. In all likelihood when the call is failing there will be some type of error that points to an ISDN error. For example,
in trunk busy situation Lync will get a 503 error with an additional reason (e.g. msgwsip-reason="Q.850; cause=34";). The cause shown here is a the ISDN error code. It can
take some time for Lync to mark these gateways as down.
What return error would make lync use the other gateway? By default, my gw is responding with a SIP 404 error: SIP/2.0 404 Not Found. I could however make it respond with a 503 error: SIP/2.0 503 Service Unavailable.
SIP/2.0 404 Not Found
Via: SIP/2.0/UDP 10.86.176.110:5060;branch=z9hG4bK647452a554f9
From: <sip:[email protected]>;tag=114175~98718eca-fc35-493e-8cde-1d27b61c679c-30156882
To: <sip:[email protected]>;tag=1B49687C-261B
Date: Tue, 08 Jan 2013 22:54:54 GMT
Call-ID: [email protected]
CSeq: 101 INVITE
Allow-Events: kpml, telephone-event
Server: Cisco-SIPGateway/IOS-15.2.3.T
Reason: Q.850;cause=1
Content-Length: 0
SIP/2.0 503 Service Unavailable
Via: SIP/2.0/UDP 10.86.176.110:5060;branch=z9hG4bK6473356b69f7
From: <sip:[email protected]>;tag=114171~98718eca-fc35-493e-8cde-1d27b61c679c-30156879
To: <sip:[email protected]>;tag=1B4927B4-285
Date: Tue, 08 Jan 2013 22:54:37 GMT
Call-ID: [email protected]
CSeq: 101 INVITE
Allow-Events: kpml, telephone-event
Server: Cisco-SIPGateway/IOS-15.2.3.T
Reason: Q.850;cause=34
Content-Length: 0
Similar Messages
-
HSRP For the Gateway Redundancy.
Hi all
i just need a simple how to configure 2 Routers(R1;R2) to run HSRP For the Gateway Redundancy ,if one of the 2 routers Fail.should i connect the 2 routers 2gather via cross cable.than one straight cable to the 2 separate distribution switch.(2 Etherchanel configured between Dist switch)PS LIST ur optimum Configuration
Ur help very much AppreciatedHi,
i think you talking about campus network where you have two distribution two access and two core router's.
With that prospects.
My suggesion will be to have etherchannel between distribution switches and both the distribution switch should be connected to both the core router.
than use HSRP in distribution swithes.
configuration and diagram is given below.
do let us know if you want any more information.
interface FastEthernet2
ip address 172.69.90.1 255.255.255.0
standby priority 200
standby preempt
standby ip 172.69.90.6
interface FastEthernet3
ip address 172.69.91.1 255.255.255.0
standby priority 200
standby preempt
standby ip 172.69.91.6
like the above configuration you can configure second switch also you can apply on vlan interface too.
HTH -
H323 Gateway Redundancy In CCM
HI
I would like to configure 2 h323 gateway on the cisco call manager,Each gateway's have got 2 E1's.
I would like to know is it possible to configure redundancy on the ccm ? if we can how the ccm will come to know the first gateway is down or fully utilized..?
Please advise me...
Thanks.
Nazeeryes, it's possible, this is from a similar post gogasca replied:
The default behavior in IOS, when there are no valid POTS dial-peers for a call to go out of, is to return âunallocated numberâ as a cause code to CCM. This can happen even if a t1 goes down. When the T1 goes down, the POTS peer is marked as down, and when CCM sends a call to the gateway, it'll return a UAN cause code to the ccm, causing CCM (by default) to stop hunting for other available gateways. There are ways to change the behavior using service parameters in CCM, but this behavior didn't make sense to me, so we looked for other ways to do it.
It turns out that you can issue the global command "no dial-peer outbound status-check pots" on the IOS GW, if you're opposed to changing the CCM behavior. What this command will do is cause the dial-peer to stay up. IOS will try and route the call, and when the T1 is down, it returns "No circuit available" to CCM. When CCM receives this cause code, it knows there's been a non-user error, and continues hunting, achieving the desired behavior.
In your case since it is H323 it will be retruning only H225 release comp message with proper code to continue re-routing.
The IOS code will translate any code we get from pots side to IP side
also, if possible, please try searching within netpro first as it's very probable someone already asked the same before
HTH
javalenc
if this helps, please rate -
Gateway Failover with CCM 4 1 3b
Hi
I am having issues with gateway redundancy on CCM 4-1-3b. Basically when the Primary route group gateway fails, the backup gateway does not work. You can not make external calls out of this gateway unless you change the priority of the gateways in the route group manually. The only other time it failsover is if ip connectivity fails between the primary gateway and the CCM. Has anyone had any issues like this or is there a bug with this version of CCM? Failover with RG/RL should be a basic feature with CCM?Hi Derek,
CCM regards H323 gateways as a black hole. CCM does not have the ability see the busy/fail status of the H323 ports. As you said, the only way CCM would switch to the second gateway, in the Route List, would be if IP connectivity was lost.
I would recommend that you additionally configuring outbound VOIP dial-peers (with a higher preference value) to forward the call from your first gateway to your second gateway when the first gateway is up and, for whatever reason, the outward ports are busy or down.
Regards
Chris -
CAT4900M and NetApp - Performance issue
Hi,
I'm struggling with a performance issue between our two NetApp Fas3170-devices.
The setup is quite simple: Each NetApp is connected via two TenGig interfaces to a CAT4900M. The 4900M's are also connected via two TenGig interfaces. Each pair of connections are bundled into an Layer2-etherchannel, configured as a dot.1q trunk. Mode is set to 'ON' on both the 4900 and the NetApp. According to NetApp documentation, this configuration is supported. Across each etherchannel, the vlans 219 and 220 are allowed. Two partitions are configured on the NetApp's, one being active in our primary datacenter and another in our secondary datacenter. Vlan219 and Vlan220 are configured for each the two partitions, using HSRP for gateway redundancy.
None of the interfaces nor the etherchannels shows any signs of misconfiguration. All links are up and etherchannels working as expected, well almost. Nothing indicates packet loss, crc-errors, Input/Output queue-drops or anything the would impact performance. Jumboframe is not configured, although this has been discussed.
The problem is, that we're unable to achieve satisfactory performance, when for instance, performing a volume copy between the two NetApp partitions. Even though we have a teoretical bandwidth of 20Gbps end-to-end, we never climb above 75-80 Mbytes of actual transfer-rate between the two NetApps. So performancewise, is almost looks as if we're "scaled" down to a 1Gig link. No QoS or other kind of ratelimiting has been implemented on the 4900's, so from a network point of view, the NetApps can go full-throttle. NetApp sw has been updated and configurations for both NetApp and 4900's have been revised by NetApp engineers and given a "clean bill of health".
The configuration for the 4900->NetApp etherchannel/interfaces is as follows:
interface TenGigabitEthernet1/5
description *** Trunk NetAPP DC1 ***
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 219,220
switchport mode trunk
udld port aggressive
channel-group 2 mode on
spanning-tree bpdufilter enable
interface TenGigabitEthernet1/6
description *** Trunk NetAPP DC1 ***
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 219,220
switchport mode trunk
udld port aggressive
channel-group 2 mode on
spanning-tree bpdufilter enable
interface Port-channel2
description *** Trunk Etherchannel DC1 ***
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 219,220
switchport mode trunk
spanning-tree bpdufilter enable
spanning-tree link-type point-to-point
Configuration for 4900->4900 interfaces/etherchannel is as follows:
interface TenGigabitEthernet1/1
description *** Site-to-Site trunk ***
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 10,219,220
switchport mode trunk
udld port aggressive
channel-group 1 mode on
interface TenGigabitEthernet1/2
description *** Site-to-Site trunk ***
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 10,219,220
switchport mode trunk
udld port aggressive
channel-group 1 mode on
interface Port-channel1
description *** Site-to-Site trunk ***
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 10,219,220
switchport mode trunk
spanning-tree link-type point-to-point
Vlan10 used for mngt-purpose.
Does anyone have similar experiences or suggestions as to why we're having theese performanceissues?
Thanks
/Ulrich
Message was edited by: UHansen1976Hi,
Thanks for your reply.
I take it, that you mean baseline performance between the two NetApp's. Well, that's really out of my hands, as another department is responsible for the NetApp's. I'm not aware of any baseline performance, nor have I seen any benchmark tests or anything, that could give me hint.
Just as you suggest, I've gone through the switch-setup systematically. Basically, starting with the physical layer and working my way up. So far, I've found nothing that would indicate a physical problem. The switchport/etherchannel setup has been verified by my peers and also verified by NetApp according to the configuration on the NetApps, as well as the various best-practice documentation availible. Futhermore, I haven't seen any signs of packets drops, crc-errors, massive re-transmissions or anything like not, neither on the switches nor the NetApps.
Recently we had a status-meeting with our NetApp-partner and it looks to me like they're persuing the logical setup on the NetApps, as the're apparently a number of settings etc. that needs adjustment. Also, we're waiting for NetApp tech-support to comment on the traces, config-dump etc. we've send to them.
/Ulrich -
Hi
At the moment we plan a new network with 2 6506 and sup720. I am not shure if hsrp is enough or better to use eigrp. Or does somebody has another ideaHi,
Both HSRP and EIGRP has a differnt use on the Chassis.
HSRP is a protocol which is used for gateway readundency by providing a virtual IP as a gateway for the hosts. If one of the active gateway or the router goes down, the other gateway starts forwarding the packet.
EIGRP is a dynamic routing protocol which is used for routing between the 2 destination networks.
You have to impelemt HSRP on your LAN, that's for sure for the gateway redundency. If you have few other sites getting connectted to this site then you can run EIGRP or other routing protocol to share the routes and hence route the traffic.
Please Check the follwing links.
HSRP
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_6_3/confg_gd/redund.htm
EIGRP
http://www.cisco.com/en/US/partner/tech/tk365/technologies_white_paper09186a0080094cb7.shtml
HTH,
-amit singh -
I have a question about HSRP porotocol
I had setup a HSRP for Gateway Redundancy and BO_GW1 is the default active router.
The route goes to OUTSIDE Router is from BO_GW1 in the normal state.
But sometimes the route from outside come back to the internal network isn't the same router.
Like sometimes it come back from BO_GW1 and sometimes BO_GW2.
How can I control the route from outside to inside the same as the route from inside to outside.
Is there any solution?
Sorry for my English.Hello Alan,
The thing here is that the Outside Router is not aware of any HSRP cloud being used. In fact that router does not even face the HSRP Cloud.
That router connects to 2 different subnets.
In this case the router will use it's own routing table to send traffic to the destination and in this case as you are using static routing there will be a draw in the AD and both routes will be installed and used in a load-balancing fashion.
How to change it?
Well, use routing protocols and withdraw routes when the respectice interface go down or use IP SLA having the BO-GW1 as primary and using BO-GW2 as secondary.
Hope this makes sense.
jcarvaja
CCIE R&S 42930, 2-CCNP,JNCIS-SEC
Looking for a quick remote support session? Contact us at inetworks.cr -
Hello guys,
How can I implement load balancing and redundancy at my two 6509 Switch?
Thanks in advance.
Cheers!The easiest way would be to implement VSS. It may require a Sup and/or chassis upgrade.
http://www.cisco.com/en/US/products/ps9336/index.html
Another way is to implement first hop gateway redundancy using HSRP or GLBP.
http://www.cisco.com/en/US/tech/tk648/tk362/tk321/tsd_technology_support_sub-protocol_home.html
http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_example09186a00807d2520.shtml
Hope that helps. -
Hi,
I have some questions regarding FWSM and CSM. Thank you in advance for your feedback.
I am using a pair of 6513 with one fwsm and csm in each. I am setting up a dmz environment with these units. fwsm is the second tier firewall (a pair of PIX 525 are in perimeter).
1. Do I have to use MSFC? I am connecting PIXes to the outside VLAN of the FWSM and two inside routers to inside VLAN of the FWSM. FWSM has a DMZ VLAN as well. I don't see any reason to involve MSFC in the picture. Is this correct? Is there any reason in the future that I may need MSFC (i.e. changing from single context to multiple or using load balancing for DMZ servers)?
2. I am going to extend outside and inside VLANs of FWSM between two 6513 switches. Should I do this for DMZ as well? As I do not use gateway redundancy for my DMZ servers and it is a pure firewall configuration of 6513/FWSM, I don't think it is required.
3. My understanding is with extending outside VLAN, if the link between primary PIX and primary 6513 fails or if primary PIX fails over to secondary for any reason, secondary PIX will have a way to get to the outside interface of primary FWSM. Is this correct? If not, then how I can make sure that PIX fail over will be transparent to primary 6513/FWSM which is not connected to secondary PIX?
4. Any difference in spanning-tree configuration between this environment and a regular dual homed server based config?
Thanks,Hi
1) No you should be fine if you leave out the MSFC. Certainly you don't want the MSFC between your perimeter pix firewalls and the FWSM's as you could end up routing around the firewalls. You could have the MSFC on the inside of the FSWM's.
Changing to multiple context will not requre that you need the MSFC for the above. It is quite feasible to have a separate context where the MSFC is involved and still have your above setup where you haven't involved the MSFC. You dictate this by how you allocate vlans to the FWSM.
2) You will have to extend the DMZ, or at least you will have to allocate the DMZ vlan on both switches under the "firewall vlan-group .. " command. If you don't allocate the same vlans on each switch to the FWSM your failover will not work properley. If the DMZ servers are physically connecting into the 6500 chassis i would look to dual hone and include the DMZ in failover if you can. Can't see the reason not to use failover between chassis's if you can. (Of course depends on your have 2 NIC's in DMZ servers ).
3)Assuming your 6500's are connected with a layer 2 trunk yes the secondary pix should still be able to get to the outside interface of the FWSM primary.
4) For the FWSM not really. Just make sure you use a dedicated layer 2 trunk/etherchannel for the FWSM between the 2 switches.
Hope this has answered some of your queries
Jon -
HSRP/FHRP in an OTV Network across DC's
Hello - I've been struggling to get my head around how to implement gateway redundancy over multiple DC's "hosting" the same L2 network(OTV). I'd appreciate if someone could lead me in the right direction to designing a solution.
What is the best way going about configuring HSRP in an OTV network across several data centers?
If I have a host in a DC1 trying to get to the HSRP standby address of 10.0.0.1 and the active member of this HSRP group is in DC2 how would that work? Will it traverse the OTV network to get to DC2 and then be routed back to DC1? or.... is there a mechanism that can be used for the .1 address to be active on the local core?
TIA,
BilalI am including a good document from CCO and this should be your reference:
http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9402/white_paper_c11-644634.html
This document will help you to understand how to localize outgoing traffic via the local DC's gateway.
For your question "Will it traverse the OTV network to get to DC2 and then be routed back to DC1?", it is really depends. In a normal case, yes, the traffic will routed to teh closest DC and L2 would switch over the OTV. In order to remediate this, there is a new protocol from Cisco called LISP. It will help optimize the L2 extended host return traffic.
http://lisp.cisco.com/
HTH,
jerry -
CSM issue when using bridge mode
I have 2 CSM installed on 2 6509 each,and configured as bridge mode.One is acting active,another is standby.I know that client and server vlan have to use same IP,but I'm confused that the IP on standby CSM,does it need to differ from active CSM vlan IP or not?
Hello,
yes the ip adresses of the vlans on both CSM have to be different as you would have dupplicate IP-Adresses in any other case (not talking of the same IP-Adress in vlan1 and vlan2 configured in bridged mode). You should use the alias command to make the gateway redundant (only if this is needed in your scenario). In regards of the VIP-Adresses they have to be the same for failover purpose. I guess you know that you need the failover vlan too.
Kind Regards,
Joerg -
DHCP with redundant Gateway does not work
I am having trouble connecting to my office network using Wifi.
I have done some investigation and found the problem which is...
When DHCP server serves the request and replies with multiple/redundant gateways, the device does take the IP and communicates within the local network but ignores the gateway and is not able to connect the outside network.
When I requested my Systems Administrator and he added specific setting for my device's MAC address and sent only one gateway in DHCP reply, device starts to connect outside.
Our office has other debian based and CentOS based systems running including Ubuntu workstations but none of them is having problem with multiple/redundant gateways but only N900 is having this problem. It means that the problem is not inherited from Linux or Debian but the bug is related to Maemo itself.
I have tried to tell add some technical details and do not expect answers like to check firewall and so. This is a genuine problem and is not intermittent. We have experienced it using MS DHCP server under windows 2003 and win 2k as well.
End users: Please try to duplicate the problem before suggesting a work around or anything
Developers/Admins/Officials: I hope you acknowledge the problem soon.Yes it is uncommon configuration in house holds but in offices or places that have access to more than one Internet connection the configuration will be common. Houses normally have one small router with one internet connection. However in many offices the router is attached to multiple connections and manages fault-tolerance. Having said all that, regardless of how often it is used, when used it wont work and it is a bug.
In DHCP protocol "003 Router" is defined as a list of IPs not a single IP and if DHCP protocol is properly supported this should have work. What I mean is that this problem is related to DHCP implementation. Following is the output of route command...
ACTUAL OUTCOME:
===============
/ $ sudo /sbin/route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.2.15 * 255.255.255.0 U 0 0 0 wlan0
/ $
EXPECTED OUTCOME:
=================
/ $ sudo /sbin/route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.2.15 * 255.255.255.0 U 0 0 0 wlan0
default 192.168.2.1 0.0.0.0 UG 0 0 0 wlan0
default 192.168.2.2 0.0.0.0 UG 10 0 0 wlan0
/ $
I already posted the big on Bugzilla
https://bugs.maemo.org/show_bug.cgi?id=9662
Well I posted this here as well so if someone else also faces the same problem (not sure if there will be one) but they should at-least know the problem instead of thinking that why the hell my internet does not work in office when there is no firewall blocking it.. :-)
I do hope to get it viewed by a "sympathetic developer" :-)
I currently am not into develop/modify scripts but if this is not fixed by others then I believe I don't have a choice.
For now as I mentioned I did a work around by adding an IP reservation in my DHCP server which allows me to fix it to one Gateway for this MAC address only. But if I did not have admin access over my DHCP server, I was in trouble then and maybe would not be able to event troubleshoot and identify the problem. -
IP routing utilizing Verizon private network (GRE tunnel) with remote cellular gateways
Okay, I give up, and think I have done my due diligence (I have been engrossed and fascinated spending many more hours than allotted to try and learn some of the finer details). Time for some advice. My usual trade is controls engineering which generally require only basic knowledge of networking principals. However I recently took a job to integrate 100 or so lift stations scattered around a county into a central SCADA system. I decided to use cellular technology to connect these remote sites back to the main SCADA system. Well the infrastructure is now in and it’s time to get these things talking. Basic topology description is as follows: Each remote site has an Airlink LS300 gateway. Attached to the gateway via Ethernet is a system controller that I will be polling via Modbus TCP from the main SCADA system. The Airlinks are provisioned by Verizon utilizing a private network with static IP's. This private networks address is 192.168.1.0/24. Back at the central office the SCADA computer is sitting behind a Cisco 2911. The LAN address of the central office is 192.168.11.0/24. The 2911 is utilizing GRE tunnels that terminate with Verizon. The original turn up was done with another contractor that did a basic config of the router which you will find below. As it stands now I am pretty confident the tunnels are up and working (if I change a local computers subnet to 255.255.0.0 I can surprisingly reach the airlinks in the field), but this is obviously not the right way to solve the problem, not to mention I was unable to successfully poll the end devices on the other side of the Airlinks. I think I understand just about every part of the config below and think it is just missing a few items to be complete. I would greatly appreciate anyone’s help in getting this set up correctly. I also have a few questions about the set up that still don’t make sense to me, you will find them below the config. Thanks in advance.
no aaa new-model
ip cef
ip dhcp excluded-address 10.10.10.1
ip dhcp pool ccp-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
lease 0 2
ip domain name yourdomain.com
no ipv6 cef
multilink bundle-name authenticated
username cisco privilege 15 one-time secret
redundancy
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key AbCdEf01294 address 99.101.15.99
crypto isakmp key AbCdEf01294 address 99.100.14.88
crypto ipsec transform-set VZW_TSET esp-3des esp-md5-hmac
mode transport
crypto map VZW_VPNTUNNEL 1 ipsec-isakmp
description Verizon Wireless Tunnel
set peer 99.101.15.99
set peer 99.100.14.88
set transform-set VZW_TSET
match address VZW_VPN
interface Tunnel1
description GRE Tunnel to Verizon Wireless
ip address 172.16.200.2 255.255.255.252
tunnel source 22.20.19.18
tunnel destination 99.101.15.99
interface Tunnel2
description GRE Tunnel 2 to Verizon Wireless
ip address 172.16.200.6 255.255.255.252
tunnel source 22.20.19.18
tunnel destination 99.100.14.88
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
ip address 10.10.10.1 255.255.255.248
shutdown
duplex auto
speed auto
interface GigabitEthernet0/1
ip address 192.168.11.1 255.255.255.0
duplex auto
speed auto
interface GigabitEthernet0/2
ip address 22.20.19.18 255.255.255.0
duplex full
speed 100
crypto map VZW_VPNTUNNEL
router bgp 65505
bgp log-neighbor-changes
network 0.0.0.0
network 192.168.11.0
neighbor 172.16.200.1 remote-as 6167
neighbor 172.16.200.5 remote-as 6167
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip route 0.0.0.0 0.0.0.0 22.20.19.19
ip access-list extended VZW_VPN
permit gre host 99.101.15.99 host 22.20.19.18
permit icmp host 99.101.15.99 host 22.20.19.18
permit esp host 99.101.15.99 host 22.20.19.18
permit udp host 99.101.15.99 host 22.20.19.18 eq isakmp
permit gre host 22.20.19.18 host 99.101.15.99
permit gre host 22.20.19.18 host 99.100.14.88
access-list 23 permit 10.10.10.0 0.0.0.7
control-plane
end
So after spending countless hours analyzing every portion of this, I think that adding one line to this will get it going (or at least closer).
ip route 192.168.1.0 255.255.0.0 22.20.19.19
That should allow my internal LAN to reach the Airlink gateways on the other side of the tunnel (I think)
Now for a couple of questions for those that are still actually hanging around.
#1 what is the purpose of the Ethernet address assigned to each tunnel? I only see them being used in the BGP section where they are receiving routing tables from the Verizon side (is that correct?). Why wouldn't or couldn't you just use the physical Ethernet address interface in its place (in the BGP section)?
#2 is the config above correct in pointing the default route to the physical Ethernet address? Does that force the packets into the tunnel, or shouldn’t you be pointing it towards the tunnel IP's (172.16.200.2)? If the config above is correct then I should not need to add the route I described above as if I ping out to 192.168.1.X that should catch it and force it into the tunnel where Verizon would pick it up and know how to get it to its destination??
#3 Will I need to add another permit to the VZW_VPN for TCP as in the end I need to be able to poll via Modbus which uses port 502 TCP. Or is TCP implicit in some way with the GRE permit?
I actually have alot more questions, but I will keep reading for now.
I really appreciate the time you all took to trudge through this. Also please feel free to point anything else out that I may have missed or that can be improved. Have a great day!This post is a duplicate of this thread
https://supportforums.cisco.com/discussion/12275476/proper-routing-lan-through-verizon-private-network-gre-airlink-gateways
which has a response. I suggest that all discussion of this question be done through the other thread.
HTH
Rick -
What is the best design to connect redundant Firewalls to redundant switches?
Hi All,
I would like to know the best possible design to connect redundant Firewalls(Netscreen,FortiGate etc) to redundant switches.I have dealt with Cisco FWSM's in which both the Firewall and switch is in the same chassis. So for the Vlan's behind the Firewall, we just create the L3 interface on the fwsm and do a static route in the switch. The Gateway IP will be tied to the primary fwsm and the failover happens through the network. But now i need to know the best possible design when i am connecting to a different vendor firewall.
Let's say i have 5 vlans and all these vlan's are behind the Firewall. The redundant switches will have the L2 vlan's created and have a static route to the Firewall. I am proposing the attached design in which i will have L2 vlan's created on the switch and L3 on the Firewall. The Firewall's and the switch will be connected with one trunk port and an access port for uplink and downlink traffic. The two switches will be connected each other using a vlan trunk.The two firewalls will be connected using a redundancy vlan.
I am not so sure about the working of other firewalls such as Netscreen and FortiGate. I am also confused with the traffic path that the frames will take by having this design.Please advice if you have any suggestions.
Appreciate your help and advice.
regards
dathansubhash007 wrote:It's not 802.3ad link aggreagated interface. In the switch side, the ports will be configured as normal access ports and the bonding config will be done on the server side.
To be honest, I don't understand how the Linux bonding mode can work without anything configured the other end.
My understanding of 'bonding' comes from Multilink PPP (MLP) where the data stream is chopped up and split across two (or more) circuits. At the other end, a similar MLP-enabled device reforms the data stream from the multiple circuits, maintaining packet order. But this requires MLP-enabled 'bonding' devices at each end.
Perhaps you could help me better understand the Linux bonding...
subhash007 wrote:If any single homed server is connected to Switch 2, what will be traffic path for its data packets?Switch 2 ------------------> Switch 1 ----------------------> Active firewall ORSwitch 2 ------------------> Passive Firewall -----------> Active Firewall
If the firewalls operate in the same fashion as Cisco ASAs, then the inter-firewall link doesn't carry traffic. It's for failover detection and HTTP replication only. But like I said, I'm not familiar with this vendor's products.
subhash007 wrote:Also will there be any change in traffic path if the trunk between Switch 1 & Switch 2 is converted to L3 routed interface? Since there is no VRRP, i can convert the trunk to L3 right?
Same as above. -
CALL DOES NOT ROUTE OUT THE LOCAL GATEWAY
Local calls will not route out the local Gateway of branch1 to the PSTN or from the PSTN back to branch1, however they will route out either CorpHQ or branch2 backup gateways. When I go into the route group configuration for branch1, and remove the backup gateways, I get a fast busy tone when I dial the local number. I know the MGCP Gateway at branch1 is functioning because when I dial 911 and run debug ISDN Q931, the call routes properly through branch1, so I have a call routing problem. I ran DNA and it came back as ROUTE THIS PATTERN and all of the number translations looked accurate, so I didn't have to check for any block patterns. I'm not getting any errors on the calling party phone display. When I deleted the route pattern for the branch1 site and forced it to use the global route pattern, I received a debug output on branch1. I do not know a debug command (such as debug voip dial-peer or debug ccsip messages) to use for an MGCP Gateway to see if the call is actually reaching the Gateway.
I have checked the following:
the route pattern configuration
the translation pattern configuration
the called party transformation pattern configuration
the route list configuration to make sure the correct route group for branch1 was selected
the route group configuration to make sure that the branch1 Gateway was first in the order of selected devices
the route pattern configuration to make sure the correct route list for branch1 ist selected
the Gateway configuration to make sure it's using the device pool for branch1 and to make sure the called party transformation CSS for the branch1 Gateway is applied
the device pool configuration to make sure it's using the route group branch1
Any assistance would be greatly appreciated
Regards,
RonHi Nishant:
Please see the attachments for the Gateway pages
The significant digits for inbound calls for all 3 gateways is '4'
Please see the running-configs of the 3 gateways and the PSTN
Please see the debugs for the INBOUND calls
Many Thanks,
Ron
The following INBOUND call from the PSTN to 2065011001 is now working, however it is supposed to be routing through CorpHQ and is instead routing through Branch1. Please see 'DEBUG VOIP CCAPI INOUT' & 'DEBUG ISDN Q931'
Branch1#
ISDN Se0/0/0:23 Q931: RX <- DISCONNECT pd = 8 callref = 0x0096
Cause i = 0x8290 - Normal call clearing
//22/xxxxxxxxxxxx/CCAPI/ccCallReportDigits:
(callID=0x16, digit_event=0x0, enable=FALSE, consume=FALSE)
//22/5A001212800B/CCAPI/ccCallReportDigits:
Enabled=TRUE, Call Id=22
//22/xxxxxxxxxxxx/CCAPI/cc_api_call_report_digits_done:
(vdbPtr=0x49E07FD4, callID=0x16, disp=0, digit_event=0x0, enable=FALSE, consume=FALSE)
//22/5A001212800B/CCAPI/cc_api_call_report_digits_done:
Enabled=TRUE, Disposition=0x0, Interface=0x49E07FD4, Call Id=22
//22/5A001212800B/CCAPI/cc_api_call_report_digits_done:
Call Entry(Initial Digit Timeout=4000(ms), Inter Digit Timeout=4000(ms))
//22/5A001212800B/CCAPI/ccGenerateToneInfo:
Stop Tone On Digit=FALSE, Tone=Null,
Tone Direction=Network, Params=0x0, Call Id=22
//23/5A001212800B/CCAPI/ccGetCallStatistics:
Call Stats=0x4A5346FC, Call Id=23
//22/5A001212800B/CCAPI/ccConferenceDestroy:
Conference Id=0xC, Tag=0x0
//22/xxxxxxxxxxxx/CCAPI/cc_api_bridge_drop_done:
Conference Id=0xC, Source Interface=0x49E07FD4, Source Call Id=22,
Destination Call Id=23, Disposition=0x0, Tag=0x0
//23/xxxxxxxxxxxx/CCAPI/cc_api_bridge_drop_done:
Conference Id=0xC, Source Interface=0x495BABA4, Source Call Id=23,
Destination Call Id=22, Disposition=0x0, Tag=0x0
//22/5A001212800B/CCAPI/cc_generic_bridge_done:
Conference Id=0xC, Source Interface=0x495BABA4, Source Call Id=23,
Destination Call Id=22, Disposition=0x0, Tag=0x0
//22/5A001212800B/CCAPI/ccCallDisconnect:
Cause Value=16, Tag=0x0, Call Entry(Previous Disconnect Cause=0, Disconnect Cause=0)
//22/5A001212800B/CCAPI/ccCallDisconnect:
Cause Value=16, Call Entry(Responsed=TRUE, Cause Value=16)
//22/5A001212800B/CCAPI/cc_api_get_transfer_info:
Transfer Number Is Null
//23/5A001212800B/CCAPI/ccCallDisconnect:
Cause Value=16, Tag=0x0, Call Entry(Previous Disconnect Cause=0, Disconnect Cause=0)
//23/5A001212800B/CCAPI/ccCallDisconnect:
Cause Value=16, Call Entry(Responsed=TRUE, Cause Value=16)
//23/5A001212800B/CCAPI/cc_api_call_disconnect_done:
Disposition=0, Interface=0x495BABA4, Tag=0x0, Call Id=23,
Call Entry(Disconnect Cause=16, Voice Class Cause Code=0, Retry Count=0)
//23/5A001212800B/CCAPI/cc_api_call_disconnect_done:
Call Disconnect Event Sent
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
:cc_free_feature_vsa freeing 4821DDE8
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
vsacount in free is 1
//22/5A001212800B/CCAPI/cc_api_call_disconnect_done:
Disposition=0, Interface=0x49E07FD4, Tag=0x0, Call Id=22,
Call Entry(Disconnect Cause=16, Voice Class Cause Code=0, Retry Count=0)
//22/5A001212800B/CCAPI/cc_api_call_disconnect_done:
Call Disconnect Event Sent
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
:cc_free_feature_vsa freeing 4821DEC8
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
vsacount in free is 0
ISDN Se0/0/0:23 Q931: TX -> RELEASE pd = 8 callref = 0x8096
ISDN Se0/0/0:23 Q931: RX <- RELEASE_COMP pd = 8 callref = 0x0096
ISDN Se0/0/0:23 Q931: RX <- SETUP pd = 8 callref = 0x0097
Bearer Capability i = 0x8090A2
Standard = CCITT
Transfer Capability = Speech
Transfer Mode = Circuit
Transfer Rate = 64 kbit/s
Channel ID i = 0xA18381
Preferred, Channel 1
Progress Ind i = 0x8183 - Origination address is non-ISDN
Display i = 'Seattle US Phone'
Calling Party Number i = 0x4180, '2065015111'
Plan:ISDN, Type:Subscriber(local)
Called Party Number i = 0xC1, '2065011001'
Plan:ISDN, Type:Subscriber(local)
//-1/xxxxxxxxxxxx/CCAPI/ccIFCallSetupRequestPrivate:
Interface=0x49E07FD4, Interface Type=6, Destination=, Mode=0x9,
Call Params(Calling Number=,(Calling Name=)(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed),
Called Number=(TON=Unknown, NPI=Unknown), Calling Translated=FALSE,
Subscriber Type Str=, FinalDestinationFlag=FALSE, Outgoing Dial-peer=0, Call Count On=FALSE,
Source Trkgrp Route Label=, Target Trkgrp Route Label=, tg_label_flag=0, Application Call Id=D000000002f5368f000000F580000097)
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:cc_get_feature_vsa malloc success
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
cc_get_feature_vsa count is 1
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:FEATURE_VSA attributes are: feature_name:0,feature_time:1210179280,feature_id:24
//24/74820328800C/CCAPI/ccIFCallSetupRequestPrivate:
SPI Call Setup Request Is Success; Interface Type=6, FlowMode=1
//24/74820328800C/CCAPI/ccCallSetContext:
Context=0x4A524790
//-1/xxxxxxxxxxxx/CCAPI/ccIFCallSetupRequestPrivate:
Interface=0x495BABA4, Interface Type=9, Destination=0.0.0.0, Mode=0x9,
Call Params(Calling Number=,(Calling Name=)(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed),
Called Number=(TON=Unknown, NPI=Unknown), Calling Translated=FALSE,
Subscriber Type Str=, FinalDestinationFlag=FALSE, Outgoing Dial-peer=0, Call Count On=TRUE,
Source Trkgrp Route Label=, Target Trkgrp Route Label=, tg_label_flag=0, Application Call Id=D000000002f5368f000000F580000097)
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:cc_get_feature_vsa malloc success
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
cc_get_feature_vsa count is 2
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:FEATURE_VSA attributes are: feature_name:0,feature_time:1210179056,feature_id:25
//25/74820328800C/CCAPI/ccIFCallSetupRequestPrivate:
SPI Call Setup Request Is Success; Interface Type=9, FlowMode=1
//25/74820328800C/CCAPI/ccCallSetContext:
Context=0x4A524580
//25/74820328800C/CCAPI/cc_api_call_connected:
Interface=0x495BABA4, Data Bitmask=0x0, Progress Indication=NULL(0),
Connection Handle=0
//25/74820328800C/CCAPI/cc_api_call_connected:
Call Entry(Connected=TRUE, Responsed=TRUE, Retry Count=0)
//24/74820328800C/CCAPI/cc_api_call_proceeding:
Interface=0x49E07FD4, Progress Indication=NULL(0)
//24/74820328800C/CCAPI/cc_api_call_connected:
Interface=0x49E07FD4, Data Bitmask=0x1, Progress Indication=DESTINATION IS NON ISDN(2),
Connection Handle=0
//24/74820328800C/CCAPI/cc_api_call_connected:
Call Entry(Connected=TRUE, Responsed=TRUE, Retry Count=0)
//24/74820328800C/CCAPI/ccCallModify:
Nominator=0x1000, Params=0x4A2E7368, Call Id=24
//24/xxxxxxxxxxxx/CCAPI/ccCallReportDigits:
(callID=0x18, digit_event=0x1, enable=TRUE, consume=FALSE)
//24/74820328800C/CCAPI/ccCallReportDigits:
Enabled=TRUE, Call Id=24
//24/xxxxxxxxxxxx/CCAPI/cc_api_call_report_digits_done:
(vdbPtr=0x49E07FD4, callID=0x18, disp=0, digit_event=0x1, enable=TRUE, consume=FALSE)
//24/74820328800C/CCAPI/cc_api_call_report_digits_done:
Enabled=TRUE, Disposition=0x0, Interface=0x49E07FD4, Call Id=24
//24/74820328800C/CCAPI/cc_api_call_report_digits_done:
Call Entry(Initial Digit Timeout=15000(ms), Inter Digit Timeout=10000(ms))
//24/xxxxxxxxxxxx/CCAPI/ccConferenceCreate:
(confID=0x4A2E757C, callID1=0x18, callID2=0x19, tag=0x0)
//24/xxxxxxxxxxxx/CCAPI/ccConferenceCreate:
(confID=0x4A2E757C, callID1=0x18, gcid=0-0-0-0, tag=0x0)
//25/xxxxxxxxxxxx/CCAPI/ccConferenceCreate:
(confID=0x4A2E757C, callID2=0x19, gcid=0-0-0-0, tag=0x0)
//24/74820328800C/CCAPI/ccConferenceCreate:
Conference Id=0x4A2E757C, Call Id1=24, Call Id2=25, Tag=0x0
//24/xxxxxxxxxxxx/CCAPI/cc_api_bridge_done:
Conference Id=0xD, Source Interface=0x49E07FD4, Source Call Id=24,
Destination Call Id=25, Disposition=0x0, Tag=0xFFFFFFFF
//25/xxxxxxxxxxxx/CCAPI/cc_api_bridge_done:
Conference Id=0xD, Source Interface=0x495BABA4, Source Call Id=25,
Destination Call Id=24, Disposition=0x0, Tag=0x0
//24/74820328800C/CCAPI/cc_generic_bridge_done:
Conference Id=0xD, Source Interface=0x495BABA4, Source Call Id=25,
Destination Call Id=24, Disposition=0x0, Tag=0x0
//24/74820328800C/CCAPI/ccConferenceCreate:
Call Entry(Conference Id=0xD, Destination Call Id=25)
//25/74820328800C/CCAPI/ccConferenceCreate:
Call Entry(Conference Id=0xD, Destination Call Id=24)
//24/74820328800C/CCAPI/cc_api_caps_ind:
Destination Interface=0x495BABA4, Destination Call Id=25, Source Call Id=24,
Caps(Codec=0x1, Fax Rate=0x1, Vad=0x1,
Modem=0x2, Codec Bytes=20, Signal Type=3)
//24/74820328800C/CCAPI/cc_api_caps_ind:
Caps(Playout Mode=1, Playout Initial=60(ms), Playout Min=40(ms),
Playout Max=1000(ms), Fax Nom=300(ms))
//25/74820328800C/CCAPI/cc_api_caps_ind:
Destination Interface=0x49E07FD4, Destination Call Id=24, Source Call Id=25,
Caps(Codec=0x4, Fax Rate=0x2, Vad=0x1,
Modem=0x0, Codec Bytes=20, Signal Type=2)
//25/74820328800C/CCAPI/cc_api_caps_ind:
Caps(Playout Mode=1, Playout Initial=60(ms), Playout Min=40(ms),
Playout Max=1000(ms), Fax Nom=300(ms))
//25/74820328800C/CCAPI/cc_api_caps_ack:
Destination Interface=0x49E07FD4, Destination Call Id=24, Source Call Id=25,
Caps(Codec=g729r8(0x4), Fax Rate=FAX_RATE_VOICE(0x2), Vad=OFF(0x1),
Modem=OFF(0x0), Codec Bytes=20, Signal Type=2, Seq Num Start=9314)
//24/74820328800C/CCAPI/cc_api_caps_ack:
Destination Interface=0x495BABA4, Destination Call Id=25, Source Call Id=24,
Caps(Codec=g729r8(0x4), Fax Rate=FAX_RATE_VOICE(0x2), Vad=OFF(0x1),
Modem=OFF(0x0), Codec Bytes=20, Signal Type=2, Seq Num Start=9314)
//24/74820328800C/CCAPI/cc_api_call_modify_done:
Result=0, Interface=0x49E07FD4, Call Id=24
//24/74820328800C/CCAPI/cc_api_voice_mode_event:
Call Id=24
//24/74820328800C/CCAPI/cc_api_voice_mode_event:
Call Entry(Context=0x4A524790)
//24/74820328800C/CCAPI/cc_process_notify_bridge_done:
Conference Id=0xD, Call Id1=24, Call Id2=25
//24/74820328800C/CCAPI/ccSetDigitTimeouts:
Initial Digit Timeout=4000(ms), Inter Digit Timeout=4000(ms)
//24/74820328800C/CCAPI/ccSetDigitTimeouts:
Call Entry(Inter Digit Timeout=4000(ms), Initial Digit Timeout=4000(ms))
//24/74820328800C/CCAPI/ccRestartDigitTimeoutMsec:
Digit Timeout=0, Call Id=24
//24/xxxxxxxxxxxx/CCAPI/ccCallReportDigits:
(callID=0x18, digit_event=0x1, enable=TRUE, consume=FALSE)
//24/74820328800C/CCAPI/ccCallReportDigits:
Enabled=TRUE, Call Id=24
//24/xxxxxxxxxxxx/CCAPI/cc_api_call_report_digits_done:
(vdbPtr=0x49E07FD4, callID=0x18, disp=0, digit_event=0x1, enable=TRUE, consume=FALSE)
//24/74820328800C/CCAPI/cc_api_call_report_digits_done:
Enabled=TRUE, Disposition=0x0, Interface=0x49E07FD4, Call Id=24
//24/74820328800C/CCAPI/cc_api_call_report_digits_done:
Call Entry(Initial Digit Timeout=4000(ms), Inter Digit Timeout=4000(ms))
ISDN Se0/0/0:23 Q931: TX -> CALL_PROC pd = 8 callref = 0x8097
Channel ID i = 0xA98381
Exclusive, Channel 1
//24/74820328800C/CCAPI/ccCallModify:
Nominator=0x1000, Params=0x4A2E6E68, Call Id=24
//24/74820328800C/CCAPI/cc_api_call_modify_done:
Result=0, Interface=0x49E07FD4, Call Id=24
ISDN Se0/0/0:23 Q931: TX -> ALERTING pd = 8 callref = 0x8097
Progress Ind i = 0x8088 - In-band info or appropriate now available
//24/74820328800C/CCAPI/ccGenerateToneInfo:
Stop Tone On Digit=FALSE, Tone=Ring Back,
Tone Direction=Network, Params=0x0, Call Id=24
//24/74820328800C/CCAPI/cc_handle_inter_digit_timer:
Generate inter-digit timeout CC_EV_CALL_DIGIT_END event
The following INBOUND call from the PSTN to 5126022001 fails and is supposed to be routing through Branch1 and is instead routing through CorpHQ. Please see 'DEBUG VOIP CCAPI INOUT'
CorpHQ#
//-1/A31ADF52800B/CCAPI/cc_api_display_ie_subfields:
cc_api_call_setup_ind_common:
cisco-username=
----- ccCallInfo IE subfields -----
cisco-ani=5126026222
cisco-anitype=4
cisco-aniplan=1
cisco-anipi=0
cisco-anisi=0
dest=5126022001
cisco-desttype=4
cisco-destplan=1
cisco-rdie=FFFFFFFF
cisco-rdn=
cisco-lastrdn=
cisco-rdntype=-1
cisco-rdnplan=-1
cisco-rdnpi=-1
cisco-rdnsi=-1
cisco-redirectreason=-1 fwd_final_type =0
final_redirectNumber =
hunt_group_timeout =0
//-1/A31ADF52800B/CCAPI/cc_api_call_setup_ind_common:
Interface=0x49F42894, Call Info(
Calling Number=5126026222,(Calling Name=)(TON=Subscriber, NPI=ISDN, Screening=Not Screened, Presentation=Allowed),
Called Number=5126022001(TON=Subscriber, NPI=ISDN),
Calling Translated=FALSE, Subscriber Type Str=RegularLine, FinalDestinationFlag=TRUE,
Incoming Dial-peer=1, Progress Indication=ORIGINATING SIDE IS NON ISDN(3), Calling IE Present=TRUE,
Source Trkgrp Route Label=, Target Trkgrp Route Label=, CLID Transparent=FALSE), Call Id=-1
//-1/A31ADF52800B/CCAPI/ccCheckClipClir:
In: Calling Number=5126026222(TON=Subscriber, NPI=ISDN, Screening=Not Screened, Presentation=Allowed)
//-1/A31ADF52800B/CCAPI/ccCheckClipClir:
Out: Calling Number=5126026222(TON=Subscriber, NPI=ISDN, Screening=Not Screened, Presentation=Allowed)
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:cc_get_feature_vsa malloc success
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
cc_get_feature_vsa count is 1
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:FEATURE_VSA attributes are: feature_name:0,feature_time:1241383960,feature_id:13
//13/A31ADF52800B/CCAPI/cc_api_call_setup_ind_common:
Set Up Event Sent;
Call Info(Calling Number=5126026222(TON=Subscriber, NPI=ISDN, Screening=Not Screened, Presentation=Allowed),
Called Number=5126022001(TON=Subscriber, NPI=ISDN))
//13/A31ADF52800B/CCAPI/cc_process_call_setup_ind:
Event=0x497D0010
//-1/xxxxxxxxxxxx/CCAPI/cc_setupind_match_search:
Try with the demoted called number 5126022001
//13/A31ADF52800B/CCAPI/ccCallSetContext:
Context=0x4A131A54
//13/A31ADF52800B/CCAPI/cc_process_call_setup_ind:
>>>>CCAPI handed cid 13 with tag 1 to app "_ManagedAppProcess_Default"
//13/A31ADF52800B/CCAPI/ccCallProceeding:
Progress Indication=NULL(0)
//13/A31ADF52800B/CCAPI/ccCallDisconnect:
Cause Value=1, Tag=0x0, Call Entry(Previous Disconnect Cause=0, Disconnect Cause=0)
//13/A31ADF52800B/CCAPI/ccCallDisconnect:
Cause Value=1, Call Entry(Responsed=TRUE, Cause Value=1)
//13/A31ADF52800B/CCAPI/cc_api_get_transfer_info:
Transfer Number Is Null
//13/A31ADF52800B/CCAPI/cc_api_call_disconnect_done:
Disposition=0, Interface=0x49F42894, Tag=0x0, Call Id=13,
Call Entry(Disconnect Cause=1, Voice Class Cause Code=0, Retry Count=0)
//13/A31ADF52800B/CCAPI/cc_api_call_disconnect_done:
Call Disconnect Event Sent
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
:cc_free_feature_vsa freeing 49FE0410
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
vsacount in free is 0
PSTN#sh run
Building configuration...
Current configuration : 13975 bytes
! No configuration change since last restart
version 12.4
no service pad
no service timestamps debug uptime
no service timestamps log uptime
no service password-encryption
hostname PSTN
boot-start-marker
boot-end-marker
card type e1 0 0
card type t1 0 1
logging message-counter syslog
no aaa new-model
clock timezone EST -5
clock summer-time EST recurring
network-clock-participate wic 0
network-clock-participate wic 1
no network-clock-participate aim 0
dot11 syslog
ip source-route
ip cef
no ip domain lookup
ip domain name att.com
ip name-server 177.1.100.110
ip multicast-routing
no ipv6 cef
multilink bundle-name authenticated
isdn switch-type primary-ni
voice service voip
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
redirect ip2ip
fax protocol cisco
sip
bind control source-interface Loopback10
bind media source-interface Loopback10
header-passing
voice translation-rule 101
rule 1 /^\+.*/ //
rule 2 /^501.*/ //
rule 3 /^1206.*/ //
rule 4 /^00.*/ //
rule 5 /^0011.*/ //
rule 6 /^206/ /1206/
rule 7 /^1512.*/ /\0/
rule 8 /^011\(.*\)/ /\1/
voice translation-rule 102
rule 1 /^1\(2065015111\)$/ /\1/ type any subscriber plan any isdn
rule 2 /^1\(2065015555\)$/ /\1/ type any subscriber plan any isdn
rule 3 /^1\(2065015151\)$/ /\1/ type any subscriber plan any isdn
rule 4 /^1\(5126026222\)$/ /\1/ type any national plan any isdn
rule 5 /^31670357575$/ /&/ type any international plan any isdn
rule 6 /^31207037333$/ /&/ type any international plan any isdn
rule 7 /^31107047444$/ /&/ type any international plan any isdn
rule 8 /^911$/ /&/ type any unknown plan any unknown
rule 9 /^15126022.../ /&/ type any unknown plan any unknown
rule 10 /^31207033.../ /&/ type any unknown plan any unknown
rule 11 /^....$/ /&/ type any unknown plan any unknown
voice translation-rule 103
rule 1 /^206.*/ /&/ type any subscriber plan any isdn
rule 2 /^1/ // type any national plan any isdn
rule 3 /^00/ // type any international plan any isdn
voice translation-rule 201
rule 1 /^\+.*/ //
rule 2 /^602.*/ //
rule 3 /^1512.*/ //
rule 4 /^00.*/ //
rule 5 /^0011.*/ //
rule 6 /^512/ /1&/
rule 7 /^1206.*/ /&/
rule 8 /^011\(31.*\)/ /\1/
voice translation-rule 202
rule 1 /^1\(5126026222\)$/ /\1/ type any subscriber plan any isdn
rule 2 /^1\(2065015555\)$/ /\1/ type any national plan any isdn
rule 3 /^1\(2065015151\)$/ /\1/ type any national plan any isdn
rule 4 /^1\(2065015111\)$/ /\1/ type any national plan any isdn
rule 5 /^31670357575$/ /&/ type any international plan any isdn
rule 6 /^31207037333$/ /&/ type any international plan any isdn
rule 7 /^31107047444$/ /&/ type any international plan any isdn
rule 8 /^911$/ /&/ type any unknown plan any unknown
rule 9 /^12065011.../ /&/ type any unknown plan any unknown
rule 10 /^31207033.../ /&/ type any unknown plan any unknown
rule 11 /^....$/ /&/ type any unknown plan any unknown
voice translation-rule 203
rule 1 /^512.*/ /&/ type any subscriber plan any isdn
rule 2 /^1/ // type any national plan any isdn
rule 3 /^00/ // type any international plan any isdn
voice translation-rule 301
rule 1 /^\+.*/ //
rule 2 /^20.*/ //
rule 3 /^0\([1-8].*\)/ /31\1/
rule 4 /^011/ //
rule 5 /^0031/ //
rule 6 /^703..../ /3120&/
rule 7 /^00\(1.*\)/ /\1/
voice translation-rule 302
rule 1 /^31207037333$/ /7037333/ type any subscriber plan any isdn
rule 2 /^7033\(...\)$/ /0207033\1/
rule 3 /^911$/ /112/ type any unknown plan any unknown
rule 4 /^31\(670357575\)$/ /0\1/ type any national plan any isdn
rule 5 /^31\(107047444\)$/ /0\1/ type any national plan any isdn
rule 6 /^12065015555$/ /&/ type any international plan any isdn
rule 7 /^12065015151$/ /&/ type any international plan any isdn
rule 8 /^12065015111$/ /&/ type any international plan any isdn
rule 9 /^15126026222$/ /&/ type any international plan any isdn
rule 10 /^12065011...$/ /&/ type any unknown plan any unknown
rule 11 /^15126022...$/ /&/ type any unknown plan any unknown
rule 12 /^....$/ /&/ type any unknown plan any unknown
voice translation-rule 303
rule 1 /^703.*/ /&/ type any subscriber plan any isdn
rule 2 /^010/ // type any national plan any isdn
rule 3 /^1/ // type any international plan any isdn
voice translation-rule 1000
rule 1 /.*\(1...$\)/ /206501\1/
rule 2 /.*\(2...$\)/ /512602\1/
rule 3 /.*\(45..$\)/ /020757\1/
voice translation-rule 1001
rule 1 /^1206...5...$/ /+&/
rule 2 /^1512...6...$/ /+&/
rule 3 /^31.0...7...$/ /+&/
voice translation-profile 1-HQ-Change_DNIS-Check_ANI
translate called 101
voice translation-profile 1-HQ-Proper_Types
translate calling 102
translate called 103
voice translation-profile 2-BR1-Change_DNIS-Check_ANI
translate called 201
voice translation-profile 2-BR1-Proper_Types
translate calling 202
translate called 203
voice translation-profile 3-BR2-Change_DNIS-Check_ANI
translate called 301
voice translation-profile 3-BR2-Proper_Types
translate calling 302
translate called 303
voice translation-profile SIP-NORMALIZE-DNIS-ANI
translate calling 1001
translate called 1000
voice-card 0
dspfarm
archive
log config
hidekeys
controller E1 0/0/0
clock source internal
pri-group timeslots 1-3,16
description == Voice Circuit to Branch2
controller T1 0/1/0
clock source internal
cablelength long 0db
pri-group timeslots 1-3,24
description == Voice Circuit to CorpHQ
controller T1 0/1/1
clock source internal
cablelength long 0db
pri-group timeslots 1-3,24
description == Voice Circuit to Branch1
interface Loopback0
ip address 177.1.254.254 255.255.255.255
interface Loopback10
ip address 177.1.254.250 255.255.255.255
interface Loopback11
ip address 177.1.254.251 255.255.255.255
interface FastEthernet0/0
description ==TO INTERNET==
ip address 192.168.1.150 255.255.255.0
duplex auto
speed auto
interface FastEthernet0/1
description === To HQ
ip address 177.1.19.1 255.255.255.0
duplex auto
speed auto
interface Serial0/0/0:15
description == PRI Circuit to R3-BR2
no ip address
encapsulation hdlc
isdn switch-type primary-net5
isdn protocol-emulate network
isdn incoming-voice voice
isdn negotiate-bchan resend-setup
no isdn outgoing ie network-facility
isdn outgoing display-ie
no cdp enable
interface Serial0/1/0:23
description == PRI Circuit to R1-HQ
no ip address
encapsulation hdlc
isdn switch-type primary-5ess
isdn protocol-emulate network
isdn incoming-voice voice
isdn negotiate-bchan
isdn outgoing display-ie
no cdp enable
interface Serial0/1/1:23
description == PRI Circuit to R2-BR1
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn protocol-emulate network
isdn incoming-voice voice
isdn supp-service name calling
isdn negotiate-bchan resend-setup
isdn outgoing ie network-facility
no cdp enable
router ospf 1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip http server
ip http authentication local
no ip http secure-server
ip http path flash:
control-plane
voice-port 0/0/0:15
translation-profile incoming 3-BR2-Change_DNIS-Check_ANI
description == Voice PRI to Branch2
voice-port 0/1/0:23
translation-profile incoming 1-HQ-Change_DNIS-Check_ANI
description == Voice PRI to CorpHQ
voice-port 0/1/1:23
translation-profile incoming 2-BR1-Change_DNIS-Check_ANI
description == Voice PRI to Branch1
dial-peer voice 1 pots
description == All inbound calls from HQ BR1 BR2 into PSTN
incoming called-number .
direct-inward-dial
dial-peer voice 101 pots
description == Subscriber Calls from PSTN into CorpHQ
translation-profile outgoing 1-HQ-Proper_Types
preference 1
destination-pattern ^2065011...$
direct-inward-dial
port 0/1/0:23
forward-digits 10
dial-peer voice 102 pots
description == National Calls from PSTN into CorpHQ
translation-profile outgoing 1-HQ-Proper_Types
preference 1
destination-pattern ^12065011...$
direct-inward-dial
port 0/1/0:23
forward-digits 10
dial-peer voice 103 pots
description == International Calls into CorpHQ from PSTN Coming from NL Ph
translation-profile outgoing 1-HQ-Proper_Types
preference 1
destination-pattern ^0012065011...$
direct-inward-dial
port 0/1/0:23
forward-digits 10
dial-peer voice 104 pots
description == + Calls into CorpHQ from PSTN Coming from Mobiles
translation-profile outgoing 1-HQ-Proper_Types
preference 1
destination-pattern +12065011...$
direct-inward-dial
port 0/1/0:23
forward-digits 10
dial-peer voice 201 pots
description == Subscriber Calls from PSTN into Branch1
translation-profile outgoing 2-BR1-Proper_Types
preference 1
destination-pattern ^5126022...$
direct-inward-dial
port 0/1/1:23
forward-digits 10
dial-peer voice 202 pots
description == National Calls from PSTN into Branch1
translation-profile outgoing 2-BR1-Proper_Types
preference 1
destination-pattern ^15126022...$
direct-inward-dial
port 0/1/1:23
forward-digits 10
dial-peer voice 203 pots
description == International Calls into Branch1 from PSTN Coming from NL Ph
translation-profile outgoing 2-BR1-Proper_Types
preference 1
destination-pattern ^0015126022...$
direct-inward-dial
port 0/1/1:23
forward-digits 10
dial-peer voice 204 pots
description == + Calls into Branch1 from PSTN Coming from Mobiles
translation-profile outgoing 2-BR1-Proper_Types
preference 1
destination-pattern +15126022...$
direct-inward-dial
port 0/1/1:23
forward-digits 10
dial-peer voice 301 pots
description == Subscriber Calls from PSTN into Branch2
translation-profile outgoing 3-BR2-Proper_Types
destination-pattern ^7033...$
direct-inward-dial
port 0/0/0:15
forward-digits 7
dial-peer voice 302 pots
description == National Calls from PSTN into Branch2
translation-profile outgoing 3-BR2-Proper_Types
destination-pattern ^0207033...$
direct-inward-dial
port 0/0/0:15
forward-digits 10
dial-peer voice 303 pots
description == International Calls into Branch2 from PSTN Coming from US Ph
translation-profile outgoing 3-BR2-Proper_Types
destination-pattern ^01131207033...$
direct-inward-dial
port 0/0/0:15
forward-digits 9
prefix 0
dial-peer voice 304 pots
description == International Calls into Branch2 from PSTN Coming from US Ph
translation-profile outgoing 3-BR2-Proper_Types
destination-pattern ^31207033...$
direct-inward-dial
port 0/0/0:15
forward-digits 9
prefix 0
dial-peer voice 305 pots
description == + Calls into Branch2 from PSTN Coming from Mobiles
translation-profile outgoing 3-BR2-Proper_Types
destination-pattern +31207033...$
direct-inward-dial
port 0/0/0:15
forward-digits 9
prefix 0
dial-peer voice 1000 voip
description == Calls into AT&T SIP ITSP for VC Week1 Lab1
rtp payload-type nse 99
rtp payload-type nte 100
voice-class sip localhost dns:sip1.att.com
session protocol sipv2
incoming called-number .
dtmf-relay rtp-nte
codec g711ulaw
dial-peer voice 5000 voip
service aa
destination-pattern A5000
session target ipv4:177.1.254.254
incoming called-number A5000
dtmf-relay h245-alphanumeric
codec g711ulaw
no vad
num-exp 1888....... 911
num-exp 1900....... 911
num-exp 1976....... 911
num-exp 1777....... 911
num-exp 1444....... 911
num-exp 0800....... 911
num-exp 0900....... 911
sip-ua
telephony-service
no auto-reg-ephone
max-ephones 1
max-dn 10
ip source-address 177.1.254.254 port 2000
caller-id block code *67
system message You WILL PASS this Exam!
voicemail A5000
max-conferences 8 gain -6
call-forward pattern .T
dn-webedit
transfer-system full-consult
transfer-pattern .T
create cnf-files version-stamp 7960 Sep 01 2012 15:29:37
ephone-dn 1 dual-line
number 12065015111 secondary +12065015111
label Seattle, US +1 206 501 5111
description INE PSTN Phone
name Seattle US Phone
ephone-dn 2 dual-line
number 15126026222 secondary +15126026222
label Austin, US +1 512 602 6222
name Austin TX Phone
ephone-dn 3 dual-line
number 31207037333 secondary +31207037333
label Amsterdam, NL +31 20 703 73 33
name Amsterdam NL Phone
ephone-dn 4 dual-line
number 12065015555 secondary +12065015555
label Hurley Mobile +1 206 501 5555
name Hurley's Mobile
call-forward busy A5000
call-forward noan A5000 timeout 16
ephone-dn 5 dual-line
number 12065015151 secondary +12065015151
label Hurley's Home +1 206 501 5151
name Hurley's Home
call-forward busy A5000
call-forward noan A5000 timeout 12
ephone-dn 6 dual-line
number 31670357575 secondary +31670357575
label Sawyer's Mobile +31 6 70357575
name Sawyer's Mobile
call-forward busy A5000
call-forward noan A5000 timeout 16
ephone-dn 7 dual-line
number 911 secondary 112
label US/EU Emer/FreePhone/Prem
name Emergency Services
ephone-dn 8 dual-line
number 15126026262 secondary +15126026262
label BLinus Mobile +1 512 602 6262
name Benjamin Linus Mobile
call-forward busy A5000
call-forward noan A5000 timeout 16
ephone-dn 9 dual-line
number 31207037373 secondary +31207037373
label DHume Home +31 20 703 73 73
name Desmond Hume Home
call-forward busy A5000
call-forward noan A5000 timeout 16
ephone-dn 10 dual-line
number 31107047444 secondary +31107047444
label Rotterdam, NL +31 10 704 74 44
name Rotterdam NL Phone
ephone 1
device-security-mode none
mac-address A456.3040.0DAA
type 7975
button 1:1 2:2 3:3 4:10
button 5:6 6o7,8,5,4
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous level 0 limit 20
line aux 0
line vty 0 4
exec-timeout 0 0
privilege level 15
logging synchronous
no login
line vty 5 15
exec-timeout 0 0
privilege level 15
logging synchronous
no login
scheduler allocate 20000 1000
ntp source Loopback0
ntp master 10
ntp server 64.90.182.55
end
CorpHQ#sh run
Building configuration...
Current configuration : 6353 bytes
! No configuration change since last restart
version 12.4
no service pad
no service timestamps debug uptime
no service timestamps log uptime
no service password-encryption
hostname CorpHQ
boot-start-marker
boot-end-marker
logging message-counter syslog
no aaa new-model
clock timezone PST -8
clock summer-time PDT recurring
network-clock-participate wic 0
network-clock-select 1 T1 0/0/0
dot11 syslog
ip source-route
ip cef
ip dhcp excluded-address 177.1.11.1 177.1.11.14
ip dhcp excluded-address 177.1.11.21 177.1.11.254
ip dhcp excluded-address 177.2.11.1 177.2.11.14
ip dhcp excluded-address 177.2.11.21 177.2.11.254
ip dhcp pool CorpHQ-Phones
network 177.1.11.0 255.255.255.0
option 150 ip 177.1.10.10 177.1.10.20
default-router 177.1.11.1
dns-server 177.1.100.110
ip dhcp pool Branch1-Phones
network 177.2.11.0 255.255.255.0
option 150 ip 177.1.10.10 177.1.10.20
default-router 177.2.11.1
dns-server 177.1.100.110
no ip domain lookup
ip multicast-routing
no ipv6 cef
multilink bundle-name authenticated
isdn switch-type primary-ni
voice service voip
allow-connections h323 to h323
fax protocol cisco
sip
bind control source-interface Loopback0
bind media source-interface Loopback0
no update-callerid
voice class codec 1
codec preference 1 g711ulaw
codec preference 2 g711alaw
codec preference 3 g729r8
voice translation-rule 1
rule 1 // // type any subscriber plan any isdn
voice translation-rule 2
rule 1 // // type any national plan any isdn
voice translation-rule 3
rule 1 // // type any international plan any isdn
voice translation-rule 10
rule 1 /^[2-9].........$/ /9&/
rule 2 /^1[2-9].........$/ /9&/
rule 3 /^011/ /9&/
voice translation-profile MakeInternational
translate called 3
voice translation-profile MakeNational
translate called 2
voice translation-profile MakeSubscriber
translate called 1
voice translation-profile Prefix9_InFrom_CUCM
translate called 10
voice-card 0
dsp services dspfarm
archive
log config
hidekeys
controller T1 0/0/0
pri-group timeslots 1-3,24
description == Voice Circuit to PSTN
interface Loopback0
ip address 177.1.254.1 255.255.255.255
ip pim dense-mode
interface FastEthernet0/0
description == To CorpHQ-Switch
no ip address
duplex auto
speed auto
interface FastEthernet0/0.10
description == Server VLAN
encapsulation dot1Q 10
ip address 177.1.10.1 255.255.255.0
ip pim dense-mode
interface FastEthernet0/0.11
description == Voice VLAN
encapsulation dot1Q 11
ip address 177.1.11.1 255.255.255.0
ip helper-address 177.1.10.10
ip nbar protocol-discovery
ip pim dense-mode
interface FastEthernet0/0.12
description == Data VLAN
encapsulation dot1Q 12
ip address 177.1.12.1 255.255.255.0
interface FastEthernet0/0.13
description == PSTN PHONE VLAN
encapsulation dot1Q 13
ip address 177.1.13.1 255.255.255.0
interface FastEthernet0/1
description === To PSTN
ip address 177.1.19.254 255.255.255.0
duplex auto
speed auto
interface Serial0/0/0:23
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn incoming-voice voice
no cdp enable
interface Serial0/1/0
description == Frame-Relay Circuit to WAN
no ip address
encapsulation frame-relay
fair-queue 64 256 36
cdp enable
frame-relay lmi-type ansi
ip rsvp bandwidth
interface Serial0/1/0.1 point-to-point
description == FR To BR1
bandwidth 384
ip address 177.0.101.1 255.255.255.0
ip pim dense-mode
snmp trap link-status
frame-relay interface-dlci 101
ip rsvp bandwidth 136
interface Serial0/1/0.2 point-to-point
description == FR To BR2
ip address 177.0.201.1 255.255.255.0
snmp trap link-status
frame-relay interface-dlci 102
ip rsvp bandwidth 136
router ospf 1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 177.1.19.1
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0.10
no ip http server
no ip http secure-server
control-plane
voice-port 0/0/0:23
voice-port 0/3/0
voice-port 0/3/1
ccm-manager music-on-hold
sccp local Loopback0
sccp ccm 177.1.10.10 identifier 1 priority 1 version 5.0.1
sccp ccm 177.1.10.20 identifier 2 priority 2 version 5.0.1
sccp ccm 177.1.254.3 identifier 3 priority 3 version 5.0.1
sccp
sccp ccm group 1
bind interface Loopback0
associate ccm 2 priority 1
associate ccm 1 priority 2
associate ccm 3 priority 3
associate profile 1 register CorpHQ-729-MTP
associate profile 2 register CorpHQ-711-MTP
associate profile 3 register CorpHQ-HW-Xcode
dspfarm profile 3 transcode
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
codec ilbc
maximum sessions 2
associate application SCCP
dspfarm profile 1 mtp
codec g729ar8
codec g729r8
rsvp
maximum sessions software 10
associate application SCCP
dspfarm profile 2 mtp
codec g711ulaw
rsvp
maximum sessions software 10
associate application SCCP
dial-peer voice 1 pots
incoming called-number .
direct-inward-dial
dial-peer voice 10 pots
translation-profile outgoing MakeSubscriber
destination-pattern 911
no digit-strip
port 0/0/0:23
dial-peer voice 11 pots
translation-profile outgoing MakeSubscriber
destination-pattern 9[2-9]..[2-9]......$
port 0/0/0:23
dial-peer voice 12 pots
translation-profile outgoing MakeNational
destination-pattern 91[2-9]..[2-9]......$
port 0/0/0:23
forward-digits 11
dial-peer voice 13 pots
translation-profile outgoing MakeInternational
destination-pattern 9011T
port 0/0/0:23
prefix 011
dial-peer voice 100 voip
description == Inbound/Outbound SIP PSTN GW From/To CUCM Pub
translation-profile incoming Prefix9_InFrom_CUCM
destination-pattern ^2065011...$
voice-class codec 1
session protocol sipv2
session target ipv4:177.1.10.10
incoming called-number .
ip qos dscp cs3 signaling
dial-peer hunt 1
sip-ua
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous level 0 limit 20
line aux 0
line vty 0 4
exec-timeout 0 0
privilege level 15
logging synchronous
no login
line vty 5 15
exec-timeout 0 0
privilege level 15
logging synchronous
no login
scheduler allocate 20000 1000
ntp source Loopback0
ntp master 2
ntp server 177.1.254.254
end
Branch1#sh run
Building configuration...
Current configuration : 3838 bytes
! Last configuration change at 01:19:02 CDT Thu Oct 10 2013
version 12.4
no service pad
no service timestamps debug uptime
no service timestamps log uptime
no service password-encryption
hostname Branch1
boot-start-marker
boot-end-marker
logging message-counter syslog
no aaa new-model
clock timezone CST -6
clock summer-time CDT recurring
network-clock-participate wic 0
network-clock-select 1 T1 0/0/0
dot11 syslog
ip source-route
ip cef
ip multicast-routing
no ipv6 cef
ntp update-calendar
ntp server 177.1.254.1
multilink bundle-name authenticated
isdn switch-type primary-ni
voice-card 0
dsp services dspfarm
archive
log config
hidekeys
controller T1 0/0/0
pri-group timeslots 1-3,24 service mgcp
interface Loopback0
ip address 177.1.254.2 255.255.255.255
interface FastEthernet0/0
no ip address
duplex auto
speed auto
interface FastEthernet0/0.11
description == Voice VLAN
encapsulation dot1Q 11
ip address 177.2.11.1 255.255.255.0
ip helper-address 177.1.254.1
ip pim dense-mode
interface FastEthernet0/0.12
description == Data VLAN
encapsulation dot1Q 12
ip address 177.2.12.1 255.255.255.0
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface Serial0/0/0:23
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn incoming-voice voice
isdn supp-service name calling
isdn bind-l3 ccm-manager
isdn outgoing ie facility
isdn outgoing display-ie
isdn outgoing ie redirecting-number
no cdp enable
interface Serial0/1/0
description == Frame-Relay Circuit to WAN
no ip address
encapsulation frame-relay
fair-queue 64 256 37
cdp enable
no frame-relay inverse-arp
frame-relay lmi-type ansi
ip rsvp bandwidth
interface Serial0/1/0.1 point-to-point
description == FR To HQ
ip address 177.0.101.2 255.255.255.0
ip pim dense-mode
snmp trap link-status
frame-relay interface-dlci 101
ip rsvp bandwidth 136
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
router ospf 1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
ip forward-protocol nd
no ip http server
no ip http secure-server
control-plane
voice-port 0/0/0:23
ccm-manager fallback-mgcp
ccm-manager redundant-host 177.1.10.10
ccm-manager mgcp
no ccm-manager fax protocol cisco
ccm-manager music-on-hold
mgcp
mgcp call-agent 177.1.10.20 service-type mgcp version 0.1
mgcp dtmf-relay voip codec all mode out-of-band
mgcp fax t38 ecm
mgcp bind control source-interface Loopback0
mgcp bind media source-interface Loopback0
mgcp profile default
sccp local Loopback0
sccp ccm 177.1.254.3 identifier 3 priority 3 version 5.0.1
sccp ccm 177.1.10.10 identifier 1 priority 1 version 5.0.1
sccp ccm 177.1.10.20 identifier 2 priority 2 version 5.0.1
sccp
sccp ccm group 1
bind interface Loopback0
associate ccm 2 priority 1
associate ccm 1 priority 2
associate ccm 3 priority 3
associate profile 3 register Br1-HW-Xcode
associate profile 1 register Br1-729-MTP
associate profile 2 register Br1-711-MTP
dspfarm profile 3 transcode
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum sessions 2
associate application SCCP
dspfarm profile 1 mtp
codec g729ar8
codec g729r8
rsvp
maximum sessions software 10
associate application SCCP
dspfarm profile 2 mtp
codec g711ulaw
rsvp
maximum sessions software 10
associate application SCCP
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous level 0 limit 20
line aux 0
line vty 0 4
exec-timeout 0 0
privilege level 15
logging synchronous
no login
line vty 5 15
exec-timeout 0 0
privilege level 15
logging synchronous
no login
scheduler allocate 20000 1000
end
Branch2#sh run
Building configuration...
Current configuration : 5789 bytes
! No configuration change since last restart
version 12.4
no service pad
no service timestamps debug uptime
no service timestamps log uptime
no service password-encryption
hostname Branch2
boot-start-marker
boot system flash:c2800nm-advipservicesk9-mz.124-24.T7.bin
boot system flash:
boot-end-marker
card type e1 0 0
logging message-counter syslog
no aaa new-model
clock timezone CEST 1
clock summer-time CEDT recurring
network-clock-participate wic 0
no network-clock-participate aim 0
dot11 syslog
ip source-route
ip cef
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
isdn switch-type primary-net5
voice service voip
no supplementary-service h225-notify cid-update
fax protocol cisco
voice class codec 1
codec preference 1 g711ulaw
codec preference 2 g711alaw
codec preference 3 g729r8
voice class custom-cptone JOIN-TONE
dualtone conference
frequency 300 3600
cadence 150 100 500
voice class custom-cptone LEAVE-TONE
dualtone conference
frequency 300 3600
cadence 500 100 150
voice translation-rule 1
rule 1 /^7033...$/ /020&/
voice translation-rule 10
rule 1 /^0/ /0&/
voice translation-rule 200
rule 1 /^206501...$/ /1&/
voice translation-profile 7DigitDNIS-to-10Digit
translate called 1
voice translation-profile Prefix0_InFrom_CUCM
translate called 10
voice translation-profile Prefix1-toCorpHQ-ANI
translate calling 200
voice-card 0
dsp services dspfarm
archive
log config
hidekeys
controller E1 0/0/0
pri-group timeslots 1-3,16
description == Voice Circuit to PSTN
controller E1 0/0/1
interface Loopback0
ip address 177.1.254.3 255.255.255.255
h323-gateway voip bind srcaddr 177.1.254.3
interface FastEthernet0/0
no ip address
duplex auto
speed auto
interface FastEthernet0/0.11
encapsulation dot1Q 11
ip address 177.3.11.1 255.255.255.0
ip helper-address 177.1.10.10
interface FastEthernet0/0.12
encapsulation dot1Q 12
ip address 177.3.12.1 255.255.255.0
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface Serial0/0/0:15
no ip address
encapsulation hdlc
isdn switch-type primary-net5
isdn incoming-voice voice
isdn bchan-number-order ascending
no cdp enable
interface Serial0/1/0
description == Frame-Relay Circuit to WAN
no ip address
encapsulation frame-relay
fair-queue 64 256 37
cdp enable
no frame-relay inverse-arp
frame-relay lmi-type ansi
ip rsvp bandwidth
interface Serial0/1/0.1 point-to-point
description == FR To HQ
ip address 177.0.201.2 255.255.255.0
snmp trap link-status
frame-relay interface-dlci 102
ip rsvp bandwidth 136
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
interface Service-Engine1/0
no ip address
shutdown
router ospf 1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
ip http path flash:
control-plane
voice-port 0/0/0:15
translation-profile incoming 7DigitDNIS-to-10Digit
ccm-manager music-on-hold
sccp local Loopback0
sccp ccm 177.1.10.20 identifier 2 priority 2 version 5.0.1
sccp ccm 177.1.10.10 identifier 1 priority 1 version 5.0.1
sccp ccm 177.1.254.3 identifier 3 priority 3 version 5.0.1
sccp
sccp ccm group 1
bind interface Loopback0
associate ccm 2 priority 1
associate ccm 1 priority 2
associate ccm 3 priority 3
associate profile 4 register Br2-HW-Conf
associate profile 3 register Br2-HW-Xcode
associate profile 2 register Br2-711-MTP
associate profile 1 register Br2-729-MTP
dspfarm profile 3 transcode
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum sessions 2
associate application SCCP
dspfarm profile 4 conference
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum sessions 1
conference-join custom-cptone JOIN-TONE
conference-leave custom-cptone LEAVE-TONE
associate application SCCP
dspfarm profile 1 mtp
codec g729ar8
codec g729r8
rsvp
maximum sessions software 10
associate application SCCP
dspfarm profile 2 mtp
codec g711ulaw
rsvp
maximum sessions software 10
associate application SCCP
dial-peer voice 1 pots
incoming called-number .
direct-inward-dial
dial-peer voice 10 pots
destination-pattern 112
no digit-strip
port 0/0/0:15
dial-peer voice 11 pots
destination-pattern 00[1-9]T
port 0/0/0:15
prefix 0
dial-peer voice 12 pots
translation-profile outgoing Prefix1-toCorpHQ-ANI
destination-pattern 000T
port 0/0/0:15
prefix 00
dial-peer voice 100 voip
description == Inbound/Outbound H323 PSTN GW From/To GK and CUCM Pub
translation-profile incoming Prefix0_InFrom_CUCM
destination-pattern 0207033...$
voice-class codec 1
session target ipv4:177.1.10.10
incoming called-number .
ip qos dscp cs3 signaling
dial-peer voice 101 voip
description == Outbound H323 PSTN GW To CUCM Sub
destination-pattern 0207033...$
voice-class codec 1
session target ipv4:177.1.10.20
ip qos dscp cs3 signaling
dial-peer hunt 1
telephony-service
max-ephones 1
max-dn 1
ip source-address 177.1.254.3 port 2000
max-conferences 8 gain -6
moh test.au
multicast moh 239.2.1.1 port 16384 route 177.1.254.3 177.3.11.1
transfer-system full-consult
create cnf-files version-stamp 7960 Sep 13 2013 18:55:27
line con 0
exec-timeout 0 0
line aux 0
line 66
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
line vty 0 4
login
scheduler allocate 20000 1000
ntp source Loopback0
ntp update-calendar
ntp server 177.1.254.1
end
Maybe you are looking for
-
Not able to change account picture and lock screen picture in windows 8.1
i can't change my account picture and lock screen picture because i cant browse it when i click the browse button nothing happens it just blink that's all.. please help me....
-
Each time my iPad sync with iTunes,I lose my album cover's,sometime's my video cover's How can I get them back & stop it from happening in the future?
-
hi! i have a very urgent problem, we implemented fax server for sending purchase order printout to the vendor. we used userexit vn00001 for receiving the fax number of the agent. we need to get also the country code and change it to the country code
-
*** I can't see my "drafts" folder anymore
I must have done something wrong here. I can't see my "drafts" folder in my list of mailboxes anymore in MacMail. How do I get it back so I can see the draft emails I'm working on? Thanks in advance.
-
Wrong number of photos listed for an album in Web Gallery
Howdy, I've tried resynching my Web Galleries and it hasn't solved this problem. The number of photos listed for any particular Album appears wrong. For example, two albums contain 3 photos, but it says there are "4 photos." One with 14 photos says i