Unified communication sip trunk problem after modifying topology

hi all
i have UC and its fine and sip trunk is ok
the toplogy is as below
UC------------------internet
now im going to add ASA with UC with new topology
UC-------------ASA-------------internet
the pbx internally is ok   , but sip trunk is not working
pbx now have private ip and it can reach internet
the problem is sip trunks is not working !!!!
i will post the config of UC when its connected to Internet direcly and wish to help me why the 2nd topoloy no sip trunks working ?!!
do i need to do portforward ??
anyway here  the config when sip trunks works and when UC directly to internet

Try disabling SIP inspection on the ASA
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/82446-enable-voip-config.html

Similar Messages

  • CUCM 10.5.1 and Exchange 2010 Unified Messaging (UM) SIP Trunk Problem

    This is more a comment if you're migrating from a lower version to 10.x.  Hopefully Google will pickup this post so others don't spend too much time (I got lucky and found this in about 30 minutes).
    There are many more SIP options than in the past.  If you configured your integration as per the integration doc, all settings are relevant, however there are some new defaults that need to change.
    SYMPTOM: Dialing another number or AA pilot and being redirected internally works, but the call drops on calls from external phones.  Exchange logs an Event ID 1079 from UMCore and also informational 1084 and 1172 events.  A capture yields a status 200 OK, then an ACK, two BYEs and a status 481 that the call leg does not exist.  The call is then dropped.
    RESOLUTION:
    In the SIP Trunk, modifiy the following:
    Device Information. . . Check Media Termination Point Required.  I've had some that have needed this checked and some where I needed to leave unchecked.  In this case going from 7.1 to 10.5 necessitated enabling.
    Call Routing Information. . . SIP Privacy:  Need to change from Default to None. 
    Any comments how the SIP Privacy might affect security and functionality would be appreciated.

    Just to inform everyone. I rebuilt the edge server from scratch. 
    Now everything is working as expected. 
    I cannot work out how the edge was not passing on calls to exchange or not communicating correctly with exchange. 
    Anyway it is resolved now. 

  • Route pattern to SIP trunk problem

    Hello, I have a 2801 router that has been configured with CME and a working SIP connection to my local ISP.
    Tested with calls via CME so I know for sure that the SIP config and dial plan is fine on this gateway.
    Next I wanted to try out CUCM so I set up a CUCM 8.6 box that is connected to the 2801 router to use as it's SIP gateway.
    The only change I made to the gateway router config was to alter the "ip option 150" address so that the phones go to CUCM for their configs etc (which they do with no problems).
    Then I set up a SIP trunk in CUCM along with a route pattern which is to use the SIP trunk within the Gateway/Route list option.
    But when I make a call that matches this route pattern all I get is the intermittent beep message from the phone. I cannot route calls succesfully through it.
    I have checked network connectivity and all is fine. The IP address I specfied in CUCM for the SIP trunk is simply one of the interfaces on the 2801 router and it is definitley reachable.
    I also activated "debug ccsip all" on the 2801 gateway router but nothing appears. So it seems like the calls are not even reaching the 2801 gateway ?
    Is the problem possibly a conflit between CME on the gateway router and my CUCM ?
    Do I need to disable CME somehow on the gateway first ?  Or am I not doing something correct in the CUCM config ?
    Thank you kindly for any suggestions.
    ps. I have attached a couple of screenshots of my config.

    Hello, thanks for helping.
    I activated "debug voice ccapi inout" as well as "debug ccsip all" on the gateway but nothing showed up.
    Therefore I deduce the call is not even making it to across the SIP trunk into the gateway router ?
    As I am a newbie trying this out for the first time, it is guranteed to be something really simple.
    I have included my running config from the gateway router below..
    One addition I made was to add an incoming dial peer. That is "dial peer 5,  description CUCM SIP trunk".
    I set it up with a destination patter 2... to match my phone config on CUCM which have numbering in the 2000 range.
    Sorry, I got RTMT up and running but could not get any meaningful results from it. I need to learn up on that.
    I did however run a 'dialed number analysis' from CUCM direct and have attached the result. It seems the dialled number "99" is matching the route pattern OK.
    So why is it not then moving down the SIP trunk to my gateway and getting picked up by the incoming dial peer ?
    Thanks if you guys can offer any more help.
    version 15.1
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    hostname Router
    boot-start-marker
    boot system flash:c2801-ipvoicek9-mz.151-2.T0a.bin
    boot-end-marker
    no aaa new-model
    clock timezone nzst 13 0
    dot11 syslog
    ip source-route
    ip dhcp pool DATA_SCOPE
       network 192.168.200.0 255.255.255.0
       default-router 192.168.200.1
       dns-server 8.8.8.8
    ip dhcp pool VOICE_SCOPE
       network 192.168.100.0 255.255.255.0
       default-router 192.168.100.1
       option 150 ip 192.168.2.115
    ip dhcp pool MGMT_SCOPE
       network 192.168.1.0 255.255.255.0
       default-router 192.168.1.99
    ip cef
    ip name-server 4.2.2.2
    no ipv6 cef
    multilink bundle-name authenticated
    voice class codec 1
    codec preference 1 g711alaw
    codec preference 2 g729r8
    codec preference 3 g711ulaw
    codec preference 4 ilbc
    voice translation-rule 1
    rule 1 /^9/ //
    voice translation-profile Strip9ToGetOut
    translate called 1
    voice-card 0
    crypto pki token default removal timeout 0
    crypto pki trustpoint TP-self-signed-2995340181
    enrollment selfsigned
    subject-name cn=IOS-Self-Signed-Certificate-2995340181
    revocation-check none
    crypto pki certificate chain TP-self-signed-2995340181
    certificate self-signed 01
      3082023E 308201A7 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
      31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
      69666963 6174652D 32393935 33343031 3831301E 170D3733 30363034 31393534
      32305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
      4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 39393533
      34303138 3130819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
      8100C34D C8ECBB53 E01373A3 2E286B78 2D23042B 1C8588B1 A7861899 BA1C6860
      AE1D7868 2A59E3BC 54D0A457 8FFDE27F C09104E5 C7A429F3 74CD9DA8 4A980366
      675CC27C CDB94838 821CC05F 2C0AC2BC D882C132 6CAA1FA6 6DA740E4 562428B1
      12B741F1 A50C9246 4CC35EDA DEE1D038 3883BB35 A91ABF8B 483E4160 F5FA4B5A
      9A570203 010001A3 66306430 0F060355 1D130101 FF040530 030101FF 30110603
      551D1104 0A300882 06526F75 74657230 1F060355 1D230418 30168014 72119640
      F3396E1F E4168086 D31D8619 0D8337FF 301D0603 551D0E04 16041472 119640F3
      396E1FE4 168086D3 1D86190D 8337FF30 0D06092A 864886F7 0D010104 05000381
      81003B5A 29DE3A1E C5AB6092 E8D90650 C80752FC 0AAC93FD C5DE3D69 071B08FA
      D4013232 81CA07E7 15F90190 6A3AD6A0 1D05F0F2 13479568 888332A5 F81E2681
      7DA44095 4D11CFB7 CA79579A 8D95DE54 7B00173C E2C50573 A310C8C9 1487FEFC
      CE35B66E 9EF94CFA 8D6D6DCD ADC78132 2709F198 6DF2F0FA D80CC088 D0C4C7D1 080B
          quit
    license udi pid CISCO2801 sn FTX0947W07M
    username xxx privilege 15 password 0 xxx
    interface FastEthernet0/0
    ip address 192.168.3.50 255.255.255.0
    duplex auto
    speed auto
    interface FastEthernet0/1
    no ip address
    duplex auto
    speed auto
    interface FastEthernet0/1.2
    encapsulation dot1Q 2
    ip address 192.168.2.1 255.255.255.0
    interface FastEthernet0/1.99
    encapsulation dot1Q 99
    ip address 192.168.1.99 255.255.255.0
    interface FastEthernet0/1.100
    description voice_VLAN
    encapsulation dot1Q 100
    ip address 192.168.100.1 255.255.255.0
    interface FastEthernet0/1.200
    description data_VLAN
    encapsulation dot1Q 200
    ip address 192.168.200.1 255.255.255.0
    ip forward-protocol nd
    ip http server
    ip http authentication local
    ip http secure-server
    ip route 0.0.0.0 0.0.0.0 192.168.3.1
    logging esm config
    tftp-server flash:/phone/7940-7960/P00307020200.bin alias P00307020200.bin
    tftp-server flash:/phone/7940-7960/P00307020200.loads alias P00307020200.loads
    tftp-server flash:/phone/7940-7960/P00307020200.sb2 alias P00307020200.sb2
    tftp-server flash:/phone/7940-7960/P00307020200.sbn alias P00307020200.sbn
    control-plane
    mgcp fax t38 ecm
    dial-peer voice 1 voip
    description local_7_Digit_Calling
    translation-profile outgoing Strip9ToGetOut
    destination-pattern 9[2-9]......
    session protocol sipv2
    session target ipv4:203.184.16.2
    voice-class codec 1 
    dial-peer voice 2 voip
    description international_calling
    translation-profile outgoing Strip9ToGetOut
    destination-pattern 900T
    session protocol sipv2
    session target ipv4:203.184.16.2
    voice-class codec 1 
    dial-peer voice 3 voip
    description national_calling
    translation-profile outgoing Strip9ToGetOut
    destination-pattern 90[34679].......
    session protocol sipv2
    session target ipv4:203.184.16.2
    voice-class codec 1 
    dial-peer voice 4 voip
    translation-profile outgoing Strip9ToGetOut
    destination-pattern 90[34679].......
    dial-peer voice 5 voip
    description CUCM SIP trunk
    destination-pattern 2...
    session protocol sipv2
    session target ipv4:192.168.2.115
    voice-class codec 1 
    sip-ua
    authentication username xxxxxxxxxx password xxxxxxxx
    060
    telephony-service
    max-ephones 10
    max-dn 20
    ip source-address 192.168.1.99 port 2000
    load 7960-7940 P00307020200
    max-conferences 4 gain -6
    transfer-system full-consult
    create cnf-files version-stamp Jan 01 2002 00:00:00
    ephone-dn  1  dual-line
    number 1000
    name Lydia Francis
    ephone-dn  2  dual-line
    number 1001
    name Leah Francis
    ephone-dn  3  dual-line
    number 1002
    n
    ephone-dn  4  dual-line
    number 1003
    ephone  1
    mac-address C80A.A970.01DE
    type CIPC
    button  2:2
    ephone  2
    mac-address 000C.3070.8705
    button  1:1 2:15
    ephone  3
    mac-address 000C.8546.5954
    button  1:3 2:15
    line con 0
    logging synchronous
    line aux 0
    line vty 0 4
    privilege level 15
    login local
    transport input telnet ssh
    scheduler allocate 20000 1000
    ntp server 195.43.74.123
    end

  • UC320 PBX sip trunk problem

    HI, I installed the UC320 for a customer and they have 19 users,  we are using sip trunk for voice traffic
    it now encountered an annoying problem, The  isp is doing the maintenance in recent period and their sip trunk is coming down and up occasionally  at night.  Whenever the sip trunk broke and come up again, the UC320 seems loss the sync with the wan, and it can work for 1 or 2 days and then the phone can not dial externally and also the incoming call have the problem, Yet the internal call is ok, whenever, this happened, we need to restart the uc320 to resume the service.  I configured the auto maintainance happen at Sunday morning 3am , yet, there are times that the sip trunk broke happen on Monday night, then we usually get the complaint from the custom around Wed. or Thurs.  and then we had to restart the system to resume the service.  It is really troublesome. Do you have any idea how to deal with the problem. Is it a bug of cisco uc320? Is there any software update or any  patch for this problem?
    We are running 2.3.2(6) now.

    HI
    Thank you for your reply, but the thing seems a bit more complex, our network configured as unregistered by the requirement of isp, and it works nicely. when the sip broke down and come up again, the pbx can work normally for 1 or two days and then it seems drifted away. and the problem at  beginning is minor with only a few phones malfunction, and can be retored by restart the phone, but as the time goes by , the problems seemd deteriorated until all phones not working and we have to restart the pbx. 
         I check the external trunks, the status of sip is unregistered. it is required by isp to be configured so. it works nicely as long as the sip trunk is on.
         Regard

  • WRVS4400N -- authentication problem after modifying UPnP router setting

    After I enable or disable UPnP on the WRVS440N, save, and then navigate to any settings tab, I am prompted to re-authenticate with the router.  I am then unable to authenticate to the router using the router's username/password credentials, however, I am able to enter admin/admin to access the router.  If I reboot the router, the problem is fixed.  Have others encountered this problem?    Thanks.  (Firmware version V1.1.03).

    Good advice.  Thanks  I can recreate the problem.  I reset the router and the problem was initially resolved.  However, when  I started to reapply port-forward settings, among others…and then I enabled 'Dual-Stack IP,' the router rebooted, and the original problem remerged.  Subsequent to the reboot of the router, I enabled/disabled UPnP and had to reauthenticate to the router with userid=admin, password=admin, even though I had already updated that user list entry with my new credentials.
    I suppose that if this problem went undetected by the person configuring the router, anybody on the subnet, or potentially someone probing for this exposure from the Internet, could access the router.  I had configured the remote-management option on the default port of 8080, and I was able to https in over that port from the Internet-wan side of the router, and authenticate using admin/admin until I rebooted the router.

  • Confused by basic SIP Trunk configuration.

    I've went through a few basic SIP trunk configurations and Youtube videos the last couple days but can't figure out what I'm doing wrong.
    I've set up H323 and MGCP no problem, but I can't figure out the SIP trunk set up. I'm guessing there are some concepts I'm not understanding yet.
    I've got a CUCM lab set up. A 2851 PSTN Simulator, 2851 H323 Gateway at the Main site with a 9.0 CUCM setup in that site and a Branch site that I'm trying to set up as a SIP trunk to connect two phones.
    CUCM is on the 192.168.5.x/24 subnet. 172.16.0.x/24 is the subnet connecting the serial(internet) cable between the two gateways in which I'm trying to establish the trunk between.
    The Branch phones are still registering with the CUCM at the main site. The Route Pattern is looking to the Branch Route List which has the SIP Trunk listed. I'm just getting a fast busy when trying to place a call from the branch site to the main site.
    The most frustrating thing I'm not understanding, is that the debug ccsip and call debugs on my SIP Branch gateway shows absolutely nothing.  I've tried registering the branch phones with the SIP Trunk, but stopped when I figured that shouldn't be necessary.
    If someone can make some sense of this, I'd truly appreciate it!

    Hello Aditya and thanks for the consideration!
    I do have a direct IP connection, but I want to set up a SIP trunk and use it just to know how to do it before I do it in production. 
    I did end up deleting the phones from CUCM so they can register with the 2851 CME that I'm setting up as a SIP trunk. So it is registering there, and I set the allow connections and bind sip commands.
    I am now getting Debugs and calls from the SIP Trunk router going to CUCM, but the error message is No Codec, and I Get the fast busy after the call rings on the CUCM Main Site side. So looks like the negotiation is failing. Here is my CLI for the SIP Trunk now after the changes have been made and phones registered to the SIP Branch site as well as the Debug when I tried to place a call to extension "5000":
    Note: I did try to change the codecs in the dial-peers to g729r8 instead of 711 and same fast busy after answering.
    ==============================================
    Branch_SIP#show run
    Building configuration...
    Current configuration : 3529 bytes
    ! Last configuration change at 03:15:11 UTC Thu Apr 2 2015
    version 15.1
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    hostname Branch_SIP
    boot-start-marker
    boot-end-marker
    ! card type command needed for slot/vwic-slot 0/2
    enable secret 5 $1$hOXF$gvfmWW1ZIQE0mAMVg.u1c/
    no aaa new-model
    dot11 syslog
    ip source-route
    ip cef
    ip dhcp excluded-address 10.0.10.1 10.0.10.10
    ip dhcp excluded-address 10.0.30.1 10.0.30.10
    ip dhcp pool Data
     network 10.0.10.0 255.255.255.0
     default-router 10.0.10.254
     option 150 ip 192.168.5.250
     dns-server 192.168.5.200
    ip dhcp pool Voice
     network 10.0.30.0 255.255.255.0
     default-router 10.0.30.254
     dns-server 192.168.5.200
     option 150 ip 172.16.0.1
    ip dhcp pool data
     option 150 ip 172.16.0.2
    no ipv6 cef
    multilink bundle-name authenticated
    voice service voip
     allow-connections sip to sip
     sip
      bind media source-interface Loopback1
    voice-card 0
    crypto pki token default removal timeout 0
    license udi pid CISCO2851 sn FTX1031A2FM
    redundancy
    interface Loopback1
     ip address 2.2.2.2 255.255.255.255
    interface GigabitEthernet0/0
     no ip address
     duplex auto
     speed auto
    interface GigabitEthernet0/0.10
     encapsulation dot1Q 10
     ip address 10.0.10.254 255.255.255.0
    interface GigabitEthernet0/0.30
     encapsulation dot1Q 30
     ip address 10.0.30.254 255.255.255.0
    interface GigabitEthernet0/1
     no ip address
     shutdown
     duplex auto
     speed auto
    interface Serial0/3/0
     no ip address
     shutdown
     clock rate 2000000
    interface Serial0/3/1
     ip address 172.16.0.1 255.255.255.0
     clock rate 250000
    interface Internal-Service-Module0/0
     no ip address
     shutdown
     !Application: CUE Running on AIM2
     hold-queue 512 out
    router eigrp 1
     network 0.0.0.0
     network 2.2.2.2 0.0.0.0
     network 10.0.0.0
     network 10.0.10.0 0.0.0.255
     network 10.0.30.0 0.0.0.255
     network 172.16.0.0
    ip forward-protocol nd
    no ip http server
    no ip http secure-server
    ip route 0.0.0.0 0.0.0.0 172.16.0.2
    tftp-server flash:term45.default.loads
    tftp-server flash:jar45sccp.8-5-3TH1-6.sbn
    tftp-server flash:cnu45.8-5-3TH1-6.sbn
    tftp-server flash:apps45.8-5-3TH1-6.sbn
    tftp-server flash:dsp45.8-5-3TH1-6.sbn
    tftp-server flash:cvm45sccp.8-5-3TH1-6.sbn
    control-plane
    voice-port 0/0/0
    voice-port 0/0/1
    mgcp profile default
    dial-peer voice 1 voip
     description **Incoming Call from SIP Trunk**
     session protocol sipv2
     session target sip-server
     codec g711ulaw
    dial-peer voice 2 voip
     description **Outgoing Call to SIP Trunk**
     destination-pattern 5...
     session protocol sipv2
     session target sip-server
     codec g711ulaw
    sip-ua
     sip-server ipv4:192.168.5.250
    telephony-service
     codec g711ulaw
     max-ephones 24
     max-dn 48
     ip source-address 172.16.0.1 port 2000
     system message SIP Branch Site
     cnf-file location flash:
     load 7960-7940 P00308010200.bin
     max-conferences 8 gain -6
     transfer-system full-consult
    ephone-dn  1
     number 4008
    ephone-dn  2
     number 4005
    ephone  1
     device-security-mode none
     mac-address 001D.A21A.2065
     button  1:1
    line con 0
     exec-timeout 0 0
    line aux 0
    line 194
     no activation-character
     no exec
     transport preferred none
     transport input all
     transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
     stopbits 1
     speed 115200
    line vty 0 4
     password cisco
     login
     transport input all
    line vty 5 15
     password cisco
     login
     transport input all
    scheduler allocate 20000 1000
    end
    Branch_SIP#show debug
    TFTP:
      TFTP Event debugging is on
    CCSIP SPI: SIP Call Statistics tracing is enabled       (filter is OFF)
    Branch_SIP#
    *Apr  2 03:20:32.351: //25/0C496935804A/SIP/Call/sipSPICallInfo:
    The Call Setup Information is:
    Call Control Block (CCB) : 0x4B6C5C28
    State of The Call        : STATE_DEAD
    TCP Sockets Used         : NO
    Calling Number           : 4008
    Called Number            : 5005
    Source IP Address (Sig  ): 172.16.0.1
    Destn SIP Req Addr:Port  : 192.168.5.250:5060
    Destn SIP Resp Addr:Port : 192.168.5.250:5060
    Destination Name         : 192.168.5.250
    *Apr  2 03:20:32.351: //25/0C496935804A/SIP/Call/sipSPIMediaCallInfo:
    Number of Media Streams: 1
    Media Stream             : 1
    Negotiated Codec         : No Codec
    Negotiated Codec Bytes   : 0
    Nego. Codec payload      : 255 (tx), 255 (rx)
    Negotiated Dtmf-relay    : 0
    Dtmf-relay Payload       : 0 (tx), 0 (rx)
    Source IP Address (Media): 2.2.2.2
    Source IP Port    (Media): 19472
    Destn  IP Address (Media):  -
    Destn  IP Port    (Media): 0
    Orig Destn IP Address:Port (Media): [ - ]:0
    *Apr  2 03:20:32.351: //25/0C496935804A/SIP/Call/sipSPICallInfo:
    Disconnect Cause (CC)    : 63
    Disconnect Cause (SIP)   : 503
    Branch_SIP#

  • Unable to perform call transfer & call park through SIP Trunk (SKYPE)

    The Scenario is:
    I have set up a SIP trunk to SKYPE and we are able to make outbound call to a number via SIP Trunk.
    After the call is established, when we tried to make call transfer, the call DROP and the phone at the other end shows error "Temp Fail".
    I tried to "enable MTP" in SIP Trunk and We are able to perform call-transfer but it limits the call session to 1.
    Anyone has facing the same issue?

    MTP is needed to invoke supplementary functions like hold, transfer etc. Make sure that the MTP is checked on SIP trunk, MTP is assigned to the MRGL of the device pool on SIP trunk and has sufficient resources.
    HTH
    Manish

  • Ask the Cisco VIP: Troubleshooting SIP in Cisco Unified communications

    Troubleshooting SIP in Cisco Unified communications deployments with Cisco VIP Ayodeji Okanlawon
    This is a Q&A Ask the Expert Session continuation from the Live Webcast
    Ask your questions on Session Initiation Protocol (SIP) and how it is redefining our UC world.The Session Initiation Protocol (SIP) is a signaling communications protocol, widely used for controlling multimedia communication sessions such as voice and video calls over Internet Protocol (IP) networks.
    Featured Expert
    Ayodeji Okanlawon, a Cisco Designated VIP, is the Lead Consultant Engineer for Global Solutions Design and Engineering at Verizon Business. In his past, he has worked at Intact IS, NCS Global, and Schlumberger Information Solutions. His experience includes development of design and deployment of large scale IP telephony projects on Cisco Call Manager platforms, Cisco Voice gateways, Cisco Jabber cloud and on premise solution. His expertise includes SIP solutions, CUBE design and Deployment, Troubleshooting: Voice gateways, CUCM, Unity connection, CUPS. Deji has been awarded the Cisco Designated VIP in 2013 and 2014. Deji holds a Bachelor of Science (BS), Electrical and Electronics Engineering, Second Class Upper from Obafemi Awolowo University.  
    According to Deji, “If you want to advance your career, if you’re serious about your skill sets, you’ve got to be in the forums.”  (Read the Interview >>)
    We look forward to your participation. This event is open to all, including partners.
    * * Remember to use the rating system to let Deji know if you have received an adequate response. * *
    Deji might not be able to answer each question due to the high volume expected during this event. This event runs January 13 through January 23, 2015.  Visit this forum often to view responses to your questions and the questions of other community members.

    Derrick,
    RFC 3261defines ways to provide increased security for a SIP session.
    The following describes areas in SIP that provides security for the protocol
    1. Authenticating users.
    We need to authenticate a user to ensure that the sender of the message is who he claims to be.
    To achieve this SIP uses digest authentication between a UAC, proxy and a UAS. This provides the most basic level of authentication challenge between a client, proxy and a server.
    2. Secure SIP signalling
    The next area we can secure is SIP signalling itself. For this we use SSL/TLS. This is similar to using https in web browsers. With TLS before our any signalling is exchange X.509 certificates are used create a secure TLS channel. All our SIP messages are then transported within the secure channel.
    NB: The digest authentication mentioned above for authenticating a user agent is just authentication. The messages are not protected from reading or modification hence it is recommended that these messages are carried inside a secure TLS channel for better security.
    3. Privacy and Identification
    Additional security features in SIP provides means where any user can choose to either reveal or conceal his identity.
    4.Secure RTP
    SIP also provides the ability to secure the media channel. It is not enough to secure signalling while anyone can listen to the media. RFC3830 discusses how the encryption should be done.
    5. S/MIME
    S/MIME encapsulation is used to protect sip headers making it impossible for any one in between the sender and receiver to modify the sip headers
    Regards

  • PROBLEM WITH FORWARDING ALL - SIP TRUNK

    Hello,
    I'm experiencing the following problem:
    I have this scenario: PSTN - SIP GW - CUCM6.1 - SIP TRUNK - CUM8.6
    Phone A (extension 33476761834) is registered on CUCM8.6, with external forwarding to the PSTN.
    If someone from CUCM8.6 calls - it works.
    If someone from CUCM6.1 or from PSTN calls - fast busy. Error in CUCM traces:
    19:20:47.056 |//SIP/SIPTcp/wait_SdlSPISignal: Outgoing SIP TCP message to 145.245.235.201 on port 36615 index 3295
    [1925279,NET]
    SIP/2.0 500 Internal Server Error
    Via: SIP/2.0/TCP 145.245.235.201:5100;branch=z9hG4bK3744a3159aed8f
    From: <sip:[email protected]>;tag=e1d37fe6-cb7b-46e7-a868-6fe81d6bb391-40319184
    To: <sip:[email protected]>;tag=907605~2b367b5a-23ed-4193-a18b-e8c2f777615e-62999964
    Date: Thu, 26 Sep 2013 17:20:46 GMT
    Call-ID: [email protected]
    CSeq: 101 INVITE
    Allow-Events: presence
    Reason: Q.850;cause=100
    Content-Length: 0
    |2,100,63,1.580442^145.245.235.232^*
    Any idea? Thanks a lot!
    (Attaching the complete trace).

    Hi,
    Making some tests regarding the problem we saw this:
    Oct  1 23:02:22: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
    Received:
    INVITE sip:[email protected]:5060 SIP/2.0
    Date: Tue, 01 Oct 2013 23:02:22 GMT
    Allow: INVITE, OPTIONS, INFO, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, PUBLISH
    From: <sip:[email protected]>;tag=e1d37fe6-cb7b-46e7-a868-6fe81d6bb391-40468009
    Allow-Events: presence
    Supported: timer,replaces
    Min-SE:  1800
    Diversion: " Elodie" " <sip:[email protected]>;reason=unconditional;privacy=off;screen=yes
    Remote-Party-ID: <sip:[email protected]>;party=calling;screen=yes;privacy=off
    Content-Length: 0
    User-Agent: Cisco-CUCM6.1
    To: <sip:[email protected]>
    Contact:
    Expires: 180
    Call-ID: [email protected]
    Via: SIP/2.0/TCP 145.245.235.201:5060;branch=z9hG4bK3863af2fe80489
    CSeq: 101 INVITE
    Session-Expires:  1800
    Max-Forwards: 67
    Oct  1 23:02:22: //350172/5D95E6C38917/SIP/Msg/ccsipDisplayMsg:
    Sent:
    SIP/2.0 400 Bad Request - 'Malformed CC-Diversion/Diversion/CC-Redirect Header'
    Via: SIP/2.0/TCP 145.245.235.201:5060;branch=z9hG4bK3863af2fe80489
    From: <sip:[email protected]>;tag=e1d37fe6-cb7b-46e7-a868-6fe81d6bb391-40468009
    To: <sip:[email protected]>;tag=DA70FE78-21AE
    Call-ID: [email protected]
    CSeq: 101 INVITE
    Reason: Q.850;cause=100
    Content-Length: 0
    The problem is because in the redirect header, the comma "," is not a valid parameter so in the alerting name I removed the comma after the surname (i.e. "Elodie, Mary" to "Elodie Mary" and now is working.
    We will change the alerting name by the moment and I will also investigate if there is a parameter to just not divert this name because is not needed this info in forwarded calls.
    Anyway the problem is solved

  • How to create multiple sip trunks between cucm and cisco unified sip proxy

    Dear Expert,
    Is there a way to create multiple sip trunks between CUCM and Cisco Unified SIP Proxy (CUSP)? How to achieve it without creating multiple IP interfaces on the CUSP module.
    CUCM: 8.5.1.10000-9
    CUSP: 8.5.2
    Thank you,
    .wan

    Hello Michael,
    This SIP trunk is part of UCCE solution, which used between CVP, CUSP, and CUCM.
    The requirements:
    1) To have different codecs for different type of calls, as the phones are at few countries
    2) To pass different number of digits from CUSP to CUCM for different call treatments
    .wan

  • Problems between an UC520 and Asterisk with sip trunk

    I have an UC520 and Asterisk with a sip trunk created between them, the calls from the UC520 to the Asterisk are ok, but the calls form de Asterisk to the UC520 are always busy.
    Logs from the asterisk show that the first part of the call is ok, but the call is not complete, this means that the part where the extensions are with @ipuc520 doesn't appear
    I created a sip trunk from de CCA 1.9 and it puts this for incoming calls for the dial peer, if I compare with a CCME, there is no configuration for incoming call there
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Tabla normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-qformat:yes;
    mso-style-parent:"";
    mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
    mso-para-margin:0cm;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:11.0pt;
    font-family:"Calibri","sans-serif";
    mso-ascii-font-family:Calibri;
    mso-ascii-theme-font:minor-latin;
    mso-fareast-font-family:Calibri;
    mso-fareast-theme-font:minor-latin;
    mso-hansi-font-family:Calibri;
    mso-hansi-theme-font:minor-latin;
    mso-bidi-font-family:"Times New Roman";
    mso-bidi-theme-font:minor-bidi;
    mso-fareast-language:EN-US;}
    dial-peer voice 1000 voip
    permission term
    description ** Incoming call from SIP trunk (Generic SIP Trunk Provider) **
    voice-class codec 1
    voice-class sip dtmf-relay force rtp-nte
    session protocol sipv2
    session target ipv4:x.y.z.w
    incoming called-number .%
    dtmf-relay rtp-nte
    ip qos dscp cs5 media
    ip qos dscp cs4 signaling
    no vad
    And there is no configurarion at all that could block the calls
    The x.y.z.w was the sip server ip (asterisk ip)
    The comminication between sip and h323 are allowed in the four ways
    The allowed codecs are   g711ulaw and g729r8
    Asterisk is working now with other CCME and they are ok so I copied the configuration from those CCME to the UC520 and from the other sip trunks in asterisk the new trunk sip for uc520
    The sip trunk created from the CCA was replaces for the one from the CCME that is working now
    The routes are ok in Asterisk.
    There is no translation profile in incoming calls.
    There is no ACL applied in all configuration.
    There is no log about callres incoming from the asterisk.
    Could anyone halp me pls?

    Hi Rina,
    Help me to try and understand what you are trying to do.
    In this code snippet i see the following:
    001808: 1w3d: //-1/xxxxxxxxxxxx/DPM/dpMatchPeersCore:
       Calling Number=7129, Called Number=7129, Peer Info Type=DIALPEER_INFO_SPEECH
    001809: 1w3d: //-1/xxxxxxxxxxxx/DPM/dpMatchPeersCore:
       Match Rule=DP_MATCH_DEST; Called Number=7129
    001810: 1w3d: //-1/xxxxxxxxxxxx/DPM/dpMatchPeersCore:
       Result=Success(0) after DP_MATCH_DEST
    001811: 1w3d: //-1/xxxxxxxxxxxx/DPM/dpMatchPeersMoreArg:
       Result=SUCCESS(0)
       List of Matched Outgoing Dial-peer(s):
         1: Dial-peer Tag=20036
    This looks as though you have a call coming in from the Asterisk system to number 7129, which then leads to this according to the config file you provided.
    number 7129
    label 7129
    description7129
    name 7129
    call-forward busy 6001
    call-forward noan 6001 timeout 10
    Which at this point I am going to assume this is ephone-dn  10 (Please confirm). If this is the case then the inbound call is being matched correctly to a DN (Which has its own dial-peer tag "Dial-peer Tag=20036".
    But then i see this:
    001817: 1w3d: //-1/55940098BA19/DPM/dpAssociateIncomingPeerCore:
       Result=Success(0) after DP_MATCH_INCOMING_DNIS; Incoming Dial-peer=1000
    001818: 1w3d: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:
       Calling Number=Unknown, Called Number=, Voice-Interface=0x0,
       Timeout=TRUE, Peer Encap Type=ENCAP_VOIP, Peer Search Type=PEER_TYPE_VOICE,
       Peer Info Type=DIALPEER_INFO_SPEECH
    001819: 1w3d: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:
       Result=NO_MATCH(-1) After All Match Rules Attempt
    So the incoming call has been matched to Dial-peer 1000 which is an incoming VoIP dial-peer:
    dial-peer voice 1000 voip
    permission term
    description ** Incoming call from SIP trunk (Generic SIP Trunk Provider) **
    voice-class codec 1
    voice-class sip dtmf-relay force rtp-nte
    session protocol sipv2
    session target sip-server
    incoming called-number .%
    dtmf-relay rtp-nte
    ip qos dscp cs5 media
    ip qos dscp cs4 signaling
    no vad
    But then can see it has no where to go. So either I am reading this all wrong and the 7129 number is a result of another call taking place whilst you were debugging the system, or it is part of the debug and I am missing something here.
    Rina,  just so I understand this all. Are you trying to do WAN type calling from one system UC-500 (System "A") to the Asterisk system ( System B) and same? And so far calls going from the UC-500 to the Asterisk system are fine, but calls coming in from the Asterisk system to the UC-500 are not?
    What happens on the Asterisk side when you try to call an Extension on the UC-500, do you get any ringing? Or is it a fast busy tone?
    I am going to look over your configuration and debug a little further when I get home, maybe I am missing something here and can identify it.
    Cheers,
    David.

  • Nortel CS1000E Release 7.5 using SIP to Cisco Unified Communications Manager 6.1.5

    Actually exist diferents publications with other releases, but not with this options in common, somebody can help me???? Thank you!!!

    I have a similar problem, only the tab with the Cisco Unified Communications Manager AXL servers option  is disabled or appear disabled in CUC. any idea what might be going on, I checked  that the service relates to AXL is on and running in CUCM and CUC.

  • Calls via Gamme sip trunk

    Has anyone set up Lync server 2010 to use the Gamma SIP trunks, that dont require the use of a gateway?
    No requirement for an additional gateway device, with direct MS Lync connectivity
    The trouble is i cannot get Lync to connect to the trunks. We have purchased the SIP trunks from a gamma supplier(we didnt now they were a supplier, until recently when we asked for support and they went 'duhhhhhh me no know, we just
    sell things dunow how to set things up' what a PAIN IN THE A***), and they say that the SIP trunks are pointed at our EFM IP address. which also has the DDIs assigned to it.
    So, i setup a PSTN gateway on lync topology using IP of EFM, Listening port 5060 using TCP. Are these ports and protocol okay?
    The VoIP phones seem to want to call, they just lack any sound, no ringing tone, no dissconnected tone. Just says calling "+44157322****" So the dial plan is changing 22**** to the correct local code and whatever the +44 thing
    is.
    Any advice on how i can find the problem, or how to setup the trunks up would be hugely appreciated.
    P.S We initially tried to use an audiocodes mediant 1000, which was what we asked our trunk supplier about, and then they informed us about being a gamma supplier, and that the gamma trunks do not require a gateway. Followed setting
    up guide for mediant 1000 with gamma trunks through audiocodes blah, to no success. I think thats because it was changing the coders, which was not needed if the trunks are directly compatable.

    Hi,
    Please review the SIP trunk topology.
    http://technet.microsoft.com/en-us/library/gg398720.aspx
    To
     implement SIP trunking, you must route the connection through a Mediation Server, which proxies communications sessions between Lync Server 2010 clients and the service provider and transcodes media when necessary. Each Mediation Server has
    an internal and an external network interface. The internal interface connects to the Front End Servers. The external interface is commonly called the gateway interface because it has traditionally been used to connect the Mediation Server to a PSTN gateway
    or an IP-PBX. To implement a SIP trunk, you connect the external interface of the Mediation Server to the external edge component of the ITSP. The external edge component of the ITSP could be a Session Border Controller (SBC), a router, or a gateway.
    Generally the gateway is not required in your organization. You need to configure Mediation Server setting. For the details about
    the SIP trunk configuration of ITSP side, you need to contact Gamme Support for further assistance.
    Regards,
    Kent Huang
    TechNet Community Support ************************************************************************************************************************ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a
    marked post does not actually answer your question.

  • PAP2T and Cisco Unified Communications Manager

    I try to connect pap2t to Cisco Unified Communications Manager rel 6.1.2. I Enabled digest authentication, create end user with name like DN, linked it with phone and DN. But pap2t can't register - Can't connect to login server.CUCM - say me that this phone status - rejected. Can anybody help me?

    We do see this occasionally and generally 95% of the time it's the router blocking the SIP traffic, the error "Can't connect to Logon server" means it's getting no reply, what I think you may find is that your device may be setup as DHCP and the router may be doing a renew of lease (Ie IP address to the device) every 24 hours, this could be the problem.
    Try setting your device to a Static IP Address and make sure you also set the DNS entries as well, see how you go after that.

  • Issue with instant ringback when using sip trunk to SP

    Hi all,
    We use CUCM 8.0.2.
    We have a SIP trunk to a SP connected via one of our Cisco 2911 routers configured as a CUBE.
    Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.0(1)M3, RELEASE SOFTWARE (fc2)
    c2900-universalk9-mz.SPA.150-1.M3.bin
    Cisco CISCO2911/K9 (revision 1.0)
    Technology Package License Information for Module:'c2900'
    Technology Technology-package
                      Current       Type
    ipbase        ipbasek9      Permanent
    security      securityk9    Permanent
    uc              uck9            Permanent
    data           None            None
    We also have several ISDN lines that run out via various Cisco routers configured as H323 gateways.
    We use 7945 and CIPC for our phones.
    We're having an issue with calls going via the SIP trunk where we hear ringing instantly after dialling - but before the actual device at the other end starts ringing (considerable difference).
    Using the SIP trunk: If I make a call to my mobile phone - I hear ringing instantly - about 3 rings before my mobile phone actually starts ringing - undesireable.
    Using H323 gateway: If I make a call to my mobile phone - I hear silence for a bit - then ringing when the mobile starts ringing - desired.
    Using SIP trunk: If I make a call to a landline that is ready - it rings instantly for at least 1 ring - before the actual phone I'm calling starts ringing - undesireable.
    Using H323 gateway: There is a momentary pause before hearing ringing on my phone and the phone I dialled - desired.
    Using SIP trunk: If I make a call to a landline that is off-hook (with no call-waiting/etc.) - it rings once and then returns the busy signal (the worst issue) - undesireable.
    Using H323 gateway: There is a momentary pause before hearing busy signal - desired.
    Phone to phone internally (same network): Operates as expected (instantly rings locally and on the phone I'm calling). Between phones that utilise the SIP trunk and phones that utilise the H323 gateways within the same network - communication is instant and as expected.
    Any ideas why this happens and how to stop it?
    I want it to not ring until the situation is known and that it can provide the appropriate feedback (ringing/busy/etc.).
    Some possibly relevant config (note that there is a known bug with this IOS that meant I had to declare the codec in each dial-peer as the voice class would not work):
    voice service voip
    address-hiding
    mode border-element
    allow-connections sip to sip
    sip
      bind control source-interface GigabitEthernet0/0
      bind media source-interface GigabitEthernet0/0
      header-passing error-passthru
      early-offer forced
      midcall-signaling passthru
    interface GigabitEthernet0/0
    ip address x.x.x.x 255.255.255.252
    ip access-group acl.SIP-IN in
    no ip redirects
    no ip unreachables
    ip verify unicast reverse-path
    ip virtual-reassembly
    duplex full
    speed 100
    no cdp enable
    gateway
    timer receive-rtp 1200
    sip-ua
    connection-reuse
    gatekeeper
    shutdown
    dial-peer voice 1 voip
    description *** INBOUND CALLS FROM CARRIER ***
    translation-profile incoming SIPTRUNK-INCOMING
    session protocol sipv2
    incoming called-number #blah blah#
    dtmf-relay rtp-nte
    codec g711alaw
    ip qos dscp cs5 media
    no vad
    dial-peer voice 61 voip
    description **** WA, SA AND NT NUMBERS ****
    destination-pattern 0[8]........
    session protocol sipv2
    session target ipv4:<MY SP's SIP SERVER>
    incoming called-number 0[8]........
    dtmf-relay rtp-nte
    codec g711alaw
    ip qos dscp cs5 media
    no vad
    dial-peer voice 81 voip
    description **** MOBILE NUMBERS ****
    destination-pattern 0[4]........
    session protocol sipv2
    session target ipv4:<MY SP's SIP SERVER>
    incoming called-number 0[4]........
    dtmf-relay rtp-nte
    codec g711alaw
    ip qos dscp cs5 media
    no vad
    dial-peer voice 500 voip
    description *** INBOUND SIP TRUNK TO CUCM PUB ***
    translation-profile outgoing SIPTRUNK-CALLING-ADD-0
    preference 1
    destination-pattern 5[12]..
    session protocol sipv2
    session target ipv4:<OUR CUCM PUBLISHER IP>
    dtmf-relay rtp-nte
    codec g711alaw
    ip qos dscp cs5 media
    no vad
    Any help or a point in the right direction would be greatly appreciated.
    Cheers,
    Brett

    I ended up resolving this issue as follows:
    In CUCM, under Device > Device Settings > SIP Profile.
    I modifed the profile relevant to my SIP trunk, under the "Trunk Specific Configuration", I set "SIP Rel1XX Options" from "Disabled" to "Send PRACK if 1xx Contains SDP".
    Now, I get the expected delay before hearing ringback.
    Solved!

Maybe you are looking for

  • Unable to connect to WebLogic from JBuilder 11.1.1.4

    Hi, Just spent a few hours fuming over this, then solved it, thought I'd share it to hopefully save pain and hopefully someone will fix it! 1. Created a SOA/BPM app in JBuilder 2. Got to the point where I want to map BPM swim lane roles to WebLogic u

  • Placing a Logo GIF above the MenuBar in a JFrame

    Hi.. I am trying to place a logo image (GIF) in the main frame (JFrame) of my application. I wish to have this image placed above the Menubar and below the Titlebar. I have set the Menubar using the setJMenuBar() method of JFrame. I have no idea how

  • Custom Styles in TextEdit - Background Highlighting

    Hi, I defined a custom/'favorite' style for use in TextEdit which applies yellow background highlighting to selected text. (The style was added to the GlobalPreferences.plist file, as I'm on Snow Leopard). The issue is that when I highlight text and

  • Subclassing NSControl or NSView

    Hi, I have written an extension to an open source application which has a widget that is subclassing NSControl. This all worked fine on Tiger. In Tiger I could override setTarget and setAction and hook my control up to the main File Owner using the c

  • Fit Canvas to Image - larger or smaller

    I have hundreds of images being replaced with new versions that are slightly larger. Each is being opened in PS and the new image pasted in. I want to resize the canvas ... a single command, not get info a entering numbers ... to the now larger image