VoIP on 2522 router

hi dears. I am begineer. Pls tell me that is it possible to implement VoIP solutions over cisco 2522 series routers. I mean this series support this configurations for VoIp.

The 2522 doesn't have any DSP's or voice ports.
Sorry to disappoint you, but apart from routing IP traffic which could include VOIP packets, it won't specifically do VOIP.

Similar Messages

  • VoIP and Efficient Routing

    We have bandwidth that services both data and VoIP (carrier-grade).
    What can we do to try and make efficient use of that bandwidth so we
    can prioritize (or more efficiently usher) VoIP packets out of the door?

    You need to configure the voice gateway so that it will prioritize the voice traffic over the data traffic. You need to configure QoS for that. Here is the link which will help you to configure that based on the link type.
    http://www.cisco.com/univercd/cc/td/doc/cisintwk/intsolns/qossol/qosvoip.htm

  • VoIP router + Time Capsule

    Hi All,
    I'm considering to buy a Time Capsule in the next couple of days but before doing so I'd like to know if it's compatible to my current setup.
    I currently have:
    - VoIP+ADSL2 wired router (say 192.168.0.1)
    - Airport Express (currently used as 802.11g access point) (say 192.168.0.2)
    All Macs and PCs on the WLAN don't use DHCP and they all have 192.168.0.1 setup as default DNS Therefore all port forwarding is setup on 192.168.0.1.
    My idea was to connect my Time Capsule as 192.168.0.2, change Airport Express IP to 192.168.0.x and use it just with my AirTunes.
    I was wondering will this setup anyhow affect 802.11n bandwidth? Will my WLAN be able to operate with certain IPs as 802.11g (like my PC or PS3) and with some others 802.11n flawlessly (like my MacBook)?

    Your description really sounds more complicated than necessary. Here's my setup..
    Cable modem <-> Time Capsule router as a DHCP device <-> and an iMac, MBP, MBP, and Vonage VOIP adapter as peers over a gigabit Ethernet and a 802.11n/g wireless network.
    Alternatively, you can run your TC wireless network simultaneous with another AE wireless network. Just select the AE from any one of yours computers when you want to play iTunes.
    Note: I use Vonage VOIP within my environment. iChat and Vonage VOIP are both SIP aware therefore you should keep both devices as peers to one another.

  • G4 Cube + wireless router.... help again please?

    PowerMac 5.1
    CPU Power PC G4(29) 450MhZ
    L2 Cache 1mb
    RAM 576mb
    Bus speed 100mHz
    OS 10.4.11
    Hi all, thanks to all those who've offered advice on my plight last month, see
    http://discussions.apple.com/thread.jspa?threadID=2494010
    We have a http://www.billion.com/product/voip/bipac7404vgp-voip-wireless-firewall-router.h tml
    We run a PC (usb dongle),and an old lap-top (wireless card built-in) with the router.
    Could anyone tell me if this router is compatible with my Mac/Airport card and/or USB dongle?
    I have now bought an 'original' airport card which after fitting shows up in the hardware list in 'about this mac'. Fiddling around (a little knowledge is a dangerous thing) with 'Internet Connect' there appears to be a signal (the row of squares turn blue when I 'Apply now' in Network).
    The G4 Cube however doesn't show up on the list (MAC address) of candidates on the router (where the USB dongle did).
    I downloaded a couple of applications which scan for available wireless networks but nothing showed as being available.
    Tearing my hair out - if I had any!!
    Steve

    Hi again Steve,
    It should work if the Router allows 802.11b, which I only see 802.11g listed.
    The G4 Cube however doesn't show up on the list (MAC address) of candidates on the router (where the USB dongle did).
    You have to put the Cube's MAC addy in the Router. To find the Airport's MAC addy...
    At the Apple Icon at top left>About this Mac.
    Then click on More Info>Network, click on Airport on the top right, scroll the bottom pane down until you see...
    Ethernet:
    MAC Address: (six digit MAC addy)

  • Access Layer Routing

    Hello everyone,
    We're running on a collapsed core network design and I'm looking to move routing down to the access layer.  I've attached a sample diagram of a small portion of the overall network to give you an idea of how things are connected.  Currently, all routing, ACLs, multicast, etc. is being handled in the core.  I would like to move as much of this down to the access layer as possible.  The problem I'm faced with is our phone system (non-Cisco).  We have two PBXs that are not running in an HA configuration and are in their own VLANs with routing between them.  We have phones that are registered to both PBXs that are physically located throughout our campus.  I'm afraid that if I move routing down to the access layer, I'm gonna lose communications between the phones and the VoIP system since traditional routing won't allow me to have the same subnet in two different locations for the same infrastructure.  The only thing I can think of is possibly establishing EIGRP neighbors for the phone network and then NAT'ing the phones behind their gateway.  Can someone shed some light on some real-world workable solutions?
    Thanks!
    TLock

    I have just typed out probably the longest answer I have ever done and this stupid website just errored on me and I lost it :-)
    So basically you make the uplinks trunks and for each access switch you need two new vlans unique to that switch ie. you cannot reuse these vlans on other access switches. 
    You then emulate point to point links using SVIs to peer on instead of L3 routed links.
    On the trunk link you only allow the new vlans + the VOIP vlan eg. access switch connects to core1 and core2. New vlans are 3 & 4.
    Create new vlans on access switch and vlan 3 on core 1, vlan 4 on core 2 plus the corresponding SVIs. You only need two useable IPs per vlan. So -
    uplink to core 1 -> allowed vlans = vlan 3 + VOIP vlan
    uplink to core2 -> allowed vlans = vlan 4 + VOIP vlan
    Then you peer with a dynamic routing protocol between access switch and the core switches using the SVI IPs.
    All vlans (except the VOIP vlan) are routed locally and for remote subnets they use the new vlans as transit.
    Key thing is to only allow the vlans that need to be allowed on the trunk links and basically you have emulated using point to point links but using SVIs.
    The main downside is you need two new vlans per access switch. This means a lot of new vlans on the core where you may hit STP issues if you are running a variant of PVST. Note I'm assuming all core switches will be L3 interconnected so STP isn't doing anything except for the VOIP vlan but it should still be running.
    The VOIP vlan would have to be routed in the core. Which means if you want HSRP for it you need to run separate L2 links between the switches (in addition to the L3 links). The L2 links would be access ports in the VOIP vlan.
    Finally, and this applies even if you had L3 routed links ie. you didn't need to span the VOIP vlan across multiple switches, you are not necessarily going to get the best use of your uplinks because you have three core switches eg.
    ESW02 connects to CSW01 and CSW02
    ESW05 connects to CSW02 and CSW03
    that means for subnets on ESW05, ESW02 is always going to see CSW02 as the best path because it is a shorter number of hops away.
    You could play with the metric to influence this but it is not ideal ie. if you only had two core switches this would not be a problem and each access switch would see equal cost paths.
    But I suspect you cannot simply go down to two core switches.
    Let me know what you think ie. queries, doubts, just don't like the idea :-)
    Jon

  • Advanced Filtering on New Quantum Router

    Unlike the old actiontech router, the new quantum router has seems to have no way for advanced filtering.  How do I adjust the advanced filtering settings?  I have a VoIP line the router is interfearing with.

    I just spent about an hour and a half trying to explain my issue and the Verizon tech connected me with the Quantum router tech. He informed me that currently there is no way to restrict inbound access to a port forwarding rule. He said, its possible that the feature may be added via a firmware update in the future but could not give me a date or even when to expect one. The Verizon tech said he would call me back in 24 hours with any information he could gather but I may end up switching back to the Actiontec MI424WR Rev1 as it still supports 75/75 and the features I use. I open an SSH tunnel from work to a PC on my internal network at home for testing purposes and I don't want every IP on the Internet to have access. I'll update this post when I hear from the verizon tech tomorrow.

  • WRT54G Versions 5/6 with VoIP

    Been using a Linksys WRT54G version 5 for sometime but just started using it to transport VoIP (ATA is Linksys PAP2). Unfortunately, every 3-4 minutes especially if on the phone, I will lose wireless and wired internet connectivity (and obviously my phone call). During this time the router's power light blinks for 5-10 seconds, then it recovers and everything works fine. I followed all the tech support suggestions and was already running the latest firmware (v1.09) for this device and still it always does this reset thing. I've reflashed, reset, etc.. several times with the same result. Finally Linksys said I could send it in under warranty coverage.
    So I could get back up and running quickly I went to the store and bought a new WRT54G, which is a version 6 of the router. I was shocked to find out it was not an issue with the hardware, as this router (also loaded with v1.09 firmware) has the same problem. I happened to have an old Microsoft MN-500 wireless router in the closet and plugged that in, and it's been up and solid since. I guess unless anyone has any suggestions, I just wanted to let Linksys and everyone else know (as their tech support people don't seem to be able to pass message up the chain) that there is a problem with V1.09 and VoIP. The router seems to be overwhelmed by the VoIP traffic or something and just continously cycles.

    I've only had this router for 7 days.  I can just take it back to Office Depot and try another router or even another manufacturer.
    I'm also having DHCP problems with this thing out the wazoo, so I'm about at the point of saying to hell with it with this router.

  • Routing incoming calls from outside

    Hello everyone. I am new at Cisco VOIP and i need some help.
    I manage to create VoIP on my router C2911 and i have 3 IP phones. I have one voice port that is conected to my country telekom(ground line whose number iz YYYYYY). My phones have 3 digits extensions. Example 222, 333 and 444. They can call each other localy. I configured dial peer pots, and when i make call from my IP phone to my cell phone it goes through voice port, and on my cell phone is shown that the ID of the caller is YYYYYY.
    Now i want to configure that when i call from my cell number YYYYYY, router "answers" and ask me what extension do i want and when i type on my cell 222, my IP phone with that extension needs to ring.
    Did anyone had same thing to configure?
    All the best.

    Hello
    If i understand your question correctly. You will need to enable as AA "auto attendant" to help any incoming call . For example 0 for operator , if yu know the extension press 1. You have two methods :-
    1-CUE :is a module (SRE Module) which added to  your Cisco router . This module is HW should be purchased by your account manager or by the distributor which you deal with. Configuration is so simple as the below link
    http://www.cisco.com/en/US/products/sw/voicesw/ps5520/products_configuration_example09186a00803f82eb.shtml
    2-If there is no budget , use B-ACD is a TCL and you can download required files from Cisco site if these files not on your flash. Please find the below link for B-ACD configuration
    http://www.cisco.com/en/US/docs/voice_ip_comm/cucme/bacd/configuration/guide/40tclov.html
    Thanks
    Please rate all useful information

  • Getting 413 errors on a 5505 firewall.

         I am very new to Cisco 5505 firewalls and have been trying to troubleshoot a VPN connectivity issue over the past few days. Recently the AT&T router was tested and nothing is being blocked from it. Since I do not know much about the firewall, I am unsure if there is an issue with the config or if the problem lies elsewhere. When I initially log in into the firewall I noticed that the DMZ interface shows Line down, Link down. The other interfaces, inside and outside, both show up, up. I am not sure if the DMZ should show down, down or not. I was not the tech that set this firewall up so checking the config really does not tell me much as I am unfamiliar with what I am looking at. The config has been posted below. Any help would be greatly appreciated!!
    : Saved
    ASA Version 8.2(5)
    hostname xxxfw01
    domain-name xxxxxx.lcl
    enable password zgDyB1JJR5jIt22C encrypted
    passwd 5nswNE6Ndj.ogXD4 encrypted
    names
    name 192.168.1.30 ideacom-adtran-router
    name 12.179.58.67 outside-voip
    name 10.0.4.0 inside-secondary
    name 10.0.0.0 inside-primary
    name 12.179.58.68 outside-secondary1
    name 12.179.58.69 outside-secondary2
    name 12.179.58.70 outside-secondary3
    name 192.9.200.0 inside-old
    name 12.179.58.71 outside-secondary4
    name 12.179.58.72 outside-secondary5
    name 12.179.58.73 outside-secondary6
    name 12.179.58.74 outside-secondary7
    name 12.179.58.75 outside-secondary8
    name 12.179.58.126 outside-web-server
    name 12.179.58.76 ouside-secondary9
    name 12.179.58.77 outside-secondary10
    name 12.179.58.78 outside-secondary11
    name 12.179.58.79 outside-secondary12
    interface Ethernet0/0
    switchport access vlan 2
    interface Ethernet0/1
    switchport access vlan 2
    interface Ethernet0/2
    interface Ethernet0/3
    interface Ethernet0/4
    interface Ethernet0/5
    switchport access vlan 2
    interface Ethernet0/6
    switchport access vlan 2
    interface Ethernet0/7
    switchport access vlan 3
    interface Vlan1
    nameif inside
    security-level 100
    ip address 10.0.1.11 255.255.255.0
    ospf cost 10
    interface Vlan2
    nameif outside
    security-level 0
    ip address 12.179.58.66 255.255.255.192
    ospf cost 10
    interface Vlan3
    no forward interface Vlan1
    nameif dmz
    security-level 50
    ip address 192.168.1.10 255.255.255.0
    ospf cost 10
    pim accept-register list PIM_ACCPTREG_ACL
    banner motd ATTENTION:
    banner motd You are about to log into a private network. Unauthorized access is strictly prohibited.
    banner motd Any attempts to do so will result in prosecution to the fullest extent of the law.
    banner asdm ATTENTION:
    banner asdm You are about to log into a private network. Unauthorized access is strictly prohibited.
    banner asdm Any attempts to do so will result in prosecution to the fullest extent of the law.
    boot system disk0:/asa825-k8.bin
    ftp mode passive
    clock timezone CST -6
    clock summer-time CDT recurring
    dns domain-lookup inside
    dns server-group DefaultDNS
    name-server 10.0.2.106
    name-server 10.0.2.57
    domain-name xxxxxxx.lcl
    same-security-traffic permit inter-interface
    same-security-traffic permit intra-interface
    object-group network outside-ideacom-voip
    network-object host 204.14.39.36
    network-object host 204.16.49.4
    network-object host 204.16.53.4
    network-object host 204.16.57.4
    object-group service ideacom-tcp-voip tcp
    port-object range h323 1728
    port-object range sip 5061
    object-group service ideacom-udp-voip udp
    port-object range 1024 65535
    object-group network outside-secondary-range
    network-object host outside-secondary1
    network-object host outside-secondary2
    network-object host outside-secondary3
    network-object host outside-secondary4
    object-group icmp-type DM_INLINE_ICMP_1
    icmp-object echo
    icmp-object echo-reply
    access-list PIM_ACCPTREG_ACL extended permit ip 12.179.58.64 255.255.255.192 10.0.1.0 255.255.255.0 inactive
    access-list inside_nat_outbound extended permit ip inside-secondary 255.255.255.0 any
    access-list outside_access_in extended permit tcp object-group outside-ideacom-voip host ideacom-adtran-router object-group ideacom-tcp-voip inactive
    access-list outside_access_in extended permit udp object-group outside-ideacom-voip host ideacom-adtran-router object-group ideacom-udp-voip inactive
    access-list outside_access_in extended permit icmp any any object-group DM_INLINE_ICMP_1
    access-list xxxxxxx-VPN_splitTunnelAcl standard permit inside-primary 255.255.0.0
    access-list inside_nat0_outbound extended permit ip inside-primary 255.255.0.0 10.1.1.0 255.255.255.0
    access-list DefaultRAGroup_splitTunnelAcl standard permit inside-primary 255.255.0.0
    pager lines 24
    logging enable
    logging asdm informational
    mtu inside 1500
    mtu outside 1500
    mtu dmz 1500
    ip local pool VPN-Pool 10.1.1.1-10.1.1.253 mask 255.255.255.0
    ip verify reverse-path interface outside
    icmp unreachable rate-limit 1 burst-size 1
    asdm image disk0:/asdm-631.bin
    no asdm history enable
    arp timeout 14400
    global (outside) 2 outside-secondary1-outside-secondary12 netmask 255.0.0.0
    global (outside) 1 interface
    nat (inside) 0 access-list inside_nat0_outbound
    nat (inside) 2 access-list inside_nat_outbound norandomseq
    nat (inside) 1 inside-primary 255.255.0.0
    static (dmz,outside) outside-voip ideacom-adtran-router netmask 255.255.255.255 norandomseq
    access-group outside_access_in in interface outside
    route outside 0.0.0.0 0.0.0.0 12.179.58.65 1
    route inside inside-primary 255.255.0.0 10.0.1.10 1
    timeout xlate 0:20:00
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    timeout floating-conn 0:00:00
    dynamic-access-policy-record DfltAccessPolicy
    aaa-server RADIUS protocol radius
    aaa-server RADIUS (inside) host 10.0.2.106
    key *****
    aaa authentication telnet console LOCAL
    aaa authentication ssh console LOCAL
    http server enable
    http inside-primary 255.255.0.0 inside
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    snmp-server enable traps entity config-change
    crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
    crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
    crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
    crypto ipsec transform-set TRANS_ESP_3DES_SHA esp-3des esp-sha-hmac
    crypto ipsec transform-set TRANS_ESP_3DES_SHA mode transport
    crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
    crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
    crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
    crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
    crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
    crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
    crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
    crypto ipsec security-association lifetime seconds 28800
    crypto ipsec security-association lifetime kilobytes 4608000
    crypto dynamic-map outside_dyn_map 20 set pfs
    crypto dynamic-map outside_dyn_map 20 set transform-set ESP-AES-128-SHA ESP-3DES-SHA
    crypto dynamic-map outside_dyn_map 20 set reverse-route
    crypto dynamic-map outside_dyn_map 40 set pfs group1
    crypto dynamic-map outside_dyn_map 40 set transform-set TRANS_ESP_3DES_SHA
    crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
    crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
    crypto map outside_map interface outside
    crypto map dmz_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
    crypto map dmz_map interface dmz
    crypto ca server
    shutdown
    crypto isakmp enable outside
    crypto isakmp enable dmz
    crypto isakmp policy 10
    authentication pre-share
    encryption aes
    hash sha
    group 2
    lifetime 86400
    crypto isakmp policy 20
    authentication pre-share
    encryption 3des
    hash sha
    group 2
    lifetime 86400
    telnet timeout 5
    ssh inside-primary 255.255.0.0 inside
    ssh timeout 5
    ssh version 2
    console timeout 10
    dhcpd auto_config outside
    threat-detection basic-threat
    threat-detection statistics host
    threat-detection statistics access-list
    threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
    ntp server 76.169.237.141 source outside
    ntp server 69.31.13.15 source outside
    ntp server 66.187.224.4 source outside
    ntp server 10.0.2.106 source inside prefer
    ntp server 75.13.24.211 source outside
    ntp server 216.70.13.134 source outside
    ntp server 66.102.105.230 source outside
    ntp server 207.5.137.134 source outside
    ntp server 66.93.39.87 source outside
    ntp server 63.111.165.21 source outside
    ntp server 67.52.51.34 source outside
    ntp server 72.25.103.52 source outside
    ntp server 72.3.133.147 source outside
    ntp server 72.1.138.113 source outside
    ntp server 68.227.90.101 source outside
    webvpn
    group-policy DefaultRAGroup internal
    group-policy DefaultRAGroup attributes
    dns-server value 10.0.2.106 10.0.2.56
    vpn-tunnel-protocol l2tp-ipsec
    split-tunnel-policy tunnelall
    split-tunnel-network-list none
    default-domain value xxxxxxx.lcl
    group-policy DfltGrpPolicy attributes
    group-lock value DefaultWEBVPNGroup
    group-policy xxxxxxx-VPN internal
    group-policy xxxxxxx-VPN attributes
    dns-server value 10.0.2.106 10.0.2.56
    vpn-tunnel-protocol IPSec
    split-tunnel-policy tunnelspecified
    split-tunnel-network-list value xxxxxxx-VPN_splitTunnelAcl
    default-domain value hlgroup.lcl
    username hlgvpn password GAfBJJMk5EnKUdM+KyBXfQ== nt-encrypted
    username hlgvpn attributes
    vpn-group-policy DefaultRAGroup
    username admin password tU0js1787OyO3ldQ encrypted privilege 15
    tunnel-group DefaultRAGroup general-attributes
    address-pool VPN-Pool
    default-group-policy DefaultRAGroup
    tunnel-group DefaultRAGroup ipsec-attributes
    pre-shared-key *****
    tunnel-group DefaultRAGroup ppp-attributes
    authentication pap
    authentication ms-chap-v2
    tunnel-group xxxxxxx-VPN type remote-access
    tunnel-group xxxxxxx-VPN general-attributes
    address-pool VPN-Pool
    authentication-server-group RADIUS
    default-group-policy xxxxxxx-VPN
    password-management
    tunnel-group xxxxxxx-VPN ipsec-attributes
    pre-shared-key *****
    tunnel-group xxxxxxx-VPN ppp-attributes
    no authentication chap
    no authentication ms-chap-v1
    class-map inspection_default
    match default-inspection-traffic
    policy-map global_policy
    class inspection_default
    inspect ftp
    inspect h323 h225
    inspect h323 ras
    inspect rsh
    inspect rtsp
    inspect esmtp
    inspect sqlnet
    inspect skinny
    inspect sunrpc
    inspect xdmcp
    inspect netbios
    inspect tftp
    inspect icmp
    inspect icmp error
    inspect ctiqbe
    inspect dcerpc
    inspect dns
    inspect ils
    inspect ipsec-pass-thru
    inspect mgcp
    inspect pptp
    inspect snmp
    inspect waas
    inspect sip
    inspect ip-options
    service-policy global_policy global
    prompt hostname context
    call-home
    profile CiscoTAC-1
    no active
    destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
    destination address email [email protected]
    destination transport-method http
    subscribe-to-alert-group diagnostic
    subscribe-to-alert-group environment
    subscribe-to-alert-group inventory periodic monthly
    subscribe-to-alert-group configuration periodic monthly
    subscribe-to-alert-group telemetry periodic daily
    Cryptochecksum:ca21fc44d2f9d0485564fb474bceeb51
    : end
    asdm image disk0:/asdm-631.bin
    asdm location ideacom-adtran-router 255.255.255.255 inside
    asdm location outside-voip 255.255.255.255 inside
    asdm location outside-secondary1 255.255.255.255 inside
    asdm location inside-secondary 255.255.255.0 inside
    asdm location inside-primary 255.255.0.0 inside
    asdm location outside-secondary2 255.255.255.255 inside
    asdm location outside-secondary3 255.255.255.255 inside
    asdm location outside-secondary4 255.255.255.255 inside
    asdm location outside-secondary5 255.255.255.255 inside
    asdm location outside-secondary6 255.255.255.255 inside
    asdm location outside-secondary7 255.255.255.255 inside
    asdm location outside-secondary8 255.255.255.255 inside
    asdm location outside-web-server 255.255.255.255 inside
    asdm location ouside-secondary9 255.255.255.255 inside
    asdm location outside-secondary10 255.255.255.255 inside
    asdm location outside-secondary11 255.255.255.255 inside
    asdm location outside-secondary12 255.255.255.255 inside
    no asdm history enable

    Has this VPN setup ever worked prior to you taking over?  If so, do you know of any changes that have been don't to the firewall configuration that could possibly have caused the issue?
    Another thing to check out is why the DMZ interface is enabled for VPN.
    I suggest making the following change and then test to see if the VPN comes up
    no crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
    crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
    If that solves the problem, next I would check your company's security policy to see if they require a Diffie Hellman group to be used during phase 2 of the VPN setup.
    Please remember to select a correct answer and rate helpful posts

  • Matching B-channel for dialpeer assigment (Incoming call)

    Is it possible to manipulate a specific B Channel to use a dialpeer? For example on a T1 with 24 channels, I need the last 4 B-channels to choose an specific dialpeer, same concepts as matching incoming DID's but on a B-Channel slot.
    If a call arrives on B-channel 20, I need that call to be sent to a specific DN at the CallManager.
    I am using H.323 on the gateway side.
    thanks in advanced.
    Oscar

    Hi!
    I'm stuck in a similar situation at the moment, and hope someone has solved this issue.
    I have a "back to back connection" between two PBX'es that communicate using Q.931. I have had to replace my old hardware running a legacy CCS solution due to its incapability of understanding overlap signalling. I have replaced it with two Cisco routers running E1 (Q931). Between the units I have a high latency low bandwidth network.
    The issue is that the PBX'es are configured in a way that requires calls between the PBX'es to use the same time slot at both ends. I'm running a VoIP network with CUCM between the two sites.
    =============================================
    controller E1 0/2/0
    framing NO-CRC4
    pri-group timeslots 1-21
    trunk-group TS01 timeslots 1
    trunk-group TS02 timeslots 2
    trunk-group TS03 timeslots 3
    trunk-group TS04 timeslots 4
    trunk-group TS05 timeslots 5
    trunk-group TS06 timeslots 6
    trunk-group TS07 timeslots 7
    trunk-group TS08 timeslots 8
    trunk-group TS09 timeslots 9
    trunk-group TS10 timeslots 10
    trunk-group TS11 timeslots 11
    trunk-group TS12 timeslots 12
    trunk-group TS13 timeslots 13
    trunk-group TS14 timeslots 14
    trunk-group TS15 timeslots 15
    trunk-group TS17 timeslots 17
    trunk-group TS18 timeslots 18
    trunk-group TS19 timeslots 19
    trunk-group TS20 timeslots 20
    trunk-group TS21 timeslots 21
    dial-peer voice 81030001 pots
    trunkgroup TS01
    description ** PBX TS01 **
    translation-profile incoming 61031401
    translation-profile outgoing 25
    destination-pattern 81030001T
    progress_ind alert enable 8
    progress_ind progress enable 2
    incoming called-number .
    no digit-strip
    dial-peer voice 81030002 pots
    trunkgroup TS02
    description ** PBX TS02 **
    translation-profile incoming 61031402
    translation-profile outgoing 25
    destination-pattern 81030002T
    progress_ind alert enable 8
    progress_ind progress enable 2
    incoming called-number .
    no digit-strip
    voice translation-rule 25
    rule 1 /^810300../ //
    voice translation-rule 61031401
    rule 1 // /61031401\1/
    voice translation-rule 61031402
    rule 1 // /61031402\1/
    voice translation-profile 25
    translate called 25
    voice translation-profile 61031401
    translate called 61031401
    voice translation-profile 61031402
    translate called 61031402
    =====================================
    The idea is that I do not know (or care) what numbers are used as SOURCE or DESTINATION of the original call. My network should be transparent to the PBX number plan. I need to add a prefix, and it should be based on the timeslot the call comes in on. I route the traffic between the routers using the prefix.
    The configuration excerpt above should add 61031401 prefix to all calls entering on TS01, and 61031402 to all calls entering on TS02 etc. Calls from the remote should have corresponding prefixes 81030001 for TS01 and 81030002 for TS02 etc.
    The outbound (from voip to pots) routing of the above configuration works.
    However I have a challenge with the incoming prefixing.
    All calls inbound end up using "dial-peer 81030001 pots".
    I believe the reason this dial-peer "takes" all of the calls inbound from pots is due to the line "incoming called-number ."
    Removing this makes no inbound pots call work as the "destination-pattern 8103001T" is never matched.
    Removing "destination-pattern 8103001T" from the dial-peer is not working as it kills the voip to pots routing of inbound calls from the remote router.
    Anyone got a good idea for me?

  • For all those with D-Link routers and problems with iTunes dropping AppleTV

    My setup: Custom built WinXP PC with iTunes 7.6.2. Apple TV w/Take 2. D-link DI-624 wireless N router, wired to the PC, wireless to the aTV.
    I have an intersting phenomenon occuring with my Apple TV. I can sync the aTV to my PC and it works fine, but the first time we receive a phone call on our VOIP phone, the router drops the ATV connection to the PC. aTV still has internet connectivity, but iTunes on the PC cannot see the aTV, and I cannot sync.
    A search yielded gobs of folks with D-link routers and iTunes/AppleTV connection issues. I just won an Airport Extreme router off ebay...as soon as I have a chance to test it out I will post back in this thread as to the results.
    I know folks don't like the solution to be "spend more money", but I think it would be worth it to a lot of people if they knew a different router would solve their issues (rather than continuing to guess or throw money at the problem randomly).

    I have a WinXP PC and a Linksys G class router. I am on Comcast broadband cable. Both ATV and PC are on wireless link. And I have tried a borrowed Apple Airport router (G class). That didn't help resolve this problem so far. I don't think it is a router issue as you will see that many folks on this forum have the same problem with a wide mix of environments. Many of them are on pure Apple components and so one cannot blame Microsoft and non-Apple devices.
    Having said this, I hope the new router resolves your issues. In my case, the only option left is to keep calling Apple Care.

  • Interzone communication with local defined zones

    We have defined two local zones. The internal zone allows only to register from an private network. The other zone allows to register clients from all other zone. The gatekeeper is accessible through static nat from the outside.
    Netmeeting clients from the different networks are registered in the right zone. Clients in the same zone can talk eachother. If we try to connect to an user in the other zone, we get a message that the specified user is not registerd in any zone.
    Our question: How can users from one zone see other users in the other zone, and how can they connect ? Should the h323-id of the client have a suffix like the zone name?
    gatekeeper
    zone local internal internal.net 10.x.x.x
    zone local external external.net
    zone subnet internal 10.x.x.x/24 enable
    no zone subnet internal default enable
    no zone subnet external 10.x.x.x/24 enable
    zone subnet external default enable
    .use-proxy internal remote-zone external inbound-to terminal
    use-proxy internal remote-zone external outbound-from terminal
    no shutdown
    Further the proxy function between the terminals of both zone is activated. the proxy interface is defined on the physical interface.

    Some of these cisco documents could help you solve the problem.
    Basic Two Zone Gateway - Gatekeeper Configuration
    http://www.cisco.com/warp/public/788/voip/2zone_gw_gk.html
    Configuring Basic Gatekeeper Call Admission Control
    http://www.cisco.com/warp/public/788/voip/add_control_gk.html
    Understanding Cisco IOS H.323 Gatekeeper Call Routing
    http://www.cisco.com/warp/public/788/voip/gk-call-routing.html
    Configuring a Cisco IOS H.323 Gateway for Use with Cisco CallManager
    http://www.cisco.com/warp/public/788/AVVID/config_h323_ccm.html

  • More error -8 issues - Linksys BEFSR41 to Airport Express

    Hey there, I hope you guys can help b/c I am having a heck of a time with this. I'm having Error-8 issues with my ichat AV 3.1 despite numerous changes. Here's the setup.
    Motorola cable modem-->Linksys BEFSR41 wired router-->Airport Express and Vonage VOIP conected to router.
    Imac Intel 2 GHZ 20" and MBP CD 2.16GHZ both running Tiger 10.4.10
    Router setup: DHCP enabled (Obtain IP automatically, all port forwarding ports opened as per Ralph's numerous posts. Disabled DMZ, Disabled UPnP b/c Airport Express does not support (Even though the router CAN use UPnP). MTU enabled 1492
    Comcast Cable: I called them and they do not give out DNS's for setting up static IP addresses.
    Router IP: 192.168.1.1
    DHCP starting IP: 192.168.1.100
    Range: 192.168.1.100 - .149
    Subnet 255.255.255.0
    Airport Express setup:
    Internet tab: Using DHCP
    IP address: 192.168.1.102
    DNS Server: 68.87.85.98, and (in grey next to it) 68.87.69.146
    WPA2 Personal Security
    Network tab: "Distribute IP addresses" DISABLED
    Port mapping, Access control, and WDS tabs all left blank.
    Imac Network Prefs:
    Airport connected to internet
    IP Adddress: 168.192.1.101 Using DHCP
    Mac Firewall OFF
    Quicktime Prefs: Set to 1.5 MBPS T1/ Internet LAN
    iChat Prefs: AIM port set to 443 b/c of Vonage. Bandwidth set to NONE.
    MBP Network prefs:
    Airport connected to internet
    IP Adddress: 168.192.1.100 Using DHCP
    Mac Firewall OFF
    Quicktime Prefs: Set to 1.5 MBPS T1/ Internet LAN
    iChat Prefs: AIM port set to 443 b/c of Vonage. Bandwidth set to NONE.
    Main issues.... error -8 when trying to video or audio chat. Tested with appleu3test03= NO GO with Intel iMac but MBP works! Tried vid chat with brother and NEITHER WORK.
    I cannot figure out what is going on but I think it is the router. Problems started when I switched to Linksys from netgear. Could it be that I need to just pony up and get an Airport Extreme so that I can utilize UPnP? Or am I missing something.
    Thanks in advance for the help.
    Pete
    iMac Intel and MBP   Mac OS X (10.4.10)  

    Hi,
    I would renumber the devices radiating out from the router (192.168.1.1)
    Airport 192.168.1.100
    Computer one 192.168.1.101
    Computer two 192.168.1.102
    It's not a big thing but I prefer it in case the power goes off or things needs rebooting. And it points to the order of things
    The Airport doing NO Distributing Addresses should allow UPnP to work. It's just a dumb Wireless Access Point now.
    Otherwise if you are doing Port Forwarding it will be to only one Computer and only Text chatting will work on both due to the 443 port being below 1024(NAT)
    If the Airport is not allowing UPnP then I would go for Port Triggering if your Linksys does it.
    Some BEFS41 versions do. I have linked yo to the lowest version listed on the Port Forward site's Triggering pages.
    Don't worry too much about the PC app they say you need.
    Fill in the Trigger port at the top and without hitting enter scroll down to see how that effects the table.
    Then set it up like this
    This pic shows Port 5190 and the AV ports
    You will need to add the Bonjour Ports (5297, 5298 and 5353) and Jabber ones (5220, 5222, 5223) as single lines like the port 5190
    On My Linksys you did not have to specify Protocols. Nor do you on the link above.
    As you have gone Static (router to Airport) you could try allowing the Airport to do Distributing Addresses as the Subnet problem will have been dealt with and the NAT issue will be more linear.
    The Vonage device will have conflict on port 5060 (In fact 5060-5063) with iChat if In-Line between the computers and the Modem. Your set up suggests that this is not the case and it should not be an issue.
    If by Brother you mean the other computer this will need the Bonjour Ports in both directions (5297, 5298 and 5353) to be able to work.
    Strangely this still needs the port 5060 and does contact the SNATMAP server according to my Little Snitch hence the reason for UPnP or Port Triggering for your LAN.
    2:09 PM Wednesday; July 11, 2007

  • E4200 - Keeps losing uPNP service

    The E4200 keeps losing uPNP service and I have to restart the router to correct it. Is there a fix for this?

    Is your router a version 1 or 2? Is the UPnP for gaming or VOIP to the router? Are you getting an error on the device/s that is using the UPnP service to the router? You might need to open ports on the router to fix the issue and aside from that updating its firmware to  the latest. You have to determine the correct ports that you need to open on the router though (port range forwarding). If you are not sure of what port numbers to forward or open on the router then call the vendor of the device/s you are having trouble with connecting.
    Setting up port range forwarding on Linksys wireless-N routers and gateways
    Manually upgrading the firmware of the Linksys wireless-N router

  • Sending and requesting parameter from IP IP GW to RADIUS

    Hello all
    i am new to IP IP gw and RADIUS. i have some doubts regarding the interaction between IP IP gw and RADIUS.
    if i wish to send some parameters like h323 billing-model on access accept message how i do this. similarly sending the credit time and credit amount
    i am using TCL 2.0 and free radius 1.1
    Thanks in advance
    Vignesh

    try this link for more information on h323 gatekeepar configuration
    http://www.cisco.com/warp/public/788/voip/gk-call-routing.html
    http://www.cisco.com/warp/public/788/voip/understand-gatekeepers.html

Maybe you are looking for

  • Unable to send mail on ipad

    I am unable to send email to a specific address from my iPad. I can send from iPhone and iMac this address. Any ideas.  Just updated all mobil devices to iOS 7.0.6 but the problem still exists.

  • Passing value from JSP to Action in Struts

    Hi, I am populating JSP page with rows retrieved from the database and represented as a List of Beans in forEach loop: <c:forEach var="list" items="${OperationsForm.OperationsList}"> <c:choose> <c:when test="${list.isCompleted =='Y'}" > <td width="10

  • Multiple slide show problems

    OK. Im really stuck here. I have made a slide show in Flash 8 using actionscript 2. Ive managed to succeed to a point. But I will tell you prblems and hopefully they can be solved here as Ive found no where on web that can. Problem1: I have a slide s

  • In contacts I put in my friend's e:mail as ...

    In Contacts I entered friend'E:mail correctly as ...Comcast.net and when I went to create an e: mail her address came up as ...@ aol.com Help!

  • [ANN] Databases, Portals, Web Services, and XML Integration Magic (Boston, July 29)

    Recently added to DCI's Corporate and e-Business Portals Conference: Databases, Portals, Web Services, and XML Integration Magic When: July 29, 2001, 9:00 AM - 5:00 PM Where: Hynes Convention Center, Boston http://www.dci.com/brochure/porbos/seminars