rss.livelink.posts-in-node

Re: WS-C2960XR Failover Timeout

NguyenHung2238 — Wed, 21 Apr 2021 00:27:16 GMT

Hi,

Both server and thin client are enable teaming for 2 network port Active-Active

And use port channel to connect cisco switch

interface Port-channel9
description Link To SGPSRYPAS-SW02-005 (51) FO Link
switchport trunk allowed vlan 351,352
switchport mode trunk
!
interface Port-channel11
description SRYTC-1153
switchport access vlan 351
switchport mode access
!
interface Port-channel12
description SRYTC-1154
switchport access vlan 351
switchport mode access

and Switch enable spanning tree:

spanning-tree mode rapid-pvst
spanning-tree portfast edge default
spanning-tree extend system-id

"Optimize for Motion and Video" option has disappeared

CompCoach — Wed, 21 Apr 2021 00:22:25 GMT

in Webex Meetings, the option to "Optimize for Motion and Video" when sharing no longer appears. Has this feature been deleted or is something wrong with my installation?

Any ideas?

Re: Community Live Event- Tour of the Real-Time Monitoring Tool

Snoogie2563 — Wed, 21 Apr 2021 00:10:55 GMT

Is there any chance this was recorded? I was really looking forward to it, but I missed it due to events going on at work

Re: How to use Endpoint Custom Attributes to control network access (DACL or VLAN)?

thomas — Wed, 21 Apr 2021 00:09:50 GMT

This is demonstrated with ISE ERS APIs :

Re: How to Move Floating Panel When Sharing Content

RedNectar — Tue, 20 Apr 2021 23:41:03 GMT

Hi LauraHesselberg43252,

I'd love to see a video on how you did this. It has me beaten. Maybe it's a feature that hasn't been implemented on macOS.

Re: Centralized Reporting for TrustSec SGACLs

Damien Miller — Tue, 20 Apr 2021 23:34:16 GMT

This is a pain to do on IOS/IOS-XE compared to the way we can modify each logs severity level on the ASA. You can potentially handle this through a tcl script to rewrite the severity level to 5, or another value of your choosing.

See this page for more information on the process.
https://flylib.com/books/en/2.286.1/modifying_log_messages.html

Re: RV345P Is Blocking TLS Traffic

db77 — Tue, 20 Apr 2021 23:29:55 GMT

Yes - sent via PM.

DHCP Pool on VLAN with PC fixed address

victorc7 — Tue, 20 Apr 2021 23:26:14 GMT

Hello,

I am trying to configure on a Catalyst 1000 switch a DHCP Server on network 192.168.1.0/24 with a fixed IP address of 192.168.1.10 for a PC Network with a specific MAC address.

Here is the steps I followed :

1) Type commands on Switch

conf t

ip dhcp pool 192.168.1.0
	network 192.168.1.0 255.255.255.0
	default-router 192.168.1.1
	exit

int vlan 1
	ip address pool 192.168.1.0
	exit

ip dhcp pool PC
	host 192.168.1.10
	hardware-address 01xx.xxxx.xxxx.xx
	exit

do sh ip dhcp pool

2) Check on Switch

Pool 192.168.1.0 :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 254
 Leased addresses               : 0
 Excluded addresses             : 1
 Pending event                  : none
 1 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.1          192.168.1.1      - 192.168.1.254     0     / 1     / 254

Pool PC :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 1
 Leased addresses               : 1
 Excluded addresses             : 1
 Pending event                  : none
 0 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.10         192.168.1.10     - 192.168.1.10      1     / 1     / 1

3) Type commands on Switch

do clear ip dhcp binding *

4) Type commands on PC

ipconfig /release && ipconfig /renew

No IP delivered

5) Type commands on Switch

do sh interfaces

6) Check

Vlan1 is up, line protocol is up
Hardware is EtherSVI, address is XXXX.XXXX.XXXX (bia XXXX.XXXX.XXXX)
Internet address will be autoconfigured from local DHCP pool
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:22:34, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 packets output, 0 bytes, 0 underruns
0 output errors, 2 interface resets
1704 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
GigabitEthernet1/0/1 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is XXXX.XXXX.XXXX (bia XXXX.XXXX.XXXX)
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:01:18, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 3000 bits/sec, 3 packets/sec
34620 packets input, 8502653 bytes, 0 no buffer
Received 4427 broadcasts (3590 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 3590 multicast, 0 pause input
0 input packets with dribble condition detected
62613 packets output, 37744232 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

7) Type commands on Switch

int gigabitEthernet 1/0/1
	shutdown
	no shutdown
	exit
	
do sh ip dhcp binding

Check

Bindings from all pools not associated with VRF:
IP address      Client-ID/              Lease expiration        Type       State      Interface
                Hardware address/
                User name
192.168.1.10     01xx.xxxx.xxxx.xx       Infinite                Manual     Selecting  Unknown

9) Type commands on PC

ipconfig /renew

No IP delivered

10) Type commands on Switch

ip dhcp pool 192.168.1.0
	network 192.168.1.0 255.255.255.0
	default-router 192.168.1.1
	address 192.168.1.10 hardware-address 01xx.xxxx.xxxx.xx

% Address 192.168.1.10 is not valid in this pool.

	exit

int vlan 1
	ip address 192.168.1.2 255.255.255.0
	exit

11) Type commands on PC

ipconfig /renew

=> Got 192.168.1.3

12) Type commands on Switch and Check

(config)#do sh ip dhcp binding

Bindings from all pools not associated with VRF:
IP address      Client-ID/              Lease expiration        Type       State      Interface
                Hardware address/
                User name
192.168.1.1      XXXX.XXXX.XXXX          Apr 22 2021 12:57 AM    Automatic  Active     Vlan1
192.168.1.3      01xx.xxxx.xxxx.xx       Apr 22 2021 12:58 AM    Automatic  Active     Vlan1
192.168.1.10     01xx.xxxx.xxxx.xx       Infinite                Manual     Selecting  Unknown

(config)#do sh ip dhcp pool

Pool 192.168.1.0 :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 254
 Leased addresses               : 2
 Excluded addresses             : 1
 Pending event                  : none
 1 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.4          192.168.1.1      - 192.168.1.254     4     / 3     / 254

Pool PC :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 1
 Leased addresses               : 1
 Excluded addresses             : 1
 Pending event                  : none
 0 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.10         192.168.1.10     - 192.168.1.10      1     / 1     / 1

So I have an IP address but not using the one that is matching to the correct fixed pool.

XGPON vs. 10G Switching Network in a very large campus network design competition

ezisaac — Tue, 20 Apr 2021 23:09:00 GMT

I am engaging a very large new smart campus (around 10 sqm, 20 large buildings, 2 train stations, multiple bus stations, and lots of audio visual devices) network design competition recently. Some system integrator proposed the Corning One GPON/XGPON as the network backbone to serve all business and applications there. I understand Cisco also has Catalyst PON product. However, I prefer our "3-tier" campus network architecture but I need your brain to help me fight back on the proposed XGPON solution.

Are there any good reasons that I may include those into my presentation to highlight the benefits and need of the 3-tier campus network architecture vs. the 2-tier GPON service model? Any comments or documents (I read the Lippis's study report before) are welcome.

Re: connect 1GB SFP on Catalyst 3750 to Mellanox SN 2100

Leo Laohoo — Tue, 20 Apr 2021 23:01:10 GMT

Reading the data/spec sheet for the Mellanox, the switch supports a minimum of 10 Gbps.

Re: Any way to add new moderators to a team if the original moderator is unavailable?

sknoop1971 — Tue, 20 Apr 2021 23:01:04 GMT

You can do this via the API: https://developer.webex.com/docs/api/v1/memberships/update-a-membership

If you have someone who is a full admin with the skills that should work. Otherwise, I would open a TAC case.

Re: WIFI 6 solution - Controller - licensing and support

Leo Laohoo — Tue, 20 Apr 2021 22:58:19 GMT

wrote:

Does Cisco Provide any cloud management for Wireless APs which eliminate the need of physical controller?

Cisco Mobility Express

Re: Bonjour traffic

akanarya — Tue, 20 Apr 2021 22:57:06 GMT

Infact I am not sure it is Bonjour or not

I didnt inspect the packet. All I see is a traffic to 224.0.0.251:5353.

But I didnt see any setting for mDNS or Avahi in my switch.

So I concentrated on Bonjour, maybe I am wrong.

Re: Configuration of C9105AXI

Spragm2570 — Tue, 20 Apr 2021 22:56:52 GMT

Thanks, but I've taken a look through a lot of material, and still can't figure it out. The WAP is undiscoverable on Cisco Air Provision and GUI and via IP, but I can successfully ping the WAP. Is there a step I am missing to enable the CiscoAirProvision-xxxx to make itself visible as a WIFI network?

Re: Team Meeting Timing Out/Ending?

sknoop1971 — Tue, 20 Apr 2021 22:54:39 GMT

As long as the host remains in the meeting, you should be fine. I have accidentally left meetings running overnight.

There are a couple of options to be aware of under Common Settings, but if the host is present, you should be good.

"Automatically end meetings if there is only one participant (Meetings, Training and Events)"

"When there is no host, automatically end the meeting after XXX"

Re: copy IOS from router to tftp : Error

Leo Laohoo — Tue, 20 Apr 2021 22:53:08 GMT

wrote:

%Error reading flash:c3750e-universalk9-mz.122-55.SE3 (Is a directory)

Please learn to read the error message. The error message is staring there in front of you.

Cisco classic IOS cannot copy the entire directory. You need to go into the directory and copy each file out.

Alternatively, you can archive the entire directory and copy the archive file.

The best method is to go to the Cisco website and download the file because you can verify if the file downloaded is corrupt.

Again, why would anyone go to this much trouble to download a very buggy 12.2(55)SE3 is, to say the least, amusing.

Re: Cisco CLI Analyzer RSA key verification failing everytime

Scott Hardin — Tue, 20 Apr 2021 22:52:29 GMT

Hi Luke. Thanks for using Cisco CLI Analyzer.

If you are on a Windows machine and these devices were working prior to version 3.6.7, it's likely due to the fact that we updated the version of ssh-keyscan included with Cisco CLI Analyzer in order to address some security vulnerabilities. With the upgrade of ssh-keyscan, several dated KEX Algorithms were deprecated and are no longer recognized as valid when doing the handshake for host key verification. This can pose a problem for older Cisco hardware.

We are planning to include a feature to bypass this warning automatically in release 3.6.8 of Cisco CLI Analyzer.

Re: The above-mentioned steps are

Carlos Rogerio Souza Santos — Tue, 20 Apr 2021 22:51:52 GMT

Thank you for sharing your experience with us after the move.

I appreciate

Re: # REGEX in CISCO iOS, iOS XE #

Leo Laohoo — Tue, 20 Apr 2021 22:47:33 GMT

"grep" option only works for Nexus OS. The bug I've pointed out is for IOS-XE.

Re: forwarding message with attachment

sknoop1971 — Tue, 20 Apr 2021 22:47:27 GMT

Forwarding of attachments from one space to another is not a supported feature at this time. I believe it is a roadmap item.

Catalyst 9300 and extended VLANs

nat8506 — Tue, 20 Apr 2021 22:45:27 GMT

If I'm currently running VTP version 1 or 2 on my network and I have a 9300 switch in Client mode, I change to Server mode and create an extended VLAN, then go back to Client mode, will the revision number increment? I can't confirm but I don't believe it changes the revision number since extended VLANs are not propagated with VTP versions 1 or 2. Can anyone please confirm this?

Change personal room link

ms_smoore — Tue, 20 Apr 2021 22:44:09 GMT

Initially, this account was used for business so I used my work email, now that I am no longer employed with that agency, I would like to continue with the account but remove my previous employer's name from my personal room. How do I do that?

Re: Automate personal room creation?

sknoop1971 — Tue, 20 Apr 2021 22:27:48 GMT

Navigate to your Webex meetings site administration and go to Common Settings. Search for "Enable Personal Room (When enabled, you can turn this on or off for individual users)" and check the box to enable for everyone by default

E164 dial plan----outbound calls to PSTN

G3261 — Tue, 20 Apr 2021 22:22:57 GMT

Hello, we are unable to call numbers in US because our telco is saying we are sending 11 digits to them (instead of 10). My senior staff is away so I am trying to figure this out. We are using e164 dial plan----and using mask with +1XXXXXXXXXX number

1-user dials LD number to US

2-TP is matched -9.1[2-9]XX[2-9]XXXXXX we add + and discard 9 So number becomes +1XXXXXXXXXX format

3-RP is matched--+.1[2-9]XX[2-9]XXXXXX

4-RL to PSTN

5-RL points to SLRG to PSTN

6-SLRG hows called number as +1XXXXXXXXXX

at what point or where exactly, we should be localizing the number for PSTN? It seems right now the number going out to PSTN is 1XXXXXXXXXX.

Re: CSCvb87210 - Need to increase timeout for WLC Configuration Archive - 1

juancho386 — Tue, 20 Apr 2021 22:18:38 GMT

In PRIME, In the list devices, edit the device and try changing the SSH timeout to a higher time. This could be a solution. It worked for me with a WLC.

Re: Bonjour traffic

cyberconsultants — Tue, 20 Apr 2021 22:13:02 GMT

Interested in this discussion.

How have you confirmed this as Bonjour traffic specifically? Asking only because mDNS/DNS-SD/Avahi all utilize port 5353 for multicast discovery/zeroconf.

Re: Prime 3.2 - Cisco ASA Configuration Archive - Function run timed out 60000ms

juancho386 — Tue, 20 Apr 2021 22:13:47 GMT

In PRIME, In the list devices, edit the device and try changing the SSH timeout to a higher time. This could be a solution. It worked for me with a WLC.

Re: Change Webex Upgrade Schedule

sknoop1971 — Tue, 20 Apr 2021 22:05:42 GMT

Your Webex site upgrade schedule is based upon what cluster your site is associated with. The maintenance schedule can be seen here: https://status.webex.com/maintenance?lang=en_US

The cluster that your site is associated with is determined when your contract is signed, I believe based upon the location of your headquarters address listed on the contract. I would suggest reaching out to your CSM with this question to see if your site can be moved to a cluster that is regionally appropriate for your traffic flows, as well as in a better time zone. You can get a feel for maintenance window times by looking at the site above.

https://help.webex.com/en-us/WBX15/How-Do-I-Contact-My-Customer-Success-Manager-CSM

Re: 5516 Migration to FPR1140

scoutt — Tue, 20 Apr 2021 21:54:20 GMT

Thanks guys. I think I have it all squared away. Just plugging in the MGMT port and configuring it. We will run a couple cables and set different IP's to test and see if it passes traffic.

Thanks Eric for the text file. I will look it over. I already imported all the rules. But I may have to do it again as things changed already.

Re: CSCvb87210 - Need to increase timeout for WLC Configuration Archive - 1

juancho386 — Tue, 20 Apr 2021 21:52:29 GMT

When I try to run a Job to get the WLC5508 archive configuration, the "Last Run Status" show "Partial-Success", then looking on details, the "Fetch Startup" show Function run timed out 60000ms

I've figured out that when I try in the WLC CLI "show run-config startup-commands", It take about 160 seconds.

Cisco Prime is not able to wait the configuration answer from the WLC because the WLC takes a long time to process It.

Re: Problema con la configuración bridge ASA 5506 X, y como poder quitarla

Javier Acuña — Tue, 20 Apr 2021 21:48:55 GMT

Si correcto debes ingresar por la Inside

Recuerda calificar las respuesta de todos los expertos que te apoyan esto nos mantiene activos en la comunidad.

Re: Try using this tool:

digishdave — Tue, 20 Apr 2021 21:48:49 GMT

Hi Deepak,

I have CUC 10.5.2

Would you be able to help for Directory Handler greetings wav file upload?

Java is not working and ATM has no option for Directory Handler greetings file change option.

Thanks for your help.

Re: How do I Isolate the Source of Tunnel Flapping EIGRP

Richard Burts — Tue, 20 Apr 2021 21:42:16 GMT

We know very little about what is going on here. We are told that there are tunnels. But what kind of tunnels? Is it standard GRE? Is it GRE with IPSec? Is it an IPSec tunnel? Is it a VTI tunnel? Any detail you can provide may help us to better understand the issue.

We are told that there is flapping. Is it tunnel interfaces flapping? Is it EIGRP neighbor relationship flapping? Any detail you can provide may help us to better understand the issue.

Re: Bonjour traffic

akanarya — Tue, 20 Apr 2021 21:42:02 GMT

I started to think that it is a firmware bug.

I have same problems with 350 series edge switches which have same firmware version.

I applied an access list to all switch ports to deny port 5353.

But this is a dirty hack for me and it is annoying.

Re: How to Move Floating Panel When Sharing Content

LauraHesselberg43252 — Tue, 20 Apr 2021 21:40:23 GMT

It most certainly does work. I did it just today. Moved from Screen 1 to screen 2.

Cisco DNA Software Demo Series - Cisco ThousandEyes

gajewell — Tue, 20 Apr 2021 21:37:00 GMT

Cisco DNA Software Demo Series - Cisco ThousandEyes
Register now
Wednesday, May 12, 2021
10:00 am Pacific Daylight Time
(San Francisco, GMT-07:00)

SaaS applications and cloud-based services are increasingly critical for on-campus users, but they can be challenging to troubleshoot—particularly because they are delivered over ISPs and other networks that are outside of your control. This webinar will demonstrate how to leverage Cisco ThousandEyes to quickly gain insight into the availability and performance of critical applications and services for campus users.

You will learn how to:

Set up ThousandEyes on Catalyst 9000 switches through Cisco DNA Center
Set up tests for critical applications and endpoints in the ThousandEyes portal
Use tests to visualize network paths, troubleshoot service delivery issues, and understand performance over time

Live Q&A included.

Re: Problema con la configuración bridge ASA 5506 X, y como poder quitarla

Julio E. Moisa — Tue, 20 Apr 2021 21:31:28 GMT

Hola,

Si, es correcto, debes usar el INSIDE.

Saludos

Re: Dynamic Routing Protocols with IPv6: Configuration, Verification, and Troubleshooting - AMA

Harold Ritter — Tue, 20 Apr 2021 21:22:39 GMT

Hi Nono,

Both 6PE and 6VPE transport IPv6 traffic over the MPLS core. The MPLS core does not need to be running IPv6 at all (except for the PE). IPv6 traffic will be encapsulated in an MPLS LSP and forwarded to the relevant egress PE.

The difference between the two is that 6PE works using the global routing table on the PE, whereas 6VPE will perform the IPv6 lookup from a VRF routing table on the PE. So 6VPE is equivalent to IPv4 L3VPN.

Regards,

Re: How to configure a Router-on-a-Stick?

MasonCa — Tue, 20 Apr 2021 21:21:15 GMT

Thanks, it is very useful. But I still have a question. For R1 and R2, if R1 has a loopback interface which Ip address is 209.165.200.12 /24. If both PC need to ping the loopback interface, how should I configure R1 and R2 with static routes. I guess on R2 I can use static host routes and static routes for R1. Is that correct？

Re: Cisco 3850 Boot Loop

Ignat Sitnikov — Tue, 20 Apr 2021 21:20:53 GMT

I just went through this with TAC. To properly upgrade to the latest version if you are coming from 03.xx.xx release, you must include "new" and "force" optional arguments in your software install command.

software install file flash:cat3k_caa-universalk9.16.09.01.SPA.bin new force

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-9/release_notes/ol-16-9-3850.html

If "new" and "force" is missing, switch will get stuck in boot loop with no ROMMON access. RMA is the only way to get your switches back online.

Re: VPN PPTP connected, but no internet avaible

kapydan88 — Tue, 20 Apr 2021 21:22:10 GMT

Hello.

Do you use smth like split tunelling?

https://www.youtube.com/watch?v=mC9IlHcph7E

Re: Rest Call Timeout Error Handling

lisa.ferraro — Tue, 20 Apr 2021 21:20:24 GMT

Hey Janine!

I am experiencing this issue with the Read Timeout being hit, but the error log does not contain the VXML badfetch error. Since there is not a bad fetch error, the call does not flow through the Voice XML error catch I have at the beginning of the application. I also have a catch for all Java exceptions at the beginning of the application. The error is not caught there either. So the Cisco message is played and the call is disconnected. I need to the call to flow through the application error handling and transfer to the agent. I also verified that the Project Properties has the Subdialog set to True. Is there a way to capture the read timeout error? Below is what I see in the error file.

Before the REST Client element, I have an audio element with the fetchaudio set and the fetchtimeout set to 30s. In the REST Client, I updated the Read Timeout from 5000 to 30000, to match the fetchtimeout. Right now, that is enough time for the service response to be received. Since both of these settings match 30 seconds, I wonder if the bad fetch would be thrown first, so the call flows through the Voice XML catch. Or maybe the Read Timeout in the Rest Client should be set higher than the fetchtimeout, to ensure the bad fetch is thrown and the call flows through our transfer logic?

xx.xx.xx.xx.xxxxxxxxxxxxx.xx.GroupClaimsTest,04/20/2021 10:28:56.034, The error was: A built-in element encountered an exception of type com.sun.jersey.api.client.ClientHandlerException. The root cause was: com.sun.jersey.api.client.ClientHandlerException: java.net.SocketTimeoutException: Read timed out
com.audium.server.AudiumException: A built-in element encountered an exception of type com.sun.jersey.api.client.ClientHandlerException.
at com.audium.server.voiceElement.ActionElementBase.service(ActionElementBase.java:416)
at com.audium.server.controller.Controller.goToAction(Controller.java:4386)
at com.audium.server.controller.Controller.goToElement(Controller.java:4022)
at com.audium.server.controller.Controller.continueCall(Controller.java:3702)
at com.audium.server.controller.Controller.doPost(Controller.java:1116)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:648)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:292)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:212)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:106)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:502)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:141)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:79)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:88)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:522)
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1095)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:672)
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1502)
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1458)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:745)
Caused by: com.sun.jersey.api.client.ClientHandlerException: java.net.SocketTimeoutException: Read timed out
at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:151)
at com.sun.jersey.api.client.Client.handle(Client.java:648)
at com.sun.jersey.api.client.WebResource.handle(WebResource.java:680)
at com.sun.jersey.api.client.WebResource.access$200(WebResource.java:74)
at com.sun.jersey.api.client.WebResource$Builder.post(WebResource.java:568)
at com.audium.server.action.rest.client.RestClientUtil.doPost(RestClientUtil.java:460)
at com.audium.server.action.rest.client.RestClientUtil.executeAPI(RestClientUtil.java:316)
at com.audium.server.action.rest.client.RestClientAction.doAction(RestClientAction.java:280)
at com.audium.server.voiceElement.ActionElementBase.service(ActionElementBase.java:390)
... 26 more
Caused by: java.net.SocketTimeoutException: Read timed out
at java.net.SocketInputStream.socketRead0(Native Method)
at java.net.SocketInputStream.read(SocketInputStream.java:152)
at java.net.SocketInputStream.read(SocketInputStream.java:122)
at sun.security.ssl.InputRecord.readFully(InputRecord.java:442)
at sun.security.ssl.InputRecord.read(InputRecord.java:480)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:946)
at sun.security.ssl.SSLSocketImpl.readDataRecord(SSLSocketImpl.java:903)
at sun.security.ssl.AppInputStream.read(AppInputStream.java:102)
at java.io.BufferedInputStream.fill(BufferedInputStream.java:235)
at java.io.BufferedInputStream.read1(BufferedInputStream.java:275)
at java.io.BufferedInputStream.read(BufferedInputStream.java:334)
at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:690)
at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:633)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1366)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:338)
at com.sun.jersey.client.urlconnection.URLConnectionClientHandler._invoke(URLConnectionClientHandler.java:249)
at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:149)
... 34 more

Re: Webex Meetings, Side by Side view, Resizing of webcam thumbnails

allamore — Tue, 20 Apr 2021 21:19:35 GMT

The answer to this post for anyone else upgrading to 41.4 is that this is a 'feature' to make the screen simpler to use. See Side by Side view section in the April 2021 Release Notes for 41.4.

Another person who has the same dislike as me:

https://community.cisco.com/t5/webex-meetings-and-webex/changing-of-meetings-layout/m-p/4386128/thread-id/4132

Re: 5516 Migration to FPR1140

Eric R. Jones — Tue, 20 Apr 2021 21:15:24 GMT

Were you also asking about moving the configuration from the old ASA to the new FTD's? There's a migration tool that can be run to assist in this. Due to changes in how NAT rules are handled it's probably a good idea to use it. When we migrated ourselves we brought up the FMC and FTDs. I've attached my short notes here, maybe they can be of service to you.

Re: Presence Status from WebEx App in Outlook 2016

Bjoern Schonhoff — Tue, 20 Apr 2021 21:14:20 GMT

The current Release Webex App Version solved the Problem.

Re: Finesse 11.6 upgrade to 12.0

Konstantin Vaksin — Tue, 20 Apr 2021 21:13:08 GMT

Please check Port Utilization Guide

Kostia

Re: Forged Email Detection Question

Jessica Cochran — Tue, 20 Apr 2021 21:07:49 GMT

My thought was maybe I should at least add Director or Manager and above to a dictionary.

Just wanted to be sure I wasn't missing something obvious

Re: ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good

paul driver — Tue, 20 Apr 2021 21:07:06 GMT

Hello

If cisco devices then cdp is applicable, it is also possible you have just failed poe ports which does happen, Have you tried various portd on the same switch?

Re: Spanning and tree and static routing

Martin L — Tue, 20 Apr 2021 21:04:43 GMT

STP Root should be set on top Switch connected to Router; Usually I would set Root like that especially if you have only 1 router.

Static routes are easy; Trick is to remember that you need static entry for each of networks you want to reach. example ip route 10.0.0.0 255.0.0.0 Gig0/0 (or next-hop IP address)

ip route x.x.x.x y.y.y.y via interface or next IP hop.

Regards, ML
**Please Rate All Helpful Responses **

Re: Dynamic Routing Protocols with IPv6: Configuration, Verification, and Troubleshooting - AMA

gbolivar — Tue, 20 Apr 2021 21:02:34 GMT

Hi Nono82,

6PE and 6VPE allow us to run IPv6 over an IPv4-only MPLS core where we use dual stack PE routers.

This allows service providers to offer IPv6 to their customers without making major changes to the core of their MPLS network.

The main difference between 6PE and 6VPE will be:

6PE uses the global IPv6 routing table on the PE routers.
6VPE uses VRFs on the PE routers (MPLS VPN).

Thank you,

Gary

Senior Technical Consulting Engineer

Re: How to implement a unknown domain catchall or rewrite

marc.luescherFRE — Tue, 20 Apr 2021 20:59:22 GMT

For Option A i would create a dictionary called "Authorized_Domains"

add all domains in the dictionary including the @sign, one per line max 1500

then I would create an incoming content sender looking if sender contains list in dictionary then quarantine to a maybe "Unauthorized Domains" for checking.

For Option B you would also create a content filter checking for DMARC verdict in the SMTP header and then edit the header and replace it with whatever you want to have on field Sender:

Re: CER - had an office move and brought over DID's from another area code. 911 calls go to wrong PSAP

Adam Pawlowski — Tue, 20 Apr 2021 20:58:22 GMT

When you say “in Intrado” if you’re referring to PS-ALI, that should be it if the record is correct and not in error. Here, TAR code along with county and town matter, but all of it is part of MSAG.

So as part of the move process the address was updated with the carrier or e911 provider . All things considered if nothing else has changed it should work.

Only other thing I can think of at random, if you moved sites and have a new SIP trunk or PRI, the carrier will have to make sure that they allow you to send the various DIDs and not the billing phone number, but you’d hope AT&T would catch that.

Re: Cannot find the 'Start Live Streaming' button

mvillega — Tue, 20 Apr 2021 20:58:09 GMT

Thank you so much!!

Re: Remote management of FTD from FMC v6.7

Chakshu Piplani — Tue, 20 Apr 2021 20:54:05 GMT

You can check this video for a quick demo:

https://www.youtube.com/watch?v=F3Ma6TnXKXw

Make sure connectivity is good from data interface to FMC management interface and you have the routes in place, you can use FMC to make the changes to switch from management to data interface.

If you encounter issues use the rollback cli to switch to the previous deployment.

HTH,

Chakshu

Re: Upgraded 8851s to 12.8(1) and am having issues with last line selected

Adam Pawlowski — Tue, 20 Apr 2021 20:54:00 GMT

Yes - it changes that behavior at some point which seems to change that param . You can revert it by using the Cisco support field with a bugID that tells the phone what behavior to do . I can post it later but I’m not at my computer . TAC can probably grab it quickly if you ask for this.

Re: How I configure Two LDAP Authentication to use Anyconnect VPN (HA)

Alex Ribas — Tue, 20 Apr 2021 20:52:53 GMT

Yes, my bad

Thank a lot

Alex

Re: How I configure Two LDAP Authentication to use Anyconnect VPN (HA)

Rob Ingram — Tue, 20 Apr 2021 20:48:18 GMT

Are you referring to the other post suggesting using secondary authentication server group?....then yes, it's basically double athentication, not LDAP server failover.

Re: How I configure Two LDAP Authentication to use Anyconnect VPN (HA)

Rob Ingram — Tue, 20 Apr 2021 20:45:08 GMT

You've defined a second LDAP group called LDAP02, not created another host in the original group LDAP01. Example below demostrates how to add a second LDAP server to the same LDAP group. Authentications should failover to the second host in the group.

aaa-server LDAP01 protocol ldap
aaa-server LDAP01 (INSIDE) host 1.1.1.1
 ldap-base-dn DC=xxx,DC=co,DC=ao
 ldap-scope subtree
 ldap-naming-attribute sAMAccountName
 ldap-login-password *****
 ldap-login-dn CN=Services Firewall,CN=Managed Service Accounts,DC=xxx,DC=co,DC=ao
 server-type microsoft
aaa-server LDAP01 (INSIDE) host 2.2.2.2
 ldap-base-dn DC=xxx,DC=co,DC=ao
 ldap-scope subtree
 ldap-naming-attribute sAMAccountName
 ldap-login-password *****
 ldap-login-dn CN=Services Firewall,CN=Managed Service Accounts,DC=xxx,DC=co,DC=ao
 server-type microsoft

. HTH

Re: How I configure Two LDAP Authentication to use Anyconnect VPN (HA)

Alex Ribas — Tue, 20 Apr 2021 20:44:04 GMT

Hi in the login the client requested twice user/password.

Re: How do I wildcard match partial email addresses?

marc.luescherFRE — Tue, 20 Apr 2021 20:43:25 GMT

A message and a content filter will allow you to use REGEX expressions to allow or block messages by sender and recipient.

Re: WSA upgrade for approaching EoL release

Ken Stieers — Tue, 20 Apr 2021 20:36:08 GMT

Check this document for the compatibility matrix.

https://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/sma_all/SMA-ESA-WSA_Compatibility.pdf

Re: How I configure Two LDAP Authentication to use Anyconnect VPN (HA)

Alex Ribas — Tue, 20 Apr 2021 20:35:29 GMT

Thank you

Perfect

Re: Router recieving pings but not responding?

Richard Burts — Tue, 20 Apr 2021 20:34:34 GMT

I am thinking about the message

echo reply rcvd, src 10.2.2.90, dst 10.2.5.113,

can you clarify what is 10.2.2.90 and what is 10.2.5.113?

Re: Can't hide floating toolbar with keyboard shortcut since update

RedNectar — Tue, 20 Apr 2021 20:33:37 GMT

Hi Jill.Robinson,

Good idea to start a new thread.

I agree that the whole hide/show controls options need to be MUCH better.

I suggest all readers vote for https://ciscocollabcustomer.ideas.aha.io/ideas/WXCUST-I-1320

Re: Can the content filter also filter the CC

marc.luescherFRE — Tue, 20 Apr 2021 20:35:23 GMT

The SMTP header should contain a field called CC and TO so I would first try if the header('CC') would allow you to identify what you would need to do. I did not test this yet with the latest software release but have done this in the past.

Re: How I configure Two LDAP Authentication to use Anyconnect VPN (HA)

Alex Ribas — Tue, 20 Apr 2021 20:31:52 GMT

I didn't find this option because the information is came from here.

aaa-server LDAP01 protocol ldap
aaa-server LDAP01 (inside) host 1.1.1.1
ldap-base-dn DC=xxx,DC=co,DC=ao
ldap-scope subtree
ldap-naming-attribute sAMAccountName
ldap-login-password *****
ldap-login-dn CN=Services Firewall,CN=Managed Service Accounts,DC=jupiter,DC=co,DC=ao
server-type microsoft
aaa-server LDAP02 protocol ldap
aaa-server LDAP02 (inside) host 2.2.2.2
ldap-base-dn DC=xxx,DC=co,DC=ao
ldap-scope subtree
ldap-naming-attribute sAMAccountName
ldap-login-password *****
ldap-login-dn CN=Services Firewall,CN=Managed Service Accounts,DC=xxx,DC=co,DC=ao
server-type microsoft

Re: How I configure Two LDAP Authentication to use Anyconnect VPN (HA)

Sheraz.Salim — Tue, 20 Apr 2021 20:31:32 GMT

tunnel-group TESHGROUP type remote-access
tunnel-group TESHGROUP general-attributes
authentication-server-group AD1
secondary-authentication-server-group AD2

Re: How to Move Floating Panel When Sharing Content

RedNectar — Tue, 20 Apr 2021 20:30:21 GMT

Hi ,

The totally-unintuitive Command+Option+Shift+H still works for me, but annoyingly pops up a confirmation window ON ANOTHER SCREEN which I have to then click before it activates. SOOoooooo annoying.

And then even more annoying, it hides my participants panel and chat panel as well - when all I want to do is stop the stupid drop-dwon box getting in the road.

I urge you to vote for https://ciscocollabcustomer.ideas.aha.io/ideas/WXCUST-I-1320

Re: Problema con la configuración bridge ASA 5506 X, y como poder quitarla

DavidGustavoSanabriaRocha3330 — Tue, 20 Apr 2021 20:30:02 GMT

Muchas gracias

Ya empece a configurar me quedo una duda para poder ingresar por ASDM utilizo el ip del INSIDE esa parte me confundió.

Gracias

Re: CSCvo35537 - C2960XR-48FPD-I reports "Cisco {{platform}} {{deviceDescription}} {{version}}" in the Web GUI

olaszfiu — Tue, 20 Apr 2021 20:27:49 GMT

I have the same problem on a WS-C2960X-48TD-L, release 15.2(7)E3.
No error on the same device running 15.2(4)E8.

Re: Dynamic Routing Protocols with IPv6: Configuration, Verification, and Troubleshooting - AMA

Nono82 — Tue, 20 Apr 2021 20:27:05 GMT

Hi everyone

Can you please help me to clarify what is the difference between 6PE and 6VPE?

Thank you in advance!

Nono

Re: WLC 5508 - Replace Primary Unit in HA Pair

Carlos Rogerio Souza Santos — Tue, 20 Apr 2021 20:24:40 GMT

Good afternoon dear

Just come across this problem and I have already found the solution.

Thank you all

Re: How to Move Floating Panel When Sharing Content

RedNectar — Tue, 20 Apr 2021 20:26:08 GMT

Hi ,

You can also drag it to another screen..... Keeps sharing your original screen.

I hate to burst you bubble - but this doesn't work. Sure I can move the participant's panel and chat panel to another screen, which I do all the time anyway, but NOT the drop-down panel (which is the subject of this discussion)

I urge all reader to vote for https://ciscocollabcustomer.ideas.aha.io/ideas/WXCUST-I-1320

Re: Not able to SSH C9800-L, getting permission denied

BhushanRam99337 — Tue, 20 Apr 2021 20:23:45 GMT

Thanks Craig. This resolved the issue.

Re: Cisco 2951: setting up and changing a static route.

roncro — Tue, 20 Apr 2021 20:22:14 GMT

right, but I want 2 separate networks.

The endgoal is to have a decent routing table on the Cisco 2951, right now I basically just hacked it together. (on the 2951).

Originally it wasn't working, when I tried to add a route for the whole subnet, but could get it to work with the 255.255.255.128 netmask.

Ron

Re: How I configure Two LDAP Authentication to use Anyconnect VPN (HA)

Rob Ingram — Tue, 20 Apr 2021 20:20:46 GMT

You are referencing the LDAP group called LDAP01 under the tunnel-group.

You need to define another LDAP host under the LDAP01 group.

Change Webex Upgrade Schedule

lallimander — Tue, 20 Apr 2021 20:19:45 GMT

Hi All,

We have been recently getting notices that our webex site xyzcompany.webex.com will upgrade at the time mentioned in email. That is our production time and we would like to permanently change these upgrade times to off hours instead of manually setting upgrade time each time. Is there a feature or option to configure this?

Thanks,

Lalli

Re: How to Move Floating Panel When Sharing Content

RedNectar — Tue, 20 Apr 2021 20:26:37 GMT

Again - not sure if this is a recent update - but ctrl+shift+Q doesn't work for me.

And the Command+Option+Shift+H key combo hides the particpants panel and chat as well. All I want to do is hide the stupid drop-down menu. I want to KEEP the particpants panel and chat because I move them to another screen.

I urge all reader to vote for https://ciscocollabcustomer.ideas.aha.io/ideas/WXCUST-I-1320

Re: Problema con la configuración bridge ASA 5506 X, y como poder quitarla

DavidGustavoSanabriaRocha3330 — Tue, 20 Apr 2021 20:32:00 GMT

Muchas gracias

Ya estoy empezando a configurar las interfaces inside y outside, pero tengo una duda para poder acceder al ASDM se utiliza el mismo ip del inside, disculpa en esa parte me confundí.

Cisco AP 3602i without WLC

Kingsleyizuka — Tue, 20 Apr 2021 20:13:18 GMT

Hello,

What are the possible methods of deploying a Cisco 3602i AirCap Access Point and Cisco c9105AXi AP without an external Wireless LAN Controller?

Is it possible to deploy the 3602i access point in lightweight mode, using the inbuilt AireOS Wireless Controller, without an external WLC?

Thanks.

Re: WSA upgrade for approaching EoL release

MehnazKhan2492 — Tue, 20 Apr 2021 20:11:07 GMT

Thanks Balaji,

My bad I am using S190 and M190, so do I need to complete the upgrade in one cycle or I can run 10.x with 13.x SMA.

Thanks for your help !!

Regards,

Meh

How I configure Two LDAP Authentication to use Anyconnect VPN (HA)

Alex Ribas — Tue, 20 Apr 2021 20:03:38 GMT

Hi All

I have just ONE Ldap authenticantion in connection do VPN AnyConnection

So Tried to find some option to use 2 Two LDAP (HA) just in case one fail I have secondary.

I didn't find option secondary

tunnel-group TUNNEL_VPN general-attributes
address-pool (inside) POOL_VPN

address-pool POOL_VPN
authentication-server-group LDAP01
authentication-server-group (inside) LDAP01 LOCAL <--------- no have option to include LDAP02 just Local
authorization-server-group LDAP01
default-group-policy GRP_VPN
tunnel-group TUNNEL_VPN webvpn-attributes

any clue?

Thank you

Re: Forged Email Detection Question

Ken Stieers — Tue, 20 Apr 2021 20:02:08 GMT

So I have proposed this when I was in a beta.

I think there's a feature that does this coming, but I can't speak to when...

Other than adding your users to the dictionary, there isn't really a way to do this.

I have a query built against our intranet that I use to populate the dictionary. I grab HR, IT, Accounting and directors and above...

Re: How do I Isolate the Source of Tunnel Flapping EIGRP

Giuseppe Larosa — Tue, 20 Apr 2021 20:01:54 GMT

Hello,

as noted by Georg one potential cause for flapping of tunnels is recursive routing that happens when :

the tunnel destination address ( external address) is advertised within the tunnel .

You need to be very careful about this

Have a host /32 static route for each tunnel destination using the offered IP next-hop on the physical exit interface.

This can help.

Also try to use higher timers for tunnel keepalive.

Hope to help

Giuseppe

Re: AMP Connector - auto-update?

JF53591 — Tue, 20 Apr 2021 19:57:44 GMT

Thanks, but I understand how to update the versions via central control, but it is still a human-intervention. I am interested in a new feature that would automatically update all workstations (in that policy) to the "latest" version... whatever it is and whenever it is released. It is truly shocking that this is not part of the existing feature set. Even a large corporation would probably want a group of machines in a "rapid-release" type policy that would receive this. But small companies without a dedicated person to check and increment the version would absolutely hands-down REQUIRE this functionality.

Example: a recent version of the connector for Mac caused CPU spiking. The latest update resolved this. How was I to know? I don't spend my days checking the console? I found out the issue by happenstance.

Re: Problema con la configuración bridge ASA 5506 X, y como poder quitarla

Julio E. Moisa — Tue, 20 Apr 2021 19:55:03 GMT

Hola

Vaya lo primero es configurar las interfaces, asi:

interface g0/0

description INTERNET

ip address 200.x.x.x <mascara de subred>

security-level 0

nameif OUTSIDE

no shut

interface g0/1

description LAN

ip address 192.x.x.x <mascara de subred>

security-level 100

nameif INSIDE

no shut

route OUTSIDE 0 0 <siguiente salto para alcanzar internet, ejemplo 200.x.x1>

access-list LAN extended permit icmp any any

access-list LAN extended permit ip any any (esto lo puedes modificar despues para hacerlo mas estricto)

access-list OUTSIDE extended permit icmp any any

access-group LAN in in LAN

access-group OUTSIDE in in OUTSIDE

De ahi ya configuras ASDM, L2TP etc.

cisco vpn banch to main site asa no internet at branch

chuckdock1 — Tue, 20 Apr 2021 19:53:54 GMT

Hello all,

I have a vpn between my branch and main office. From the branch I can reach the main office and the devices there.

I would like the branch site to hit the main sites asa and then use it for the internet breakout. I just want it for a few internet ip's, not all traffic though. I know the traffic hits the outside interface of the main, but then would have to go back out that interface for the specific ip's I want to reach. I did enter a global command for that, something with intra - I just dont recall it.

Seems like a nat issue but I'm not sure. I'm running 8.2 on both sides.

Suggestions?

Re: Just as an FYI,

edgarus18 — Tue, 20 Apr 2021 19:49:48 GMT

Thanks!!
It works for me, I was searching by Uppercase, just change to lowercase and works well.

UCCX NonVoice Subsystem in partial service

Timothy Jaberg — Tue, 20 Apr 2021 19:49:43 GMT

I was alerted an issue the other day from a UCCX Subscriber node of the NonVoice Subsystem in partial service.

When I checked the CCX Engine service and sub service, it showed fully up and had been up for several weeks since it was last rebooted. Nothing was in partial service.

The messages in the log are:

17067055: Apr 19 14:20:43.275 EDT %MIVR-SS_CHAT-1-SS_PARTIAL_SERVICE: [SM Tomcat Poller Thread - 1] com.cisco.wf.subsystems.chat.SubsystemChat NonVoice Subsystem is in partial service

17067056: Apr 19 14:20:43.280 EDT %MIVR-SS_CHAT-1-SS_PARTIAL_SERVICE_CCP_TOMCAT_DOWN: [SM Tomcat Poller Thread - 1] com.cisco.wf.subsystems.chat.SMTomcatPollerThread NonVoice Subsystem is in partial service

I didn't notice any service impacts, yet this is all that the log shows.

UCCX version12.5.1.11900-146

Has anyone seen this before and is this a bug?

Re: How to clear / delete recent Personal Rooms?

eniraldo — Tue, 20 Apr 2021 19:48:14 GMT

Same here. and reported dates of when the problem began seem matching as well. Definitely a recent upgrade messed this "recent personal rooms" list, making recent one no longer appear and really old ones to appear.

Re: lineDevSpecific silent monitor - Operation Failed

tevans2 — Tue, 20 Apr 2021 19:41:51 GMT

That's good to know. Thank you.

Currently, what we have is a C#/.NET application, but the TAPI files and managers are in lower levels of the code, specifically in C++ files which we compile to .dll in order to access them via the higher levels of the application (the C#/.NET stuff). Is there anything you can see within the code snippet in my original question that seems off? I have that within one of our C++ TAPI Managers, so I would assume that lineDevSpecific should behave normally there.

Re: Forged Email Detection Question

Jessica Cochran — Tue, 20 Apr 2021 19:41:24 GMT

We have approximately 3500 Email Users.

Re: Webex Icon constantly flashes/blinks orange in the taskbar when not "focussed on"

mfoley1 — Tue, 20 Apr 2021 19:40:21 GMT

My webex stopped working on my mac.. It crashes now every time I turn the camera on. I have to use a family members windows machine and I absolutely loath the flashing icon... I have to take exams while they watch us on the camera and this icon in flashing in my face the whole time. The flashing icon is ruining my life... I tried to edit the registry with no success! Please add the option TO DISABLE THIS FUNCTION!

Call grading mechanism - VOIP CMR and CDR audio quality metrics for Cisco Jabber and other Cisco IP phones

bhuarora — Tue, 20 Apr 2021 19:40:21 GMT

Hi Team,

I am trying to fix audio issues by collecting different data metrics that can be used for analysis. Since onset of sudden transition from work from home , I am sure many customers like us will be dealing with sudden transition from office to work from home and looking for ways to improve user and customer experience by reducing audio issues.

While I am at it, I was going through cisco documents and still could not find a proper data / voip data metric that can be used for analysis and I have following questions:

Is MOS supported for Cisco Jabber? We currently have users on 12.9.x and CUCM versions 10.5.x, 11.5.x and 12.5.x

The data is pretty inconsistent in terms of MOS evaluation and comes as unknown,fair, poor, excellent etc from the same device. My concern is mostly that it is unknown.

The inbuilt cisco CDR tool in all 3 mentioned versions do not always populate VarVQMetrics and other CMR and CDR related details and raw CDR files do not always have CMR data for Cisco Jabber.

What I have found so far:

K-Factor Data

K-factor represents an endpoint mean opinion score (MOS) estimation algorithm that is defined in ITU standard P.VTQ. It represents a general estimator that is used to estimate the mean value of a perceptual evaluation of speech quality (PESQ) population for a specific impairment pattern.

MOS relates to the output of a well designed listening experiment. All MOS experiments use a five-point PESQ scale as defined in ITU standard P.862.1, which describes the PESQ as an objective method for end-to-end speech quality assessment of narrow-band telephone networks and speech codecs.

The MOS estimate provides a number that is inversely proportional to frame loss density. Clarity decreases as more frames are lost or discarded at the receiving end. Consider the loss or discarding of these frames as concealment. Concealment statistics measure packet (frame) loss and its effect on voice quality in an impaired network.

K-factor represents a weighted estimate of average user annoyance due to distortions that are caused by effective packet loss such as dropouts and warbles. It does not estimate the impact of delay-related impairments such as echo. It provides an estimate of listening quality (MOS-LQO) rather than conversational quality (MOS-CQO), and measurements of average user annoyance range from 1 (poor voice quality) to 5 (very good voice quality).

K-factor gets trained or conditioned by speech samples from numerous speech databases, where each training sentence or network condition that is associated with a P.862.1 value has a duration of 8 seconds. For more accurate scores, the system generates k-factor estimates for every 8 seconds of active speech.

Consider K-factor and other MOS estimators to be secondary or derived statistics because they warn a network operator of frame loss only after the problem becomes significant. Packet counts, concealment ratios, and concealment second counters represent primary statistics because they alert the network operator before network impairment has an audible impact or is visible through MOS.

Table 2. Devices That Support K-factor (varVQMetrics) in CMRs

Device

K-factor (varVQMetrics) Support in CMR

Cisco Unified IP Phone 7906

Cisco Unified IP Phone 7911

Cisco Unified IP Phone 7921

Cisco Unified IP Phone7931

Cisco Unified IP Phone 7940

Cisco Unified IP Phone 7941

Cisco Unified IP Phone 7942-G

Cisco Unified IP Phone 7942-G/GE

Cisco Unified IP Phone 7945

Cisco Unified IP Phone7960

Cisco Unified IP Phone 7961

Cisco Unified IP Phone 7962-G

Cisco Unified IP Phone7962-G/GE

Cisco Unified IP Phone 7965

Cisco Unified IP Phone 7970

Cisco Unified IP Phone7971

Cisco Unified IP Phone7972-G/GE

Cisco Unified IP Phone7975

3x MGCP Gateways

5x MGCP Gateways

Ref link :

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/service/12_5_1/cdrdef/cucm_b_cdr-admin-guide-1251/cucm_b_cdr-admin-guide-1251_chapter_01001.html

and :

Note that all audio quality metrics listed in Table 1 are stored in the CMR. For phones that do not generate CMR, such as Cisco TelePresence® TC, CE, CTX, and IX endpoints; Jabber® platforms (all platforms); Cisco IP Communicator; and Cisco Unified Personal Communicator, grading will be “N/A”.

The Cisco Network Analysis Module (NAM) reports SCS as well. An audio stream reported from NAM will be graded based on SCSR, the same as an IP Phone.

Ref link :

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-collaboration/white-paper-c11-735409.html

The language is same or rather identical in different series (e.g 10.x , 11.x ,12.x, etc)and support for devices has largely remained unchanged (at least in the guide if not real world).

Can someone confirm the following?

Is K-factor (varVQMetrics) supported for Cisco Jabber (client services framework)? If not, if there is roadmap to add support?
Is there a partial support for K-factor (varVQMetrics) like concealed seconds, several concealed seconds etc?
If the above are supported in current iterations of Jabber, any documentation or a doc defect?
Current list of supported phone models including soft phones. Interestingly widely used cisco 7821 and cisco 7841s are too not listed for k-factor data.

The other questions I have are listed below. They are mostly aimed at Cisco Jabber however other phone model details are appreciated.

Since MOS is no longer considered a good mechanism, what call grading mechanism can be used for Cisco Jabber specifically and/or other phone models.
Suggested industry (if any) and cisco suggested Jitter or average jitter per call?
Acceptable average jitter for voice ?
Acceptable percentage of packet loss (per call )? If this is codec dependent, then code wise suggested percentage of packet loss.
Acceptable Concealed seconds
Acceptable Latency in CUCM CDR terms
Any other metrics that be can used?
Any cisco tool that can be used to calculate percentages something similar voice bandwidth calculator?

I have referenced some of the other cisco docs and third party, it is getting complicated to have to do this manually:

Voice Over IP - Per Call Bandwidth Consumption

https://www.cisco.com/c/en/us/support/docs/voice/voice-quality/7934-bwidth-consume.html

Understanding Codecs: Complexity, Hardware Support, MOS, and Negotiation

https://www.cisco.com/c/en/us/support/docs/voice/h323/14069-codec-complexity.html

https://www.bandcalc.com/

http://www.voiptroubleshooter.com/diagnosis/emodel.html

Please note: to fetch all this data, I am also using a third party tool that allows me to capture some of this data in excel and csv formats that is parsed from RAW CDR files fetched from CUCM.

Regards

Bhuvan

Re: AMP Connector - auto-update?

Ken Stieers — Tue, 20 Apr 2021 19:40:08 GMT

In your AMP console go to Management/Policies, and open a policy you're using, and click Edit.

On the left you'll see boxes labeled Modes and Engines, Exclusions, Proxy, Outbreak Contro, Product Updates, Advanced Settings

Click on Product Updates, change the product version, and set dates/intervals/reboot settings...

It will update the workstations to the version you tell it to...

You should probably start with a test policy and some test machines...

Re: Webex Teams not sending activation code

AGuerra — Tue, 20 Apr 2021 19:37:25 GMT

Hello,

Yes I checked and no spam coming from webex.

Re: Problema con la configuración bridge ASA 5506 X, y como poder quitarla

DavidGustavoSanabriaRocha3330 — Tue, 20 Apr 2021 19:36:33 GMT

Muchas gracias si efectivamente necesito algo de ayuda, como comente en el anterior post ya pude cambiar y quitar el BVI1 tampoco sabia que si se lo quita ya no se puede ingresar al ASDM, si estoy utilizando CLI a través del PuTTY.

Mira la configuración en la que necesito ayuda es en utilizar el ASA5506 como router en el cual pueda ingresar un ip publico,

y salir la red del 192.168.0.1 de ahi sale a un switch.

El dhcp repartir de 192.168.0.100 para adelante dinámicos

dejando los demás para ip estáticos

y crear un acceso vpn a través de L2TP vi es la mas sencilla por q no necesita crear grupos ya solo accesos a los usuarios para poder conectar a la red y tener acceso a las carpetas compartidas.

Este es el diagrama que tengo de la configuración nota que todo esta en la misma red ya que utilizo plantillas de excel que me exige q todos tengamos acceso completo al servidor también por vpn por eso haciendo un estudio determine mi mejor opcion el L2TP, actualmente utilizo un router RV110W con el cual uso accesos de vpn por PPTP.

Utilizando el CLI si te agradecería mucho, un poco de apoyo para poder crear esta configuración si es posible.

Gracias

Call grading mechanism - VOIP CMR and CDR audio quality metrics for Cisco Jabber and other Cisco IP phones

bhuarora — Tue, 20 Apr 2021 19:36:59 GMT

Not sure under which category should I post this for best match so I am posting it under

Cisco Community Technology and Support Collaboration, Voice and Video IP Telephony and Phones
and will be posting under :
Cisco Community Technology and Support Collaboration, Voice and Video Unified Communications Infrastructure:

Hi Team,

While I am at it, I was going through cisco documents and still could not find a proper data / voip data metric that can be used for analysis and I have following questions:

Is MOS supported for Cisco Jabber? We currently have users on 12.9.x and CUCM versions 10.5.x, 11.5.x and 12.5.x

The data is pretty inconsistent in terms of MOS evaluation and comes as unknown,fair, poor, excellent etc from the same device. My concern is mostly that it is unknown.

The inbuilt cisco CDR tool in all 3 mentioned versions do not always populate VarVQMetrics and other CMR and CDR related details and raw CDR files do not always have CMR data for Cisco Jabber.

What I have found so far:

K-Factor Data

Table 2. Devices That Support K-factor (varVQMetrics) in CMRs

Device

K-factor (varVQMetrics) Support in CMR

Cisco Unified IP Phone 7906

Cisco Unified IP Phone 7911

Cisco Unified IP Phone 7921

Cisco Unified IP Phone7931

Cisco Unified IP Phone 7940

Cisco Unified IP Phone 7941

Cisco Unified IP Phone 7942-G

Cisco Unified IP Phone 7942-G/GE

Cisco Unified IP Phone 7945

Cisco Unified IP Phone7960

Cisco Unified IP Phone 7961

Cisco Unified IP Phone 7962-G

Cisco Unified IP Phone7962-G/GE

Cisco Unified IP Phone 7965

Cisco Unified IP Phone 7970

Cisco Unified IP Phone7971

Cisco Unified IP Phone7972-G/GE

Cisco Unified IP Phone7975

3x MGCP Gateways

5x MGCP Gateways

Ref link :

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/service/12_5_1/cdrdef/cucm_b_cdr-admin-guide-1251/cucm_b_cdr-admin-guide-1251_chapter_01001.html

and :

The Cisco Network Analysis Module (NAM) reports SCS as well. An audio stream reported from NAM will be graded based on SCSR, the same as an IP Phone.

Ref link :

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-collaboration/white-paper-c11-735409.html

The language is same or rather identical in different series (e.g 10.x , 11.x ,12.x, etc)and support for devices has largely remained unchanged (at least in the guide if not real world).

Can someone confirm the following?

Is K-factor (varVQMetrics) supported for Cisco Jabber (client services framework)? If not, if there is roadmap to add support?
Is there a partial support for K-factor (varVQMetrics) like concealed seconds, several concealed seconds etc?
If the above are supported in current iterations of Jabber, any documentation or a doc defect?
Current list of supported phone models including soft phones. Interestingly widely used Cisco 7821 and Cisco 7841 are too not listed for k-factor data.

The other questions I have are listed below. They are mostly aimed at Cisco Jabber however other phone model details are appreciated.

Since MOS is no longer considered a good mechanism, what call grading mechanism can be used for Cisco Jabber specifically and/or other phone models.
Suggested industry (if any) and cisco suggested Jitter or average jitter per call?
Acceptable average jitter for voice ?
Acceptable percentage of packet loss (per call )? If this is codec dependent, then code wise suggested percentage of packet loss.
Acceptable Concealed seconds
Acceptable Latency in CUCM CDR terms
Any other metrics that be can used?
Any cisco tool that can be used to calculate percentages something similar voice bandwidth calculator?

I have referenced some of the other cisco docs and third party, it is getting complicated to have to do this manually:
Voice Over IP - Per Call Bandwidth Consumption

https://www.cisco.com/c/en/us/support/docs/voice/voice-quality/7934-bwidth-consume.html

Understanding Codecs: Complexity, Hardware Support, MOS, and Negotiation

https://www.cisco.com/c/en/us/support/docs/voice/h323/14069-codec-complexity.html

https://www.bandcalc.com/

http://www.voiptroubleshooter.com/diagnosis/emodel.html

Please note: to fetch all this data, I am also using a third party tool that allows me to capture some of this data in excel and csv formats that is parsed from RAW CDR files fetched from CUCM.

Regards

Bhuvan

Re: lineDevSpecific silent monitor - Operation Failed

dstaudt — Tue, 20 Apr 2021 19:32:41 GMT

Note, TAPI is not tested/supported for use with C#/.NET, i.e. via the compatibility layer mechanism. Known issues include mainly/unfortunately lineDevSpecific requests, as these involve direct sharing of buffer-based objects.

Ensuring that the OS, application and TSP are both 32 bit or 64 bit may help, but unfortunately there is no sample code for C# and engineering will likely decline any support/escalation request due to lack of testing/support.

Upgraded 8851s to 12.8(1) and am having issues with last line selected

AnthonyGreene64131 — Tue, 20 Apr 2021 19:26:34 GMT

Hi everyone, I recently have started updating our 8800 series phones (specifically 8851s) to 12.8(1) from 12.1(1) and it seems that this breaks the last line remembered. I think I need guidance, because from what I have been able to find this is the expected behaviour. It seems on the 12.1(1), and I have tested this, that when you have say line two selected (whether that is the ipcc extension or just a second line you have on your phone) and make or answer a call and the call disconnects it stays on that selected line. On the 12.8(1) when you disconnect from a call on your selected secondary line and go on hook it automatically jumps you back the primary line.

We have the service parameter "Always Use Prime Line" to false and the "Show all calls on primary line" disabled as well. We also have some 8865s and it is also running 12.8(1) and has the same behaviour. I tried reverting my 8865 back to 12.7(1) and it also has the same behaviour. Is this the expected behaviour on this newer firmware and if it is, is there a way for it to remember last line selected?