IntraDomain Presence and OCSr2 - TLS issue

blwegrzyn · ‎07-12-2012

I setup the intrafederation according to :

http://www.cisco.com/en/US/docs/voice_ip_comm/cups/8_6/english/integration_notes/Federation/Intradomain_Federation/CUPConfig_chapter.html

I can only talk to Presence from OCSr2 but not the other way.

Also both presence status in ocsr2 and jabber does not work between the ocsr2 and presence.

If i switch the static route 5060 all works, but with 5061 it does not.

Below is the log where "jabbertest1" presence user invites "wegrzyn" OCSr2 user.

I see error like:

11:31:59.928 |ID(2492) sip_sm.c(3738) Route DooS is On for next hop [10.100.50.81:5061;TLS]. No routes left to process. Terminate the branch with 404 Not Found.

but i am not sure what this means?

full log:

11:31:59.926 |PID(2492) sip_protocol.c(5994) Received 588 bytes TCP packet from 10.100.95.15:46137

INVITE sip:wegrzyn@equityoffice.com SIP/2.0

From: <sip:jabbertest1@equityoffice.com>;tag=afe8a888-f5f640a-13d8-45026-4ffefbff-382e5d7-4ffefbff

To: <sip:wegrzyn@equityoffice.com>

Call-ID: ae67af10-f5f640a-13d8-45026-4ffefbff-a1bd6a9-4ffefbff

CSeq: 1 INVITE

Via: SIP/2.0/TCP 10.100.95.15:5080;branch=z9hG4bK-4ffefbff-7c085fb5-5cf09ddd

User-Agent: Cisco-Systems-Partitioned 8.0

Max-Forwards: 70

Contact: <sip:10.100.95.15:5080;transport=TCP>

Content-Type: application/sdp

Content-Length: 87

v=0

o=- 0 0 IN IP4 0.0.0.0

s=session

c=IN IP4 0.0.0.0

t=0 0

m=message 5060 sip 0

11:31:59.926 |Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_numexpand.c(891) User wegrzyn is IP or contains non-E164 character, no number expansion applied.

11:31:59.926 |[Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_numexpand.c(891) User jabbertest1 is IP or contains non-E164 character, no number expansion applied.

11:31:59.926 |Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_numexpand.c(891) User wegrzyn is IP or contains non-E164 character, no number expansion applied.

11:31:59.926 |PID(2492) sip_sm.c(1177) Sent 357 bytes TCP packet to 10.100.95.15:46137

SIP/2.0 100 Trying

Via: SIP/2.0/TCP 10.100.95.15:5080;received=10.100.95.15;branch=z9hG4bK-4ffefbff-7c085fb5-5cf09ddd

Call-ID: ae67af10-f5f640a-13d8-45026-4ffefbff-a1bd6a9-4ffefbff

From: <sip:jabbertest1@equityoffice.com>;tag=afe8a888-f5f640a-13d8-45026-4ffefbff-382e5d7-4ffefbff

To: <sip:wegrzyn@equityoffice.com>

CSeq: 1 INVITE

Content-Length: 0

11:31:59.926 |PID(2492) sip_sm.c(967) TCB_PROXIED_STATE_TIMER : 60 seconds.

11:31:59.926 |ID(2492) sip_sm.c(4846) Non-CUPC request received from IP: 10.100.95.15

11:31:59.926 |PID(2492) mod_sip.c(2950) us_validate_msft_fed_header(): User Agent Header is invalid

11:31:59.926 |ID(2492) sip_sm.c(5027) SIPGW Partitioned Fed UA Header found in this request

11:31:59.926 |ID(2492) sip_sm.c(5060) This is a partitioned federation request, skip User Location DB lookup

11:31:59.926 |ID(2492) sip_sm.c(5250) This is an outbound Partitioned federation request.

11:31:59.926 |[Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_numexpand.c(891) User wegrzyn is IP or contains non-E164 character, no number expansion applied.

11:31:59.926 |Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_routing.c(1426) Routing: dipping for equityoffice.com

11:31:59.926 |Thu Jul 12 11:31:59 2012] PID(2492) imdb_regroute.c(305) imdb_find_route(): imdb_find_route: search_key is .com.equityoffice, r_type is 0

11:31:59.926 |[Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_imdb.cpp(174) IMDBFindRouteInternal(): IMDBFindRouteInternal: query is select * from route where contactuser_type = 1;

11:31:59.927 |Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(5499) IPC message read event

11:31:59.927 |[Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(3886) sip_tcp received auth state as: 0 for connid: 3 sockfd 34 flags 2 from sip_sm

11:31:59.927 |Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(5526) socket write event on: 34

11:31:59.927 |Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(4688) Inside sip_tcp_write_handler

11:31:59.927 |Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(680) sip_tcp is now sending ok pdu 10.100.95.15 connid 3, sock_fd 34 1 msgs

11:31:59.927 |Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(5526) socket write event on: 8

11:31:59.927 |Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(4688) Inside sip_tcp_write_handler

11:31:59.928 |[Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_imdb.cpp(975) clearRouteIMDBConnection(): clear IMDB route connection

11:31:59.928 |Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_imdb.cpp(263) findMatchingRoutes(): search_key is .com.equityoffice

11:31:59.928 |[Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_imdb.cpp(269) findMatchingRoutes(): destinationpattern is .com.equityoffice, strloc is .com.equityoffice

11:31:59.928 |Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_routing.c(1464) Routing: Found domain route for equityoffice.com:10.100.50.81:5061;TLS pwf 1:1:5

11:31:59.928 |ID(2492) mod_sip_privacy.c(1197) Honor Privacy at receive. Privacy directive is On.

11:31:59.928 |ID(2492) mod_sip_privacy.c(1257) Upstream 10.100.95.15 is a trusted address.

11:31:59.928 |ID(2492) mod_sip_privacy.c(1265) PrivacyWithPAI is On.

11:31:59.928 |ID(2492) mod_sip_privacy.c(686) Request not authenticated, no PAI header added

11:31:59.928 |ID(2492) mod_sip_privacy.c(1285) PrivacyWithRPID is Off.

11:31:59.928 |[Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_numexpand.c(891) User wegrzyn is IP or contains non-E164 character, no number expansion applied.

11:31:59.928 |ID(2492) mod_sip_rtf.c(302) rtf_check_bad_route(): input CISCO-UA_RTF-10.100.50.81-5061-TLS@corp-cups01, output 52c26fc6-c260b127-521c1ffd-45002f47

11:31:59.928 |Thu Jul 12 11:31:59 2012] PID(2492) mod_sip_routing.c(1297) Not to do Less Specific Route Search.

11:31:59.928 |ID(2492) sip_sm.c(3738) Route DooS is On for next hop [10.100.50.81:5061;TLS]. No routes left to process. Terminate the branch with 404 Not Found.

11:31:59.928 |[Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(5499) IPC message read event

11:31:59.928 |[Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(3886) sip_tcp received auth state as: 0 for connid: 3 sockfd 34 flags 2 from sip_sm

11:31:59.928 |[Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(5526) socket write event on: 34

11:31:59.928 |Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(4688) Inside sip_tcp_write_handler

11:31:59.928 |[Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(680) sip_tcp is now sending ok pdu 10.100.95.15 connid 3, sock_fd 34 1 msgs

11:31:59.928 |[Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(5526) socket write event on: 8

11:31:59.928 |Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(4688) Inside sip_tcp_write_handler

11:31:59.929 |[Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(5521) socket read event on: 34

11:31:59.929 |Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(4536) Inside sip_tcp_read_handler

11:31:59.929 |[Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(638) sip_tcp is now reporting pdu to state machine 10.100.95.15 connid 3, sock_fd 34 0 msgs

11:31:59.929 |[Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(5526) socket write event on: 8

11:31:59.929 |[Thu Jul 12 11:31:59 2012] PID(1580) sip_tcp.c(4688) Inside sip_tcp_write_handler

11:31:59.929 |ID(2497) sip_protocol.c(5994) Received 442 bytes TCP packet from 10.100.95.15:46137

ACK sip:wegrzyn@equityoffice.com SIP/2.0

From: <sip:jabbertest1@equityoffice.com>;tag=afe8a888-f5f640a-13d8-45026-4ffefbff-382e5d7-4ffefbff

To: <sip:wegrzyn@equityoffice.com>;tag=7512ace9-69319ade

Call-ID: ae67af10-f5f640a-13d8-45026-4ffefbff-a1bd6a9-4ffefbff

CSeq: 1 ACK

Via: SIP/2.0/TCP 10.100.95.15:5080;branch=z9hG4bK-4ffefbff-7c085fb5-5cf09ddd

Max-Forwards: 70

Contact: <sip:10.100.95.15:5080;transport=TCP>

Content-Length: 0

11:31:59.929 |Thu Jul 12 11:31:59 2012] PID(2497) mod_sip_numexpand.c(891) User wegrzyn is IP or contains non-E164 character, no number expansion applied.

11:31:59.929 |Thu Jul 12 11:31:59 2012] PID(2497) mod_sip_numexpand.c(891) User jabbertest1 is IP or contains non-E164 character, no number expansion applied.

11:31:59.929 |Thu Jul 12 11:31:59 2012] PID(2497) mod_sip_numexpand.c(891) User wegrzyn is IP or contains non-E164 character, no number expansion applied.

11:31:59.929 |PID(2492) sip_sm.c(1177) Sent 413 bytes TCP packet to 10.100.95.15:46137

SIP/2.0 404 Not Found - Route Dynamic Out of Service

Via: SIP/2.0/TCP 10.100.95.15:5080;received=10.100.95.15;branch=z9hG4bK-4ffefbff-7c085fb5-5cf09ddd

Call-ID: ae67af10-f5f640a-13d8-45026-4ffefbff-a1bd6a9-4ffefbff

From: <sip:jabbertest1@equityoffice.com>;tag=afe8a888-f5f640a-13d8-45026-4ffefbff-382e5d7-4ffefbff

To: <sip:wegrzyn@equityoffice.com>;tag=7512ace9-69319ade

CSeq: 1 INVITE

Content-Length: 0

keglass · ‎07-12-2012

Bart,

This community does not provide technical support and is not staffed with technical support experts. I recommend you post this and future technical support questions to the Cisco Support Community (https://supportforums.cisco.com/index.jspa) where our Cisco technical support experts provide debugging assistance. Another option is to open a ticket with the Cisco Technical Assistance Center (www.cisco.com/go/support) to get expert debugging assistance.

We do encourage you to participate in the Cisco Collaboration Community and to also join our Cisco Collaboration User Group program! In the community, we encourage your discussion/sharing around collaboration topics and Cisco Collaboration Solutions, including business and IT requirements, industry trends, process, culture/organization issues, how collaboration can be used to transform businesses, vendor selection, adoption, training, architecture, licensing, and product features/functionality. If you are a customer or partner, you can also join the user group program to be eligible for member-only events and influence product direction.

We hope to hear from you again.

Kelli Glass

Moderator for the Cisco Collaboration Community

blwegrzyn · ‎07-12-2012

Thx i reposted in other forum.