topic Re: CUCM-Secure SIP Trunk in Unified Communications Infrastructure

CUCM-Secure SIP Trunk

abdulkarim041 — Wed, 28 Apr 2021 07:53:39 GMT

hi,

I am facing the following error while configuring the secure SIP trunk security profile for the SIP trunk in CUCM

Unified Communications Manager cluster is not licensed for Export Control functionality hence Device Security Mode Cannot be set as Encrypted/Authenticated.

How to get rid of it?

AbdulKarim

Re: CUCM-Secure SIP Trunk

mbrackett2994 — Wed, 28 Apr 2021 12:09:28 GMT

Hi Abdul,

What country are you located in? It sounds like due the the region you are in certain encryption is not allowed to be exported out of the United States so certain encryption is not supported

Re: CUCM-Secure SIP Trunk

Nithin Eluvathingal — Wed, 28 Apr 2021 12:56:03 GMT

There is Unrestricted and Restricted version.To have security features you need to have restricted version.

if you are running unrestricted version its not possible to migrate to restricted. you need to do a fresh install and import data.

RESTRICTED CUCM is the "full" CUCM with media and signaling encryption ENABLED. This does not mean the feature is ‘ON’ all the time, simply that it is available for the customer to use.
UNRESTRICTED CUCM versions have all media and signaling encryption features DISABLED to comply with US export laws. This means that they cannot use CUCM encryption.
Unrestricted CUCM installers always have UNRST in the filename.
Restricted CUCM installers do not have any specific reference in

the filename. These are the same as previous versions of CUCM.

Re: CUCM-Secure SIP Trunk

Jaime Valencia — Wed, 28 Apr 2021 16:31:16 GMT

It actually sounds like you do have the restricted version, BUT, you do not have the export controlled functionality license which is required for encryption.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/12_5_1SU1/systemConfig/cucm_b_system-configuration-guide-1251su1/cucm_b_system-configuration-guide-1251su1_restructured_chapter_011.html#task_B9397D4ABF18BBFF83725C719F9F5793

On 11.5 the license key would need to be added to PLM before you can enable anything that requires encryption. Can't recall exactly on which 11.5 release this was introduced, maybe around SU5 I think.

Re: CUCM-Secure SIP Trunk

Nithin Eluvathingal — Wed, 28 Apr 2021 16:54:08 GMT

11.5.1SU3 requires the Encryption License in order to enable mixed-mode and PLM does not support the Encryption License until 11.5.1SU2.

its a 0$ part number.

Re: CUCM-Secure SIP Trunk

abdulkarim041 — Sat, 01 May 2021 13:34:14 GMT

Dear Nithin,

Thank you so much.

My CUCM version is Bootable_UCSInstall_UCOS_12.5.1.10000-22.sgn.

Could you please help me to solve the problem.

Re: CUCM-Secure SIP Trunk

abdulkarim041 — Sat, 01 May 2021 13:35:36 GMT

Dear Jamie,

Thank you so much.

My CUCM version is Bootable_UCSInstall_UCOS_12.5.1.10000-22.sgn.

Could you please help me to solve the problem.

Re: CUCM-Secure SIP Trunk

abdulkarim041 — Sat, 01 May 2021 13:38:34 GMT

Its Dubai.

Re: CUCM-Secure SIP Trunk

abdulkarim041 — Sat, 01 May 2021 13:45:32 GMT

Could you please share the part number please.

Re: CUCM-Secure SIP Trunk

Jaime Valencia — Sat, 01 May 2021 13:46:24 GMT

Already did, what you need is in the link I provided, did you look at it???

Re: CUCM-Secure SIP Trunk

Nithin Eluvathingal — Sat, 01 May 2021 17:22:05 GMT

LIC-UC-ENC

UC Encryption License

See the Product Migration Options section below for detailed information on replacing this product.