cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
12208
Views
0
Helpful
4
Replies

7961 and 7941 phones unable to register to ccme router

ayen
Level 1
Level 1

I ran into an issue where 7961 and 7941 phones are unable to register to ccme router 2811, looks like a .tlv file that begins with CTLSEP is missing at the cme router.

Tried to factory reset the phone, installed various IOS images on the 2811 but still not working

If any one has dealt with this issue previously, please let me know how you fixed it. Thanks

2 Accepted Solutions

Accepted Solutions

Aaron Harrison
VIP Alumni
VIP Alumni

Hi

Don't worry about the CTLSEP file; it's basically the phone trying to download a certificate trust list in case the CME/CUCM it is trying to register to is configured in 'secure' mode:

Secure and Nonsecure Configuration

The Cisco IP Phone 7960 and 7940 platform supports configuration-file authentication, certificate installation, and device authentication with the call control unit. By default, the phone is nonsecure until the phone detects that it needs to take additional steps to configure itself in secure mode. The initial step in this determination is through a CTLSEP MAC file request upon bootup (for example, CTLSEP003094C25D2E.tlv). The CTLSEP MAC file is a certificate trust list, which if populated, contains information about the servers to which the phone is attempting to connect and whether the server connection will be secure or nonsecure.

The CTLSEP MAC file is the first file requested in the universal application loader, followed by the additional six configuration files in the hunt algorithm defined in the "Universal Application Loader" section. If the CTLSEP MAC file is present, the phone proceeds with additional security actions regarding phone and server communication; if the CTLSEP MAC file is not present or is empty, the phone proceeds in nonsecure mode with the hunt algorithm.


Perhaps post up your CME config.

Have you configured 'create cnf-files' under telephone-service?

Are you debugging TFTP from the router, or from the phone status messages screen?

Aaron

Aaron Please remember to rate helpful posts to identify useful responses, and mark 'Answered' if appropriate!

View solution in original post

get into config t

Unter telephony service replace that ip address with the loopback address.

ip source-address port 2000

exit

Create cnf-files

reset your ephone

and see if it registers.

If this helps, please rate.

thanks.

View solution in original post

4 Replies 4

Aaron Harrison
VIP Alumni
VIP Alumni

Hi

Don't worry about the CTLSEP file; it's basically the phone trying to download a certificate trust list in case the CME/CUCM it is trying to register to is configured in 'secure' mode:

Secure and Nonsecure Configuration

The Cisco IP Phone 7960 and 7940 platform supports configuration-file authentication, certificate installation, and device authentication with the call control unit. By default, the phone is nonsecure until the phone detects that it needs to take additional steps to configure itself in secure mode. The initial step in this determination is through a CTLSEP MAC file request upon bootup (for example, CTLSEP003094C25D2E.tlv). The CTLSEP MAC file is a certificate trust list, which if populated, contains information about the servers to which the phone is attempting to connect and whether the server connection will be secure or nonsecure.

The CTLSEP MAC file is the first file requested in the universal application loader, followed by the additional six configuration files in the hunt algorithm defined in the "Universal Application Loader" section. If the CTLSEP MAC file is present, the phone proceeds with additional security actions regarding phone and server communication; if the CTLSEP MAC file is not present or is empty, the phone proceeds in nonsecure mode with the hunt algorithm.


Perhaps post up your CME config.

Have you configured 'create cnf-files' under telephone-service?

Are you debugging TFTP from the router, or from the phone status messages screen?

Aaron

Aaron Please remember to rate helpful posts to identify useful responses, and mark 'Answered' if appropriate!

Hey

Problem is still there, right now there are two phones 7960 and 7961, 7960 is fine, only 7961, if I remember correctly, 7941 also had this issue.

Yes, ‘create cnf-files’ has been configured under telephony-service.  The debug tftp event output may indicate that CTLSEP….tlv could be the issue.

*Oct 16 02:09:17.425: TFTP: Looking for CTLSEP000AB830C3A6.tlv

*Oct 16 02:09:17.545: TFTP: Looking for SEP000AB8A8C3A6.cnf.xml

*Oct 16 02:09:17.549: TFTP: Opened flash:/its/vrf1/SEP000AB830C3A6.cnf.xml, fd 7, size 1278 for process 232

*Oct 16 02:09:17.557: TFTP: Finished flash:/its/vrf1/SEP000AB830C3A6.cnf.xml, time 00:00:00 for process 232

Phone status message also has similar messages

1:01:14a File Not Found : CTLFile.tlv

1:01:14a No CTL installed

1:01:14a SEP000AB830C3A6.cnf.xml

1:04:08a File Not Found : CTLFile.tlv

1:04:09a No CTL installed

1:04:09a SEP000AB830C3A6.cnf.xml

br2-rtr#show ephone

ephone-1[0] Mac:0007.8551.EC18 TCP socket:[1] activeLine:0 REGISTERED in SCCP ver 11/9

mediaActive:0 offhook:0 ringing:0 reset:0 reset_sent:0 paging 0 debug:0 caps:8

IP:10.10.202.55 50570 Telecaster 7960  keepalive 43 max_line 6 available_line 6

button 1: dn 1  number 3001 CH1   IDLE        

Preferred Codec: g711ulaw

ephone-2[1] Mac:000A.B830.C3A6 TCP socket:[-1] activeLine:0 UNREGISTERED

mediaActive:0 offhook:0 ringing:0 reset:0 reset_sent:0 paging 0 debug:0 caps:0

IP:0.0.0.0 0 Unknown 0  keepalive 0 max_line 0 available_line 0

Preferred Codec: g711ulaw

br2-rtr#show ephone registered

ephone-1[0] Mac:0007.8551.EC18 TCP socket:[1] activeLine:0 REGISTERED in SCCP ver 11/9

mediaActive:0 offhook:0 ringing:0 reset:0 reset_sent:0 paging 0 debug:0 caps:8

IP:10.10.202.55 50570 Telecaster 7960  keepalive 43 max_line 6 available_line 6

button 1: dn 1  number 3001 CH1   IDLE        

Preferred Codec: g711ulaw

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname br2-rtr

!

boot-start-marker

boot system flash flash:c2800nm-adventerprisek9-mz.124-22.T4.bin

boot-end-marker

!

card type t1 0 0

card type e1 0 1

logging message-counter syslog

!

no aaa new-model

clock timezone CET 1

clock summer-time CET recurring

no network-clock-participate wic 0

network-clock-participate wic 1

!        

dot11 syslog

ip source-route

!

!

ip cef

no ip dhcp use vrf connected

ip dhcp excluded-address 10.10.202.1 10.10.202.49

ip dhcp excluded-address 10.10.202.70 10.10.202.254

!

ip dhcp pool CME

   network 10.10.202.0 255.255.255.0

   option 150 ip 10.10.110.3

   default-router 10.10.202.1

!

!

no ip domain lookup

no ipv6 cef

!

multilink bundle-name authenticated

!

!

voice-card 0

!

!

!

!        

!

vtp mode client

archive

log config

  hidekeys

! controller T1 0/0/0

cablelength long 0db

channel-group 0 timeslots 1-24

!

controller T1 0/0/1

cablelength long 0db

!

controller E1 0/1/0

!

!

!

!

!        

interface Loopback0

ip address 10.10.110.3 255.255.255.255

ip ospf network point-to-point

!

interface FastEthernet0/0

no ip address

duplex auto

speed auto

!

interface FastEthernet0/1

no ip address

duplex auto

speed auto

!

interface FastEthernet0/3/0

switchport mode trunk

!

interface FastEthernet0/3/1

!

interface FastEthernet0/3/2

!

interface FastEthernet0/3/3

!        

interface Serial0/0/0:0

no ip address

encapsulation frame-relay IETF

no fair-queue

frame-relay lmi-type ansi

!

interface Serial0/0/0:0.1 point-to-point

ip address 10.10.112.2 255.255.255.0

ip ospf mtu-ignore

snmp trap link-status

frame-relay interface-dlci 102  

!

interface Service-Engine1/0

no ip address

shutdown

!

interface Vlan1

no ip address

!

interface Vlan200

ip address 10.10.102.1 255.255.255.0

!

interface Vlan400

ip address 10.10.202.1 255.255.255.0

!

router ospf 1

router-id 10.10.202.1

log-adjacency-changes

network 10.10.0.0 0.0.255.255 area 0

!

ip forward-protocol nd

ip http server

no ip http secure-server

!

!

!

!

!

!

!

!

!

tftp-server flash:P00308000900.bin alias P00308000900.bin

tftp-server flash:P00308000900.loads alias P00308000900.loads

tftp-server flash:P00308000900.sb2 alias P00308000900.sb2

tftp-server flash:P00308000900.sbn alias P00308000900.sbn

tftp-server flash:apps41.8-3-2-27.sbn alias apps41.8-3-2-27.sbn

tftp-server flash:cnu41.8-3-2-27.sbn alias cnu41.8-3-2-27.sbn

tftp-server flash:cvm41sccp.8-3-2-27.sbn alias cvm41sccp.8-3-2-27.sbn

tftp-server flash:dsp41.8-3-2-27.sbn alias dsp41.8-3-2-27.sbn

tftp-server flash:jar41sccp.8-3-2-27.sbn alias jar41sccp.8-3-2-27.sbn

tftp-server flash:SCCP41.8-3-3S.loads alias SCCP41.8-3-3S.loads

tftp-server flash:term41.default.loads alias term41.default.loads

tftp-server flash:term61.default.loads alias term61.default.loads

tftp-server flash:MK-SCCP.JAR alias English_United_States/mk-sccp.jar

tftp-server flash:G3-TONES.XML alias United_States/g3-tones.xml

!

control-plane

!

!

!

ccm-manager fax protocol cisco

!

!

!

!

!

gateway

timer receive-rtp 1200

!

sip-ua

!

!

!

telephony-service

no auto-reg-ephone

max-ephones 3

max-dn 3

ip source-address 10.10.100.3 port 2000

system message BR2 CME

cnf-file location flash:

cnf-file perphone

load 7960-7940 P00308000900

load 7961 SCCP41.8-3-3S

date-format dd-mm-yy

max-conferences 8 gain -6

transfer-system full-consult

create cnf-files version-stamp 7960 Oct 15 2010 06:55:06

!

!

ephone-dn  1

number 3001

description 3214-3001

!

!

ephone-dn  2

number 3002

description 3214-3002

!

!

ephone-dn  3

number 3003

description 3214-3003

!

!

ephone  1

device-security-mode none

mac-address 0007.8551.EC18

max-calls-per-button 5

busy-trigger-per-button 3

type 7960

button  1:1

ephone  2

device-security-mode none

mac-address 000A.B830.C3A6

max-calls-per-button 5

busy-trigger-per-button 3

type 7961

button  1:2

!

!

!

line con 0

line aux 0

line 66

no activation-character

no exec

transport preferred none

transport input all

transport output pad telnet rlogin lapb-ta mop udptn v120 ssh

line vty 0 4

privilege level 15

password cisco

login

transport input all

line vty 5 15

privilege level 15

password cisco

login

!

scheduler allocate 20000 1000

ntp source Vlan400

ntp server 10.10.100.2

end

Searched for other postings, this post has a similar issue. https://supportforums.cisco.com/message/337619#337619.  my temporary work around is to use this 7961 to register to call manager and use another 7960 phone for br2.  But I really want to find an answer.  Thanks.

get into config t

Unter telephony service replace that ip address with the loopback address.

ip source-address port 2000

exit

Create cnf-files

reset your ephone

and see if it registers.

If this helps, please rate.

thanks.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: