Calls unknow

[Bruno Rangel]

My customer is receiving in your customer's bill many international calls unknown ,Jamaica, Sierra Leone and other countrys, which has no relationship comercial.
I think the thing should be done without going through the CUCM that these are not included in the CDR routes must hit the cisco 2811 voice gateway and that is carried by direct E1,
Someone has something like this? How do to protect?

[Daniele Giordano · Accepted solution]

I had similar experiences caused by hacker attack.

Use CDR tool of CUCM and 2811 to check call activity.

On the gateway you can use "gw-accounting" command to export CDR.

If your device has public IP address use ACL to block all unauthorized traffic.

Block all unused services using "call service stop" under "voice service voip" menu.

Depending on IOS loaded on 2811, use not standard port and configure "source-filter" command under "voice service voip - sip" menu.

In CUCM, block calls after working hours. Use strong username and password and authenticated calls.

My suggestion is to examine all aspects of security and take measures.

Regards.

[Bruno Rangel]

Hi Dani

I will chek !

Thank you

[Bruno Rangel]

Hi

Do you know any reference about these configurations?
I need a initial documentation to setup it.