Cisco IP communicator and VPN client

[bigcappa1]

Guys,

Got IPC (version 8.6.1) running on Win7 64bit with VPN client version 5.0.07.0440. (64bit)

We use em so when we press services we can see the login option and the phone appears to register but the screen remains blank and unable to dial. Any one else seen this issue, to be honest I had it on the win7 32 bit as well but just went back to 7.0.5

Thanks

Paul

Sent from Cisco Technical Support iPad App

[paolo bevilacqua]

Mention phone system and version you're using ?

[bigcappa1]

Paolo,

This happens on any version of CUCM. We have a version 6 cluster, version 7.0, version 7.1 and a version 8.5 (x2), I have connected to all 5 clusters and the same result, all the clusters are fine if I drop the IPC down to 7.0.5,

Any help would be appreciated

many Thanks

Paul

[Udit Mehrotra]

Is there a firewall in between CUCM and CIPC, doing SCCP packet inspection?

--

Udit

[bigcappa1]

Udit,

Thats a good point we recently had an issue with 79XX phones runing over a VPN that were new, they were on UDI version 11, which is the latest version, though all the ports were open in the firewall the Juniper firewall inspection was still dropping the packets as it did not recognise the version of code the Juniper was running. In the end we had to disable this inspection using the "unset alg sccp enable" on the Juniper gateway, not ideal but got rounf the issue, With regards to IPC  as it works on version.7.0.5 no problem has a similar thing happened with version 8.6.0 where the version information it not being recognised by the FW

Looks like a TAC case could be in order

Thanks

Paul

[Udit Mehrotra · Accepted solution]

CIPC 8.5+ does SCCP ver 17+ which is not recognized by some firewalls doing deep packet inspection. The older versions work because, the SCCP version is correctly recognized by the firewall's deep packet inspection element.

Check Juniper KB article -

http://kb.juniper.net/InfoCenter/index?page=content&id=KB18226

HTH

--

Udit

[bigcappa1]

Unit,

Spot on that was it the SCCP version was incorrect.

Looks like a small word with the firewall guys

Thanks

Paul

Sent from Cisco Technical Support iPad App