Cisco IP Phone Registration Rejected

[alshahiry]

Dears,

I have an error message when I’m attaching my new Cisco IP phones (7945 and 9971) to my VoIP network which have both primary and secondary CUCMs. Network is working properly and i was able to get my ip phones registered automatically and just had this new problem, any advice of the cause?

Note: Attached is the snap shoot of the error message i get.

[Manish Gogna]

Hi,

A few things to check:

1) Erase any ITL / CTL files from Security configuration on the phone

2) Remive any unassigned Directory numbers from callmanager ( sometimes the error about security is misleading )

HTH

Manish

[alshahiry]

Dear Manish,

How i can erase the ITL/CTL from the ip phone security configuration, for all IP phones?

[Manish Gogna]

It has to be done manually by going into Settings of each IP phone physically. There are some third party utilities like Phone view which you can use but it comes at a price. Additionally i am aware that TAC was helping some customers by using a script for the same but for that you need to contact TAC for more details.

Manish

[alshahiry]

The main issue here is that when i'm trying to add a new IP phone i get the message of " Registration Rejected" and still not yet added into my list. How i can do that for an IP phone not yet added, kinldy advise?

[islam.kamal]

Hi

Can you share with us answers for the below questions

1-Did your configure CUCM group ?.

2-Which server is the 1st on the list (Pub or Sub)?.

3-Did you configure DHCP?. How can you use DHCP?.Is the DHCP on CUCM , or on router?.

4-Did you use auto registeraton?.

If you faced problems , you can add the phones manually phone by phone , just a test.

Thank you

please rate all useful information

[Nishant Savalia]

Hi alshahiry,

Try new phone registration by disabling "security services" from call manager of all nodes (i.e pub & sub).

Regards,

Nishant Savalia

[islam.kamal]

Hi

You have to got to your Cisco IP phone , setting go down -security -Then press ** # to unlock the phone then erase will appear in the right bottom press then wait , i think this will help you.

Thank you

please rate all useful information

[Stephen Welsh]

Hi,

If you do have ITL issues, or need to delete ITL Files in bulk remotely, the most effective way as indicated byManish is PhoneView from UnifiedFX (http://www.unifiedfx.com). A recently added feature is teh Endpoint Security & Compliance report that allows you to detect, report and remediate any endpoint security issues including ITL files.

Myself and Akhil Behl (author of "Securing Cisco IP Telephony Networks") recently hosted a series of webinars that covers this topic in detail. I recommend you watch the following videos:

UnifiedFX Educational seminars on The Essentials of Endpoint Security & Compliance
• Session 1: The Impact of Security by Default (Recording: http://goo.gl/2yJaKm)
• Session 2: Understanding and Managing ITL & CTL Files (Recording: http://goo.gl/w05Dqh)

• Session 3: Leading Practices for Endpoint Security & Compliance (Recording: http://goo.gl/GuXy2P)

Kind Regards.

Stephen Welsh

CTO

UnifiedFX

http://www.unifiedfx.com

[alshahiry]

Dears,

Eventually it shows that the registration pool was filled and rejected any new IP phones added and i increase the pool range and everything is working propley now, with thanks.