Cisco IP Phone SSL VPN DHCP issue

[fgasimzade]

Hello everyone!

We have got 4 SSL VPNs over ASA to CUCM8.

Everything works fine, I just noticed that 2-3 Ip phones, while registered over SSL VPN, change or swap their IP address too often, every 20-30 seconds. Is it a normal behaviour?

I set up one Ip phone in my office, there is no sign of disconnect, however, when checking its ip address on CUCM, it changes frequently.

Thanks everyone in advance

[lusandi]

Hello,

Can you post the running configuration affecting the phones, and the call manager configuration?

Regards,

Luis Sandi

[fgasimzade]

ip local pool ssl 192.168.121.130-192.168.121.200 mask 255.255.255.0

ssl encryption 3des-sha1 rc4-md5 aes128-sha1 aes256-sha1

webvpn

enable remote-access

svc image disk0:/anyconnect-win-2.4.1012-k9.pkg 1

svc enable

tunnel-group-list enable

group-policy ssl internal

group-policy ssl attributes

dns-server value 192.168.1.2

vpn-tunnel-protocol IPSec l2tp-ipsec svc webvpn

group-lock value SSL

webvpn

  url-list value SPS

tunnel-group SSL type remote-access

tunnel-group SSL general-attributes

address-pool ssl

authentication-server-group (remote-access) LOCAL

default-group-policy ssl

username-from-certificate use-entire-name

tunnel-group SSL webvpn-attributes

group-alias SSL enable

group-url https://*.*.43.1/ enable

Which CUCM config do you need? I just noticed only 2 phones are acting like that.. In one moment they even had the same IPs, when I refreshed, one of them already changed it

[fgasimzade]

This is what I found in debug webvpn session

http_webvpn_sslTunnel_kill

: reset idle timeout success

Cant find description though