CUBE and Bandwidth

[mightyking]

Hello Everyone,

We have an HA CUBE on 4351.

With our monitoring tool we see the SIP provider is sending us 200M but the tool shows we can only use 13.5M. We have a major call quality when reaching the 13.5M. We are unable to see where this cap is in our CUBE. Do you guys have any idea where should we look to find the 13.5 limitation?

universalk9.16.09.08.SPA

Thanks,

MK

[Roger Kallberg]

If you share your configuration it would be a little easier for us to help you.

[mightyking]

Hi Roger,

Please find below the config for the CUBE. I am also sending you the details for a call which shows Qos negotiation is at Best Effort. Coud this be an issue?

SIP UAC CALL INFO
Call 1
SIP Call ID : 11A00F07-860311ED-95E2B278-9293A2BF@10.89.0.102
State of the call : STATE_ACTIVE (7)
Substate of the call : SUBSTATE_NONE (0)
Calling Number : 5819891915
Called Number : 5143792345
Called URI : sip:5143792345@10.x.x.x
Bit Flags : 0xC04018 0x90000100 0x80
CC Call ID : 1504250
Local UUID : 127e00cc9f594e8a7d81fba271016613
Remote UUID : 5d701c0c27e75ce19cce893d5e2b6533
Source IP Address (Sig 10.x.x.102
Destn SIP Req Addr:Port : [10.x.x.7]:5060
Destn SIP Resp Addr:Port: [10.x.x.7]:5060
Destination Name : 10.x.x.7
Number of Media Streams : 1
Number of Active Streams: 1
RTP Fork Object : 0x0
Media Mode : flow-through
Media Stream 1
State of the stream : STREAM_ACTIVE
Stream Call ID : 1504250
Stream Type : voice-only (0)
Stream Media Addr Type : 1
Negotiated Codec : g711ulaw (160 bytes)
Codec Payload Type : 0
Negotiated Dtmf-relay : inband-voice
Dtmf-relay Payload Type : 0
QoS ID : -1
Local QoS Strength : BestEffort
Negotiated QoS Strength : BestEffort
Negotiated QoS Direction : None
Local QoS Status : None

CUBE Config

x.x..x.x#show running-config
Building configuration...

Current configuration : 21181 bytes
!
! Last configuration change at 00:26:02 UTC Wed Dec 28 2022 by daultgu2
!
version 16.9
service timestamps debug datetime msec
service timestamps log datetime msec
service call-home
platform qfp utilization monitor load 80
no platform punt-keepalive disable-kernel-core
!
hostname x.x..x.x
!
boot-start-marker
boot system flash isr4300-universalk9.16.0x.x8.SPA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
logging buffered 16384 warnings
!
aaa new-model
!
!
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization config-commands
aaa authorization exec default group tacacs+ if-authenticated
aaa authorization commands 0 default group tacacs+ if-authenticated
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ if-authenticated
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 0 default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
!
!
!
!
!
!
aaa session-id common
call-home
! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
contact-email-addr sch-smart-licensing@cisco.com
profile "CiscoTAC-1"
active
destination transport-method http
no destination transport-method email
!
ip host x.x03tg1.x.x 10.x.x.x
ip host x.x03tg4.x.x 10.x.x.x
ip name-server 10.x.x.x
ip domain name x.x..x.x
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
password encryption aes
!
!
crypto pki trustpoint SLA-TrustPoint
enrollment terminal
revocation-check crl
!
!
crypto pki certificate chain SLA-TrustPoint
certificate ca 01
30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030
32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363
6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934
3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305
43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720
526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030
82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D
CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520
1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE
4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC
7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188
68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7
C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191
C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44
DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201
06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85
4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500
03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905
604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B
D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8
467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C
7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B
5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678
80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB
418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0
D697DF7F 28
quit
!
!
!
voice service voip
ip address trusted list
ipv4 10.x.x.7 255.255.255.255
ipv4 10.x.x.8 255.255.255.255
ipv4 10.x.x.9 255.255.255.255
ipv4 10.x.x.10 255.255.255.255
ipv4 10.x.x.11 255.255.255.255
ipv4 10.x.x.3 255.255.255.255
ipv4 10.x.x.14 255.255.255.255
ipv4 10.x.x.15 255.255.255.255
ipv4 10.x.x.5 255.255.255.255
ipv4 10.x.x.x 255.255.255.255
ipv4 10.x.x.x 255.255.255.255
ipv4 24.x.x.87 255.255.255.255
rtcp keepalive
address-hiding
mode border-element license capacity 500
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
redundancy-group 1
no supplementary-service sip refer
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711ulaw
sip
rel1xx supported "rel100"
no rtp send-recv
session refresh
registrar server expires max 3600 min 90
early-offer forced
midcall-signaling passthru
sip-profiles 3333
no call service stop
!
!
voice class uri 1006 sip
host 10.x.x.x
!
voice class uri 1056 sip
host 10.x.x.x
!
voice class uri 1000 sip
host 24.x.x.87
voice class codec 1
codec preference 1 g711ulaw
!
!
voice class sip-profiles 3333
request INVITE sip-header Content-Disposition remove
request INVITE sdp-header Audio-Connection-Info remove
response 200 sdp-header Audio-Connection-Info remove
!
voice class sip-profiles 86
request INVITE sip-header To modify "10.x.x.x" "x.x"
request INVITE sip-header SIP-Req-URI modify "10.x.x.x:5060" "x.x03tg1.x.x:5060"
!
voice class sip-profiles 87
request INVITE sip-header SIP-Req-URI modify "10.x.x.x:5060" "x.x03tg4.x.x:5060"
request INVITE sip-header To modify "10.x.x.x" "x.x"
!
voice class sip-profiles 80
request INVITE sip-header SIP-Req-URI modify "24.x.x.87:5060" "x.x01.sipott.v50.videotron.com:5060"
!
!
voice class server-group 100
ipv4 10.x.x.3
ipv4 10.x.x.14
ipv4 10.x.x.5
ipv4 10.x.x.8
ipv4 10.x.x.7
hunt-scheme round-robin
!
voice class server-group 110
ipv4 10.4x.x.9
ipv4 10.57.0.10
ipv4 10.x.x.3
ipv4 10.x.x.14
ipv4 10.x.x.5
hunt-scheme round-robin
!
voice class sip-options-keepalive 2
description Out of Order options vers CUCM
down-interval 25
up-interval 10
retry 6
transport udp
!
voice class sip-options-keepalive 1
description Out of Order options vers PSTN
down-interval 25
up-interval 5
retry 3
transport udp
!
voice class tenant 2
registrar 1 dns:x.x03tg1.x.x expires 3600
credentials username 5146572547LP password 7 02303C5C2D0C1876470836015C0F583E0E realm realm
authentication username 5146572547LP password 7 1524330B22203C7323750A3A4A1F5C3603
retry invite 2
connection-reuse
bind control source-interface GigabitEthernet0/0/2
no pass-thru content custom-sdp
!
voice class tenant 3
registrar 1 dns:x.x03tg4.x.x expires 3600
credentials username 5146575882LP password 7 03176332523C205A44280E373D realm realm
authentication username 5146575882LP password 7 0448333F5B124D580338122538
retry invite 2
connection-reuse
bind control source-interface GigabitEthernet0/0/2
no pass-thru content custom-sdp
!
voice class tenant 4
registrar 1 dns:x.x01.sipott.v50.videotron.com expires 3600
credentials username s146575764 password 7 07053519192F180E2418085851 realm realm
authentication username s146575764 password 7 0501125A766A4F022A0F14465E
retry invite 2
connection-reuse
no pass-thru content custom-sdp
!
!
!
!
voice translation-rule 2
rule 1 /^9/ //
!
voice translation-rule 3
rule 1 /^\+1/ //
!
voice translation-rule 4
rule 1 /^9\(..........$\)/ /1\1/
!
voice translation-rule 5
rule 1 /^91\(..........$\)/ /+1\1/
!
voice translation-rule 6
rule 1 /^9/ /1\1/
!
voice translation-rule 7
rule 1 /^9/ /+1\1/
!
voice translation-rule 8
rule 1 /^91/ /1\1/
!
voice translation-rule 9
rule 1 /^91/ /+1\1/
!
voice translation-rule 10
rule 1 /^11101\([2-9]..[2-9]......\)/ /\1/
rule 2 /^\([2-9]..[2-9]......\)/ /11101\1/
!
voice translation-rule 11
rule 1 /^91/ //
!
!
voice translation-profile 10_digits_remove9_add1
translate called 4
!
voice translation-profile 11_digits_remove91_add+1
translate called 5
!
voice translation-profile FromPSTN
translate called 10
!
voice translation-profile ToCUCM
translate called 10
!
voice translation-profile any_digits_remove91_add+1
translate called 9
!
voice translation-profile any_digits_remove91_add1
translate called 8
!
voice translation-profile any_digits_remove9_add+1
translate called 7
!
voice translation-profile any_digits_remove9_add1
translate called 6
!
voice translation-profile remove+1
translate calling 3
translate called 3
!
voice translation-profile remove9
translate called 2
!
voice translation-profile remove91
translate called 11
!
!
!
!
voice-card 0/4
no watchdog
!
license udi pid ISR4351/K9 sn FDO213018ES
no license smart enable
license smart url https://smartreceiver.cisco.com/licservice/license
license smart transport smart
diagnostic bootup level minimal
!
spanning-tree extend system-id
memory free low-watermark processor 69075
!
!
!
username rubensj secret 9 $9$lY0ChhHqBZvW8.$IQ6onrwtWIBC/8KgxRaj1/qu9iAGcKF4Sosrci6Xxtk
!
redundancy
mode none
application redundancy
group 1
name cube-ha
priority 101
timers delay 30 reload 60
control Port-channel1.2990 protocol 1
data Port-channel1.2990
track 1 shutdown
track 2 shutdown
!
!
!
!
!
!
track 1 interface Port-channel1.650 line-protocol
!
track 2 interface GigabitEthernet0/0/2 line-protocol
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Port-channel1
no ip address
no negotiation auto
!
interface Port-channel1.650
encapsulation dot1Q 650
ip address 10.x.x.101 255.255.255.0
redundancy rii 1
redundancy group 1 ip 10.x.x.102 exclusive
!
interface Port-channel1.2990
encapsulation dot1Q 2990
ip address 10.x.x.2 255.255.255.248
!
interface GigabitEthernet0/0/0
no ip address
negotiation auto
channel-group 1
!
interface GigabitEthernet0/0/1
no ip address
negotiation auto
channel-group 1
!
interface GigabitEthernet0/0/2
ip address 10.x.x.11 255.255.255.248
negotiation auto
redundancy rii 2
redundancy group 1 ip 10.x.x.12 exclusive
!
interface ucse0/1/0
no ip address
shutdown
no negotiation auto
switchport mode trunk
!
interface ucse0/1/1
no ip address
shutdown
no negotiation auto
switchport mode trunk
!
interface Service-Engine0/4/0
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
negotiation auto
!
ip default-gateway 10.x.x.254
ip forward-protocol nd
no ip http server
no ip http secure-server
ip tftp source-interface Port-channel1.650
ip route 0.0.0.0 0.0.0.0 10.x.x.254
ip route 10.x.x.x 255.255.255.255 10.x.x.9
ip route 10.x.x.x 255.255.255.255 10.x.x.9
!
ip ssh authentication-retries 5
ip ssh version 2
!
logging origin-id string CISCOELK-x.x..x.x
logging host 10.x.x.160
logging host 10.x.x.22
logging host 10.x.x.22
!
!
tacacs server SECT50002P
address ipv4 10.x.x.9
key 6 EXTdFE[YXUIYPG[HV`DV_VTATTXXYceFfZLDTeJKgGKA\\TbAAB
timeout 2
tacacs server SECTPDC03P
address ipv4 10.x.x.9
key 6 aVfScfLc_BEhLFES`CBEFI\CcTbfDaFIJOKfZZ`Y^MDWSNTQAAB
timeout 2
!
!
!
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
dial-peer voice 100 voip
description outbound to SIP provider 10 digits
translation-profile outgoing remove9
destination-pattern ^9[2-9]..[2-9]......$
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip asserted-id pai
voice-class sip privacy pstn
voice-class sip profiles 86
voice-class sip tenant 2
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 200 voip
description outbound call leg vers CUCM
translation-profile outgoing ToCUCM
preference 1
destination-pattern 11101[2-9]..[2-9]......
session protocol sipv2
session server-group 100
voice-class codec 1
voice-class sip options-keepalive profile 2
voice-class sip bind control source-interface Port-channel1.650
voice-class sip bind media source-interface Port-channel1.650
voice-class sip midcall-signaling passthru media-change
dtmf-relay rtp-nte
ip qos dscp cs3 signaling
no vad
!
dial-peer voice 16 voip
description In call-leg provenant de Broadworks
translation-profile incoming FromPSTN
preference 1
session protocol sipv2
incoming uri via 1006
voice-class codec 1
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 101 voip
description outbound to SIP provider 11 digits
translation-profile outgoing remove91
preference 1
destination-pattern ^91[2-9]..[2-9]......$
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip asserted-id pai
voice-class sip privacy pstn
voice-class sip profiles 86
voice-class sip tenant 2
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 102 voip
description outbound to SIP provider international
translation-profile outgoing remove9
preference 1
destination-pattern 9011T
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip asserted-id pai
voice-class sip privacy pstn
voice-class sip profiles 86
voice-class sip tenant 2
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 900 voip
description outbound to SIP provider
preference 1
destination-pattern ^911$
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip profiles 86
voice-class sip tenant 2
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 901 voip
description outbound to SIP provider
translation-profile outgoing remove9
preference 1
destination-pattern ^9[3-9]11$
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip profiles 86
voice-class sip tenant 2
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 110 voip
description outbound to SIP provider 10 digits
translation-profile outgoing remove9
preference 2
destination-pattern ^9[2-9]..[2-9]......$
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip asserted-id pai
voice-class sip privacy pstn
voice-class sip profiles 86
voice-class sip tenant 2
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 210 voip
description outbound call leg vers CUCM
translation-profile outgoing ToCUCM
preference 2
destination-pattern 11101[2-9]..[2-9]......
session protocol sipv2
session server-group 110
voice-class codec 1
voice-class sip options-keepalive profile 2
voice-class sip bind control source-interface Port-channel1.650
voice-class sip bind media source-interface Port-channel1.650
voice-class sip midcall-signaling passthru media-change
dtmf-relay rtp-nte
ip qos dscp cs3 signaling
no vad
!
dial-peer voice 17 voip
description In call-leg provenant de Broadworks
translation-profile incoming FromPSTN
preference 2
session protocol sipv2
incoming uri via 1006
voice-class codec 1
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 111 voip
description outbound to SIP provider 11 digits
translation-profile outgoing remove91
preference 2
destination-pattern ^91[2-9]..[2-9]......$
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip asserted-id pai
voice-class sip privacy pstn
voice-class sip profiles 86
voice-class sip tenant 2
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 112 voip
description outbound to SIP provider international
translation-profile outgoing remove9
preference 2
destination-pattern 9011T
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip asserted-id pai
voice-class sip privacy pstn
voice-class sip profiles 86
voice-class sip tenant 2
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 910 voip
description outbound to SIP provider
preference 2
destination-pattern ^911$
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip profiles 86
voice-class sip tenant 2
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 911 voip
description outbound to SIP provider
translation-profile outgoing remove9
preference 2
destination-pattern ^9911$
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip profiles 86
voice-class sip tenant 2
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 150 voip
description outbound to SIP provider 10 digits
translation-profile outgoing remove9
preference 2
destination-pattern ^9[2-9]..[2-9]......$
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip asserted-id pai
voice-class sip privacy pstn
voice-class sip profiles 87
voice-class sip tenant 3
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 57 voip
description In call-leg provenant de Broadworks
translation-profile incoming FromPSTN
preference 2
session protocol sipv2
incoming uri via 1056
voice-class codec 1
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 56 voip
description In call-leg provenant de Broadworks
translation-profile incoming FromPSTN
preference 1
session protocol sipv2
incoming uri via 1056
voice-class codec 1
voice-class sip bind control source-interface GigabitEthernet0/0/2
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 151 voip
description outbound to SIP provider 11 digits
translation-profile outgoing remove91
preference 3
destination-pattern ^91[2-9]..[2-9]......$
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip asserted-id pai
voice-class sip privacy pstn
voice-class sip profiles 87
voice-class sip tenant 3
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 152 voip
description outbound to SIP provider international
translation-profile outgoing remove9
preference 3
destination-pattern 9011T
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip asserted-id pai
voice-class sip privacy pstn
voice-class sip profiles 87
voice-class sip tenant 3
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 950 voip
description outbound to SIP provider
preference 3
destination-pattern ^[4,6]11$
session protocol sipv2
session target ipv4:10.x.x.x
voice-class codec 1
voice-class sip profiles 87
voice-class sip tenant 3
voice-class sip bind media source-interface GigabitEthernet0/0/2
dtmf-relay rtp-nte
no vad
!
dial-peer voice 903 voip
description outbound to SIP provider
translation-profile outgoing remove9
preference 1
destination-pattern ^9[3,5,7,8]11
session protocol sipv2
session target ipv4:24.x.x.87
voice-class codec 1
voice-class sip profiles 80
voice-class sip tenant 4
voice-class sip bind media source-interface Port-channel1.650
dtmf-relay rtp-nte sip-notify
no vad
!
!
sip-ua
retry invite 2
timers keepalive active 10
connection-reuse
!
!
line con 0
transport input none
stopbits 1
line aux 0
stopbits 1
line vty 0 4
transport input ssh
!
!
!
!
!
!
end

[mightyking]

Also sending you the details for the 2 interfaces involved with the provider for incoming and outgoing calls. Please note that our SIP trunk is supposed to accommodate 250 simultaneous calls. 

x.x.x.x#show interfaces Port-channel1.650
Port-channel1.650 is up, line protocol is up
Hardware is GEChannel, address is 0008.32d0.0790 (bia 0008.32d0.0790)
Internet address is 10.x.x.101/24
MTU 1500 bytes, BW 2000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 650.
ARP type: ARPA, ARP Timeout 04:00:00
Keepalive set (10 sec)
Last clearing of "show interface" counters never

x.x.x.x#show interface GigabitEthernet0/0/2
GigabitEthernet0/0/2 is up, line protocol is up
Hardware is ISR4351-3x1GE, address is 0008.32d0.0752 (bia 0008.32d0.0752)
Internet address is 10.x.x.11/29
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 3/255, rxload 3/255
Encapsulation ARPA, loopback not set
Keepalive not supported
Full Duplex, 1000Mbps, link type is auto, media type is RJ45
output flow-control is off, input flow-control is off
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/375/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 13323000 bits/sec, 7798 packets/sec
5 minute output rate 14265000 bits/sec, 8328 packets/sec
44811047 packets input, 9483020440 bytes, 0 no buffer
Received 1 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 742350 multicast, 0 pause input
45447035 packets output, 9732112517 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
45089 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

[Roger Kallberg]

There is nothing in your configuration that could explain what you’re seeing. Not related to your current issue, but why do you have that many dial peers? Many of them seems to be redundant.

[mightyking]

The config has been done by someone else who is not working here anymore. Do you see any performance issue related to redundant dial peers?

Thanks,

MK

[Roger Kallberg]

Not really. There is an impact on memory consumption per dial peer, but it wouldn’t be what is causing what you see.

[Les Pruden]

If your trunk is configured to carry 250 calls you might want to enforce that limit in the CUBE with something like the example below. I've had experiences where the service provider does not limit the calls to the configured amount (250 in this case) and will accept as many calls (inbound and outbound combined) as they are sent. Any call over 250 will cause call quality issues.  The call treatment commands will force the CUBE to reject any new calls above the "high" value.  You likely have a secondary path that can take the overflow (or the callers will get busy as the calls are rejected).

call treatment on
call threshold global total-calls low 245 high 250

[mightyking]

Hi Les,

Thank you for taking the time and replying. We are far from reaching the 250 simultanious calls. At the moment, we have 210 calls and the issue almost started when we reached the 201 to 203 simulanious calls. 

As I posted in the previous reply. the show interface GigabitEthernet0/0/2 we have 45089 unknown protocol drops. Would you guys happen to know why these drops are happening?

Thanks,

MK

I

[Les Pruden]

There are a lot of posts on the unknown protocol drops so have a look there.  

In my experience with SIP trunks there are two different bandwidth considerations. There is the trunk itself and a port speed. For example, you could have an Ethernet circuit configured for 50Mb and a port speed configured for 20Mb. In this case you would be provisioned for say 159 concurrent calls. If you needed to grow the concurrent call capacity, you could change the port speed to 30Mb without a major trunk change. 

I've had a similar situation as you describe.  The trunk was very large, but the port speed was low. Neither our service provider nor the CUBE had any limits on the number of calls so, during high call volume days the call quality was terrible. I implemented the call treatment noted earlier to match the port speed. 

I think you should verify a couple of things with your service provider. Is there a port speed to consider (something other than the 200Mb trunk speed you note)? And do they provide any CAC on the total number of calls configured (or do they require the customer to do this)?

[Jonathan Schulenberg]

It’s not uncommon for carriers sales teams to size the underlying access circuit assuming calls will use G.729 - which is a problem when the majority of calls negotiate G.711 instead. Ask your provider what the CIR is on the circuit and if they support QoS, what percentage/amount of bandwidth is allocated to DSCP EF. Remember that LLQ has an implicit policer that drops traffic above the committed rate. You won’t be able to see QoS config enforced by the provider edge router.

[mightyking]

Hello Everyone,

Based on the CUBE Analysis, there was a latency in the middle network that makes the registration process to fail.

Based on the log files, we confirmed that the ITSP SBC was sending the 200 OK, however, this one never made it to the CUBE. We were also able to confirm that the CUBE sent the REGISTER w/credentials, however, this message never reached the ITSP SBC. In both cases, the registration process failed, and the CUBE started a new one. This registration issue seemed to be causing the rest of the issues.

There was a limited time in the Telco’s SBC to complete the registration process started by the Cisco CUBE. If that process fails in the first attempt, all the call services are stopped, and the bandwidth capacities are reduced by the ITSP Border Controller.

The Telco engineer also indicated that when the registration fails there is a timer for which the requests that the CUBE keeps sending to register are ignored. The ITSP engineers proactively disabled any bandwidth limit on their trunk and activated a 500 second tolerance for SIP registration to complete.

These changes on the Telco side appeared to resolve the issue.

Proactively, we also found that the current software IOS-XE version running in the Cube router is no longer considered for software maintenance.

      Hardware: ISR4351/K9

      Software : IOS-XE 16.9.8

We will proceed upgrading the IOS to the lastest very soon.

Thanks,

MK

[Jonathan Schulenberg]

Make sure you have CUBE Smart Licensing sorted before upgrading beyond IOS-XE 16.9 to avoid an outage 90 days after the upgrade per the Smart Licensing Using Policy. CiscoOne with SWSS, L-CUBE with SWSS, or a current A-FLEX-3 annuity subscription are viable paths forward; FL-CUBEE-xx will require a new order for A-FLEX-3. The licenses must appear in your Smart/Virtual Account and the router must be registered to it. Be sure that the router actually receives an ACK from the licensing server!