Getting 7916 to work on 7965

[OliverDarvall]

Hi Guys,

I have the following:

- Call Manager - Version 7.1.5

- 7965G - Firmware 9-3-1

- 7916 - Firmware 1-0-4-2

- SCCP based

I can not get the 7916 module to work, it only shows the Cisco logo and all lights are amber. I have Googled myself to a standstill and now need some help please.

I have tried various combinations of settings. I have enabled the 12 and/or 24 button module on the 7965G settings, I have added/removed the  Module Load Name for the 7916, I have upgraded/downgraded the firmware versions, I have factory reset the 7965 almost to death, I have deleted/recreated the phone configuration, etc etc etc ...

The one very weird thing that I have noticed is that when I apply the Config to the Phone, that not all settings as I have set them in CM, seems to "transfer" to the phone. For instance, even though I enable SSH, I can not SSH into the phone. And I set the Web Access to HTTPS only, but can still access the standard HTTP interface. There are other settings also that does not "transfer" ...

Also, when I Apply the Config and I check the Status on the phone itself, the module never shows as permanently states "Not Configured" and the module firmware is blank.

Any ideas and help please ?!

[bernhardczapp]

Did you make sure the phone got the right tftp server?!

This config should be within the config file which is downloaded via tftp.

If tftp-server is missing the phone might still work but some features won't work.

Like ringtones, background images and also sidecars.

[Chris Deren]

Also, check your DB replication status on CUCM.

Chris

[Neal haas]

Expansion Module Information in call manager is set to 7916? Seems like you did.

have you set the Correct Phone Button Template?

[OliverDarvall]

Bernhard:           

Yes indeed, many times over. After doing a factory reset it also does successfully download the firmware from the server, so yes, tftp is working.

Chris:

Where would I check the DB replication status ? We only have one CUCM server, would we still have replication ?

Neal:

Checked, double checked, triple checked, recreated Phone Button templates, etc etc.

[OliverDarvall]

Guys, I saw something interesting in the phone's Console Logs, it seems that some verification fails on the certificate (check in bold below). Could that be the cause ? The phone does not seem to stop there though ...

7134: NOT 13:33:51.764740 xxtpClient: request server6 0 ---> ::

7135: NOT 13:33:51.765479 xxtpClient: xxtp request rcv'd from /usr/tmp/tftp, srcFile = SEPB4E9B08CE56D.cnf.xml, dstFile = /usr/ram/SEPB4E9B08CE56D.cnf.xml max size = 550001

7136: NOT 13:33:51.781902 xxtpClient: auth server - tftpList[0] = ::ffff:192.168.1.15

7137: NOT 13:33:51.782519 xxtpClient: look up server - 0

7138: NOT 13:33:51.784507 SECD: lookupCTL: TFTP SRVR secure

7139: NOT 13:33:51.787346 xxtpClient: secVal = 0x9

7140: NOT 13:33:51.788053 xxtpClient: ::ffff:192.168.1.15 is a secure server

7141: NOT 13:33:51.788643 xxtpClient: retval = SRVR_SECURE

7142: NOT 13:33:51.789164 xxtpClient: Secure file requested

7143: NOT 13:33:51.789723 xxtpClient: authenticated file approved - add .sgn -- SEPB4E9B08CE56D.cnf.xml.sgn 

7144: NOT 13:33:51.803179 HTTPCL: downdload will be limited to 537 KB

7145: NOT 13:33:51.807655 HTTPCL: hdr->HTTP/1.1 200 OK

7146: NOT 13:33:51.808347 HTTPCL: hdr->Content-length: 7475

7147: NOT 13:33:51.808921 HTTPCL: hdr->Cache-Control: no-store

7148: NOT 13:33:51.809497 HTTPCL: hdr->Content-type: */*

7149: INF 13:33:51.810772 HTTPCL: initial burst had more than just headers

7150: WRN 13:33:51.826408 JVM: Startup Module Loader|cip.mmgr.dt:? - [MediaMgrSM]: Unhandled Event, State = StateOnHook Event = EventServicesTxStop

7151: NOT 13:33:51.838343 SYSMSG: pid 8 (/sbin/httpcl) Normal Exit, status = 100

7152: INF 13:33:51.838388           runtime = 0.030 secs

7153: INF 13:33:51.838409          user cpu = 0.002050950 secs

7154: INF 13:33:51.838429        system cpu = 0.012718140 secs

7155: INF 13:33:51.838444    child user cpu = 0.000000000 secs

7156: INF 13:33:51.838459     child sys cpu = 0.000000000 secs

7157: INF 13:33:51.838481    sys interrupts = 0.003014530 secs for 43 interrupts

7158: INF 13:33:51.838506 total cpu = 0.014769090 secs ( 33% utilization )

7159: NOT 13:33:51.835431 SECD: verifyFile: sgn-verify , 'name'[SEPB4E9B08CE56D.cnf.xml.sgn]

7160: NOT 13:33:51.837476 SECD: parseHdr(): start of pad ('T' 0x0d) at TLV 15

7161: NOT 13:33:51.838138 SECD: parseHdr(): skipping 3 trail bytes (pad and/or unknown TLVs)

7162: NOT 13:33:51.838824 SECD: signer : CN=twiggy.secmansol;OU=Security;O=Security Management Solutions;L=Port Elizabeth;ST=Eastern Cape;C=ZA, issuer : CN=twiggy.secmansol;OU=Security;O=Security Management Solutions;L=Port Elizabeth;ST=Eastern Cape;C=ZA, serial : @ï»# 2R 

7163: NOT 13:33:51.839573 SECD: signerLen : 102, issuerLen : 102, serialLen : 8

7164: NOT 13:33:51.840875 SECD: TVS service not available to validate

7165: ERR 13:33:51.841575 SECD: EROR:verifyFile: sgn verify file failed , errclass 8, errcode 19 (signer not in CTL)

7166: ERR 13:33:51.842292 SECD: EROR:verifyFile: verify FAILED,

7167: NOT 13:33:51.845188 xxtpClient: authorize file = 13, isEncr = 0

7168: NOT 13:33:51.853776 SECD: lookupCTL: TFTP SRVR secure

7169: WRN 13:33:51.880813 SECD: WARN:cancelCapfOp: CAPF not in use, user cancel ignored

7170: NOT 13:33:51.881548 SECD: clearCapfList: CAPF table cleared

7171: NOT 13:33:51.891744 JVM: Startup Module Loader|cip.cfg.t:? - ====>123Config handleTftpResponse, status=12 for file=ram/SEPB4E9B08CE56D.cnf.xml

7172: ERR 13:33:51.893346 JVM: Startup Module Loader|cip.sec.CapfProperty:? - Failed to resolve Capf Ipv4 Address with hostname

7173: ERR 13:33:51.894955 JVM: Startup Module Loader|cip.sec.CapfProperty:? - Failed to resolve Capf Ipv6 Address with hostname

7174: ERR 13:33:51.897403 JVM: Startup Module Loader|cip.sec.CapfProperty:? - No valid CAPF server

7175: NOT 13:33:51.899006 JVM: Startup Module Loader|cip.cfg.t:? - DELETE ConfigFile:(ram/SEPB4E9B08CE56D.cnf.xml)WAS SUCCESSFUL

7176: NOT 13:33:51.925771 xxtpClient: request server6 1 ---> ::

7177: DBG 13:33:51.926507 VPNU: SM wakeup - chld=0 tmr=0 io=1 res=0

7178: DBG 13:33:51.939912 VPNU: State AppsUp --> AppsUp

7179: DBG 13:33:51.940996 VPNU: SM wakeup - chld=0 tmr=0 io=1 res=0

7180: DBG 13:33:51.941672 VPNU: State AppsUp --> AppsUp

7181: NOT 13:33:52.002085 SECD: parseHdr(): start of pad ('T' 0x0d) at TLV 15

7182: NOT 13:33:52.002977 SECD: parseHdr(): hdr ver 1.2 (knows upto 2.0)

7183: NOT 13:33:52.003814 SECD: parseHdr(): skipping 3 trail bytes (pad and/or unknown TLVs)

7184: WRN 13:33:52.004978 SECD: WARN:getTLInfoFromFile: ** phone has no TL file /flash0/sec/ctl//ITLFile.tlv

7185: NOT 13:33:52.014415 SECD: parseHdr(): start of pad ('T' 0x0d) at TLV 15

7186: NOT 13:33:52.015346 SECD: parseHdr(): hdr ver 1.2 (knows upto 2.0)

7187: NOT 13:33:52.015994 SECD: parseHdr(): skipping 3 trail bytes (pad and/or unknown TLVs)

7188: WRN 13:33:52.017341 SECD: WARN:getTLInfoFromFile: ** phone has no TL file /flash0/sec/ctl//ITLFile.tlv

7189: NOT 13:33:52.027690 SECD: parseHdr(): start of pad ('T' 0x0d) at TLV 15

7190: NOT 13:33:52.028566 SECD: parseHdr(): hdr ver 1.2 (knows upto 2.0)

7191: NOT 13:33:52.029211 SECD: parseHdr(): skipping 3 trail bytes (pad and/or unknown TLVs)

7192: WRN 13:33:52.030811 SECD: WARN:getTLInfoFromFile: ** phone has no TL file /flash0/sec/ctl//ITLFile.tlv

7193: NOT 13:33:52.040270 SECD: parseHdr(): start of pad ('T' 0x0d) at TLV 15

7194: NOT 13:33:52.041125 SECD: parseHdr(): hdr ver 1.2 (knows upto 2.0)

7195: NOT 13:33:52.041763 SECD: parseHdr(): skipping 3 trail bytes (pad and/or unknown TLVs)

7196: WRN 13:33:52.043389 SECD: WARN:getTLInfoFromFile: ** phone has no TL file /flash0/sec/ctl//ITLFile.tlv

7197: NOT 13:33:52.087771 xxtpClient: request server 0 ---> 192.168.1.15

7198: NOT 13:33:52.119780 xxtpClient: request server 1 ---> 

7199: NOT 13:33:52.151923 CDP-D: cdpGetPortCfg SPANTOPC CFG:11

7200: NOT 13:33:52.257169 xxtpClient: request server6 0 ---> ::

7201: NOT 13:33:52.277265 xxtpClient: request server6 1 ---> ::

7202: DBG 13:33:52.278237 VPNU: SM wakeup - chld=0 tmr=0 io=1 res=0

7203: DBG 13:33:52.296298 VPNU: State AppsUp --> AppsUp

7204: DBG 13:33:52.297191 VPNU: SM wakeup - chld=0 tmr=0 io=1 res=0

7205: DBG 13:33:52.297852 VPNU: State AppsUp --> AppsUp

7206: WRN 13:34:30.611322 SECD: WARN:clpSetupSslServer: No LSC.Will look  for MIC

7207: NOT 13:34:30.612724 SECD: clpSetupSslServer: start SSL/TLS handshake, <192.168.1.119> c:9

7208: NOT 13:34:31.987217 SECD: clpClntConnInfo: SSL/TLS conn info:

7209: NOT 13:34:31.988147 SECD:     ConnId : 0

7210: NOT 13:34:31.988716 SECD:     PeerIP : Port : 192.168.1.119 : 40060

7211: NOT 13:34:31.989320 SECD:     IP tos value  : 0

7212: NOT 13:34:31.989912 SECD:     protocol      : TLSv1

7213: NOT 13:34:31.990636 SECD:     cipher        : AES128-SHA (128 of 128 bits)

7214: NOT 13:34:31.991266 SECD:     client auth   : not done (could use MIC)

7215: NOT 13:34:31.991856 SECD:     SSL session   : new

7216: NOT 13:34:31.992501 SECD: clpSetupSslServer: SSL/TLS active, <192.168.1.119> c:9

7217: NOT 13:34:31.993330 SECD: getAppSrvrPath: App srvr path to connect to is /tmp/sslAppSrvrSock

7218: NOT 13:34:31.994697 SECD: clpAppSrvrConnect: Connect to App Srvr succeeded

7219: NOT 13:34:31.995410 SECD: clpAppSrvrConnect: Added read write handlers for App Srvr

7220: NOT 13:34:31.996568 SECD: startIdleTimer: Starting Idle timer

7221: ERR 13:34:32.000554 JVM: Accepted AppSrvr connection for connid : 0

7222: NOT 13:34:34.001313 SECD: clpAppSrvrRd: app srvr closed conn to <192.168.1.119> c:9 s:10

7223: NOT 13:34:34.002029 SECD: clpDelTlsSrvrProxyConn: closing conn to <192.168.1.119>, c:9, s:10

7224: ERR 13:34:34.020138 JVM: Calling enable listening for incoming http connections

7225: ERR 13:34:35.811810 JVM: Calling enable listening for incoming http connections

7226: ERR 13:34:39.182162 JVM: Calling enable listening for incoming http connections

7227: ERR 13:35:04.396972 JVM: cvmDebug: executing - 5. Dump total obj counts in java heap

7228: ERR 13:35:04.411845 JVM: Counted 31748 objects

7229: ERR 13:35:04.412563 JVM: Total Heap Size:3800064

7230: ERR 13:35:04.413226 JVM:  Free Heap Size:2518736

7231: ERR 13:35:05.390888 JVM: cvmDebug: executing - 7. Dump string value of [C instances in java heap

7232: ERR 13:35:35.030148 JVM: Calling enable listening for incoming http connections

7233: ERR 13:36:51.020120 JVM: Calling enable listening for incoming http connections

[Carlo Poggiarelli]

Hi Oliver.

We had a similar issue with 2 7916 modules and we solved specifying the load name as B016-1-0-3 in Expansion module information and both modules started working.

HTH

Carlo

[OliverDarvall]

Thanks Carlo, I tried that numerous times for my firmware (B016-1-0-4-2), but no luck also.

[OliverDarvall]

I have now noticed something else. After I played in CM again and made settings changes, I Apply the Config and as per usual (for my case) the settings does not reflect on the phone, although I can see that the phone restarts momentarily after I clicked on Apply.

I then tftp'd the SEPxxx.cnf.xml file from our CM server and inspected it. To my surprise all the settings as I have just changed them in CM are correctly reflected in the xml file, but the phone still shows the old values. So the phone is definitely not "accepting" the new configs from CM, and hence the 7916 is never properly configured/assigned to the phone.

The question is, why is it not accepting the applied configs from CM ? Is it related to the console log as above ?

[Carlo Poggiarelli]

Hi Oliver.

Try to use reset phone istead of apply and, if it doesn't work, try an hard reset sequence of 7965.

HTH

Regrard

Carlo

[OliverDarvall]

And something else. The phone's SEPxxx.cnf.xml file does not have a section that specifies the verification service. It seems as if my CM server does not have the TVS service correctly configured. Where/how can I verify my TVS ?

[Carlo Poggiarelli]

Hi Oliver.

You can try to reset the TFTP service  and TVS network service in Cisco Unified Serviceability --> Tools ---> Control Center Network Services.

HTH

Regards

Carlo

[OliverDarvall]

I must be having a blond moment here ! I just do not see the TVS service anywhere in my Network- or Feature Services pages ! I do see TFTP (and lots of others). Is TVS actually a part of CM7, or is it perhaps called something different ?

[Carlo Poggiarelli]

Sorry Oliver.

I missed your CUCM version

Ok , in this case try to reset TFTP service and see if it makes the difference.

Regards

Carlo

[OliverDarvall]

So it is thus not in CM7 ?

Anyway, I have reset that service numerous times and even rebooted the server, no luck ...