02-14-2013 01:57 PM - edited 03-16-2019 03:43 PM
Hi,
I have a 2801 and have CME up and running. All is fine for the most part. I can make outbound calls through my SIP provider all day long. Inbound not so much luck. I am running 15.1 and ran across the toll fraud stuff and thought I had found my problem. Unfortunately even after adding my SP's IP's to the trusted list I still get no love. Call just goes to dead air. Service provider shows them sending two invites but they get nada from me.
What am I missing? My understanding is that 5060 is open by default. Only thing I can think is that my external interface is just dropping the traffic.
Here is my config. I would really appreciate any insight anyone has. Always good to have another set of eyes to catch what should be staring me right in the face.
Thanks in advance.
Joel
!
! Last configuration change at 21:54:07 UTC Thu Feb 14 2013 by joel
!
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Kappes_2801
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
!
!
!
ip cef
ip domain lookup source-interface FastEthernet0/1
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
voice service voip
ip address trusted list
ipv4 60.23.129.253
ipv4 66.23.138.162
ipv4 66.23.190.100
ipv4 66.23.190.200
allow-connections sip to sip
redirect ip2ip
sip
registrar server
!
voice class codec 1
codec preference 1 g711ulaw
!
!
!
!
voice translation-rule 1
rule 1 /13036475930/ /2000/
rule 2 /3036475930/ /2000/
!
!
voice translation-profile Incoming_called_numbers
translate called 1
!
!
voice-card 0
!
crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO2801 sn FTX1008W1XQ
username joel privilege 15 password 7 15010E1C142B20707B636C
!
redundancy
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
description Internal Data Network (Native VLAN)
encapsulation dot1Q 1 native
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface FastEthernet0/0.2
description Cisco Voice Network
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface FastEthernet0/0.3
description ShoreTel Switches and Phones Network
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip helper-address 192.168.1.253
ip nat inside
ip virtual-reassembly in
!
interface FastEthernet0/1
ip address 50.78.80.57 255.255.255.252
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Serial0/1/0
no ip address
shutdown
clock rate 2000000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
ip http path flash:gui
!
!
ip nat inside source list 1 interface FastEthernet0/1 overload
ip nat inside source list 2 interface FastEthernet0/1 overload
ip nat inside source list 3 interface FastEthernet0/1 overload
ip route 0.0.0.0 0.0.0.0 50.78.80.58
!
logging esm config
access-list 1 permit 192.168.3.0 0.0.0.255
access-list 2 permit 192.168.1.0 0.0.0.255
access-list 3 permit 192.168.2.0 0.0.0.255
!
!
!
!
!
!
control-plane
!
!
voice-port 0/0/0
!
voice-port 0/0/1
!
!
!
!
dial-peer voice 100 voip
description OUTGOING SIP TRUNK CONNECTION
destination-pattern 1..........
session protocol sipv2
session target dns:px3.nexvortex.com
voice-class codec 1
dtmf-relay rtp-nte
no vad
!
dial-peer voice 101 voip
description INCOMING SIP CALL FROM SIP TRUNK
session protocol sipv2
session target dns:px3.nexvortex.com
incoming called-number ..........
voice-class codec 1
dtmf-relay rtp-nte
no vad
!
!
sip-ua
authentication username gk10126HzMG password 7 023F336F311218224F7C
nat symmetric role active
nat symmetric check-media-src
no remote-party-id
registrar dns:reg.nexvortex.com expires 3600
sip-server dns:px3.nexvortex.com
!
!
!
gatekeeper
shutdown
!
!
telephony-service
max-ephones 2
max-dn 2
ip source-address 192.168.2.1 port 2000
auto assign 1 to 2
voicemail 2500
max-conferences 4 gain -6
web admin system name joel password seppak4309
dn-webedit
transfer-system full-consult
create cnf-files version-stamp Jan 01 2002 00:00:00
!
!
ephone-dn 1 dual-line
number 2000
label Joel#1
name Joel Kappes
call-forward busy 2500
call-forward noan 2500 timeout 18
!
!
ephone-dn 2 dual-line
number 2001
label Joel#2
name Joel Kappes
call-forward busy 2500
call-forward noan 2500 timeout 18
!
!
ephone 1
no multicast-moh
device-security-mode none
mac-address 0014.A971.44D7
type 7960
button 1:1
!
!
!
ephone 2
no multicast-moh
device-security-mode none
mac-address 0014.A934.0A48
type 7960
button 1:2
!
!
!
line con 0
line aux 0
line vty 0 4
login local
transport input all
!
scheduler allocate 20000 1000
ntp server 192.168.1.253
end
!
! Last configuration change at 21:54:07 UTC Thu Feb 14 2013 by joel
!
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Kappes_2801
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
!
!
!
ip cef
ip domain lookup source-interface FastEthernet0/1
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
voice service voip
ip address trusted list
ipv4 60.23.129.253
ipv4 66.23.138.162
ipv4 66.23.190.100
ipv4 66.23.190.200
allow-connections sip to sip
redirect ip2ip
sip
registrar server
!
voice class codec 1
codec preference 1 g711ulaw
!
!
!
!
voice translation-rule 1
rule 1 /13036475930/ /2000/
rule 2 /3036475930/ /2000/
!
!
voice translation-profile Incoming_called_numbers
translate called 1
!
!
voice-card 0
!
crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO2801 sn FTX1008W1XQ
username joel privilege 15 password 7 15010E1C142B20707B636C
!
redundancy
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
description Internal Data Network (Native VLAN)
encapsulation dot1Q 1 native
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface FastEthernet0/0.2
description Cisco Voice Network
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface FastEthernet0/0.3
description ShoreTel Switches and Phones Network
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip helper-address 192.168.1.253
ip nat inside
ip virtual-reassembly in
!
interface FastEthernet0/1
ip address 50.78.80.57 255.255.255.252
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Serial0/1/0
no ip address
shutdown
clock rate 2000000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
ip http path flash:gui
!
!
ip nat inside source list 1 interface FastEthernet0/1 overload
ip nat inside source list 2 interface FastEthernet0/1 overload
ip nat inside source list 3 interface FastEthernet0/1 overload
ip route 0.0.0.0 0.0.0.0 50.78.80.58
!
logging esm config
access-list 1 permit 192.168.3.0 0.0.0.255
access-list 2 permit 192.168.1.0 0.0.0.255
access-list 3 permit 192.168.2.0 0.0.0.255
!
!
!
!
!
!
control-plane
!
!
voice-port 0/0/0
!
voice-port 0/0/1
!
!
!
!
dial-peer voice 100 voip
description OUTGOING SIP TRUNK CONNECTION
destination-pattern 1..........
session protocol sipv2
session target dns:px3.nexvortex.com
voice-class codec 1
dtmf-relay rtp-nte
no vad
!
dial-peer voice 101 voip
description INCOMING SIP CALL FROM SIP TRUNK
session protocol sipv2
session target dns:px3.nexvortex.com
incoming called-number ..........
voice-class codec 1
dtmf-relay rtp-nte
no vad
!
!
sip-ua
authentication username gk10126HzMG password 7 023F336F311218224F7C
nat symmetric role active
nat symmetric check-media-src
no remote-party-id
registrar dns:reg.nexvortex.com expires 3600
sip-server dns:px3.nexvortex.com
!
!
!
gatekeeper
shutdown
!
!
telephony-service
max-ephones 2
max-dn 2
ip source-address 192.168.2.1 port 2000
auto assign 1 to 2
voicemail 2500
max-conferences 4 gain -6
web admin system name joel password #%#$%
dn-webedit
transfer-system full-consult
create cnf-files version-stamp Jan 01 2002 00:00:00
!
!
ephone-dn 1 dual-line
number 2000
label Joel#1
name Joel Kappes
call-forward busy 2500
call-forward noan 2500 timeout 18
!
!
ephone-dn 2 dual-line
number 2001
label Joel#2
name Joel Kappes
call-forward busy 2500
call-forward noan 2500 timeout 18
!
!
ephone 1
no multicast-moh
device-security-mode none
mac-address 0014.A971.44D7
type 7960
button 1:1
!
!
!
ephone 2
no multicast-moh
device-security-mode none
mac-address 0014.A934.0A48
type 7960
button 1:2
!
!
!
line con 0
line aux 0
line vty 0 4
login local
transport input all
!
scheduler allocate 20000 1000
ntp server 192.168.1.253
end
02-14-2013 04:32 PM
Post "debug ccsip messages".
Chris
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide