10-29-2013 09:24 AM - edited 03-16-2019 08:08 PM
I have a gateway that I am trying to use for mobile voice access. It is the only H.323 gateway in the network and it is remote from the call manager. PSTN is SIP which is pointed directly to CCM, and that all work fine. The problem is the H.323 is also a EasyVPN client at a remote site. I have reachability to CCM from the inside interface, but not from the outside. Here are the relevant parts of the router config (with some redacting).
application
service mva flash:2:/IVRMainpage.vxml
!
!
interface FastEthernet0/0
ip address 1.1.1.4 255.255.255.0
speed auto
crypto ipsec client ezvpn EASY-VPN-CLIENT
!
interface FastEthernet0/0.6
encapsulation dot1Q 6
ip address 192.168.130.17 255.255.255.248
crypto ipsec client ezvpn EASY-VPN-CLIENT inside
h323-gateway voip interface
h323-gateway voip bind srcaddr 192.168.130.17
!
ip http client source-interface FastEthernet0/0.6
!
dial-peer voice 1197 voip
service mva
incoming called-number 1197
dtmf-relay h245-alphanumeric
codec g711ulaw
no vad
!
I copied down the VXML file because the application command wasn't able to load it directly. The router tries to retrieve some audio files file CCM, but fails because it isn't using the right source address.
Oct 29 12:05:04.005 EDT: //21/00276EDD0800/VXML:/vxml_vapp_bgload_from_proc:
urlp=http://192.168.128.7:8080/ccmivr/IVRCalleridLookup.do?remotedest=1001&srcdir=en_US fetchaudio=NULL delay=0 minimum=0
Oct 29 12:05:04.005 EDT: //21/00276EDD0800/VXML:/vxml_vapp_bgload:
url http://192.168.128.7:8080/ccmivr/IVRCalleridLookup.do?remotedest=1001&srcdir=en_US cachable 1 fetchtimeout 0 maxage=-1 maxstale=-1
Oct 29 12:05:04.009 EDT: //21//AFW_:/vapp_bgload: url=http://192.168.128.7:8080/ccmivr/IVRCalleridLookup.do?remotedest=1001&srcdir=en_US
I am inferring that it isn't using the right source interface because the retrieval failed. I there a way to bind it to the interface I need?
IOS version is
c1700-adventerprisek9-mz.124-15.T14.bin.
10-29-2013 09:31 AM
I was able to verify that the gateway is using the outside interface as the source. The outside addresses are public, but not actually reachable and are behind an ASA.
Inbound TCP connection denied from 1.1.1.4/49137 to 192.168.128.7/8080 flags SYN on interface uc_demo
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide