cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
437
Views
0
Helpful
1
Replies

Interface binding for VXML

I have a gateway that I am trying to use for mobile voice access. It is the only H.323 gateway in the network and it is remote from the call manager. PSTN is SIP which is pointed directly to CCM, and that all work fine. The problem is the H.323 is also a EasyVPN client at a remote site. I have reachability to CCM from the inside interface, but not from the outside. Here are the relevant parts of the router config (with some redacting).

application

  service mva flash:2:/IVRMainpage.vxml

  !

!

interface FastEthernet0/0

ip address 1.1.1.4 255.255.255.0

speed auto

crypto ipsec client ezvpn EASY-VPN-CLIENT

!

interface FastEthernet0/0.6

encapsulation dot1Q 6

ip address 192.168.130.17 255.255.255.248

crypto ipsec client ezvpn EASY-VPN-CLIENT inside

h323-gateway voip interface

h323-gateway voip bind srcaddr 192.168.130.17

!

ip http client source-interface FastEthernet0/0.6

!

dial-peer voice 1197 voip

service mva

incoming called-number 1197

dtmf-relay h245-alphanumeric

codec g711ulaw

no vad

!

I copied down the VXML file because the application command wasn't able to load it directly. The router tries to retrieve some audio files file CCM, but fails because it isn't using the right source address.

Oct 29 12:05:04.005 EDT: //21/00276EDD0800/VXML:/vxml_vapp_bgload_from_proc:

   urlp=http://192.168.128.7:8080/ccmivr/IVRCalleridLookup.do?remotedest=1001&srcdir=en_US fetchaudio=NULL delay=0 minimum=0

Oct 29 12:05:04.005 EDT: //21/00276EDD0800/VXML:/vxml_vapp_bgload:

   url http://192.168.128.7:8080/ccmivr/IVRCalleridLookup.do?remotedest=1001&srcdir=en_US cachable 1 fetchtimeout 0 maxage=-1 maxstale=-1

Oct 29 12:05:04.009 EDT: //21//AFW_:/vapp_bgload: url=http://192.168.128.7:8080/ccmivr/IVRCalleridLookup.do?remotedest=1001&srcdir=en_US

I am inferring that it isn't using the right source interface because the retrieval failed. I there a way to bind it to the interface I need?

IOS version is

c1700-adventerprisek9-mz.124-15.T14.bin.

1 Reply 1

I was able to verify that the gateway is using the outside interface as the source. The outside addresses are public, but not actually reachable and are behind an ASA.

Inbound TCP connection denied from 1.1.1.4/49137 to 192.168.128.7/8080 flags SYN  on interface uc_demo