IP Phone Registered Issue Via Tunnel

[jrblanquez]

Hi erverybody.

I´m configuring a ISR 4321 and when I test softphone registration from other branch via VMVPN I can´t get full register.  I do a debug tftp events and tftp packets command and see following:

Oct 19 01:18:25.639: TFTP: Server request for port 20713, socket_id 0x7F0D55224AA8 for process 425
Oct 19 01:18:25.639: TFTP: read request from host 201.141.38.15(20713) via Tunnel0
Oct 19 01:18:25.639: TFTP: Looking for CTLSEP00FFEE0262D3.tlv
Oct 19 01:18:25.639: TFTP: Sending error 1 No such file
Oct 19 01:18:32.094: TFTP: Server request for port 20713, socket_id 0x7F0D5E3344A0 for process 425
Oct 19 01:18:32.094: TFTP: read request from host 201.141.38.15(20713) via Tunnel0
Oct 19 01:18:32.095: TFTP: Looking for SEP00FFEE0262D3.cnf.xml
Oct 19 01:18:32.105: TFTP: Opened flash:/its/vrf1/XMLDefault7962.cnf.xml, fd 4, size 1230 for process 425
Oct 19 01:18:32.105: TFTP: Sending block 1 (retry 0), len 512, socket_id 0x7F0D5E3344A0
Oct 19 01:18:36.106: TFTP: Sending block 1 (retry 1), len 512, socket_id 0x7F0D5E3344A0
Oct 19 01:18:41.107: TFTP: Sending block 1 (retry 2), len 512, socket_id 0x7F0D5E3344A0
Oct 19 01:18:45.614: TFTP: Server request for port 20713, socket_id 0x7F0D45492210 for process 534
Oct 19 01:18:45.614: TFTP: read request from host 201.141.38.15(20713) via Tunnel0
Oct 19 01:18:45.614: TFTP: Looking for CTLSEP00FFEE0262D3.tlv
Oct 19 01:18:45.615: TFTP: Sending error 1 No such file
Oct 19 01:18:47.106: TFTP: Sending block 1 (retry 3), len 512, socket_id 0x7F0D5E3344A0
Oct 19 01:18:52.104: TFTP: Server request for port 20713, socket_id 0x7F0D45492400 for process 534
Oct 19 01:18:52.105: TFTP: read request from host 201.141.38.15(20713) via Tunnel0
Oct 19 01:18:52.105: TFTP: Looking for CTLSEP00FFEE0262D3.tlv
Oct 19 01:18:52.105: TFTP: Sending error 1 No such file
Oct 19 01:18:54.106: TFTP: Sending block 1 (retry 4), len 512, socket_id 0x7F0D5E3344A0
Oct 19 01:18:59.887: TFTP: Server request for port 20713, socket_id 0x7F0D45492400 for process 534
Oct 19 01:18:59.887: TFTP: read request from host 201.141.38.15(20713) via Tunnel0
Oct 19 01:18:59.887: TFTP: Looking for CTLSEP00FFEE0262D3.tlv
Oct 19 01:18:59.887: TFTP: Sending error 1 No such file
Oct 19 01:19:02.106: TFTP: Finished flash:/its/vrf1/XMLDefault7962.cnf.xml, time 00:00:30 for process 425
Oct 19 01:19:06.333: TFTP: Server request for port 20713, socket_id 0x7F0D5E0B6058 for process 425
Oct 19 01:19:06.333: TFTP: read request from host 201.141.38.15(20713) via Tunnel0
Oct 19 01:19:06.333: TFTP: Looking for CTLSEP00FFEE0262D3.tlv
Oct 19 01:19:06.333: TFTP: Sending error 1 No such file
Oct 19 01:19:12.780: TFTP: Server request for port 20713, socket_id 0x7F0D5E0B6058 for process 425
Oct 19 01:19:12.780: TFTP: read request from host 201.141.38.15(20713) via Tunnel0
Oct 19 01:19:12.780: TFTP: Looking for CTLSEP00FFEE0262D3.tlv
Oct 19 01:19:12.781: TFTP: Sending error 1 No such file
Oct 19 01:19:19.737: TFTP: Server request for port 20713, socket_id 0x7F0D5E0B6058 for process 425
Oct 19 01:19:19.737: TFTP: read request from host 201.141.38.15(20713) via Tunnel0
Oct 19 01:19:19.737: TFTP: Looking for CTLSEP00FFEE0262D3.tlv
Oct 19 01:19:19.737: TFTP: Sending error 1 No such file
Oct 19 01:19:26.199: TFTP: Server request for port 20713, socket_id 0x7F0D5E0B6058 for process 425
Oct 19 01:19:26.199: TFTP: read request from host 201.141.38.15(20713) via Tunnel0
Oct 19 01:19:26.199: TFTP: Looking for SEP00FFEE0262D3.cnf.xml
Oct 19 01:19:26.220: TFTP: Opened flash:/its/vrf1/XMLDefault7962.cnf.xml, fd 4, size 1230 for process 425
Oct 19 01:19:26.221: TFTP: Sending block 1 (retry 0), len 512, socket_id 0x7F0D5E0B6058
Oct 19 01:19:30.221: TFTP: Sending block 1 (retry 1), len 512, socket_id 0x7F0D5E0B6058
Oct 19 01:19:35.221: TFTP: Sending block 1 (retry 2), len 512, socket_id 0x7F0D5E0B6058
Oct 19 01:19:41.221: TFTP: Sending block 1 (retry 3), len 512, socket_id 0x7F0D5E0B6058
Oct 19 01:19:48.221: TFTP: Sending block 1 (retry 4), len 512, socket_id 0x7F0D5E0B6058
Oct 19 01:19:56.222: TFTP: Finished flash:/its/vrf1/XMLDefault7962.cnf.xml, time 00:00:30 for process 425

Phone can open and finish XML Default cnf.xml but can´t open CTLSEP00FFEE0262D3.tlv. If I try locally phone can registering. 

This same behavior occurs with other phones within the branch where you can open the conf.xml file but cannot open the tlv

Attached config.

Can anybody help me?

Regards.

[Rajan]

Hi,

Can you check whether you have "SEP00FFEE0262D3.cnf.xml" in flash. This is the file the phone should look for first. If it has this it wont require default config file.

HTH
Rajan
Please rate all useful posts by clicking the star below and mark solutions as accepted wherever applicable

[jrblanquez]

Hi friend. Thanks for your answer.

Yes, the file exist. What seems strange to me is that it opens fila and ends the process and stays in a loop loading the file. In fact, it happens to me with local phones also now.

[Adam Pawlowski]

CTL missing is fine if it is not a secured deployment with that capability defined. The endpoint and TFTP (or HTTP[S] depending) have to be directly reachable, meaning for TFTP the UDP traffic has to go through the tunnel, same with registration or any other traffic. A NAT would not be supported.

[jrblanquez]

Hi friend, thanks for your answer.

The tftp server is reachble without nat. What seems strange to me is that it opens file and ends the process and stays in a loop loading the config file. In fact, it happens to me with local phones also now.

[Adam Pawlowski]

Okay so we can eliminate the tunnel then and go back to monitoring the output of the TFTP. Not for nothing, I’m not a CME expert but things get boogered up sometimes. I have in the back of my head somewhere there is a command to force files to be generated for TFTP, but something may require a restart. Just guessing at this point , but if segments are being retransmitted then perhaps something else is wrong and you’ve stumbled upon it inadvertently.

[jrblanquez]

Hi Adams...

Already I tested this and nothing.

Thanks for reply.

[Adam Pawlowski]

Sorry, that’s the extent of my ideas on this one, without any other information nothing else strikes. I guess maybe it is time for a call into TAC to help debug this.

[jrblanquez · Accepted solution]

Thanks for help.

The issue was that SIP register global needed authenticate register because phones and CME are in different subnet.

Here copy link to help me:

https://community.cisco.com/t5/collaboration-voice-and-video/sip-phones-unauthorized-to-register-in-cme-across-asa-site-to/ta-p/3799336

Thanks.