ISR4451-X/K9 no sip output to ITSP

[jfaddoul]

Hi,

I have a cisco ISR4451-X/K9 router.

I configured the communication with the ITSP to make outbound and inbound calls.

However, the ITSP is keep telling us that there is no traffic received from our side. 

The ITSP IP is reachable (10.9.6.18) and there are no firewalls on both sides.

I need to know if my configuration is right, and what can be the problem in this case.

Thanks in advance.

Here's the cube info:

CUBE-Version : 12.0.0
SW-Version : 16.6.3, Platform ISR4451-X/K9
HA-Type : none
Licensed-Capacity : 20

Here's the uck9 license:

Index 2 Feature: uck9
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Suite: AdvUCSuiteK9
License Count: Non-Counted
License Priority: Medium

And here's my config:

Current configuration : 35383 bytes

version 17.9
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
service sequence-numbers
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core

hostname CME_ROUTER

boot-start-marker
boot system flash bootflash:isr4400-universalk9.17.09.05a.SPA.bin
boot system flash bootflash:isr4400-universalk9.17.03.06.SPA.bin
boot-end-marker

vrf definition Mgmt-intf

address-family ipv4
exit-address-family

address-family ipv6
exit-address-family

card type e1 0 1
logging queue-limit 10000
logging buffered 2000000
logging rate-limit 10000
no logging console
no logging monitor
no aaa new-model
clock timezone cat 2 0
clock calendar-valid

login on-success log

subscriber templating

vtp version 1

multilink bundle-name authenticated

isdn switch-type primary-net5

trunk group channel_3

voice service voip
ip address trusted list
ipv4 192.168.100.0 255.255.255.0
ipv4 192.168.1.0 255.255.255.0
ipv4 192.168.1.3
ipv4 192.168.100.4
ipv4 192.168.100.3
ipv4 10.178.180.190
ipv4 10.9.6.18
ipv4 10.9.6.2
ipv4 10.9.6.3
ipv4 10.9.6.4
mode border-element
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
no supplementary-service h450.2
no supplementary-service h450.3
no supplementary-service h450.7
no supplementary-service sip moved-temporarily
no supplementary-service sip refer
no supplementary-service sip handle-replaces
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
trace
sip
registrar server expires max 3600 min 600
no call service stop
header-passing
error-passthru

voice class codec 1
codec preference 1 g711ulaw

voice class codec 2
codec preference 1 g711ulaw
codec preference 2 g711alaw
codec preference 3 g729br8
codec preference 4 g729r8

voice class sip-profiles 50
request INVITE sip-header Min-SE modify "1800" "90"

voice iec syslog

voice register global
mode cme
source-address 192.168.100.1 port 5060
bandwidth video tias-modifier 512000 negotiate end-to-end
max-dn 100
max-pool 100
load 9971 sip9971.9-2-2SR1-9.loads
load 7821 sip78xx.11-5-1-18.loads
authenticate register
authenticate realm all
timezone 29
time-format 24
date-format D/M/Y
tftp-path flash:
create profile sync 0380408438500404
ntp-server 192.168.1.2 mode directedbroadcast
video
auto-register

voice translation-rule 1
!
voice translation-rule 30
rule 1 /^767475551/ /9897/
!
voice translation-rule 50
rule 1 /^7014/ /0767475551/
!
voice translation-rule 99
rule 1 /^962484040/ /9897/
rule 2 /^962484048/ /9897/
rule 3 /^\(761418529\)/ /0\1/
rule 6 /^962484107/ /0962484107/
!
!
voice translation-profile IN_PRI
translate called 99
!
voice translation-profile ITSP
translate called 30
!
voice translation-profile ITSP-OUT
translate called 50
!
voice translation-profile To-CUCM
translate called 1
!
!
!
!
!
voice-card 0/1
dsp services dspfarm
no watchdog
!
voice-card 0/2
no watchdog
!
no license feature hseck9
license udi pid ISR4451-X/K9 sn FOC25395WCZ
license accept end user agreement
license boot suite FoundationSuiteK9
license boot suite AdvUCSuiteK9
memory free low-watermark processor 69096
!
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
redundancy
mode none
!
controller E1 0/1/0
framing no-crc4
clock source line primary
line-termination 75-ohm
pri-group timeslots 1-31

interface GigabitEthernet0/0/0
ip address 10.178.180.190 255.255.255.252
no ip proxy-arp
negotiation auto
!
interface GigabitEthernet0/0/1
no ip address
no ip proxy-arp
negotiation auto
!
interface GigabitEthernet0/0/1.1
encapsulation dot1Q 1 native
ip address 192.168.1.2 255.255.255.0
!
interface GigabitEthernet0/0/1.10
description ***ROUTER INTERFACE FOR VOICE VLAN***
encapsulation dot1Q 10
ip address 192.168.100.1 255.255.255.0
no ip proxy-arp
!
interface GigabitEthernet0/0/1.70
encapsulation dot1Q 70
ip address 192.168.70.1 255.255.255.0
no ip proxy-arp
!
interface GigabitEthernet0/0/1.100
description ***ROUTER INTERFACE FOR CISCO CUE***
encapsulation dot1Q 100
ip address 192.168.3.1 255.255.255.0
shutdown
!
interface GigabitEthernet0/0/2
no ip address
negotiation auto
!
interface GigabitEthernet0/0/3
no ip address
negotiation auto
!
interface Service-Engine0/1/0
!
interface Serial0/1/0:15
no ip address
encapsulation hdlc
no cdp enable
isdn switch-type primary-net5
isdn incoming-voice voice
isdn outgoing ie redirecting-number
!
interface Service-Engine0/2/0
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
shutdown
negotiation auto
!
ip default-gateway 192.168.70.2
no ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip http client source-interface GigabitEthernet0/0/0
ip http path flash:/GUI
ip forward-protocol nd
ip tftp source-interface GigabitEthernet0/0/0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip route 10.9.6.0 255.255.255.0 10.178.180.189
ip route 10.10.10.0 255.255.255.0 192.168.100.2
ip route 10.10.50.1 255.255.255.255 192.168.1.1
ip route 10.16.100.0 255.255.255.0 192.168.1.1
ip route 12.12.20.0 255.255.255.0 192.168.1.1
ip route 172.16.0.0 255.255.255.0 192.168.1.1
ip route 172.17.1.0 255.255.255.0 192.168.1.1
ip route 172.20.0.0 255.255.0.0 192.168.1.1
ip route 172.22.100.0 255.255.255.0 192.168.1.1
ip route 172.25.100.0 255.255.255.0 192.168.100.2
ip route 172.30.0.0 255.255.0.0 192.168.1.1
ip route 172.31.31.0 255.255.255.248 192.168.1.1
ip route 192.168.6.0 255.255.255.0 192.168.1.1
ip route 192.168.7.0 255.255.255.0 192.168.1.1
ip route 192.168.8.0 255.255.255.0 192.168.1.1
ip route 192.168.9.0 255.255.255.0 192.168.1.1
ip route 192.168.10.0 255.255.255.0 192.168.1.1
ip route 192.168.11.0 255.255.255.0 192.168.1.1
ip route 192.168.30.0 255.255.255.0 192.168.100.2
ip route 192.168.150.0 255.255.255.0 192.168.1.1
ip ssh time-out 60
ip ssh version 2
!
!
!
ip sla 1
icmp-echo 10.10.10.1 source-ip 192.168.100.1
ip sla schedule 1 life forever start-time now
ip sla 2
icmp-echo 172.22.100.2 source-ip 192.168.100.1
ip sla schedule 2 life forever start-time now
ip sla 3
icmp-echo 172.17.1.254 source-ip 192.168.100.1
ip sla schedule 3 life forever start-time now
ip sla 4
icmp-echo 192.168.30.1 source-ip 192.168.100.1
ip sla schedule 4 life forever start-time now
ip sla 5
icmp-echo 192.168.6.1 source-ip 192.168.100.1
ip sla schedule 5 life forever start-time now
ip sla 6
icmp-echo 172.19.100.1 source-ip 192.168.100.1
frequency 300
ip sla schedule 6 life forever start-time now
ip sla 7
icmp-echo 172.30.0.11 source-ip 192.168.100.1
frequency 300
ip sla schedule 7 life forever start-time now
logging trap debugging
ip access-list standard 23
10 permit 192.168.70.0
20 permit 172.22.253.218
30 permit 172.20.253.218
40 permit 172.20.253.248
50 permit 192.168.1.212
60 permit 172.22.253.248
70 permit 172.20.253.138
80 permit 172.22.254.145
90 permit 172.20.254.145
100 permit 192.168.70.0 0.0.0.255
110 permit 12.12.10.0 0.0.0.3
ip access-list standard 60
10 permit 172.22.253.218
20 permit 172.20.253.218
30 permit 172.20.253.248
40 permit 172.22.254.145
50 permit 172.20.254.145
60 permit 192.168.100.0 0.0.0.255
70 permit 192.168.1.0 0.0.0.255
80 permit 192.168.70.0 0.0.0.255
90 permit 12.12.10.0 0.0.0.3
ip access-list extended 100
10 permit ip any any
20 permit udp any any
30 permit tcp any any

!
control-plane
!
!
voice-port 0/1/0:15
!
voice-port 0/2/0
!
voice-port 0/2/1
!
voice-port 0/2/2
!
voice-port 0/2/3
!
mgcp
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable

mgcp profile default

sccp local GigabitEthernet0/0/1.10
sccp ccm 192.168.100.4 identifier 1 priority 1 version 7.0
sccp

sccp ccm group 1
bind interface GigabitEthernet0/0/1.10
associate ccm 1 priority 1
associate profile 1 register transcoder

telephony-service
max-ephones 70
max-dn 70
ip source-address 192.168.100.1 port 2000
cnf-file location flash:
load 7911 SCCP11.9-2-1S.loads
load 7941 SCCP41.9-2-1S.loads
load 7945 SCCP45.9-2-1S.loads
load 7962 term62.default.loads
time-zone 29
time-format 24
date-format dd-mm-yy
max-conferences 8 gain -6
moh enable-g711 "music-on-hold.au"
transfer-system full-consult

dspfarm profile 1 transcode
codec g729abr8
codec g729ar8
codec g711alaw
codec g711ulaw
codec g729br8
codec g729r8
maximum sessions 10
associate application SCCP

dial-peer voice 30 voip
voice-class codec 2
translation-profile incoming ITSP
incoming called-number 767475551
session protocol sipv2
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte
no vad
preference 0

dial-peer voice 50 voip
voice-class codec 2
voice-class sip profiles 50
translation-profile outgoing ITSP-OUT
destination-pattern 0962484052
session protocol sipv2
session target ipv4:10.9.6.18
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte
no vad
preference 0

dial-peer voice 70 voip
description **Local DN**
destination-pattern 7...
session protocol sipv2
session target ipv4:192.168.100.4
session transport udp
voice-class codec 2
dtmf-relay rtp-nte sip-kpml
no vad

dial-peer voice 9897 voip
description **To HuntGroup**
destination-pattern 9897
session protocol sipv2
session target ipv4:192.168.100.4
session transport udp
voice-class codec 2
dtmf-relay rtp-nte sip-kpml
no vad

line con 0
stopbits 1
line aux 0
line vty 0 4
login local
transport input telnet ssh
line vty 5 15
login local
transport input telnet ssh

network-clock synchronization automatic
call-home
profile "CiscoTAC-1"
active
destination transport-method http
ntp master
ntp server 182.168.1.204

Could you please let me know if I'm missing anything here?

thanks in advance for your help.

[Roger Kallberg]

If you do a debug voip ccapi inout and debug ccsip message and put the output in a text file that you attach to your response we can help you see what happens with the calls. Do not post the output directly in the response as that makes the post very long and hard to read. A general observation is that you do not need any of the specific routes to 192.168.1.1 as you have the default route pointing to that IP. To get the output to the terminal you’d need to turn on output into the monitor session as you have it turned off.

[jfaddoul]

Thank you @Roger Kallberg for your response, really appreciated.

I'm sorry it appears that i didn't post the last config, so pls find it attached. 

I do not have currently the output of the ccapi inout, but i can post it tomorrow. I have the output of the ccsip message for an outbound call (attached). Note that the 192.168.100.4 is the cucm and the 10.9.6.18 is the ITSP IP and it's reachable. You can focus on the call made from 7014 to 0962484052.

Thanks in advance for your help.

Regards,

[Nithin Eluvathingal]

Given that the ITSP has informed you of not receiving any SIP invites, the first step would be to verify the route to the ITSP’s SIP servers.

From the Dial-peer, specifically “dial-peer voice 50 voip”, I gather that this dial-peer is likely used for routing calls to the ITSP. You’ve mentioned a session target of ipv4:10.9.6.18. Is this the IP address of your ITSP’s SIP server? If so, can your router reach this IP address?

[jfaddoul]

Hi @Nithin Eluvathingal, your response is appreciated.

Yes indeed, the ITSP IP is 10.9.6.18 and it's reachable from the cube.

Attached you can find the latest config and an output of the ccsip message for an outbound call from 7014 to 0962484052.

Note that the CUCM IP is 192.168.100.4.

Thanks for your help.

[Nithin Eluvathingal]

Based on the logs you’ve shared, it appears that Invite is being sent to the ITSP SIP server, but there’s no response. I’ve attached a diagram that was created using your SIP messages. reach out to your ITSP.

[jfaddoul]

That's exactly what I'm trying to say to the ITSP and yet they respond that they have no issues. Anyway, I appreciate your help. Thanks

[Maren Mahoney]

"We're fine. It must be your problem." is a pretty standard answer from most ISPs. Send them the diagram and your logs and ask them to show you where they are responding, "....so I can track down where your responses are going inside my network."

Then they'll have to actually look.

Maren

[jfaddoul]

Thank you @Maren Mahoney for your response.

Actually they are not seeing anything from the trace they are making from their side. This is what they are saying. Imean they do not even see the call. This is weird.

[Maren Mahoney]

Well, the routing goes from your router to 10.178.180.189 and not direct to 10.9.6.18. Are you in control of 10.178.180.189 or are they? What is that device?

Maren

[jfaddoul · Accepted solution]

Thank you all for your help, I really appreciate it.

The problem was solved. It appeared that the ITSP does not accept calls if the source port was not 5060.

"connection-reuse" solved the issue.

Regards,