Redundancy Group for CUBE - different behavior between CUBE

[mumbles202]

Setup a redundancy group between 2 4331s running 15.5.3.S4b that sit behind an ASA and are using a single interface for ITSP and CUCM communication.  The Gi 0/0/0 configurations are as follows:

primary:

interface GigabitEthernet0/0/0
ip address 172.18.63.10 255.255.255.0
negotiation auto
redundancy rii 1
redundancy group 1 ip 172.18.63.11 exclusive

secondary:

interface GigabitEthernet0/0/0
ip address 172.18.63.12 255.255.255.0
negotiation auto
redundancy rii 1
redundancy group 1 ip 172.18.63.11 exclusive

When the either 4331 is active, the trunk to CUCM comes up w/ the 172.18.63.11 address without issue and the MTP and Transcoder from the respective 4331 registers.  But when I go to the ASA, when the primary 4331 is active i see the connections from 172.18.63.11 as expected.  When the secondary 4331 is active i see traffic from both 172.18.63.12 and 172.18.63.11.  I've removed and re-added the configuration on the interface but haven't seen any difference.  The rest of the redundancy configuration i have (the same on both routers) is below:

voice service voip
  mode border-element
  redundancy-group 1

redundancy
  mode none
  application redundancy
   group 1
   name voice-b2bha
   priority 100 failover threshold 75
   timers delay 30 reload 60
   control GigabitEthernet0/0/1 protocol 1
   data GigabitEthernet0/0/1
   track 1 shutdown
   track 2 shutdown

track 1 interface GigabitEthernet0/0/0 line-protocol
!
track 2 interface GigabitEthernet0/0/1 line-protocol

interface GigabitEthernet0/0/1
  ip address 10.10.1.1 255.255.255.252
  negotiation auto

If i do a "show redundancy application group all" things appear normally and i can failover without issue and inbound calling works fine on either CUBE.  I didn't add this:

gateway
media-inactivity-criteria all
timer receive-rtcp 5
timer receive-rtp 1200

but don't think that would cause the issue I'm seeing.  

[Chris Deren]

Please post full config including interface used for keep-alive, is that interface connected to a switch or directly to HA CUBE with cross-over cable (not supported)?

This link provides config examples of ISR4K HA:

https://cisco.app.box.com/v/cube/file/28807515776

[mumbles202]

Thanks for the response.  Gi 0/1 is used for tracking and it's connected to an upstream switch.  Below are the configs for both routers:

primary:

version 15.5
service timestamps debug datetime msec localtime
service timestamps log datetime msec
service internal
service sequence-numbers
no platform punt-keepalive disable-kernel-core
!
hostname primary
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-intf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
logging queue-limit 10000
logging buffered 10000000
logging rate-limit 10000
no logging console
no logging monitor
enable secret 5 qoaJfdBLYxMn$1$FY8h$EDmApDs
!
aaa new-model
!
!
aaa authentication login default group radius local
aaa authorization exec default group radius local
!
!
!
!
!
!
aaa session-id common
!
!
!
!
!
!
!
!
!
!
!
!
!

ip host sip-trk01.carrier.net A.B.C.D
ip name-server 192.168.2.50 192.168.2.51

ip domain name testing
!
!
!
!
!
!
!
!
!
!
subscriber templating
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
voice service voip
ip address trusted list
ipv4 192.168.4.36
ipv4 192.168.4.37
ipv4 A.B.C.D
mode border-element
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
redundancy-group 1
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
sip
midcall-signaling passthru
!
!
!
voice class server-group 1
ipv4 192.168.4.37 preference 1
ipv4 192.168.4.36 preference 2
!
voice class sip-options-keepalive 1
description CUCM Nodes
!
!
voice iec syslog
!
!
voice translation-rule 1
rule 1 /^8/ //
!
!
voice translation-profile STRIP9
translate called 1
!
!
!
!
voice-card 0/4
dsp services dspfarm
no watchdog
!
license udi pid ISR4331/K9 sn
license boot suite AdvUCSuiteK9
!
spanning-tree extend system-id
!
username cisco privilege 15 secret 5 nBP7bFEb3cPF/D
!
redundancy
mode none
application redundancy
group 1
name voice-b2bha
priority 100 failover threshold 75
timers delay 30 reload 60
control GigabitEthernet0/0/1 protocol 1
data GigabitEthernet0/0/1
track 1 shutdown
track 2 shutdown
!
!
vlan internal allocation policy ascending
!
track 1 interface GigabitEthernet0/0/0 line-protocol
!
track 2 interface GigabitEthernet0/0/1 line-protocol
!
!
!
!
!
!
interface GigabitEthernet0/0/0
ip address 192.168.4.15 255.255.255.0
negotiation auto
redundancy rii 1
redundancy group 1 ip 192.168.4.20 exclusive
!
interface GigabitEthernet0/0/1
ip address 10.10.1.1 255.255.255.252
negotiation auto
!
interface GigabitEthernet0/0/2
no ip address
negotiation auto
!
interface Service-Engine0/4/0
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
shutdown
negotiation auto
!
interface Vlan1
no ip address
shutdown
!
ip forward-protocol nd
no ip http server
no ip http secure-server
ip tftp source-interface GigabitEthernet0
ip route 0.0.0.0 0.0.0.0 192.168.4.50
ip ssh version 2
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
sccp local GigabitEthernet0/0/0
sccp ccm 192.168.4.37 identifier 1 priority 1 version 7.0
sccp ccm 192.168.4.36 identifier 2 priority 2 version 7.0
sccp
!
sccp ccm group 1
associate ccm 1 priority 1
associate ccm 2 priority 2
associate profile 1 register VG_MTP1
associate profile 2 register transcoder_1
switchover method immediate
!
!
!
dspfarm profile 2 transcode
codec g729abr8
codec g729ar8
codec g711alaw
codec g711ulaw
codec g729br8
codec g729r8
maximum sessions 10
associate application SCCP
!
dspfarm profile 1 mtp
codec g711ulaw
codec pass-through
maximum sessions hardware 4
maximum sessions software 12
associate application SCCP
!
dial-peer voice 1 voip
description incoming calls from ITSP
session protocol sipv2
session target sip-server
incoming called-number .
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte
codec g711ulaw
!
dial-peer voice 10 voip
description Outgoing calls to CUCM
preference 1
destination-pattern 10644
session protocol sipv2
session server-group 1
voice-class sip options-keepalive profile 1
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte sip-notify
codec g711ulaw
!
dial-peer voice 11 voip
description Outgoing calls to CUCM
preference 1
destination-pattern 9236833..
session protocol sipv2
session server-group 1
voice-class sip options-keepalive profile 1
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte sip-notify
codec g711ulaw
!
dial-peer voice 101 voip
translation-profile outgoing STRIP9
preference 1
destination-pattern 91[2-9]..[2-9].....
session protocol sipv2
session target dns:sip-trk01.carrier.net
voice-class sip options-keepalive
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte digit-drop
codec g711ulaw
no vad
!
dial-peer voice 102 voip
translation-profile outgoing STRIP9
preference 1
destination-pattern 9[2-9]..[2-9].....
session protocol sipv2
session target dns:sip-trk01.carrier.net
voice-class sip options-keepalive
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte digit-drop
codec g711ulaw
no vad
!
dial-peer voice 103 voip
translation-profile outgoing STRIP9
preference 1
destination-pattern 9011T
session protocol sipv2
session target dns:sip-trk01.carrier.net
voice-class sip options-keepalive
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte digit-drop
codec g711ulaw
no vad
!
!
sip-ua
registrar dns:sip-trk01.carrier.net expires 3600
sip-server dns:sip-trk01.carrier.net
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
transport input ssh
line vty 5 15
transport input ssh
!
!
end

Secondary:

version 15.5
service timestamps debug datetime msec localtime
service timestamps log datetime msec
service internal
service sequence-numbers
no platform punt-keepalive disable-kernel-core
!
hostname secondary
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-intf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
logging queue-limit 10000
logging buffered 10000000
logging rate-limit 10000
no logging console
no logging monitor

!
aaa new-model
!
!
aaa authentication login default group radius local
aaa authorization exec default group radius local
!
!
!
!
!
!
aaa session-id common
!
!
!
!
!
!
!
!
!
!
!
!
!

ip name-server 192.168.2.50 192.168.2.51

ip domain name testing
!
!
!
!
!
!
!
!
!
!
subscriber templating
multilink bundle-name authenticated
!
!
!
!
!
!
!

!
voice service voip
ip address trusted list
ipv4 192.168.4.36
ipv4 192.168.4.37
ipv4 A.B.C.D
mode border-element
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
redundancy-group 1
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
sip
midcall-signaling passthru
!
!
!
voice class server-group 1
ipv4 192.168.4.37 preference 1
ipv4 192.168.4.36 preference 2
!
voice class sip-options-keepalive 1
description CUCM Nodes
!
!
voice iec syslog
!
!
voice translation-rule 1
rule 1 /^8/ //
!
!
voice translation-profile STRIP9
translate called 1
!
!
!
!
voice-card 0/4
dsp services dspfarm
no watchdog
!
license udi pid ISR4331/K9 sn
license boot suite AdvUCSuiteK9
!
spanning-tree extend system-id
!
username cisco privilege 15 secret 5 $1$dp1
!
redundancy
mode none
application redundancy
group 1
name voice-b2bha
priority 100 failover threshold 75
timers delay 30 reload 60
control GigabitEthernet0/0/1 protocol 1
data GigabitEthernet0/0/1
track 1 shutdown
track 2 shutdown
!
!
vlan internal allocation policy ascending
!
track 1 interface GigabitEthernet0/0/0 line-protocol
!
track 2 interface GigabitEthernet0/0/1 line-protocol
!
!
!
!
!
!
interface GigabitEthernet0/0/0
ip address 192.168.4.16 255.255.255.0
negotiation auto
redundancy rii 1
redundancy group 1 ip 192.168.4.20 exclusive
!
interface GigabitEthernet0/0/1
ip address 10.10.1.2 255.255.255.252
negotiation auto
!
interface GigabitEthernet0/0/2
no ip address
negotiation auto
!
interface Service-Engine0/4/0
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
shutdown
negotiation auto
!
interface Vlan1
no ip address
shutdown
!
ip forward-protocol nd
no ip http server
no ip http secure-server
ip tftp source-interface GigabitEthernet0/0/0
ip route 0.0.0.0 0.0.0.0 192.168.4.50
ip ssh version 2
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
sccp local GigabitEthernet0/0/0
sccp ccm 192.168.4.37 identifier 1 priority 1 version 7.0
sccp ccm 192.168.4.36 identifier 2 priority 2 version 7.0
sccp
!
sccp ccm group 1
associate ccm 1 priority 1
associate ccm 2 priority 2
associate profile 2 register transcoder_2
associate profile 1 register VG_MTP2
switchover method immediate
!
!
!
dspfarm profile 2 transcode
codec g729abr8
codec g729ar8
codec g711alaw
codec g711ulaw
codec g729br8
codec g729r8
maximum sessions 10
associate application SCCP
!
dspfarm profile 1 mtp
codec g711ulaw
codec pass-through
maximum sessions hardware 4
maximum sessions software 12
associate application SCCP
!
dial-peer voice 1 voip
description incoming calls from ITSP
session protocol sipv2
session target sip-server
incoming called-number .
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte
codec g711ulaw
!
dial-peer voice 10 voip
description Outgoing calls to CUCM
preference 1
destination-pattern 10644
session protocol sipv2
session server-group 1
voice-class sip options-keepalive profile 1
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte sip-notify
codec g711ulaw
!
dial-peer voice 11 voip
description Outgoing calls to CUCM
preference 1
destination-pattern 9236833..
session protocol sipv2
session server-group 1
voice-class sip options-keepalive profile 1
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte sip-notify
codec g711ulaw
!
dial-peer voice 101 voip
translation-profile outgoing STRIP9
preference 1
destination-pattern 91[2-9]..[2-9].....
session protocol sipv2
session target dns:sip-trk01.carrier.net
voice-class sip options-keepalive
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte digit-drop
codec g711ulaw
no vad
!
dial-peer voice 102 voip
translation-profile outgoing STRIP9
preference 1
destination-pattern 9[2-9]..[2-9].....
session protocol sipv2
session target dns:sip-trk01.carrier.net
voice-class sip options-keepalive
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte digit-drop
codec g711ulaw
no vad
!
dial-peer voice 103 voip
translation-profile outgoing STRIP9
preference 1
destination-pattern 9011T
session protocol sipv2
session target dns:sip-trk01.carrier.net
voice-class sip options-keepalive
voice-class sip bind control source-interface GigabitEthernet0/0/0
voice-class sip bind media source-interface GigabitEthernet0/0/0
dtmf-relay rtp-nte digit-drop
codec g711ulaw
no vad
!
!
sip-ua
registrar dns:sip-trk01.carrier.net expires 3600
sip-server dns:sip-trk01.carrier.net
!
!
line con 0
exec-timeout 0 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
transport input ssh
line vty 5 15
transport input ssh
line vty 16
!
!
end

[MPastor]

Hi,

What is following things?

interface GigabitEthernet0/0/1
ip address X.X.X.X X.X.X.X
negotiation auto

Is It a ASR interface? Because you need a hearthbeat/keep-alive interfaces on both sides.