03-15-2021 01:29 AM
Hello,
When the IP Phone registered to Pub, the call from SCCP IP Phone (6921) to SIP IP Phone (7821) is working well.
But, when registered to Subs, the call wasn't working well.
The call was connected, but no sound, and the display looks like below:
And when hang up the call, the IP phone still gets stuck and didn't immediately disconnect the call.
Maybe anyone knows the problem?
Thanks in advanced
03-15-2021 01:43 AM
Whats the status of DB replication ? All good ?
03-15-2021 01:54 AM
Left -> Pub ; Right -> Subs
DB Replication was good.
03-15-2021 03:44 AM - edited 03-15-2021 03:49 AM
Is there a firewall between subscriber and the phones ? if yes you need to do some configuration on firewall.
I had similar issue were i cannot answer any calls from SIP phones and there was a firewall between the phone and CUCM servers. The issues was only with the SIP phone. i am not sure what change my firewall team did. after modify firewall configuration, calls worked fine.
03-15-2021 04:25 AM
For the traffic/pattern when calling active, yes.
03-15-2021 04:57 AM
Why do you have your nodes in the CM system separated by a firewall, what is you use case for this?
03-15-2021 07:37 AM
Ports / interfaces on Core 1 & 2 are full.
So my customer said, the only possible connection with the firewall.
03-15-2021 09:21 AM - edited 03-15-2021 11:38 PM
Sounds like an awfully long way to go for water if you ask me, if you get the analogy. For sure it must be possible to add a switch to the stack, or split the network up into the recommended core, distribution and access layers that a good designed network should comprise of instead of putting the nodes in the clustered system on either side of a firewall.
BTW aren’t your CMs virtual machines that runs on ESXi hosts? Is it the entire ESXi host that the sub(s) is running on that is placed on the other network interface of the firewall?
03-16-2021 11:27 PM
Yes, Roger, the CUCM Subs running inside ESXi are under the firewall.
Only CUCM Pub running inside ESXi direct to Core.
Like as in the previous picture that I have shared.
03-15-2021 05:01 AM
If yes, firewall is the culprit. On firewall There are some settings for SIP.
i will check with my team who modified the configuration and let you know what exactly they changed. You can also consult with your firewall team.
03-15-2021 07:42 AM
Thanks, Nithin
I have informed my customer about additional settings in the Firewall.
They want to analyze and find it first.
03-16-2021 11:30 PM
Hi Nithin,
Any updated info for set up / config about this?
03-17-2021 04:36 AM
SIP allow, that's what the team said. Sip message was blocking by firewall.
03-17-2021 10:37 PM
SCCP :
SIP :
SCCP and SIP have been enabled, but still didn't work.
03-17-2021 11:14 PM
You should check with firewall team. I am not good in firewalls.
make sure firewall doesn’t block any sip messages. For me firewall was blocking 200 ok.
and the firewall model Palo Alto.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: