Any suggestion or help is really appriciated regarding this issue:
We have IP-STE(L3) and vIPer (General Dynamics) phones that our customer use for secure calls. A couple of months ago, the customer reported they can't make secure calls using IP-STE phones but they could with the vIPer phones. And now none of those phones can make secure calls.
Here is our vgw vwic information:
Router2#sh inventory
NAME: "3845 chassis", DESCR: "3845 chassis"
PID: CISCO3845, VID: V01 , SN: FTX1202A0QG
NAME: "c3845 Motherboard with Gigabit Ethernet on Slot 0", DESCR: "c3845 Motherboard with Gigabit Ethernet"
PID: CISCO3845-MB, VID: V06 , SN: FOC11512CRX
NAME: "Two port T1 voice interface daughtercard on Slot 0 SubSlot 0", DESCR: "Two port T1 voice interface daughtercard"
PID: VWIC-2MFT-T1, VID: V02, SN: 36175318
Here is our vgw configuration:
sh run
Building configuration...
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname CC-R200-CCM-AA
!
....omitted...........
!
card type t1 0 0
!
!
aaa group server tacacs+ ACS
..........omitted........
ip tacacs source-interface GigabitEthernet0/0
!
aaa authentication .........OMITTED........
-select 1 T1 0/0/0
!
!
no ip source-route
!
!
no ip bootp server
no ip domain lookup
ip domain name jsf.mil
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
isdn switch-type primary-ni
!
cts logging verbose
!
!
voice class codec 1
codec preference 1 g711ulaw
codec preference 2 g729r8
!
voice class h323 1
h225 timeout tcp establish 3
!
!
license udi pid CISCO2951/K9 sn FTX1841AH89
hw-module pvdm 0/0
!
hw-module pvdm 0/1
!
!
controller T1 0/0/0
cablelength long 0db
pri-group timeslots 1-24 service mgcp
!
controller T1 0/0/1
cablelength long 0db
pri-group timeslots 1-24 service mgcp
!
ip ssh version 2
!
!
interface Loopback0
no ip address
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description Crystal City Voice LAN
ip address 10.10.10.10 255.255.255.192
no ip redirects
no ip unreachables
no ip proxy-arp
duplex full
speed 1000
h323-gateway voip bind srcaddr 10.10.10.10
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0:23
description adtran s1p4
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn incoming-voice voice
isdn bind-l3 ccm-manager
no cdp enable
!
interface Serial0/0/1:23
description adtran s2p3
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn incoming-voice voice
isdn bind-l3 ccm-manager
no cdp enable
ip forward-protocol nd
!
!
...........config omitted............
!
!
voice-port 0/0/0:23
echo-cancel coverage 64
!
voice-port 0/1/0
signal groundStart
timing hookflash-out 50
timing guard-out 1000
!
voice-port 0/1/1
signal groundStart
timing hookflash-out 50
timing guard-out 1000
!
voice-port 0/1/2
signal groundStart
timing hookflash-out 50
timing guard-out 1000
!
voice-port 0/1/3
!
voice-port 0/0/1:23
echo-cancel coverage 64
!
voice-port 0/2/0
!
voice-port 0/2/1
!
voice-port 0/2/2
!
voice-port 0/2/3
!
voice-port 0/3/0
!
voice-port 0/3/1
!
voice-port 0/3/2
!
voice-port 0/3/3
!
!
mgcp
mgcp call-agent 1.1.1.1 2427 service-type mgcp version 0.1
mgcp dtmf-relay voip codec all mode out-of-band
mgcp rtp unreachable timeout 1000 action notify
mgcp modem passthrough voip mode nse
mgcp package-capability rtp-package
mgcp package-capability sst-package
mgcp package-capability pre-package
no mgcp package-capability res-package
no mgcp timer receive-rtcp
mgcp sdp simple
mgcp fax t38 inhibit
mgcp bind control source-interface GigabitEthernet0/0
mgcp bind media source-interface GigabitEthernet0/0
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
ccm-manager music-on-hold
ccm-manager switchback immediate
ccm-manager redundant-host 1.1.1.1
ccm-manager mgcp
no ccm-manager fax protocol cisco
ccm-manager config server 1.1.1.1
ccm-manager config
!
dial-peer voice 99901990 pots
service mgcpapp
port 0/1/0
!
dial-peer voice 99901991 pots
service mgcpapp
port 0/1/1
!
dial-peer voice 99901992 pots
service mgcpapp
port 0/1/2
!
dial-peer voice 100 voip
translation-profile incoming IN-From-Verizon
destination-pattern 703666.....
progress_ind setup enable 3
progress_ind connect enable 8
session target ipv4:2.2.2.2
voice-class codec 1
dtmf-relay h245-alphanumeric
no vad
