Which IOS version is working properly for CME 8.6 using the FAC (Forced Authorization Code) feature?

[omarcruz1]

Hi everybody, I deployed a Router ISR 3945e with IOS 15.1(4)M3 for CME 8.6. I am facing problems with the FAC feature. Reloading Router, it lost a line of Router configuration which makes to send user a tone to restrict calls. So that, without that line, users can dial any number without the FAC restriction tone. I would like to know if you guys have been working with an IOS version that doesnt have this issue?

the line that is lost is "lpcor outgoing <lpcor-group>"

thanks in advance

[paolo bevilacqua]

Update IOS.

[omarcruz1]

I know I must update IOS, but I wanted to know if someone, in the cisco community, had tryed an IOS version that works properly with FAC without having same issue.

hope you can help me guys

have a great day!!!

[Alejandro Perez]

I have an IOS 15.1(4)M4 and have the same problem, which ios is the correct?

[islam.kamal]

Hi

I think you have to enable AAA ,please check the below link.

https://supportforums.cisco.com/thread/2089663

Thank you

please rate if this will help

[Alejandro Perez]

I have the aaa enable

[islam.kamal]

hello

did you check the link which i shared .

thank you

please rate if this will help

[Anas Abueideh]

Hi,

kindly find the below compatability matrix for CME vs IOS

http://www.cisco.com/en/US/docs/voice_ip_comm/cucme/requirements/guide/33matrix.htm

if you miss this command, try to upgrade IOS. I  configured FAC for CME but I don't remember what was the version. mostly it is 8.6

regards

Anas

[Anas Abueideh]

Hi Omar,

I use the below config for Fac and it was working

aaa new-model

!

!

aaa authentication login default local

aaa authentication login h323 local

aaa authorization exec h323 local

aaa authorization network h323 local

application

package auth

  param passwd-prompt flash:enter_pin.au

  param term-digit #

  param abort-digit *

  param user-prompt flash:enter_account.au

  param max-digits 32

!

service clid_authen_collect

  param uid-len 3

  param pin-len 5

!

!

username 304 password 0 15000

username 304 autocommand exit

dial-peer cor custom

name fac-int

name user-fac

!

dial-peer cor list fac-int

member fac-int

!

dial-peer cor list user-fac

member user-fac

dial-peer voice 400 voip

corlist incoming fac-int

corlist outgoing user-fac

service clid_authen_collect

destination-pattern 900T

session target ipv4:10.1.1.1

incoming called-number 900T

dtmf-relay h245-alphanumeric

codec g711ulaw

no vad

dial-peer voice 69 pots

corlist outgoing fac-int

translation-profile outgoing DiscardDigit9

preference 3

destination-pattern 900T

port 0/2/1

forward-digits all

no sip-register

!

ephone-dn  30 octo-line

number 304 no-reg primary

label 304

description user2

name user2

corlist incoming user-fac

HTH

Anas

please rate if it is helfpul