Activating IP Telephony through Cisco2911/K9 & WS-C3750G Switch

abbas.haider · ‎12-22-2016

Hi All,

I am stuck in a situation where I have to add 1 IP phone 7965G to the network and make it work. The phones were working previously but the previous contractor when they left the site, they made a mess out of the whole network and nothing is working now.

The topology is something like this

Internet is connected to ASA5505 (It has a public IP on WAN & is giving DHCP Private IPs to whoever connects to it on LAN ports) -- Linkys Wifi router is connected to the ASA5505 LAN Port through DHCP Server of ASA LAN Side.

Linksys wifi is connected to Cisco 3750G Switch at Port GigabitEthernet1/0/1

The switch is connected to Cisco2911/K9 from port on GigabitEthernet1/0/24 from the 3750G Switch & Port number GigabitEthernet0/1 of the Cisco 2911/K9.

I have managed to establish the connection between all the boxes but the phone when I connect to the switch, they get an IP from DHCP Server but they don't get a dial tone. Can anyone please have a look at the Running configuration for the Switch 2750 & Cisco2911 router and let me know how to make the IP Phones work?

--------------------------------------------------

Sh Run for the Switch 3750G

--------------------------------------------------

Sid3750-1#sh run
Building configuration...

Current configuration : 4890 bytes
!
! Last configuration change at 08:51:46 UTC Thu May 20 1993 by admin
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log datetime localtime
no service password-encryption
!
hostname Sid3750-1
!
boot-start-marker
boot-end-marker
!
!
!
username admin privilege 15 secret 5 $1$KNSF$FKeQ3cTHtwZnTZ7d8Nr6w0
aaa new-model
!
!
aaa authentication login CONSOLE local
aaa authentication login VTY local
aaa authentication enable default enable none
!
!
!
!
!
aaa session-id common
switch 1 provision ws-c3750g-24ps
switch 2 provision ws-c3750g-24ps
system mtu routing 1500
ip routing
ip domain-name stm.ad
!
!
!
!
mls qos
!
crypto pki trustpoint TP-self-signed-216215936
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-216215936
revocation-check none
rsakeypair TP-self-signed-216215936
!
!
crypto pki certificate chain TP-self-signed-216215936
certificate self-signed 01
30820246 308201AF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32313632 31353933 36301E17 0D393330 33303130 30303331
305A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3231 36323135
39333630 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
BF2D86A8 031C1B91 437ABBA8 19968145 7314EA50 90ED153E 38802A70 B368DA02
0724D2E0 FF1D3BD7 B58A687A AB8FC73F 212BDEED 06CA907B 4F72C691 5D2EE1E5
D9F3986D E7923114 89CC30CC 201EA7C9 318DB2CE 0A7807D4 0FB26AC3 57F60801
2A4DEF54 3C64C3D3 00FF543B BE58E347 74AA9FB6 B0339D06 B5E53F03 C2446643
02030100 01A37030 6E300F06 03551D13 0101FF04 05300301 01FF301B 0603551D
11041430 12821053 69643337 35302D31 2E73746D 2E616430 1F060355 1D230418
30168014 6E5EED48 83F552F8 7A29C73E 9A1A4AC1 3599809D 301D0603 551D0E04
1604146E 5EED4883 F552F87A 29C73E9A 1A4AC135 99809D30 0D06092A 864886F7
0D010104 05000381 8100417E 39CECA1C 71354DB0 4A4B669F 0E2CC65D AD64529D
4C0AF861 23E89665 8FA9B14E 410EC809 C1025536 FCE49FCD CF06C085 AD1C939A
DA1491BF F17871F1 DF31A4FE 0BA36E3E CE6B101E E5D3DF93 22CBBB7A 57742E60
745110E3 1088561E 1FF7D00C 49FBBFEF DADBD7DE 930BBE2A 9FC807E5 818E85A3
D1014E3D 000CFFB3 E894
quit
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
!
!
!
interface GigabitEthernet1/0/1
ip dhcp client hostname Sid3750-1
!
interface GigabitEthernet1/0/2
!
interface GigabitEthernet1/0/3
!
interface GigabitEthernet1/0/4
!
interface GigabitEthernet1/0/5
!
interface GigabitEthernet1/0/6
!
interface GigabitEthernet1/0/7
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
!
interface GigabitEthernet1/0/15
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
!
interface GigabitEthernet1/0/23
!
interface GigabitEthernet1/0/24
!
interface GigabitEthernet1/0/25
!
interface GigabitEthernet1/0/26
!
interface GigabitEthernet1/0/27
!
interface GigabitEthernet1/0/28
!
interface GigabitEthernet2/0/1
!
interface GigabitEthernet2/0/2
!
interface GigabitEthernet2/0/3
!
interface GigabitEthernet2/0/4
!
interface GigabitEthernet2/0/5
!
interface GigabitEthernet2/0/6
!
interface GigabitEthernet2/0/7
!
interface GigabitEthernet2/0/8
!
interface GigabitEthernet2/0/9
!
interface GigabitEthernet2/0/10
!
interface GigabitEthernet2/0/11
!
interface GigabitEthernet2/0/12
!
interface GigabitEthernet2/0/13
!
interface GigabitEthernet2/0/14
!
interface GigabitEthernet2/0/15
!
interface GigabitEthernet2/0/16
!
interface GigabitEthernet2/0/17
!
interface GigabitEthernet2/0/18
!
interface GigabitEthernet2/0/19
!
interface GigabitEthernet2/0/20
!
interface GigabitEthernet2/0/21
!
interface GigabitEthernet2/0/22
!
interface GigabitEthernet2/0/23
!
interface GigabitEthernet2/0/24
!
interface GigabitEthernet2/0/25
!
interface GigabitEthernet2/0/26
!
interface GigabitEthernet2/0/27
!
interface GigabitEthernet2/0/28
!
interface Vlan1
no ip address
ip helper-address 10.13.10.55
!
ip http server
ip http secure-server
!
!
ip route 0.0.0.0 0.0.0.0 192.168.1.254
!
ip sla responder
logging esm config
!
!
!
!
!
line con 0
logging synchronous
login authentication CONSOLE
transport preferred none
stopbits 1
speed 115200
line vty 0 4
exec-timeout 15 0
logging synchronous
login authentication CONSOLE
length 0
transport input ssh
transport output all
line vty 5 15
exec-timeout 15 0
logging synchronous
transport input ssh
transport output all
!
end

--------------------------------------------------

SHOW RUN for Cisco2911/K9

------------------------------------------------

SIDCCM#sh run
Building configuration...

Current configuration : 10124 bytes
!
! Last configuration change at 09:26:13 mst Fri Dec 23 2016 by admin
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SIDCCM
!
boot-start-marker
boot-end-marker
!
!
logging buffered 1000000
no logging console
no logging monitor
enable secret 5 $1$1fxc$8UPVix9wuuqh52yTyYwXV0
!
aaa new-model
!
!
aaa authentication login default group radius local
aaa authentication login CONSOLE local
aaa authentication login VTY local
!
!
!
!
!
aaa session-id common
clock timezone mst 13 45
clock summer-time pdt recurring
!
no ipv6 cef
ip source-route
ip cef
!
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 10.13.25.1 10.13.25.30
!
ip dhcp pool CISCO_VOICE
network 10.13.26.0 255.255.255.0
default-router 10.13.26.1
option 150 ip 10.1.25.26
!
!
ip domain name STM.AD
multilink bundle-name authenticated
!
!
!
!
!
!
trunk group Sidney_FXO
description Sidney FXOTrunk
!
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-1380892754
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1380892754
revocation-check none
rsakeypair TP-self-signed-1380892754
!
!
crypto pki certificate chain TP-self-signed-1380892754
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31333830 38393237 3534301E 170D3131 31303138 30313030
35345A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 33383038
39323735 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
81008FA4 DE5C0472 2A8D29CD AFDF7089 0B8DB70B 5B0B6733 53C08370 BF36E23E
138241C0 641FCCF2 99451D5A BC6B0575 6AC37391 39B655B6 12CC6F9C 199EDC61
C9CFF355 B8C112FB F445051C CB384BE1 F0E4228D EA1090AD 9C7B95B1 26855224
EEF5B087 C75D906F 0D8C0DBB CC12EF42 9B05340B 48CFEF4B 268EEB77 37359890
FCC10203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14F6391C 81E490C2 0EB8C5F2 0AADD3DA 519CE72B 61301D06
03551D0E 04160414 F6391C81 E490C20E B8C5F20A ADD3DA51 9CE72B61 300D0609
2A864886 F70D0101 05050003 81810018 ACCA370B C4AA54FF 8EFB69CE 3F3829E4
8BDE3E34 B9A87AE0 35D8E46A D7F6A96A B0D6ED9A D1F16377 4B42D45C 8CA42565
5C3D989D F5225667 708D8B9C 1C0AAE1C 7EEFB217 2150B7EF A9395C64 E486C0C9
4F7C1EBA 26B838BF 75B1157C 6AEF2179 A0568841 6AF1930E 57BF5232 099A4AB0
755342E1 EA407BF3 AB67FC84 0843B5
quit
voice-card 0
dspfarm
dsp services dspfarm
!
!
!
voice service voip
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
sip
min-se 86400 session-expires 86400
!
!
!
!
voice translation-rule 1
rule 1 /^40643383$..$/ /8301/
!
voice translation-rule 2
rule 1 /^10$..$$/ /9128167010\1/
rule 2 /^17$..$$/ /9143268817\1/
!
voice translation-rule 3
rule 1 /^24$..$$/ /9130383724\1/
rule 2 /^25$..$$/ /9130386425\1/
rule 3 /^267$.$$/ /91432688267\1/
rule 4 /^27$..$$/ /9128167727\1/
rule 5 /^28$..$$/ /9128167728\1/
!
voice translation-rule 4
rule 1 /^33$..$$/ /9130383933\1/
!
voice translation-rule 5
rule 1 /^43$..$$/ /9130386343\1/
!
voice translation-rule 6
rule 1 /^51$..$$/ /9131867051\1/
rule 2 /^55$..$$/ /9131822655\1/
!
voice translation-rule 7
rule 1 /^87$..$$/ /9140686987\1/
rule 2 /^89$..$$/ /9140686989\1/
!
voice translation-rule 8
rule 1 /^339$.$$/ /91432688339\1/
!
!
voice translation-profile PSTNIN
translate called 1
!
voice translation-profile profile2
translate calling 2
!
voice translation-profile profile3
translate calling 3
!
voice translation-profile profile4
translate calling 4
!
voice translation-profile profile5
translate calling 5
!
!
license udi pid CISCO2911/K9 sn FTX1543AHUK
license boot module c2900 technology-package uck9
hw-module pvdm 0/0
!
!
!
username admin password 0 se4aw3
username devon password 0 dr5se4
!
redundancy
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 10.13.25.25 255.255.255.0
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
!

Dennis Mink · ‎12-22-2016

there is no config on that 2911 in terms of telephony service, no dial peers, nothing.

Your contractor bashed you up pretty bad.

how did this work previously, were you uising Call Manager express?

also does your DHCP pool have an option 150 set to point it to the IP address of your 2911?

Please remember to rate useful posts, by clicking on the stars below.

abbas.haider · ‎12-24-2016

Hi Dennis

Thanks for this. I have managed to get the phones registered by enabling the telephony services on the 2911. now I need the IP phones associated with this 2911 router to use the PSTN lines being served into the 2911.

Can you please help me setup or just guide how to setup the phones to use those PSTN line that is connected to the Cisco2911/K9 Router.

Appreciate your time & help

Regards,

Dennis Mink · ‎12-28-2016

you are using FXO ports on the VGW

so you need inbound dial peers to ring your phones extensions and someting like a .T or 0T pattern for all outbound calls.

http://www.cisco.com/c/en/us/support/docs/voice/h323/14368-plar-config.html

Please remember to rate useful posts, by clicking on the stars below.

abbas.haider · ‎12-30-2016

Hi Dennis,

Here's the complete topology and config files. Can you please help me where I am going wrong.

I have an ISP modem where a static IP is coming from that static IP is connected to my ASA5505 on the outside vlan I have then an inside vlan for 10.0.0.0/24 on all other ports of the Asa for the local network My 3750G switch is connected to the asa On that switch I have some IP phones and laptops connected .. these all get IP from the dhcp running on inside vlan of ASA Data traffic is going through well so far The problem comes When I have to connect a ISR 2911 router to this switch The 2911 router is to enable IP phones on this network PSTN line is coming and directly connected to the 2911 router .. and cmesrt is enabled on the 2911 router I tried to create 2 vlans on the router one for data and one for voice but when I connect this router to the switch .. I don't know IP connectivity is not established I assume it is because I have kept 2 dhcp pools one for data and one for voice on the router so I assume the IP phones get confused as where to get the IP from either from Asa or from the router as both are running their dhcp servers Plus I don't k ow how to configure an fxo port but that is at a latter stage when atleast IP phones are registered No- pstn is just for voice (I created data and voice vlans on 2911 because that's the only kind of config I could find about 2911 on YouTube)

Although my 2911 is not doing any data services Dhcp pools defined on asa firewall as well as router 2911