Cisco 2921

[Slobo7x]

Hey guys, hoping to get some insight on the best way to address my failover issues at a current location.

We have two ISP’s, one is primary WAN1 and other is WAN2 as a backup in case WAN1 goes down. 
Internet fails over perfectly fine, but our VOIP system (ring central) does not. Once wan1 goes down, phones go down, and they never come back until WAN1 is back online. Purely cloud service for the phone, no onsite gear except phones themselves.

We have cisco Meraki firewall MX100 and switches, as well as a CISCO 2921 router.  I have a feeling that the IP address for WAN2 is not routed through the router itself, and therefore is failing to resolve IP’s to ring central once primary fails. Is that a correct assumption and how do I go about fixing it?

ISP one static IP(example) 72.23.44.114

ISP two static IP (example) 171.34.53.98

MX100 has internet port cable for WAN1 and Port 2 for WAN2, port 3 goes to Cisco 2921

Thanks for any help!

[balaji.bandi]

So MX 100 doing all the NAT and other stuff for failover ?

if the internet failover works, then the Phone should also work. how is your 2921 config ? is this point to WAN 1 IP route ?

[liviu.gheorghe]

Hello @Slobo7x ,

what function does the Cisco 2921 have in your network?

[Slobo7x]

So it does look like mx100 is doing nat for failover yes, if you unplug the router there is no internal network connectivity to the outside world or phones, naturally.

Cisco 2921 has an sfp connector and cat5e cable going to Mx appliance, other side of Cisco 2921 is going to the closest downstream switch. 

I hope that makes sense, I feel like I need to add a route inside the 2921 configuration to point the WAN2 ip to the Mx appliance.. does that sound correct?

[liviu.gheorghe]

No, don't configure any route for now.

Can you share the config of the 2921?

[Slobo7x]

Sure, the entries in there for Nuvox are obsolete and dialing plans, we used to have on premise CUCM but that's been gone a few years now..

hostname HQ-RTR-01
!
boot-start-marker
boot-end-marker
!
!
logging queue-limit 10000
logging buffered 10000000
logging rate-limit 10000
!
aaa new-model
!
!
aaa authentication login default group radius local enable
aaa authorization exec default group radius if-authenticated
aaa authorization network default group radius local
!
!
!
!
!
aaa session-id common
clock timezone CST -6 0
clock summer-time CDT recurring
!
ip cef
!
!
!
!
!
!
!
ip dhcp excluded-address 192.168.50.1 192.168.50.110
ip dhcp excluded-address 192.168.99.1 192.168.99.100
ip dhcp excluded-address 192.168.99.200 192.168.99.254
!
ip dhcp pool WirelessAPs
network 192.168.50.0 255.255.255.0
default-router 192.168.50.1
option 43 hex f104.c0a8.3264

!
!
!
!

voice-card 0
dsp services dspfarm
!
!
!
voice service voip
ip address trusted list
ipv4 10.1.60.0 255.255.255.0
ipv4 10.2.60.0 255.255.255.0
ipv4 10.3.60.0 255.255.255.0
ipv4 10.4.60.0 255.255.255.0
ipv4 10.1.1.0 255.255.255.0
ipv4 10.1.30.0 255.255.255.0
ipv4 10.1.50.0 255.255.255.0
ipv4 10.1.100.0 255.255.255.0
ipv4 10.2.1.0 255.255.255.0
ipv4 192.168.1.0 255.255.255.0
ipv4 192.168.50.0 255.255.255.0
ipv4 172.16.30.0 255.255.255.0
ipv4 172.16.40.0 255.255.255.0
ipv4 184.95.184.0 255.255.255.0
ipv4 70.43.124.62 255.255.255.255
ipv4 74.223.147.141 255.255.255.255
ipv4 172.31.0.0 255.255.255.0
ipv4 10.250.0.0 255.255.255.224
ipv4 64.19.27.112
no ip address trusted authenticate
address-hiding
allow-connections sip to sip
no supplementary-service h450.2
no supplementary-service h450.3
no supplementary-service h450.7
no supplementary-service h225-notify cid-update
no supplementary-service sip moved-temporarily
no supplementary-service sip refer
no supplementary-service sip handle-replaces
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711ulaw
cause-code legacy
sip
early-offer forced
midcall-signaling passthru
!
voice class codec 1
codec preference 1 g711ulaw
!
voice class codec 2
codec preference 1 g711ulaw
!
voice class h323 1
h225 timeout tcp establish 3
!
!
voice iec syslog
!
!
voice translation-rule 10
rule 1 /^31483322../ //
rule 2 /^314....\(...\)/ /\1/
!
voice translation-rule 20
rule 2 /^8/ //
!
voice translation-rule 30
rule 1 // /3146478800/
!
voice translation-rule 40
rule 1 /\(..........\)/ /3148332200/
!
voice translation-rule 50
rule 1 /3148332200/ /698/
rule 2 /3148332201/ /1990/
rule 3 /3148332202/ /424/
rule 4 /3148332203/ /1993/
rule 5 /3148332204/ /555/
rule 6 /3148332205/ /509/
rule 7 /3148332206/ /542/
rule 8 /3148332207/ /517/
rule 9 /3148332208/ /587/
rule 10 /3148332209/ /515/
rule 11 /3148332210/ /516/
rule 12 /3148332211/ /504/
rule 13 /3148332212/ /518/
rule 14 /3148332213/ /514/
rule 15 /3148332214/ /522/
rule 16 /3148332215/ /583/
rule 17 /3148332216/ /560/
rule 18 /3148332217/ /513/
rule 19 /3148332218/ /556/
rule 20 /3148332219/ /502/
rule 21 /3148332220/ /561/
rule 22 /3148332221/ /578/
rule 23 /3148332222/ /526/
rule 24 /3148332223/ /512/
rule 25 /3148332224/ /500/
rule 26 /3148332225/ /706/
rule 27 /3148332226/ /704/
rule 28 /3148332227/ /737/
rule 29 /3148332228/ /588/
rule 30 /3148332229/ /672/
rule 31 /3148332230/ /670/
rule 32 /3148332231/ /1990/
rule 33 /3148332232/ /238/
rule 34 /3148332233/ /258/
rule 35 /3148332234/ /242/
rule 36 /3148332235/ /1990/
rule 37 /3148332236/ /1990/
rule 38 /3148332237/ /1990/
rule 39 /3148332238/ /1990/
rule 40 /3148332239/ /1990/
rule 41 /3148332240/ /581/
!
!
voice translation-profile SIP-IN-PAETEC
translate called 50
!
voice translation-profile SIP-INBOUND
translate called 10
!
voice translation-profile SIP-OUTBOUND
translate called 20
!
voice translation-profile SIP-PAETEC
translate calling 40
translate called 20
!
voice translation-profile test
translate called 20
!
!
!
license udi pid CISCO2921/K9 sn FTX1835ALNM
hw-module pvdm 0/0
!
!
!

!
redundancy
notification-timer 60000
!
!
ip tftp source-interface GigabitEthernet0/0.60
!
class-map match-any VOICE-CONTROL
match ip dscp cs3
match ip precedence 3
match ip dscp af31
class-map match-any VOICE
match ip dscp ef
match ip precedence 5
!
policy-map WAN-EDGE-OUTPUT
class VOICE
bandwidth percent 50
class VOICE-CONTROL
bandwidth percent 10
class class-default
fair-queue
random-detect dscp-based
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description connection to *** network
no ip address
ip flow ingress
duplex auto
speed auto
!
interface GigabitEthernet0/0.10
description Network Management
encapsulation dot1Q 10 native
ip address 192.168.1.1 255.255.255.0
ip flow ingress
!
interface GigabitEthernet0/0.20
description Servers
encapsulation dot1Q 20
ip address 10.1.1.2 255.255.255.0
ip flow ingress
ip pim sparse-dense-mode
!
interface GigabitEthernet0/0.30
description DHCP-Data Network
encapsulation dot1Q 30
ip address 10.1.30.1 255.255.255.0
ip helper-address 10.1.1.4
ip flow ingress
ip pim sparse-dense-mode
ip policy route-map INET-ROUTEMAP-WGTEST
!
interface GigabitEthernet0/0.50
description Wirless
encapsulation dot1Q 50
ip address 10.1.50.1 255.255.255.0
ip helper-address 10.1.1.3
ip helper-address 10.1.1.4
ip helper-address 10.1.30.40
ip helper-address 10.1.1.40
ip flow ingress
ip policy route-map INET-ROUTEMAP-WGTEST
!
interface GigabitEthernet0/0.60
description Voice
encapsulation dot1Q 60
ip address 10.1.60.1 255.255.255.0
ip helper-address 10.1.1.3
ip helper-address 10.1.1.4
ip flow ingress
ip pim sparse-dense-mode
!
interface GigabitEthernet0/0.100
!
interface GigabitEthernet0/0.150
description Wireless Equipment Network
encapsulation dot1Q 150
ip address 192.168.50.1 255.255.255.0
ip flow ingress
!
interface GigabitEthernet0/0.200
description Windstream
encapsulation dot1Q 200
ip address 192.168.200.2 255.255.255.252
ip access-group Internet_deny_SIP in
!
interface GigabitEthernet0/0.201
description Windstream SIP
encapsulation dot1Q 201
ip address 184.95.184.174 255.255.255.252
ip access-group SIP-IN in
!
interface GigabitEthernet0/0.2222
description CB-EPVL
encapsulation dot1Q 2222
ip address 10.1.5.1 255.255.255.0
!
interface GigabitEthernet0/1
description Meraki Firewall
ip address 10.1.100.1 255.255.255.0
ip flow ingress
duplex auto
speed auto
!
interface GigabitEthernet0/2
ip address 172.31.0.254 255.255.255.0
duplex auto
speed auto
!
!
router eigrp 10
network 10.1.0.0 0.0.255.255
network 192.168.0.0 0.0.255.255
redistribute bgp 65001 metric 20000 10000 255 1 1500
!
!
router eigrp 20
network 172.32.2.0 0.0.0.255
network 172.32.3.0 0.0.0.255
network 172.32.4.0 0.0.0.255
redistribute connected route-map LAN-EIGRP
redistribute static metric 1500 15 255 1 1500 route-map Static-EIGRP
!
router bgp 65001
bgp router-id 12.92.155.26
bgp log-neighbor-changes
network 10.1.200.0 mask 255.255.255.0
network 10.200.0.0 mask 255.255.0.0
network 192.168.113.0
network 192.168.128.0
network 192.168.201.0
redistribute connected route-map LAN-BGP
redistribute eigrp 10
neighbor 12.92.155.25 remote-as 7018
neighbor 12.92.155.25 shutdown
neighbor 12.92.155.25 route-map LAN-BGP out
neighbor 192.168.200.1 remote-as 65500
neighbor 192.168.200.1 default-originate
neighbor 192.168.200.1 allowas-in
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip flow-export source GigabitEthernet0/0
ip flow-export version 5
ip flow-export destination 172.16.40.4 9996
!
ip dns server queue limit forwarder 10
ip dns server
ip route 0.0.0.0 0.0.0.0 10.1.100.2
ip route 10.1.200.0 255.255.255.0 10.1.100.2
ip route 10.2.1.0 255.255.255.0 10.1.5.2 10
ip route 10.2.1.0 255.255.255.0 10.1.100.2 20
ip route 10.2.60.0 255.255.255.0 10.1.5.2 10
ip route 10.2.60.0 255.255.255.0 10.1.100.2 20
ip route 10.3.60.0 255.255.255.0 10.1.5.3
ip route 10.50.0.0 255.255.0.0 10.1.100.2
ip route 10.200.0.0 255.255.0.0 10.1.100.2
ip route 10.250.0.0 255.255.255.224 172.31.0.1
ip route 12.10.125.194 255.255.255.255 10.1.100.2
ip route 12.10.125.210 255.255.255.255 10.1.100.2
ip route 12.10.125.211 255.255.255.255 10.1.100.2
ip route 12.10.125.212 255.255.255.255 10.1.100.2
ip route 12.10.125.213 255.255.255.255 10.1.100.2
ip route 12.10.125.214 255.255.255.255 10.1.100.2
ip route 12.159.120.125 255.255.255.255 12.10.125.193
ip route 64.149.218.5 255.255.255.255 12.10.125.193
ip route 74.223.147.0 255.255.255.0 184.95.184.173
ip route 74.223.147.173 255.255.255.255 184.95.184.173
ip route 99.156.57.181 255.255.255.255 12.10.125.193
ip route 99.156.57.181 255.255.255.255 64.19.27.65
ip route 172.16.40.0 255.255.255.0 10.1.5.3
ip route 192.168.113.0 255.255.255.0 10.1.100.2
ip route 192.168.128.0 255.255.255.0 10.1.100.2
ip route 192.168.201.0 255.255.255.0 10.1.100.2
!
ip access-list standard To_EIGRP
permit 0.0.0.0 255.255.255.0
!
ip access-list extended DFS
permit ip host 10.1.1.25 host 10.2.1.4
permit ip host 10.1.1.25 host 172.16.30.4
permit ip host 10.1.1.25 host 172.16.40.4
permit ip host 10.1.1.3 host 10.2.1.4
permit ip host 10.1.1.3 host 172.16.30.4
permit ip host 10.1.1.3 host 172.16.40.4
ip access-list extended INET-ROUTEMAP
deny ip any 10.0.0.0 0.255.255.255
deny ip any 172.16.0.0 0.0.255.255
deny ip any 172.17.0.0 0.0.255.255
deny ip any 172.18.0.0 0.0.255.255
deny ip any 172.19.0.0 0.0.255.255
deny ip any 172.20.0.0 0.0.255.255
deny ip any 172.21.0.0 0.0.255.255
deny ip any 172.22.0.0 0.0.255.255
deny ip any 172.23.0.0 0.0.255.255
deny ip any 172.24.0.0 0.0.255.255
deny ip any 172.25.0.0 0.0.255.255
deny ip any 172.26.0.0 0.0.255.255
deny ip any 172.27.0.0 0.0.255.255
deny ip any 172.28.0.0 0.0.255.255
deny ip any 172.29.0.0 0.0.255.255
deny ip any 172.30.0.0 0.0.255.255
deny ip any 172.31.0.0 0.0.255.255
deny ip any 172.32.0.0 0.0.255.255
deny ip any 192.168.0.0 0.0.255.255
ip access-list extended INET-ROUTEMAP-WGTEST
deny ip any 10.0.0.0 0.255.255.255
deny ip any 172.16.0.0 0.0.255.255
deny ip any 172.17.0.0 0.0.255.255
deny ip any 172.18.0.0 0.0.255.255
deny ip any 172.19.0.0 0.0.255.255
deny ip any 172.20.0.0 0.0.255.255
deny ip any 172.21.0.0 0.0.255.255
deny ip any 172.22.0.0 0.0.255.255
deny ip any 172.23.0.0 0.0.255.255
deny ip any 172.24.0.0 0.0.255.255
deny ip any 172.25.0.0 0.0.255.255
deny ip any 172.26.0.0 0.0.255.255
deny ip any 172.27.0.0 0.0.255.255
deny ip any 172.28.0.0 0.0.255.255
deny ip any 172.29.0.0 0.0.255.255
deny ip any 172.30.0.0 0.0.255.255
deny ip any 172.31.0.0 0.0.255.255
deny ip any 172.32.0.0 0.0.255.255
deny ip any 192.168.0.0 0.0.255.255
permit ip any any
ip access-list extended Internet_deny_SIP
permit ip host 10.1.60.10 any
permit ip host 10.1.60.11 any
permit ip host 10.3.60.5 any
permit ip host 10.1.1.8 any
permit ip 192.168.1.0 0.0.0.255 any
permit ip 10.1.1.0 0.0.0.255 any
permit ip 10.1.30.0 0.0.0.255 any
permit ip 10.1.50.0 0.0.0.255 any
permit ip 10.1.60.0 0.0.0.255 any
permit ip 10.1.100.0 0.0.0.255 any
permit ip 192.168.50.0 0.0.0.255 any
permit ip 172.16.40.0 0.0.0.255 any
permit ip 10.3.60.0 0.0.0.255 any
permit ip 172.16.30.0 0.0.0.255 any
permit ip 10.4.60.0 0.0.0.255 any
permit ip 10.2.1.0 0.0.0.255 any
permit ip 10.2.60.0 0.0.0.255 any
permit ip host 184.95.184.230 any
permit ip host 184.95.184.154 any
permit ip host 70.43.124.62 any
deny tcp any any eq 5060 log
deny udp any any eq 5060 log
deny tcp any any eq 1718 log
deny udp any any eq 1718 log
deny tcp any any eq 1719 log
deny udp any any eq 1719 log
deny tcp any any eq 1720 log
deny udp any any eq 1720 log
permit ip any any
ip access-list extended SIP-IN
permit ip host 74.223.147.173 any
permit ip host 74.223.147.172 any
permit ip 74.223.147.0 0.0.0.255 any
permit icmp any any
deny tcp any any eq 5060 log
deny udp any any eq 5060 log
permit ip host 64.19.27.90 any
ip access-list extended outside-in
permit icmp any any
permit ip host 108.230.6.81 any
permit ip host 99.156.57.181 any
permit tcp any host 64.19.27.100 eq 5061
permit tcp any host 64.19.27.100 range 36002 59999
permit tcp any host 64.19.27.100 eq 8443
permit tcp any host 64.19.27.100 eq 443
permit tcp any host 64.19.27.100 eq 5222
permit udp host 64.19.27.100 host 64.19.27.70 eq domain
permit tcp host 64.19.27.100 host 64.19.27.70 eq domain
!
!
ip prefix-list LAN-BGP seq 5 permit 192.168.1.0/24
ip prefix-list LAN-BGP seq 6 permit 192.168.113.0/24
ip prefix-list LAN-BGP seq 10 permit 10.1.1.0/24
ip prefix-list LAN-BGP seq 11 permit 10.1.5.0/24
ip prefix-list LAN-BGP seq 15 permit 10.1.30.0/24
ip prefix-list LAN-BGP seq 20 permit 10.1.50.0/24
ip prefix-list LAN-BGP seq 25 permit 10.1.60.0/24
ip prefix-list LAN-BGP seq 30 permit 10.1.100.0/24
ip prefix-list LAN-BGP seq 35 permit 192.168.50.0/24
ip prefix-list LAN-BGP seq 40 permit 12.92.155.26/32
ip prefix-list LAN-BGP seq 50 permit 10.200.0.0/16
!
ip prefix-list LAN-EIGRP seq 5 permit 192.168.1.0/24
ip prefix-list LAN-EIGRP seq 10 permit 10.1.1.0/24
ip prefix-list LAN-EIGRP seq 11 permit 10.1.5.0/24
ip prefix-list LAN-EIGRP seq 15 permit 10.1.30.0/24
ip prefix-list LAN-EIGRP seq 20 permit 10.1.50.0/24
ip prefix-list LAN-EIGRP seq 25 permit 10.1.60.0/24
ip prefix-list LAN-EIGRP seq 30 permit 10.1.100.0/24
ip prefix-list LAN-EIGRP seq 35 permit 192.168.50.0/24
ip prefix-list LAN-EIGRP seq 40 permit 12.92.155.26/32
logging trap debugging
!
route-map INET-ROUTEMAP-WGTEST permit 10
match ip address INET-ROUTEMAP-WGTEST
set ip next-hop 10.1.100.2
!
route-map LAN-EIGRP permit 10
match ip address prefix-list LAN-EIGRP
!
route-map LAN-BGP permit 10
match ip address prefix-list LAN-BGP
!
route-map INET-ROUTEMAP permit 10
match ip address INET-ROUTEMAP
set ip next-hop 10.1.100.2
!
!

!
!
!
control-plane
!
!
voice-port 0/2/0
echo-cancel coverage 64
timeouts ringing infinity
timing hookflash-out 50
caller-id enable
!
voice-port 0/2/1
timing hookflash-out 50
!
!
!
!
no ccm-manager fax protocol cisco
ccm-manager music-on-hold
!
no mgcp timer receive-rtcp
!
mgcp profile default
!
sccp local GigabitEthernet0/0.60
sccp ccm 10.1.1.2 identifier 3 priority 3 version 7.0
sccp ccm 10.1.60.20 identifier 2 priority 2 version 7.0
sccp ccm 10.3.60.6 identifier 1 priority 1 version 7.0
sccp ip precedence 3
sccp
!
sccp ccm group 1
associate ccm 1 priority 1
associate ccm 2 priority 2
associate ccm 3 priority 3
associate profile 2 register hq-conf
associate profile 1 register hq-xcode
associate profile 3 register HQ-MTP-G729
associate profile 4 register HQ-MTP-G711
!
dspfarm profile 1 transcode
codec g729br8
codec g729r8
codec g729abr8
codec g729ar8
codec g711alaw
codec g711ulaw
maximum sessions 30
associate application SCCP
!
dspfarm profile 2 conference
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum sessions 10
associate application SCCP
!
dspfarm profile 3 mtp
codec g729r8
maximum sessions software 200
associate application SCCP
!
dspfarm profile 4 mtp
codec g711ulaw
maximum sessions software 200
associate application SCCP
!
dial-peer voice 1 voip
description *** Generic catch all ***
session protocol sipv2
incoming called-number .
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
no voice-class sip outbound-proxy
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 2 voip
description *** Incoming from Nuvox ***
translation-profile incoming SIP-INBOUND
session protocol sipv2
session target ipv4:74.223.147.173
incoming called-number 314.......
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 3 voip
description *** Incoming from Paetec ***
translation-profile incoming SIP-IN-PAETEC
session protocol sipv2
incoming called-number 31483322..
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/2
voice-class sip bind media source-interface GigabitEthernet0/2
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 4 voip
!
dial-peer voice 5 voip
!
dial-peer voice 6 voip
!
dial-peer voice 7 voip
!
dial-peer voice 8 voip
!
dial-peer voice 9 voip
description *** Send calls to CUCM Publisher ***
preference 2
destination-pattern 522
session protocol sipv2
session target ipv4:10.1.60.20
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
no voice-class sip outbound-proxy
voice-class sip bind media source-interface GigabitEthernet0/0.60
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 10 voip
description *** Send calls to CUCM Subscriber ***
preference 1
destination-pattern 522
session protocol sipv2
session target ipv4:10.3.60.6
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
no voice-class sip outbound-proxy
voice-class sip bind media source-interface GigabitEthernet0/0.60
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 101 voip
description *** Send calls to CUCM Publisher ***
destination-pattern [1-8]..
session protocol sipv2
session target ipv4:10.1.60.20
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
no voice-class sip outbound-proxy
voice-class sip bind control source-interface GigabitEthernet0/0.60
voice-class sip bind media source-interface GigabitEthernet0/0.60
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 102 voip
description *** Send calls to CUCM Subscriber ***
preference 1
destination-pattern [1-8]..
session protocol sipv2
session target ipv4:10.3.60.6
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
no voice-class sip outbound-proxy
voice-class sip bind control source-interface GigabitEthernet0/0.60
voice-class sip bind media source-interface GigabitEthernet0/0.60
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 151 voip
description *** Incoming from CUCM Publisher ***
session protocol sipv2
session target ipv4:10.1.60.20
incoming called-number 8T
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
no voice-class sip outbound-proxy
voice-class sip bind control source-interface GigabitEthernet0/0.60
voice-class sip bind media source-interface GigabitEthernet0/0.60
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 152 voip
description *** Incoming from CUCM Subscriber ***
session protocol sipv2
session target ipv4:10.3.60.6
incoming called-number 8T
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
no voice-class sip outbound-proxy
voice-class sip bind control source-interface GigabitEthernet0/0.60
voice-class sip bind media source-interface GigabitEthernet0/0.60
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 200 voip
!
dial-peer voice 201 voip
description *** Outbound 7 digits to Nuvox ***
translation-profile outgoing SIP-OUTBOUND
destination-pattern 8[2-9]......
session protocol sipv2
session target ipv4:74.223.147.173
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/0.201
voice-class sip bind media source-interface GigabitEthernet0/0.201
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 202 voip
description *** Outbound 10 digits to Nuvox ***
translation-profile outgoing SIP-OUTBOUND
destination-pattern 8[2-9]..[2-9]......
session protocol sipv2
session target ipv4:74.223.147.173
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/0.201
voice-class sip bind media source-interface GigabitEthernet0/0.201
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 203 voip
description *** Outbound 11 digits to Nuvox ***
translation-profile outgoing SIP-OUTBOUND
destination-pattern 81[2-9]..[2-9]......
session protocol sipv2
session target ipv4:74.223.147.173
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/0.201
voice-class sip bind media source-interface GigabitEthernet0/0.201
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 204 voip
description *** Outbound International to Nuvox ***
translation-profile outgoing SIP-OUTBOUND
shutdown
destination-pattern 8011T
session protocol sipv2
session target ipv4:74.223.147.173
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/0.201
voice-class sip bind media source-interface GigabitEthernet0/0.201
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 205 voip
translation-profile outgoing SIP-OUTBOUND
destination-pattern 8[2-8]11
session protocol sipv2
session target ipv4:74.223.147.173
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/0.201
voice-class sip bind media source-interface GigabitEthernet0/0.201
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 251 voip
translation-profile outgoing SIP-PAETEC
preference 1
destination-pattern 83149717599
session protocol sipv2
session target ipv4:10.250.0.5
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/2
voice-class sip bind media source-interface GigabitEthernet0/2
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 252 voip
translation-profile outgoing SIP-PAETEC
preference 1
destination-pattern 8[2-9]..[2-9]......
session protocol sipv2
session target ipv4:10.250.0.5
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/2
voice-class sip bind media source-interface GigabitEthernet0/2
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 253 voip
translation-profile outgoing SIP-PAETEC
preference 1
destination-pattern 81[2-9]..[2-9]......
session protocol sipv2
session target ipv4:10.250.0.5
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/2
voice-class sip bind media source-interface GigabitEthernet0/2
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 254 voip
translation-profile outgoing SIP-PAETEC
preference 1
destination-pattern 8011T
session protocol sipv2
session target ipv4:10.250.0.5
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/2
voice-class sip bind media source-interface GigabitEthernet0/2
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 255 voip
translation-profile outgoing SIP-PAETEC
preference 1
destination-pattern 8[2-8]11
session protocol sipv2
session target ipv4:10.250.0.5
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/2
voice-class sip bind media source-interface GigabitEthernet0/2
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 256 voip
!
dial-peer voice 257 voip
!
dial-peer voice 258 voip
!
dial-peer voice 259 voip
!
dial-peer voice 260 voip
!
dial-peer voice 911 voip
translation-profile outgoing SIP-OUTBOUND
destination-pattern 911
session protocol sipv2
session target ipv4:74.223.147.173
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/0.201
voice-class sip bind media source-interface GigabitEthernet0/0.201
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 912 voip
translation-profile outgoing SIP-OUTBOUND
preference 1
destination-pattern 8911
session protocol sipv2
session target ipv4:10.250.0.5
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/0.201
voice-class sip bind media source-interface GigabitEthernet0/0.201
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 913 voip
translation-profile outgoing SIP-PAETEC
preference 1
destination-pattern 911
session protocol sipv2
session target ipv4:10.250.0.5
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/2
voice-class sip bind media source-interface GigabitEthernet0/2
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 914 voip
translation-profile outgoing SIP-PAETEC
preference 1
destination-pattern 8911
session protocol sipv2
session target ipv4:10.250.0.5
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
voice-class sip bind control source-interface GigabitEthernet0/2
voice-class sip bind media source-interface GigabitEthernet0/2
dtmf-relay rtp-nte
fax protocol pass-through g711ulaw
no vad
!
dial-peer voice 499 pots
description HQ Paging
destination-pattern 499
port 0/2/0
!
dial-peer voice 501 pots
description Incoming Calls
incoming called-number .
direct-inward-dial
!
!
!
!
gatekeeper
shutdown
!
!

^C
!
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
privilege level 15
transport input telnet ssh
line vty 5 15
privilege level 15
transport input telnet ssh
!
scheduler allocate 20000 1000
ntp server ntp.okstate.edu
ntp server navobs1.wustl.edu
ntp server time.nist.gov
ntp server 0.us.pool.ntp.org minpoll 10
ntp server pool.ntp.org minpoll 10
!
end

HQ-RTR-01#
HQ-RTR-01#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override

Gateway of last resort is 10.1.100.2 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 10.1.100.2
10.0.0.0/8 is variably subnetted, 18 subnets, 3 masks
C 10.1.1.0/24 is directly connected, GigabitEthernet0/0.20
L 10.1.1.2/32 is directly connected, GigabitEthernet0/0.20
C 10.1.5.0/24 is directly connected, GigabitEthernet0/0.2222
L 10.1.5.1/32 is directly connected, GigabitEthernet0/0.2222
C 10.1.30.0/24 is directly connected, GigabitEthernet0/0.30
L 10.1.30.1/32 is directly connected, GigabitEthernet0/0.30
C 10.1.50.0/24 is directly connected, GigabitEthernet0/0.50
L 10.1.50.1/32 is directly connected, GigabitEthernet0/0.50
C 10.1.60.0/24 is directly connected, GigabitEthernet0/0.60
L 10.1.60.1/32 is directly connected, GigabitEthernet0/0.60
C 10.1.100.0/24 is directly connected, GigabitEthernet0/1
L 10.1.100.1/32 is directly connected, GigabitEthernet0/1
S 10.1.200.0/24 [1/0] via 10.1.100.2
S 10.2.1.0/24 [10/0] via 10.1.5.2
S 10.2.60.0/24 [10/0] via 10.1.5.2
S 10.3.60.0/24 [1/0] via 10.1.5.3
S 10.50.0.0/16 [1/0] via 10.1.100.2
S 10.200.0.0/16 [1/0] via 10.1.100.2
12.0.0.0/32 is subnetted, 6 subnets
S 12.10.125.194 [1/0] via 10.1.100.2
S 12.10.125.210 [1/0] via 10.1.100.2
S 12.10.125.211 [1/0] via 10.1.100.2
S 12.10.125.212 [1/0] via 10.1.100.2
S 12.10.125.213 [1/0] via 10.1.100.2
S 12.10.125.214 [1/0] via 10.1.100.2
74.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
S 74.223.147.0/24 [1/0] via 184.95.184.173
S 74.223.147.173/32 [1/0] via 184.95.184.173
172.16.0.0/24 is subnetted, 1 subnets
S 172.16.40.0 [1/0] via 10.1.5.3
184.95.0.0/16 is variably subnetted, 2 subnets, 2 masks
C 184.95.184.172/30 is directly connected, GigabitEthernet0/0.201
L 184.95.184.174/32 is directly connected, GigabitEthernet0/0.201
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, GigabitEthernet0/0.10
L 192.168.1.1/32 is directly connected, GigabitEthernet0/0.10
192.168.50.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.50.0/24 is directly connected, GigabitEthernet0/0.150
L 192.168.50.1/32 is directly connected, GigabitEthernet0/0.150
S 192.168.113.0/24 [1/0] via 10.1.100.2
S 192.168.128.0/24 [1/0] via 10.1.100.2
192.168.200.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.200.0/30 is directly connected, GigabitEthernet0/0.200
L 192.168.200.2/32 is directly connected, GigabitEthernet0/0.200
S 192.168.201.0/24 [1/0] via 10.1.100.2

[liviu.gheorghe]

Ok. If CUCM functions are not used, then where are your IP phones located? On vlan 60 with IP addresses in 10.1.60.x/24?

Where do these IP phones register? To a host with IP 74.223.147.172 or 74.223.147.173?

[Slobo7x]

Correct, they are on a vlan 60 with 10.1.60.0/24 

we have a local server 10.1.1.3 that does dhcp addressing and they get the addresses from there..

[liviu.gheorghe]

Ok. Great. And where are those IP phones registering? To a host with IP 74.223.147.172 or 74.223.147.173?

[Slobo7x]

I am truly not sure, whoever wrote that router configuration file did it while we still had cucm so it wouldn’t have been adjusted for ring central.. if that makes sense 

[liviu.gheorghe]

ring central is the same thing with Windstream SIP?

What brand and model are the IP phones? Maybe looking at the config/info of the phones would give us a clue.

[Slobo7x]

Windstream is an old isp provider, we don’t use that anymore.

we use polycom vvx250 phones mostly.  I will see what the ip of ring central is.. 

what would I need to do once I find it? 

[Richard Burts]

This is a pretty complex config and there is much in it that I do not understand. For example in BGP there are 2 neighbors configured. One neighbor has a Public IP and is shutdown, while the other neighbor has a 192.168.200 address and appears to be active. And there do not seem to be any BGP learned entries in the routing table. But perhaps this is not important.

I do not see any logic in the config for failover (or for NAT) so am I correct in assuming that all of the failover logic (and NAT) are on the Meraki? If that is the case then I believe that the issue is not on your router but is in the Meraki. At this point my best guess is that in normal circumstances the phone traffic gets translated to some IP, and that address is recognized by your phone service. But in the failover situation the phone traffic is being translated to a different IP and that address is not recognized by your phone service.

[Slobo7x]

You are correct; there is no logic in the config of the router for the failover, it’s all handled by meraki mx100 appliance.  Which ice personally setup the failover for. Most likely I will have to figure out how to setup meraki to failover the phones that are in the subnet 10.1.60.0/24 to go through a wan2 as well. 

Thank you for your help, I appreciate everyone’s input in brainstorming this.

[Richard Burts]

Thanks for the update and for confirming that the failover logic is not on the router but is in the Meraki. 

I am wondering if the folks who are providing your phone service could tell you what they are seeing when WAN1 is not working? Do they see nothing from you? Or do they see traffic with invalid source address? (which would suggest that the issue is about NAT rather than about forwarding logic)