VOIP does not work only on Cisco Catalyst 2960 (WS-C2960XR-48LPS-I).

cstutz · ‎04-11-2022

e acquired new VOIP devices for the company, however, the new ones do not work, they remain as "Unidentified Network". The "old" VOIPS work normally.
We did a test and took the New VOIP's to another network environment, and it worked instantly.
We already contacted the manufacturer Yealink, but they informed that there would be no special configuration in the Switch Ports for the device to work.
In the working environment, the Switch is the Cisco Catalyst 4510 (WS-C4510R-E)
In the non-working environment, the Switch is Cisco Catalyst 2960 (WS-C2960XR-48LPS-I)
Would anyone know the differences between this model of the 4510 and the 2960 so we can try to see if it could be some Feature that has in one and doesn't have in the other, for example....
Thanks.

Flavio Miranda · ‎04-11-2022

This can be related to connectivity. When the phone goes up on the network, they try to contact the server to get the instruction to work. It seems to me that when they are on the 2960 they are facing trouble trying to connnect the server. I´d recommend you to use a laptop and validate this access with ping, nslookup or telnet tests.

Make sure they are getting ip address properly. Make sure your dhcp scope is not full. Make sure the vlan on this switch has connectivity with the void server.

cstutz · ‎04-11-2022

So, we've already done several tests, including connecting devices that had never been plugged into our Switch. We plugged these devices into the same network point that we are using for the IP Phone Device, and the new device caught the network immediately.
Also, the "Old" IP Phone Devices that we have, in the case of Manufacturer Khomp, work normally.
The whole problem only occurs on Yealink Manufacturer "New" IP Phone Device.
There seems to be some "incompatibility" between Yealink and the 2690.
To understand, even at the level of comparison of Switch Ports:
Talking about the New VOIP (Yealink):

The differences are (GRED = Environment where Yealink works - Cisco Catalyst 4510 (WS-C4510R-E); CPS = Environment where Yealink does not work - Cisco Catalyst 2960 (WS-C2960XR-48LPS-I):

-GRED is in vlan 110 and in CPS in vlan 1 (CPS only has 1 vlan). This information is using "show mac ad ad" command

-GRED the ip, ipx, assigned, other protocols appear; and the CPS does not show protocol information. This information is using the command "show mac ad ad"

-GRED in status shows Vlan trunk, and in CPS shows vlan 1. This information is using the command "show interfaces status"

In the GRED , the settings of the Port Security are identical to the 2 Ports of the CPS (for example) that do not work. The information is using the command "show port-security interface"

Port Security : Disabled

Port Status : Secure down

Violation Mode : Shutdown

Aging Time : 0 mins

Aging Type : Absolute

SecureStatic Address Aging : Disabled

Maximum MAC Addresses : 1

Total MAC Addresses : 0

Configured MAC Addresses : 0

Sticky MAC Addresses : 0

Last Source Address:Vlan : 0000.0000.0000:0

Security Violation Count : 0

Flavio Miranda · ‎04-11-2022

did you try with no port-security?

I see just a little possibilities for the switch working in Layer 2 interfere with phone function. Of course, there always the possibility.

A layer 2 switch will provide PoE, if that the case, then, will perform the basic switching. If the phone has an error on the screen, I assume it is getting the proper power from PoE.

If you did not already, I´d take one interface with the pretty basic config, let´s say the vlan only, just to make sure some config on the port could cause this behavior.

And as you described that most of others device is working and only this specific Yealink does not, I´d start to suspect of the phone and not the switch.

cstutz · ‎04-11-2022

Yes, we already tried without Port Security. Same problem.
So, at first we thought it was a problem with the IP phone, however, we connected this device in another network environment, which has a Cisco Catalyst 4510 Switch (WS-C4510R-E), and in this environment, it worked normally.
And in my previous answer, I sent the differences of the ports that the IP Phone device connected to (both on the 4510 and on the 2960), in my (basic) look, I only found a difference that maybe could be related, which in this case is part of the Protocols.
And the Protocols information does not appear on the 2960, only on the 4510.

Flavio Miranda · ‎04-11-2022

Well, one last shot is recommend update the switch, if possible. 2960 isn´t new.

cstutz · ‎04-12-2022

Yeah, we also thought about the possibility of an update on the Switch 2960. Honestly, I don't even know if there's an update yet, or if ours is as current as possible.
However, we are very concerned about the "cost versus benefit" of this update. Honestly, the risk can be very big, given everything we have in our Infrastructure.
Below I leave the information of our 2960, by the command "show version".
Could you let me know if there is an update?

NOTE: We have 6 Stackable Switch 2960

Thanks for all the information exchange and help.

SWITCHCPD#show version
Cisco IOS Software, C2960X Software (C2960X-UNIVERSALK9-M), Version 15.2(4)E8, R ELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2019 by Cisco Systems, Inc.
Compiled Fri 15-Mar-19 10:55 by prod_rel_team

ROM: Bootstrap program is C2960X boot loader
BOOTLDR: C2960X Boot Loader (C2960X-HBOOT-M) Version 15.2(4r)E3, RELEASE SOFTWAR E (fc4)

SWITCHCPD uptime is 2 years, 4 weeks, 6 days, 14 hours, 11 minutes
System returned to ROM by power-on
System restarted at 19:15:00 HAA Sun Mar 8 2020
System image file is "flash:/c2960x-universalk9-mz.152-4.E8/c2960x-universalk9-m z.152-4.E8.bin"
Last reload reason: power-on

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C2960XR-48LPS-I (APM86XXX) processor (revision C0) with 524288K bytes o f memory.
Processor board ID FDO1836I0UB
Last reset from power-on
1 Virtual Ethernet interface
1 FastEthernet interface
312 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address : 68:99:CD:C4:8C:00
Motherboard assembly number : 73-15378-03
Power supply part number : 341-0531-01
Motherboard serial number : FDO183612KG
Power supply serial number : DCB1828B0P8
Model revision number : C0
Motherboard revision number : A0
Model number : WS-C2960XR-48LPS-I
Daughterboard assembly number : 73-14200-03
Daughterboard serial number : FDO18360JTK
System serial number : FDO1836I0UB
Top Assembly Part Number : 68-5013-02
Top Assembly Revision Number : C0
Version ID : V02
CLEI Code Number : CMMLF00ARB
Daughterboard revision number : A0
Hardware Board Revision Number : 0x06

Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 52 WS-C2960XR-48LPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M
2 52 WS-C2960XR-48LPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M
3 52 WS-C2960XR-48FPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M
4 52 WS-C2960XR-48LPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M
5 52 WS-C2960XR-48LPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M
6 52 WS-C2960XR-48LPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M

Switch 02
---------
Switch Uptime : 3 weeks, 6 days, 18 hours, 13 minutes
Base ethernet MAC Address : 68:99:CD:C4:D4:80
Motherboard assembly number : 73-15378-03
Power supply part number : 341-0531-01
Motherboard serial number : FDO183612H7
Power supply serial number : DCB1828B27U
Model revision number : C0
Motherboard revision number : A0
Model number : WS-C2960XR-48LPS-I
Daughterboard assembly number : 73-14200-03
Daughterboard serial number : FDO18360JS5
System serial number : FDO1836I0Z0
Top assembly part number : 68-5013-02
Top assembly revision number : C0
Version ID : V02
CLEI Code Number : CMMLF00ARB
Daughterboard revision number : A0

Switch 03
---------
Switch Uptime : 3 weeks, 6 days, 18 hours, 13 minutes
Base ethernet MAC Address : 88:90:8D:2C:F9:00
Motherboard assembly number : 73-15631-03
Power supply part number : 341-0533-01
Motherboard serial number : FDO191112XU
Power supply serial number : DCB1905C0V1
Model revision number : C0
Motherboard revision number : A0
Model number : WS-C2960XR-48FPS-I
Daughterboard assembly number : 73-14200-03
Daughterboard serial number : FDO19110P1X
System serial number : FDO1911I11P
Top assembly part number : 68-5046-02
Top assembly revision number : C0
Version ID : V02
CLEI Code Number : CMMLB00ARB
Daughterboard revision number : A0

Switch 04
---------
Switch Uptime : 3 weeks, 6 days, 18 hours, 8 minutes
Base ethernet MAC Address : 68:99:CD:C4:CE:00
Motherboard assembly number : 73-15378-03
Power supply part number : 341-0531-01
Motherboard serial number : FDO183612FQ
Power supply serial number : DCB1828B293
Model revision number : C0
Motherboard revision number : A0
Model number : WS-C2960XR-48LPS-I
Daughterboard assembly number : 73-14200-03
Daughterboard serial number : FDO18360JK5
System serial number : FDO1836I0Y9
Top assembly part number : 68-5013-02
Top assembly revision number : C0
Version ID : V02
CLEI Code Number : CMMLF00ARB
Daughterboard revision number : A0

Switch 05
---------
Switch Uptime : 3 weeks, 6 days, 18 hours, 9 minutes
Base ethernet MAC Address : 68:99:CD:C4:AC:00
Motherboard assembly number : 73-15378-03
Power supply part number : 341-0531-01
Motherboard serial number : FDO183612GC
Power supply serial number : DCB1828B2BT
Model revision number : C0
Motherboard revision number : A0
Model number : WS-C2960XR-48LPS-I
Daughterboard assembly number : 73-14200-03
Daughterboard serial number : FDO18360JV3
System serial number : FDO1836I0VH
Top assembly part number : 68-5013-02
Top assembly revision number : C0
Version ID : V02
CLEI Code Number : CMMLF00ARB
Daughterboard revision number : A0

Switch 06
---------
Switch Uptime : 3 weeks, 6 days, 18 hours, 9 minutes
Base ethernet MAC Address : 68:99:CD:C4:C9:00
Motherboard assembly number : 73-15378-03
Power supply part number : 341-0531-01
Motherboard serial number : FDO183612ET
Power supply serial number : DCB1828B24K
Model revision number : C0
Motherboard revision number : A0
Model number : WS-C2960XR-48LPS-I
Daughterboard assembly number : 73-14200-03
Daughterboard serial number : FDO18360JQA
System serial number : FDO1836I0Y2
Top assembly part number : 68-5013-02
Top assembly revision number : C0
Version ID : V02
CLEI Code Number : CMMLF00ARB
Daughterboard revision number : A0

Configuration register is 0xF

Flavio Miranda · ‎04-12-2022

You can reach Release 15.2.7E5 MD, recommended. And there´s one more to go 15.2.7E6 MD after that.

This is not good. Two years no reload is too much.

SWITCHCPD uptime is 2 years, 4 weeks, 6 days, 14 hours, 11 minutes

Not good as well. Cisco dont recommend more than 4 switch in a stack.

Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 52 WS-C2960XR-48LPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M
2 52 WS-C2960XR-48LPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M
3 52 WS-C2960XR-48FPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M
4 52 WS-C2960XR-48LPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M
5 52 WS-C2960XR-48LPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M
6 52 WS-C2960XR-48LPS-I 15.2(4)E8 C2960X-UNIVERSALK9- M

But none of this notes actually fix your problem. It can be some incompatibility but as you said, it is risky. You have no support and if this box dies, you need to replace for a different hardware.

If you are not prepare to make big move on the network right now, maybe is better sacrifice the Yealinks. There´s no garantee the upgrade will fix anything.

cstutz · ‎04-12-2022

We know it's been on for a long time, however, the Services that are on these Switches are 24x7 and we can only leave them unavailable for major maintenance.
Changing the subject, we have some 2960's in stock, which we use at external service points.
These models are "factory default" and we have already tested Yealink IP Phones on them, and they didn't work either.
Let's do a test run, get one of these 2960's, update the SW and test Yealink.
OBS: The 2960 that we have in our infrastrucuture is the 2960XR-48LPS-I, and the one we have in stock, and that we will use for the test, is the 2960XR-24PS-I. But from what I saw, the SW of the 2 is the same:
https://software.cisco.com/download/home/284832160/type/280805680/release/15.2.7E6?i=!pp
https://software.cisco.com/download/home/284832159/type/280805680/release/15.2.7E6?i=!pp

So in theory, the test on the 2960XR-24PS-I would be valid for the 2960XR-48LPS-I, correct?