Problema con el modo TMS provisioning Extension

[Vianyfel Cordaro]

Hola, No tengo contrato de soporte por lo que no puedo abrir un caso en el tac

  Tengo los siguientes dos problemas:

1. uando yo activo el modo TMS provisioning , me dejan de funcionar las llamadas sip, estos son los erroresque me aparecen:

En el  VCS-E cuando la llamada es desde Internet hacia la red interna.

2013-09-05T11:50:38-04:-30

tvcs: Event="Search Completed" Reason="Invalid permission - Insufficient privilege"   Service="H323" Src-alias-type="E164" Src-alias="7449" Dst-alias-type="H323" Dst-alias="anthony_accardi" Call-serial-number="1a069dfa-1647-11e3-86f9-0010f328943a"   Tag="1a069f44-1647-11e3-b22f-0010f328943a"   Detail="found:false, searchtype:ARQ" Level="1" UTCTime="2013-09-05 16:20:38,670"

En el  VCS-C cuando la llamada es desde la red  Interna hacia Internet:

2013-09-05T11:53:31-04:-30	tvcs: Event="Search Completed" Reason="Forbidden" Service="H323" Src-alias-type="E164" Src-alias="7429" Dst-alias-type="H323" Dst-alias="vianyfel_cordaro" Call-serial-number="812a5198-1647-11e3-ba89-0010f325da04"   Tag="812a52e2-1647-11e3-93c9-0010f325da04"   Detail="found:false, searchtype:ARQ" Level="1" UTCTime="2013-09-05 16:23:31,687"
2013-09-05T11:53:31-04:-30	tvcs: Event="Search Attempted" Service="H323" Src-alias-type="E164" Src-alias="7429" Dst-alias-type="H323" Dst-alias="vianyfel_cordaro" Call-serial-number="812a5198-1647-11e3-ba89-0010f325da04"   Tag="812a52e2-1647-11e3-93c9-0010f325da04"   Detail="searchtype:ARQ" Level="1" UTCTime="2013-09-05 16:23:31,680"
2013-09-05T11:53:23-04:-30	tvcs: Event="Search Completed" Reason="Forbidden" Service="H323" Src-alias-type="E164" Src-alias="7429" Dst-alias-type="H323" Dst-alias="vianyfel_cordaro" Call-serial-number="7c9181c4-1647-11e3-bda8-0010f325da04"   Tag="7c918304-1647-11e3-865b-0010f325da04"   Detail="found:false, searchtype:ARQ" Level="1" UTCTime="2013-09-05 16:23:23,974"

Cuando el mod TMS Agent esta activado todo funciona correctamente

2. Cuando cambio al modo TMS Provisioning yo puedo provisionar equipos desde la red interna pero desde internet. Y lo que más me preocupa es el jabber video, este es el error q aparece:

013-09-05T11:07:42-04:-30	tvcs: UTCTime="2013-09-05 15:37:42,263" Module="network.sip" Level="INFO": Src-ip="192.168.0.252" Src-port="25084" Detail="Receive Request Method=OPTIONS,   Request-URI=sip:192.168.0.250:7001;transport=tls,   Call-ID=624afa120c59ba26@192.168.0.252"
2013-09-05T11:07:42-04:-30	tvcs: UTCTime="2013-09-05 15:37:42,261" Module="network.sip" Level="DEBUG": Dst-ip="192.168.0.252" Dst-port="25084" SIPMSG: |SIP/2.0 401 Unauthorised Via: SIP/2.0/TLS   192.168.0.252:5061;branch=z9hG4bK4de281330ed1277914e57a4bb98ac81416134;received=192.168.0.252;rport=25084 Call-ID: 624afa120c59ba26@192.168.0.252 CSeq: 38570 OPTIONS From: <sip:192.168.0.252>;tag=21e96c96b3f9a439 To: <sip:192.168.0.250:7001>;tag=ba0e03ca2f6b3957 Server: TANDBERG/4120 (X7.2.1) WWW-Authenticate: Digest realm="TraversalZone",   nonce="b40cb8278b4a11da992154324161d566d2b57bac3d83c5c518c4528c790d",   opaque="AQAAAN1NC9IHdFS3kNJ3Q6UX2JiBXhut", stale=FALSE,   algorithm=MD5, qop="auth" Content-Length: 0 |
2013-09-05T11:07:42-04:-30	tvcs: UTCTime="2013-09-05 15:37:42,261" Module="network.sip" Level="INFO": Dst-ip="192.168.0.252" Dst-port="25084" Detail="Sending Response Code=401, Method=OPTIONS,   To=sip:192.168.0.250:7001, Call-ID=624afa120c59ba26@192.168.0.252"
2013-09-05T11:07:42-04:-30	tvcs: UTCTime="2013-09-05 15:37:42,261" Module="network.sip" Level="DEBUG": Src-ip="192.168.0.252" Src-port="25084" SIPMSG: |OPTIONS sip:192.168.0.250:7001;transport=tls SIP/2.0 Via: SIP/2.0/TLS   192.168.0.252:5061;branch=z9hG4bK4de281330ed1277914e57a4bb98ac81416134;received=192.168.0.252;rport=25084 Call-ID: 624afa120c59ba26@192.168.0.252 CSeq: 38570 OPTIONS From: <sip:192.168.0.252>;tag=21e96c96b3f9a439 To: <sip:192.168.0.250:7001> Max-Forwards: 0 User-Agent: TANDBERG/4120 (X7.2.1) Supported: com.tandberg.vcs.resourceusage Content-Type: text/xml Content-Length: 250 <resourceusageinfo><traversalcallsavailable>250</traversalcallsavailable><nontraversalcallsavailable>750</nontraversalcallsavailable><registrationsavailable>2496</registrationsavailable><turnrelaysavailable>0</turnrelaysavailable></resourceusageinfo>|
2013-09-05T11:07:42-04:-30	tvcs: UTCTime="2013-09-05 15:37:42,261" Module="network.sip" Level="INFO": Src-ip="192.168.0.252" Src-port="25084" Detail="Receive Request Method=OPTIONS,   Request-URI=sip:192.168.0.250:7001;transport=tls,   Call-ID=624afa120c59ba26@192.168.0.252"
2013-09-05T11:07:36-04:-30	tvcs: UTCTime="2013-09-05 15:37:36,757" Module="network.tcp" Level="DEBUG": Src-ip="10.10.10.1" Src-port="10191" Dst-ip="10.10.10.10" Dst-port="5060" Detail="TCP Connection Closed"
2013-09-05T11:07:36-04:-30	tvcs: UTCTime="2013-09-05 15:37:36,641" Module="network.sip" Level="DEBUG": Dst-ip="10.10.10.1" Dst-port="10191" SIPMSG: |SIP/2.0 404 Not Found Via: SIP/2.0/TCP 201.210.111.54:2379;branch=z9hG4bK5fc6a3c5021e3557216ef01c2434fb00.1;received=10.10.10.1;rport=10191;ingress-zone=DefaultZone Call-ID: 6623b1a226372826@127.0.0.1 CSeq: 301 SUBSCRIBE From: <sip:vianyfel_cordaro@domain.com>;tag=2991aa56d191ede3 To: <sip:provisioning@domain.com>;tag=c4114db76ace49d8 Server: TANDBERG/4120 (X7.2.1) Warning: 399 200.11.230.253:5060 "Policy Response" Content-Length: 0 |
2013-09-05T11:07:36-04:-30	tvcs: UTCTime="2013-09-05 15:37:36,641" Module="network.sip" Level="INFO": Dst-ip="10.10.10.1" Dst-port="10191" Detail="Sending Response Code=404, Method=SUBSCRIBE,   To=sip:provisioning@protokolgroup.com, Call-ID=6623b1a226372826@127.0.0.1"
2013-09-05T11:07:36-04:-30	tvcs: UTCTime="2013-09-05 15:37:36,638" Module="network.sip" Level="DEBUG": Src-ip="10.10.10.1" Src-port="10191" SIPMSG: |SUBSCRIBE sip:vianyfel_cordaro@domain.com SIP/2.0 Via: SIP/2.0/TCP   201.210.111.54:2379;branch=z9hG4bK5fc6a3c5021e3557216ef01c2434fb00.1;received=10.10.10.1;rport=10191 Call-ID: 6623b1a226372826@127.0.0.1 CSeq: 301 SUBSCRIBE Contact: <sip:vianyfel_cordaro@201.210.111.54:2379;transport=tcp> From: <sip:vianyfel_cordaro@domain.com>;tag=2991aa56d191ede3 To: <sip:provisioning@domain.com> Max-Forwards: 70 Route: <sip:192.168.41.205:5060;lr;transport=tcp> User-Agent: TANDBERG/774 (MCX 4.6.3.17194) - Windows Expires: 300 Event:   ua-profile;model=movi;vendor=tandberg.com;profile-type=user;version=4.6.3.17194;clientid="S-1-5-21-1078081533-484061587-725345543";connectivity=1 Accept: application/pidf+xml Content-Length: 0

Este es el modelo de authenticacion que uso y por tanto la config de esa manera:

Configuración en  VCS Expressway:

Mode TMS Agent Legacy

Seach rule:

local zone- no domain

Any

Any

No

Alias pattern match

Regex

(.+)@domain.com.*

Replace

Continue

LocalZone

local zone- full url

Any

Any

No

Alias pattern   match

Regex

(.+)@domain.com.*

Leave

Continue

LocalZone

Traversal zone search rule

Any

Any

No

Any alias

Continue

TraversalZone

DNS zone search   rule

Any

AllZones

No

Alias pattern match

Regex

(?!.*@%localdomains%.*$).*

Leave

Continue

DNSZone

Transform

Transform   destinations alis to URL

([^@]*)

Regex

Replace

\1@protokolgroup.com

Presence PUA---on

Presence server--off

VCS CONTROL:

Mode TMS Provisioning Extension

Search rule

local zone- no domain

Any

Any

No

Alias pattern   match

Regex

(.+)@domain.com.*

Replace

Continue

LocalZone

local zone- full url

Any

Any

No

Alias pattern match

Regex

(.+)@domain.com.*

Leave

Continue

LocalZone

Traversal zone search rule

Any

Any

No

Any alias

Continue

TraversalZone

External IP address search rule

Any

Any

No

Any IP address

Continue

TraversalZone

Transform

Transform   destinations alis to URL

([^@]*)

Regex

Replace

\1@protokolgroup.com

Pua--on

presence server--on

No tengo call policy

Por favor ayudenem a ver qué me falta?

Gracias

[aostense · Accepted solution]

Hi, I don't read Spanish, but I read logs.

Why do you use the domain "domain.com"? Could you change this to your own domain?

Are you calling from H323 to SIP? If you call from H323, and don't add the domain (if calling SIP), you will not reach that SIP unit, unless you add a search rule (or transform) to add the domain.

Also, make sure you have the interworking option key installed (116341G00), and that you allow users to interwork ("Registered only" or "On") on your VCS.

Hope this helps,

Arne

[Vianyfel Cordaro]

domain.com as an example is reallycpnfigured is my domain.