01-18-2011 08:45 AM - edited 03-19-2019 02:14 AM
I am currently using a 2811 router with CME. I have a 24 port Cisco 3560. As for the DHCP, we are using our Juniper SSG5 firewall to provide the addressing. This is the same setup that we have working at other sites. I have went through the configs and compared them to the working setups and it all looks fine. I am now sure what else to try. This is a new build for me. The others were built by a vendor. Any assistance is appreciated!
Solved! Go to Solution.
01-25-2011 04:54 PM
The problem ended up being the port connecting to the juniper firewall was set as a voice vlan.
01-18-2011 03:23 PM
Is the DHCP scope handing out option 150 to the phones so they know where to register? Are the phones SCCP or SIP?
01-18-2011 03:33 PM
Yes, option 150 is setup and the phones are SCCP...specifically, 6921 and 7962G
01-18-2011 03:40 PM
Can you verify on the phone it is getting an ip and cme ip?
01-18-2011 04:59 PM
Jim let me know via email that the phone is not getting an IP
01-18-2011 04:03 PM
Is the 3560 being used as a layer 3 switch?
01-18-2011 04:24 PM
Do you have an ip helper address on the vlan interface for the phone vlan?
01-18-2011 04:30 PM
On the vlan interface:
Ip helper-address xxx.xxx.xxx.xxx
Where xxx is the ip address of the firewall (dhcp server)
01-19-2011 05:59 AM
First I would verifiy the following:
1. Unplug and plug back the IP Phone and observ the registration process.
check if the IP Phone is getting DHCP, IP Address, TFTP (CallManager Address) and check the default router address. All this you can check on the IP PHONE settings.
2. Run "debug tftp events" then unplug and plug back the IP Phone. On the debug screen you suppose to see the phone registration process and what the IP phone is looking for durring registration.
3. Make sure that the IP Phone is configured on the voice vlan on the switch.
It would be much easier if you can supply the swicth configuration of the IP Phone and the CME configs with a copy debug "tftp events"
Goodluck!
01-19-2011 08:09 AM
I have attached the configs. I do not get anything on the debug. FE0/0 of the 2811 router is connect to port Fa0/24 of the 3560 switch. Port Fa0/23 of the 3560 is connected to port eth0/5 of the Juniper SSG5 Firewall which is configured for the voice vlan and is also setup as the DHCP server with option 150. The phone is currently connected to port Fa0/9 of the 3560
01-19-2011 08:47 AM
Well based on your setup, try and PING the voice vlan (vlan 5) from the switch.
1. Is VLAN 5 configured on the Juniper router and is it up?
2. Can you ping vlan 5 from the 2811 router and from the switch
3. I port 5 on the Juniper router UP UP?
01-19-2011 09:43 AM
1. Yes
2. Yes
3. Yes
I did find that I cannot ping from the router to the switch
09-19-2013 01:00 PM
James, I have been trying for days to get SCCP to work through the SSG5 firewall. The juniper tech support team keeps telling me it will not work. I have CME on a 2811 router and have phones on both sides of the SSG5. I can make SIP calls no problem, but when I change the phone inside the firewal to SCCP I get one way audio - no audio from outside the SSG5. The SSG5 is not translating the MIP address of the internal phone, have you seen this issue? Any thoughts will be greatly appreciated.
01-19-2011 04:40 PM
Jim,
Does the phone still not have an IP address? If it does not, you may need to do some troubleshooting on the Juniper firewall. If it is on the same vlan as the phones and has dhcp enabled on it, there is an issue with it handing out addresses. Did you try plugging a pc into the phone vlan to see if it gets and address? According to your configs, the Firewall is on Vlan1 and the Phones are on VLAN5. You need to put an IP address on the VLAN 5 interface and an IP helper address to the ip of the Firewall for it to work that way.
01-21-2011 04:54 AM
Any update on this Jim?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide