Hi, I need to add a CUBE to terminate the SIP PSTN trunks in an existing environment. They have CVP 4.1 but will be upgraded to 7.x before the CUBE deployement. I will use a 3945 with IOS 15.001. They have a gatekeeper for call routing. I want to know if anybody has any experience of the below call flow and if I may come up with any problems ? PSTN ----> SIP -----> CUBE ----> Gatekeeper -------> CVP                                                                  \                                                                   \                                                                  Callmanager I will probably need to use MTP ( Software on CUBE ). But as the connection from callmanager will not be directly to the CUBE, I think I should check the MTP Required box in the existing Gatekeeper controlled Trunk. Would this cause any issues  ? Thanks ... View more

Hi, we have a setup as follows: Location A --------------------------------------------------------------------------------- Voice Gateway pair at Location A ( 2811 - SP Services ) SIP server at location A A stream server behind this SIP server from which we get announcements. Unified CM 7.0 Publisher and Subscriber Transcoder and Conf Bridge on 2811 GWs MTP on UCM --------------------------------------------------------------------------------- Location B --------------------------------------------------------------------------------- Voice Gateway pair at Location B ( 2811 - SP Services ) SIP server at location B A stream server behind this SIP server from which we get announcements. Unified CM 7.0 Subscriber Transcoder and Conf Bridge on 2811 GWs MTP on UCM --------------------------------------------------------------------------------- On UCM, SIP trunks are configured for all 4 voice gateways. ---------------------------------------------------------------------- I am calling from an IP phone to simulate an incoming call to the environment. The numbers I am calling are defined on teh SIP server. If I call the number defined on the location A SIP server, call establishes without any problems. If I call the number defined on the location B SIP server,  I can hear the announecements, call establishes, but at the end no audio onboth ways. *** During this call without audio, if I receive a call from someone else ( internal ) and put the first call on hold, when I resume it, I start hearing audio both ways. Sometimes very clear, sometimes with a lot of noise. I am sure about the routing and firewalls. All the phones and trunks, etc in location A is in DP_A device pool, all the phones and trunks, etc in location B is in DP_B device pool. Their regions are configured so that, in each DP they will be using g.711 and in between device pools, g.729. If I put everything in the same DP, both scenarios work perfectly. I atttached the config of one of the voice gateways in location B ( all 4 of them have exactly the same config , I tried two IOS versions without success ) Any ideas ? ... View more

Hi, I am trying to use Mac authetication bypass for dynamic vlan assignment but I couldn't even authenticate using ACS until now. Here is my config : Interface Config: switchport access vlan 47 switchport mode access dot1x mac-auth-bypass dot1x pae authenticator dot1x port-control auto dot1x timeout quiet-period 15 dot1x timeout tx-period 3 dot1x reauthentication AAA and Radius config: aaa new-model aaa authentication login default line aaa authentication dot1x default group radius aaa authorization network default group radius dot1x system-auth-control radius-server host 10.1.18.40 auth-port 1645 acct-port 1646 key secretkey radius-server host 10.1.18.41 auth-port 1645 acct-port 1646 key secretkey radius-server source-ports 1645-1646 radius-server key secretkey On the ACS, I have configured AAA client for the switch to use RADIUS IETF. I have added the a user using the mac address of the PC I am testing as in the below format: username : 002264b776e2 password : 002264b776e2 I have disabled the 802.1x on the Windows XP PC that I am testing. But it is not being authenticated. I have checked the shared key to make sure I have entered them correctly on both ACS and the swith. Here is the debug output from the switch: 062524: Nov 25 13:23:41: RADIUS:  AAA Unsupported     [161] 16  062525: Nov 25 13:23:41: RADIUS:   46 61 73 74 45 74 68 65 72 6E 65 74 30 2F        [FastEthernet0/] 062526: Nov 25 13:23:41: RADIUS(00000652): Storing nasport 50014 in rad_db 062527: Nov 25 13:23:41: RADIUS(00000652): Config NAS IP: 0.0.0.0 062528: Nov 25 13:23:41: RADIUS/ENCODE(00000652): acct_session_id: 1618 062529: Nov 25 13:23:41: RADIUS(00000652): sending 062530: Nov 25 13:23:41: RADIUS/ENCODE: Best Local IP-Address 10.1.16.37 for Radius-Server 10.1.18.40 062531: Nov 25 13:23:41: RADIUS(00000652): Send Access-Request to 10.1.18.40:1645 id 1645/63, len 138 062532: Nov 25 13:23:41: RADIUS:  authenticator DD AF 86 D4 77 7D 84 B0 - 0A CE 11 D3 DF 90 AE AD 062533: Nov 25 13:23:41: RADIUS:  User-Name           [1]   14  "002264b776e2" 062534: Nov 25 13:23:41: RADIUS:  User-Password       [2]   18  * 062535: Nov 25 13:23:41: RADIUS:  Service-Type        [6]   6   Call Check                [10] 062536: Nov 25 13:23:41: RADIUS:  Framed-MTU          [12]  6   1500                      062537: Nov 25 13:23:41: RADIUS:  Called-Station-Id   [30]  19  "00-1E-14-C4-7C-90" 062538: Nov 25 13:23:41: RADIUS:  Calling-Station-Id  [31]  19  "00-22-64-B7-76-E2" 062539: Nov 25 13:23:41: RADIUS:  Message-Authenticato[80]  18  062540: Nov 25 13:23:41: RADIUS:   20 DD 3B A9 8E 96 13 5D F4 B2 B6 BF 08 90 33 9F  [ ?;????]??????3?] 062541: Nov 25 13:23:41: RADIUS:  NAS-Port-Type       [61]  6   Eth                       [15] 062542: Nov 25 13:23:41: RADIUS:  NAS-Port            [5]   6   50014                     062543: Nov 25 13:23:41: RADIUS:  NAS-IP-Address      [4]   6   10.1.16.37                062544: Nov 25 13:23:47: RADIUS: Retransmit to (10.1.18.40:1645,1646) for id 1645/63 062545: Nov 25 13:23:53: RADIUS: Retransmit to (10.1.18.40:1645,1646) for id 1645/63 062546: Nov 25 13:23:58: RADIUS: Retransmit to (10.1.18.40:1645,1646) for id 1645/63 062547: Nov 25 13:24:04: %RADIUS-4-RADIUS_DEAD: RADIUS server 10.1.18.40:1645,1646 is not responding. 062548: Nov 25 13:24:04: %RADIUS-4-RADIUS_ALIVE: RADIUS server 10.1.18.40:1645,1646 has returned. 062549: Nov 25 13:24:04: RADIUS: Fail-over to (10.1.18.41:1645,1646) for id 1645/63 062550: Nov 25 13:24:04: RADIUS/ENCODE: Best Local IP-Address 10.1.16.37 for Radius-Server 10.1.18.41 062551: Nov 25 13:24:09: RADIUS: Retransmit to (10.1.18.41:1645,1646) for id 1645/63 062552: Nov 25 13:24:15: RADIUS: Retransmit to (10.1.18.41:1645,1646) for id 1645/63 062553: Nov 25 13:24:21: RADIUS: Retransmit to (10.1.18.41:1645,1646) for id 1645/63 062554: Nov 25 13:24:26: %RADIUS-4-RADIUS_DEAD: RADIUS server 10.1.18.41:1645,1646 is not responding. 062555: Nov 25 13:24:26: %RADIUS-4-RADIUS_ALIVE: RADIUS server 10.1.18.41:1645,1646 has returned. 062556: Nov 25 13:24:26: RADIUS: No response from (10.1.18.41:1645,1646) for id 1645/63 062557: Nov 25 13:24:26: RADIUS/DECODE: parse response no app start; FAIL 062558: Nov 25 13:24:26: RADIUS/DECODE: parse response; FAIL On the ACS logs I have the below messages in the failed attempts logs: 25/11/2009 13:24:09 Bad request from NAS .. .. .. (Unknown) Invalid message authenticator in EAP request .. .. .. 10.1.16.37 .. .. .. .. .. XXX-NW-DEVICES-2 XXX-Access-Sw I know I am doing something wrong or something is missing but couldn't find what. Any ideas would be appreciated. ... View more