I tried this: sip-ua sip-server ipv4:10.0.0.1:5070 voice register global mode cme source-address 10.0.0.1 port 5070 Also tried to change port for SCCP telephony-service ip source-address 10.0.0.1 port 2001 I can telnet to default ports, but not changed ... View more

We have activated plus license, but at Url filtering category nothing works. Categories are empty ('plus' becames 'minus' but nothing appears). Tried it on different PC's with Chrome, Mozilla, IE. Latest java is installed. ... View more

There is ASA 5505: - 8.4(2) IOS - FLASH: 128 Mb - DRAM: 256 Mb Requirements for 8.4(2) are acomplished: For the ASA 5505, only the Unlimited Hosts license and the Security Plus license with failover enabled require 512 MB; other licenses can use 256 MB. Are installed latest AnyConnect packeges for linux, some smatphones (each 4-5 MB). But for Windoes it's 21 MB and we got error "Failed to unzip the Anyconenct Package". In prior IOS version there was command cache-fs limit, by default it was 20 Mb. As i understand ASA now dinamically determines amount of cache memory and it's not enough. Because of the increased size of the AnyConnect package from 4MB in AnyConnect 2.5 to 21 MB in AnyConnect 3.0, you may need to upgrade the ASA flash and memory card first. If your ASA has only the default internal flash memory size or the default DRAM size (for cache memory) you could have problems storing and loading multiple AnyConnect client packages on the ASA. Even if you have enough space on the flash to hold the package files, the ASA could run out of cache memory when it unzips and loads the client images. So there is a question, after DRAM upgrade to 512 MB will be there enough cache memory for Anyconnect packeges with total size 35-40 Mb? ... View more

Hi all, i have allready read a lot of information, but steal don't know ther answer, please help DHCP server is allocated on 2911 router (c2900-universalk9-mz.SPA.152-1.T.bin) on SF300 (l3 mode): interface vlan 8 - 192.168.8.2/24 interface vlan 18 - 192.168.18.1/24 interface vlan 4 - get ip with DHCP option to port 3 (access vlan 18) is connected device with get ip with DHCP option on 2911 there is access-list, that tells us that some device's from vlan 8 all the time are sending request on port 137 and 138 but not from others vlan's Nov 14 11:50:10: %SEC-6-IPACCESSLOGP: list test permitted udp 192.168.8.78(137) -> 192.168.222.1(137), 1 packet  Nov 14 11:50:12: %SEC-6-IPACCESSLOGP: list test permitted udp 192.168.8.62(138) -> 192.168.222.1(138), 1 packet  screenshots are atteched DHCP relay in enabled (tried with and without option 82) dhcp server ip address (192.168.222.1) is nearest interface of 2911 (is accessable from each vlan) to DHCP relay interfaces are added vlan 18 and vlan 4 in UDP relay there are port's 137 and 138 added for source ip interface vlan 8, vlan 18 and ALL ... View more

I have two phones - 502G and 525G protocol is SIP in both.. but debug shows *Jul 12 06:36:31.331: TFTP: Looking for SEP503DE50EE650.cnf.xml *Jul 12 06:36:31.335: TFTP: Looking for XMLDefault525G2.cnf.xml *Jul 12 06:36:31.339: TFTP: Looking for XMLDefault.cnf.xml I tried to change to SCCP and back - the situation is the same... why is he looking for SEP, not SIP?? I'm trying to register SPA 500 as third party SIP phone on CME (2811,IOS Version 12.4(24)T5) sh voice register tftp-bind tftp-server syncinfo.xml url flash:/syncinfo.xml tftp-server SIPDefault.cnf url flash:/SIPDefault.cnf tftp-server softkeyDefault_kpml.xml url flash:/softkeyDefault_kpml.xml tftp-server softkeyDefault.xml url flash:/softkeyDefault.xml voice register global mode cme source-address 192.168.20.1 port 5060 max-dn 144 max-pool 42 tftp-path flash: create profile sync 0002053422381531 ! voice register dn 1 number 101 name 101 ! voice register dn 2 number 102 name 102 ! voice register pool 1 id mac 503D.E50E.E650 number 1 dn 1 ! voice register pool 2 id mac 1CDF.0F4A.5E23 number 1 dn 2 ... View more

IOS 15.0(1r)M9 Phone firmware is SCCP42.9-1-1SR1S I call from somewhere to 720 when i press gpickup on 753 and type 505 - the call is pickuped whei i press pickup on 753 nothing happens ephone-dn  20  dual-line number 720 pickup-group 505 ephone-dn  53  dual-line number 753 pickup-group 505 ... View more

For WAN1 I need router mode and for WAN2 I need gateway mode. As i can see there is only one option for both.. It's imposible to solve this problem? ... View more

Before it was working,and now router is not responding According to wireshark when i try to connect, UDP paccket with source port 1310 is sent to 62515 destination port, and then 4 ISAKMP Aggressive packets from 1311 to 500 Router accepts packet on 500 port (according to permit any log rule.. from 1310 to 62515 seems not to reach the router) and nothing occurs (debug crypto engine is on) ACL is off on router and firewall on PC also Configuration: aaa authentication login LOGIN local aaa authorization network VPN_CLIENTS_AUTH local crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac ! crypto dynamic-map DYNMAP_VPN 100 set transform-set ESP-3DES-SHA reverse-route crypto map VPN_MAP client authentication list LOGIN crypto map VPN_MAP isakmp authorization list VPN_CLIENTS_AUTH crypto map VPN_MAP client configuration address respond crypto map VPN_MAP 65535 ipsec-isakmp dynamic DYNMAP_VPN interface FastEthernet0/0 crypto map VPN_MAP ip nat outside                                        //  10.5.1.0 is denied to be nated crypto isakmp client configuration group Ulys key P@$$ pool REMOTE_VPN_CLIENTS ip local pool REMOTE_VPN_CLIENTS 10.5.1.10 10.5.1.50 ... View more

All my next rules are from LAN to WAN first one is 10.10.10.22 -> 1.1.1.100 (works great) next one is 10.10.10.30 -> 1.1.1. 99 (indeed translates to 1.1.1.100) if i move second rule to fist one, i'll have vise versa .22 and .30 translates to .99 if i use port forwarding, 10.10.10.30:80 -> 1.1.1.99:80, the problem is the same SO all next rules use translation of first one, no matter is there match or note WAN to LAN rules works as it has to be ... View more