Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About MITCH JOHNSON
MITCH JOHNSON
Beginner
Mmmmm. Army for a bit, school teacher for a bit less, now Network Engineer.
Recent Badges
Stats
Member since
04-21-2005
51
Posts
15
Helpful
0
Solutions
Certifications
Created by
MITCH JOHNSON
in Other Collaboration Subjects
in Other Collaboration Subjects
10-06-2011
08:47 PM
10-06-2011
08:47 PM
No I didn't. I haven't had the time to go any further into this issue. I do hope that the next few weeks provide me ith a bit of time to delve a bit deeper into this problem. If/when I do sort this out, I will post the solution here.
... View more
Created by
MITCH JOHNSON
in Other Collaboration Subjects
in Other Collaboration Subjects
09-19-2011
10:39 PM
09-19-2011
10:39 PM
I've been trying to integrate a Lync server with a Cisco CUCM using a Direct SIP trunk. The key word there is trying. I followed the Microsoft document for the integration of Lync with Cisco 8.5. See attached file. When I dial from the callmanager to the Lync, I see the traffic, I get the following error on the Lync Server. TL_INFO(TF_PROTOCOL) [0]08E0.1794::09/19/2011-17:13:51.606.000108cc (SIPStack,SIPAdminLog::TraceProtocolRecord:SIPAdminLog.cpp(125))$$begin_record Trace-Correlation-Id: 1854706246 Instance-Id: 00002C96 Direction: outgoing;source="local" Peer: 172.16.200.100:60097 Message-Type: response Start-Line: SIP/2.0 401 Unauthorized From: <sip:8004@172.16.200.100>;tag=1055~2248b267-7874-4b2e-9b0f-b9e83134f64b-30262725 To: <sip:+19105557111@172.16.200.141>;tag=BC185DA828677767E1FE2F280D0D7FA3 CSeq: 101 INVITE Call-ID: 38bb7180-e7713cb8-58-64c810ac@172.16.200.100 Date: Mon, 19 Sep 2011 17:13:51 GMT WWW-Authenticate: NTLM realm="SIP Communications Service", targetname="WIN2008LYNC.ncnetworkers.com", version=4 WWW-Authenticate: Kerberos realm="SIP Communications Service", targetname="sip/WIN2008LYNC.ncnetworkers.com", version=4 WWW-Authenticate: TLS-DSK realm="SIP Communications Service", targetname="WIN2008LYNC.ncnetworkers.com", version=4, sts-uri=" https://WIN2008Lync.ncnetworkers.com:443/CertProv/CertProvisioningService.svc " Via: SIP/2.0/TCP 172.16.200.100:5060;branch=z9hG4bK58428bf502;ms-received-port=60097;ms-received-cid=CDB00 Server: RTC/4.0 Content-Length: 0 Message-Body: – $$end_record 403 Forbidden ms-diagnostics: 12004;reason="The user is not authorized to call the specified number.";source="LyncServer.mydomain.local";appName="OutboundRouting";OriginalPresenceState="0";CurrentPresenceState="0";MeInsideUser="Yes";ConversationInitiatedBy="0";SourceNetwork TL_INFO(TF_PROTOCOL) [0]08E0.1794::09/19/2011-17:13:51.606.000108cc (SIPStack,SIPAdminLog::TraceProtocolRecord:SIPAdminLog.cpp(125))$$begin_record Trace-Correlation-Id: 1854706246 Instance-Id: 00002C96 Direction: outgoing;source="local" Peer: 172.16.200.100:60097 Message-Type: response Start-Line: SIP/2.0 401 Unauthorized From: <sip:8004@172.16.200.100>;tag=1055~2248b267-7874-4b2e-9b0f-b9e83134f64b-30262725 To: <sip:+19105557111@172.16.200.141>;tag=BC185DA828677767E1FE2F280D0D7FA3 CSeq: 101 INVITE Call-ID: 38bb7180-e7713cb8-58-64c810ac@172.16.200.100 Date: Mon, 19 Sep 2011 17:13:51 GMT WWW-Authenticate: NTLM realm="SIP Communications Service", targetname="WIN2008LYNC.ncnetworkers.com", version=4 WWW-Authenticate: Kerberos realm="SIP Communications Service", targetname="sip/WIN2008LYNC.ncnetworkers.com", version=4 WWW-Authenticate: TLS-DSK realm="SIP Communications Service", targetname="WIN2008LYNC.ncnetworkers.com", version=4, sts-uri="https://WIN2008Lync.ncnetworkers.com:443/CertProv/CertProvisioningService.svc" Via: SIP/2.0/TCP 172.16.200.100:5060;branch=z9hG4bK58428bf502;ms-received-port=60097;ms-received-cid=CDB00 Server: RTC/4.0 Content-Length: 0 Message-Body: – $$end_record On the Lync client side I get a different error: 403 Forbidden ms-diagnostics: 12004;reason="The user is not authorized to call the specified number.";source="LyncServer.mydomain.local";appName="OutboundRouting";OriginalPresenceState="0";CurrentPresenceState="0";MeInsideUser="Yes";ConversationInitiatedBy="0";SourceNetwork.. I can't make nor receive a call on either side of the trunk. However, I have no issues calling from within each domain, Lync and Cisco. Any help would be greatly appreciated, Thanks, Mitch
... View more
Labels:
09-19-2011
04:24 PM
Hunt, I'm still trying to get my Lync to CM trunk working. What did you do to make yours work? Did you have to put a translation pattern on the Lync trunk? If so, do you have a resource on how to configure the pattern? Thanks, Mitch
... View more
Created by
MITCH JOHNSON
in Other Collaboration Subjects
in Other Collaboration Subjects
09-13-2010
08:03 PM
09-13-2010
08:03 PM
We used: cipc security-mode authenticated. As far as ports being opened up, we had to open the ports necessary for the secured portion of the setup to include tftp. We did it both ways, with secure skinny and secure SIP and of course the secure RTP. Remember that all secure traffic terminates on the outside interface, the inside interface then proxies to the unsecure sip/skinny or RTP. Hope this helps.
... View more
Created by
MITCH JOHNSON
in Other Collaboration Subjects
in Other Collaboration Subjects
02-25-2010
07:40 PM
02-25-2010
07:40 PM
The big part of our problem was in the softphone saying that it wasn't secured. We changed the security mode of the CIPC under the phone proxy configuration on the ASA. Then we reset the certificate under the CallManager config for the phone, making sure that the null0 certificate was chosen. I think that was about it.
... View more
Created by
MITCH JOHNSON
in Other Collaboration Subjects
in Other Collaboration Subjects
12-12-2009
10:48 AM
12-12-2009
10:48 AM
We're trying to get a Cisco Softphone (IP Communicator v7.03) to work across an ASA using the Phone Proxy. The softphone usually registers correctly with the ASA Proxy and hence the callmanager, but when we go to make a call from the proxy phone to a phone on the inside it rings but we have no audio. However, we can make calls from phone to phone on the proxy side of the ASA. A 7961 proxy phone has no problems making calls and talking across the ASA. The Call Manager is running 7.1(2) and is in nonsecure mode. Any help would be greatly appreciated.
... View more
Labels:
04-28-2009
06:32 PM
I have a GSS 4490 but only want it to be authoratative for certain hosts. Sysadmins don't want to lose control of their DNS records. How do I point active directory to the GSS to look up the host? I need to keep the AD domain as authorative for the DNS records, but to pass on DNS requests to the GSS for certain hosts. Thanks in advance.
... View more
Labels:
01-24-2007
08:51 AM
You do have to have two entries in the ACS box. So here's how I did it, I named one entry switch1 and the other entry switch1-radius. On the switch1 I selected tacacs on the switch1-radius I selected RADIUS (CISCO IOS PIX). Restarted the service and it didn't complain a bit and it works fine.
... View more
Created by
MITCH JOHNSON
in Network Access Control
in Network Access Control
10-31-2006
06:24 AM
10-31-2006
06:24 AM
You rock Andrew. I've been sweating bullets on this one for a while, thanks a lot.
... View more
Created by
MITCH JOHNSON
in Network Access Control
in Network Access Control
10-27-2006
11:55 AM
10-27-2006
11:55 AM
I'm trying to get the machines to authenticate aginst active directory using 802.1x. This works great when I use PEAP and CHAP authentication. Works like a dream, no problems at all. But I need to verify that the machine is a part of the domain, the user will have to logon later anyway. It's important that our machines are verified as being a part of Active Directory and then authenticate the port to pass traffic. I've followed all the documentation to get this working, what I'm looking for is something undocumented that made this work for others. Any help would be greatly appreciated. Thanks, Mitch
... View more
Labels:
09-28-2006
07:09 PM
Using ACS and tacacs+ can I record the keystrokes users type when they enter commands on a device such as a router or switch?
... View more
Labels:
Created by
MITCH JOHNSON
in Other Collaboration Subjects
in Other Collaboration Subjects
09-27-2006
12:36 PM
09-27-2006
12:36 PM
I'm playing with IP Communicator over a VPN and have noticed that when I start launching applications the voice quality degrades substantially. I don't think it's a QoS issue as a regular IP phone is crystal clear. Is there a way to guarantee that IP Communicator packets have precedence over data packets leaving the pc? Thanks, Mitch
... View more
Labels:
08-25-2006
05:07 AM
Is there an example config where both are shown? Each time I add a radius command it erases a radius command, but then I am doing the defaults and nothing specific. Thanks.
... View more
08-25-2006
03:55 AM
I use the ACS box mainly for AAA on the switches and routers using tacacs. Now we're looking at the possibility of using 802.1x, my early reading tell me I have to use RADIUS, but I'm using TACACS, can I have ttow different methods of authentication on the same switch/router? Any help would be greatly appreciated. Thanks.
... View more
Labels:
Created by
MITCH JOHNSON
in Network Management
in Network Management
06-19-2006
01:56 PM
06-19-2006
01:56 PM
Yes, CDP is configured. The devices range from 4506 to 3750 linking into a 6513 core. The switches do show up and I can access them with no problem, they just don't have a line running between the devices.
... View more
10-06-2011
No I didn't. I haven't had the time to go any further into this issue. I
do hope that the next few w...
09-19-2011
I've been trying to integrate a Lync server with a Cisco CUCM using a
Direct SIP trunk. The key word...
09-19-2011
Hunt,I'm still trying to get my Lync to CM trunk working. What did you
do to make yours work? Did yo...
Created by
MITCH JOHNSON
in Other Collaboration Subjects
09-13-2010
09-13-2010
We used: cipc security-mode authenticated.As far as ports being opened
up, we had to open the ports ...
Created by
MITCH JOHNSON
in Other Collaboration Subjects
02-25-2010
02-25-2010
The big part of our problem was in the softphone saying that it wasn't
secured. We changed the secur...
Created by
MITCH JOHNSON
in Other Collaboration Subjects
12-12-2009
12-12-2009
We're trying to get a Cisco Softphone (IP Communicator v7.03) to work
across an ASA using the Phone ...
04-28-2009
I have a GSS 4490 but only want it to be authoratative for certain
hosts. Sysadmins don't want to lo...
01-24-2007
You do have to have two entries in the ACS box. So here's how I did it,
I named one entry switch1 an...
10-27-2006
I'm trying to get the machines to authenticate aginst active directory
using 802.1x. This works grea...
09-28-2006
Using ACS and tacacs+ can I record the keystrokes users type when they
enter commands on a device su...
09-27-2006
I'm playing with IP Communicator over a VPN and have noticed that when I
start launching application...
08-25-2006
Is there an example config where both are shown? Each time I add a
radius command it erases a radius...
08-25-2006
I use the ACS box mainly for AAA on the switches and routers using
tacacs. Now we're looking at the ...
Public Statistics
| Date Registered | 04-21-2005 10:44 AM |
| Date Last Visited | 10-04-2018 07:55 AM |
| Total Messages Posted | 51 |
| Total Helpful Votes Received | 15 |
