About tjkreutz1

tjkreutz1 · 02-24-2017

CUCM 10.5(2) IPSEC security policy between ISR-G2 (15.5) MGCP GWY establishes ISAKMP SA, but fails to establish IPSEC SA's. IPSEC policy matches on CUCM and GWY. IKE PHASE 1 Main Mode is successful. I get all 6 MM messages on sniffer trace and a "s...

tjkreutz1 · 03-21-2017

Hi, I have discovered this issue in my lab test environment too, but my SW MTP on CUCM gets invoked automatically when my SIP EX90 VTC, which uses RFC2833, makes successful calls over my MGCP GWY w/PRI. The audio calls work fine, but the media flows...

tjkreutz1 · 03-08-2017

I have determined that the EX90 has an AES-128 encryption limitation. Found verbiage in the EX90 admin Guide stating this. Confirmed it in lab testing. CUCM to MGCP GWY running AES-128 IPsec is running solid, and the CUCM Validate Ping executed suc...

tjkreutz1 · 03-07-2017

After AES 256 failed, I went back to the bottom and worked my way up. I got AES 128, SHA1, DH Group 2 working perfectly. And now the CUCM IPSec Validate Ping test is continuously successful. Previously, the ping always failed even when the IPSec ...

tjkreutz1 · 03-06-2017

Hi Mohammad, Thanks for your response. yes, I lowered the Encrypt/Hash Params. down to 3DES/MD5 DH Group 2 and IPSec works perfectly. I get the isakmp SA and both IPsec SA's, one in each direction. BTW, I had a typo on the Initial CUCM IPsec Po...

Member Since	‎02-24-2017 11:32 AM
Date Last Visited	‎10-25-2019 12:02 AM
Posts	5

User Statistics

User Activity

CUCM-IPSEC Policy Failure between CUCM and MGCP-GWY

Hi, I have discovered this

I have determined that the

After AES 256 failed, I went

Hi Mohammad,