Hi Folks We have CUCME 12.0, we have SCCP and SIP Phones deployed. SCCP Phones have correct time whereas SIP Phones have wrong date and time 01/01/1982 NTP Server is Ok, please find below some details: Router#show telephony-service CONFIG (Version=12.0) ===================== Version 12.0 Router#show ntp status Clock is synchronized, stratum 1, reference is .LOCL. nominal freq is 250.0000 Hz, actual freq is 249.9991 Hz, precision is 2**21 ntp uptime is 7542600 (1/100 of seconds), resolution is 4016 reference time is DD2D9880.93C8EA05 (16:41:36.577 UAE Thu Aug 3 2017) clock offset is 0.0000 msec, root delay is 0.00 msec root dispersion is 0.42 msec, peer dispersion is 0.23 msec loopfilter state is 'CTRL' (Normal Controlled Loop), drift is 0.000003320 s/s system poll interval is 16, last update was 14 sec ago. Router#show ntp associations address ref clock st when poll reach delay offset disp *~ 127.127.1.1 . LOCL . 0 3 16 377 0.000 0.000 0.232 * sys.peer, # selected, + candidate, - outlyer , x falseticker , ~ configured Router#show clock 16:41:59.229 UAE Thu Aug 3 2017 SIP Configuration: voice service voip ip address trusted list ipv4 0.0.0.0 0.0.0.0 no ip address trusted authenticate allow-connections h323 to h323 allow-connections h323 to sip allow-connections sip to h323 allow-connections sip to sip fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none sip registrar server expires max 1200 min 300 early-offer forced ! ! voice register global mode cme source-address 10.40.30.2 port 5060 max- dn 30 max-pool 20 load 9971 sip9971.9-4-2SR3-1 load 8961 sip8961.9-4-2SR3-1 authenticate register authenticate realm abc.com timezone 35 date-format D/M/Y hold-alert voicemail 4220 tftp -path flash: create profile sync 0007294848330536 camera video auto-register ! ! voice register dn 1 number 401 allow watch name ABC shared-line max-calls 16 label Ext-401 mwi ! ! voice register pool 1 id mac D0C2.82D0.7186 type 9971 number 1 dn 1 cor incoming USER-INTERNATIONAL default presence call-list dtmf -relay rtp - nte sip-notify username 401 password 123 codec g711ulaw no vad camera video privacy off ! I have also tried the following but nothing helped, voice register global ntp -server 10.40.30.2 mode directedbroadcast Please let me know if anyone has gone through this. ... View more

Hi Everyone  ASA = ASA5510 Running = asa917-15-k8.bin ISE Version = 2.2.0.470 ISSUE = AnyConnect Users can Login to ASA  We have recently implemented Cisco ISE and we are using Microsoft Active Directory to Authenticate AnyConnect Users since all users are in Microsoft DC so I can not use the following command: username MYUSER attributes service-type remote-access I created a TACACS Profile for AnyConnect users in ISE with following Profile Attributes: priv-lvl=0 max_priv_lvl=0 timeout=1 idletime=1 service-type=remote-access but  service-type=remote-access attributes does not work and AnyConnect Users are still able to login to ASA, although they can not do much on ASA with Privilege Level 1 but we  don't want to give them an access of ASA.   Following are my ASA AAA configuration: aaa-server ISE-GROUP protocol tacacs+ aaa-server ISE-GROUP (INSIDE) host xx.xx.xx.xx aaa authentication http console ISE-GROUP LOCAL aaa authentication ssh console ISE-GROUP LOCAL aaa authentication enable console ISE-GROUP LOCAL aaa authentication telnet console ISE-GROUP LOCAL aaa authentication serial console ISE-GROUP LOCAL aaa authorization command ISE-GROUP aaa authentication secure- http -client aaa authorization exec authentication-server auto-enable Any other technique or solution to block the access will really appreciate.  ... View more

Hi Guys I want to configure Wireless Dot1X with Guest Users, what i understood, I have to configure "Activated Guest" to make it work along with Dot1X. I found Guest Role option in following manner in version 1.x  Administration > Web Portal Management > Settings > Guest >Guest Roles Configuration . But I am not able to find this option in version 2.1.  Can anyone please guide me how to approach this option and if possible if anyone can share snapshot of the policy which works Guest Users along with Dot1X security level. My goal is to configure Guest Users through Sponsor Portal but with Dot1X Security, we don't want Captive Portal for Guest users.  Thanks.  ... View more

Hi Guys  Working Configuration ip nat inside source static tcp 192.168.2.1 3390 <IP address> 3390 route-map NoIPSec extendable ip nat inside source static tcp 192.168.2.2 3389 <IP address> 3389 route-map NoIPSec extendable   ip access-list extended noipsec  deny ip host 192.168.2.1 192.168.1.0 0.0.0.255   deny ip host 192.168.2.2 192.168.1.0 0.0.0.255   route-map NAT permit 1 match ip address nat   route-map NoIPSec permit 2 match ip address noipsec Question  I want to achieve the same with Interface Dialer0 (Dynamic IP Address)  while i use Interface Dialer0, it does not give an option of route-map   Router(config)#ip nat inside source static tcp 192.168.2.1 3389 interface Dialer0 3389 ? <cr> Any help is really appreciated.  Regards ... View more