I'm trying to allow users to dial 91 for all outbound calls including local and long-distance but if they only dial 9 for local then I want to allow that to work. Below is my configuration, let me know what I need to do in order to accomplish this task. I've cut out the parts of my config that shouldn't be relevant.   voice translation-rule 1  rule 1 /^1...$/ /301555\0/ ! voice translation-rule 2  rule 1 /^9\.*/ /\1/  rule 2 /^91\.*/ /\1/ ! voice translation-rule 5  rule 1 /^202/ /9202\1/  rule 2 /^571/ /9571\1/  rule 3 /^703/ /9703\1/  rule 4 // /91\1/ ! voice translation-rule 9  rule 1 // /571777\1/ ! voice translation-rule 10  rule 1 // /9\0/ ! voice translation-rule 571  rule 1 /^571403\(.*\)/ /\1/  rule 2 /^571777\(.*\)/ /\1/ ! ! voice translation-profile 911 translate calling 9 ! voice translation-profile CallDirectory translate calling 10 ! voice translation-profile CallerID translate calling 1 translate called 2 ! voice translation-profile InboundSIP translate calling 5 translate called 571 ! voice translation-profile OutboundSIP translate calling 9 translate called 2 ! dial-peer cor custom  name LOCAL  name LONGDISTANCE  name INTERNATIONAL  name TFRAUD ! ! dial-peer cor list EMPLOYEE  member LOCAL  member LONGDISTANCE  member INTERNATIONAL ! dial-peer cor list EXECUTIVE  member LOCAL  member LONGDISTANCE  member INTERNATIONAL ! dial-peer cor list CALLLOCAL  member LOCAL ! dial-peer cor list CALLLD  member LONGDISTANCE ! dial-peer cor list CALLINTL  member INTERNATIONAL ! ! dial-peer voice 100 voip  corlist outgoing CALLLD  description "Long Distance"  translation-profile outgoing OutboundSIP  destination-pattern 91[2-9]..[2-9]......  session protocol sipv2  session target sip-server  voice-class codec 1    voice-class sip early-offer forced  voice-class sip options-keepalive  voice-class sip bind control source-interface Loopback100  voice-class sip bind media source-interface Loopback100  dtmf-relay rtp-nte  fax rate disable  no vad ! dial-peer voice 1 voip  description INBOUND from Vz  translation-profile incoming InboundSIP  session protocol sipv2  incoming called-number .  voice-class codec 1    voice-class sip early-offer forced  voice-class sip bind control source-interface Loopback100  voice-class sip bind media source-interface Loopback100  dtmf-relay rtp-nte  fax rate disable  no vad  no supplementary-service sip moved-temporarily  no supplementary-service sip refer ! dial-peer voice 101 voip  corlist outgoing CALLLOCAL  description "Local Calls"  translation-profile outgoing OutboundSIP  destination-pattern 9[2-9]..[2-9]......  session protocol sipv2  session target sip-server  voice-class codec 1    voice-class sip early-offer forced  voice-class sip options-keepalive  voice-class sip bind control source-interface Loopback100  voice-class sip bind media source-interface Loopback100  dtmf-relay rtp-nte  fax rate disable  no vad ! dial-peer voice 102 voip  corlist outgoing CALLINTL  description "International"  translation-profile outgoing OutboundSIP  destination-pattern 9011T  session protocol sipv2  session target sip-server  voice-class codec 1    voice-class sip early-offer forced  voice-class sip options-keepalive  voice-class sip bind control source-interface Loopback100  voice-class sip bind media source-interface Loopback100  dtmf-relay rtp-nte  fax rate disable  no vad ! dial-peer voice 103 voip  corlist outgoing CALLLOCAL  description "Local Services"  translation-profile outgoing OutboundSIP  destination-pattern 9[1-8]11$  session protocol sipv2  session target sip-server  voice-class codec 1    voice-class sip early-offer forced  voice-class sip options-keepalive  voice-class sip bind control source-interface Loopback100  voice-class sip bind media source-interface Loopback100  dtmf-relay rtp-nte  fax rate disable  no vad ! dial-peer voice 104 voip  corlist outgoing CALLLOCAL  description "911"  translation-profile outgoing 911  destination-pattern 911  session protocol sipv2  session target sip-server  voice-class codec 1    voice-class sip early-offer forced  voice-class sip options-keepalive  voice-class sip bind control source-interface Loopback100  voice-class sip bind media source-interface Loopback100  dtmf-relay rtp-nte  fax rate disable  no vad ! dial-peer voice 105 voip  corlist outgoing CALLLOCAL  description "9911"  translation-profile outgoing OutboundSIP  destination-pattern 9911  session protocol sipv2  session target sip-server  voice-class codec 1    voice-class sip early-offer forced  voice-class sip options-keepalive  voice-class sip bind control source-interface Loopback100  voice-class sip bind media source-interface Loopback100  dtmf-relay rtp-nte  fax rate disable  no vad ! dial-peer voice 5500 voip  description "CUE Dial-peer"  destination-pattern 5500  session protocol sipv2  session target ipv4:10.30.200.12  dtmf-relay sip-notify  codec g711ulaw  no vad ! dial-peer voice 5510 voip  description "CUE Dial-peer"  destination-pattern 5510  session protocol sipv2  session target ipv4:10.30.200.12  dtmf-relay sip-notify  codec g711ulaw  no vad ! dial-peer voice 200 voip  description Outbound Fax to Verizon  translation-profile outgoing OutboundSIP  shutdown  destination-pattern 8T  session protocol sipv2  session target sip-server  dtmf-relay rtp-nte  codec g711ulaw  fax rate disable ! ! dial-peer hunt 2 gateway  timer receive-rtp 1200 ! sip-ua  set pstn-cause 1 sip-status 503  set pstn-cause 102 sip-status 503  retry invite 2  retry bye 2  retry cancel 2  mwi-server ipv4:10.30.200.12 expires 3600 port 5060 transport udp unsolicited  sip-server ipv4:x.x.x.x:5760 ! ! ! gatekeeper  shutdown ! ! telephony-service  authentication credential admin cisco  max-ephones 100  max-dn 100  ip source-address 10.30.200.1 port 2000  service phone webAccess 0  service dnis overlay  service dnis dir-lookup  timeouts interdigit 5  system message Your current options  url services http://10.30.200.12/voiceview/common/login.do  url authentication http://10.30.200.12/voiceview/authentication/authenticate.do    cnf-file location flash:  cnf-file perphone  time-zone 12  dialplan-pattern 1 6363796... extension-length 4  voicemail 5500  max-conferences 12 gain -6  call-forward pattern .T  moh enable-g711 "flash1:music-on-hold.au"  multicast moh x.x.x.x port 2000  web admin system name admin password cisco  web admin customer name cisco password cisco  dn-webedit  time-webedit  transfer-system full-consult dss  transfer-pattern .T  secondary-dialtone 9  after-hours block pattern 1 919.........  create cnf-files version-stamp Jan 01 2002 00:00:00 ... View more

We're using the self-registered guest portal for our wireless guest users and it does work but the user has to first attempt to browse to something on the internet first. Is there a way to automatically redirect the user to this portal without requiring that they browse to some site first? I also notice that it has to be a site that isn't really in the cache for the redirect to work. If I browse to a site that I always browse to, the redirect doesn't occur and we just get a page can't be displayed but if I browse to a site I rarely go to, the redirect pops right up. Thoughts? Thanks  ... View more

I have a customer that has an existing VPN connection between their ASA and their corporate AWS account. As you may or may not know, AWS shares a set of public IPs for VPN peering across many many customers. AWS splits customer traffic out on the back end. Example... Customer A sets up a VPN with AWS using the remote public peer ip of 1.1.1.1. Customer B comes along and wants to setup a VPN tunnel to AWS, they also use 1.1.1.1 as their remote VPN peer IP, and so forth and so on.  So this customer already has a VPN to AWS and now they need to connect to a different AWS account but guess what, the remote VPN peer IPs are the same as the ones they are currently using. So this presents a problem with the tunnel-group configuration on the ASA. They already have a tunnel-group that matches the remote AWS peer IP and that tunnel group already has a PSK configured on it. In a perfect world I would have two tunnel-groups with the same name (1.1.1.1 for example) but with different PSKs. I know this isn't possible so does anyone have any ideas here or is my customer just up a creek?  Oh and both VPN tunnels require the isakmp identity to be the address.  ... View more

Does anyone know how in the world I should login to the ASAv when deployed in AWS? I deployed it, it has an elastic public IP attached to it, when I ssh to the ASA I get a login prompt but I can't login to the device no matter what I try. I've tried the default username of 'admin' with no password but still nothing. I've tried pushing the zero day config and setting a username and password along with the aaa authentication ssh console local command, still nothing. Thoughts  ... View more

I have the below radius configuration set on my Cisco 2921 running 15.2(4)M6. I'm having issues with setting the enable password to also use the radius group. For example, If I add "aaa authentication enable default group RADIUS_GROUP enable" to the below config I can't get into the router, I keep getting prompted for an enable password. It doesn't take the locally configured enable password and it doesn't take my AAA password. What am I missing here?  aaa authentication login default group RADIUS_GROUP local-case aaa accounting update periodic 60 aaa accounting exec default start-stop group RADIUS_GROUP aaa accounting network default start-stop group RADIUS_GROUP aaa accounting connection default start-stop group RADIUS_GROUP aaa accounting system default start-stop group RADIUS_GROUP ... View more

I have a customer that has a L2L VPN between their sites established with two ASAs. From time to time they complain about the VPN going down but I see no logs indicating this on the firewall and the tunnel is always up and working fine when i log in. I would like to setup an IPsla on each ASA to monitor the other ASA though the VPN. Is this possible? Currently when I try I can't ping from the local ASA through the tunnel even through I'm sourcing from an interface that is inside of the crypto map statement. I just get the below, thoughts? I added an ACL on inside1-db to allow all traffic (IP) from host 10.23.139.229 to 10.20.159.229 but still I get the same results on a packet tracer. What am i missing or is this just not possible? Obviously hosts on these networks can communicate to one another just fine across the VPN (example: 10.23.139.18 can talk to 10.20.159.10 no problem).    Phase: 1 Type: ACCESS-LIST Subtype:  Result: ALLOW Config: Implicit Rule Additional Information:  Forward Flow based lookup yields rule:  in  id=0x7fff2a66bf80, priority=1, domain=permit, deny=false         hits=880163930, user_data=0x0, cs_id=0x0, l3_type=0x8         src mac=0000.0000.0000, mask=0000.0000.0000         dst mac=0000.0000.0000, mask=0100.0000.0000         input_ifc=inside1-db, output_ifc=any Phase: 2 Type: UN-NAT Subtype: static Result: ALLOW Config: nat (inside1-db,outside-acl) source static obj-10.23.139.0 obj-10.23.139.0 destination static ng-vpn_nat_exempt ng-vpn_nat_exempt no-proxy-arp Additional Information: NAT divert to egress interface outside-acl Untranslate 10.20.159.229/0 to 10.20.159.229/0 Phase: 3 Type: ACCESS-LIST Subtype:  Result: DROP Config: Implicit Rule Additional Information:  Forward Flow based lookup yields rule:  in  id=0x7fff29401dd0, priority=500, domain=permit, deny=true         hits=5, user_data=0x6, cs_id=0x0, reverse, flags=0x0, protocol=0         src ip/id=10.23.139.229, mask=255.255.255.255, port=0, tag=0         dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0,, dscp=0x0         input_ifc=inside1-db, output_ifc=any Result: input-interface: inside1-db input-status: up input-line-status: up output-interface: outside-acl output-status: up output-line-status: up Action: drop Drop-reason: (acl-drop) Flow is denied by configured rule ... View more

I've attached a script and I'm simply trying to get the XML doc dNumWeek (created after keyword transform document step using the create XML step) to upload and replace OnCallAgentUpdate.xml. Even though my script runs through and the agent is authenticated successfully and I get down to the upload document step, it will never actually upload the document. I'm not using the reactive debugger to test this, I'm simply stepping through using the UCCX editor. Everything else within the script works exactly as I need it to but the last step of trying to get the document to upload won't work no matter what I try. Below are a list of the things I've tried so far.   1. On the Upload Document step, I changed the language folder from default[default] to L[en_US] and placed the OnCallAgentUpdate.xml in there 2. I've removed the java code section and tried to do a simply parse out of an XML to generate a string and then perform a keyword transformation and upload that   The only way I can get the upload to step through as successful is to create a document variable and reference no document at all just DOC[] and then tell UCCX to upload that to OnCallAgentUpdate.xml and that works but obviously it just overwrites my xml with no data. The keyword transformation doc that's generated, I can't get that to upload no matter what I do. HELP PLEASE!! I've speed days working on this and beating my head against the table ha. I've attached the script I'm using as well as the XML files. ... View more