Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Alex A. Welzl
Stats
Member since
02-20-2013
14
Posts
5
Helpful
0
Solutions
Created by
Alex A. Welzl
in Voice Systems
in Voice Systems
04-19-2019
12:08 AM
04-19-2019
12:08 AM
It's a bit weird. The SR5 for the SPA525G/G2 is the ONLY version which needs the custom_CA to be set for SIP/TLS connections. We are running over 1000 SPA3xx/5xx phones and have not seen that issue before. So if it's really a security issue, then it is not fixed on the other models yet.
... View more
Created by
Alex A. Welzl
in Voice Systems
in Voice Systems
04-18-2019
03:14 AM
04-18-2019
03:14 AM
THX for the hint. We have not discovered any issues till now. I have added the Custom_CA to the setting and now it works.
... View more
Created by
Alex A. Welzl
in Voice Systems
in Voice Systems
04-17-2019
04:03 AM
04-17-2019
04:03 AM
I did some wiresharking and here's the result: 7559 120.784227695 172.16.11.37 172.16.11.99 Syslog 70 LOCAL0.INFO: [0:0]SIP/TCP:Connect=0\n 7561 120.784298715 172.16.11.37 172.16.11.99 Syslog 70 LOCAL0.INFO: [0:0]SIP/TCP:Connect=0\n 7562 120.785517180 172.16.11.37 172.16.11.99 Syslog 78 LOCAL0.INFO: [0:0]SIP/TLS:Connecting(17)...\n 7563 120.785527338 172.16.11.37 172.16.11.99 Syslog 78 LOCAL0.INFO: [0:0]SIP/TLS:Connecting(17)...\n 7564 120.866512328 172.16.11.37 172.16.11.99 Syslog 63 LOCAL3.DEBUG: ssl cert err 19\n 7565 120.869287508 172.16.11.37 172.16.11.99 Syslog 71 LOCAL0.INFO: [0:0]SIP/TLS:Connect=-1\n 7566 120.869314887 172.16.11.37 172.16.11.99 Syslog 71 LOCAL0.INFO: [0:0]SIP/TLS:Connect=-1\n 7567 120.871164233 172.16.11.37 172.16.11.99 Syslog 75 LOCAL0.INFO: [0:0]SIP/TLS:Connect Failed\n 7568 120.871191213 172.16.11.37 172.16.11.99 Syslog 75 LOCAL0.INFO: [0:0]SIP/TLS:Connect Failed\n According to this link https://community.cisco.com/t5/small-business-support-documents/ssl-errors-secure-provisioning-issues/ta-p/3295835 err 19 is X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN self signed certificate not recognized as trusted When I do a openssl s_client -connect voip.XXXXXXXXXX.com:5061 I receive a proper chain. CONNECTED(00000003) depth=2 C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2009 Entrust, Inc. - for authorized use only", CN = Entrust Root Certification Authority - G2 verify return:1 depth=1 C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K verify return:1 depth=0 C = XX, L = XXXXXXX, O = XXXXXXX, CN = voip.XXXXXXXXX.com verify return:1 --- Certificate chain 0 s:/C=XX/L=XXXXXX/O=XXXXXX/CN=voip.XXXXXXXXXX.com i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2012 Entrust, Inc. - for authorized use only/CN=Entrust Certification Authority - L1K 1 s:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2012 Entrust, Inc. - for authorized use only/CN=Entrust Certification Authority - L1K i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2009 Entrust, Inc. - for authorized use only/CN=Entrust Root Certification Authority - G2 2 s:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2009 Entrust, Inc. - for authorized use only/CN=Entrust Root Certification Authority - G2 i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2009 Entrust, Inc. - for authorized use only/CN=Entrust Root Certification Authority - G2 [..] New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 As mentioned it works w/o any issues on SR4, but not on SR5. Other models (SPA504/514G) have no issues with SR5 either.
... View more
Created by
Alex A. Welzl
in Voice Systems
in Voice Systems
03-05-2019
03:46 AM
03-05-2019
03:46 AM
After upgrading some SPA525G from 7.6.2SR4 to 7.6.2SR5 none of the phone can sucessfully execute a TLS based registration. Error in SYSLOG: Syslog message: LOCAL0.INFO: CC_eventProc(event=63(CC_EV_SIG_REGISTER_FAILED), lid=0, par=0, par2=(nil)) After downgrading to SR4 the phones work w/o any issues.
... View more
Labels:
08-03-2017
05:55 AM
... but note that undocumented behavior may change anytime.
As long as I will not upgrade the firmware, the feature is mine ... ;-)
... View more
Created by
Alex A. Welzl
in Voice Systems
in Voice Systems
08-03-2017
05:30 AM
08-03-2017
05:30 AM
I have 2 different phone models (SPA504G & SPA525G) in use, both on firmware 7.6.2a.
My goal is to send text messages with Asterisk (MessageSend) to the phones. This works without any issues, but I also want to clear the messages on the phones (remotely) without pressing OK on the phone itself. I discovered that when sending an empty message body that works on the SPA504G, but when sending such empty message to the SPA525G the empty message is being displayed. Is that a bug on the SPA504G or a feature on the SPA525G? Or do you have any other suggestions?
... View more
Labels:
Created by
Alex A. Welzl
in Voice Systems
in Voice Systems
07-28-2017
03:50 AM
07-28-2017
03:50 AM
I have following issue and could not find any hint on the net:
I want to enable FAT (Call forward all service enabled) and FAF (Call forward all service disabled)' via softkey on my SPA5xxG phones, sending the entered number to my PBX AND let the the big "Call Forwarded" label being displayed on the phone. I can achieve the softkey and the number being sent, but not the label. Or I can achieve the softkey and the label, but not the number being sent. I did not find any detailed information for the SAEC script syntax in any Cisco docs either.
So my 2 configs are:
Cfwd All Act Code: *72 Cfwd All Deact Code: *73 Service Annc Base Number: *7 Service Annc Extension Codes: FAT:2;FAF:3 PSK1: fnc=sd;ext=*720633;nme=cfwd;ext2=*73;nme2=-cfwd
In that case, the number from the softkey is being sent to the system, but I have no big label on the phone.
PSK1: fnc=sd;ext=*72;nme=cfwd;ext2=*73;nme2=-cfwd
In that case (all other settings remain identical), I can enter the number 0633 manually on the phone, but only *72 is being sent to the PBX. Then I do get a big label on the phone (calls forwarded).
So HOW do I combine both approaches and get this issues solved?
... View more
Labels:
05-07-2015
06:39 AM
We had experienced the well-known freezing of SPA phone (3xx/5xx) in our environment. It happened everytime when a phone looses its connectivity to the SIP proxy. After googling a lot with many attempts but no real solution, we started digging into the issue. First we were testing different firmwares - no difference in behaviour, then we started with an try-and-error approach. There we found out that the NAT Keep-Alive setting was the source of the trouble. As soon as we disabled the Keep-Alive setting the phones did not freeze at all. We assume that the phone has a buffer overrun when no keep-alive message could be sent out successfully.
... View more
Labels:
04-08-2015
12:29 AM
Following update to the issue: The call waiting tone is working, IF the secure call indication tone is set and not empty. It looks like there is an issue as soon as the field is blank in the interface. As I find the secure indication quite nasty, I have put 397@-19;0.01(0/*/0) as setting not to hear anything from it at all. Now the call waiting comes through.
... View more
04-04-2015
04:50 AM
I cannot confirm that the "secure indicator tone" is before the audio starts. In our case it is being mixed into the audio channel (Asterisk 1.8 / 13 environment). We have already initiated a TAC request and waiting for further investigation on Cisco's side. (We are now pushing the issue, because we want to move all our 650 exts to SRTP).
... View more
04-04-2015
02:33 AM
I cannot follow the argument you have mentioned in your post. All Cisco SPA phones support a "secure tone indicator" which can be set, but it should be not possible to do that same with a "call waiting tone"? So I would suggest to solve it via an optional switch to enable/disable such tone on a SRTP call - so it is up to the administrator of the phone and not to programmer's mood ... ;-)
... View more
03-31-2015
01:59 AM
This issue is still pending - even with FW 7.5.7 on SPA3xx & SPA5xx. (only on SPA525G and SPA525G2 is the call waiting tone working on SRTP)
... View more
Created by
Alex A. Welzl
in Voice Systems
in Voice Systems
04-12-2013
01:13 AM
04-12-2013
01:13 AM
One question which is maybe a bit related: I have the issue that I do not hear any call waiting tone during a SRTP call even though the values are set and the 2nd call is being notified on the display and on the MWI lamp. Do you have the same experience? I am running the latest SPA firmware and Asterisk 1.8.20.1.
... View more
Created by
Alex A. Welzl
in Voice Systems
in Voice Systems
02-20-2013
05:47 AM
02-20-2013
05:47 AM
I have configured a SPA504G (FW 7.5.4) with an Asterisk 1.8.20.1 to use TLS/SRTP. Overall it runs w/o any issues. The only problem I have is that when I in an encrypted call, another incoming call is only signalized on the display and the red light on the the top. I get no call waiting tone even though the call waiting tone is configured and unchanged. If I revert to UDP/RTP communication, a call waiting tone can be heard. I have also tried FW 7.5.2b, but no change of that behaviour. Any ideas? any recommendations?
... View more
Labels:
Created by
Alex A. Welzl
in Voice Systems
04-19-2019
04-19-2019
It's a bit weird. The SR5 for the SPA525G/G2 is the ONLY version which
needs the custom_CA to be set...
Created by
Alex A. Welzl
in Voice Systems
04-18-2019
04-18-2019
THX for the hint. We have not discovered any issues till now. I have
added the Custom_CA to the sett...
Created by
Alex A. Welzl
in Voice Systems
04-17-2019
04-17-2019
I did some wiresharking and here's the result: 7559 120.784227695
172.16.11.37 172.16.11.99 Syslog 7...
Created by
Alex A. Welzl
in Voice Systems
03-05-2019
03-05-2019
After upgrading some SPA525G from 7.6.2SR4 to 7.6.2SR5 none of the phone
can sucessfully execute a T...
08-03-2017
... but note that undocumented behavior may change anytime. As long as I
will not upgrade the firmwa...
Created by
Alex A. Welzl
in Voice Systems
08-03-2017
08-03-2017
I have 2 different phone models (SPA504G & SPA525G) in use, both on
firmware 7.6.2a. My goal is to s...
07-28-2017
I have following issue and could not find any hint on the net: I want to
enable FAT (Call forward al...
05-07-2015
We had experienced the well-known freezing of SPA phone (3xx/5xx) in our
environment. It happened ev...
04-08-2015
Following update to the issue: The call waiting tone is working, IF the
secure call indication tone ...
04-04-2015
I cannot confirm that the "secure indicator tone" is before the audio
starts. In our case it is bein...
04-04-2015
I cannot follow the argument you have mentioned in your post. All Cisco
SPA phones support a "secure...
03-31-2015
This issue is still pending - even with FW 7.5.7 on SPA3xx & SPA5xx.
(only on SPA525G and SPA525G2 i...
Created by
Alex A. Welzl
in Voice Systems
04-12-2013
04-12-2013
One question which is maybe a bit related: I have the issue that I do
not hear any call waiting tone...
Created by
Alex A. Welzl
in Voice Systems
02-20-2013
02-20-2013
I have configured a SPA504G (FW 7.5.4) with an Asterisk 1.8.20.1 to use
TLS/SRTP. Overall it runs w/...
Public Statistics
| Date Registered | 02-20-2013 05:38 AM |
| Date Last Visited | 04-19-2019 12:10 AM |
| Total Messages Posted | 14 |
| Total Helpful Votes Received | 5 |
