Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Attila Horvath
Attila Horvath
Beginner
Works as Network Engineer at a Cisco silver partner in Hungary, Budapest
Recent Badges
Stats
Member since
05-28-2009
87
Posts
20
Helpful
5
Solutions
Created by
Attila Horvath
in Network Access Control
in Network Access Control
05-02-2019
08:28 AM
05-02-2019
08:28 AM
Hi, We have a posture rule to check installed critical patches at SCCM system. I have set SCCM check based on ISA admin guide and based on this guide https://community.cisco.com/t5/security-documents/how-to-integrate-cisco-ise-with-microsoft-sccm-for-patch/ta-p/3725035 The computer shows there is a missing critical patch, and shows the small icon notification also (the are misising patches), but the posture riport shows as passed all the time. What's wrong with it? The anyconnect is the latest 4.7.02036, the compliance module is 4.3.512.6144 The sccm is ver 5.0. Any suggestion?
... View more
Labels:
Created by
Attila Horvath
in IP Telephony and Phones
in IP Telephony and Phones
06-13-2018
12:16 AM
06-13-2018
12:16 AM
Now I have found a settings in CUCM (11.5), but I am not sure related:
"If you are connected to a low-bandwidth network and finding it difficult to take an incoming call on your mobile device, you can set the system SIP parameters to improve the condition. Increase the SIP Dual Mode Alert Timer value to ensure that calls to the Cisco Jabber extension are not prematurely routed to the mobile-network phone number."
The default settings was 1500 ms, now increased to 10.000 but I am a bit unsure as we are not using the related Mobile Connect (now Single Number Reach) feature.
We have to test it.
... View more
Created by
Attila Horvath
in IP Telephony and Phones
in IP Telephony and Phones
06-13-2018
12:11 AM
06-13-2018
12:11 AM
1. Tried with iPhone SE (ver 11 - latest ), and with different Android versions - but generally newest android phones.
2. Yes, seen on different devices
3. Yes, we have set all of the required energy (and other) settings to stay it alive.
... View more
Created by
Attila Horvath
in IP Telephony and Phones
in IP Telephony and Phones
06-13-2018
12:08 AM
06-13-2018
12:08 AM
Hi,
Yes, configured to receive calls from inside CUCM, and from outside.
There is a public PSNT number field mapped to DN-s.
... View more
Created by
Attila Horvath
in IP Telephony and Phones
in IP Telephony and Phones
06-12-2018
08:30 AM
06-12-2018
08:30 AM
Hi
We have a fully working Jabber Mobile MRA installation when connecting internet over wireless (wifi) networks.
But when connection via 3G or 4G mobile network, some calls cannot arrive to jabber.
Tried to find any timers related to a delayed connection setup, but cannot find any.
Is there any SIP or other CUCM timer - that we can set - to make our system works over mobile networks?
... View more
Labels:
Created by
Attila Horvath
in IP Telephony and Phones
in IP Telephony and Phones
05-28-2018
05:45 AM
05-28-2018
05:45 AM
Hi,
To tell the true - I cannot found any interesting at log. Attached it.
The time when we see a missed call notifocation (as the only one) at client side is:
2018-05-25 11:59:23,164 INFO [0x00000001b4fb2b40] [miscs/YLCLocalNotificationManager.m(379)] [UI.Action.System] [-[YLCLocalNotificationManager sessionDidEnd:]] - jabber post a notification[You have missed a call] at 2018-05-25 09:59:23 +0000
... View more
Created by
Attila Horvath
in IP Telephony and Phones
in IP Telephony and Phones
05-28-2018
03:16 AM
05-28-2018
03:16 AM
No, there was not 183 Session in progress, just 180 Ringing - at the successful call.
When call was unsuccesfull, there was not any 180 ringing back, and CUCM send CANCEL .
If it is a timer, it just occured at mobile calls, as wirelessly connected Jabber clients working definitely well.
Please take a look to the following diagrams (from CUCM trace)
The successfull call was the following:
The Cancel at 11:59:28 is when the caller on-hooked the phone. So this CANCEL was occured by tester staff.
But at the unsuccessfull call, there was not any ringing back, and maybe the Callmanager send a Cancel at 11:59:20 , eight (8) seconds earlier as caller on-hooked call. So this CANCEL was not occured be test-staff, it is occured by Callmanager.
... View more
Created by
Attila Horvath
in IP Telephony and Phones
in IP Telephony and Phones
05-25-2018
09:29 AM
05-25-2018
09:29 AM
Hi,
We have implemented an Expressway MRA system with CUCM 11.5.
Clients are Android mobile client with newest Jabber. All of clients connecting via MRA (ExpE-ExpC).
When client connected to wireless network (still MRA, over ExpE-ExpC), all of calls will be successful.
But when connected to stable 4G network, sometimes the client cannot ring, just display an "Unanswered Call" notification.
Tried to debug at CUCM/Expressway pair - and I can see that CUCM sends an
- INVITE
- Gets back a Trying from ExpC
- after that sends a CANCEL
Just a note, not all of the time this issue is occured. Sometimes yes, sometimes not.
What could be caused this issue? Why CUCM send Cancel before receive Ringing and 200OK?
Is it a timer? The SIP profile in CUCM is "Standard SIP Profile for Mobile Device" with default values:
(attached)
I assume the internet connection is stable - as CANCEL arrived in time to client.
... View more
Labels:
Created by
Attila Horvath
in Network Access Control
in Network Access Control
11-30-2017
06:56 AM
11-30-2017
06:56 AM
Hi, The issue to me is how to allow login for 3 days if the customer's policy allows 3 days to install patches. The SCCM query with Anyconnect (via SCCM API) shows user as Noncompliant, but I must allow login for a limited time (according corporate policy.) I know we can force the remediation immediately, but this customer is not a Campus like, and force 800 user to install the whole Patch Tuesday in the morning, - and we cannot allow to work until installed - is not a case.
... View more
11-30-2017
01:11 AM
Hi, We have implemented ISE 2.2 with latest patch. We would like to use client based (not MDM) SCCM posture with remediation. At our customer the Windows patch installation process is the following: When the patch arrive form MS, the IT assign this patch to computers (T day) in SCCM. The users have 2 days to install these patches (now they can see its on workstation's software center), and only after 2 days will force SCCM the installation. So if we want to check, and remediate SCCM - we have 2 days when users allowed to exist without patches. But in posture rules there is no any setting to allow grace period. So if patch assigned to machine, the user will be non-compliant immediately. So what is the proposal for this issue at ISE 2.2? Attila
... View more
Labels:
10-05-2017
08:03 AM
Hi, Tried to implement 1 day Posture lease time with 4 hours PrA. If I switch on Reassessment Enforcement, and re-connect a Compliant machine again to net, it is force a posture check every time. At ISE posture logs I see a Compliant entry ("Bypass posture since the endpoint is compliant" ), but immediately afterwards I see a PRA INFO: PRA is starting and after this the client preforms a complete re-check. Why?
... View more
Labels:
07-20-2017
07:39 AM
Just note:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd06182
"In AnyConnect 4.4, ConnectionData.xml was moved from ProgramData to AppData (Windows). When upgrade from any older version to AnyConnect 4.4 happens when the posture lease hasn't expired, AnyConnect 4.4 is not able to the find the connectiondata.xml. Hence Discovery fails after upgrading to 4.4 during posture lease."
As I can see, the description is the same in bug and in you post, so assume you have opened the ticket :)
... View more
Created by
Attila Horvath
in Cisco Bug Discussions
in Cisco Bug Discussions
07-20-2017
05:51 AM
07-20-2017
05:51 AM
How does the ISE server found policy servers?
With URL redirection or with previously connected PSN-s from Connectiondata.xml?
... View more
Created by
Attila Horvath
in Network Access Control
in Network Access Control
01-16-2017
11:20 AM
01-16-2017
11:20 AM
Hi,
We try to implement ISE 2.1 posture with Aruba Controller/AP.
Does anyone have any experience how can we do it?
We use EAP-chaning, certificate auth for Machine, and password auth for user.
We can change the Role (from guest to Authenticated) with Aruba-User-Role Radius answer, we can send CoA, and normally we can
succesfully manage the posture.
But - if user logged out from machine, and revert to Role back to Restricted (with succesful machine authentication),
and try to login again, the Aruba WLC (Assume the PMK caching) says " Setting cached role to guest for user <MAC>” , and the posture will not occured,
and the user stuck in Guest role despite of successfull authenticaton.
What is wrong with this? The ISE 2.1 Compatibility Matrix shows Aruba as supported OS.
... View more
- Tags:
- #ISE #posture #Aruba
Labels:
Created by
Attila Horvath
in IP Telephony and Phones
in IP Telephony and Phones
11-21-2016
08:03 AM
11-21-2016
08:03 AM
I am afraid, this settings is another thing.
It changes the diplay of Called side, but I need to change the _Calling_ disply to show the name of actually ringing member of hunt list.
Attila
... View more
Created by
Attila Horvath
in Collaboration Applications
05-07-2019
05-07-2019
Hi, No, the user is associated to a Cisco IP phone (7845), configured
the same line in Android and t...
Created by
Attila Horvath
in Collaboration Applications
05-06-2019
05-06-2019
Hi, We have a CUCM11.5+IMP 11.5 system with several Jabber for Android
clients (latest official vers...
05-02-2019
Hi, We have a posture rule to check installed critical patches at SCCM
system.I have set SCCM check ...
Created by
Attila Horvath
in Collaboration Applications
01-27-2019
01-27-2019
Yes, we have set all parameters as suggested in this document, and from
other materials (Cisco Live ...
Created by
Attila Horvath
in Collaboration Applications
01-15-2019
01-15-2019
One of our customer connected over MRA, but another customer use it only
inside of company network w...
01-14-2019
Hi, we have an issue with latest public Jabber for Android version, with
CUCM 11.5 latest patch. Whe...
Created by
Attila Horvath
in IP Telephony and Phones
06-13-2018
06-13-2018
Now I have found a settings in CUCM (11.5), but I am not sure related:
"If you are connected to a lo...
Created by
Attila Horvath
in IP Telephony and Phones
06-13-2018
06-13-2018
1. Tried with iPhone SE (ver 11 - latest ), and with different Android
versions - but generally newe...
Created by
Attila Horvath
in IP Telephony and Phones
06-13-2018
06-13-2018
Hi, Yes, configured to receive calls from inside CUCM, and from outside.
There is a public PSNT numb...
Created by
Attila Horvath
in IP Telephony and Phones
06-12-2018
06-12-2018
Hi We have a fully working Jabber Mobile MRA installation when
connecting internet over wireless (wi...
Created by
Attila Horvath
in IP Telephony and Phones
05-28-2018
05-28-2018
Hi, To tell the true - I cannot found any interesting at log. Attached
it. The time when we see a mi...
Created by
Attila Horvath
in IP Telephony and Phones
05-28-2018
05-28-2018
No, there was not 183 Session in progress, just 180 Ringing - at the
successful call. When call was ...
Created by
Attila Horvath
in IP Telephony and Phones
05-25-2018
05-25-2018
Hi, We have implemented an Expressway MRA system with CUCM 11.5. Clients
are Android mobile client w...
Created by
Attila Horvath
in Collaboration Applications
01-29-2018
01-29-2018
Thanks for reply, thats what I think after search for answer. But is
there any trick or workaround t...
Created by
Attila Horvath
in Collaboration Applications
01-29-2018
01-29-2018
Hi, When I receive a call with my latest Jabber for Android, I can see
only an Answer button. Is it ...
Public Statistics
| Date Registered | 05-28-2009 01:34 AM |
| Date Last Visited | 04-06-2020 05:30 AM |
| Total Messages Posted | 87 |
| Total Helpful Votes Received | 20 |
