I can answer the first question only. If you are using closed mode or low impact mode then yes, anything not allowed explicitly will be blocked including LAN access to the network. I don't experience with LANLITE switches to answer remaining questions ... View more

You need to explain the problem at topology then get some debugs. The info you provided isn't sufficient. ... View more

It seems that your provider changed something in their network. Try the following: 1. Disable DTLS in your AnyConnect configuration and see if works with TLS only. 2. If not working, keep DTLS off and reduce the MTU to something like 1240 and see if its working. ***** remember to rate useful posts ... View more

No, enable EM won't consume license. The license is consumed based on registered phones only and their capabilities. ... View more

hi, San Diego phones should be having SD-DP with LRG points to SD-GW New Jersey phones should be having NJ-DP with LRG points to NJ-GW Note your emergency dial pattern for US in home cluster should be accessible only from Adjunct CSS configured in roaming DP. This dial pattern should point to SLRG Note that in EMCC, RP with SLRG doesn't point to LRG configured in Roaming DP. Instead, it sends the call over EMCC SIP Trunk to VC When the home cluster sends the call over EMCC trunk to visiting cluster (assuming you use the option 'use trunk css'), the dialplan in visiting cluster will be checked and a dial pattern for emergency should be configured pointing to SLRG. This SLRG will pick the gateway configured under local phones device pool which is either SD-GW or NJ-GW. **** remember to rate useful posts ... View more

Hi, If the server is downloading TCP, then policing for traffic from internet on the internet port in ingress direction will help. When the policier starts dropping traffic, TCP sender will notice lost ACKs and will slow transmission speed. If the server is downloading UDP, then policy won't help because the sender will keep dumping traffic which you will see at the ingress interface even if your policiers drops it, like a DoS attack. **** remember to rate useful posts ... View more

Error 38 means that your CME can't reach CUCM. Start with debug ip tcp transactions to see what is happening when you initiate a connection assuming that you use TCP SIP. Check if there is anything blocking the connectivity and make sure the CME is added to CUCM as SIP Trunk. **** remember to rate useful posts ... View more

Are you prefixing anything to the dialed number when making the calls. Also, during the call do you see name or number on the screen. ... View more

One one of the account which has the problem, can you check if any alternate number is assigned. Also, are you have custom call handlers or standard ones. ... View more

here is sample, interface lo0 ip add 1.1.1.1 255.255.255.255 ! voice service voip sip bind all source-interface lo0 or dial-p voice 10 voip voice-class sip bind source-interface control lo0 voice-class sip bind source-interface media lo0 For verify status, you can use options-keepalive https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube_sip/configuration/15-mt/cube-sip-15-mt-book/oodo-ping-group.pdf ... View more

Hi, You can assign 8918 to new phone and then assign 8919 to the other phone. Once you complete the assignment, the DNs won't be mapped to the old phones and you can verify that from call routing page. You aren't going to have a case where the phone assigned two DNs because it was previously assigned (not in call manager). Then you start modifying the settings per dn *** remember to rate useful posts ... View more

I don't think you can copy a user with associated profs. You need to remap the profiles once you change the name as this is a new account. Your easiest option is to export/import. Did you check why its failing ********* remember to rate useful posts ... View more