Trying to enter config t no logg console Don't enable console logging unless needed. Otherwise, try to disconnect network cables and see if the log messages stop ... View more

Here is an example You can use other sla operations such as udp jitter or other icmp. R1# Interface FastEthernet0/0 ip address 192.168.12.1 255.255.255.0 standby 1 ip 192.168.12.3 standby 1 preempt ! interface FastEthernet0/1 ip address 192.168.13.1 255.255.255.0 ! ip route 0.0.0.0 0.0.0.0 192.168.13.3R2# interface FastEthernet0/0 ip address 192.168.12.2 255.255.255.0 standby preempt standby 1 ip 192.168.12.3 standby 1 priority 90 standby 1 preempt ! interface FastEthernet0/1 ip address 192.168.23.2 255.255.255.0 ! ip route 0.0.0.0 0.0.0.0 192.168.23.3 R1# ip sla monitor 1 type echo protocol ipIcmpEcho 3.3.3.3 frequency 5 ip sla monitor schedule 1 life forever start-time now ! track 1 rtr 1 reachability ! interface FastEthernet0/0 standby 1 track 1 decrement 20 *** Remember to rate useful posts ... View more

The error indicates that you are't reformting the forward-to number received from Mobile B to be routed by CUCM. Check the format of the called number received in the invite from Mobile B and make sure that CUCM has a route pattern to match it or format it to match any of your existing patterns. Also, make sure that the incoming trunk in CUCM has a CSS which can see the route-patterns/translation-patterns to forward the call. ... View more

Create a single crypto map with 3 sequence numbers crypto map vpn 10 crypto map vpn 20 crypto map vpn 30 Each sequence number can point to different peer. You can't create their crypto map names. You can have one name with multiple sequence numbers. ... View more

Default is 1hours Rack1(config-if)#authentication timer ? inactivity Interval in seconds after which if there is no activity from the client then it will be unauthorized (default OFF) * reauthenticate Time in seconds after which an automatic re-authentication should be initiated (default 1 hour)* restart Interval in seconds after which an attempt should be made to authenticate an unauthorized port (default 60 sec) unauthorized Time in seconds after which an unauthorized session will get deleted ... View more

Are you including this subnet in crypto ACLs to be part of the SAs. ... View more

Hi Amon, FYI, memory leak will cause admission control error message. But in this case we are getting no circuit available as rx from telco. ... View more

Hi, You need to check with your telco as they aren't releasing the call. Its either all the channels are engaged or the provider circuit is having problems and not able to establish the message. ... View more

Hi, I suggest to build separate environment with demo license of 60 days using 3595 VMs and migrate the NADs. This is the cleanest approach but might take more effort. Upgrading 2.0 to 2.4 will involve other changes in behavior which you need to analyze later such as moving from authentication and authorization policies to policy sets, license change, etc. Also, I have seen bugs related to endpoint purge policies and some custom profiling rules not being migrated correctly in the upgrade and I have to reapply them manually after discovering the error. Once this is done, you can rehost the license using the UDIs. ... View more

That is not accurate. In phase 1 dh generates 3 sub keys SKe, SKa SKd. SKd will be generated 1st to obtain SKe and SKd. If PFS is off, then you use same keys for phase two encryption/hashing and you don't generate new sub keys. If you have PFS on then new set of sub keys generated. Different encryption/decryption keys is the case when using certificate authentication. ... View more

Hi, You need to have tftp IP handed over using DHCP to avoid going in service mode and register the phone with CUCM instead of MRA. Once its ready with tftp IP in dhcp perform the following on the phone. Settings > Admins Settings *(5)* > Reset Settings *(4)* > Service Mode *(3)* > Reset. ... View more

WebAccess has nothing to do with directory. What error are you getting on the phone screen? Try to perform factory reset and see if it works. ... View more

The recommended cisco-avpair is ip:vrf-id. IOS-XE will read it and act accordingly ... View more