Hello I have a CUCM connected via SIP Trunk to a CUBE, I need to set two SIP Trunks from the CUBE to the SAME provider.   But I have only been able to correctly register and establish one because the ISP uses the same realm, and placing the authentication for the second SIP only updates the first one.  credentials username XXXXXX password 7 XXXXXXXXX realm isp.com  credentials username YYYYYYY password 7 YYYYYYYY realm isp.com  authentication username XXXXXX password 7 XXXXXX realm isp.com  authentication username YYYYYY password 7 YYYYYY realm isp.com (This command only update the first authentication beacuse is the same realm)  registrar 1 dns:isp.com expires 3600  registrar 2 dns:isp.comexpires 3600  sip-server dns:isp.com How can I do to register the two sip to the same provider with the same realm? ... View more

Hello,   How the LDAP integration is configured in CUCM if LDAP is in the cloud? And in the case of Unity how it integrates with the Exchange server if this is in the cloud?   Thanks ... View more

Hi,   I have this scenario:   EX90 (External Network) - Internet - VCSE - VCSC - CUCM ----- EX90 (internal Network)   I have an EX90 (internal network) registered in my CUCM  without any problem. I recently configured a Mobile Remote Access, my traversal zone is active. I upload the CA certificate to my EX90 (external network). This device receive the configuration from the CUCM via VCSE, but in the status register i saw: Status: Failed: 403 Forbidden   When i enter the command xstatus //prov on my EX90 (external) CLI my Privisionig status is: Provisioned.   Attached you can see the log when the EX90 (external) do the register.   Note: My CUCM is software unrestricted, for this reason cannot enable TLS on my phone security profile.       ... View more

Hello,   I have some doubts about this design: 1) Should I configure sip trunk between CUCM and vcs-control? Because I've seen some documentation which says it is no longer necessary. 2) My software CUCM in unrestricted and not let me use TLS Encryption Key and certain features even so is compatible? 3) It is mandatory to install the certificates? ... View more

Hello,   I have an EX and MX registered with CUCM, I can make internal calls perfectly but when I try to make a call to the PSTN does not even ask me the FAC code, the number appears 9XXXXXXXX @ hostnamecucm, I need some pattern route or I should do ?   From the android jabber, jabber desktop I have no problem. ... View more

I have a configured vpn to one of our customers has always worked properly with the setup you have, since last week began to fail without any change in either side was performed.   Executed a crypto ipsec debug crypto isa and debug and I have no output from the console. The only way that I have some debug output is to eliminate cryptomap interface and reconfigure it already looks as follows:     001965: *Nov 11 16:08:05.484 UTC: IPSEC: Expand action denied, notify RP 001966: *Nov 11 16:08:05.484 UTC: IPSEC: Expand action denied, notify RP 001967: *Nov 11 16:08:05.484 UTC: IPSEC: Expand action denied, discard or forward packet. 001968: *Nov 11 16:08:05.484 UTC: IPSEC: Expand action denied, discard or forward packet.     ptkccs-border-00#sh crypto isa sa IPv4 Crypto ISAKMP SA dst             src             state          conn-id status   IPv6 Crypto ISAKMP SA     Running sh crypto session appears as follows:   ptkccs-border-00# 001973: *Nov 11 16:10:04.508 UTC: No peer struct to get peer description 001974: *Nov 11 16:10:04.508 UTC: No peer struct to get peer description 001975: *Nov 11 16:10:04.508 UTC: No peer struct to get peer description 001976: *Nov 11 16:10:04.508 UTC: No peer struct to get peer description   My other side of the vpn client is an ASA, they have not changed the settings, acl match, but they receive no negotiation from my router. In addition to removing and placing acl permit ip any any, it is possible to see that phase 1 is completed but is not fully complete Phase 2.   Placing permit ip any any test was only because the place that I lose internet traffic and other services.   What could be happening if everything was working properly and there is no change in configuration. Now we delete the whole configuration and reconfigured, and perform an upgrade of equipment, and nothing. ... View more

I have the following topology:   mail server --- swcore --(inside) << >> ASA (outside) --- ISP border router    should perform the following nat on the handle of a mail server 10.0.3.41  to   200.x.x.182    I have the following configuration on the ASA:  object-group service SERVICES    service-object tcp-udp eq 7001    service-object tcp eq ssh    service-object tcp-udp eq 25    service-object tcp-udp eq 26    service tcp-udp-object eq 993    service tcp-udp-object eq 109    service tcp-udp-object eq 110    service tcp-udp-object eq 143    service tcp-udp-object eq 220    service tcp-udp-object eq 465    service tcp-udp-object eq 468    service tcp-udp-object eq 587    service tcp-udp-object eq 995    service tcp-udp-object eq www    service-object tcp-udp eq domain    service-object tcp-udp eq 8080    service-object tcp-udp eq 8443    service-object tcp eq https    service tcp-udp-object eq 135    service-object tcp eq 135    service-object tcp-udp eq 7777    service-object tcp-udp eq 8090    service-object tcp eq ftp    service-object tcp eq ftp-data    service-object udp eq ntp    service-object tcp eq sqlnet    service-object tcp eq 3389  access-list outside extended permit object-group SERVICES any host 200.x.x.182  access-list inside extended permit object-group SERVICES host 10.0.3.41 any  access-group outside in interface outside  access-group inside in interface inside  static (inside,outside) tcp 200.x.x.182 smtp 10.0.3.41 smtp netmask 255.255.255.255 global (outside) 1 interface  nat (inside) 1 10.0.0.0 255.0.0.0        Sniffer was performed interface that goes to the core sw to int inside  ASA, and effectively SMTP packets are received from 10.0.3.41 which is the mail server.  When you execute a "sh nat" does tells you match the .41 port 25 to 200.xx182    But when you check the header of the emails sent outside the domain appears the IP address is 200.xx178 with which it is performed the nat for internet company.   For some reason it is entering the nat  global (outside) 1 interface    And I do not understand because if I can see the sh nat does match the static nat. border router does not perform any function nat actually execute sh ip nat trans and nothing display.     Thanks. ... View more