Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Canisio Barth Junior
08-21-2019
Stats
Member since
03-02-2011
11
Posts
0
Helpful
0
Solutions
04-17-2019
10:03 AM
Dears, good afternoon. I come throw this forum in order to ask for help with a problem. Here in my work I am replacing an ASA 5510 with an ASA 5525-x. ASA 5510, OS 8.0(4) and ASDM 6.1(3) ASA 5525-X, OS 9.4(4) and ASDM 7.2(1) I did all the necessery migration with the Operation System because of the change in OS version 8.2. So, my private network passes throw the firewall translated, and it is positioned at the border. The problem is that I am not getting succedded getting into the Internet with my public IP, I get on Internet with my private IP. To make myself clear, when I remove the NAT (Static or dynamic (PAT)) I get into the other side with my private IP and when I put NAT it does not see the public one. Please, can somebody give a help, tip ??? In the picture I show my infra in short because I cannot expose it. The notebook is pretending to be my Internet. Thanks for help
... View more
Labels:
Created by
Canisio Barth Junior
in Collaboration, Voice and Video Videos
in Collaboration, Voice and Video Videos
09-20-2016
06:54 AM
09-20-2016
06:54 AM
Great topic Jaime!
Do you know if it's possible to use this procedure with OpenLDAP instead of AD?
Thank you.
... View more
Created by
Canisio Barth Junior
in IP Telephony and Phones
in IP Telephony and Phones
06-27-2013
03:46 PM
06-27-2013
03:46 PM
a) I have two Callmanager (publisher and subscriber) and they are configured mixed-mode. I checked that the CAPF.pem in the subscriber was issued after the CTL file ( the publisher was before), maybe someone regenerate the CAPF.pem in the subscriber and does not rerun the CTL Client. The question is: If I regenerate CAPF in the publisher and the rerun the CTLClient, the new CAPF certificate will be installed in the publisher and subscriber ? This certificate should be identical int the both servers? b) Due the CAPF.pem in the publisher and subscriber are different, the CAPF can not works fine? I tried install LSC but it is not working, in the 9971 phones status messages show "No valid CAPF server" . c) For 7940 phones, if i just regenerate CAPF and rerun ctl client (not change TFTP adrress) will not be necessary delete manually the ctl file? d) I also checked that the itl file does not has a entry for CAPF. It could impact the CAPF functionality? Thanks Carlos
... View more
Labels:
Created by
Canisio Barth Junior
in Collaboration, Voice and Video Blogs
in Collaboration, Voice and Video Blogs
06-26-2013
05:13 PM
06-26-2013
05:13 PM
Akhil, I bought your book and it is very good. But I still havea problem and maybe you can help me. a) I have two Callmanager (publisher and subscriber) and they are configured mixed-mode. I checked that the CAPF.pem in the subscriber was issued after the CTL file ( the publisher was before), maybe someone regenerate the CAPF.pem in the subscriber and does not rerun the CTL Client. The question is: If I regenerate CAPF in the publisher and the rerun the CTLClient, the new CAPF certificate will be installed in the publisher and subscriber ? This certificate should be identical int the both servers? b) Due the CAPF.pem in the publisher and subscriber are different, the CAPF can not works fine? I tried install LSC but it is not working, in the 9971 phones status messages show "No valid CAPF server" . c) Your last answer about 7940, so if i just regenerate CAPF and rerun ctl client (not change TFTP adrress) will not be necessary delete manually the ctl file? d) I also checked that the itl file does not has a entry for CAPF. It could impact the CAPF functionality? Kind Regards Carlos
... View more
Created by
Canisio Barth Junior
in Collaboration, Voice and Video Documents
in Collaboration, Voice and Video Documents
06-24-2013
05:17 PM
06-24-2013
05:17 PM
Jason, a) I have two Callmanager (publisher and subscriber) and they are configured mixed-mode. I checked that the CAPF.pem in the subscriber was issued after the CTL file ( the publisher was before), maybe someone regenerate the CAPF.pem in the subscriber and does not rerun the CTL Client. The question is: If I regenerate CAPF in the publisher and the rerun the CTLClient, the new CAPF certificate will be installed in the publisher and subscriber ? This certificate should be identical int the both servers? b) Due the CAPF.pem in the publisher and subscriber are different, the CAPF can not works fine? I tried install LSC but it is not working, in the 9971 phones status messages show "No valid CAPF server" . c) Your last answer about 7940, so if i just regenerate CAPF and rerun ctl client (not change TFTP adrress) will not be necessary delete manually the ctl file? d) I also checked that the itl file does not has a entry for CAPF. It could impact the CAPF functionality? Kind Regards Carlos
... View more
Created by
Canisio Barth Junior
in Security Documents
in Security Documents
06-24-2013
03:41 PM
06-24-2013
03:41 PM
Jason, I already update the CA 2048 certificate to ASA but nothing change.
... View more
Created by
Canisio Barth Junior
in Collaboration, Voice and Video Documents
in Collaboration, Voice and Video Documents
06-24-2013
03:26 PM
06-24-2013
03:26 PM
Created by
Canisio Barth Junior
in Collaboration, Voice and Video Documents
in Collaboration, Voice and Video Documents
06-22-2013
08:12 AM
06-22-2013
08:12 AM
If a generate a new ctlfile with the same tokens that generated the ctl file that is installed in the phones, will be necessary delete manually the old ctl or the phones when boot will upload the new ctl file? My cluster is in mixed-mode and i have phoens 7940, 7975 and 9971.
... View more
Created by
Canisio Barth Junior
in Security Documents
in Security Documents
06-22-2013
07:53 AM
06-22-2013
07:53 AM
I am trying establish a vpn connection (vpn phone) with mic certificate authentication but I have the follow error "cannot establish a vpn due invalid certificate". When I choose user/password authentication it's works fine. I updated all the certificates to ASA ( Cisco_manufacturing_CA, Callmanager, CAPF,Ca-RTP-001,CA-RTP-002) my cluster is mixed-mode. The phone does not have LSC installed. In the ASA, the commands: debug crypto ca messages; debug crypto ca 255 has the follow answers: CRYPTO_PKI: looking for cert in handle=c69d1d70, digest= 90 e0 fc b0 81 1c b7 2c fd a0 02 07 f6 73 2c 80 | .......,.....s,. CRYPTO_PKI: Cert record not found, returning E_NOT_FOUND CRYPTO_PKI: looking for cert in handle=c69d1d70, digest= a9 11 6f c1 d4 d7 21 22 92 19 e9 3a 1e 9b 8e c5 | ..o...!"...:.... Please anyone can help me?
... View more
Created by
Canisio Barth Junior
in Collaboration, Voice and Video Documents
in Collaboration, Voice and Video Documents
06-22-2013
07:50 AM
06-22-2013
07:50 AM
I am trying establish a vpn connection (vpn phone) with mic certificate authentication but I have the follow error "cannot establish a vpn due invalid certificate". When I choose user/password authentication it's works fine. I updated all the certificates to ASA ( Cisco_manufacturing_CA, Callmanager, CAPF,Ca-RTP-001,CA-RTP-002) my cluster is mixed-mode. The phone does not have LSC installed. In the ASA, the commands: debug crypto ca messages; debug crypto ca 255 has the follow answers: CRYPTO_PKI: looking for cert in handle=c69d1d70, digest= 90 e0 fc b0 81 1c b7 2c fd a0 02 07 f6 73 2c 80 | .......,.....s,. CRYPTO_PKI: Cert record not found, returning E_NOT_FOUND CRYPTO_PKI: looking for cert in handle=c69d1d70, digest= a9 11 6f c1 d4 d7 21 22 92 19 e9 3a 1e 9b 8e c5 | ..o...!"...:.... Please anyone can help me?
... View more
04-17-2019
Dears, good afternoon. I come throw this forum in order to ask for help
with a problem. Here in my w...
11-11-2016
No. The current version looks better concerning this issue, but I still
have a lot of clients compla...
Created by
Canisio Barth Junior
in Collaboration, Voice and Video Videos
09-20-2016
09-20-2016
Great topic Jaime! Do you know if it's possible to use this procedure
with OpenLDAP instead of AD? T...
Created by
Canisio Barth Junior
in Collaboration Applications
08-09-2016
08-09-2016
What do you mean with "check in logs for the time frame when jabber went
offline"?
08-09-2016
Hi Chhatwal There's no packet inspection on port 5222. Built in bridge
was disabled, and I'm still f...
07-29-2016
Thanks for your answer. Here are my comments in your facts: 1 - I'm
using the default values for Sta...
07-29-2016
Hi everyone. I'm deploying Jabber using RMA. Android app disconnects
from I'm & Presence and/or CUCM...
06-09-2016
Jaime, How can I map the field "HomePhone" ou "BusinessPhone" do the
internal directory number? My u...
06-27-2013
a) I have two Callmanager (publisher and subscriber) and they are
configured mixed-mode. I checked t...
06-26-2013
Akhil,I bought your book and it is very good. But I still havea problem
and maybe you can help me.a)...
06-24-2013
Jason,a) I have two Callmanager (publisher and subscriber) and they are
configured mixed-mode. I che...
Created by
Canisio Barth Junior
in Security Documents
06-24-2013
06-24-2013
Jason,I already update the CA 2048 certificate to ASA but nothing
change.
Public Statistics
| Date Registered | 03-02-2011 04:19 AM |
| Date Last Visited | 08-21-2019 12:28 AM |
| Total Messages Posted | 11 |
.jpg "Hall of Fame Cisco Employee"){kind=icon}
