I found this weekend that the default gateway for one of our UCCX servers is pointing to an incorrect gateway. The SIP router it's pointing to works, but won't provide the redundancy that the core switches will provide. Found this was incorrect this weekend when the SIP router was rebooted.   Any issues updating the default gateway? Was just worried that the licenses would have to be updated.   Thank you in advance. ... View more

Good afternoon guys.   Struggling with a new ASA5525/SFR/FMC deployment. Everything is able to ping each other. I've imaged the SFR with 6.4.0 and that completed just fine. I have deployed the FMC and it is able to communicate with the SFR without any issues. It's also registered and showing green in the FMC.   I also completed the global service policy to redirect traffic to the ASA FirePOWER Inspection in "enabled monitor only" right now as I'm testing.   I'm just at a loss as why I'm not seeing any traffic showing in the FMC. I'm hopeful I've missed something easy here.    Any thoughts?   I have the ASA5525 running on v9.9(2)52 and ASDM on v7.9(2)152.   *** ASA INTERFACE CONFIGURATION ***   interface GigabitEthernet0/0  nameif Outside  security-level 0  ip address 64.20.x.x 255.255.255.240 ! interface GigabitEthernet0/1  nameif Inside  security-level 100  ip address 10.5.0.2 255.255.255.0 ! interface Management0/0 (this is connected to the same VLAN as the Inside interface on G0/1)  management-only  no nameif  no security-level  no ip address   *** INTERFACE STATUS ***   Interface GigabitEthernet0/0 "Outside", is up, line protocol is up   Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec         Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)         Input flow control is unsupported, output flow control is off         MAC address 7c69.f68f.9c1e, MTU 1500         IP address 64.20.x.x, subnet mask 255.255.255.240         93757294 packets input, 98882214895 bytes, 0 no buffer         Received 27294 broadcasts, 0 runts, 0 giants         0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort         0 pause input, 0 resume input         0 L2 decode drops         85449526 packets output, 23470108266 bytes, 0 underruns         0 pause output, 0 resume output         0 output errors, 0 collisions, 1 interface resets         0 late collisions, 0 deferred         0 input reset drops, 0 output reset drops         input queue (blocks free curr/low): hardware (463/362)         output queue (blocks free curr/low): hardware (462/356)   Traffic Statistics for "Outside":         93753097 packets input, 97171486161 bytes         85449526 packets output, 21914042688 bytes         151595 packets dropped       1 minute input rate 2847 pkts/sec,  2560583 bytes/sec       1 minute output rate 2206 pkts/sec,  395826 bytes/sec       1 minute drop rate, 8 pkts/sec       5 minute input rate 3328 pkts/sec,  3194150 bytes/sec       5 minute output rate 2417 pkts/sec,  428141 bytes/sec       5 minute drop rate, 4 pkts/sec Interface GigabitEthernet0/1 "Inside", is up, line protocol is up   Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec         Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)         Input flow control is unsupported, output flow control is off         MAC address 7c69.f68f.9c1a, MTU 1500         IP address 10.5.0.2, subnet mask 255.255.255.0         109338735 packets input, 22146678756 bytes, 0 no buffer         Received 17 broadcasts, 0 runts, 0 giants         0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort         0 pause input, 0 resume input         0 L2 decode drops         140775455 packets output, 104866439702 bytes, 0 underruns         0 pause output, 0 resume output         0 output errors, 0 collisions, 1 interface resets         0 late collisions, 0 deferred         0 input reset drops, 0 output reset drops         input queue (blocks free curr/low): hardware (508/362)         output queue (blocks free curr/low): hardware (477/337)   Traffic Statistics for "Inside":         109338579 packets input, 19994547614 bytes         140775455 packets output, 102229390975 bytes         112575 packets dropped       1 minute input rate 2942 pkts/sec,  384433 bytes/sec       1 minute output rate 3954 pkts/sec,  2761891 bytes/sec       1 minute drop rate, 3 pkts/sec       5 minute input rate 3171 pkts/sec,  415749 bytes/sec       5 minute output rate 4441 pkts/sec,  3393147 bytes/sec       5 minute drop rate, 4 pkts/sec Interface Management0/0 "", is up, line protocol is up   Hardware is en_vtun rev00, BW 1000 Mbps, DLY 10 usec         Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)         Input flow control is unsupported, output flow control is off         Available but not configured via nameif         MAC address 7c69.f68f.9c19, MTU not set         IP address unassigned         19 packets input, 942 bytes, 0 no buffer         Received 0 broadcasts, 0 runts, 0 giants         0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort         0 pause input, 0 resume input         18 L2 decode drops         0 packets output, 0 bytes, 0 underruns         0 pause output, 0 resume output         0 output errors, 0 collisions, 0 interface resets         0 late collisions, 0 deferred         0 input reset drops, 0 output reset drops         input queue (blocks free curr/low): hardware (0/0)         output queue (blocks free curr/low): hardware (0/0)   *** SFR NETWORK CONFIGURATION ***   show network ===============[ System Information ]=============== Hostname                  : firepower Domains                   : xxxx.local DNS Servers               : 192.168.70.15                             192.168.70.17 Management port           : 8305 IPv4 Default route   Gateway                 : 10.5.0.1 ======================[ h0 ]====================== State                     : Enabled Channels                  : Management & Events Mode                      : Non-Autonegotiation MDI/MDIX                  : Auto/MDIX MTU                       : 1500 MAC Address               : 7C:69:F6:8F:9C ----------------------[ IPv4 ]---------------------- Configuration             : Manual Address                   : 10.5.0.3 Netmask                   : 255.255.255.0 Broadcast                 : 10.5.0.255 ----------------------[ IPv6 ]---------------------- Configuratio             : Disabled ===============[ Proxy Information ]================ State                     : Disabled Authentication            : Disabled *** SFR SHOW VERSION ***   show summary              -------------------[ firepower ]-------------------- Model                     : ASA5525 (72) Version 6.4.0 (Build 102) UUID                      : 784bf404-9b58-11e9-a336-e5710e95440d Rules update version      : 2018-10-10-001-vrt VDB version               : 309 ---------------------------------------------------- ------------------[ policy info ]----------------- Access Control Policy     : Test --------------------[ Outside ]--------------------- Physical Interface        : GigabitEthernet0/0 Type                      : ASA Security Zone             : OUTSIDE Status                    : Enabled Load Balancing Mode       : N/A ---------------------[ Inside ]--------------------- Physical Interface        : GigabitEthernet0/1 Tpe                      : ASA Security Zone             : INSIDE Status                    : Enabled Load Balancing Mode       : N/A ---------------------[ cplane ]--------------------- IPv4 Address              : 127.0.4.1 ----------------------[ eth0 ]---------------------- Physical Interface        : eth0 Type                      : Managem Status                    : Enabled MDI/MDIX                  : Auto MTU                       : 1500 MAC Address               : 7C:69:F6:8F:9C:17 IPv4 Address              : 10.5.0.3 ----------------------[ tun1 ]---------------------- IPv6 Address              : fdcc::bd:0:ffff:a9fe:1/64 ---------------------[ tunl0 ]---------------------- ---------------------------------------------------- --------------[ snort version info ]--------------- Snort Version             : 2.9.14 GRE (Build 15004) libpcap Version           : 1.8.1 PCRE Version              : 7.4 2007-09-21 ZLIB Version              : 1.2.5 ----------------------------------------------------   *** SHOW MANAGERS ***   Type                      : Manager Host                      : 192.168.70.5 Registration              : Completed ... View more

I'm very new to VoIP so go easy on me.   Here is our current dial-peer configuration. We are looking to just have any call from our SIP provider to be passed directly to CUCM. We are an organization with a lot of numbers all over several states. Maintaining a e164 list isn't a major issue but it will be quite a list and just the fear that a number is missed and then calls don't process.   Is there a better way to just pass through these incoming invites?   dial-peer voice 11 voip  description Calls to CUCM (Pub)  session protocol sipv2  session target ipv4:10.19.254.10  destination e164-pattern-map 200  voice-class codec 1 offer-all  voice-class sip asserted-id pai  dtmf-relay rtp-nte  no vad ! dial-peer voice 12 voip  description Calls to CUCM (Sub)  preference 1  session protocol sipv2  session target ipv4:192.168.30.202  destination e164-pattern-map 200  voice-class codec 1 offer-all  voice-class sip asserted-id pai  dtmf-relay rtp-nte  no vad ! dial-peer voice 20 voip  description Calls from NexVortex  session protocol sipv2  session target sip-server  incoming called e164-pattern-map 200  voice-class codec 1 offer-all  voice-class sip asserted-id pai  voice-class sip profiles 1  dtmf-relay rtp-nte  no vad ! dial-peer voice 31 voip  description Calls to NexVortex  translation-profile outgoing OUTGOING-SIP  destination-pattern .T  session protocol sipv2  session target dns:nexvortex.com  voice-class codec 1 offer-all  voice-class sip asymmetric payload full  voice-class sip asserted-id pai  voice-class sip call-route url  voice-class sip profiles 1  dtmf-relay rtp-nte  no vad ... View more

We are having an issue with UCCX that when agents are logged into the queues at 7:50ish AM, and then the queues open at 8:00 AM, that the calls are staying in the queues. If an agent logs out of the queue and then back in at 8:00 AM, he/she starts receiving calls.   Anyone seen anything like this?   UCCX  11.6.1.10000-51 ... View more

I have built out a new pair of 9500-40A switches with stackwise-virtual and they appeared to be running quite well with the exception that I couldn't get a neighbor for EIGRP. I just upgraded to 16.6.3 and now the stackwise-virtual command and it's configuration is gone. Anyone else having this issue? ... View more

Hello guys/gals,   We are in the process of reviewing our AT&T SIP IP Flex circuits due to the time that it's taking them to complete phone number ports and any other changes. Unfortunately, this is taking months, not weeks.   I have reviewed a SIP provider, NexVortex, and have been impressed with the one site that we've already stood up with them. The amount of time to be assigned a phone number and even the porting of numbers has been very quick, days not weeks or months.   For our offsite locations, we currently are using a mix of some locations using AT&T IP flex so that the location would have their phone numbers exist in their building and some locations have their phone numbers that exist back on our corporate SIP IP Flex account.   Each works just fine, but the location based IP flex circuits are 1) expensive and 2) requires a cube router to be installed at each location.   We are considering moving to NexVortex's mSIP (managed SIP) option for our corporate site and all branches. We would install two new 4431 routers, one at our Corporate Office, and one at our DR site. These would be connected over DIA circuits with a vendor that they peer with so that we can ensure QoS and monitoring.   While this on paper sounds like a great deal and gives us the flexibility and agility that we need, I'm just asking if someone could point out any issues that we might encounter.   For reference, our CUCM cluster has one CUCM server at our Corporate Office and one at our DR site. ... View more