oh yes Dpita you mentioned about route leaked, -------------- q1. it is leaked to MP-BGP? tenant to tenant running MP-BGP? it is enabled by default MP-BGP or where to enable it for tenant to tenant routing? -------------- q2. how and where in menu of the APIC can we verify the leaked route? -------------- q3. any update on the configuration guide or any doc from cisco.com on the release date? customer asking on how to implement where can we refer in the cisco site or doc for reference, any projected date on the release? -------------- q4.  "In the case of a shared service mode, a contract is required for inter-tenant communication. A contract is used to specify static routes across contexts, even though the tenant context does not enforce a policy." http://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI_Fundamentals_BigBook_chapter_010.html#concept_9241D40AD01249C0992D486359CF4667   q4: from above, can we've contract for inter-tenant without shared service? -------------- q5. for vxlan, on the leaf switch it is there's only 1 vtep ip or multiple vtep ip? -------------- q6. is there any verification tool to trace the traffic flow like you know ASDM there's packet tracer, and callmanager we've DNA (dialed-number anlayser), RTMT, how about in APIC any tool to trace the policy on the object for the traffic flow so that we know it has been implemented correctly and/or for troubleshooting -------------- Please advice on above 6x questions? Awaiting your reply, Many Thanks :)      ... View more

hmm didn't seem to work i change to non-srtp on phone, only the sip trunk is authenticated mode between CM and CME imported the cert between CM and CME, my ios is: (C2800NM-ADVENTERPRISEK9_IVS_LI-M), Version 15.1(1)T2 i place a call from CM to CME via the AUTHENTICATED MODE SIP SECURE TRUNK between CM phone (non-secure) and CME phone (non-secure) and the call cannot be establish...error message for TLS over TCP in green below dial-peer voice already included transport session tcp tls question1. is there any additional command i need to add to inform CME it is referencing or associating with CM .pem cert? example like secure conferencing, there's command to associate trustpoint abc, how about secure sip trunk on CME is there any command to inform router to associate to trustpoint? dspfarm profile 1 conference security trustpoint abc port=5061, transport=TLS Over TCP Dec 23 22:08:04.591: //-1/xxxxxxxxxxxx/SIP/Info/ccsip_process_sipspi_queue_event: ccsip_spi_get_msg_type returned: 2 for event 63 Dec 23 22:08:04.591: //-1/xxxxxxxxxxxx/SIP/Info/ccsip_process_sipspi_queue_event: ccsip_spi_get_msg_type returned: 2 for event 54 Dec 23 22:08:04.591: //107/F28C532B8124/SIP/Info/ccsip_set_cc_cause_for_spi_err: Categorized cause:38, category:186 Dec 23 22:08:04.591: //-1/xxxxxxxxxxxx/SIP/Info/ccsip_set_release_source_for_peer: ownCallId[107], src[6] Dec 23 22:08:04.591: //107/F28C532B8124/SIP/Info/sipSPIInitiateDisconnect: Initiate call disconnect(38) for outgoing call Dec 23 22:08:04.591: //107/F28C532B8124/SIP/Info/ccsip_call_statistics: Stats are not supported for IPIP call. ... View more

Thanks Jyothi, for the detail doc it certainly help, we're almost there left 1x small issue hope you can advice when I set to authenticated on CM sip secure profile, it said the profile must be encrypted see below error message in red, due to I'm using SRTP, *I've already imported all cert and my ios has adv ent service feature question 1. if I am to set to Encrypted Mode in SIP secure profile, then what should be my configuration on ios voice gateway? will the command "session transport tcp tls" still work for encrypted mode or the command is just meant for authenticated mode? question 2. or is there another command on the voice gateway for encrypted sip trunk? ---error message on CM sip secure profile: *i've SRTP allow checked box ticked on sip trunk and my phone is on secure encrypted mode Update failed. [9018] The Security Profile must be Encrypted and TLS  because another device is using this profile which has SRTP enabled ... View more