CDR Reporting- No Records Processed Tuesday, April 18, 2017 2:07 PM CUCM Version 10.5.x Problem:  CDR Analysis and Reporting - No records processing or records missing   Problem Description: Our CDR Records are no longer showing up in CDR Analysis and Reporting. They appear to have stopped the week prior.   These CDR records are forwarded to a reporting server (Variphy) which is no longer receiving the files. That said, Cisco's built in CDR reports do not work either since this date.   After further research, all CDR configurations are correct and services are running.  Next step is to locate the CDR Record files and see if there are some that have not processed:   All CDR files are located and viewed from the SSH console by using the following command.  There are multiple subdirectories so you may need to look through different directories using the following command which shows 8 directories in the case below.  After digging I found that the files that had not yet processed were located under the tmp folder..     admin:file list activelog /cm/cdr_repository <dir>   car <dir>   destination1 <dir>   destination2 <dir>   destination3 <dir>   preserve <dir>   processed <dir>   tmp <dir>   trans dir count = 8, file count = 0   Continuing on, we find the logs were located in the following directory    /cm/cdr_repository/tmp      To view the contents using the following command.   admin:file list activelog /cm/cdr_repository/tmp   cdr_StandAloneCluster_03_201704150546_869901 cdr_StandAloneCluster_03_201704151010_869902 cdr_StandAloneCluster_03_201704151011_869903 cdr_StandAloneCluster_03_201704151126_869904 cdr_StandAloneCluster_03_201704151217_869905 cdr_StandAloneCluster_03_201704151221_869906 cdr_StandAloneCluster_03_201704151246_869907 cdr_StandAloneCluster_03_201704151248_869908 cdr_StandAloneCluster_03_201704151303_869909 cdr_StandAloneCluster_03_201704151307_869910 cdr_StandAloneCluster_03_201704151308_869911 cdr_StandAloneCluster_03_201704151309_869912 cdr_StandAloneCluster_03_201704151310_869913 cdr_StandAloneCluster_03_201704151315_869914 cdr_StandAloneCluster_03_201704151316_869915 Resolution:   Once confirmed that the files were there, the fix was to restart the following services on the Publisher one at a time: These services are located under "Cisco Unified Serviceability, Tools,  Control Center - Network Services". On the Subscribers you will only restart the CDR Agent.  Once restarted, you will see the files slowly begin processing.  It could take a few minutes for a few thousand records to process.       Issue is now resolved. ... View more

I for years have purchased my Cisco equipment through Cisco Gold Channel Partners however, recently I was checking on Amazon and saw that there are numerous re-sellers who sale the same equipment "brand new" for much lower prices.  I spoke with one of these companies and they said that they are an Independent Channel re-seller.  What does this mean? ... View more

I have a few 2911 ISR's running on my network that are running zone based or CBAC firewalls depending on when it was deployed.  I am testing both configurations the following 2 NMAP scans with the following results which are puzzling. 1. TCP SYN Scan- shows that all ports are filtered. (Yay!) 2. TCP Connect Scan- Shows 2 ports open. (Boo!) 80/HTTP  1720/H.323/Q.931. I feel confident in my configurations but am looking for council to help me understand why these come back open on a TCP Connect Scan. So just to be sure my configs are solid, I have verified this to be the case on both a CBAC configuration with ACL denying just about everything from the outside and on a Zone Based firewall.  I have also used shut down the IP http server and secure server.  Doing a "Show IP HTTP Server status" shows it is disabled.  I even ran the Cisco "Auto secure" command as an additional step locking it down but these ports are still showing open on a TCP connect scan.  Should this behavior be expected? ... View more

Hey guys, I would like to understand why local and long distance calls on our CUCM 10.5 system are showing up in CAR as Others when I would think they should show up as Local or Long Distance? Thanks for your help guys! ... View more

I installed a 2911 - H.323 gateway at a remote site with two POTS lines and an FXO and the next day we were notified by Cox Communications that a block on international calls had been placed on the two POTS lines.   I do not see any record of the calls in CUCM.  I have the numbers that were dialed and time and everything.  Numerous calls were made.  No record of the calls in CUCM.  Any ideas on what I can look at.  Are there any exploits that I should be aware of?   Thanks! ... View more

I am looking for a routing solution to the following scenario.  It is a fairly simple design.    I have two WAN connections between sites A and B.  One is a 20 Meg Metro Ethernet Circuit running EIGRP.  The other is a 10 Meg MPLS running BGP.  What do I need to do in my configuration to make sure that the 20 Meg connection is the chosen path based off the fact that it has better speed and bandwidth?  It appears to me that the MPLS is the preferred path even though it is slower.   See attached Diagram:   Site A Config interface GigabitEthernet1/0/12  description PADC COX P2P 20 Meg  no switchport  bandwidth 20480  ip address 172.20.1.1 255.255.255.252   interface GigabitEthernet2/0/2  description LEVEL 3 MPLS  no switchport  bandwidth 10240  ip address 172.22.0.2 255.255.255.252   router eigrp 1  network 10.0.1.0 0.0.0.255  network 172.20.1.0 0.0.0.3  network 192.168.76.8 0.0.0.3   redistribute bgp 65003 metric 100 1 255 1 1500 route-map MPLS_NETWORKS  redistribute static route-map DEFAULT_ROUTE ! router bgp 65003  bgp log-neighbor-changes  redistribute static  redistribute eigrp 1  neighbor 172.22.0.1 remote-as 1  default-information originate !   Site B Config interface GigabitEthernet0/1  description COX Communications 10 Meg to Venyu  bandwidth 20480  ip address 172.20.1.2 255.255.255.252  duplex auto  speed auto  service-policy output VOIP ! interface GigabitEthernet0/2  description Level 3 MPLS  bandwidth 10240  ip address 172.22.1.2 255.255.255.252  duplex full  speed 100   router eigrp 1  network 10.3.1.0 0.0.0.31  network 10.52.1.0 0.0.0.255  network 10.76.6.0 0.0.0.255  network 172.20.1.0 0.0.0.3  network 192.168.63.64 0.0.0.63  network 192.168.76.249 0.0.0.0  passive-interface default  no passive-interface GigabitEthernet0/0  no passive-interface GigabitEthernet0/1 ! router bgp 65003  bgp log-neighbor-changes  network 10.3.1.0 mask 255.255.255.224  network 10.52.1.0 mask 255.255.255.0  network 10.76.6.0 mask 255.255.255.0  network 192.168.76.249 mask 255.255.255.255  neighbor 172.22.1.1 remote-as 1     ... View more

Below is the config I have setup in my lab and it works great with allowing me to influence which path inbound traffic takes to my network.  The only question I have is this.....     I am prepending the AS with "1 1 1"  which are just random numbers i chose.  Do I have to use legitimate AS numbers when prepending or can I just pick random numbers?  Also, would i have to discuss this with my ISP? Config Below:     interface FastEthernet0/0  ip address 1.1.1.1 255.255.255.0  duplex auto  speed auto ! interface FastEthernet0/1  ip address 67.67.25.10 255.255.255.0  duplex auto  speed auto  standby 1 ip 67.67.25.1  standby 1 priority 99 ! router bgp 5500  no synchronization  bgp log-neighbor-changes  network 1.1.1.0 mask 255.255.255.0  network 67.67.25.0 mask 255.255.255.0  neighbor 1.1.1.2 remote-as 3000  neighbor 1.1.1.2 route-map PREPEND out  neighbor 67.67.65.11 remote-as 5500  no auto-summary !          i !         !          route-map PREPEND permit 10  set as-path prepend 1 1 1 ... View more