Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About feisalb
11-16-2018
Stats
Member since
10-13-2004
196
Posts
8
Helpful
0
Solutions
09-27-2017
08:13 AM
Hello Cameron I read the title again and I think we are stuck in the same place. I need to upgrade CME to 12.0 from 11.6 to run 8821 phones natively but my CUE is running 8.6.12. Cisco's CUE compatability matrix goes as far as 11.7 in Table 5 but does not mention 12 any where so I don't know if I can use CME 12 https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/unity_exp/compatibility/cuecomp.html I have opened a PDI case and awaiting a definite answer. Thanks Feisal
... View more
09-27-2017
07:54 AM
Hello Cameron IOS 15.7M is compatible with CME 12.0. You will need to copy the ios on to the routers flash. If you have enough flash memory you can have both the current and new ios in flash and then boot of whichever ios you prefer. With every version of CME you need a new install the correct GUI version. You will also need to check phone firmware to see if it is compatible,If not then you will need install that in flash and use the load command under telephony-service. Some useful urls. https://www.cisco.com/c/en/us/support/unified-communications/unity-express/products-installation-guides-list.html https://www.cisco.com/c/en/us/support/unified-communications/unified-communications-manager-express/products-device-support-tables-list.html https://smbitsolutions.files.wordpress.com/2011/05/cucme-10-step-to-configure-cisco-call-manager-express.pdf Documentation needs updating by Cisco as it doesn't include cme 12.0 Thanks Feisal
... View more
Created by
feisalb
in IP Telephony and Phones
in IP Telephony and Phones
06-26-2017
03:11 AM
06-26-2017
03:11 AM
Hello All
I am planning to upgrade a customers CME/CUE from 8.6.6 to 8.6.12 so that they can support the new phone model 7841 and 8821.
I have downloaded the cue-vm-k9.SPA.sme.8.6.12.zip and cue-vm-en_GB-langpack.sme.8.6.12.prt1.
The zip file consist of these files:
cue-installer.SPA.sme.8.6.12
cue-vm-full-k9.SPA.sme.8.6.12.prt1
cue-vm-installer-k9.SPA.sme.8.6.12.prt1
cue-vm-k9.SPA.sme.8.6.12.key
cue-vm-k9.SPA.sme.8.6.12.pkg
cue-vm-k9.SPA.sme.8.6.12.pkg.install.sre
cue-vm-k9.SPA.sme.8.6.12.pkg.install.sre.header
cue-vm-langpack.sme.8.6.12.pkg
url to the upgrade guide http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/unity_exp/rel8_6/install/CUE_86_install/upgrade.html#wp1152667
And instructions state for a staged install:
Step 5 Copy the core files and the language package file to the FTP server.
"To install the package directly from the FTP without downloading the package before installing it, use the software install upgrade url ftp://ftp_server_ip_address/software install upgrade cue-vm-k9.nmx.pkg command."
My question are:
1 Do I need to install all the above files or is it just the "cue-vm-k9.SPA.sme.8.6.12.pkg". (I know I will need to install the langpack seperately) 2 Once I have downloaded and upgraded 8.6.12 how do I restore the previous version if I need to revert back.
Thanks
Feisal
... View more
Labels:
11-23-2016
03:51 AM
Hello All
I have a customer network that has vlan based qos on the network. On the access switches they have MQC configured and the service policy
on the vlan interface. They have mls qos vlan based command on the access ports but not on any of the trunk interfaces that are in the network.
There are 2 switches between the access switch and the connection to the layer 3 device.
I have currently configured mls qos trust dscp on the trunk interface along the path to the layer 3 device. Should I change this to mls qos vlan based on the trunks? The command wasn't there before so I didn't change it as Cisco phones where working.
This all came about as we had skype for business testing within a singe switch and vlan and we could see in wireshark that packets were being marked by the pc on egress but the receiving pc was seeing the incoming marking as dscp 0. To get it to work I change the port from vlan based to mls qos trust dscp and the port was in a trust state. I don't want to do this unless necessary but why would vlan based config change dscp to 0?
interface FastEthernet0/47 description *** switchport access vlan 628 switchport mode access switchport voice vlan 728 speed 100 duplex full queue-set 2 priority-queue out mls qos trust device cisco-phone mls qos vlan-based no snmp trap link-status spanning-tree portfast
interface FastEthernet0/33 switchport access vlan 628 switchport mode access switchport voice vlan 728 speed 100 duplex full queue-set 2 priority-queue out mls qos vlan-based no snmp trap link-status spanning-tree portfas
interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 328,628,728,928 switchport mode trunk ip arp inspection trust priority-queue out mls qos trust dscp ip dhcp snooping trust
interface Vlan628 no ip address service-policy input DATA-QOS ! interface Vlan728 no ip address service-policy input PHONE-QOS
class-map match-all DVLAN-any match access-group 161 class-map match-all SK4B_SIP_Signalling match ip dscp cs3 class-map match-all VVLAN-any match access-group 161 class-map match-any voice-control match ip dscp cs3 af31 af32 af33 class-map match-all Finesse match ip dscp af31 class-map match-all SK4B_SharedContent match ip dscp af21 class-map match-all SK4B_Video match ip dscp af41 class-map match-all SK4B_Audio match ip dscp ef class-map match-all voice match ip dscp ef class-map match-all DATA-CTIos match access-group 160 ! ! policy-map PHONE-QOS class voice set dscp ef class voice-control set dscp af31 class VVLAN-any set dscp default policy-map DATA-QOS class DATA-CTIos set dscp af31 class DVLAN-any set dscp default class SK4B_Audio set dscp ef class SK4B_Video set dscp af41 class SK4B_SIP_Signalling set dscp cs3 class SK4B_SharedContent set dscp af21 class Finesse set dscp af31
Thanks for you assistance
Feisal
... View more
Labels:
02-10-2016
04:22 AM
Hello Carlo
Double checked and it seems the language cop file is only on the pub and not the sub. So you are correct.
I will update once we have managed to load the file on.
Thanks
Feisal
... View more
02-10-2016
03:24 AM
Hello All
I have reset all the servers in the cluster and still get the same issue.
I reverted back to the US language and it works fine now. (God bless America ;) )
The UK eng locale is on both servers so that doesn't seem to be the problem.
Looking at the 10.x system requirements it states:
in the Cisco Unity Connection 10.x Supported Platforms List .
The Unity Connection cluster feature is not supported for use with Cisco Business Edition
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/connection/10x/requirements/10xcucsysreqs.html
Seems to work if you have US eng language.
Thanks
Feisal
... View more
02-09-2016
10:05 AM
Sorry, this is a sip integration.
I have collected the traces connection conversation manager from both devices.
sub -secondary is the one that fails and has ports 25 to 48
Thanks
Feisal
... View more
Created by
feisalb
in IP Telephony and Phones
in IP Telephony and Phones
02-09-2016
05:31 AM
02-09-2016
05:31 AM
Hello All
I am running cuc cluster 10.5 on be6k
I recently enabled a UK locale as a default locale and then stopped the "conversation manager and connection mixer services on both the primary (sub) and secondary (pub). After doing this I tried to ring the vm pilot and got a message saying "temporarily out of service". I tried this immediately
after and it connected to CUC. So every other call to unity fails.
I rebooted both servers and got the same result.
I changed the primary to pub and secondary to sub. Changed the route list on cucm to reflect this. Changed the order of the ports so that the the 1st 24 ports where the pub and the 2nd 24 as the sub
This did not make a difference. If I "stop taking calls" from the cluster management page so that only the primary (pub) is taking calls it works fine.
If I reverse this and the secondary (sub) is taking calls and the primary (pub) has stopped taking calls then calls unity fail.
Critical services are always activated on whichever box is the primary with the seconday only having the converstion manager and notifer active.
The only way of getting the user to succesfully get to unity is to stop taking calls on the subscriber so that the publisher is the only one active.
All ports are are configured to anser call, mwi and trap.
Any ideas why the subscriber will not take calls?
Thanks
Feisal
... View more
Labels:
05-30-2015
12:49 PM
Hello All I have created a dynamic vpn over a 4G in a 1921 router and established a lan to lan tunnel. The peer with the dynamic peer initiates traffic. Once the tunnel is up I can't telnet to the subinterface albiet I can ping the destination. I can't even do this from a loopback on the vpn gateway. When I try to ping from a host behind a firewall, it fails until the remote end pings the host first and then the host can ping the remote end although the tunnel has already been established. It seems like all incoming traffic is being denied when the tunnel is up unless the remote end has initiated the communication. I have posted my config below. The support guys want to RDP to the devices but that is being denied. Do you think it could be the 4g service provider.causing the issue? chat-script lte "" "AT!CALL" TIMEOUT 60 "OK" cts logging verbose ! crypto pki trustpoint TP-self-signed-133751086 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-133751086 revocation-check none rsakeypair TP-self-signed-133751086 controller Cellular 0/0 lte modem link-recovery rssi onset-threshold -110 lte modem link-recovery monitor-timer 20 lte modem link-recovery wait-timer 10 lte modem link-recovery debounce-count 6 ! ! crypto keyring KR-21SCHO_DYNA_1 description Footwear VPN TO RUNCORN RTR-A pre-shared-key address x.x.x.x key <> ! rypto isakmp policy 1 encr 3des authentication pre-share group 2 crypto isakmp profile ISAKMP-21SCHO_DYNA_1 description Footwear VPN TO RTR-A keyring KR-21SCHO_DYNA_1 match identity address x.x.x.x 255.255.255.255 keepalive 10 retry 2 crypto ipsec security-association replay window-size 1024 ! crypto ipsec transform-set TUN-ESP-3DES-MD5 esp-3des esp-md5-hmac mode tunnel crypto ipsec transform-set TUN-ESP-AES-SHA256 esp-aes esp-sha256-hmac mode tunnel crypto map VPN_CRYPTO 10 ipsec-isakmp description VPN TO RUNCORN RTR-A set peer x.x.x.x set transform-set TUN-ESP-3DES-MD5 TUN-ESP-AES-SHA256 set isakmp-profile ISAKMP-21SCHO_DYNA_1 match address VPNACL-21SCHO_DYNA_1 interface GigabitEthernet0/0.1 encapsulation dot1Q 1 native ! interface GigabitEthernet0/0.318 description Client VLAN encapsulation dot1Q 318 ip address 10.108.26.1 255.255.255.0 ip helper-address 10.251.120.141 ip helper-address 10.251.120.142 ! interface GigabitEthernet0/0.319 description Management VLAN encapsulation dot1Q 319 ip address 10.108.28.1 255.255.255.0 ! interface GigabitEthernet0/0.320 description WIFI_CORP VLAN encapsulation dot1Q 320 ip address 10.108.29.1 255.255.255.0 ip helper-address 10.251.120.141 ip helper-address 10.251.120.142 ! interface GigabitEthernet0/0.321 description WIFI_GUEST VLAN encapsulation dot1Q 321 ip address 10.108.30.1 255.255.255.0 ip helper-address 10.251.120.141 ip helper-address 10.251.120.142 ! interface GigabitEthernet0/0.330 description TRANSIT VLAN TO CONVERGENCE DSL encapsulation dot1Q 330 ip address 10.108.31.1 255.255.255.240 ! interface GigabitEthernet0/1 no ip address duplex auto speed auto no keepalive ! interface Cellular0/0/0 ip address negotiated encapsulation slip dialer in-band dialer string lte dialer-group 1 crypto map VPN_CRYPTO ! ip forward-protocol nd ! ip http server ip http access-class 23 ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ! ip nat inside source list NAT interface Cellular0/0/0 overload ip route 0.0.0.0 0.0.0.0 Cellular0/0/0 250 ! ip access-list extended NAT permit ip 10.108.0.0 0.0.255.255 any ip access-list extended VPNACL-21SCHO_DYNA_1 remark VPN TO RUNCORN permit ip 10.108.24.0 0.0.7.255 10.251.0.0 0.0.255.255 permit ip 10.108.24.0 0.0.7.255 199.23.10.0 0.0.0.255 permit ip 10.108.24.0 0.0.7.255 129.18.140.64 0.0.0.31 permit ip 10.108.24.0 0.0.7.255 94.12.98.64 0.0.0.31 permit ip 10.108.24.0 0.0.7.255 92.7.18.48 0.0.0.15 permit ip 10.108.32.0 0.0.7.255 10.251.0.0 0.0.255.255 permit ip 10.108.32.0 0.0.7.255 199.23.10.0 0.0.0.255 permit ip 10.108.32.0 0.0.7.255 129.18.140.64 0.0.0.31 permit ip 10.108.32.0 0.0.7.255 94.12.98.64 0.0.0.31 permit ip 10.108.32.0 0.0.7.255 92.7.18.48 0.0.0.15 permit ip 10.108.40.0 0.0.7.255 10.251.0.0 0.0.255.255 permit ip 10.108.40.0 0.0.7.255 199.23.10.0 0.0.0.255 permit ip 10.108.40.0 0.0.7.255 129.18.140.64 0.0.0.31 permit ip 10.108.40.0 0.0.7.255 94.12.98.64 0.0.0.31 permit ip 10.108.40.0 0.0.7.255 92.7.18.48 0.0.0.15 permit ip 10.108.48.0 0.0.7.255 10.251.0.0 0.0.255.255 permit ip 10.108.48.0 0.0.7.255 199.23.10.0 0.0.0.255 permit ip 10.108.48.0 0.0.7.255 129.18.140.64 0.0.0.31 permit ip 10.108.48.0 0.0.7.255 94.12.98.64 0.0.0.31 permit ip 10.108.48.0 0.0.7.255 92.7.18.48 0.0.0.15 permit ip 10.108.56.0 0.0.7.255 10.251.0.0 0.0.255.255 permit ip 10.108.56.0 0.0.7.255 199.23.10.0 0.0.0.255 permit ip 10.108.56.0 0.0.7.255 129.18.140.64 0.0.0.31 permit ip 10.108.56.0 0.0.7.255 94.12.98.64 0.0.0.31 permit ip 10.108.56.0 0.0.7.255 92.7.18.48 0.0.0.15 permit ip 10.108.24.0 0.0.7.255 10.255.251.0 0.0.0.255 permit ip 10.108.32.0 0.0.7.255 10.255.251.0 0.0.0.255 permit ip 10.108.40.0 0.0.7.255 10.255.251.0 0.0.0.255 permit ip 10.108.48.0 0.0.7.255 10.255.251.0 0.0.0.255 permit ip 10.108.56.0 0.0.7.255 10.255.251.0 0.0.0.255 ! dialer-list 1 protocol ip permit ! ! ! control-plane ! ! banner exec ^C ^C ! line con 0 login local line aux 0 line 2 no activation-character no exec transport preferred none transport output pad telnet rlogin lapb-ta mop udptn v120 ssh stopbits 1 line 0/0/0 script dialer lte no exec rxspeed 100000000 txspeed 50000000 line vty 0 4 privilege level 15 login local transport input all line vty 5 15 privilege level 15 login local transport input telnet ssh ! scheduler allocate 20000 1000 ! end FRA-MAS-4G-RTR# ! I can't see anything in the configuration that would cause the above scenario. Ping to all remote devices works but nothing else does. Any help is greatly appreciated as I can't manage the routers or switches on the remote end. Thanks Feisal
... View more
Labels:
05-29-2015
10:49 PM
Fixed by adding a permanent static route to the icmp echo target. Thanks for your response Feisal
... View more
05-26-2015
12:42 PM
Hello All I am trying to run ip sla on a cisco 1921 router on ver 15.4(3)M1. This is the config and the routing table. Once I configure "ip route 10.251.120.141 255.255.255.255 10.108.47.2 track 1" it seems that the ip sla starts to kicking and makes the dialer 1 the route for this host (10.251.120.141) and this never comes points back to the original gateway 10.108.47.2 Running config is: track 1 ip sla 1 reachability ip route 10.251.120.141 255.255.255.255 10.108.47.2 track 1 ip route 0.0.0.0 0.0.0.0 10.108.47.2 ip route 10.251.113.1 255.255.255.255 10.108.47.2 ip route 10.251.120.141 255.255.255.255 Dialer1 250 ip sla 1 icmp-echo 10.251.120.141 source-ip 10.108.42.1 timeout 10000 frequency 15 ip sla schedule 1 life forever start-time now S* 0.0.0.0/0 is directly connected 10.0.0.0/8 is variably subnetted, 14 subnets, 3 masks C 10.32.240.0/28 is directly connected, GigabitEthernet0/0.301 L 10.32.240.1/32 is directly connected, GigabitEthernet0/0.301 C 10.108.42.0/24 is directly connected, GigabitEthernet0/0.318 L 10.108.42.1/32 is directly connected, GigabitEthernet0/0.318 C 10.108.44.0/24 is directly connected, GigabitEthernet0/0.319 L 10.108.44.1/32 is directly connected, GigabitEthernet0/0.319 C 10.108.45.0/24 is directly connected, GigabitEthernet0/0.320 L 10.108.45.1/32 is directly connected, GigabitEthernet0/0.320 C 10.108.46.0/24 is directly connected, GigabitEthernet0/0.321 L 10.108.46.1/32 is directly connected, GigabitEthernet0/0.321 C 10.108.47.0/28 is directly connected, GigabitEthernet0/0.330 L 10.108.47.1/32 is directly connected, GigabitEthernet0/0.330 S 10.251.113.1/32 [1/0] via 10.108.47.2 S 10.251.120.141/32 is directly connected, Dialer1 <------ 150.101.0.0/32 is subnetted, 1 subnets C 150.101.32.44 is directly connected, Dialer1 203.206.184.0/32 is subnetted, 1 subnets C 203.206.184.247 is directly connected, Dialer1 Any ideas on how to fix this. Thank Feisal
... View more
Labels:
Created by
feisalb
in VPN and AnyConnect
in VPN and AnyConnect
04-27-2015
09:06 AM
04-27-2015
09:06 AM
Hello All
I have a customer that has several sites all over the world and they want to use 3G and possibly 4G (where available) as a backup vpn solution.
I need some assistance/ guidance in configuring the cellular radio and configuring the vpn (dynamic ip)to work over the wwan.
Countries involved are France, Spain, Australia, Thailand and Malaysia.
I understand that I will need the APN credentials from the service provider. Is this normally the same for 3g and 4g?
Do I get chat scripts from them too?
My vpn gateway in the HQ is a Cisco multi-context asa so I can't configure remote access as its not supported yet. Can I possibly use the 1921 router(4lte hwic installed) at the sites as a hardware client?
I have seen the following urls. One has the 3g router as a "remote access" vpn but I guess this won't work in my scenario.
The other is between ios router and asa which I think will work. I don't need nat on the 3g/4g router as all traffic will be using the vpn.
http://www.networking-forum.com/blog/?p=708 . Will I need this for all the sub-interfaces I configure on the router
interface Vlan1
description LAN
ip address 10.0.0.14 255.255.255.240
no ip redirects
no ip proxy-arp
ip tcp adjust-mss 1452
crypto ipsec client ezvpn ASA inside <--is this needed per interface????
Remote access reference in config:
group-policy 3GPolicy attributes
vpn-tunnel-protocol IPSec
password-storage enable
nem enable
tunnel-group 3GRAGroup type remote-access <---Remote access config
tunnel-group 3GRAGroup general-attributes
authorization-server-group LOCAL
default-group-policy 3GPolicy
tunnel-group 3GRAGroup ipsec-attributes
pre-shared-key **Same key as the ASA profile on the 881**
!
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/112075-dynamic-ipsec-asa-router-ccp.html
Anyone got a helpful configuration and guide?
Thanks
Feisal
... View more
Labels:
Created by
feisalb
in VPN and AnyConnect
in VPN and AnyConnect
04-27-2015
09:05 AM
04-27-2015
09:05 AM
Hello All
I have a customer that has several sites all over the world and they want to use 3G and possibly 4G (where available) as a backup vpn solution.
I need some assistance/ guidance in configuring the cellular radio and configuring the vpn (dynamic ip)to work over the wwan.
Countries involved are France, Spain, Australia, Thailand and Malaysia.
I understand that I will need the APN credentials from the service provider. Is this normally the same for 3g and 4g?
Do I get chat scripts from them too?
My vpn gateway in the HQ is a Cisco multi-context asa so I can't configure remote access as its not supported yet. Can I possibly use the 1921 router(4lte hwic installed) at the sites as a hardware client?
I have seen the following urls. One has the 3g router as a "remote access" vpn but I guess this won't work in my scenario.
The other is between ios router and asa which I think will work. I don't need nat on the 3g/4g router as all traffic will be using the vpn.
http://www.networking-forum.com/blog/?p=708 . Will I need this for all the sub-interfaces I configure on the router
interface Vlan1
description LAN
ip address 10.0.0.14 255.255.255.240
no ip redirects
no ip proxy-arp
ip tcp adjust-mss 1452
crypto ipsec client ezvpn ASA inside <--is this needed per interface????
Remote access reference in config:
group-policy 3GPolicy attributes
vpn-tunnel-protocol IPSec
password-storage enable
nem enable
tunnel-group 3GRAGroup type remote-access <---Remote access config
tunnel-group 3GRAGroup general-attributes
authorization-server-group LOCAL
default-group-policy 3GPolicy
tunnel-group 3GRAGroup ipsec-attributes
pre-shared-key **Same key as the ASA profile on the 881**
!
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/112075-dynamic-ipsec-asa-router-ccp.html
Anyone got a helpful configuration and guide?
Thanks
Feisal
... View more
Labels:
09-27-2017
Hello Cameron I read the title again and I think we are stuck in the
same place.I need to upgrade CM...
09-27-2017
Hello Cameron IOS 15.7M is compatible with CME 12.0.You will need to
copy the ios on to the routers ...
06-26-2017
Hello All I am planning to upgrade a customers CME/CUE from 8.6.6 to
8.6.12 so that they can support...
11-23-2016
Hello All I have a customer network that has vlan based qos on the
network. On the access switches t...
02-10-2016
Hello Carlo Double checked and it seems the language cop file is only on
the pub and not the sub. So...
02-10-2016
Hello All I have reset all the servers in the cluster and still get the
same issue. I reverted back ...
02-09-2016
Sorry, this is a sip integration. I have collected the traces connection
conversation manager from b...
Created by
feisalb
in IP Telephony and Phones
02-09-2016
02-09-2016
Hello All I am running cuc cluster 10.5 on be6k I recently enabled a UK
locale as a default locale a...
05-29-2015
Fixed by adding a permanent static route to the icmp echo target.Thanks
for your responseFeisal
04-27-2015
Hello All I have a customer that has several sites all over the world
and they want to use 3G and po...
Public Statistics
| Date Registered | 10-13-2004 01:53 AM |
| Date Last Visited | 11-16-2018 09:33 AM |
| Total Messages Posted | 196 |
| Total Helpful Votes Received | 8 |
.jpg "Hall of Fame Master"){kind=icon}
