Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Lionel271
Stats
Member since
07-23-2010
17
Posts
0
Helpful
0
Solutions
08-22-2019
07:38 AM
Thank you, Giuseppe. In fact, they do not exist. These attributes are from a different setup. I have created them now and assigned the IP address to the Loopback instead of the client interface. I will test again tomorrow as the router is at a different site and I need to cable into the router. AAA authentication test works in either case (whether Loopback/pool exists or not): #test aaa group radius pppoetest@myrealm test new-code
User successfully authenticated
USER ATTRIBUTES
Framed-Protocol 0 1 [PPP]
addr 0 255.255.255.254
netmask 0 255.255.255.255
Framed-MTU 0 1452 (0x5AC)
link-compression 0 4 [vj]
service-type 0 2 [Framed]
timeout 0 86400 (0x15180)
idletime 0 86400 (0x15180)
acct-interval 0 3600 (0xE10)
ip-unnumbered 0 "Loopback1245"
addr-pool 0 "ippool1"
dns-servers 0 "172.16.152.2 10.1.166.127"
noescape 0 True
autocmd 0 " ppp negotiate"
... View more
08-22-2019
06:51 AM
I have the following PPPoE configuration on a router: aaa new-model
!
aaa authentication ppp default group radius
aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa accounting delay-start
aaa accounting dot1x default start-stop group radius
aaa accounting network default start-stop group radius
!
aaa session-id common
!
bba-group pppoe global
virtual-template 1
interface GigabitEthernet0/1/0
description PPPoE
ip address 172.16.153.1 255.255.255.252
ip rip advertise 4
load-interval 30
duplex auto
speed auto
pppoe enable group global
!
interface Virtual-Template1
mtu 1492
ip unnumbered GigabitEthernet0/1/0
peer default ip address pool CLIENT
ppp authentication pap chap
!
ip local pool CLIENT 172.16.153.129 172.16.153.254
!
radius-server attribute 6 on-for-login-auth
radius-server attribute nas-port-id include vendor-class-id plus remote-id plus circuit-id
!
radius server radius1
address ipv4 172.16.152.190 auth-port 1812 acct-port 1813
key 7 myserverkey
!
radius server radius2
address ipv4 10.1.115.183 auth-port 1812 acct-port 1813
key 7 myserverkey
! I am trying to authenticate with PPPoE using a computer plugged into GigabitEthernet0/1/0 (Windows 10). My credentials are rejected, even though the RADIUS server passes an Access-Accept method and the router seems to recognize it: *Aug 22 10:23:53.130: Service tag: NULL Tag
*Aug 22 10:23:53.130: PPPoE : encap string prepared
contiguous pak, size 20
*Aug 22 10:23:53.130: [11]PPPoE 11: Access IE handle allocated
*Aug 22 10:23:53.130: [11]PPPoE 11: AAA get retrieved attrs
*Aug 22 10:23:53.130: [11]PPPoE 11: AAA get nas port details
*Aug 22 10:23:53.130: [11]PPPoE 11: Error adjusting nas port format did
*Aug 22 10:23:53.130: AAA/BIND(0001703E): Bind i/f Virtual-Template1
*Aug 22 10:23:53.130: [11]PPPoE 11: AAA get dynamic attrs
*Aug 22 10:23:53.130: [11]PPPoE 11: AAA unique ID 1703E allocated
*Aug 22 10:23:53.130: [11]PPPoE 11: AAA method list set
*Aug 22 10:23:53.134: [11]PPPoE 11: Service request sent to SSS
*Aug 22 10:23:53.134: [11]PPPoE 11: Created, Service: None R:aaaa.bbbb.b8c0 L:aaaa.bbbb.6343 Gi0/1/0
*Aug 22 10:23:53.134: [11]PPPoE 11: State NAS_PORT_POLICY_INQUIRY Event SSS MORE KEYS
*Aug 22 10:23:53.134: PPP: Alloc Context [18E79F0]
*Aug 22 10:23:53.134: ppp11 PPP: Phase is ESTABLISHING
*Aug 22 10:23:53.134: [11]PPPoE 11: data path set to PPP
*Aug 22 10:23:53.134: [11]PPPoE 11: Segment (SSS class): PROVISION
*Aug 22 10:23:53.134: [11]PPPoE 11: State PROVISION_PPP Event SSM PROVISIONED
*Aug 22 10:23:53.134: [11]PPPoE 11: O PADS R:aaaa.bbbb.6343 L:aaaa.bbbb.b8c0 Gi0/1/0
contiguous pak, size 60
*Aug 22 10:23:53.134: ppp11 PPP: Using vpn set call direction
*Aug 22 10:23:53.134: ppp11 PPP: Treating connection as a callin
*Aug 22 10:23:53.134: ppp11 PPP: Session handle[A300000B] Session id[11]
*Aug 22 10:23:53.134: ppp11 LCP: Event[OPEN] State[Initial to Starting]
*Aug 22 10:23:53.134: ppp11 PPP LCP: Enter passive mode, state[Stopped]
*Aug 22 10:23:53.154: ppp11 LCP: I CONFREQ [Stopped] id 0 len 21
*Aug 22 10:23:53.154: ppp11 LCP: MRU 1480 (0x010405C8)
*Aug 22 10:23:53.154: ppp11 LCP: MagicNumber 0x6C6B106A (0x05066C6B106A)
*Aug 22 10:23:53.154: ppp11 LCP: PFC (0x0702)
*Aug 22 10:23:53.154: ppp11 LCP: ACFC (0x0802)
*Aug 22 10:23:53.154: ppp11 LCP: Callback 6 (0x0D0306)
*Aug 22 10:23:53.154: ppp11 LCP: O CONFREQ [Stopped] id 1 len 18
*Aug 22 10:23:53.154: ppp11 LCP: MRU 1492 (0x010405D4)
*Aug 22 10:23:53.154: ppp11 LCP: AuthProto PAP (0x0304C023)
*Aug 22 10:23:53.154: ppp11 LCP: MagicNumber 0x44BA631C (0x050644BA631C)
*Aug 22 10:23:53.154: ppp11 LCP: O CONFREJ [Stopped] id 0 len 7
*Aug 22 10:23:53.154: ppp11 LCP: Callback 6 (0x0D0306)
*Aug 22 10:23:53.154: ppp11 LCP: Event[Receive ConfReq-] State[Stopped to REQsent]
*Aug 22 10:23:53.190: ppp11 LCP: I CONFACK [REQsent] id 1 len 18
*Aug 22 10:23:53.190: ppp11 LCP: MRU 1492 (0x010405D4)
*Aug 22 10:23:53.190: ppp11 LCP: AuthProto PAP (0x0304C023)
*Aug 22 10:23:53.190: ppp11 LCP: MagicNumber 0x44BA631C (0x050644BA631C)
*Aug 22 10:23:53.190: ppp11 LCP: Event[Receive ConfAck] State[REQsent to ACKrcvd]
*Aug 22 10:23:53.190: ppp11 LCP: I CONFREQ [ACKrcvd] id 1 len 18
*Aug 22 10:23:53.190: ppp11 LCP: MRU 1480 (0x010405C8)
*Aug 22 10:23:53.190: ppp11 LCP: MagicNumber 0x6C6B106A (0x05066C6B106A)
*Aug 22 10:23:53.190: ppp11 LCP: PFC (0x0702)
*Aug 22 10:23:53.190: ppp11 LCP: ACFC (0x0802)
*Aug 22 10:23:53.190: ppp11 LCP: O CONFNAK [ACKrcvd] id 1 len 8
*Aug 22 10:23:53.190: ppp11 LCP: MRU 1492 (0x010405D4)
*Aug 22 10:23:53.190: ppp11 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]
*Aug 22 10:23:53.198: ppp11 LCP: I CONFREQ [ACKrcvd] id 2 len 18
*Aug 22 10:23:53.198: ppp11 LCP: MRU 1480 (0x010405C8)
*Aug 22 10:23:53.198: ppp11 LCP: MagicNumber 0x6C6B106A (0x05066C6B106A)
*Aug 22 10:23:53.198: ppp11 LCP: PFC (0x0702)
*Aug 22 10:23:53.198: ppp11 LCP: ACFC (0x0802)
*Aug 22 10:23:53.198: ppp11 LCP: O CONFNAK [ACKrcvd] id 2 len 8
*Aug 22 10:23:53.198: ppp11 LCP: MRU 1492 (0x010405D4)
*Aug 22 10:23:53.198: ppp11 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]
*Aug 22 10:23:53.202: ppp11 LCP: I CONFREQ [ACKrcvd] id 3 len 18
*Aug 22 10:23:53.202: ppp11 LCP: MRU 1492 (0x010405D4)
*Aug 22 10:23:53.202: ppp11 LCP: MagicNumber 0x6C6B106A (0x05066C6B106A)
*Aug 22 10:23:53.202: ppp11 LCP: PFC (0x0702)
*Aug 22 10:23:53.202: ppp11 LCP: ACFC (0x0802)
*Aug 22 10:23:53.202: ppp11 LCP: O CONFACK [ACKrcvd] id 3 len 18
*Aug 22 10:23:53.202: ppp11 LCP: MRU 1492 (0x010405D4)
*Aug 22 10:23:53.202: ppp11 LCP: MagicNumber 0x6C6B106A (0x05066C6B106A)
*Aug 22 10:23:53.202: ppp11 LCP: PFC (0x0702)
*Aug 22 10:23:53.202: ppp11 LCP: ACFC (0x0802)
*Aug 22 10:23:53.202: ppp11 LCP: Event[Receive ConfReq+] State[ACKrcvd to Open]
*Aug 22 10:23:53.206: ppp11 LCP: I IDENTIFY [Open] id 4 len 18 magic 0x6C6B106AMSRASV5.20
*Aug 22 10:23:53.206: ppp11 LCP: I IDENTIFY [Open] id 5 len 31 magic 0x6C6B106AMSRAS-0-DESKTOP-0D1C4OS
*Aug 22 10:23:53.206: ppp11 LCP: I IDENTIFY [Open] id 6 len 24 magic 0x6C6B106A:TKbbJ,I*+RB_\$_
*Aug 22 10:23:53.210: ppp11 PPP: Queue PAP code[1] id[37]
*Aug 22 10:23:53.226: ppp11 PPP: Phase is AUTHENTICATING, by this end
*Aug 22 10:23:53.226: ppp11 PAP: Redirect packet to ppp11
*Aug 22 10:23:53.226: ppp11 PAP: I AUTH-REQ id 37 len 35 from "pppoetest@myrealm"
*Aug 22 10:23:53.226: ppp11 PAP: Authenticating peer pppoetest@myrealm
*Aug 22 10:23:53.226: ppp11 PPP: Phase is FORWARDING, Attempting Forward
*Aug 22 10:23:53.226: ppp11 LCP: State is Open
*Aug 22 10:23:53.226: ppp11 PPP: Phase is AUTHENTICATING, Unauthenticated User
*Aug 22 10:23:53.226: AAA/AUTHEN/PPP (0001703E): Pick method list 'default'
*Aug 22 10:23:53.226: ppp11 PPP: Sent PAP LOGIN Request
*Aug 22 10:23:53.226: RADIUS/ENCODE(0001703E):Orig. component type = PPPoE
*Aug 22 10:23:53.226: RADIUS: DSL line rate attributes successfully added
*Aug 22 10:23:53.226: RADIUS(0001703E): Config NAS IP: 0.0.0.0
*Aug 22 10:23:53.226: RADIUS(0001703E): Config NAS IPv6: ::
*Aug 22 10:23:53.226: RADIUS/ENCODE(0001703E): acct_session_id: 94260
*Aug 22 10:23:53.226: RADIUS(0001703E): sending
*Aug 22 10:23:53.226: RADIUS/ENCODE: Best Local IP-Address 172.16.152.1 for Radius-Server 172.16.152.190
*Aug 22 10:23:53.226: RADIUS(0001703E): Send Access-Request to 172.16.152.190:1812 id 1645/11, len 145
*Aug 22 10:23:53.226: RADIUS: authenticator 40 B1 36 F0 2D 32 66 89 - 73 26 DA 6D 62 C5 84 75
*Aug 22 10:23:53.226: RADIUS: Framed-Protocol [7] 6 PPP [1]
*Aug 22 10:23:53.226: RADIUS: User-Name [1] 27 "pppoetest@myrealm"
*Aug 22 10:23:53.226: RADIUS: User-Password [2] 18 *
*Aug 22 10:23:53.226: RADIUS: NAS-Port-Type [61] 6 Virtual [5]
*Aug 22 10:23:53.226: RADIUS: NAS-Port [5] 6 0
*Aug 22 10:23:53.226: RADIUS: NAS-Port-Id [87] 9 "0/0/1/0"
*Aug 22 10:23:53.226: RADIUS: Vendor, Cisco [26] 41
*Aug 22 10:23:53.226: RADIUS: Cisco AVpair [1] 35 "client-mac-address=aaaa.bbbb.6343"
*Aug 22 10:23:53.226: RADIUS: Service-Type [6] 6 Framed [2]
*Aug 22 10:23:53.226: RADIUS: NAS-IP-Address [4] 6 172.16.152.1
*Aug 22 10:23:53.226: RADIUS(0001703E): Sending a IPv4 Radius Packet
*Aug 22 10:23:53.226: RADIUS(0001703E): Started 5 sec timeout
*Aug 22 10:23:53.274: AAA/BIND(0001703F): Bind i/f
*Aug 22 10:23:53.274: AAA/AUTHEN/LOGIN (0001703F): Pick method list ' Permanent Local'
*Aug 22 10:23:53.446: AAA/AUTHEN/LOGIN (0001703C): Pick method list ' Permanent Local'
*Aug 22 10:23:53.558: RADIUS: Received from id 1645/11 172.16.152.190:1812, Access-Accept, len 195
*Aug 22 10:23:53.558: RADIUS: authenticator 53 ED 22
*Aug 22 10:23:53.558: RADIUS: Framed-Protocol [7] 6 PPP [1]
*Aug 22 10:23:53.558: RADIUS: Framed-Compression [13] 6 VJ TCP/IP Header Compressi[1]
*Aug 22 10:23:53.558: RADIUS: Framed-IP-Address [8] 6 255.255.255.254
*Aug 22 10:23:53.558: RADIUS: Framed-IP-Netmask [9] 6 255.255.255.255
*Aug 22 10:23:53.558: RADIUS: Framed-MTU [12] 6 1452
*Aug 22 10:23:53.558: RADIUS: Service-Type [6] 6 Framed [2]
*Aug 22 10:23:53.558: RADIUS: Session-Timeout [27] 6 86400
*Aug 22 10:23:53.558: RADIUS: Idle-Timeout [28] 6 86400
*Aug 22 10:23:53.558: RADIUS: Acct-Interim-Interva[85] 6 3600
*Aug 22 10:23:53.558: RADIUS: Vendor, Cisco [26] 37
*Aug 22 10:23:53.558: RADIUS: Cisco AVpair [1] 31 "ip:ip-unnumbered=Loopback1245"
*Aug 22 10:23:53.558: RADIUS: Vendor, Cisco [26] 32
*Aug 22 10:23:53.558: RADIUS: Cisco AVpair [1] 26 "ip:addr-pool=ippool1"
*Aug 22 10:23:53.558: RADIUS: Vendor, Cisco [26] 52
*Aug 22 10:23:53.558: RADIUS: Cisco AVpair [1] 46 "ip:dns-servers=172.16.152.2 10.1.166.127"
*Aug 22 10:23:53.558: RADIUS(0001703E): Received from id 1645/11
*Aug 22 10:23:53.558: ppp11 PPP: Received LOGIN Response PASS
*Aug 22 10:23:53.558: ppp11 PPP: Phase is FORWARDING, Attempting Forward
*Aug 22 10:23:53.562: [11]PPPoE 11: State LCP_NEGOTIATION Event SSS DISCONNECT
*Aug 22 10:23:53.562: ppp11 PPP DISC: Lower Layer disconnected
*Aug 22 10:23:53.562: ppp11 PPP: Sending Acct Event[Down] id[1703E]
*Aug 22 10:23:53.562: [11]PPPoE 11: AAA get dynamic attrs
*Aug 22 10:23:53.562: [11]PPPoE 11: AAA get dynamic attrs
*Aug 22 10:23:53.562: PPP: NET STOP send to AAA.
*Aug 22 10:23:53.562: ppp11 PAP: O AUTH-NAK id 37 len 27 msg is "Authentication failure"
*Aug 22 10:23:53.562: ppp11 LCP: O TERMREQ [Open] id 2 len 4
*Aug 22 10:23:53.562: ppp11 LCP: Event[CLOSE] State[Open to Closing]
*Aug 22 10:23:53.562: ppp11 PPP: Phase is TERMINATING
*Aug 22 10:23:53.562: [11]PPPoE 11: O PADT R:aaaa.bbbb.6343 L:aaaa.bbbb.b8c0 Gi0/1/0
contiguous pak, size 60
*Aug 22 10:23:53.562: [11]PPPoE 11: Destroying R:aaaa.bbbb.6343 L:aaaa.bbbb.b8c0 Gi0/1/0
*Aug 22 10:23:53.562: [11]PPPoE 11: AAA get dynamic attrs
*Aug 22 10:23:53.562: [11]PPPoE 11: AAA account stopped
*Aug 22 10:23:53.562: [11]PPPoE 11: Segment (SSS class): UNPROVISION
*Aug 22 10:23:53.562: ppp11 LCP: Event[CLOSE] State[Closing to Closing]
*Aug 22 10:23:53.562: ppp11 LCP: Event[DOWN] State[Closing to Initial]
*Aug 22 10:23:53.562: ppp11 PPP: Phase is DOWN
*Aug 22 10:23:53.566: PPPoE 11: I PADT R:aaaa.bbbb.6343 L:aaaa.bbbb.b8c0 Gi0/1/0
contiguous pak, size 60
*Aug 22 10:23:56.702: AAA/BIND(00017040): Bind i/f What am I doing wrong here? The router appears to accept the user, but then rejects the user and terminates the connection. Are there additional debug commands I should use?
... View more
Labels:
Created by
Lionel271
in IP Telephony and Phones
in IP Telephony and Phones
06-01-2018
05:33 AM
06-01-2018
05:33 AM
Thank you.
I have configured BLF. The buttons on the phone still function properly (as BLF this time), but the expansion modules are blank (bright blue screen with no images, but the buttons appear to function as speed dials when pressed).
I have been trying all kinds of things to get this working. I have updated the firmware for both the phone and the expansion modules and I have even replaced the phone (I don't have spare expansion modules, but it's odd that both would be broken).
Any other ideas? Here's the full config, with private details changed. The phone in question is ephone 48.
Current configuration : 45705 bytes
!
! Last configuration change at 12:03:18 SAST Fri May 25 2018 by adm
! NVRAM config last updated at 16:07:09 SAST Mon May 28 2018
! NVRAM config last updated at 16:07:09 SAST Mon May 28 2018
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname voice
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 blahblahblah
enable password 7 blahblahblah
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local none
!
!
!
!
!
aaa session-id unique
clock timezone SAST 2 0
!
no ipv6 cef
!
!
!
ip dhcp excluded-address 172.16.10.245
ip dhcp excluded-address 172.16.10.1 172.16.10.3
!
ip dhcp pool voice
network 172.16.10.0 255.255.255.0
option 150 ip 172.16.10.1
default-router 172.16.10.1
!
!
ip domain name site.domain.com
ip name-server 1.2.3.4
ip name-server 5.6.7.8
ip cef
multilink bundle-name authenticated
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-123456
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-123456
revocation-check none
rsakeypair TP-self-signed-123456
!
!
crypto pki certificate chain TP-self-signed-123456
certificate self-signed 01
xxxxxxxx xxxxxxxx
quit
voice-card 0
!
!
!
voice service voip
ip address trusted list
ipv4 123.123.123.1
allow-connections h323 to h323
allow-connections sip to sip
no supplementary-service sip moved-temporarily
no supplementary-service sip refer
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
h323
call start slow
sip
registrar server expires max 3600 min 3600
localhost dns:voice.site.domain.com
!
voice class codec 1
codec preference 1 g711ulaw
!
voice class mlpp 1
service-domain dsn
!
!
voice register global
mode cme
source-address 172.16.10.1 port 5060
max-dn 10
max-pool 5
authenticate register
authenticate realm site.domain.com
tftp-path flash:
file text
create profile sync 123456
!
!
!
voice translation-rule 1
rule 1 /^9\(.*\)/ /\1/
!
voice translation-rule 2
rule 1 /^12345642\([0-4][0-9]\)/ /42\1/
rule 2 /^0\(.*\)/ /90\1/
!
voice translation-rule 3
rule 1 /^12345642\([0-4][0-9]\)/ /42\1/
rule 2 /^1237681234$/ /4200/
!
voice translation-rule 4
rule 1 /^42\(.*\)/ /12345642\1/
!
voice translation-rule 5
rule 1 /^\(.*\)/ /1235421122/
!
voice translation-rule 6
rule 1 /^7...$/ /4000/
rule 2 /^8...$/ /4000/
rule 3 /^9...$/ /4000/
!
!
voice translation-profile EMERGENCY
translate calling 4
translate called 5
!
voice translation-profile INCOMING
translate calling 2
translate called 3
!
voice translation-profile OUTGOING
translate calling 4
translate called 1
!
voice translation-profile RESTRICTED
translate called 6
!
!
!
!
application
service aa flash:cme-aa.tcl
paramspace english index 0
param number-of-hunt-grps 1
param dial-by-extension-option 1
param handoff-string app-b-acd-aa
paramspace english language en
param max-time-vm-retry 2
param max-extension-length 4
param aa-pilot 4200
paramspace english location flash:
param second-greeting-time 60
param welcome-prompt _prompt_welcome.wav
param number-of-hunts-grps 1
param call-retry-timer 30
param voice-mail 4249
param max-time-call-retry 700
param service-name app-b-acd
!
service app-b-acd
param queue-len 3
param aa-hunt1 4000
param queue-manager-debugs 1
param number-of-hunt-grps 1
!
!
license udi pid CISCO2911/K9 sn XXX123456
license accept end user agreement
hw-module pvdm 0/0
!
hw-module sm 1
!
!
!
file privilege 0
username adm privilege 15 secret 4 blahblahblah
!
redundancy
!
!
ip ssh time-out 60
ip ssh version 2
ip scp server enable
gw-accounting file
primary ifs flash:cdr.csv
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description Connection to Catalyst 3750 Gi1/0/48
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/0.10
encapsulation dot1Q 10
ip address 172.16.10.1 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 7 blahblahblah
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
!
interface Integrated-Service-Engine1/0
ip unnumbered GigabitEthernet0/0.10
service-module ip address 172.16.10.2 255.255.255.0
!Application: CUE Running on NME
service-module ip default-gateway 172.16.10.245
no keepalive
!
!
router eigrp 300
network 172.16.10.0
redistribute static
!
ip forward-protocol nd
!
ip http server
ip http authentication aaa
ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 172.16.10.3
ip route 172.16.10.2 255.255.255.255 Integrated-Service-Engine1/0
!
!
!
snmp-server community blahblahblah RO
snmp-server location blahblahblah
snmp-server contact blahblahblah
snmp-server chassis-id blahblahblah
snmp-server enable traps entity-sensor threshold
tftp-server flash:apps41.9-2-1TH1-13.sbn
tftp-server flash:cnu41.9-2-1TH1-13.sbn
tftp-server flash:cvm41sccp.9-2-1TH1-13.sbn
tftp-server flash:dsp41.9-2-1TH1-13.sbn
tftp-server flash:jar41sccp.9-2-1TH1-13.sbn
tftp-server flash:SCCP41.9-2-1S.loads
tftp-server flash:term41.default.loads
tftp-server flash:term61.default.loads
tftp-server Desktops/320x196x4/List.xml
tftp-server Desktops/320x196x4/SiteLogo.png
tftp-server Desktops/320x196x4/TN-SiteLogo.png
tftp-server Desktops/320x212x12/List.xml
tftp-server Desktops/320x212x12/SiteLogo.png
tftp-server Desktops/320x212x12/TN-SiteLogo.png
tftp-server flash:RingList.xml
tftp-server flash:DistinctiveRingList.xml
tftp-server flash:Analog1.raw
tftp-server flash:Analog2.raw
tftp-server flash:AreYouThere.raw
tftp-server flash:Bass.raw
tftp-server flash:CallBack.raw
tftp-server flash:Chime.raw
tftp-server flash:Classic1.raw
tftp-server flash:Classic2.raw
tftp-server flash:ClockShop.raw
tftp-server flash:Drums1.raw
tftp-server flash:Drums2.raw
tftp-server flash:HarpSynth.raw
tftp-server flash:Jamaica.raw
tftp-server flash:KotoEffect.raw
tftp-server flash:MusicBox.raw
tftp-server flash:Piano1.raw
tftp-server flash:Piano2.raw
tftp-server flash:Pop.raw
tftp-server flash:Pulse1.raw
tftp-server flash:Ring1.raw
tftp-server flash:Ring2.raw
tftp-server flash:Ring3.raw
tftp-server flash:Ring4.raw
tftp-server flash:Ring5.raw
tftp-server flash:Ring6.raw
tftp-server flash:Ring7.raw
tftp-server flash:Sax1.raw
tftp-server flash:Sax2.raw
tftp-server flash:Vibe.raw
tftp-server flash:B016-1-0-4.sbn
tftp-server flash:apps75.9-2-1TH1-13.sbn
tftp-server flash:cnu75.9-2-1TH1-13.sbn
tftp-server flash:cvm75sccp.9-2-1TH1-13.sbn
tftp-server flash:dsp75.9-2-1TH1-13.sbn
tftp-server flash:jar75sccp.9-2-1TH1-13.sbn
tftp-server flash:SCCP75.9-2-1S.loads
tftp-server flash:term75.default.loads
tftp-server Desktops/320x212x12/CampusNight.png
tftp-server Desktops/320x212x12/TN-CampusNight.png
tftp-server Desktops/320x212x12/CiscoFountain.png
tftp-server Desktops/320x212x12/TN-CiscoFountain.png
tftp-server Desktops/320x212x12/CiscoLogo.png
tftp-server Desktops/320x212x12/TN-CiscoLogo.png
tftp-server Desktops/320x212x12/Fountain.png
tftp-server Desktops/320x212x12/TN-Fountain.png
tftp-server Desktops/320x212x12/MorroRock.png
tftp-server Desktops/320x212x12/TN-MorroRock.png
tftp-server Desktops/320x212x12/NantucketFlowers.png
tftp-server Desktops/320x212x12/TN-NantucketFlowers.png
tftp-server Desktops/320x212x16/List.xml
tftp-server Desktops/320x216x16/List.xml
tftp-server flash:SCCP75.9-4-2SR1-1S.loads
tftp-server flash:apps75.9-4-2ES9.sbn
tftp-server flash:cnu75.9-4-2ES9.sbn
tftp-server flash:cvm75sccp.9-4-2ES9.sbn
tftp-server flash:dsp75.9-4-2ES9.sbn
tftp-server flash:jar75sccp.9-4-2ES9.sbn
tftp-server flash:B016-1-0-4-2.SBN
!
!
!
control-plane
!
!
!
!
!
!
!
mgcp profile default
!
!
dial-peer voice 1 voip
description **Incoming call from SIP trunk**
translation-profile incoming INCOMING
session protocol sipv2
session target sip-server
session transport udp
incoming called-number 12345642..
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 2 voip
description **Outgoing call to SIP trunk**
translation-profile outgoing OUTGOING
destination-pattern 9T
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 3 voip
description **Auto Attendant (Unity)**
translation-profile outgoing INCOMING
preference 1
destination-pattern 4200
session protocol sipv2
session target ipv4:172.16.10.2
dtmf-relay sip-notify
codec g711ulaw
no vad
!
dial-peer voice 4 voip
description **Auto Attendant (TCL)**
translation-profile incoming RESTRICTED
translation-profile outgoing INCOMING
preference 2
service aa
destination-pattern 4200
session target ipv4:172.16.10.1
dtmf-relay rtp-nte
codec g711ulaw
no vad
!
dial-peer voice 5 voip
description **Voicemail**
translation-profile incoming RESTRICTED
translation-profile outgoing INCOMING
destination-pattern 4249
session protocol sipv2
session target ipv4:172.16.10.2
dtmf-relay sip-notify
codec g711ulaw
no vad
!
dial-peer voice 10 voip
description **Outgoing emergency call**
translation-profile outgoing EMERGENCY
preference 1
destination-pattern 53555
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 11 voip
description **Outgoing emergency call**
translation-profile outgoing EMERGENCY
preference 1
destination-pattern 53599
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 12 voip
description **Outgoing emergency call**
translation-profile outgoing EMERGENCY
preference 1
destination-pattern 815
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 13 voip
description **Outgoing emergency call**
translation-profile outgoing EMERGENCY
preference 1
destination-pattern 112
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 14 voip
description **Outgoing emergency call**
translation-profile outgoing EMERGENCY
preference 1
destination-pattern 911
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 15 voip
description **Outgoing emergency call**
translation-profile outgoing EMERGENCY
preference 1
destination-pattern 999
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 16 voip
description **Outgoing emergency call**
translation-profile outgoing EMERGENCY
preference 1
destination-pattern 953555
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 17 voip
description **Outgoing emergency call**
translation-profile outgoing EMERGENCY
preference 1
destination-pattern 953599
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 18 voip
description **Outgoing emergency call**
translation-profile outgoing EMERGENCY
preference 1
destination-pattern 9107
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 19 voip
description **Outgoing emergency call**
translation-profile outgoing EMERGENCY
preference 1
destination-pattern 9112
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 20 voip
description **Outgoing emergency call**
translation-profile outgoing EMERGENCY
preference 1
destination-pattern 9911
session protocol sipv2
session target sip-server
session transport udp
voice-class mlpp 1
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
dial-peer voice 6 voip
description **Prompt Management**
translation-profile outgoing INCOMING
preference 1
destination-pattern 8002
session protocol sipv2
session target ipv4:172.16.10.2
dtmf-relay sip-notify
codec g711ulaw
no vad
!
dial-peer voice 7 voip
description **Voicemail**
translation-profile outgoing INCOMING
destination-pattern 1234564249
session protocol sipv2
session target ipv4:172.16.10.2
dtmf-relay sip-notify
codec g711ulaw
no vad
!
dial-peer voice 8 voip
description **Incoming call from SIP trunk**
translation-profile incoming INCOMING
session protocol sipv2
session target sip-server
session transport udp
incoming called-number 1237681234
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad
!
!
presence
presence call-list
max-subscription 300
!
sip-ua
credentials username 1234564200 password 7 blahblahblah realm domain.com
authentication username 1234564200 password 7 blahblahblah realm domain.com
no remote-party-id
retry invite 2
retry register 10
retry options 1
timers connect 100
mwi-server ipv4:172.16.10.2 expires 3600 port 5060 transport udp unsolicited
registrar ipv4:123.123.123.1 expires 3600 auth-realm domain.com
sip-server ipv4:123.123.123.1
host-registrar
presence enable
!
!
!
gatekeeper
shutdown
!
!
telephony-service
max-ephones 58
max-dn 100 no-reg both
ip source-address 172.16.10.1 port 2000
calling-number initiator
service phone videoCapability 1
timeouts interdigit 4
network-locale GB
load 7916-12 B016-1-0-4-2
load 7916-24 B016-1-0-4-2
load 7961 SCCP41.9-2-1S
load 7975 SCCP75.9-4-2SR1-1S
time-zone 29
time-format 24
date-format yy-mm-dd
live-record 8003
voicemail 4249
max-conferences 12 gain -6
call-forward pattern .T
call-forward system redirecting-expanded
moh "flash:music-on-hold.au"
multicast moh 239.10.16.4 port 2000
dn-webedit
time-webedit
transfer-system full-consult dss
transfer-pattern .T
secondary-dialtone 9
directory entry 1 4000 name Operator
directory entry 2 4205 name Department1
directory entry 3 4210 name Department2
directory entry 4 4215 name Department3
directory entry 5 4225 name Department4
directory entry 6 4233 name Department5
directory entry 7 4240 name Department6
create cnf-files version-stamp 7960 May 25 2018 11:57:32
!
!
ephone-template 1
mlpp service-domain dsn identifier 000001 max-precedence 4
softkeys connected LiveRcd Hold Endcall Trnsfer Confrn
!
!
ephone-template 2
mlpp service-domain dsn identifier 000001 max-precedence 1
softkeys connected LiveRcd Hold Endcall Trnsfer Confrn
!
!
ephone-template 3
mlpp service-domain dsn identifier 000001 max-precedence 0
softkeys connected LiveRcd Hold Endcall Trnsfer Confrn
!
!
ephone-template 5
mlpp service-domain dsn identifier 000001 max-precedence 0
softkeys connected LiveRcd Hold Endcall Trnsfer Confrn
button-layout 1 line
button-layout 2-57 blf-speed-dial
!
!
ephone-dn 1 dual-line
number 4201 secondary 1234564201 no-reg both
pickup-group 1
label Dennis Martin
name Dennis Martin
allow watch
!
!
ephone-dn 2 dual-line
number 4202 secondary 1234564202 no-reg both
pickup-group 1
label Judith Colon
name Judith Colon
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 3 dual-line
number 4203 secondary 1234564203 no-reg both
pickup-group 1
label Edward Peterson
name Edward Peterson
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 4 dual-line
number 4204 secondary 1234564204 no-reg both
pickup-group 1
label Randy Gilbert
name Randy Gilbert
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 6 dual-line
number 4206 secondary 1234564206 no-reg both
pickup-group 1
label David Severson
name David Severson
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 7 dual-line
number 4207 secondary 1234564207 no-reg both
pickup-group 1
label April Lott
name April Lott
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 9 octo-line
number 4209 secondary 1234564209 no-reg both
pickup-group 1
label Raymond Perkins
name Raymond Perkins
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 11 dual-line
number 4211 secondary 1234564211 no-reg both
pickup-group 1
label David Wilkerson
name David Wilkerson
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 12 dual-line
number 4212 secondary 1234564212 no-reg both
pickup-group 1
label Ruth Cade
name Ruth Cade
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 13 dual-line
number 4213 secondary 1234564213 no-reg both
pickup-group 1
label Rae Hough
name Rae Hough
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 14 dual-line
number 4214 secondary 1234564214 no-reg both
pickup-group 1
label Philip Valenzuela
name Philip Valenzuela
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 16 dual-line
number 4216 secondary 1234564216 no-reg both
pickup-group 1
label Michelle Cansler
name Michelle Cansler
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 17 dual-line
number 4217 secondary 1234564217 no-reg both
pickup-group 1
label Angel Blue
name Angel Blue
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 18 dual-line
number 4218 secondary 1234564218 no-reg both
pickup-group 1
label Harold Canty
name Harold Canty
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 19 dual-line
number 4219 secondary 1234564219 no-reg both
pickup-group 1
label Susan Moses
name Susan Moses
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 20 dual-line
number 4220 secondary 1234564220 no-reg both
pickup-group 1
label Judy Meyerson
name Judy Meyerson
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 21 dual-line
number 4221 secondary 1234564221 no-reg both
pickup-group 1
label Mark Sturdivant
name Mark Sturdivant
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 22 dual-line
number 4222 no-reg both
pickup-group 1
label Carmen Ryan
name Carmen Ryan
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 26 dual-line
number 4226 secondary 1234564226 no-reg both
pickup-group 1
label Linda Chow
name Linda Chow
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 27 dual-line
number 4227 secondary 1234564227 no-reg both
pickup-group 1
label Gary Noble
name Gary Noble
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 28 dual-line
number 4228 secondary 1234564228 no-reg both
pickup-group 1
label Sandy Shively
name Sandy Shively
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 29 dual-line
number 4229 secondary 1234564229 no-reg both
pickup-group 1
label Annette Lewis
name Annette Lewis
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 30 dual-line
number 4230 secondary 1234564230 no-reg both
pickup-group 1
label Monty Fulton
name Monty Fulton
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 33 dual-line
number 4233 secondary 1234564233 no-reg both
pickup-group 1
label Eileen Harris
name Eileen Harris
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 34 dual-line
number 4234 secondary 1234564234 no-reg both
label Virginia Godsey
name Virginia Godsey
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 35 dual-line
number 4235 secondary 1234564235 no-reg both
label Cletus Vega
name Cletus Vega
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 36 dual-line
number 4236 secondary 1234564236 no-reg both
label Josephine Hall
name Josephine Hall
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 37 dual-line
number 4237 secondary 1234564237 no-reg both
label Timothy Rucker
name Timothy Rucker
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 38 dual-line
number 4238 secondary 1234564238 no-reg both
label Peter Garza
name Peter Garza
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 39 dual-line
number 4239 secondary 1234564239 no-reg both
label Cindy Norrell
name Cindy Norrell
allow watch
call-forward busy 4249
!
!
ephone-dn 41 dual-line
number 4241 secondary 1234564241 no-reg both
label Hector Wooten
name Hector Wooten
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 42 dual-line
number 4242 secondary 1234564242 no-reg both
pickup-group 1
label Phyllis Grinnell
name Phyllis Grinnell
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
huntstop channel
no huntstop
mwi sip
!
!
ephone-dn 43 dual-line
number 4243 secondary 1234564243 no-reg both
pickup-group 1
label David Baker
name David Baker
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
huntstop channel
no huntstop
mwi sip
!
!
ephone-dn 44 dual-line
number 4244 secondary 1234564244 no-reg both
label Cruz Cook
name Cruz Cook
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 45 dual-line
number 4245 secondary 1234564245 no-reg both
label Jo Collins
name Jo Collins
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 46 dual-line
number 4246 secondary 1234564246 no-reg both
label Jean Bowers
name Jean Bowers
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 47 dual-line
number 4247 secondary 1234564247 no-reg both
label Grazyna Freeman
name Grazyna Freeman
allow watch
call-forward busy 4247
call-forward noan 4247 timeout 10
mwi sip
!
!
ephone-dn 48 dual-line
number 4248 secondary 1234564248 no-reg both
label Richard Bennett
name Richard Bennett
allow watch
call-forward busy 4249
call-forward noan 4249 timeout 10
mwi sip
!
!
ephone-dn 50
number 8000 no-reg both
mwi on
!
!
ephone-dn 51
number 8001 no-reg both
mwi off
!
!
ephone-dn 52
number 8003 no-reg both
call-forward all 4249
!
!
ephone-dn 53 octo-line
number 8004 no-reg both
conference meetme
!
!
ephone 1
mac-address 0017.0E01.0097
ephone-template 1
presence call-list
blf-speed-dial 1 4241 label "Hector Wooten"
blf-speed-dial 2 4242 label "Phyllis Grinnell"
blf-speed-dial 3 4243 label "David Baker"
blf-speed-dial 4 4244 label "Cruz Cook"
blf-speed-dial 5 4245 label "Jo Collins"
type 7961
button 1:46
!
!
!
ephone 2
mac-address 001D.450C.446E
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4216 label "Michelle Cansler"
blf-speed-dial 3 4217 label "Angel Blue"
blf-speed-dial 4 4218 label "Harold Canty"
blf-speed-dial 5 4219 label "Susan Moses"
blf-speed-dial 6 4220 label "Judy Meyerson"
blf-speed-dial 7 4221 label "Mark Sturdivant"
type 7961
button 1:22
!
!
!
ephone 3
mac-address 54EE.75D4.D090
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4202 label "Judith Colon"
blf-speed-dial 3 4203 label "Edward Peterson"
blf-speed-dial 4 4204 label "Randy Gilbert"
blf-speed-dial 5 4201 label "Dennis Martin"
type CIPC
button 1:6
!
!
!
ephone 4
mac-address A0D3.C110.DEC2
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
speed-dial 2 4205 label "Department1"
speed-dial 3 4210 label "Department2"
speed-dial 4 4215 label "Department3"
speed-dial 5 4233 label "Department5"
speed-dial 6 4240 label "Department6"
speed-dial 7 4225 label "Department4"
type CIPC
button 1:48
!
!
!
ephone 5
mac-address 28D2.44A7.A153
ephone-template 1
presence call-list
blf-speed-dial 1 4233 label "Eileen Harris"
blf-speed-dial 2 4235 label "Cletus Vega"
blf-speed-dial 3 4236 label "Josephine Hall"
blf-speed-dial 4 4237 label "Timothy Rucker"
blf-speed-dial 5 4238 label "Peter Garza"
blf-speed-dial 6 4239 label "Cindy Norrell"
type CIPC
button 1:34
!
!
!
ephone 6
mac-address 047D.7BFB.5714
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4216 label "Michelle Cansler"
blf-speed-dial 3 4218 label "Harold Canty"
blf-speed-dial 4 4219 label "Susan Moses"
blf-speed-dial 5 4220 label "Judy Meyerson"
blf-speed-dial 6 4221 label "Mark Sturdivant"
blf-speed-dial 7 4222 label "Carmen Ryan"
type CIPC
button 1:17
!
!
!
ephone 7
mac-address 54EE.7501.CF2A
ephone-template 2
presence call-list
blf-speed-dial 1 4233 label "Eileen Harris"
blf-speed-dial 2 4234 label "Virginia Godsey"
blf-speed-dial 3 4235 label "Cletus Vega"
blf-speed-dial 4 4236 label "Josephine Hall"
blf-speed-dial 5 4237 label "Timothy Rucker"
blf-speed-dial 6 4239 label "Cindy Norrell"
type CIPC
button 1:38
!
!
!
ephone 8
mac-address FC45.964F.2C19
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
speed-dial 2 4205 label "Department1"
speed-dial 3 4210 label "Department2"
speed-dial 4 4215 label "Department3"
speed-dial 5 4233 label "Department5"
speed-dial 6 4240 label "Department6"
speed-dial 7 4225 label "Department4"
type CIPC
button 1:47
!
!
!
ephone 9
mac-address 54EE.7566.72E8
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4212 label "Ruth Cade"
blf-speed-dial 3 4213 label "Rae Hough"
blf-speed-dial 4 4214 label "Philip Valenzuela"
type CIPC
button 1:11
!
!
!
ephone 10
mac-address 001B.53B8.A36B
ephone-template 3
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4203 label "Edward Peterson"
blf-speed-dial 3 4206 label "David Severson"
blf-speed-dial 4 4204 label "Randy Gilbert"
blf-speed-dial 5 4201 label "Dennis Martin"
type 7961
button 1:2
!
!
!
ephone 11
mac-address 001E.BE91.8054
ephone-template 3
presence call-list
blf-speed-dial 1 4204 label "Randy Gilbert"
blf-speed-dial 2 4202 label "Judith Colon"
blf-speed-dial 3 4203 label "Edward Peterson"
blf-speed-dial 4 4206 label "David Severson"
blf-speed-dial 5 4207 label "April Lott"
type 7961
button 1:1
!
!
!
ephone 12
mac-address 001D.457E.9B04
ephone-template 2
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4202 label "Judith Colon"
blf-speed-dial 3 4206 label "David Severson"
blf-speed-dial 4 4204 label "Randy Gilbert"
blf-speed-dial 5 4201 label "Dennis Martin"
type 7961
button 1:3
!
!
!
ephone 13
mac-address 0016.C877.453C
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4211 label "David Wilkerson"
blf-speed-dial 3 4212 label "Ruth Cade"
blf-speed-dial 4 4213 label "Rae Hough"
type 7961
button 1:14
!
!
!
ephone 14
mac-address 0016.C8FF.C9FB
ephone-template 2
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4202 label "Judith Colon"
blf-speed-dial 3 4203 label "Edward Peterson"
blf-speed-dial 4 4204 label "Randy Gilbert"
blf-speed-dial 5 4201 label "Dennis Martin"
type 7961
button 1:6
!
!
!
ephone 15
mac-address 001D.450C.338D
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4212 label "Ruth Cade"
blf-speed-dial 3 4213 label "Rae Hough"
blf-speed-dial 4 4214 label "Philip Valenzuela"
type 7961
button 1:11
!
!
!
ephone 16
mac-address 001B.43B8.A36B
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4217 label "Angel Blue"
blf-speed-dial 3 4218 label "Harold Canty"
blf-speed-dial 4 4219 label "Susan Moses"
blf-speed-dial 5 4220 label "Judy Meyerson"
blf-speed-dial 6 4221 label "Mark Sturdivant"
blf-speed-dial 7 4222 label "Carmen Ryan"
type 7961
button 1:16
!
!
!
ephone 17
mac-address 0016.C8FF.C8A0
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4216 label "Michelle Cansler"
blf-speed-dial 3 4218 label "Harold Canty"
blf-speed-dial 4 4219 label "Susan Moses"
blf-speed-dial 5 4220 label "Judy Meyerson"
blf-speed-dial 6 4221 label "Mark Sturdivant"
blf-speed-dial 7 4222 label "Carmen Ryan"
type 7961
button 1:17
!
!
!
ephone 18
mac-address 0016.C877.46B7
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4216 label "Michelle Cansler"
blf-speed-dial 3 4217 label "Angel Blue"
blf-speed-dial 4 4219 label "Susan Moses"
blf-speed-dial 5 4220 label "Judy Meyerson"
blf-speed-dial 6 4221 label "Mark Sturdivant"
blf-speed-dial 7 4222 label "Carmen Ryan"
type 7961
button 1:18
!
!
!
ephone 19
mac-address 0016.C8FF.CC30
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4216 label "Michelle Cansler"
blf-speed-dial 3 4217 label "Angel Blue"
blf-speed-dial 4 4218 label "Harold Canty"
blf-speed-dial 5 4220 label "Judy Meyerson"
blf-speed-dial 6 4221 label "Mark Sturdivant"
blf-speed-dial 7 4222 label "Carmen Ryan"
type 7961
button 1:19
!
!
!
ephone 21
mac-address 001D.450C.258A
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4216 label "Michelle Cansler"
blf-speed-dial 3 4217 label "Angel Blue"
blf-speed-dial 4 4218 label "Harold Canty"
blf-speed-dial 5 4219 label "Susan Moses"
blf-speed-dial 6 4220 label "Judy Meyerson"
blf-speed-dial 7 4222 label "Carmen Ryan"
type 7961
button 1:21
!
!
!
ephone 22
mac-address 001D.450C.371B
ephone-template 2
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4227 label "Gary Noble"
blf-speed-dial 3 4228 label "Sandy Shively"
blf-speed-dial 4 4229 label "Annette Lewis"
blf-speed-dial 5 4230 label "Monty Fulton"
type 7961
button 1:26
!
!
!
ephone 23
mac-address 0016.C877.45D5
ephone-template 1
presence call-list
blf-speed-dial 1 4241 label "Hector Wooten"
blf-speed-dial 2 4242 label "Phyllis Grinnell"
blf-speed-dial 3 4243 label "David Baker"
blf-speed-dial 4 4244 label "Cruz Cook"
blf-speed-dial 5 4246 label "Jean Bowers"
type 7961
button 1:45
!
!
!
ephone 24
mac-address 0016.C877.4664
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4226 label "Linda Chow"
blf-speed-dial 3 4227 label "Gary Noble"
blf-speed-dial 4 4229 label "Annette Lewis"
blf-speed-dial 5 4230 label "Monty Fulton"
type 7961
button 1:28
!
!
!
ephone 25
mac-address 0016.C877.446A
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4226 label "Linda Chow"
blf-speed-dial 3 4227 label "Gary Noble"
blf-speed-dial 4 4228 label "Sandy Shively"
blf-speed-dial 5 4230 label "Monty Fulton"
type 7961
button 1:29
!
!
!
ephone 26
mac-address 0016.C877.470A
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4226 label "Linda Chow"
blf-speed-dial 3 4227 label "Gary Noble"
blf-speed-dial 4 4228 label "Sandy Shively"
blf-speed-dial 5 4229 label "Annette Lewis"
type 7961
button 1:30
!
!
!
ephone 27
mac-address 0016.C8FF.C870
ephone-template 1
presence call-list
blf-speed-dial 1 4233 label "Eileen Harris"
blf-speed-dial 2 4235 label "Cletus Vega"
blf-speed-dial 3 4236 label "Josephine Hall"
blf-speed-dial 4 4237 label "Timothy Rucker"
blf-speed-dial 5 4238 label "Peter Garza"
blf-speed-dial 6 4239 label "Cindy Norrell"
type 7961
button 1:34
!
!
!
ephone 28
mac-address 0016.C8FF.C8CD
ephone-template 1
presence call-list
blf-speed-dial 1 4233 label "Eileen Harris"
blf-speed-dial 2 4234 label "Virginia Godsey"
blf-speed-dial 3 4235 label "Cletus Vega"
blf-speed-dial 4 4237 label "Timothy Rucker"
blf-speed-dial 5 4238 label "Peter Garza"
blf-speed-dial 6 4239 label "Cindy Norrell"
type 7961
button 1:36
!
!
!
ephone 29
mac-address 0016.C877.4411
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4226 label "Linda Chow"
blf-speed-dial 3 4202 label "Judith Colon"
blf-speed-dial 4 4203 label "Edward Peterson"
blf-speed-dial 5 4204 label "Randy Gilbert"
type 7961
button 1:7
!
!
!
ephone 30
mac-address 0016.C877.4493
ephone-template 1
presence call-list
blf-speed-dial 1 4242 label "Phyllis Grinnell"
blf-speed-dial 2 4243 label "David Baker"
blf-speed-dial 3 4244 label "Cruz Cook"
blf-speed-dial 4 4245 label "Jo Collins"
blf-speed-dial 5 4246 label "Jean Bowers"
type 7961
button 1:41
!
!
!
ephone 31
mac-address 001D.450C.43CD
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
speed-dial 2 4205 label "Department1"
speed-dial 3 4210 label "Department2"
speed-dial 4 4215 label "Department3"
speed-dial 5 4232 label "Department5"
speed-dial 6 4225 label "Department4"
type 7961
button 1:42
!
!
!
ephone 32
mac-address 001E.F729.2881
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Reception"
speed-dial 2 4205 label "Department1"
speed-dial 3 4210 label "Department2"
speed-dial 4 4215 label "Department3"
speed-dial 5 4232 label "Department5"
speed-dial 6 4225 label "Department4"
type 7961
button 1:43
!
!
!
ephone 33
mac-address 0016.C877.4575
ephone-template 1
presence call-list
blf-speed-dial 1 4241 label "Hector Wooten"
blf-speed-dial 2 4242 label "Phyllis Grinnell"
blf-speed-dial 3 4243 label "David Baker"
blf-speed-dial 4 4245 label "Jo Collins"
blf-speed-dial 5 4246 label "Jean Bowers"
type 7961
button 1:44
!
!
!
ephone 35
mac-address 001E.F728.F1D1
ephone-template 2
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4211 label "David Wilkerson"
blf-speed-dial 3 4212 label "Ruth Cade"
blf-speed-dial 4 4214 label "Philip Valenzuela"
type 7961
button 1:13
!
!
!
ephone 36
mac-address 001B.535D.0F5C
ephone-template 2
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4217 label "Angel Blue"
blf-speed-dial 3 4218 label "Harold Canty"
blf-speed-dial 4 4219 label "Susan Moses"
blf-speed-dial 5 4220 label "Judy Meyerson"
blf-speed-dial 6 4221 label "Mark Sturdivant"
blf-speed-dial 7 4222 label "Carmen Ryan"
type 7961
button 1:16
!
!
!
ephone 37
mac-address 0016.C877.43DD
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4211 label "David Wilkerson"
blf-speed-dial 3 4213 label "Rae Hough"
blf-speed-dial 4 4214 label "Philip Valenzuela"
type 7961
button 1:12
!
!
!
ephone 38
mac-address 0016.C8FF.C8DE
ephone-template 1
presence call-list
blf-speed-dial 1 4201 label "Dennis Martin"
blf-speed-dial 2 4209 label "Raymond Perkins"
blf-speed-dial 3 4202 label "Judith Colon"
blf-speed-dial 4 4206 label "David Severson"
blf-speed-dial 5 4203 label "Edward Peterson"
type 7961
button 1:4
!
!
!
ephone 39
mac-address 001E.BE91.459F
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4216 label "Michelle Cansler"
blf-speed-dial 3 4217 label "Angel Blue"
blf-speed-dial 4 4218 label "Harold Canty"
blf-speed-dial 5 4219 label "Susan Moses"
blf-speed-dial 6 4221 label "Mark Sturdivant"
blf-speed-dial 7 4222 label "Carmen Ryan"
type 7961
button 1:20
!
!
!
ephone 40
mac-address 001B.0CAC.CF5B
ephone-template 1
presence call-list
blf-speed-dial 1 4234 label "Virginia Godsey"
blf-speed-dial 2 4235 label "Cletus Vega"
blf-speed-dial 3 4236 label "Josephine Hall"
blf-speed-dial 4 4237 label "Timothy Rucker"
blf-speed-dial 5 4238 label "Peter Garza"
blf-speed-dial 6 4239 label "Cindy Norrell"
type 7961
button 1:33
!
!
!
ephone 42
mac-address 001D.450C.348C
ephone-template 1
presence call-list
blf-speed-dial 1 4233 label "Eileen Harris"
blf-speed-dial 2 4234 label "Virginia Godsey"
blf-speed-dial 3 4236 label "Josephine Hall"
blf-speed-dial 4 4237 label "Timothy Rucker"
blf-speed-dial 5 4238 label "Peter Garza"
blf-speed-dial 6 4239 label "Cindy Norrell"
type 7961
button 1:35
!
!
!
ephone 43
mac-address 001D.4595.6AC9
ephone-template 1
presence call-list
blf-speed-dial 1 4233 label "Eileen Harris"
blf-speed-dial 2 4234 label "Virginia Godsey"
blf-speed-dial 3 4235 label "Cletus Vega"
blf-speed-dial 4 4236 label "Josephine Hall"
blf-speed-dial 5 4238 label "Peter Garza"
blf-speed-dial 6 4239 label "Cindy Norrell"
type 7961
button 1:37
!
!
!
ephone 44
mac-address 001D.4595.BDF2
ephone-template 1
presence call-list
blf-speed-dial 1 4209 label "Raymond Perkins"
blf-speed-dial 2 4226 label "Linda Chow"
blf-speed-dial 3 4228 label "Sandy Shively"
blf-speed-dial 4 4229 label "Annette Lewis"
blf-speed-dial 5 4230 label "Monty Fulton"
type 7961
button 1:27
!
!
!
ephone 45
mac-address 001D.4595.7D40
ephone-template 1
presence call-list
type 7961
!
!
!
ephone 46
mac-address 001C.58F9.42B3
ephone-template 1
presence call-list
blf-speed-dial 1 4233 label "Eileen Harris"
blf-speed-dial 2 4234 label "Virginia Godsey"
blf-speed-dial 3 4235 label "Cletus Vega"
blf-speed-dial 4 4236 label "Josephine Hall"
blf-speed-dial 5 4237 label "Timothy Rucker"
blf-speed-dial 6 4238 label "Peter Garza"
type 7961
button 1:39
!
!
!
ephone 48
mac-address 381C.1ABB.F1FE
ephone-template 5
presence call-list
blf-speed-dial 1 4201 label "Dennis Martin"
blf-speed-dial 2 4202 label "Judith Colon"
blf-speed-dial 3 4203 label "Edward Peterson"
blf-speed-dial 4 4204 label "Randy Gilbert"
blf-speed-dial 6 4206 label "David Severson"
blf-speed-dial 7 4207 label "April Lott"
blf-speed-dial 10 4211 label "David Wilkerson"
blf-speed-dial 11 4212 label "Ruth Cade"
blf-speed-dial 12 4213 label "Rae Hough"
blf-speed-dial 13 4214 label "Philip Valenzuela"
blf-speed-dial 15 4216 label "Michelle Cansler"
blf-speed-dial 16 4217 label "Angel Blue"
blf-speed-dial 17 4218 label "Harold Canty"
blf-speed-dial 18 4219 label "Susan Moses"
blf-speed-dial 19 4220 label "Judy Meyerson"
blf-speed-dial 20 4221 label "Mark Sturdivant"
blf-speed-dial 21 4222 label "Carmen Ryan"
blf-speed-dial 25 4226 label "Linda Chow"
blf-speed-dial 27 4228 label "Sandy Shively"
blf-speed-dial 28 4229 label "Annette Lewis"
blf-speed-dial 29 4230 label "Monty Fulton"
blf-speed-dial 32 4233 label "Eileen Harris"
blf-speed-dial 33 4234 label "Virginia Godsey"
blf-speed-dial 34 4235 label "Cletus Vega"
blf-speed-dial 35 4236 label "Josephine Hall"
blf-speed-dial 36 4237 label "Timothy Rucker"
blf-speed-dial 37 4238 label "Peter Garza"
blf-speed-dial 38 4239 label "Cindy Norrell"
blf-speed-dial 40 4241 label "Hector Wooten"
blf-speed-dial 41 4242 label "Phyllis Grinnell"
blf-speed-dial 42 4243 label "David Baker"
blf-speed-dial 43 4244 label "Cruz Cook"
blf-speed-dial 44 4245 label "Jo Collins"
blf-speed-dial 45 4246 label "Jean Bowers"
blf-speed-dial 46 4247 label "Grazyna Freeman"
blf-speed-dial 47 4248 label "Richard Bennett"
blf-speed-dial 48 8004 label "Meet-Me Conference"
type 7975 addon 1 7916-24 2 7916-24
button 1:9
!
!
ephone-hunt 1 sequential
pilot 4000
list 4209, 4243, 4242
final *4209
timeout 20, 0, 0
no-reg pilot
description Operator
!
!
ephone-hunt 5 longest-idle
pilot 4205
list 4206, 4207
final *4206
timeout 10, 10
no-reg pilot
description Department1
!
!
ephone-hunt 10 longest-idle
pilot 4210
list 4211, 4212, 4213
final *4211
timeout 10, 10, 10
no-reg pilot
description Department2
!
!
ephone-hunt 15 longest-idle
pilot 4215
list 4216, 4217, 4218, 4219, 4220, 4211
final *4216
timeout 10, 10, 10, 10, 10, 10
no-reg pilot
description Department3
!
!
ephone-hunt 25 longest-idle
pilot 4225
list 4226, 4227, 4228, 4229, 4230
final *4226
timeout 10, 10, 10, 10, 10
no-reg pilot
description Department4
!
!
ephone-hunt 33 longest-idle
pilot 4232
list 4233, 4234, 4235, 4236, 4237, 4238
final *4233
timeout 10, 10, 10, 10, 10, 10
no-reg pilot
description Department5
!
!
ephone-hunt 40 longest-idle
pilot 4240
list 4241, 4242, 4243, 4244, 4245
no-reg pilot
description Department6
!
!
!
!
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line 67
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
line vty 0 4
password 7 blahblahblah
transport input all
line vty 5 15
password 7 blahblahblah
transport input all
!
scheduler allocate 20000 1000
ntp master
ntp server ntp.domain.com
!
end
... View more
Created by
Lionel271
in IP Telephony and Phones
in IP Telephony and Phones
05-17-2018
08:16 AM
05-17-2018
08:16 AM
I'm configuring lines (in monitor mode), not speed-dials, as per the above config. Is that my problem?
... View more
Created by
Lionel271
in IP Telephony and Phones
in IP Telephony and Phones
05-17-2018
05:53 AM
05-17-2018
05:53 AM
I'm having a problem with the labels showing on the phone, but not on the expansion units. I have a phone with 1 normal line and the rest of the lines monitored.
ephone 47
mac-address 381C.xxxx.xxxx
ephone-template 3
type 7975 addon 1 7916-24 2 7916-24
button 1:9 2m1 3m2 4m3
button 5m4 6m6 7m7 8m11
button 9m12 10m13 11m16 12m17
button 13m18 14m19 15m20 16m21
button 17m22 18m26 19m27 20m28
button 21m29 22m30 23m33 24m34
button 25m35 26m36 27m37 28m38
button 29m39 30m41 31m42 32m43
button 33m44 34m45 35m46 36m47
button 37m48
The phone template:
ephone-template 3
mlpp service-domain dsn identifier 000001 max-precedence 0
softkeys connected LiveRcd Hold Endcall Trnsfer Confrn
The button 2-8 are configured the same as buttons 9-37, yet they behave differently on the phone and expansion modules. On the phone, the names appear as usual (but not the envelopes), yet on the expansion modules, only the envelopes appear.
The buttons behave correctly in all cases. The problem is only with the labels. I have tried wiping cnf-files and recreating. I have also reset the phone.
... View more
Labels:
04-10-2018
12:33 PM
Hi
I am trying to determine a good method to ensure that a few thousand users are able to share the available internet connection. There is one router (sadly only a 2951) where everything connects to, it has four internet connections and an "inside" interface pointing to the rest of the infrastructure (with many routers and switches, and most of the routers running NAT).
The problem is that the central router has 2x 4Mbps, 1x 20Mbps and 1x 100Mbps internet connections. How could I stop careless users from using up all of the bandwidth?
I'm looking at shaping and policing, but I'm not sure how these techniques could be applied to solve this problem. The router is sitting at 1GB used memory out of 2.5GB due to BGP and all that, so I suspect shaping might be a bad idea.
If I go with policing, how can I police per user and not just slow down the interface? It's okay if the interface uses up most of the bandwidth, but I'd like to stop individual users from doing that.
Most of the users only surf the web and read email and I'm okay if one of them decides to download a large file, or make a Skype call, but I'm not okay with somebody downloading 100GB during peak hours. So I'm looking at a way to limit only the users who are causing my problems, while offering the best possible experience for the rest.
I'm looking at getting a gigabit link installed, but it's going to take a while and I suspect that the rough users are simply going to end up using more.
Any advise would be appreciated.
... View more
Labels:
04-05-2018
10:18 AM
10.0.155.233 is a router sitting in front of 192.168.1.64/27, so my reasoning was that if I can't reach that, I won't go further.
"show ip route" gives thousands of pages worth of output. There are about 650k entries in the BGP table :-).
Somehow this has starting working though. I think the problem was on the other end at all, so the only problem here appears to be the metric issue you brought up earlier.
... View more
04-05-2018
02:32 AM
Thank you, Michal! The problem is now partially resolved.
I can confirm that adding a default-metric solved the route redistribution problem.
I'm receiving all the BGP entries over EIGRP now, but I'm still unable to reach 10.0.155.233.
I suspect that this issue, which is the big problem, is related to the BGP configuration itself. The route to it is advertised over EIGRP because I can see it in the routing table (and I can reach the router on 10.0.155.234).
I think that the router at 10.0.155.233 doesn't have a route back to the rest of the network, yet it shows in the advertised-routes table. Unfortunately, I have no access to that router, so I cannot look at the tables there. I can only troubleshoot it from the other end.
... View more
04-04-2018
11:53 PM
There is another issue here as well:
Router A is not receiving the routes to 192.168.1.64/27 and 192.168.3.64/27 from router B over EIGRP, even though redistribute bgp is enabled on router B.
This would not explain why 10.0.155.233 is inaccessible though.
... View more
04-04-2018
11:35 PM
Hi there!
I am experiencing a problem which I suspect involves an issue with route advertisement.
The setup is as follows:
Device A 10.0.154.2/25
gateway 10.0.154.1
Router A interface 1 10.0.154.1/25 interface 2 10.0.154.250/29
interface 1 is connected to network with Device A, interface 2 is connected to network with router B
EIGRP
Router B interface 1 10.0.154.249/29 interface 2 10.0.155.234/29
interface 1 is connected to network with router A, interface 2 is connected to network with router C
BGP neighbor 10.0.155.233 (router C)
EIGRP (redistribute into BGP)
Router C interface 10.0.155.233/29
has routes to devices on 192.168.1.64/27 and 192.168.3.64/27
exact configuration unknown, but assumed to be correct
The ultimate requirement is that Device A is able to reach devices on 192.168.1.64/27 and vice versa. Only the routes required to reach this device are required to be advertised into the BGP table on 10.0.155.233.
Both device A and router A successfully connect to 10.0.155.234 (router B), but can't connect to 10.0.155.233 (router C) or further. Traceroute hops to 10.0.155.1, then 10.0.155.249 and stops here.
Router B reaches 10.0.155.233 (router C), and traceroute follows the router there as received over BGP.
Relevant config on router B:
router eigrp 100
network 10.0.0.0
network 192.168.0.0
redistribute bgp 3000
router bgp 3000
neighbor 10.0.155.233 remote-as 5000
address-family ipv4
network 10.0.152.0
network 10.0.153.0
network 10.0.154.0
redistribute connected
redistribute static
redistribute eigrp 100
neighbor 10.0.155.233 activate
neighbor 10.0.155.233 route-map net1 out
route-map net1 permit 10
match ip address 1
access-list 1 permit 10.0.154.0 0.0.0.255
#show ip bgp neighbor 10.0.155.233 advertised-routes
BGP table version is 97, local router ID is 172.16.186.250
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
*> 10.0.154.0/25 10.0.154.250 26882560 32768 ?
*> 10.0.154.248/29
0.0.0.0 0 32768 ?
Total number of prefixes 2
#show ip bgp neighbor 10.0.155.233 routes
BGP table version is 97, local router ID is 172.16.186.250
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
*> 192.168.1.64/27 10.0.155.233 0 5000 i
*> 192.168.3.64/27 10.0.155.233 0 5000 i
Total number of prefixes 2
Config on router A:
router eigrp 100
network 10.0.0.0
network 192.168.186.0
network 192.168.17.0
no auto-summary
router eigrp 200
redistribute static
redistribute eigrp 100
-- unrelated internal networks --
no auto-summary
ip route 0.0.0.0 0.0.0.0 192.168.4.137
ip route 172.16.154.80 255.255.255.248 10.0.154.249
-- more unrelated routes --
#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 192.168.4.137 to network 0.0.0.0
10.0.0.0/16 is variably subnetted, 5 subnets, 2 masks
C 10.0.154.0/25 is directly connected, FastEthernet0/1.21
D 10.0.155.240/29
[90/297244672] via 10.0.154.249, 18:33:46, Tunnel0
D 10.0.155.248/29
[90/297244672] via 10.0.154.249, 18:33:46, Tunnel0
C 10.0.154.248/29 is directly connected, Tunnel0
D 10.0.155.232/29
[90/297244672] via 10.0.154.249, 18:33:46, Tunnel0
-- lots of unrelated routes removed --
172.16.0.0/29 is subnetted, 1 subnets
S 172.16.154.80 [1/0] via 10.0.154.249
S* 0.0.0.0/0 [1/0] via 192.168.4.137
Can some genius shed some light on what's going wrong?
Thanks in advance!
... View more
Labels:
Created by
Lionel271
in VPN and AnyConnect
in VPN and AnyConnect
10-15-2013
09:22 AM
10-15-2013
09:22 AM
Hi I have made some progress. I connected the client device behind a NAT router via DSL and I could access a single device on the LAN (the other one I tested didn't work, but that might be routing related). I could also access the internet via the split tunnel. But if I switch back to a 3G connection (direct, not behind NAT), I have the original problem. Neither of these methods can access the internal interface of the ASA, but that is not a requirement. I should be able to resolve the suspected routing issue myself for the other device, but need to somehow figure out how to get it working without NAT on the client side (it needs to work both with or without NAT). Regards Lionel
... View more
Created by
Lionel271
in VPN and AnyConnect
in VPN and AnyConnect
10-15-2013
08:33 AM
10-15-2013
08:33 AM
Also can't seem to access the internal IP of the ASA over the VPN, which I believe is a step closer than the rest of the LAN.
... View more
Created by
Lionel271
in VPN and AnyConnect
in VPN and AnyConnect
10-15-2013
08:19 AM
10-15-2013
08:19 AM
Hi The bulk of the devices are not even routing through the ASA, internal devices such as IP phones, printers, etc. There is also large wastage of IP addresses which needs to be sorted out at some stage. Outside IP address is 196.215.40.160. The DSL modem is configured as an LLC bridge. Here are the debug logs when connecting if this helps at all. Nothing is logged when a connection is attempted though. Regards Lionel Oct 15 17:08:51 [IKEv1]: IP = 197.79.9.227, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + KE (4) + NONCE (10) + ID (5) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 765 Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing SA payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing ke payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing ISA_KE payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing nonce payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing ID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, Received Fragmentation VID Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, IKE Peer included IKE fragmentation capability flags: Main Mode: True Aggressive Mode: False Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, Received NAT-Traversal RFC VID Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, Received NAT-Traversal ver 03 VID Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, Received NAT-Traversal ver 02 VID Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, Received xauth V6 VID Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, Received Cisco Unity client VID Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, processing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: IP = 197.79.9.227, Received DPD VID Oct 15 17:08:51 [IKEv1]: IP = 197.79.9.227, Connection landed on tunnel_group OurIPSEC Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, processing IKE SA payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, IKE SA Proposal # 1, Transform # 5 acceptable Matches global IKE entry # 2 Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing ISAKMP SA payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing ke payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing nonce payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, Generating keys for Responder... Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing ID payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing hash payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, Computing hash for ISAKMP Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing Cisco Unity VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing xauth V6 VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing dpd vid payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing NAT-Traversal VID ver 02 payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing NAT-Discovery payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, computing NAT Discovery hash Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing NAT-Discovery payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, computing NAT Discovery hash Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing Fragmentation VID + extended capabilities payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing VID payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, Send Altiga/Cisco VPN3000/Cisco ASA GW VID Oct 15 17:08:51 [IKEv1]: IP = 197.79.9.227, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + KE (4) + NONCE (10) + ID (5) + HASH (8) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NAT-D (130) + NAT-D (130) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 436 Oct 15 17:08:51 [IKEv1]: IP = 197.79.9.227, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + HASH (8) + NAT-D (130) + NAT-D (130) + NOTIFY (11) + NONE (0) total length : 128 Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, processing hash payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, Computing hash for ISAKMP Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, processing NAT-Discovery payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, computing NAT Discovery hash Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, processing NAT-Discovery payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, computing NAT Discovery hash Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, processing notify payload Oct 15 17:08:51 [IKEv1]: Group = OurIPSEC, IP = 197.79.9.227, Automatic NAT Detection Status: Remote end IS behind a NAT device This end IS behind a NAT device Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing blank hash payload Oct 15 17:08:51 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, constructing qm hash payload Oct 15 17:08:51 [IKEv1]: IP = 197.79.9.227, IKE_DECODE SENDING Message (msgid=b8b02705) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 72 Oct 15 17:09:02 [IKEv1]: IP = 197.79.9.227, IKE_DECODE RECEIVED Message (msgid=b8b02705) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 88 Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, process_attr(): Enter! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, IP = 197.79.9.227, Processing MODE_CFG Reply attributes. Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKEGetUserAttributes: primary DNS = 10.1.1.138 Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKEGetUserAttributes: secondary DNS = 10.1.1.54 Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKEGetUserAttributes: primary WINS = cleared Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKEGetUserAttributes: secondary WINS = cleared Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKEGetUserAttributes: split tunneling list = split-tunnel Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKEGetUserAttributes: default domain = our-domain.com Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKEGetUserAttributes: IP Compression = disabled Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKEGetUserAttributes: Split Tunneling Policy = Split Network Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKEGetUserAttributes: Browser Proxy Setting = no-modify Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKEGetUserAttributes: Browser Proxy Bypass Local = disable Oct 15 17:09:02 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, User (person2) authenticated. Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, constructing blank hash payload Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, constructing qm hash payload Oct 15 17:09:02 [IKEv1]: IP = 197.79.9.227, IKE_DECODE SENDING Message (msgid=a2171c19) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 64 Oct 15 17:09:02 [IKEv1]: IP = 197.79.9.227, IKE_DECODE RECEIVED Message (msgid=a2171c19) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 64 Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, process_attr(): Enter! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Processing cfg ACK attributes Oct 15 17:09:02 [IKEv1]: IP = 197.79.9.227, IKE_DECODE RECEIVED Message (msgid=3257625f) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 164 Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, process_attr(): Enter! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Processing cfg Request attributes Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for IPV4 address! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for IPV4 net mask! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for DNS server address! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for WINS server address! Oct 15 17:09:02 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Received unsupported transaction mode attribute: 5 Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for Application Version! Oct 15 17:09:02 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Client Type: iPhone OS Client Application Version: 7.0.2 Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for Banner! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for Default Domain Name! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for Split DNS! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for Split Tunnel List! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for Local LAN Include! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for PFS setting! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for Save PW setting! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for FWTYPE! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for backup ip-sec peer list! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, MODE_CFG: Received request for Client Browser Proxy Setting! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Obtained IP addr (172.17.1.1) prior to initiating Mode Cfg (XAuth enabled) Oct 15 17:09:02 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Assigned private IP address 172.17.1.1 to remote user Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, constructing blank hash payload Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, construct_cfg_set: default domain = our-domain.com Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Send Client Browser Proxy Attributes! Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Browser Proxy set to No-Modify. Browser Proxy data will NOT be included in the mode-cfg reply Oct 15 17:09:02 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, constructing qm hash payload Oct 15 17:09:02 [IKEv1]: IP = 197.79.9.227, IKE_DECODE SENDING Message (msgid=3257625f) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 210 Oct 15 17:09:03 [IKEv1 DECODE]: IP = 197.79.9.227, IKE Responder starting QM: msg id = c9359d2e Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Delay Quick Mode processing, Cert/Trans Exch/RM DSID in progress Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Resume Quick Mode processing, Cert/Trans Exch/RM DSID completed Oct 15 17:09:03 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, PHASE 1 COMPLETED Oct 15 17:09:03 [IKEv1]: IP = 197.79.9.227, Keep-alive type for this connection: DPD Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Starting P1 rekey timer: 3420 seconds. Oct 15 17:09:03 [IKEv1]: IP = 197.79.9.227, IKE_DECODE RECEIVED Message (msgid=c9359d2e) with payloads : HDR + HASH (8) + SA (1) + NONCE (10) + ID (5) + ID (5) + NONE (0) total length : 284 Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, processing hash payload Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, processing SA payload Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, processing nonce payload Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, processing ID payload Oct 15 17:09:03 [IKEv1 DECODE]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, ID_IPV4_ADDR ID received 172.17.1.1 Oct 15 17:09:03 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Received remote Proxy Host data in ID Payload: Address 172.17.1.1, Protocol 0, Port 0 Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, processing ID payload Oct 15 17:09:03 [IKEv1 DECODE]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, ID_IPV4_ADDR_SUBNET ID received--10.0.0.0--255.0.0.0 Oct 15 17:09:03 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Received local IP Proxy Subnet data in ID Payload: Address 10.0.0.0, Mask 255.0.0.0, Protocol 0, Port 0 Oct 15 17:09:03 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, QM IsRekeyed old sa not found by addr Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Selecting only UDP-Encapsulated-Tunnel and UDP-Encapsulated-Transport modes defined by NAT-Traversal Oct 15 17:09:03 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKE Remote Peer configured for crypto map: dyn1 Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, processing IPSec SA payload Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IPSec SA Proposal # 1, Transform # 6 acceptable Matches global IPSec SA entry # 1 Oct 15 17:09:03 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKE: requesting SPI! IPSEC: New embryonic SA created @ 0xCB809F40, SCB: 0xC9613DB0, Direction: inbound SPI : 0x96A6C295 Session ID: 0x0001D000 VPIF num : 0x00000002 Tunnel type: ra Protocol : esp Lifetime : 240 seconds Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKE got SPI from key engine: SPI = 0x96a6c295 Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, oakley constucting quick mode Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, constructing blank hash payload Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, constructing IPSec SA payload Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, constructing IPSec nonce payload Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, constructing proxy ID Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Transmitting Proxy Id: Remote host: 172.17.1.1 Protocol 0 Port 0 Local subnet: 10.0.0.0 mask 255.0.0.0 Protocol 0 Port 0 Oct 15 17:09:03 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, constructing qm hash payload Oct 15 17:09:03 [IKEv1 DECODE]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKE Responder sending 2nd QM pkt: msg id = c9359d2e Oct 15 17:09:03 [IKEv1]: IP = 197.79.9.227, IKE_DECODE SENDING Message (msgid=c9359d2e) with payloads : HDR + HASH (8) + SA (1) + NONCE (10) + ID (5) + ID (5) + NONE (0) total length : 152 Oct 15 17:09:06 [IKEv1]: IP = 197.79.9.227, IKE_DECODE RECEIVED Message (msgid=c9359d2e) with payloads : HDR + HASH (8) + NONE (0) total length : 52 Oct 15 17:09:06 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, processing hash payload Oct 15 17:09:06 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, loading all IPSEC SAs Oct 15 17:09:06 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Generating Quick Mode Key! Oct 15 17:09:06 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, NP encrypt rule look up for crypto map dyn1 1 matching ACL Unknown: returned cs_id=c9f22e78; rule=00000000 Oct 15 17:09:06 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Generating Quick Mode Key! Oct 15 17:09:06 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, NP encrypt rule look up for crypto map dyn1 1 matching ACL Unknown: returned cs_id=c9f22e78; rule=00000000 Oct 15 17:09:06 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Security negotiation complete for User (person2) Responder, Inbound SPI = 0x96a6c295, Outbound SPI = 0x09e97594 IPSEC: New embryonic SA created @ 0xCB8F7418, SCB: 0xC9F6DD30, Direction: outbound SPI : 0x09E97594 Session ID: 0x0001D000 VPIF num : 0x00000002 Tunnel type: ra Protocol : esp Lifetime : 240 seconds IPSEC: Completed host OBSA update, SPI 0x09E97594 IPSEC: Creating outbound VPN context, SPI 0x09E97594 Flags: 0x00000025 SA : 0xCB8F7418 SPI : 0x09E97594 MTU : 1492 bytes VCID : 0x00000000 Peer : 0x00000000 SCB : 0x99890723 Channel: 0xC6691360 IPSEC: Completed outbound VPN context, SPI 0x09E97594 VPN handle: 0x001E7FCC IPSEC: New outbound encrypt rule, SPI 0x09E97594 Src addr: 10.0.0.0 Src mask: 255.0.0.0 Dst addr: 172.17.1.1 Dst mask: 255.255.255.255 Src ports Upper: 0 Lower: 0 Op : ignore Dst ports Upper: 0 Lower: 0 Op : ignore Protocol: 0 Use protocol: false SPI: 0x00000000 Use SPI: false IPSEC: Completed outbound encrypt rule, SPI 0x09E97594 Rule ID: 0xCB5483E8 IPSEC: New outbound permit rule, SPI 0x09E97594 Src addr: 196.215.40.160 Src mask: 255.255.255.255 Dst addr: 197.79.9.227 Dst mask: 255.255.255.255 Src ports Upper: 4500 Lower: 4500 Op : equal Dst ports Upper: 41593 Lower: 41593 Op : equal Protocol: 17 Use protocol: true SPI: 0x00000000 Use SPI: false IPSEC: Completed outbound permit rule, SPI 0x09E97594 Rule ID: 0xC9242228 Oct 15 17:09:06 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, IKE got a KEY_ADD msg for SA: SPI = 0x09e97594 IPSEC: Completed host IBSA update, SPI 0x96A6C295 IPSEC: Creating inbound VPN context, SPI 0x96A6C295 Flags: 0x00000026 SA : 0xCB809F40 SPI : 0x96A6C295 MTU : 0 bytes VCID : 0x00000000 Peer : 0x001E7FCC SCB : 0x985C5DA5 Channel: 0xC6691360 IPSEC: Completed inbound VPN context, SPI 0x96A6C295 VPN handle: 0x0020190C IPSEC: Updating outbound VPN context 0x001E7FCC, SPI 0x09E97594 Flags: 0x00000025 SA : 0xCB8F7418 SPI : 0x09E97594 MTU : 1492 bytes VCID : 0x00000000 Peer : 0x0020190C SCB : 0x99890723 Channel: 0xC6691360 IPSEC: Completed outbound VPN context, SPI 0x09E97594 VPN handle: 0x001E7FCC IPSEC: Completed outbound inner rule, SPI 0x09E97594 Rule ID: 0xCB5483E8 IPSEC: Completed outbound outer SPD rule, SPI 0x09E97594 Rule ID: 0xC9242228 IPSEC: New inbound tunnel flow rule, SPI 0x96A6C295 Src addr: 172.17.1.1 Src mask: 255.255.255.255 Dst addr: 10.0.0.0 Dst mask: 255.0.0.0 Src ports Upper: 0 Lower: 0 Op : ignore Dst ports Upper: 0 Lower: 0 Op : ignore Protocol: 0 Use protocol: false SPI: 0x00000000 Use SPI: false IPSEC: Completed inbound tunnel flow rule, SPI 0x96A6C295 Rule ID: 0xCB7CFCC8 IPSEC: New inbound decrypt rule, SPI 0x96A6C295 Src addr: 197.79.9.227 Src mask: 255.255.255.255 Dst addr: 196.215.40.160 Dst mask: 255.255.255.255 Src ports Upper: 41593 Lower: 41593 Op : equal Dst ports Upper: 4500 Lower: 4500 Op : equal Protocol: 17 Use protocol: true SPI: 0x00000000 Use SPI: false IPSEC: Completed inbound decrypt rule, SPI 0x96A6C295 Rule ID: 0xCB9BF828 IPSEC: New inbound permit rule, SPI 0x96A6C295 Src addr: 197.79.9.227 Src mask: 255.255.255.255 Dst addr: 196.215.40.160 Dst mask: 255.255.255.255 Src ports Upper: 41593 Lower: 41593 Op : equal Dst ports Upper: 4500 Lower: 4500 Op : equal Protocol: 17 Use protocol: true SPI: 0x00000000 Use SPI: false IPSEC: Completed inbound permit rule, SPI 0x96A6C295 Rule ID: 0xCBA7C740 Oct 15 17:09:06 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Pitcher: received KEY_UPDATE, spi 0x96a6c295 Oct 15 17:09:06 [IKEv1 DEBUG]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Starting P2 rekey timer: 3417 seconds. Oct 15 17:09:06 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, Adding static route for client address: 172.17.1.1 Oct 15 17:09:06 [IKEv1]: Group = OurIPSEC, Username = person2, IP = 197.79.9.227, PHASE 2 COMPLETED (msgid=c9359d2e)
... View more
Created by
Lionel271
in VPN and AnyConnect
in VPN and AnyConnect
10-15-2013
07:19 AM
10-15-2013
07:19 AM
Hi The previous VPN pool was 10.1.2.1-10.1.2.254. The LAN subnet mask was 255.255.255.0 and is now 255.0.0.0. More IP address were required on the LAN side. The Cisco ASA is directly connected to the LAN, no routers in between. The devices on the LAN that need to be accessed use the Cisco ASA as their default gateway. There are other devices that use a different router, but these have static routes for 172.17.1.0/24 to 10.1.1.2. Both configurations don't work with the VPN. The WAN side of the Cisco ASA connects via PPPoE (as per the configuration) to a DSL modem. The tunnel group being used is the one label OurIPSEC. During checking the debug logs, I've noticed that it says both the ASA and the client device is behind NAT, but neither of them are, although NAT traversal is enabled and we would like to support NAT. Regards Lionel
... View more
Created by
Lionel271
in VPN and AnyConnect
in VPN and AnyConnect
10-15-2013
06:12 AM
10-15-2013
06:12 AM
Hi I've changed the VPN IP pool on a previously functioning VPN setup on a Cisco ASA5505, I've updated IP addresses everywhere it seemed appropriate, but now the VPN is no longer working. I am testing with a Cisco IPSec client, but the same happens with the AnyConnect client. Clients connect, but cannot access resources on the LAN. Split tunneling also doesn't work, internet is not accessible once VPN is connected. I found a NAT exempt rule to not be correctly specified, but after fixing this, the problem still persists. : Saved : ASA Version 8.2(1) ! hostname ciscoasa domain-name our-domain.com enable password xxxxxxxx encrypted passwd xxxxxxxx encrypted names name 172.17.1.0 remote-vpn ! interface Vlan1 nameif inside security-level 100 ip address 10.1.1.2 255.0.0.0 ! interface Vlan2 nameif outside security-level 0 pppoe client vpdn group adslrealm ip address pppoe setroute ! interface Ethernet0/0 switchport access vlan 2 ! interface Ethernet0/1 ! interface Ethernet0/2 ! interface Ethernet0/3 ! interface Ethernet0/4 ! interface Ethernet0/5 ! interface Ethernet0/6 ! interface Ethernet0/7 ! ftp mode passive clock timezone SAST 2 dns domain-lookup inside dns domain-lookup outside dns server-group DefaultDNS name-server 10.1.1.138 name-server 10.1.1.54 domain-name our-domain.com same-security-traffic permit inter-interface same-security-traffic permit intra-interface object-group network ut object-group protocol TCPUDP protocol-object udp protocol-object tcp access-list no_nat extended permit ip 10.0.0.0 255.0.0.0 remote-vpn 255.255.255.0 access-list split-tunnel standard permit 10.0.0.0 255.0.0.0 access-list outside_access_in extended permit tcp any interface outside eq https access-list outside_access_in extended permit tcp any interface outside eq 5061 access-list outside_access_in extended permit tcp any interface outside eq 51413 access-list outside_access_in extended permit udp any interface outside eq 51413 access-list outside_access_in extended permit tcp any interface outside eq 2121 access-list outside_access_in extended permit udp any interface outside eq 2121 access-list inside_access_out extended deny ip any 64.34.106.0 255.255.255.0 access-list inside_access_out extended deny ip any 69.25.20.0 255.255.255.0 access-list inside_access_out extended deny ip any 69.25.21.0 255.255.255.0 access-list inside_access_out extended deny ip any 72.5.76.0 255.255.255.0 access-list inside_access_out extended deny ip any 72.5.77.0 255.255.255.0 access-list inside_access_out extended deny ip any 216.52.0.0 255.255.0.0 access-list inside_access_out extended deny ip any 74.201.0.0 255.255.0.0 access-list inside_access_out extended deny ip any 64.94.0.0 255.255.0.0 access-list inside_access_out extended deny ip any 69.25.0.0 255.255.0.0 access-list inside_access_out extended deny tcp any any eq 12975 access-list inside_access_out extended deny tcp any any eq 32976 access-list inside_access_out extended deny tcp any any eq 17771 access-list inside_access_out extended deny udp any any eq 17771 access-list inside_access_out extended permit ip any any pager lines 24 logging enable logging asdm informational mtu inside 1500 mtu outside 1500 ip local pool VPNPool 172.17.1.1-172.17.1.254 icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 0 access-list no_nat nat (inside) 1 10.0.0.0 255.0.0.0 static (inside,outside) tcp interface 5061 10.1.1.157 5061 netmask 255.255.255.255 static (inside,outside) tcp interface https 10.1.1.157 4443 netmask 255.255.255.255 static (inside,outside) tcp interface 51413 10.1.1.25 51413 netmask 255.255.255.255 static (inside,outside) udp interface 51413 10.1.1.25 51413 netmask 255.255.255.255 static (inside,outside) tcp interface 2121 10.1.1.25 2121 netmask 255.255.255.255 static (inside,outside) udp interface 2121 10.1.1.25 2121 netmask 255.255.255.255 access-group outside_access_in in interface outside timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 dynamic-access-policy-record DfltAccessPolicy aaa-server AD protocol ldap aaa-server AD (inside) host 10.1.1.138 ldap-base-dn dc=our-domain,dc=com ldap-scope subtree ldap-naming-attribute sAMAccountName ldap-login-password * ldap-login-dn cn=ciscoasa,cn=Users,dc=ourdomain,dc=com server-type auto-detect aaa authentication ssh console AD LOCAL aaa authentication telnet console LOCAL http server enable 4343 http 0.0.0.0 0.0.0.0 outside http 10.0.0.0 255.0.0.0 inside http remote-vpn 255.255.255.0 inside snmp-server host inside 10.1.1.190 community oursnmp snmp-server host inside 10.1.1.44 community oursnmp no snmp-server location no snmp-server contact snmp-server community ***** snmp-server enable traps snmp authentication linkup linkdown coldstart crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac crypto ipsec transform-set FirstSet esp-3des esp-md5-hmac crypto ipsec security-association lifetime seconds 28800 crypto ipsec security-association lifetime kilobytes 4608000 crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5 crypto dynamic-map dyn1 1 set transform-set FirstSet crypto dynamic-map dyn1 1 set reverse-route crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP crypto map mymap 1 ipsec-isakmp dynamic dyn1 crypto map mymap interface outside crypto ca trustpoint ASDM_TrustPoint0 enrollment self subject-name CN=ciscoasa crl configure crypto ca trustpoint CA1 revocation-check crl none enrollment retry period 5 enrollment terminal fqdn ciscoasa.our-domain.com subject-name CN=ciscoasa.our-domain.com, OU=Department, O=Company, C=US, St=New York, L=New York keypair ciscoasa.key crl configure crypto ca certificate chain ASDM_TrustPoint0 certificate xxxxxxx ... quit crypto ca certificate chain CA1 certificate xxxxxxxxxxxxxx ... quit certificate ca xxxxxxxxxxxxx ... quit crypto isakmp enable outside crypto isakmp policy 1 authentication rsa-sig encryption 3des hash md5 group 2 lifetime 86400 crypto isakmp policy 5 authentication pre-share encryption 3des hash sha group 2 lifetime 86400 crypto isakmp policy 10 authentication pre-share encryption des hash sha group 2 lifetime 86400 ssh 10.0.0.0 255.0.0.0 inside ssh timeout 5 console timeout 0 vpdn group adslrealm request dialout pppoe vpdn group adslrealm localname username6@adslrealm vpdn group adslrealm ppp authentication pap vpdn username username6@adslrealm password ********* store-local vpdn username username@adsl-u password ********* store-local vpdn username username2@adslrealm password ********* dhcpd auto_config outside ! threat-detection basic-threat threat-detection scanning-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept ntp server x.x.x.x source outside ssl trust-point ASDM_TrustPoint0 outside webvpn port 4343 enable outside svc image disk0:/anyconnect-win-2.5.2014-k9.pkg 1 svc image disk0:/anyconnect-macosx-i386-2.5.2014-k9.pkg 2 svc image disk0:/anyconnect-linux-2.5.2014-k9.pkg 3 svc enable group-policy defaultgroup internal group-policy defaultgroup attributes dns-server value 10.1.1.138 10.1.1.54 split-tunnel-policy tunnelspecified split-tunnel-network-list value split-tunnel default-domain value our-domain.com group-policy DfltGrpPolicy attributes dns-server value 10.1.1.138 10.1.1.54 vpn-tunnel-protocol IPSec l2tp-ipsec svc split-tunnel-policy tunnelspecified split-tunnel-network-list value split-tunnel address-pools value VPNPool webvpn svc ask none default svc username person1 password xxxxxxx encrypted username admin password xxxxxxxx encrypted privilege 15 username person2 password xxxxxxxxx encrypted username person3 password xxxxxxxxxx encrypted tunnel-group DefaultRAGroup general-attributes address-pool VPNPool default-group-policy defaultgroup tunnel-group DefaultRAGroup ipsec-attributes trust-point CA1 tunnel-group OurCompany type remote-access tunnel-group OurCompany general-attributes address-pool VPNPool tunnel-group OurCompany webvpn-attributes group-alias OurCompany enable group-url https://x.x.x.x/OurCompany enable tunnel-group OurIPSEC type remote-access tunnel-group OurIPSEC general-attributes address-pool VPNPool default-group-policy defaultgroup tunnel-group OurIPSEC ipsec-attributes pre-shared-key * trust-point CA1 ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map type inspect sip sip-map parameters max-forwards-validation action drop log state-checking action drop log rtp-conformance policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect rsh inspect rtsp inspect esmtp inspect sqlnet inspect skinny inspect sunrpc inspect xdmcp inspect netbios inspect tftp inspect icmp inspect pptp inspect sip sip-map ! service-policy global_policy global prompt hostname context Cryptochecksum:xxxxxxxxxxxxxxxxx : end I've checked all the debug logs I could think of and tried various troubleshooting steps. Any ideas? Regards Lionel
... View more
- Tags:
- anyconnect_vpn
- asa
- asa5505
- asa_8.x
- connectivity_issues
- ssl
- ssl_vpn
- troubleshoot
- vpn
- vpn_client
- web_vpn
- webvpn
Labels:
08-22-2019
Thank you, Giuseppe. In fact, they do not exist. These attributes are
from a different setup. I have...
08-22-2019
I have the following PPPoE configuration on a router: aaa new-model !
aaa authentication ppp default...
Created by
Lionel271
in IP Telephony and Phones
06-01-2018
06-01-2018
Thank you. I have configured BLF. The buttons on the phone still
function properly (as BLF this time...
Created by
Lionel271
in IP Telephony and Phones
05-17-2018
05-17-2018
I'm configuring lines (in monitor mode), not speed-dials, as per the
above config. Is that my proble...
Created by
Lionel271
in IP Telephony and Phones
05-17-2018
05-17-2018
I'm having a problem with the labels showing on the phone, but not on
the expansion units. I have a ...
04-10-2018
Hi I am trying to determine a good method to ensure that a few thousand
users are able to share the ...
04-04-2018
Hi there! I am experiencing a problem which I suspect involves an issue
with route advertisement. Th...
Created by
Lionel271
in VPN and AnyConnect
10-15-2013
10-15-2013
HiI have made some progress. I connected the client device behind a NAT
router via DSL and I could a...
Created by
Lionel271
in VPN and AnyConnect
10-15-2013
10-15-2013
Also can't seem to access the internal IP of the ASA over the VPN, which
I believe is a step closer ...
Created by
Lionel271
in VPN and AnyConnect
10-15-2013
10-15-2013
HiThe bulk of the devices are not even routing through the ASA, internal
devices such as IP phones, ...
Created by
Lionel271
in VPN and AnyConnect
10-15-2013
10-15-2013
HiThe previous VPN pool was 10.1.2.1-10.1.2.254. The LAN subnet mask was
255.255.255.0 and is now 25...
Created by
Lionel271
in VPN and AnyConnect
10-15-2013
10-15-2013
HiI've changed the VPN IP pool on a previously functioning VPN setup on
a Cisco ASA5505, I've update...
Public Statistics
| Date Registered | 07-23-2010 02:22 AM |
| Date Last Visited | 08-27-2019 06:58 AM |
| Total Messages Posted | 17 |
