1. An incoming call is initially established as a voice call. 2. The gateways advertise capabilities in an SDP exchange during connection establishment. 3. If both gateways do not support T.38, fax pass-through is used for fax transmission. If both gateways do support T.38, they attempt to switch to T.38 upon fax tone detection. The existing audio channel is used for T.38 fax relay, and the existing connection port is reused to minimize delay. If failure occurs at some point during the switch to T.38, the call reverts to the original settings that it had as a voice call. If this failure occurs, a fallback to fax pass-through is not supported. 4. Upon completion of the fax image transfer, the connection remains established and reverts to a voice call using the previously designated codec, unless the CA instructs the gateway to do otherwise. If the CA has been configured to control fax relay, the CA instructs the gateway on processing the call with the fx: extension of the local connection option (LCO). ... View more

For automated, real-time signature updates, Cisco IronPort solutions can harness the Cisco IronPort SenderBase® Network, which provides an unprecedented real-time view into security threats from around the world. SenderBase data powers Cisco IronPort Virus Outbreak Filters, a preventive security service that protects enterprises from viruses well before antivirus vendors publish virus signatures. The SenderBase application examines the broadest set of data in the industry, currently examining more than 40 different parameters about web traffic. This data is derived from a highly diverse group of more than 100,000 organizations, including the largest networks in the world, which contribute information to the SenderBase application in five billion messages per day. ... View more

Both the AP Manger interface and the management interface can be on the same subnet. The important thing is that the management interface and the AP Manager interface have to be reachable from the LAPs. It is usually configured on the same VLAN or IP subnet as the management interface, but this is not a requirement. when you have multiple AP Manager interfaces configured to support a maximum number of LAPs, all the AP Manager interfaces have to be on the same subnet. You need Layer 3 connectivity between LAPs and the AP Manager and management interfaces on the Wireless LAN Controller (WLC). The LAPs can still be configured to be on different subnets. ... View more

When the replication starts, the security appliance console on the active unit displays the message "Beginning configuration replication: Sending to mate," and, when it is complete, the security appliance displays the message "End Configuration Replication to mate." Within replication, commands entered on the active unit cannot replicate properly to the standby unit, and commands entered on the standby unit can be overwritten by the configuration that is replicated from the active unit. Do not enter commands on either unit in the failover pair within the configuration replication process. Dependent upon the size of the configuration, replication can take from a few seconds to several minutes. http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml#devi ... View more

You can use the web-based authentication feature to authenticate end users on host systems that do not run the IEEE 802.1X supplicant. You can configure the web-based authentication feature on Layer 2 and Layer 3 interfaces. When a user initiates an HTTP session, the web-based authentication feature intercepts ingress HTTP packets from the host and sends an HTML login page to the user. The user keys in their credentials, which the web-based authentication feature sends to the AAA server for authentication. If the authentication succeeds, web-based authentication sends a Login-Successful HTML page to the host and applies the access policies returned by the AAA server. http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/webauth.html#wp1067205 ... View more

If the users are frequently disconnected across the L2L tunnel, the problem can be the lesser lifetime configured in ISAKMP SA. If any discrepancy occurs in the ISAKMP lifetime, you can recieve the %PIX-5-713092: Group = x.x.x.x, IP = x.x.x.x, Failure during phase 1 rekeying attempt due to collision error message. Configure the same value in both the peers in order to fix it. The default is 86,400 seconds or 24 hours. As a general rule, a shorter lifetime provides more secure ISAKMP negotiations (up to a point), but, with shorter lifetimes, the security appliance sets up future IPsec SAs more quickly. A match is made when both policies from the two peers contain the same encryption, hash, authentication, and Diffie-Hellman parameter values, and when the policy of the remote peer specifies a lifetime less than or equal to the lifetime in the compared policy. If the lifetimes are not identical, the shorter lifetime-from the policy of the remote peer-is used. If no acceptable match is found, the IKE refuses negotiation, and the IKE SA is not established. ... View more

What is the version of your CRS deployment? Is it High Availability (2 CRS servers in the cluster)? What is your CallManager version? Where did you get the SQL install from? As part of the media kit to install CRS? ... View more

To use load balancing, configure the following elements for each device that participates in the cluster. • Public and private interfaces • VPN load-balancing cluster attributes http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/vpnsysop.html#wp1048959 ... View more

Setting the forward on failure option on a CTI Route Point only forwards an "initiated" call. That means if the call has been routed to the IPCC server from the Route Point, and then the Route Point fails, the call will be routed accordingly. ... View more

Which port is the PBX connected to on the Router? (FXO or FXS) Do you hear some kind of dial tone when you have PBX connected to the routers port? Have you had problems with the Panasonic PBX in the past? ... View more

Try to disable health-monitor process. ... View more

With Cisco NAC Appliance Out-of-Band deployment, the Clean Access Server (CAS) is inline with user traffic only during the process of authentication, assessment and remediation. Following that, user traffic does not pass through the CAS. In OOB deployment, the Clean Access Manager (CAM) uses SNMP to control switches and set VLAN assignments for ports. When the CAM/CAS are set up for OOB, the CAM can control the switch ports of supported switches/NMEs with the corresponding IOS/CatOS versions listed in the following tables: •OOB Supported Switches •OOB Supported (NME) EtherSwitch Service Modules •MAC-Move Notification Support •Wireless Out-of-Band (WOOB) Switch/Wireless LAN Controller Support Wireless OOB only supports Layer 2 OOB Virtual Gateway deployments that require no IP change. Because the Cisco NAC Network Module does not support this topology, the NAC Network Module is not supported for Wireless OOB. http://www.cisco.com/en/US/docs/security/nac/appliance/support_guide/switch_spt.html#wp45132 ... View more

These IDS signatures ship with the controller as “standard IDS signatures”. You can modify all these signature parameters, as the Controller IDS Parameters section here https://www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a008063e5d0.shtml#para Flood is generated by AP mac belonging to ML02. It is IDS triggering incorrectly, or something else, a wireless sniffer trace will prove 100%. If you use MFP, instead of ap auth, then you can know if this was sent by spoofing tool, or by AP. (MFP may generate issues with old Intel clients) ... View more

ensure verify that CDP is enabled on switch. Cisco Discovery Protocol (CDP) is primarily used to obtain protocol addresses of neighboring devices and discover the platform of those devices. CDP can also be used to show information about the interfaces your router uses. CDP is media- and protocol-independent, and runs on all Cisco-manufactured equipment including routers, bridges, access servers, and switches. Each device configured for CDP sends periodic messages, known as advertisements, to a multicast address. Each device advertises at least one address at which it can receive SNMP messages. The advertisements also contain time-to-live, or holdtime, information, which indicates the length of time a receiving device should hold CDP information before discarding it. Each device also listens to the periodic CDP messages sent by others in order to learn about neighboring devices and determine when their interfaces to the media go up or down. ... View more

To use MOH in an IPCCX script, you can use "Hold" and "Unhold" steps. You will have to configure MOH on CTI Ports. Also, you should set Max Calls on CTI Ports to "4". Unified Contact Center Express (CTI Port Configuration): http://www.cisco.com/en/US/docs/voice_ip_comm/uc_system/UC7.0.1/ipt_system_arch/call_control/RCccUCCX.html#wp999717 Music on Hold: https://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/6x/moh.html ... View more