Re: Connectivity to UC560 problem - Page 2

itdeltastocks · ‎12-02-2011

Hello, I can't get connectivity between my computer and UC560. My UC560 with the IP 192.168.10.1 is connected to a poe switch where the ip phones are connected.The phones are in the 192.68.10.x net. On the other hand, the computers are connected to a net with 192.168.0.x and gateway 192.168.0.1. Well, by that networks configuration I can ping from my computer to the phones, but in the case of making a ping to the UC560, i get this response "destination net unreachable". Checking the UC560 log I get:

==================show ip route==================

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 5 subnets, 3 masks

C 10.1.1.0/24 is directly connected, BVI100

L 10.1.1.1/32 is directly connected, BVI100

C 10.1.10.0/30 is directly connected, Vlan90

S 10.1.10.1/32 is directly connected, Vlan90

L 10.1.10.2/32 is directly connected, Vlan90

S 192.168.0.0/16 [1/0] via 192.168.10.2

192.168.10.0/24 is variably subnetted, 2 subnets, 2 masks

C 192.168.10.0/24 is directly connected, Vlan1

L 192.168.10.1/32 is directly connected, Vlan1

==================show access-list==================

Standard IP access list 1

10 permit 10.1.1.0, wildcard bits 0.0.0.255

20 permit 192.168.10.0, wildcard bits 0.0.0.255

30 permit 10.1.10.0, wildcard bits 0.0.0.3

---------------------------------------------------------------------------------

So, which could be the problem? Thank you very much

itdeltastocks · ‎05-15-2012

Thank you very much, I'm attaching the log file.

I'ts an aggravating situation because I want to fix it properly, however the configurations that I inherated from someone else has been (working ) like this since 2010. As I explain, actually the phones are working on data vlan 1 (192.168.10.x).

The configuration I'm trying to achieve is first make working the phone on cisco voice lan and second use phones's pc port and change data vlan to 192.168.0.x which is my current computer's net. Also my Linksys SRW224G4P (non CDP protocol compatible) is manually configured to tag Vlan 100 and untag vlan1.

Thanks to all of your responses I know that this is the best and simply conf and I'm starting to think that maybe someday I'll need to start UC560 from scratch to set conf properly because I'm 99% sure that is a Vlan conf problem. If you read the log, correct me if I'm wrong, but I think that interface Vlan100 (cisco default voice vlan) is not taking any ip address. Maybe that is the problem, but CCA doesn't allow me to type 10.1.1.1 255.255.255.0 (default voice vlan) because there is an interface BVI100 wich has that values and I don't what BVI interfaces are for. Thanks

David Trad · ‎05-15-2012

Hi Jordie,

That has to be the most unusual config I have seen in quite sometime, this

system was originally designed by CCA or at least part of it, and then

heavily modified via CLI.

Its this part of the config that concerns me:

interface Vlan1

description $FW_INSIDE$

ip address 192.168.10.1 255.255.255.0

ip access-group 101 in

ip nat inside

ip virtual-reassembly

!

interface Vlan90

description $FW_INSIDE$

ip address 10.1.10.2 255.255.255.252

ip access-group 102 in

ip nat inside

ip virtual-reassembly

!

interface Vlan100

description $FW_INSIDE$

no ip address

ip access-group 103 in

!

interface BVI1

description $FW_INSIDE$

mtu 1514

ip access-group 101 in

ip nat inside

ip virtual-reassembly

!

interface BVI100

description $FW_INSIDE$

mtu 1514

ip address 10.1.1.1 255.255.255.0

ip nat inside

ip virtual-reassembly

A normal configuration that I would see is the following:

interface Vlan1

description $FW_INSIDE$

no IP address

ip access-group 101 in

!

interface Vlan90

description $FW_INSIDE$

ip address 10.1.10.2 255.255.255.252

ip access-group 102 in

ip nat inside

ip virtual-reassembly

!

interface Vlan100

description $FW_INSIDE$

no ip address

ip access-group 103 in

!

interface BVI1

description $FW_INSIDE$

mtu 1514

ip address 192.168.10.1 255.255.255.0

ip access-group 101 in

ip nat inside

ip virtual-reassembly

!

interface BVI100

mtu 1514

ip address 10.1.1.1 255.255.255.0

ip access-group 103 in

ip nat inside

ip virtual-reassembly

Anyway it would be good if I can organise a remote session with you, I

would like to work on this with you, don't change anything with the config

and save it (Commit it to memory) until fully tested, I would like to go

through some other configs I have and do some comparison testing just to be

certain.

Cheers,

David Trad

"Sent from my Acer Iconia A500"

On May 15, 2012 6:33 PM, "itdeltastocks" <

Cheers, David Trad. **When you rate a persons post, you are indicating a thank you or that it helped, but at the same time you are also helping to maintain the community spirit - You don't have to rate posts and you wont be looked down upon :) *

itdeltastocks · ‎05-15-2012

Thank you David. As you mention is the most unusual config you ever see and it's our current config . Maybe instead of trying to fix step by step the Vlans an other stuff, the best solution is reset factory the UC560 and start the CCA setup wizard to make the default smart cisco design. What do you think? It's hard to reconfigure all again, however if finally I can achive a proper configuration the reward will worth it.

David Trad · ‎05-15-2012

Hi Jordi,

≥ 30 handsets you can rebuild the system to a very much usable state within

3 hours Max, a further 1 hour to tweak it, this is assuming no issues

during the build process.

Make sure you follow the PDD principle: Plan - Develop - Deploy

I am happy to help you with the planning and development segments as this

is the most critical part if the rebuild.

You should peg it for a weekend rebuild just in case you do fall into some

trouble.

Cheers,

David Trad

"Sent from my Acer Iconia A500"

On May 15, 2012 8:53 PM, "itdeltastocks" <

Cheers, David Trad. **When you rate a persons post, you are indicating a thank you or that it helped, but at the same time you are also helping to maintain the community spirit - You don't have to rate posts and you wont be looked down upon :) *

itdeltastocks · ‎05-15-2012

Ok, I'll do it next month on holidays period. Thank you very much for your time. I'll post the result, hoping that everything goes well

itdeltastocks · ‎06-18-2012

Hi David, last weekend I did a factory reset of our UC560 configured the hole thing again and now it seems everything goes OK!(Attached actual log configuration). UC560 Ip is 192.168.0.20. Phones are working on voice vlan 100 (10.1.1.x), Data Vlan 1 is assigned to 192.168.0.x (I changed the default 192.168.10.x) and connecting a computer to the phone's pc port assigns a ip of 192.168.0.x to that computer(manually because I removed the data DHCP server). I think the hard part is done, so now the next step is tweak the network.Thank you very much

PD: Just last question, before reset from factory internal extensions dial automatically, now after the reset, we must dial the extension and press the button dial, where can I configure this feature only for internal extensions? Thank you