Re: SkyStone / Skype / Voicemail Issue - Page 2

brian.russell31 · ‎08-13-2009

Hi,

I have purchased the Skystone software for Skype and my UC520 which is great. I have an landline number attached to my skype account.

However when someone calls my Skype landline number the call is routed to the correct phone (2001) however it doesn't drop into voicemail when I dont answer, Instead the user is requested to enter their extension ID...

However when I call the same phone (2001) from my softphone (2002) when I dont answer it drops into voicemail as it should...

What is the difference between a direct ext to ext call versus a skystone call being directed to the extension (2001)?

The message is "Enter your ID followed by #"....

Thanks

Brian

JOHN NIKOLATOS · ‎08-20-2009

Any resolution yet?

Funny thing is your CCAPI IN/OUT debug shows the first call on dial-peer 20003 going to "called number=2001" and then I see the "called number=2099" on the 2nd call.. using dial-peer 9999

brian.russell31 · ‎08-21-2009

Hey John,

No resolution yet.....

Its weird since I added the addtional commands, when I dial either from my softphone or skype they both drop into the voicemail as they should... However calls from Skype or from landline to skype dont seem to leave a vmail even though it looks like they have dropped into it....

When I check by either dialling 2099 or pressing the messages button and leaving messages from both resources I only seem to have the vmail from the softphone....

Thanks

Brian

Steven Smith · ‎08-21-2009

What is the default gateway of your Skype box?

brian.russell31 · ‎08-21-2009

Hi Steven,

Details are:

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : SiS191 1000/100/10 Ethernet Device
   Physical Address. . . . . . . . . : 00-0A-E4-87-97-88
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IP Address. . . . . . . . . . . . : 10.54.8.9
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.54.8.1
   DHCP Server . . . . . . . . . . . : 10.54.8.1
   DNS Servers . . . . . . . . . . . : 83.238.255.76
                                       213.241.79.37
   Lease Obtained. . . . . . . . . . : 21 August 2009 10:52:43
   Lease Expires . . . . . . . . . . : 22 August 2009 10:52:43

C:\Documents and Settings\Administrator>

Steven Smith · ‎08-21-2009

I tried calling in and received the VM greeting. I pressed #, but I didn't get any responce. The problem sounds like IP traffic might not be making it to the CUE module. Can you get a sniffer from when you try to call and leave a VM from your computer?

JOHN NIKOLATOS · ‎08-21-2009

Just disable the access-lists for now... try that.. I bet you changed the default IP subnets and you have an old access-list in there blocking stuff up.

brian.russell31 · ‎08-24-2009

Hey John, Wont disabling my access list make my system vulnerable ?

Thanks

Brian

JOHN NIKOLATOS · ‎08-24-2009

Brian,

There are multiple access lists... some protect the interface to the internet and other deny traffic from the data vlans to the voice vlans. The CCA will place the correct security on the interfaces but if you change the IP address on the VLANs from the CLI... (maybe other places) the access-lists are going to block traffic that needs to be allowed.

I bet the access-lists are blocking something here.. I have personally seen it a bunch of times... (I have been right before!)

If you look at your configuration you will see where the internet interface is using the access-list... leave that one.... but copy all the access-lists to WORDPAD or something and erase all the others temporarily... and see if it helps... You can just cut and paste them back in to get them back..... or reboot (if you can) that will place everything back the way it was. (dont save before you reboot or when prompted). Again this is just for a quick test.

brian.russell31 · ‎08-24-2009

Hi Steven,

What sniffer would you recommend.... I have no real experience in sniffers as anytime I have had issues I always involved the network experts....

I assume I would install it and point it to the ip address of the router or the CUE 10.1.10.1 or are there any other web interfaces I dont know about?

Thanks

Brian

Steven Smith · ‎08-24-2009

I would recommend using wireshark on your own PC. Make the skype call and see what happens. You just need to run it while you are making the call.

http://www.wireshark.org/

brian.russell31 · ‎08-25-2009

Hi Steven,

Are you sure I should run the WireShark on my laptop where I am making the calls from and not the server where the SkyStone Software is running?

All that we would capture from my laptop is the skype to skype traffic....

This would not capture the landline to skype or skype to skype inbound to SkyStone to the UC520....

Thanks

Brian

JOHN NIKOLATOS · ‎08-25-2009

Brian,

DId you try removing the access-lists? Just do this:

no access-list 100

no access-list 102

no access-list 103

no access-list 104

Then try it again.... DONT SAVE... This will at least tell us if an access-list is blocking the voice traffic...

----------------SAVE THIS TO PASTE BACK IN-----------------------------

access-list 100 remark auto generated by SDM firewall configuration
access-list 100 remark SDM_ACL Category=1
access-list 100 deny   ip 192.168.10.0 0.0.0.255 any
access-list 100 deny   ip host 255.255.255.255 any
access-list 100 deny   ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto generated by SDM firewall configuration##NO_ACES_8##
access-list 101 remark SDM_ACL Category=1
access-list 101 permit udp any host 10.1.10.2 eq non500-isakmp
access-list 101 permit udp any host 10.1.10.2 eq isakmp
access-list 101 permit esp any host 10.1.10.2
access-list 101 permit ahp any host 10.1.10.2
access-list 101 permit tcp 10.54.9.0 0.0.0.255 eq 2000 any
access-list 101 permit udp 10.54.9.0 0.0.0.255 eq 2000 any
access-list 101 deny   ip 87.205.126.0 0.0.0.255 any
access-list 101 deny   ip 10.54.9.0 0.0.0.255 any
access-list 101 deny   ip 10.54.8.0 0.0.0.255 any
access-list 101 deny   ip host 255.255.255.255 any
access-list 101 deny   ip 127.0.0.0 0.255.255.255 any
access-list 101 permit ip any any
access-list 102 remark auto generated by SDM firewall configuration##NO_ACES_6##
access-list 102 remark SDM_ACL Category=1
access-list 102 permit udp any host 10.54.8.1 eq non500-isakmp
access-list 102 permit udp any host 10.54.8.1 eq isakmp
access-list 102 permit esp any host 10.54.8.1
access-list 102 permit ahp any host 10.54.8.1
access-list 102 deny   ip 10.1.10.0 0.0.0.3 any
access-list 102 deny   ip 87.205.126.0 0.0.0.255 any
access-list 102 deny   ip 10.54.9.0 0.0.0.255 any
access-list 102 deny   ip host 255.255.255.255 any
access-list 102 deny   ip 127.0.0.0 0.255.255.255 any
access-list 102 permit ip any any
access-list 103 remark auto generated by SDM firewall configuration##NO_ACES_8##
access-list 103 remark SDM_ACL Category=1
access-list 103 permit udp any host 10.54.9.1 eq non500-isakmp
access-list 103 permit udp any host 10.54.9.1 eq isakmp
access-list 103 permit esp any host 10.54.9.1
access-list 103 permit ahp any host 10.54.9.1
access-list 103 permit tcp 10.1.10.0 0.0.0.3 any eq 2000
access-list 103 permit udp 10.1.10.0 0.0.0.3 any eq 2000
access-list 103 deny   ip 10.1.10.0 0.0.0.3 any
access-list 103 deny   ip 87.205.126.0 0.0.0.255 any
access-list 103 deny   ip 10.54.8.0 0.0.0.255 any
access-list 103 deny   ip host 255.255.255.255 any
access-list 103 deny   ip 127.0.0.0 0.255.255.255 any
access-list 103 permit ip any any

brian.russell31 · ‎08-25-2009

John,

Your a genius....It works.... But here is a cavet... When making calls either from Skype or the fixed line to skype both leave the voicemails and I can pick up...

However; when leaving a vmail from skype to skpe the MWI lights up and I can hit the # key to enter the menu to leave it high priority....

But when calling my "skype in" number and pressing the the # on either my cell phone or office phone i dont get a response and the MWI indicator does not light up even though there is a message waiting which I can pick up.....

Strange....

What access list do I put back in now?

Thanks for all your help.....

BTW my UC520 rebooted itself last night.... Is that normal?

and I have these files on the flash card:

268     326443 Jun 30 2009 08:10:42 +02:00 crashinfo_20090630-061042
269     292832 Jul 27 2009 04:39:16 +02:00 crashinfo_20090727-023916
270     295517 Jul 29 2009 04:00:26 +02:00 crashinfo_20090729-020026

Thanks

Brian

JOHN NIKOLATOS · ‎08-25-2009

The crash is not normal... I would open a TAC case...

Listen - you have modified the IP subnets and VLAN's with your own numbers. Somewhere the Access-lists got fat fingered and mistyped. Apply one of them back in at a time and see which one disables your voice again... then when you find the one, you are going to have to figure out what it wrong with it. It is blocking something. I dont know which one... just do some testing...

Also - is there a way you can just do this all over again? Using the CCA to start it all off and add as many commands using CCA until you have to use CLI? I would try that. It seems like you may have some typos.. If not, Save the configuration out for safe keeping - open the uc500 in the CCA and remove and replace the firewall... it may help get the correct one in there.... It may help the WMI as well.

brian.russell31 · ‎08-25-2009

Hi John,

Ok, I think its best to start again.... I will format the flash card and get the CCA 2.0.1 to do all the hard work....

Which version should I use 7.0.3 or 7.1.1 ??? Are there any later releases available?

Also before I change it all I tried to switch the default language to UK I think I have all the language packs but the the CCA dont like it for some strange reason?

Are there any best practice docs I could follow before setting it all back up?

Thanks

Brian