DHCP Server Not Working in UC540

[chris.kok]

Hi Guys, 

Recently one of the staff accidentally power down the UC540 and when she power it up again, the UC boot in factory default. 

So i tried to restore the previous config but it didn't work. It seems that the DHCP server is not working. The phone keeps showing IPv4 DHCP Timeout and one of the phone is stuck in upgrading.

The funny part is, if i set static IP on the phone it will register itself but once i enable DHCP on the phone again then it unregister itself.

Need Help on this please anyone.

Thanks

[chris.kok]

Here is the sh run

version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
! card type command needed for slot/vwic-slot 0/2
!
no aaa new-model
!
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-1017442710
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1017442710
 revocation-check none
 rsakeypair TP-self-signed-1017442710
!
!
crypto pki certificate chain TP-self-signed-1017442710
 certificate self-signed 01
  3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 31303137 34343237 3130301E 170D3134 30353234 31383432
  32375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 30313734
  34323731 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  81008A5A 941EA42F 7AE4842B F47DB1F5 BBA61E54 761314FE 7A2F8EE4 69D76AC4
  ECB7CB4F 8C96C220 8FDB4E0E 2643B443 BB7516E9 C98A1501 DB265E57 07F0EDF9
  077F216C 61CFC8CE 78D99564 E74FC897 8524B6E2 7EC5A828 FDA093C3 46386D4D
  458BDE23 BFF77D08 387AEF4D E60EC6E2 7C2450A2 D756A9D7 47EDE4FF E9A82616
  94850203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
  551D2304 18301680 14468EFF 8E773767 1BCA72F1 F5848A61 35CDE2F0 EE301D06
  03551D0E 04160414 468EFF8E 7737671B CA72F1F5 848A6135 CDE2F0EE 300D0609
  2A864886 F70D0101 05050003 81810055 15D09AB8 81408B0B 18A46944 F0E62FEC
  7982451A EF4B8695 6C6B7DE9 276DAB1E 3895AA2D 422D8E06 0B387EED 1CA99BC0
  5E5C5BF7 E5914902 C6B9ADD4 16054518 BB215DB5 FF505842 8DCF5B7B 3AD307B4
  DE95FCB9 1EC048AE 57B6EFB8 8DF2F9FD FBC319C6 F019173F 3FC58302 7166CF34
  B9C7BA9C 32E179DE 637EABC3 653859
        quit
dot11 syslog
!
dot11 ssid cisco-data
 vlan 1
 authentication open
!
dot11 ssid cisco-voice
 vlan 100
 authentication open
!
ip source-route
ip cef
!
!
ip dhcp relay information trust-all
ip dhcp excluded-address 10.1.1.1 10.1.1.9
ip dhcp excluded-address 10.1.1.241 10.1.1.255
ip dhcp excluded-address 192.168.10.1 192.168.10.9
ip dhcp excluded-address 192.168.10.241 192.168.10.255
!
ip dhcp pool phone
 network 10.1.1.0 255.255.255.0
 default-router 10.1.1.1
 option 150 ip 10.1.1.1
!
ip dhcp pool data
 import all
 network 192.168.10.0 255.255.255.0
 default-router 192.168.10.1
 option 150 ip 192.168.10.1
!
!
!
ip inspect name SDM_LOW dns
ip inspect name SDM_LOW ftp
ip inspect name SDM_LOW h323
ip inspect name SDM_LOW https
ip inspect name SDM_LOW icmp
ip inspect name SDM_LOW imap
ip inspect name SDM_LOW pop3
ip inspect name SDM_LOW netshow
ip inspect name SDM_LOW rcmd
ip inspect name SDM_LOW realaudio
ip inspect name SDM_LOW rtsp
ip inspect name SDM_LOW esmtp
ip inspect name SDM_LOW sqlnet
ip inspect name SDM_LOW streamworks
ip inspect name SDM_LOW tftp
ip inspect name SDM_LOW tcp router-traffic
ip inspect name SDM_LOW udp router-traffic
ip inspect name SDM_LOW vdolive
ip dhcp-client network-discovery informs 2 discovers 2 period 12
no ipv6 cef
!
multilink bundle-name authenticated
!
!
stcapp ccm-group 1
!
stcapp supplementary-services
 port 0/0/0
  fallback-dn 301
 port 0/0/1
  fallback-dn 304
 port 0/0/2
  fallback-dn 302
 port 0/0/3
  fallback-dn 303
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
license udi pid UC540W-FXO-K9 sn FGL153520YQ
!
!
ip tftp source-interface Loopback0
!
!
!
bridge irb
!
!
!
!
interface Loopback0
 description $FW_INSIDE$
 ip address 10.1.10.2 255.255.255.252
 ip broadcast-address 10.1.10.0
 ip access-group 101 in
 ip nat inside
 ip virtual-reassembly in
!
interface FastEthernet0/0
 description $FW_OUTSIDE$
 ip address dhcp client-id FastEthernet0/0
 ip broadcast-address 0.0.0.0
 ip access-group 104 in
 ip nat outside
 ip inspect SDM_LOW out
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface Integrated-Service-Engine0/0
 description cue is initialized with default IMAP group
 ip unnumbered Loopback0
 ip broadcast-address 0.0.0.0
 ip nat inside
 ip virtual-reassembly in
 service-module ip address 10.1.10.1 255.255.255.252
 service-module ip default-gateway 10.1.10.2
!
interface FastEthernet0/1/0
 switchport voice vlan 100
 no ip address
 macro description cisco-phone
 spanning-tree portfast
!
interface FastEthernet0/1/1
 switchport voice vlan 100
 no ip address
 macro description cisco-phone
 spanning-tree portfast
!
interface FastEthernet0/1/2
 switchport voice vlan 100
 no ip address
 macro description cisco-phone
 spanning-tree portfast
!
interface FastEthernet0/1/3
 switchport voice vlan 100
 no ip address
 macro description cisco-phone
 spanning-tree portfast
!
interface FastEthernet0/1/4
 switchport voice vlan 100
 no ip address
 macro description cisco-phone
 spanning-tree portfast
!
interface FastEthernet0/1/5
 switchport voice vlan 100
 no ip address
 macro description cisco-phone
 spanning-tree portfast
!
interface FastEthernet0/1/6
 switchport voice vlan 100
 no ip address
 macro description cisco-phone
 spanning-tree portfast
!
interface FastEthernet0/1/7
 switchport voice vlan 100
 no ip address
 macro description cisco-phone
 spanning-tree portfast
!
interface FastEthernet0/1/8
 switchport mode trunk
 no ip address
 macro description cisco-switch
!
interface Dot11Radio0/5/0
 no ip address
 ip broadcast-address 0.0.0.0
 shutdown
 !
 ssid cisco-data
 !
 ssid cisco-voice
 !
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
!
interface Dot11Radio0/5/0.1
 encapsulation dot1Q 1 native
 ip broadcast-address 0.0.0.0
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
!
interface Dot11Radio0/5/0.100
 encapsulation dot1Q 100
 ip broadcast-address 0.0.0.0
 bridge-group 100
 bridge-group 100 subscriber-loop-control
 bridge-group 100 spanning-disabled
 bridge-group 100 block-unknown-source
 no bridge-group 100 source-learning
 no bridge-group 100 unicast-flooding
!
interface Vlan1
 no ip address
 ip broadcast-address 0.0.0.0
 bridge-group 1
 bridge-group 1 spanning-disabled
!
interface Vlan100
 no ip address
 ip broadcast-address 0.0.0.0
 bridge-group 100
 bridge-group 100 spanning-disabled
!
interface BVI1
 description $FW_INSIDE$
 ip address 192.168.10.1 255.255.255.0
 ip broadcast-address 192.168.10.0
 ip access-group 102 in
 ip nat inside
 ip virtual-reassembly in
!
interface BVI100
 description $FW_INSIDE$
 ip address 10.1.1.1 255.255.255.0
 ip broadcast-address 10.1.1.0
 ip access-group 103 in
 ip nat inside
 ip virtual-reassembly in
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http path flash:/gui
!
ip dns server
ip nat inside source list 1 interface FastEthernet0/0 overload
ip route 10.1.10.1 255.255.255.255 Integrated-Service-Engine0/0
!
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 10.1.1.0 0.0.0.255
access-list 1 permit 192.168.10.0 0.0.0.255
access-list 1 permit 10.1.10.0 0.0.0.3
access-list 100 remark auto generated by SDM firewall configuration
access-list 100 remark SDM_ACL Category=1
access-list 100 deny   ip 192.168.10.0 0.0.0.255 any
access-list 100 deny   ip host 255.255.255.255 any
access-list 100 deny   ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto generated by SDM firewall configuration##NO_ACES_7##
access-list 101 remark SDM_ACL Category=1
access-list 101 permit tcp 10.1.1.0 0.0.0.255 eq 2000 any
access-list 101 permit udp 10.1.1.0 0.0.0.255 eq 2000 any
access-list 101 deny   ip 10.1.1.0 0.0.0.255 any
access-list 101 deny   ip 192.168.10.0 0.0.0.255 any
access-list 101 deny   ip host 255.255.255.255 any
access-list 101 deny   ip 127.0.0.0 0.255.255.255 any
access-list 101 permit ip any any
access-list 102 remark auto generated by SDM firewall configuration##NO_ACES_5##
access-list 102 remark SDM_ACL Category=1
access-list 102 deny   ip 10.1.10.0 0.0.0.3 any
access-list 102 deny   ip 10.1.1.0 0.0.0.255 any
access-list 102 deny   ip host 255.255.255.255 any
access-list 102 deny   ip 127.0.0.0 0.255.255.255 any
access-list 102 permit ip any any
access-list 103 remark auto generated by SDM firewall configuration##NO_ACES_7##
access-list 103 remark SDM_ACL Category=1
access-list 103 permit tcp 10.1.10.0 0.0.0.3 any eq 2000
access-list 103 permit udp 10.1.10.0 0.0.0.3 any eq 2000
access-list 103 deny   ip 10.1.10.0 0.0.0.3 any
access-list 103 deny   ip 192.168.10.0 0.0.0.255 any
access-list 103 deny   ip host 255.255.255.255 any
access-list 103 deny   ip 127.0.0.0 0.255.255.255 any
access-list 103 permit ip any any
access-list 104 remark auto generated by SDM firewall configuration##NO_ACES_13##
access-list 104 remark SDM_ACL Category=1
access-list 104 deny   ip 10.1.10.0 0.0.0.3 any
access-list 104 deny   ip 10.1.1.0 0.0.0.255 any
access-list 104 deny   ip 192.168.10.0 0.0.0.255 any
access-list 104 permit udp any eq bootps any eq bootpc
access-list 104 permit icmp any any echo-reply
access-list 104 permit icmp any any time-exceeded
access-list 104 permit icmp any any unreachable
access-list 104 deny   ip 10.0.0.0 0.255.255.255 any
access-list 104 deny   ip 172.16.0.0 0.15.255.255 any
access-list 104 deny   ip 192.168.0.0 0.0.255.255 any
access-list 104 deny   ip 127.0.0.0 0.255.255.255 any
access-list 104 deny   ip host 255.255.255.255 any
access-list 104 deny   ip any any log
!
!
!
!
tftp-server flash:/phones/7945_7965/SCCP45.8-4-2S.loads alias SCCP45.8-4-2S.loads
tftp-server flash:/phones/7945_7965/term45.default.loads alias term45.default.loads
tftp-server flash:/phones/7945_7965/term65.default.loads alias term65.default.loads
tftp-server flash:/phones/7945_7965/cnu45.8-4-1-23.sbn alias cnu45.8-4-1-23.sbn
tftp-server flash:/phones/7945_7965/dsp45.8-4-1-23.sbn alias dsp45.8-4-1-23.sbn
tftp-server flash:/phones/7945_7965/apps45.8-4-1-23.sbn alias apps45.8-4-1-23.sbn
tftp-server flash:/phones/7945_7965/jar45sccp.8-4-1-23.sbn alias jar45sccp.8-4-1-23.sbn
tftp-server flash:/phones/7945_7965/cvm45sccp.8-4-1-23.sbn alias cvm45sccp.8-4-1-23.sbn
tftp-server flash:/phones/7975/SCCP75.8-4-2S.loads alias SCCP75.8-4-2S.loads
tftp-server flash:/phones/7975/cnu75.8-4-1-23.sbn alias cnu75.8-4-1-23.sbn
tftp-server flash:/phones/7975/term75.default.loads alias term75.default.loads
tftp-server flash:/phones/7975/apps75.8-4-1-23.sbn alias apps75.8-4-1-23.sbn
tftp-server flash:/phones/7975/dsp75.8-4-1-23.sbn alias dsp75.8-4-1-23.sbn
tftp-server flash:/phones/7975/cvm75sccp.8-4-1-23.sbn alias cvm75sccp.8-4-1-23.sbn
tftp-server flash:/phones/7975/jar75sccp.8-4-1-23.sbn alias jar75sccp.8-4-1-23.sbn
!
control-plane
!
bridge 1 route ip
bridge 100 route ip
!
voice-port 0/0/0
!
voice-port 0/0/1
!
voice-port 0/0/2
!
voice-port 0/0/3
!
voice-port 0/1/0
!
voice-port 0/1/1
!
voice-port 0/1/2
!
voice-port 0/1/3
!
voice-port 0/4/0
 auto-cut-through
 signal immediate
 input gain auto-control
 description Music On Hold Port
!
sccp local Loopback0
sccp ccm 10.1.1.1 identifier 1 version 3.1
sccp
!
sccp ccm group 1
 associate ccm 1 priority 1
!
!
!
!
telephony-service
 video
 fxo hook-flash
 max-ephones 40
 max-dn 300
 ip source-address 10.1.1.1 port 2000
 auto assign 1 to 1 type bri
 calling-number initiator
 service phone videoCapability 1
 service dnis overlay
 service dnis dir-lookup
 timeouts interdigit 5
 url services http://10.1.10.1/voiceview/common/login.do
 url authentication http://10.1.10.1/voiceview/authentication/authenticate.do
 cnf-file location flash:
 load 7945 SCCP45.8-4-2S
 load 7965 SCCP45.8-4-2S
 load 7975 SCCP75.8-4-2S
 time-zone 42
 date-format dd-mm-yy
 voicemail 39
 max-conferences 8 gain -6
 call-forward pattern .T
 call-forward system redirecting-expanded
 moh flash:/media/music-on-hold.au
 multicast moh 239.10.16.16 port 2000
 web admin system name cisco secret 5 $1$/FS7$MrbHpz/O/QYIergw6Mqs.1
 dn-webedit
 time-webedit
 transfer-system full-consult dss
 transfer-pattern 9.T
 transfer-pattern .T
 transfer-pattern 6.. blind
 secondary-dialtone 9
 fac standard
 create cnf-files version-stamp 7960 May 24 2014 18:43:49
!
!
ephone-template  15
 url services 1 http://10.1.10.1/voiceview/common/login.do VoiceviewExpress
 softkeys remote-in-use  Newcall
 softkeys idle  Redial Newcall Cfwdall Pickup Gpickup Dnd Login
 softkeys seized  Cfwdall Endcall Redial Pickup Gpickup Callback
 softkeys connected  Hold Endcall Trnsfer TrnsfVM Confrn Acct Park
 button-layout 7931 2
!
!
ephone-template  16
 url services 1 http://10.1.10.1/voiceview/common/login.do VoiceviewExpress
 softkeys remote-in-use  Newcall
 softkeys idle  Redial Newcall Cfwdall Pickup Gpickup Dnd Login
 softkeys seized  Cfwdall Endcall Redial Pickup Gpickup Callback
 softkeys connected  Hold Endcall Trnsfer TrnsfVM Confrn Acct Park
!
!
ephone-template  17
 url services 1 http://10.1.10.1/voiceview/common/login.do VoiceviewExpress
 softkeys remote-in-use  CBarge Newcall
 softkeys idle  Redial Newcall Cfwdall Pickup Gpickup Dnd Login
 softkeys seized  Cfwdall Endcall Redial Pickup Gpickup Callback
 softkeys connected  Hold Endcall Trnsfer TrnsfVM Confrn Acct Park
!
!
ephone-template  18
 url services 1 http://10.1.10.1/voiceview/common/login.do VoiceviewExpress
 softkeys remote-in-use  CBarge Newcall
 softkeys idle  Redial Newcall Cfwdall Pickup Gpickup Dnd Login
 softkeys seized  Cfwdall Endcall Redial Pickup Gpickup Callback
 softkeys connected  Hold Endcall Trnsfer TrnsfVM Confrn Acct Park
 button-layout 7931 2
!
!
ephone-dn  281  dual-line
 number 6867 no-reg primary
 pickup-group 1
 label 6867
 description 6867
 name 6887
 call-forward busy 3099
 call-forward noan 3099 timeout 20
!
!
ephone-dn  294  dual-line
 number 6877 no-reg primary
 pickup-group 1
 label 6877
 description New
 name New
 call-forward busy 3099
 call-forward noan 3099 timeout 20
!
!
ephone  8
 device-security-mode none
 mac-address XXXX.XXXX.XXXX
 ephone-template 16
 username "New" password 123456
 type 7945
 button  1:294
!
!
!
ephone  17
 device-security-mode none
 mac-address XXXX.XXXX.XXXX
 ephone-template 16
 max-calls-per-button 2
 username "6867" password 1234
 type 7945
 button  1:281
!
!
!
line con 0
 no modem enable
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport input all
line vty 0 4
 login
 transport input all
!
end

[Christian Semmler]

Hey,

is the Data Vlan DHCP working? Did you tried to remove the ip dhcp pool data
part and re-insert ist?

chris

[custercsi]

I am experiencing almost the same issue and have not been able to get it resolved. Have you had any luck on this yet?

[Brent Conway]

You should remove option 150 from your data dhcp pool ... option 150 should only be assigned to the phone dhcp pool - use command to remove:

ip dhcp pool data

no option 150 ip 192.168.10.1

Also, noticed that in your vlan configurations you have your broadcast-address set to all 0's (rather than all 1's - the default):

interface Vlan1
 no ip address
 ip broadcast-address 0.0.0.0
 bridge-group 1
 bridge-group 1 spanning-disabled

you might want to remove the 'ip broadcast-address 0.0.0.0' from your vlans as well.  The initial DHCP discovery message is sent as a broadcast.  Use command:

interface vlan1

no ip broadcast-address 0.0.0.0

... and repeat same thing for vlan 100

[Emmanuel Valdez]

Hi,

If you have your problem yet can you post a show ip int brief please?

Regards.