sbc.gram.sk#sh run Building configuration... Current configuration : 28651 bytes ! ! Last configuration change at 12:00:43 CEDT Mon Sep 26 2022 by root ! NVRAM config last updated at 12:00:44 CEDT Mon Sep 26 2022 by root ! version 17.3 service timestamps debug datetime msec localtime service timestamps log datetime msec localtime service password-encryption service call-home platform qfp utilization monitor load 80 no platform punt-keepalive disable-kernel-core platform console virtual ! hostname sbc.gram.sk ! boot-start-marker boot system flash bootflash:csr1000v-universalk9.17.03.05.SPA.bin boot-end-marker ! ! logging buffered 2000000 enable secret XXX ! aaa new-model ! ! aaa group server radius RADIUS-SERVERS server name RADIUS-SERVER-1 ! aaa authentication login default local group RADIUS-SERVERS aaa authentication login use_line line aaa authentication dot1x default group RADIUS-SERVERS aaa authorization exec default local group RADIUS-SERVERS aaa authorization network default local group RADIUS-SERVERS if-authenticated ! ! ! ! ! ! aaa session-id common clock timezone CET 1 0 clock summer-time CEDT recurring last Sun Mar 2:00 last Sun Oct 2:00 ! ! ! ! ! ! ! ip host cucm.cucm.sk 172.24.34.71 ip host sbc.gram.sk 172.24.34.162 ip name-server 172.24.31.10 172.24.34.160 ip domain name gram.sk ! ! ! login on-success log ! ! ! ! ! ! ! subscriber templating ! ! ! ! ! ! multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! voice service voip ip address trusted list ipv4 172.24.34.71 ipv4 52.0.0.0 255.0.0.0 rtcp keepalive address-hiding mode border-element allow-connections sip to sip no supplementary-service sip refer supplementary-service media-renegotiate fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none h323 trace sip session refresh header-passing error-passthru pass-thru headers 290 sip-profiles inbound ! ! voice class uri 50 sip host dns:sip.pstnhub.microsoft.com host dns:sip2.pstnhub.microsoft.com host dns:sip3.pstnhub.microsoft.com ! voice class uri 290 sip host sbc.gram.sk ! voice class uri 190 sip pattern 172.24.34.71 voice class codec 1 codec preference 1 g711ulaw ! voice class stun-usage 1 stun usage ice lite ! ! voice class sip-profiles 200 rule 10 request ANY sip-header Contact modify "@.*:" "@sbc.gram.sk:" rule 20 response ANY sip-header Contact modify "@.*:" "@sbc.gram.sk:" rule 30 request ANY sip-header SIP-Req-URI modify "sip:(.*):5061 (.*)" "sip:\1:5061;user=phone;transport=tls \2" rule 40 request ANY sip-header User-Agent modify "(IOS.*)" "\1\x0D\x0AX-MS-SBC: Cisco UBE/ISR4321/\1" rule 50 response ANY sip-header Server modify "(IOS.*)" "\1\x0D\x0AX-MS-SBC: Cisco UBE/ISR4321/\1" rule 60 request ANY sdp-header Audio-Attribute modify "a=sendonly" "a=inactive" rule 70 response 200 sdp-header Audio-Connection-Info modify "0.0.0.0" "102.119.228.9" rule 80 request ANY sdp-header Audio-Attribute modify "(a=crypto:.*inline:[A-Za-z0-9+/=]+)" "\1|2^31" rule 90 response ANY sdp-header Audio-Attribute modify "(a=crypto:.*inline:[A-Za-z0-9+/=]+)" "\1|2^31" rule 100 request ANY sdp-header Audio-Attribute modify "a=candidate.*" "a=label:main-audio" rule 110 response ANY sdp-header Audio-Attribute modify "a=candidate.*" "a=label:main-audio" rule 260 response 486 sip-header Reason modify "cause=34;" "cause=17;" ! voice class sip-profiles 290 rule 10 request REFER sip-header From copy "@(.*com)" u05 rule 15 request REFER sip-header From copy "sip:(sip.*com)" u05 rule 20 request REFER sip-header Refer-To modify "sip:\+(.*)@.*:5061" "sip:+AAA\1@\u05:5061" rule 30 request REFER sip-header Refer-To modify "" u02 rule 71 request INVITE sip-header SIP-Req-URI modify "sip:\+AAA@" "sip:" rule 80 request INVITE sip-header SIP-Req-URI modify "sip:\+AAA" "sip:+" rule 90 request INVITE sip-header History-Info modify "" "" rule 120 request INVITE sip-header To modify "" "" rule 130 request ANY sip-header Contact modify "@.*:" "@\u02:" rule 140 response ANY sip-header Contact modify "@.*:" "@\u02:" rule 150 request ANY sdp-header Audio-Attribute modify "a=sendonly" "a=inactive" rule 160 response 200 sdp-header Session-Owner copy "IN IP4 (.*)" u04 rule 170 response 200 sdp-header Audio-Connection-Info modify "0.0.0.0" "\u04" rule 180 response 486 sip-header Reason modify "cause=34;" "cause=17;" ! voice class sip-event-list 1 event message-summary ! ! voice class sip-hdr-passthrulist 290 passthru-hdr Referred-By ! ! voice class e164-pattern-map 200 e164 +421259222... e164 421259222... ! ! voice class sip-options-keepalive 200 transport tcp tls sip-profiles 299 ! voice class tenant 200 handle-replaces srtp-crypto 1 localhost dns:sbc.gram.sk session transport tcp tls no referto-passing bind control source-interface GigabitEthernet3 bind media source-interface GigabitEthernet3 pass-thru headers 290 no pass-thru content custom-sdp no conn-reuse sip-profiles 200 sip-profiles 290 inbound early-offer forced block 183 sdp present ! voice class tenant 100 srtp-crypto 1 localhost dns:sbc.gram.sk session transport tcp tls bind control source-interface GigabitEthernet1 bind media source-interface GigabitEthernet1 no pass-thru content custom-sdp no conn-reuse sip-profiles 200 early-offer forced ! voice class srtp-crypto 1 crypto 1 AES_CM_128_HMAC_SHA1_80 ! ! ! ! voice translation-rule 10 rule 1 /^3\(...\)/ /+421259222\1/ ! voice translation-rule 11 rule 1 /^1\(...\)/ /+421258222\1/ ! voice translation-rule 20 rule 1 /^\+421258222\(...\)/ /1\1/ ! voice translation-rule 30 rule 1 /^421259222/ /+421259222/ ! voice translation-rule 290 rule 1 /^\+421258222/ /1/ ! ! voice translation-profile FromTEAMS translate called 290 ! voice translation-profile OutgoingToCUCM translate calling 30 ! voice translation-profile OutgoingToTEAMS translate calling 11 translate called 10 ! voice translation-profile OutgoingToTEAMS2 translate called 20 ! ! ! ! crypto pki trustpoint cucm enrollment terminal revocation-check none ! crypto pki trustpoint ISRG-root-1 enrollment terminal revocation-check none ! crypto pki trustpoint sbc.gram.sk enrollment terminal fqdn sbc.gram.sk subject-name cn=sbc.gram.sk subject-alt-name sbc.gram.sk revocation-check none rsakeypair sbc.gram.sk ! crypto pki trustpoint SLA-TrustPoint enrollment pkcs12 revocation-check crl ! ! crypto pki certificate chain cucm certificate ca 492BE52DDB502E198D5EB34FC4429D50 30820393 3082027B A0030201 02021049 2BE52DDB 502E198D 5EB34FC4 429D5030 8C325424 A102F460 26A2AC9F FF5D0CF3 98B6A51C E666ECBA 9862E781 61174D24 0DF011E6 2DD17764 653F7472 53C46BCA A0A04961 99D6ED quit crypto pki certificate chain ISRG-root-1 certificate ca 008210CFB0D240E3594463E0BB63828B00 3082056B 30820353 A0030201 02021100 8210CFB0 D240E359 4463E0BB 63828B00 7A6C8FC6 0718C67F DE478E3F 289E0406 CFA55434 77BDEC89 9BE91743 DF5BDB5F FE8E1E57 A2CD409D 7E6222DA DE1827 quit crypto pki certificate chain sbc.gram.sk certificate 04CF68DC88F2E3319D7E204AC51EE64A0949 30820620 30820508 A0030201 02021204 CF68DC88 F2E3319D 7E204AC5 1EE64A09 FA9BE700 EEF8011A 6443B41C A3A490BC 405B7670 A6507277 928505E7 9B99707C D336D4DC quit certificate ca 00912B084ACF0C18A753F6D62E25A75F5A 30820516 308202FE A0030201 02021100 912B084A CF0C18A7 53F6D62E 25A75F5A 44506DEC CE005518 FEE94964 D44ECA97 9CB45BC0 73A8ABB8 47C2 quit crypto pki certificate chain SLA-TrustPoint certificate ca 01 30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030 418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0 D697DF7F 28 quit ! crypto pki certificate pool cabundle nvram:ios_core.p7b cabundle nvram:ios.p7b ! license udi pid CSR1000V sn XXX license boot level ax diagnostic bootup level minimal memory free low-watermark processor 72301 ! ! spanning-tree extend system-id dial-control-mib retain-timer 720 ! username root privilege 15 secret XXX ! redundancy ! ! ! interface GigabitEthernet1 ip address 172.24.34.163 255.255.255.0 secondary ip address 172.24.34.162 255.255.255.0 negotiation auto no mop enabled no mop sysid ! interface GigabitEthernet2 ip address 172.24.13.14 255.255.255.0 shutdown negotiation auto no mop enabled no mop sysid ! interface GigabitEthernet3 ip address 102.119.228.9 255.255.255.128 negotiation auto no mop enabled no mop sysid ! ip forward-protocol nd ip http server ip http authentication local ip http secure-server ! ip route 0.0.0.0 0.0.0.0 102.119.228.126 ip route 172.24.0.0 255.255.0.0 GigabitEthernet2 172.24.13.1 ip route 172.24.0.0 255.255.0.0 172.24.34.1 200 ip route 192.168.0.0 255.255.0.0 172.24.34.1 200 ip route 192.168.212.0 255.255.254.0 GigabitEthernet2 172.24.13.1 ip ssh rsa keypair-name ssh-key ip ssh version 2 ! ip access-list extended IPT 10 permit ip any host 172.24.11.14 20 permit ip host 172.24.11.14 any 30 permit ip any host 172.24.12.11 40 permit ip host 172.24.12.11 any 50 permit ip any host 172.24.13.14 60 permit ip host 172.24.13.14 any 70 permit ip any host 172.24.34.44 80 permit ip host 172.24.34.44 any 90 permit ip any 52.0.0.0 0.255.255.255 100 permit ip 52.0.0.0 0.255.255.255 any ip access-list extended IPT2 10 permit ip any host 172.24.34.71 20 permit ip host 172.24.34.71 any 30 permit ip any host 172.24.34.164 40 permit ip host 172.24.34.164 any ! ip radius source-interface GigabitEthernet1 logging trap debugging logging facility local4 logging source-interface GigabitEthernet1 ip access-list standard 1 10 permit 192.168.0.0 0.0.255.255 20 permit 172.24.0.0 0.0.255.255 ! ! ! ! ! radius-server attribute 6 on-for-login-auth radius-server attribute 8 include-in-access-req radius-server attribute 25 access-request include ! ! control-plane ! ! ! ! dial-peer voice 10 voip description incoming dial-peer from CUCM to CUBE translation-profile incoming OutgoingToTEAMS session protocol sipv2 session transport tcp tls incoming uri from 190 voice-class codec 1 voice-class sip profiles 10 inbound voice-class sip tenant 100 voice-class sip bind control source-interface GigabitEthernet1 voice-class sip bind media source-interface GigabitEthernet1 dtmf-relay rtp-nte srtp no vad ! dial-peer voice 20 voip description outgoing dial-peer from CUBE to CUCM translation-profile outgoing OutgoingToCUCM destination-pattern 1... session protocol sipv2 session target dns:cucm.cucm.sk:5061 session transport tcp tls voice-class codec 1 voice-class sip options-ping 60 voice-class sip tenant 100 voice-class sip options-keepalive voice-class sip bind control source-interface GigabitEthernet1 voice-class sip bind media source-interface GigabitEthernet1 dtmf-relay rtp-nte srtp no vad ! dial-peer voice 200 voip description towards Phone System Proxy 1 preference 1 rtp payload-type comfort-noise 13 session protocol sipv2 session target dns:sip.pstnhub.microsoft.com:5061 destination e164-pattern-map 200 voice-class codec 1 voice-class sip options-ping 60 voice-class sip tenant 200 voice-class sip options-keepalive profile 200 voice-class sip bind control source-interface GigabitEthernet3 voice-class sip bind media source-interface GigabitEthernet3 dtmf-relay rtp-nte srtp fax protocol none no vad ! dial-peer voice 201 voip description towards Phone System Proxy 2 preference 2 rtp payload-type comfort-noise 13 session protocol sipv2 session target dns:sip2.pstnhub.microsoft.com:5061 destination e164-pattern-map 200 voice-class codec 1 voice-class sip tenant 200 voice-class sip options-keepalive profile 200 voice-class sip bind control source-interface GigabitEthernet3 voice-class sip bind media source-interface GigabitEthernet3 dtmf-relay rtp-nte srtp fax protocol none no vad ! dial-peer voice 202 voip description towards Phone System Proxy 3 huntstop preference 3 rtp payload-type comfort-noise 13 session protocol sipv2 session target dns:sip3.pstnhub.microsoft.com:5061 destination e164-pattern-map 200 voice-class codec 1 voice-class sip tenant 200 voice-class sip options-keepalive profile 200 voice-class sip bind control source-interface GigabitEthernet3 voice-class sip bind media source-interface GigabitEthernet3 dtmf-relay rtp-nte srtp fax protocol none no vad ! dial-peer voice 280 voip description Phone System REFER routing destination-pattern +AAAT rtp payload-type comfort-noise 13 session protocol sipv2 session target sip-uri voice-class codec 1 voice-class sip profiles 280 voice-class sip tenant 200 voice-class sip requri-passing dtmf-relay rtp-nte srtp no vad ! dial-peer voice 290 voip description inbounf from Microsoft Phone System translation-profile incoming FromTEAMS rtp payload-type comfort-noise 13 session protocol sipv2 session transport tcp tls incoming uri to 290 voice-class codec 1 voice-class sip tenant 200 voice-class sip bind control source-interface GigabitEthernet3 voice-class sip bind media source-interface GigabitEthernet3 dtmf-relay rtp-nte srtp no vad ! ! sip-ua no remote-party-id retry invite 2 transport tcp tls v1.2 crypto signaling default trustpoint sbc.gram.sk handle-replaces ! ! line con 0 exec-timeout 30 0 password XXX login authentication use_line stopbits 1 line vty 0 4 access-class 1 in exec-timeout 30 0 password XXX history size 100 transport preferred none transport input ssh transport output telnet ssh line vty 5 15 access-class 1 in history size 100 transport input ssh transport output telnet ssh ! call-home ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications. contact-email-addr sch-smart-licensing@cisco.com profile "CiscoTAC-1" active destination transport-method http ntp server 172.24.95.1 ! ! ! ! ! end sbc.gram.sk# sbc.gram.sk# sbc.gram.sk# sbc.gram.sk#sh dial-pee voi sum dial-peer hunt 0 AD PRE PASS SESS-SER-GRP\ OUT TAG TYPE MIN OPER PREFIX DEST-PATTERN FER THRU SESS-TARGET STAT PORT KEEPALIVE VRF 10 voip up up 0 syst NA 20 voip up up 1... 0 syst dns:cucm.cucm.sk:506 active NA 200 voip up up map:200 1 syst dns:sip.pstnhub.micr active NA 201 voip up up map:200 2 syst dns:sip2.pstnhub.mic active NA 202 voip up up map:200 3 syst dns:sip3.pstnhub.mic active NA 280 voip up up +AAAT 0 syst sip-uri NA 290 voip up up 0 syst NA For server-grp details please execute command:show voice class server-group To see complete session target for ipv6 use 'sh running-config | section dial-peer sbc.gram.sk# sbc.gram.sk# sbc.gram.sk#sh ver Cisco IOS XE Software, Version 17.03.05 Cisco IOS Software [Amsterdam], Virtual XE Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 17.3.5, RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2022 by Cisco Systems, Inc. Compiled Wed 09-Feb-22 10:35 by mcpre Cisco IOS-XE software, Copyright (c) 2005-2022 by cisco Systems, Inc. All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software. ROM: IOS-XE ROMMON sbc.gram.sk uptime is 2 weeks, 2 days, 19 hours, 26 minutes Uptime for this control processor is 2 weeks, 2 days, 19 hours, 28 minutes System returned to ROM by reload at 16:43:28 CEDT Fri Sep 9 2022 System restarted at 16:45:39 CEDT Fri Sep 9 2022 System image file is "bootflash:csr1000v-universalk9.17.03.05.SPA.bin" Last reload reason: Reload Command This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. License Level: ax License Type: N/A(Smart License Enabled) Next reload license Level: ax The current throughput level is 1000 kbps Smart Licensing Status: UNREGISTERED/EVAL MODE cisco CSR1000V (VXE) processor (revision VXE) with 2071712K/3075K bytes of memory. Processor board ID 99Q6DVY0UUY Router operating mode: Autonomous 3 Gigabit Ethernet interfaces 32768K bytes of non-volatile configuration memory. 3978260K bytes of physical memory. 7774207K bytes of virtual hard disk at bootflash:. Configuration register is 0x2102 sbc.gram.sk# sbc.gram.sk# sbc.gram.sk# sbc.gram.sk#sh ip int brie Interface IP-Address OK? Method Status Protocol GigabitEthernet1 172.24.34.162 YES NVRAM up up GigabitEthernet2 172.24.13.14 YES NVRAM administratively down down GigabitEthernet3 102.119.228.9 YES NVRAM up up sbc.gram.sk# sbc.gram.sk#