cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2343
Views
0
Helpful
9
Replies

Clarification require on iwf@VCS_IP_Address

soundararajan t
Level 1
Level 1

Hi All

We have faced the below problem in our VCS X7.2 enironment.

Since the search history on VCS Expressway display the iwf@VCS_IP_Address.Can anybody tell me why below search history entry created.our setup is VCSc & VCSe and two hundred endpoint.

Regards

Soundar

9 Replies 9

Alok Jaiswal
Cisco Employee
Cisco Employee

Hi Soundar,

this could be possible that there might be an interworking happening on the calls and that's the reason it is swhowing iwf@vcs ip-address.

however you haven't define what's your scenarion when do you see this error ?

rgds,

Alok

I've seen this once, someone called in our video network and it came up in the search as @vcs-ip-address instead of @domain.  This was because the device doing the calling only supported IP dialing, they were dialing in the method of alias@vcs-ip-address.  To get around this, I put in a transform into our VCS that will transform the @vcs-ip-address and stip the IP off of the called address, alternativly you could replace vcs-ip-address with a domain.

Option #1:  Remove IP from IP URI

Pattern Type:  Suffix

Pattern String: @%ip%

Pattern behavior:  Strip

-OR-

Option #2:  Remove IP from IP URI and replace with domain

Pattern Type:  Regex

Pattern String: @%ip%

Pattern behavior:  Replace

Replace string:  \1@domain

Note:  %ip% will match any IP address assigned to the VCS.

Patrick

Hi Patrick

Can you please tell me where i need to put this tranform VCSe or VCSc.

At present below transforms we applied on VCSe

Priority State Description Pattern Type Behavior Replace Actions
1EnabledRemove Domains(.*)@%localdomains%.*RegexReplace\1 View/Edit









3EnabledStrip IP of VCS-E(.+)@203.145.X.X.*RegexReplace\1 View/Edit

There are two options, you could put the transform on just the VCS that you are seeing the alias@vcs-ip-address issue on, or you could put it on both VCSs (C and E).

Hi Alok

I am getting below error on everyday on my VCS Expressway.During this time we checked VCSc and no calls from internal to external

2013-10-26 12:45:06H323 (LRQ)100@1.1.1.1100@tecFoundView
2013-10-26 12:45:06SIP (OPTIONS)100@1.1.1.1sip:100@FoundView
2013-10-26 12:09:02SIP (OPTIONS)iwf@10.10.142.130sip:6@techLoop DetectedView
2013-10-26 12:09:02H323 (LRQ)iwf@10.10.142.1306@techResource unavailable - Loop detectedView
2013-10-26 12:09:02SIP (OPTIONS)iwf@10.10.142.130sip:6@tUnsupported URI SchemeView
2013-10-26 12:09:00SIP (OPTIONS)iwf@10.10.142.130sip:6@teUnsupported URI SchemeView
2013-10-26 12:08:59H323 (LRQ)020244537346@tecResource unavailable - Loop detectedView
2013-10-26 12:08:59H323 (LRQ)020244537346@teIncomplete address - Invalid alias for SIP interworkingView
2013-10-26 08:52:07SIP (OPTIONS)iwf@10.10.142.130sip:100@tecUnsupported URI SchemeView
2013-10-26 08:52:04H323 (LRQ)100@1.1.1.1100@teResource unavailable - Loop detectedView

Hi,

do you recognize 10.10.142.130 address ?

you need to harden your security as some bad guys try to come in with typical 100@1.1.1.1 address. how? TAC

iwf@ip-address is interworked call

regards,

Ahmad

Hi Ahmad

It's our VCSc IP address.

Regards

Soundar

The transforms used to not look good as you strip away the local domains, which causes

such kind of trouble.

The basic vcs-e / c deployment guide is a good example on how to build your search rules.

In addition also check that your registrations are proper, h323 and sip shall use both

the full uri with the domain as its registration address.

Please remember to rate helpful responses and identify helpful or correct answers.

Please remember to rate helpful responses and identify

HI Martin

Thanks for your suggestion. We will check the transforms rules and we got a another alternative solution from your old post (https://supportforums.cisco.com/message/3401571#3401571) We enable the CPL on VCSe and now hackers get the forbidden msg.

2013-10-28 16:39:14SIP (OPTIONS)100@1.1.1.1sip:100@203.X.X.XForbiddenView
2013-10-28 15:25:36SIP (OPTIONS)100@1.1.1.1sip:100@203.X.X.XForbiddenView
2013-10-28 13:28:11SIP (OPTIONS)100@1.1.1.1sip:100@203.X.X.XForbiddenView

Thanks & Regards

Soundar