Send cisco-voip mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://puck.nether.net/mailman/listinfo/cisco-voip
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of cisco-voip digest..."
Today's Topics:
1. Re: Bulk insert E164 DID (Pavan K)
2. Re: 'interesting' EMCC behavior (Erick Wellnitz)
3. Re: 'interesting' EMCC behavior (Ryan Ratliff (rratliff))
4. TFTP after Pub Restore (Florian Kroessbacher)
5. Re: TFTP after Pub Restore (Stephen Welsh)
6. Re: 'interesting' EMCC behavior (Erick Wellnitz)
7. Re: 'interesting' EMCC behavior (Ryan Ratliff (rratliff))
8. Re: 'interesting' EMCC behavior (Erick Wellnitz)
9. Re: TFTP after Pub Restore (Florian Kroessbacher)
10. Re: 7975 with single or double footstand to wall? (Nate VanMaren)
11. Re: 'interesting' EMCC behavior (Ryan Ratliff (rratliff))
----------------------------------------------------------------------
Message: 1
Date: Fri, 4 Oct 2013 10:38:55 -0500
From: Pavan K <[email protected]>
To: Anthony Holloway <[email protected]>
Cc: [email protected]
Subject: Re: [cisco-voip] Bulk insert E164 DID
Message-ID:
<cajdpbuviqvjtzjz5uox_v952z+s7b7ynmas+a+bfwwvz+qr...@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Thanks guys,
Looks like my only way out is to use dummy macs. I was hoping there was a
better way of doing this.
BTW this is basically for Pre- provisioning DN so I don't have the phones
On Oct 4, 2013 10:17 AM, "Anthony Holloway" <[email protected]>
wrote:
> Hi Tim, I know you are asking Pavan, but that is exactly how I tested, and
> it still failed with my previously documented error message.
>
> Starting DN number can only contain digits when performing bulk insert.
>
> Here is the source code which performs the validation on DN bulk insert.
> You should notice that the parseInt() function creates a number from a
> string, and therefore, "\+16125551212" would not pass this check.
> Possible feature enhancement? Maybe.
>
> var startNum = parseInt(elStart.value);
> var endNum = parseInt(elEnd.value);
>
> if (isNaN(startNum))
> {
> showValidationError(elStart, 'Starting DN number can only contain
> digits when performing bulk insert.', 1);
>
> return false;
> }
>
> if (isNaN(endNum))
> {
> showValidationError(elEnd, 'Ending DN number can only contain
> digits when performing bulk insert.', 1);
> return false;
>
> }
>
> // make sure start and end range is valid
> if (startNum > endNum)
> {
> showValidationError(elStart, 'Invalid DN Range.', 1);
> return false;
>
> }
>
> // make sure no more than 500 DNs max can be inserted
> var totaldn = endNum - startNum + 1;
> if (totaldn > 500)
> {
> var msg = 'Invalid DN Range.';
>
> msg += 'Only 500 directory numbers can be inserted at one time.';
> showValidationError(elStart, msg, 1);
> return false;
> }
>
>
>
> On Fri, Oct 4, 2013 at 8:56 AM, Tim Smith <[email protected]> wrote:
>
>> Oh also, can you escape the + in bulk insert?
>> I.e. \+
>>
>> Cheers,
>>
>> Tim
>>
>> On Friday, 4 October 2013, Pavan K wrote:
>>
>>> Folks,
>>> If i need to bulk insert 1000 sequential e164 directory numbers in ucm
>>> 9.1, what's the best way to do that ?
>>>
>>> I can't use the bulk insert on the directory number page as it rejects
>>> numbers that start with +
>>>
>>> I can't seem to use BAT as these numbers don't have phones associated
>>> with them and consequently no Mac addresses for bulk insert of DN.
>>>
>>
>> _______________________________________________
>> cisco-voip mailing list
>> [email protected]
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/c4c0b7d6/attachment-0001.html>
------------------------------
Message: 2
Date: Fri, 4 Oct 2013 12:13:36 -0500
From: Erick Wellnitz <[email protected]>
To: "Brian Meade (brmeade)" <[email protected]>
Cc: cisco-voip <[email protected]>
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
Message-ID:
<cak0wosagc+hdedosacebkofhxwumjupw+ctlceuhpbirxgn...@mail.gmail.com>
Content-Type: text/plain; charset="windows-1252"
I always forget about doing a packet capture on the phone.
I'm thinking it is cert related because on this one cluster the Publisher
is set up under servers using it's hostname instead of IP while all the
others are using IP.
We're going to change this once we get approval then re-export, consolidate
and import.
On Thu, Oct 3, 2013 at 4:49 PM, Brian Meade (brmeade) <[email protected]>wrote:
> Erick,****
>
> ** **
>
> Can you grab a packet capture from the phone trying to log in? The packet
> captures seem to show the EMCC issues very clearly. You should see after
> the login, the phone will download its mini-config with the new TFTP server
> info. You?ll then see it try to download its ITL from the other cluster.
> If you don?t see the phone request anything after that, most likely it
> didn?t trust the signer of the ITL and it will show the ?Extension Mobility
> is unavailable? error message.****
>
> ** **
>
> Usually that means you need to do a Re-Export, Consolidate, Import of the
> certificates.****
>
> ** **
>
> Brian Meade****
>
> ** **
>
> *From:* cisco-voip [mailto:[email protected]] *On Behalf
> Of *Erick Wellnitz
> *Sent:* Thursday, October 03, 2013 5:01 PM
> *To:* Jason Aarons (AM)
> *Cc:* cisco-voip
> *Subject:* Re: [cisco-voip] 'interesting' EMCC behavior****
>
> ** **
>
> That's the odd thing. All of the traces look like it is successful but
> the phone (7965) resets, logs the user out and displays a message that
> extension mobility is not available without an error code. I get similar
> behavior on the 8945 but without the message.****
>
> ****
>
> I've gon through the EMCC guide a number of times and nothing sticks out
> as obvious.****
>
> ** **
>
> On Thu, Oct 3, 2013 at 3:41 PM, Jason Aarons (AM) <
> [email protected]> wrote:****
>
> I was using 8.6 the first time I setup EMCC to another 8.6 box.****
>
> ****
>
> *From:* cisco-voip [mailto:[email protected]] *On Behalf
> Of *Anthony Holloway
> *Sent:* Thursday, October 03, 2013 3:39 PM
> *To:* Erick Wellnitz
> *Cc:* cisco-voip
> *Subject:* Re: [cisco-voip] 'interesting' EMCC behavior****
>
> ****
>
> ****
>
> I have one idea.****
>
> EMCC does not work very well in 8.5 because you cannot "home" a user to a
> cluster. Therefore, if your LDAP integrations are the same for each
> cluster, it would be impossible to know which cluster the user is homed
> to. 9.1 on the other hand has this feature on the end user page, and thus
> overcomes this limitation.****
>
> ****
>
> On Thu, Oct 3, 2013 at 1:50 PM, Erick Wellnitz <[email protected]>
> wrote:****
>
> I have a strange situation.****
>
> ****
>
> 3 Clusters. 2 on 9.1 and the other on 8.5 EMCC works except with users
> configured on the 8.5 cluster. The profile logs in then immediately logs
> out without an error message.****
>
> ****
>
> Any ideas would be greatly appreciated!****
>
>
> _______________________________________________
> cisco-voip mailing list
> [email protected]
> https://puck.nether.net/mailman/listinfo/cisco-voip****
>
> ****
>
>
>
> itevomcid ****
>
> ** **
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/4a837b9f/attachment-0001.html>
------------------------------
Message: 3
Date: Fri, 4 Oct 2013 17:57:21 +0000
From: "Ryan Ratliff (rratliff)" <[email protected]>
To: Erick Wellnitz <[email protected]>
Cc: cisco-voip <[email protected]>
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
Message-ID:
<[email protected]>
Content-Type: text/plain; charset="windows-1252"
System->Server values don't impact certificates. They will impact what the
phone gets in config files so if you aren't using DNS this will be an issue.
Is that pub also the TFTP server that is going to show up in the mini-config?
-Ryan
On Oct 4, 2013, at 1:13 PM, Erick Wellnitz
<[email protected]<mailto:[email protected]>> wrote:
I always forget about doing a packet capture on the phone.
I'm thinking it is cert related because on this one cluster the Publisher is
set up under servers using it's hostname instead of IP while all the others are
using IP.
We're going to change this once we get approval then re-export, consolidate and
import.
On Thu, Oct 3, 2013 at 4:49 PM, Brian Meade (brmeade)
<[email protected]<mailto:[email protected]>> wrote:
Erick,
Can you grab a packet capture from the phone trying to log in? The packet
captures seem to show the EMCC issues very clearly. You should see after the
login, the phone will download its mini-config with the new TFTP server info.
You?ll then see it try to download its ITL from the other cluster. If you
don?t see the phone request anything after that, most likely it didn?t trust
the signer of the ITL and it will show the ?Extension Mobility is unavailable?
error message.
Usually that means you need to do a Re-Export, Consolidate, Import of the
certificates.
Brian Meade
From: cisco-voip
[mailto:[email protected]<mailto:[email protected]>]
On Behalf Of Erick Wellnitz
Sent: Thursday, October 03, 2013 5:01 PM
To: Jason Aarons (AM)
Cc: cisco-voip
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
That's the odd thing. All of the traces look like it is successful but the
phone (7965) resets, logs the user out and displays a message that extension
mobility is not available without an error code. I get similar behavior on the
8945 but without the message.
I've gon through the EMCC guide a number of times and nothing sticks out as
obvious.
On Thu, Oct 3, 2013 at 3:41 PM, Jason Aarons (AM)
<[email protected]<mailto:[email protected]>> wrote:
I was using 8.6 the first time I setup EMCC to another 8.6 box.
From: cisco-voip
[mailto:[email protected]<mailto:[email protected]>]
On Behalf Of Anthony Holloway
Sent: Thursday, October 03, 2013 3:39 PM
To: Erick Wellnitz
Cc: cisco-voip
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
I have one idea.
EMCC does not work very well in 8.5 because you cannot "home" a user to a
cluster. Therefore, if your LDAP integrations are the same for each cluster,
it would be impossible to know which cluster the user is homed to. 9.1 on the
other hand has this feature on the end user page, and thus overcomes this
limitation.
On Thu, Oct 3, 2013 at 1:50 PM, Erick Wellnitz
<[email protected]<mailto:[email protected]>> wrote:
I have a strange situation.
3 Clusters. 2 on 9.1 and the other on 8.5 EMCC works except with users
configured on the 8.5 cluster. The profile logs in then immediately logs out
without an error message.
Any ideas would be greatly appreciated!
_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip
itevomcid
_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/7735d7e8/attachment-0001.html>
------------------------------
Message: 4
Date: Fri, 04 Oct 2013 11:35:57 -0700 (PDT)
From: "Florian Kroessbacher" <[email protected]>
To: "Cisco VOIP" <[email protected]>
Subject: [cisco-voip] TFTP after Pub Restore
Message-ID: <1380911756972.a9fa8291@Nodemailer>
Content-Type: text/plain; charset="utf-8"
Hy out there,
we have brought our Publisher to VMware and after the restore the DRS was'nt
showing some services for restore. We are on version 8.6(2) so there is SBD on.
For other Services the have to be deactivate and activated again, so the
Service is shown in DRS again. Ehat about the TFTP Service, will there be any
impact with Security by Default if a deactivate and activate the TFTP service
again. we have about 2400 Endpoints
thanxs for your answers
--
Florian Kroessbacher
gmail: [email protected]
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/2c97e93b/attachment-0001.html>
------------------------------
Message: 5
Date: Fri, 4 Oct 2013 20:05:27 +0000
From: Stephen Welsh <[email protected]>
To: Florian Kroessbacher <[email protected]>
Cc: Cisco VOIP <[email protected]>
Subject: Re: [cisco-voip] TFTP after Pub Restore
Message-ID: <[email protected]>
Content-Type: text/plain; charset="windows-1252"
Hi Florian,
I did a quick test as follows:
* Stop all TVS Service instances
* Deactivate TFTP Service
* Activate TFTP Service
* Reboot IP Phones and check for ITL Issues
Everything checked out fine, so as long as there are no other changes that
would trigger the self signed certificates to be regenerated you should be fine.
On a related subject, myself and Akhil Behl (author or ?Securing Cisco IP
Telephony Networks?) held a series of webinars on endpoint security that
includes SBD, the links to the recordings are in my email signature.
Kind Regards.
Stephen Welsh
[cid:[email protected]]
================================================================
Unified FX?s FREE Educational seminars on The Essentials of Endpoint Security &
Compliance
? Session 1: The Impact of Security by Default (Recording: http://goo.gl/2yJaKm)
? Session 2: Understanding and Managing ITL & CTL Files (Recording:
http://goo.gl/w05Dqh)
? Session 3: Leading Practices for Endpoint Security & Compliance (Recording:
http://goo.gl/GuXy2P)
NEW Educational Webinar Announced
"Drive to 9: Essential Upgrade Planning Considerations" (10th Oct)
"Phone Background Management & Branding" (24th Oct)
Spaces are limited and we anticipate high demand, so please register early:
http://events.unifiedfx.com<http://unifiedfx.createsend1.com/t/r-i-bhljyut-l-o/>
================================================================
On 4 Oct 2013, at 19:35, Florian Kroessbacher
<[email protected]<mailto:[email protected]>> wrote:
Hy out there,
we have brought our Publisher to VMware and after the restore the DRS was'nt
showing some services for restore. We are on version 8.6(2) so there is SBD on.
For other Services the have to be deactivate and activated again, so the
Service is shown in DRS again. Ehat about the TFTP Service, will there be any
impact with Security by Default if a deactivate and activate the TFTP service
again. we have about 2400 Endpoints
thanxs for your answers
--
Florian Kroessbacher
gmail: [email protected]<mailto:[email protected]>
_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/67a8b5c8/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 1420 bytes
Desc: image001.png
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/67a8b5c8/attachment-0001.png>
------------------------------
Message: 6
Date: Fri, 4 Oct 2013 15:10:01 -0500
From: Erick Wellnitz <[email protected]>
To: "Ryan Ratliff (rratliff)" <[email protected]>
Cc: cisco-voip <[email protected]>
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
Message-ID:
<cak0wosbzrjfnh-pmob55pw7ino2i-npoqaua-q-lkhcn7v+...@mail.gmail.com>
Content-Type: text/plain; charset="windows-1252"
Yes, it is also the primary tftp server.
On Fri, Oct 4, 2013 at 12:57 PM, Ryan Ratliff (rratliff) <[email protected]
> wrote:
> System->Server values don't impact certificates. They will impact what
> the phone gets in config files so if you aren't using DNS this will be an
> issue. Is that pub also the TFTP server that is going to show up in the
> mini-config?
>
> -Ryan
>
> On Oct 4, 2013, at 1:13 PM, Erick Wellnitz <[email protected]>
> wrote:
>
> I always forget about doing a packet capture on the phone.
>
> I'm thinking it is cert related because on this one cluster the Publisher
> is set up under servers using it's hostname instead of IP while all the
> others are using IP.
>
> We're going to change this once we get approval then re-export,
> consolidate and import.
>
>
> On Thu, Oct 3, 2013 at 4:49 PM, Brian Meade (brmeade)
> <[email protected]>wrote:
>
>> Erick,****
>>
>> ** **
>>
>> Can you grab a packet capture from the phone trying to log in? The
>> packet captures seem to show the EMCC issues very clearly. You should see
>> after the login, the phone will download its mini-config with the new TFTP
>> server info. You?ll then see it try to download its ITL from the other
>> cluster. If you don?t see the phone request anything after that, most
>> likely it didn?t trust the signer of the ITL and it will show the
>> ?Extension Mobility is unavailable? error message.****
>>
>> ** **
>>
>> Usually that means you need to do a Re-Export, Consolidate, Import of the
>> certificates.****
>>
>> ** **
>>
>> Brian Meade****
>>
>> ** **
>>
>> *From:* cisco-voip [mailto:[email protected]] *On
>> Behalf Of *Erick Wellnitz
>> *Sent:* Thursday, October 03, 2013 5:01 PM
>> *To:* Jason Aarons (AM)
>> *Cc:* cisco-voip
>> *Subject:* Re: [cisco-voip] 'interesting' EMCC behavior****
>>
>> ** **
>>
>> That's the odd thing. All of the traces look like it is successful but
>> the phone (7965) resets, logs the user out and displays a message that
>> extension mobility is not available without an error code. I get similar
>> behavior on the 8945 but without the message.****
>>
>> ****
>>
>> I've gon through the EMCC guide a number of times and nothing sticks out
>> as obvious.****
>>
>> ** **
>>
>> On Thu, Oct 3, 2013 at 3:41 PM, Jason Aarons (AM) <
>> [email protected]> wrote:****
>>
>> I was using 8.6 the first time I setup EMCC to another 8.6 box.****
>>
>> ****
>>
>> *From:* cisco-voip [mailto:[email protected]] *On
>> Behalf Of *Anthony Holloway
>> *Sent:* Thursday, October 03, 2013 3:39 PM
>> *To:* Erick Wellnitz
>> *Cc:* cisco-voip
>> *Subject:* Re: [cisco-voip] 'interesting' EMCC behavior****
>>
>> ****
>>
>> ****
>>
>> I have one idea.****
>>
>> EMCC does not work very well in 8.5 because you cannot "home" a user to a
>> cluster. Therefore, if your LDAP integrations are the same for each
>> cluster, it would be impossible to know which cluster the user is homed
>> to. 9.1 on the other hand has this feature on the end user page, and thus
>> overcomes this limitation.****
>>
>> ****
>>
>> On Thu, Oct 3, 2013 at 1:50 PM, Erick Wellnitz <[email protected]>
>> wrote:****
>>
>> I have a strange situation.****
>>
>> ****
>>
>> 3 Clusters. 2 on 9.1 and the other on 8.5 EMCC works except with users
>> configured on the 8.5 cluster. The profile logs in then immediately logs
>> out without an error message.****
>>
>> ****
>>
>> Any ideas would be greatly appreciated!****
>>
>>
>> _______________________________________________
>> cisco-voip mailing list
>> [email protected]
>> https://puck.nether.net/mailman/listinfo/cisco-voip****
>>
>> ****
>>
>>
>>
>> itevomcid ****
>>
>> ** **
>>
>
> _______________________________________________
> cisco-voip mailing list
> [email protected]
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/0bfdbb5d/attachment-0001.html>
------------------------------
Message: 7
Date: Fri, 4 Oct 2013 21:00:52 +0000
From: "Ryan Ratliff (rratliff)" <[email protected]>
To: Erick Wellnitz <[email protected]>
Cc: cisco-voip <[email protected]>
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
Message-ID:
<[email protected]>
Content-Type: text/plain; charset="windows-1252"
By the way what's the error code that the phone displays? EM has been better
than most about having useful errors, even if they are subject to the secret
decoder ring.
-Ryan
On Oct 4, 2013, at 4:10 PM, Erick Wellnitz
<[email protected]<mailto:[email protected]>> wrote:
Yes, it is also the primary tftp server.
On Fri, Oct 4, 2013 at 12:57 PM, Ryan Ratliff (rratliff)
<[email protected]<mailto:[email protected]>> wrote:
System->Server values don't impact certificates. They will impact what the
phone gets in config files so if you aren't using DNS this will be an issue.
Is that pub also the TFTP server that is going to show up in the mini-config?
-Ryan
On Oct 4, 2013, at 1:13 PM, Erick Wellnitz
<[email protected]<mailto:[email protected]>> wrote:
I always forget about doing a packet capture on the phone.
I'm thinking it is cert related because on this one cluster the Publisher is
set up under servers using it's hostname instead of IP while all the others are
using IP.
We're going to change this once we get approval then re-export, consolidate and
import.
On Thu, Oct 3, 2013 at 4:49 PM, Brian Meade (brmeade)
<[email protected]<mailto:[email protected]>> wrote:
Erick,
Can you grab a packet capture from the phone trying to log in? The packet
captures seem to show the EMCC issues very clearly. You should see after the
login, the phone will download its mini-config with the new TFTP server info.
You?ll then see it try to download its ITL from the other cluster. If you
don?t see the phone request anything after that, most likely it didn?t trust
the signer of the ITL and it will show the ?Extension Mobility is unavailable?
error message.
Usually that means you need to do a Re-Export, Consolidate, Import of the
certificates.
Brian Meade
From: cisco-voip
[mailto:[email protected]<mailto:[email protected]>]
On Behalf Of Erick Wellnitz
Sent: Thursday, October 03, 2013 5:01 PM
To: Jason Aarons (AM)
Cc: cisco-voip
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
That's the odd thing. All of the traces look like it is successful but the
phone (7965) resets, logs the user out and displays a message that extension
mobility is not available without an error code. I get similar behavior on the
8945 but without the message.
I've gon through the EMCC guide a number of times and nothing sticks out as
obvious.
On Thu, Oct 3, 2013 at 3:41 PM, Jason Aarons (AM)
<[email protected]<mailto:[email protected]>> wrote:
I was using 8.6 the first time I setup EMCC to another 8.6 box.
From: cisco-voip
[mailto:[email protected]<mailto:[email protected]>]
On Behalf Of Anthony Holloway
Sent: Thursday, October 03, 2013 3:39 PM
To: Erick Wellnitz
Cc: cisco-voip
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
I have one idea.
EMCC does not work very well in 8.5 because you cannot "home" a user to a
cluster. Therefore, if your LDAP integrations are the same for each cluster,
it would be impossible to know which cluster the user is homed to. 9.1 on the
other hand has this feature on the end user page, and thus overcomes this
limitation.
On Thu, Oct 3, 2013 at 1:50 PM, Erick Wellnitz
<[email protected]<mailto:[email protected]>> wrote:
I have a strange situation.
3 Clusters. 2 on 9.1 and the other on 8.5 EMCC works except with users
configured on the 8.5 cluster. The profile logs in then immediately logs out
without an error message.
Any ideas would be greatly appreciated!
_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip
itevomcid
_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/9d0a20ff/attachment-0001.html>
------------------------------
Message: 8
Date: Fri, 4 Oct 2013 16:10:25 -0500
From: Erick Wellnitz <[email protected]>
To: "Ryan Ratliff (rratliff)" <[email protected]>
Cc: cisco-voip <[email protected]>
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
Message-ID:
<CAK0wOsBKgQff2JpF=6_h2MtGoyCtxPwBXLF=rwlj_p6mpbv...@mail.gmail.com>
Content-Type: text/plain; charset="windows-1252"
The profile logs in, phone resets, profile gets logged out, phone resets
and displays 'extension mobility unavailable.
We believe it is somehow related to DNS because when we register a phone to
one of the 9.1 clusters in the other location login works as expected. I
haven't had a chance to do a packet capture yet.
On Fri, Oct 4, 2013 at 4:00 PM, Ryan Ratliff (rratliff)
<[email protected]>wrote:
> By the way what's the error code that the phone displays? EM has been
> better than most about having useful errors, even if they are subject to
> the secret decoder ring.
>
> -Ryan
>
> On Oct 4, 2013, at 4:10 PM, Erick Wellnitz <[email protected]>
> wrote:
>
> Yes, it is also the primary tftp server.
>
>
> On Fri, Oct 4, 2013 at 12:57 PM, Ryan Ratliff (rratliff) <
> [email protected]> wrote:
>
>> System->Server values don't impact certificates. They will impact what
>> the phone gets in config files so if you aren't using DNS this will be an
>> issue. Is that pub also the TFTP server that is going to show up in the
>> mini-config?
>>
>> -Ryan
>>
>> On Oct 4, 2013, at 1:13 PM, Erick Wellnitz <[email protected]>
>> wrote:
>>
>> I always forget about doing a packet capture on the phone.
>>
>> I'm thinking it is cert related because on this one cluster the Publisher
>> is set up under servers using it's hostname instead of IP while all the
>> others are using IP.
>>
>> We're going to change this once we get approval then re-export,
>> consolidate and import.
>>
>>
>> On Thu, Oct 3, 2013 at 4:49 PM, Brian Meade (brmeade)
>> <[email protected]>wrote:
>>
>>> Erick,****
>>>
>>> ** **
>>>
>>> Can you grab a packet capture from the phone trying to log in? The
>>> packet captures seem to show the EMCC issues very clearly. You should see
>>> after the login, the phone will download its mini-config with the new TFTP
>>> server info. You?ll then see it try to download its ITL from the other
>>> cluster. If you don?t see the phone request anything after that, most
>>> likely it didn?t trust the signer of the ITL and it will show the
>>> ?Extension Mobility is unavailable? error message.****
>>>
>>> ** **
>>>
>>> Usually that means you need to do a Re-Export, Consolidate, Import of
>>> the certificates.****
>>>
>>> ** **
>>>
>>> Brian Meade****
>>>
>>> ** **
>>>
>>> *From:* cisco-voip [mailto:[email protected]] *On
>>> Behalf Of *Erick Wellnitz
>>> *Sent:* Thursday, October 03, 2013 5:01 PM
>>> *To:* Jason Aarons (AM)
>>> *Cc:* cisco-voip
>>> *Subject:* Re: [cisco-voip] 'interesting' EMCC behavior****
>>>
>>> ** **
>>>
>>> That's the odd thing. All of the traces look like it is successful but
>>> the phone (7965) resets, logs the user out and displays a message that
>>> extension mobility is not available without an error code. I get similar
>>> behavior on the 8945 but without the message.****
>>>
>>> ****
>>>
>>> I've gon through the EMCC guide a number of times and nothing sticks out
>>> as obvious.****
>>>
>>> ** **
>>>
>>> On Thu, Oct 3, 2013 at 3:41 PM, Jason Aarons (AM) <
>>> [email protected]> wrote:****
>>>
>>> I was using 8.6 the first time I setup EMCC to another 8.6 box.****
>>>
>>> ****
>>>
>>> *From:* cisco-voip [mailto:[email protected]] *On
>>> Behalf Of *Anthony Holloway
>>> *Sent:* Thursday, October 03, 2013 3:39 PM
>>> *To:* Erick Wellnitz
>>> *Cc:* cisco-voip
>>> *Subject:* Re: [cisco-voip] 'interesting' EMCC behavior****
>>>
>>> ****
>>>
>>> ****
>>>
>>> I have one idea.****
>>>
>>> EMCC does not work very well in 8.5 because you cannot "home" a user to
>>> a cluster. Therefore, if your LDAP integrations are the same for each
>>> cluster, it would be impossible to know which cluster the user is homed
>>> to. 9.1 on the other hand has this feature on the end user page, and thus
>>> overcomes this limitation.****
>>>
>>> ****
>>>
>>> On Thu, Oct 3, 2013 at 1:50 PM, Erick Wellnitz <[email protected]>
>>> wrote:****
>>>
>>> I have a strange situation.****
>>>
>>> ****
>>>
>>> 3 Clusters. 2 on 9.1 and the other on 8.5 EMCC works except with users
>>> configured on the 8.5 cluster. The profile logs in then immediately logs
>>> out without an error message.****
>>>
>>> ****
>>>
>>> Any ideas would be greatly appreciated!****
>>>
>>>
>>> _______________________________________________
>>> cisco-voip mailing list
>>> [email protected]
>>> https://puck.nether.net/mailman/listinfo/cisco-voip****
>>>
>>> ****
>>>
>>>
>>>
>>> itevomcid ****
>>>
>>> ** **
>>>
>>
>> _______________________________________________
>> cisco-voip mailing list
>> [email protected]
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/940608ae/attachment-0001.html>
------------------------------
Message: 9
Date: Fri, 04 Oct 2013 14:39:08 -0700 (PDT)
From: "Florian Kroessbacher" <[email protected]>
To: "Stephen Welsh" <[email protected]>, "Florian
=?UTF-8?Q?Kr=C3=B6ssbacher?=" <[email protected]>
Cc: Cisco VOIP <[email protected]>
Subject: Re: [cisco-voip] TFTP after Pub Restore
Message-ID: <1380922748089.e858224f@Nodemailer>
Content-Type: text/plain; charset="utf-8"
Hy Stephen,
thnxs for your nice Testing.
Thnxs for your hint about the webinars, i think i will watch to them.
So i think it would be save to deactivate an dactivate again the TFTP Service.
Thnxs a lot
--
Florian Kroessbacher
gmail: [email protected]
On Fri, Oct 4, 2013 at 10:05 PM, Stephen Welsh
<[email protected]> wrote:
> Hi Florian,
> I did a quick test as follows:
> * Stop all TVS Service instances
> * Deactivate TFTP Service
> * Activate TFTP Service
> * Reboot IP Phones and check for ITL Issues
> Everything checked out fine, so as long as there are no other changes that
> would trigger the self signed certificates to be regenerated you should be
> fine.
> On a related subject, myself and Akhil Behl (author or ?Securing Cisco IP
> Telephony Networks?) held a series of webinars on endpoint security that
> includes SBD, the links to the recordings are in my email signature.
> Kind Regards.
> Stephen Welsh
> [cid:[email protected]]
> ================================================================
> Unified FX?s FREE Educational seminars on The Essentials of Endpoint Security
> & Compliance
> ? Session 1: The Impact of Security by Default (Recording:
> http://goo.gl/2yJaKm)
> ? Session 2: Understanding and Managing ITL & CTL Files (Recording:
> http://goo.gl/w05Dqh)
> ? Session 3: Leading Practices for Endpoint Security & Compliance (Recording:
> http://goo.gl/GuXy2P)
> NEW Educational Webinar Announced
> "Drive to 9: Essential Upgrade Planning Considerations" (10th Oct)
> "Phone Background Management & Branding" (24th Oct)
> Spaces are limited and we anticipate high demand, so please register early:
> http://events.unifiedfx.com<http://unifiedfx.createsend1.com/t/r-i-bhljyut-l-o/>
> ================================================================
> On 4 Oct 2013, at 19:35, Florian Kroessbacher
> <[email protected]<mailto:[email protected]>> wrote:
> Hy out there,
> we have brought our Publisher to VMware and after the restore the DRS was'nt
> showing some services for restore. We are on version 8.6(2) so there is SBD
> on. For other Services the have to be deactivate and activated again, so the
> Service is shown in DRS again. Ehat about the TFTP Service, will there be any
> impact with Security by Default if a deactivate and activate the TFTP service
> again. we have about 2400 Endpoints
> thanxs for your answers
> --
> Florian Kroessbacher
> gmail: [email protected]<mailto:[email protected]>
> _______________________________________________
> cisco-voip mailing list
> [email protected]<mailto:[email protected]>
> https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/b5eda3c6/attachment-0001.html>
------------------------------
Message: 10
Date: Fri, 4 Oct 2013 21:17:40 +0000
From: Nate VanMaren <[email protected]>
To: "Jason Aarons (AM)" <[email protected]>, "cisco-voip
([email protected])" <[email protected]>
Subject: Re: [cisco-voip] 7975 with single or double footstand to
wall?
Message-ID:
<[email protected]>
Content-Type: text/plain; charset="us-ascii"
http://www.dewalt.com/tools/cordless-combo-packs-18-volt-combo-packs-dck465l.aspx
From: cisco-voip [mailto:[email protected]] On Behalf Of Jason
Aarons (AM)
Sent: Friday, October 04, 2013 9:08 AM
To: cisco-voip ([email protected])
Subject: [cisco-voip] 7975 with single or double footstand to wall?
Any third-party solutions to put a 7975 with double sidecars (7916) on a wall??
NOTICE: This email message is for the sole use of the intended recipient(s)
and may contain confidential and privileged information. Any unauthorized
review, use, disclosure or distribution is prohibited. If you are not the
intended recipient, please contact the sender by reply email and destroy all
copies of the original message.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/952a7433/attachment-0001.html>
------------------------------
Message: 11
Date: Fri, 4 Oct 2013 23:26:00 +0000
From: "Ryan Ratliff (rratliff)" <[email protected]>
To: Erick Wellnitz <[email protected]>
Cc: cisco-voip <[email protected]>
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
Message-ID: <[email protected]>
Content-Type: text/plain; charset="windows-1252"
I it's easier get the console logs there will likely be something there to go
off.
Sent from my iPhone
On Oct 4, 2013, at 5:10 PM, "Erick Wellnitz"
<[email protected]<mailto:[email protected]>> wrote:
The profile logs in, phone resets, profile gets logged out, phone resets and
displays 'extension mobility unavailable.
We believe it is somehow related to DNS because when we register a phone to one
of the 9.1 clusters in the other location login works as expected. I haven't
had a chance to do a packet capture yet.
On Fri, Oct 4, 2013 at 4:00 PM, Ryan Ratliff (rratliff)
<[email protected]<mailto:[email protected]>> wrote:
By the way what's the error code that the phone displays? EM has been better
than most about having useful errors, even if they are subject to the secret
decoder ring.
-Ryan
On Oct 4, 2013, at 4:10 PM, Erick Wellnitz
<[email protected]<mailto:[email protected]>> wrote:
Yes, it is also the primary tftp server.
On Fri, Oct 4, 2013 at 12:57 PM, Ryan Ratliff (rratliff)
<[email protected]<mailto:[email protected]>> wrote:
System->Server values don't impact certificates. They will impact what the
phone gets in config files so if you aren't using DNS this will be an issue.
Is that pub also the TFTP server that is going to show up in the mini-config?
-Ryan
On Oct 4, 2013, at 1:13 PM, Erick Wellnitz
<[email protected]<mailto:[email protected]>> wrote:
I always forget about doing a packet capture on the phone.
I'm thinking it is cert related because on this one cluster the Publisher is
set up under servers using it's hostname instead of IP while all the others are
using IP.
We're going to change this once we get approval then re-export, consolidate and
import.
On Thu, Oct 3, 2013 at 4:49 PM, Brian Meade (brmeade)
<[email protected]<mailto:[email protected]>> wrote:
Erick,
Can you grab a packet capture from the phone trying to log in? The packet
captures seem to show the EMCC issues very clearly. You should see after the
login, the phone will download its mini-config with the new TFTP server info.
You?ll then see it try to download its ITL from the other cluster. If you
don?t see the phone request anything after that, most likely it didn?t trust
the signer of the ITL and it will show the ?Extension Mobility is unavailable?
error message.
Usually that means you need to do a Re-Export, Consolidate, Import of the
certificates.
Brian Meade
From: cisco-voip
[mailto:[email protected]<mailto:[email protected]>]
On Behalf Of Erick Wellnitz
Sent: Thursday, October 03, 2013 5:01 PM
To: Jason Aarons (AM)
Cc: cisco-voip
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
That's the odd thing. All of the traces look like it is successful but the
phone (7965) resets, logs the user out and displays a message that extension
mobility is not available without an error code. I get similar behavior on the
8945 but without the message.
I've gon through the EMCC guide a number of times and nothing sticks out as
obvious.
On Thu, Oct 3, 2013 at 3:41 PM, Jason Aarons (AM)
<[email protected]<mailto:[email protected]>> wrote:
I was using 8.6 the first time I setup EMCC to another 8.6 box.
From: cisco-voip
[mailto:[email protected]<mailto:[email protected]>]
On Behalf Of Anthony Holloway
Sent: Thursday, October 03, 2013 3:39 PM
To: Erick Wellnitz
Cc: cisco-voip
Subject: Re: [cisco-voip] 'interesting' EMCC behavior
I have one idea.
EMCC does not work very well in 8.5 because you cannot "home" a user to a
cluster. Therefore, if your LDAP integrations are the same for each cluster,
it would be impossible to know which cluster the user is homed to. 9.1 on the
other hand has this feature on the end user page, and thus overcomes this
limitation.
On Thu, Oct 3, 2013 at 1:50 PM, Erick Wellnitz
<[email protected]<mailto:[email protected]>> wrote:
I have a strange situation.
3 Clusters. 2 on 9.1 and the other on 8.5 EMCC works except with users
configured on the 8.5 cluster. The profile logs in then immediately logs out
without an error message.
Any ideas would be greatly appreciated!
_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip
itevomcid
_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20131004/b88c6950/attachment-0001.html>
------------------------------
Subject: Digest Footer
_______________________________________________
cisco-voip mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/cisco-voip
------------------------------
End of cisco-voip Digest, Vol 120, Issue 5
******************************************
