Re: [cisco-voip] UCCX 9 EM agents cant login

[abbas wali]

This doesn’t make any sense .. 

 

Created a new account with the same parameters for that agent/user and it does 
login. 

 

That’s absurd 

 

 

From: abbas wali [mailto:abba...@gmail.com] 
Sent: 15 September 2015 19:23
To: 'Ryan Huff' ; ealeather...@gmail.com
Cc: cisco-voip@puck.nether.net
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login

 

Cti restarts and profile+ device re association been done already. No luck. 

 

From: Ryan Huff [mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 18:46
To: ealeather...@gmail.com  ; abba...@gmail.com 
 
Cc: cisco-voip@puck.nether.net  
Subject: Re: [cisco-voip] UCCX 9 EM agents cant login

 

If the cti service in ccm has lost the state of the device, reassociating the 
device as Ed suggests, or restarting the cti manager service in ccm is how I 
have resolved these types of issues before.

Thanks,

Ryan



 Original Message 
From: Ed Leatherman  >
Sent: Tuesday, September 15, 2015 01:36 PM
To: abbas wali  >
Subject: Re: [cisco-voip] UCCX 9 EM agents cant login
CC: Ryan Huff  >,Cisco VOIP 
 >

I've had some weird, rare occasions where i've had to disassociate the device 
or profile from the rmjtapi app user and re-associate them. I'd suggest you try 
that if you haven't already just as a quick thing to do, although that won't 
tell you a root cause.

 

On Tue, Sep 15, 2015 at 10:21 AM, abbas wali  > wrote:

Sorry that will mean !! 

 

From: Ryan Huff [mailto:ryanh...@outlook.com  ] 
Sent: 15 September 2015 15:18


To: abbas wali  >; 
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login

 

Have is the subsystem in partial service?


  _  


From: abba...@gmail.com  
To: ryanh...@outlook.com  ; 
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
Date: Tue, 15 Sep 2015 15:11:33 +0100

Thanks Ryan, 

 

We have a dozen of other users who can login to them phones without any issues. 
Even I can do it on my CIPC 

 

But these new 3 agents cant. 

 

From: Ryan Huff [mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 15:05
To: abbas wali  >; 
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login

 

Assuming this isn't a new/upgrade UCCX and it isn't a JTAPI compatibility issue 
with CCM; assuming it was working and now it is not.

I would check these items;

Agent/phone checks;

*   Make sure the RmCM user/password hasn't changed from what UCCX has 
recorded. NO
*   Does the agent have the Standard CTI Role? Yes
*   Does the agent have IPCCX defined in their profile? Yes
*   Does the agent have CTI control of the phone? Yes
*   Does the agent have control of the EM. profile? Yes
*   Is the physical phone associated to the RMCM user? Yes ( currently to 
log them in I am using my soft phone which is associated with RMCM user )



Server checks; yes as many other agent can login and are talking calls. 

*   DNS ... (are forward and reverse lookups working correctly) 
*   NTP ... NTP still working?



Thanks,


Ryan


  _  


From: abba...@gmail.com  
To: ryanh...@outlook.com  ; 
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
Date: Tue, 15 Sep 2015 14:53:54 +0100

That is the case, the DN is exclusive only to the profile – its not used on any 
phy. Phone. 

 

does anyone know, if  want to get traces from RTMT which option should I use 
i.e. Cisco Call Manager will suffice ?

 

thanks 

 

From: Ryan Huff [mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 14:35
To: abbas wali  >; 
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login

 

Since you mention using extension mobility 

When the Agent logs in with their Ex. mobility profile, does the DN happen to 
be on another IP phone? The only way to "share" an ACD extension between 
multiple devices is to assign it to a Device Profile exclusively and then login 
using Extension Mobility to whatever device they wish to use.


Thanks,

Ryan


  _  


From: abba...@gmail.com  
To: cisco-voip@puck.nether.net  
Date: Tue, 

Re: [cisco-voip] UCCX 9 EM agents cant login

[Ryan Huff]

It likely indicates 'something' was out of sync. The act of creating a new 
account (assuming the parameters were the same) re inserted into the db with 
new associations.

Strange, what version of ccm? When was the last time that cluster was rebooted?

Thanks,

Ryan

 Original Message 
From: abbas wali 
Sent: Tuesday, September 15, 2015 05:54 PM
To: 'Ryan Huff' ,ealeather...@gmail.com
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
CC: cisco-voip@puck.nether.net

>
>
>This doesn’t make any sense .. 
>
> 
>
>Created a new account with the same parameters for that agent/user and it does 
>login. 
>
> 
>
>That’s absurd 
>
> 
>
> 
>
>From: abbas wali [mailto:abba...@gmail.com] 
>Sent: 15 September 2015 19:23
>To: 'Ryan Huff' ; ealeather...@gmail.com
>Cc: cisco-voip@puck.nether.net
>Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
>
> 
>
>Cti restarts and profile+ device re association been done already. No luck. 
>
> 
>
>From: Ryan Huff [mailto:ryanh...@outlook.com] 
>Sent: 15 September 2015 18:46
>To: ealeather...@gmail.com; abba...@gmail.com
>Cc: cisco-voip@puck.nether.net
>Subject: Re: [cisco-voip] UCCX 9 EM agents cant login
>
> 
>
>If the cti service in ccm has lost the state of the device, reassociating the 
>device as Ed suggests, or restarting the cti manager service in ccm is how I 
>have resolved these types of issues before.
>
>Thanks,
>
>Ryan
>
>
>
> Original Message 
>From: Ed Leatherman 
>Sent: Tuesday, September 15, 2015 01:36 PM
>To: abbas wali 
>Subject: Re: [cisco-voip] UCCX 9 EM agents cant login
>CC: Ryan Huff ,Cisco VOIP 
>
>I've had some weird, rare occasions where i've had to disassociate the device 
>or profile from the rmjtapi app user and re-associate them. I'd suggest you 
>try that if you haven't already just as a quick thing to do, although that 
>won't tell you a root cause.
>
> 
>
>On Tue, Sep 15, 2015 at 10:21 AM, abbas wali  wrote:
>
>Sorry that will mean !! 
>
> 
>
>From: Ryan Huff [mailto:ryanh...@outlook.com] 
>Sent: 15 September 2015 15:18
>
>
>To: abbas wali ; cisco-voip@puck.nether.net
>Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
>
> 
>
>Have is the subsystem in partial service?
>
>From: abba...@gmail.com
>To: ryanh...@outlook.com; cisco-voip@puck.nether.net
>Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
>Date: Tue, 15 Sep 2015 15:11:33 +0100
>
>Thanks Ryan, 
>
> 
>
>We have a dozen of other users who can login to them phones without any 
>issues. Even I can do it on my CIPC 
>
> 
>
>But these new 3 agents cant. 
>
> 
>
>From: Ryan Huff [mailto:ryanh...@outlook.com] 
>Sent: 15 September 2015 15:05
>To: abbas wali ; cisco-voip@puck.nether.net
>Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
>
> 
>
>Assuming this isn't a new/upgrade UCCX and it isn't a JTAPI compatibility 
>issue with CCM; assuming it was working and now it is not.
>
>I would check these items;
>
>Agent/phone checks;
>
>Make sure the RmCM user/password hasn't changed from what UCCX has recorded. NO
>
>Does the agent have the Standard CTI Role? Yes
>
>Does the agent have IPCCX defined in their profile? Yes
>
>Does the agent have CTI control of the phone? Yes
>
>Does the agent have control of the EM. profile? Yes
>
>Is the physical phone associated to the RMCM user? Yes ( currently to log them 
>in I am using my soft phone which is associated with RMCM user )
>
>
>
>Server checks; yes as many other agent can login and are talking calls. 
>
>DNS ... (are forward and reverse lookups working correctly) 
>
>NTP ... NTP still working?
>
>
>
>Thanks,
>
>
>Ryan
>
>From: abba...@gmail.com
>To: ryanh...@outlook.com; cisco-voip@puck.nether.net
>Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
>Date: Tue, 15 Sep 2015 14:53:54 +0100
>
>That is the case, the DN is exclusive only to the profile – its not used on 
>any phy. Phone. 
>
> 
>
>does anyone know, if  want to get traces from RTMT which option should I use 
>i.e. Cisco Call Manager will suffice ?
>
> 
>
>thanks 
>
> 
>
>From: Ryan Huff [mailto:ryanh...@outlook.com] 
>Sent: 15 September 2015 14:35
>To: abbas wali ; cisco-voip@puck.nether.net
>Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
>
> 
>
>Since you mention using extension mobility 
>
>When the Agent logs in with their Ex. mobility profile, does the DN happen to 
>be on another IP phone? The only way to "share" an ACD extension between 
>multiple devices is to assign it to a Device Profile exclusively and then 
>login using Extension Mobility to whatever device they wish to use.
>
>
>Thanks,
>
>Ryan
>
>From: abba...@gmail.com
>To: cisco-voip@puck.nether.net
>Date: Tue, 15 Sep 2015 13:54:13 +0100
>Subject: [cisco-voip] UCCX 9 EM agents cant login
>
>Hi all, 
>
> 
>
>Urgent issue here.
>
> 
>
>Ext 

Re: [cisco-voip] UCCX 9 EM agents cant login

[Ed Leatherman]

I've had some weird, rare occasions where i've had to disassociate the
device or profile from the rmjtapi app user and re-associate them. I'd
suggest you try that if you haven't already just as a quick thing to do,
although that won't tell you a root cause.

On Tue, Sep 15, 2015 at 10:21 AM, abbas wali  wrote:

> Sorry that will mean !!
>
>
>
> *From:* Ryan Huff [mailto:ryanh...@outlook.com]
> *Sent:* 15 September 2015 15:18
>
> *To:* abbas wali ; cisco-voip@puck.nether.net
> *Subject:* RE: [cisco-voip] UCCX 9 EM agents cant login
>
>
>
> Have is the subsystem in partial service?
> --
>
> From: abba...@gmail.com
> To: ryanh...@outlook.com; cisco-voip@puck.nether.net
> Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
> Date: Tue, 15 Sep 2015 15:11:33 +0100
>
> Thanks Ryan,
>
>
>
> We have a dozen of other users who can login to them phones without any
> issues. Even I can do it on my CIPC
>
>
>
> But these new 3 agents cant.
>
>
>
> *From:* Ryan Huff [mailto:ryanh...@outlook.com ]
> *Sent:* 15 September 2015 15:05
> *To:* abbas wali ; cisco-voip@puck.nether.net
> *Subject:* RE: [cisco-voip] UCCX 9 EM agents cant login
>
>
>
> Assuming this isn't a new/upgrade UCCX and it isn't a JTAPI compatibility
> issue with CCM; assuming it was working and now it is not.
>
> I would check these items;
>
> Agent/phone checks;
>
>- Make sure the RmCM user/password hasn't changed from what UCCX has
>recorded. NO
>- Does the agent have the Standard CTI Role? Yes
>- Does the agent have IPCCX defined in their profile? Yes
>- Does the agent have CTI control of the phone? Yes
>- Does the agent have control of the EM. profile? Yes
>- Is the physical phone associated to the RMCM user? Yes ( currently
>to log them in I am using my soft phone which is associated with RMCM user 
> )
>
>
>
> Server checks; yes as many other agent can login and are talking calls.
>
>- DNS ... (are forward and reverse lookups working correctly)
>- NTP ... NTP still working?
>
>
>
> Thanks,
>
>
> Ryan
> --
>
> From: abba...@gmail.com
> To: ryanh...@outlook.com; cisco-voip@puck.nether.net
> Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
> Date: Tue, 15 Sep 2015 14:53:54 +0100
>
> That is the case, the DN is exclusive only to the profile – its not used
> on any phy. Phone.
>
>
>
> does anyone know, if  want to get traces from RTMT which option should I
> use i.e. Cisco Call Manager will suffice ?
>
>
>
> thanks
>
>
>
> *From:* Ryan Huff [mailto:ryanh...@outlook.com ]
> *Sent:* 15 September 2015 14:35
> *To:* abbas wali ; cisco-voip@puck.nether.net
> *Subject:* RE: [cisco-voip] UCCX 9 EM agents cant login
>
>
>
> Since you mention using extension mobility 
>
> When the Agent logs in with their Ex. mobility profile, does the DN happen
> to be on another IP phone? The only way to "share" an ACD extension between
> multiple devices is to assign it to a Device Profile exclusively and then
> login using Extension Mobility to whatever device they wish to use.
>
>
> Thanks,
>
> Ryan
> --
>
> From: abba...@gmail.com
> To: cisco-voip@puck.nether.net
> Date: Tue, 15 Sep 2015 13:54:13 +0100
> Subject: [cisco-voip] UCCX 9 EM agents cant login
>
> Hi all,
>
>
>
> Urgent issue here.
>
>
>
> Ext Mob. Enabled agents cant login. Getting “Login failed due to a
> configuration error with your phone and JTAPI or UCM. Contact your admin..”
>
>
>
> The users profile is in the controlled list for RM application user.
>
>
>
> The phone they are loggin in – is used by other agents with their profiles
> and they can get through.
>
>
>
> Not sure what else I can check.
>
>
>
> Please help !!
>
>
>
> Thanks
>
>
> ___ cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>


-- 
Ed Leatherman
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] UCCX 9 EM agents cant login

[abbas wali]

Cti restarts and profile+ device re association been done already. No luck. 

 

From: Ryan Huff [mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 18:46
To: ealeather...@gmail.com; abba...@gmail.com
Cc: cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] UCCX 9 EM agents cant login

 

If the cti service in ccm has lost the state of the device, reassociating the 
device as Ed suggests, or restarting the cti manager service in ccm is how I 
have resolved these types of issues before.

Thanks,

Ryan



 Original Message 
From: Ed Leatherman  >
Sent: Tuesday, September 15, 2015 01:36 PM
To: abbas wali  >
Subject: Re: [cisco-voip] UCCX 9 EM agents cant login
CC: Ryan Huff  >,Cisco VOIP 
 >

I've had some weird, rare occasions where i've had to disassociate the device 
or profile from the rmjtapi app user and re-associate them. I'd suggest you try 
that if you haven't already just as a quick thing to do, although that won't 
tell you a root cause.

 

On Tue, Sep 15, 2015 at 10:21 AM, abbas wali  > wrote:

Sorry that will mean !! 

 

From: Ryan Huff [mailto:ryanh...@outlook.com  ] 
Sent: 15 September 2015 15:18


To: abbas wali  >; 
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login

 

Have is the subsystem in partial service?


  _  


From: abba...@gmail.com  
To: ryanh...@outlook.com  ; 
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
Date: Tue, 15 Sep 2015 15:11:33 +0100

Thanks Ryan, 

 

We have a dozen of other users who can login to them phones without any issues. 
Even I can do it on my CIPC 

 

But these new 3 agents cant. 

 

From: Ryan Huff [mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 15:05
To: abbas wali  >; 
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login

 

Assuming this isn't a new/upgrade UCCX and it isn't a JTAPI compatibility issue 
with CCM; assuming it was working and now it is not.

I would check these items;

Agent/phone checks;

*   Make sure the RmCM user/password hasn't changed from what UCCX has 
recorded. NO
*   Does the agent have the Standard CTI Role? Yes
*   Does the agent have IPCCX defined in their profile? Yes
*   Does the agent have CTI control of the phone? Yes
*   Does the agent have control of the EM. profile? Yes
*   Is the physical phone associated to the RMCM user? Yes ( currently to 
log them in I am using my soft phone which is associated with RMCM user )



Server checks; yes as many other agent can login and are talking calls. 

*   DNS ... (are forward and reverse lookups working correctly) 
*   NTP ... NTP still working?



Thanks,


Ryan


  _  


From: abba...@gmail.com  
To: ryanh...@outlook.com  ; 
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
Date: Tue, 15 Sep 2015 14:53:54 +0100

That is the case, the DN is exclusive only to the profile – its not used on any 
phy. Phone. 

 

does anyone know, if  want to get traces from RTMT which option should I use 
i.e. Cisco Call Manager will suffice ?

 

thanks 

 

From: Ryan Huff [mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 14:35
To: abbas wali  >; 
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login

 

Since you mention using extension mobility 

When the Agent logs in with their Ex. mobility profile, does the DN happen to 
be on another IP phone? The only way to "share" an ACD extension between 
multiple devices is to assign it to a Device Profile exclusively and then login 
using Extension Mobility to whatever device they wish to use.


Thanks,

Ryan


  _  


From: abba...@gmail.com  
To: cisco-voip@puck.nether.net  
Date: Tue, 15 Sep 2015 13:54:13 +0100
Subject: [cisco-voip] UCCX 9 EM agents cant login

Hi all, 

 

Urgent issue here.

 

Ext Mob. Enabled agents cant login. Getting “Login failed due to a  
configuration error with your phone and JTAPI or UCM. Contact your admin..”

 

The users profile is in the controlled list for RM application user. 

 

The phone they are loggin in – is used by other agents with their profiles and 
they can get through. 

 

Not sure what else I can check. 

Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection

[Justin Steinberg]

There are some settings on the Expressway regarding the number of auth
attempts, etc.  have you tried to increase those to see if that makes any
difference ?

On Tue, Sep 15, 2015 at 10:45 AM, Ryan Huff  wrote:

> I'll hav to sift through my logs and see if that is what my issue was.
> Thanks for the follow through Brian.
>
> Thanks,
>
> Ryan
>
> --
> Date: Tue, 15 Sep 2015 10:40:24 -0400
> Subject: Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection
> From: bmead...@vt.edu
> To: kev...@advancedtsg.com
> CC: ryanh...@outlook.com; cisco-voip@puck.nether.net
>
>
> We're actually on 8.6.1.
>
> I dug through the logs a bit more and found the same user also had an 8800
> series phone logged in via MRA.  Doing some further searching, I found
> someone who had the same issue logging into Jabber with an 8841 already
> logged in via MRA.
>
> I had the user unplug their 8841 and they were able to login to Jabber
> fine after this.
>
> It looks like I'll be reaching out to the feature preview folks to make
> sure they know about this issue.
>
> Brian
>
> On Tue, Sep 15, 2015 at 8:20 AM, Kevin Przybylowski <
> kev...@advancedtsg.com> wrote:
>
> I almost upgraded our VCS servers to 8.6 last week and noticed a couple
> reviews on CCO so I stuck with 8.5.3.  I’ll give 8.6.1 a try in a few days.
>
>
>
>
>
> *From:* cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] *On Behalf
> Of *Ryan Huff
> *Sent:* Monday, September 14, 2015 4:00 PM
> *To:* bmead...@vt.edu; cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection
>
>
> Brian  I had this issue this weekend in 8.6.  My original issue was
> the "no home uds cluster" but I had issues with the proxy protocol
> violation.
> Tac's response was go to 8.6.1 (released 9/11/15 ... yikes) or roll back
> to 8.5
> Thanks,
> Ryan
>
>
>
>  Original Message 
> From: Brian Meade 
> Sent: Monday, September 14, 2015 03:49 PM
> To: cisco-voip@puck.nether.net
> Subject: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection
>
> Is anyone else having issues with the "HTTP proxy protocol violation"
> automated detection feature or Expressway?
>
>
>
> I've got over 10,000 hits on this built-in rule and it seems to be
> blocking some legitimate logins via Jabber.
>
>
>
> It looks like this in the event log:
>
> 2015-09-11T21:05:09-04:00   sh[1195]: Event="Intrusion Protection"
> Src-ip="X.X.X.X" Detail="Collaboration Edge HTTP Intrusion Protection
> blocking X.X.X.X" Level="INFO" UTCTime="2015/09/12-01:05:09"
>
> 2015-09-11T21:05:09-04:00   traffic_server[24581]: Event="Sending HTTP
> error response" Status="429" Reason="Unknown Status" Dst-ip="X.X.X.X"
> Dst-port="52940" UTCTime="2015-09-12 01:05:09,151"
>
>
>
> It looks like this in the Jabber log:
>
> 2015-09-11 17:09:15,746 INFO  [0x0dc0]
> [ls\src\http\BasicHttpClientImpl.cpp(399)] [csf.httpclient]
> [csf::http::executeImpl] - *-* HTTP response code 0 for request #2 to
> https://myexpressway.client.com:8443/bG9naWNub3cuY29t/get_edge_config?service_name=_cisco-uds_name=_cuplogin
>
> 2015-09-11 17:09:15,746 ERROR [0x0dc0]
> [ls\src\http\BasicHttpClientImpl.cpp(404)] [csf.httpclient]
> [csf::http::executeImpl] - There was an issue performing the call to
> curl_easy_perform for request #2: CONNECTION_TIMEOUT_ERROR
>
>
>
> It looks like this in the detailed expressway logging:
>
> 2015-09-11T11:12:06-04:00 atlitexpe1 UTCTime="2015-09-11 15:12:06,146"
> Event="System Configuration Changed" Node="clusterdb@127.0.0.1"
> PID="<0.3251.0>" Detail="xconfiguration fail2banJailStatus uuid
> 12f52e25-4df6-4fd3-9697-621d9de3a796 jail: http-ce-intrusion total_fails -
> changed from: 202411 to: 202416"
>
>
>
>
>
> Anyone else seeing issues like this?  This particular user also has an
> 8841 at home.  Is there a limit to number of MRA connections behind a
> single public IP?
>
>
>
> Thanks,
>
> Brian Meade
>
>
>
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection

[Brian Meade]

Justin,

I'm sure I could play around with those parameters a bit but don't want to
open us up to any sort of actual DOS attack.

I sent it over to cefeedb...@cisco.com which is handling support during the
feature preview until TAC takes over.  They said that it's an issue with
the 8800 series firmware where the endpoint gets stuck in a loop sending
repeated authentication attempts.

I was able to view these requests at
https:///edgestatushttpproxyrequests
and confirmed we're getting a few per second per endpoint.

They're currently working on an ES for the 8800 series to resolve this
issue.  I'll test it once I get my hands on it and report back.

Thanks,
Brian

On Tue, Sep 15, 2015 at 3:04 PM, Justin Steinberg 
wrote:

> There are some settings on the Expressway regarding the number of auth
> attempts, etc.  have you tried to increase those to see if that makes any
> difference ?
>
> On Tue, Sep 15, 2015 at 10:45 AM, Ryan Huff  wrote:
>
>> I'll hav to sift through my logs and see if that is what my issue was.
>> Thanks for the follow through Brian.
>>
>> Thanks,
>>
>> Ryan
>>
>> --
>> Date: Tue, 15 Sep 2015 10:40:24 -0400
>> Subject: Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection
>> From: bmead...@vt.edu
>> To: kev...@advancedtsg.com
>> CC: ryanh...@outlook.com; cisco-voip@puck.nether.net
>>
>>
>> We're actually on 8.6.1.
>>
>> I dug through the logs a bit more and found the same user also had an
>> 8800 series phone logged in via MRA.  Doing some further searching, I found
>> someone who had the same issue logging into Jabber with an 8841 already
>> logged in via MRA.
>>
>> I had the user unplug their 8841 and they were able to login to Jabber
>> fine after this.
>>
>> It looks like I'll be reaching out to the feature preview folks to make
>> sure they know about this issue.
>>
>> Brian
>>
>> On Tue, Sep 15, 2015 at 8:20 AM, Kevin Przybylowski <
>> kev...@advancedtsg.com> wrote:
>>
>> I almost upgraded our VCS servers to 8.6 last week and noticed a couple
>> reviews on CCO so I stuck with 8.5.3.  I’ll give 8.6.1 a try in a few days.
>>
>>
>>
>>
>>
>> *From:* cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] *On
>> Behalf Of *Ryan Huff
>> *Sent:* Monday, September 14, 2015 4:00 PM
>> *To:* bmead...@vt.edu; cisco-voip@puck.nether.net
>> *Subject:* Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection
>>
>>
>> Brian  I had this issue this weekend in 8.6.  My original issue was
>> the "no home uds cluster" but I had issues with the proxy protocol
>> violation.
>> Tac's response was go to 8.6.1 (released 9/11/15 ... yikes) or roll back
>> to 8.5
>> Thanks,
>> Ryan
>>
>>
>>
>>  Original Message 
>> From: Brian Meade 
>> Sent: Monday, September 14, 2015 03:49 PM
>> To: cisco-voip@puck.nether.net
>> Subject: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection
>>
>> Is anyone else having issues with the "HTTP proxy protocol violation"
>> automated detection feature or Expressway?
>>
>>
>>
>> I've got over 10,000 hits on this built-in rule and it seems to be
>> blocking some legitimate logins via Jabber.
>>
>>
>>
>> It looks like this in the event log:
>>
>> 2015-09-11T21:05:09-04:00   sh[1195]: Event="Intrusion Protection"
>> Src-ip="X.X.X.X" Detail="Collaboration Edge HTTP Intrusion Protection
>> blocking X.X.X.X" Level="INFO" UTCTime="2015/09/12-01:05:09"
>>
>> 2015-09-11T21:05:09-04:00   traffic_server[24581]: Event="Sending HTTP
>> error response" Status="429" Reason="Unknown Status" Dst-ip="X.X.X.X"
>> Dst-port="52940" UTCTime="2015-09-12 01:05:09,151"
>>
>>
>>
>> It looks like this in the Jabber log:
>>
>> 2015-09-11 17:09:15,746 INFO  [0x0dc0]
>> [ls\src\http\BasicHttpClientImpl.cpp(399)] [csf.httpclient]
>> [csf::http::executeImpl] - *-* HTTP response code 0 for request #2 to
>> https://myexpressway.client.com:8443/bG9naWNub3cuY29t/get_edge_config?service_name=_cisco-uds_name=_cuplogin
>>
>> 2015-09-11 17:09:15,746 ERROR [0x0dc0]
>> [ls\src\http\BasicHttpClientImpl.cpp(404)] [csf.httpclient]
>> [csf::http::executeImpl] - There was an issue performing the call to
>> curl_easy_perform for request #2: CONNECTION_TIMEOUT_ERROR
>>
>>
>>
>> It looks like this in the detailed expressway logging:
>>
>> 2015-09-11T11:12:06-04:00 atlitexpe1 UTCTime="2015-09-11 15:12:06,146"
>> Event="System Configuration Changed" Node="clusterdb@127.0.0.1"
>> PID="<0.3251.0>" Detail="xconfiguration fail2banJailStatus uuid
>> 12f52e25-4df6-4fd3-9697-621d9de3a796 jail: http-ce-intrusion total_fails -
>> changed from: 202411 to: 202416"
>>
>>
>>
>>
>>
>> Anyone else seeing issues like this?  This particular user also has an
>> 8841 at home.  Is there a limit to number of MRA connections behind a
>> single public IP?
>>
>>
>>
>> Thanks,
>>
>> Brian Meade
>>
>>
>>
>> ___
>> cisco-voip mailing list
>> cisco-voip@puck.nether.net
>> 

[cisco-voip] CUCM 10.5 locally defined users - method to alert user to pending password expiration - Email ?

[Brian V]

Have some locally defined users on CUCM 10.5.2. I need to be able to 
alert the users that their password is about to expire.


I see on the /Credential Policy Configuration /page there is a value 
called "Expiry Warning Days " which is defined as "/Enter a number in 
the range 0-90 to specify the number of days before a user password 
expires to start warning notifications. The default setting specifies 0/."


My question is what is the warning notification method that will be used?

Will the system send an email ?

Will login to Jabber client pop up a message ?

Will login to the CCMUSER webpage pop up a warning ?

Any insight is appreciated.


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Licensing going from 8.6 to 10.5

[Tim Smith]

Hi Scott,

UCSS is now replaced with ECMU (1 part that includes the ESW + UCSS – so 
maintenance and support)
Go through the normal steps, put in an upgrade request at  
www.cisco.com/upgrade

You will get a manual licensing conversion happening, they will ask you for LCU 
or license request from new ELM / PLM
They will look at what you are requesting and try and line that up to your 
entitlement

If you don’t have phones associated and you are using Ext Mobility and CSF’s 
etc, they will probably tell you, you don’t have enough licensing.

At this point, you need to explain you use EM, and you will never associate 
owner ID’s to phones
You ask them to manually issue a license per phone to cover it
You may have to argue, it does require escalation usually, keep pushing and you 
should get it.

The trick is that you are not asking for more licensing than you are entitled 
to.

Each of your users is entitled to their phone in a UCL / UWL licensing 
scenario. So licensing should cover this.
To me – it’s just the way the licensing is managed / calculated and enforced 
that is broken
Still hoping for better fix in future.

Now, it shouldn’t have an impact on your ECMU renewals, i.e. that should still 
be based on the real number of users.

Hit me up on Spark if you want to chat more about it.

Cheers,

Tim

From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of Scott 
Voll
Sent: Friday, 11 September 2015 2:58 AM
To: cisco-voip@puck.nether.net
Subject: [cisco-voip] Licensing going from 8.6 to 10.5

What is the right way to upgrade my licenses?  I know there has been talk about 
associating phones to users.  What is the current thought?

I have Smartnet UCSS, whatever it's called now for 1000 CM, and UC

I have ~1400 phones  mainly 7961.  a few others see below.

All Users are using EM.  All users have VM.

here is the output of the readiness report.

Licensing
Essential   9
Basic0
Enhanced 1271
Enhanced Plus  129
CUWL Standard38
TelePresence Room  1
Unused DLUs801

Endpoints  Quantity
Cisco 791139
Cisco 79125
Cisco 79366
Cisco 79373
Cisco 79611107
Cisco 79621
Cisco 79705

Cisco IP Communicator 130 (400 Really)

Cisco 883120
Cisco 886154
Cisco 89451

Cisco DX80  3

Third-party SIP Device (Basic) 1
Third-party SIP Device (Advanced) 9


Licensing says:

UCL Enhanced Plus 167 (not covered)
UCL Enhanced   1,276 (only 1,000 are covered)
UCL Essential 9 (not covered)
TP Room  1 (not covered)


In the end I have Less than 1000 users and would like to just do the CUWL 
Standard for 1000.

What is the best way to move forward?

TIA

Scott

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection

[Kevin Przybylowski]

I almost upgraded our VCS servers to 8.6 last week and noticed a couple reviews 
on CCO so I stuck with 8.5.3.  I’ll give 8.6.1 a try in a few days.

[cid:image001.png@01D0EF8E.A89E1030]

From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of Ryan 
Huff
Sent: Monday, September 14, 2015 4:00 PM
To: bmead...@vt.edu; cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection


Brian  I had this issue this weekend in 8.6.  My original issue was the "no 
home uds cluster" but I had issues with the proxy protocol violation.

Tac's response was go to 8.6.1 (released 9/11/15 ... yikes) or roll back to 8.5

Thanks,

Ryan


 Original Message 
From: Brian Meade >
Sent: Monday, September 14, 2015 03:49 PM
To: cisco-voip@puck.nether.net
Subject: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection
Is anyone else having issues with the "HTTP proxy protocol violation" automated 
detection feature or Expressway?

I've got over 10,000 hits on this built-in rule and it seems to be blocking 
some legitimate logins via Jabber.

It looks like this in the event log:
2015-09-11T21:05:09-04:00   sh[1195]: Event="Intrusion Protection" 
Src-ip="X.X.X.X" Detail="Collaboration Edge HTTP Intrusion Protection blocking 
X.X.X.X" Level="INFO" UTCTime="2015/09/12-01:05:09"
2015-09-11T21:05:09-04:00   traffic_server[24581]: Event="Sending HTTP error 
response" Status="429" Reason="Unknown Status" Dst-ip="X.X.X.X" 
Dst-port="52940" UTCTime="2015-09-12 01:05:09,151"

It looks like this in the Jabber log:
2015-09-11 17:09:15,746 INFO  [0x0dc0] 
[ls\src\http\BasicHttpClientImpl.cpp(399)] [csf.httpclient] 
[csf::http::executeImpl] - *-* HTTP response code 0 for request #2 to 
https://myexpressway.client.com:8443/bG9naWNub3cuY29t/get_edge_config?service_name=_cisco-uds_name=_cuplogin
2015-09-11 17:09:15,746 ERROR [0x0dc0] 
[ls\src\http\BasicHttpClientImpl.cpp(404)] [csf.httpclient] 
[csf::http::executeImpl] - There was an issue performing the call to 
curl_easy_perform for request #2: CONNECTION_TIMEOUT_ERROR

It looks like this in the detailed expressway logging:
2015-09-11T11:12:06-04:00 atlitexpe1 UTCTime="2015-09-11 15:12:06,146" 
Event="System Configuration Changed" 
Node="clusterdb@127.0.0.1" PID="<0.3251.0>" 
Detail="xconfiguration fail2banJailStatus uuid 
12f52e25-4df6-4fd3-9697-621d9de3a796 jail: http-ce-intrusion total_fails - 
changed from: 202411 to: 202416"


Anyone else seeing issues like this?  This particular user also has an 8841 at 
home.  Is there a limit to number of MRA connections behind a single public IP?

Thanks,
Brian Meade
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] UCCX 9 EM agents cant login

[Ryan Huff]

If the cti service in ccm has lost the state of the device, reassociating the 
device as Ed suggests, or restarting the cti manager service in ccm is how I 
have resolved these types of issues before.

Thanks,

Ryan

 Original Message 
From: Ed Leatherman 
Sent: Tuesday, September 15, 2015 01:36 PM
To: abbas wali 
Subject: Re: [cisco-voip] UCCX 9 EM agents cant login
CC: Ryan Huff ,Cisco VOIP 

>I've had some weird, rare occasions where i've had to disassociate the device 
>or profile from the rmjtapi app user and re-associate them. I'd suggest you 
>try that if you haven't already just as a quick thing to do, although that 
>won't tell you a root cause.
>
>
>On Tue, Sep 15, 2015 at 10:21 AM, abbas wali  wrote:
>
>Sorry that will mean !! 
>
> 
>
>From: Ryan Huff [mailto:ryanh...@outlook.com] 
>Sent: 15 September 2015 15:18
>
>
>To: abbas wali ; cisco-voip@puck.nether.net
>Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
>
> 
>
>Have is the subsystem in partial service?
>
>From: abba...@gmail.com
>To: ryanh...@outlook.com; cisco-voip@puck.nether.net
>Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
>Date: Tue, 15 Sep 2015 15:11:33 +0100
>
>Thanks Ryan, 
>
> 
>
>We have a dozen of other users who can login to them phones without any 
>issues. Even I can do it on my CIPC 
>
> 
>
>But these new 3 agents cant. 
>
> 
>
>From: Ryan Huff [mailto:ryanh...@outlook.com] 
>Sent: 15 September 2015 15:05
>To: abbas wali ; cisco-voip@puck.nether.net
>Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
>
> 
>
>Assuming this isn't a new/upgrade UCCX and it isn't a JTAPI compatibility 
>issue with CCM; assuming it was working and now it is not.
>
>I would check these items;
>
>Agent/phone checks;
>
>Make sure the RmCM user/password hasn't changed from what UCCX has recorded. 
>NODoes the agent have the Standard CTI Role? YesDoes the agent have IPCCX 
>defined in their profile? YesDoes the agent have CTI control of the phone? 
>YesDoes the agent have control of the EM. profile? YesIs the physical phone 
>associated to the RMCM user? Yes ( currently to log them in I am using my soft 
>phone which is associated with RMCM user )
>
>
>
>Server checks; yes as many other agent can login and are talking calls. 
>
>DNS ... (are forward and reverse lookups working correctly) NTP ... NTP still 
>working?
>
>
>
>Thanks,
>
>
>Ryan
>
>From: abba...@gmail.com
>To: ryanh...@outlook.com; cisco-voip@puck.nether.net
>Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
>Date: Tue, 15 Sep 2015 14:53:54 +0100
>
>That is the case, the DN is exclusive only to the profile – its not used on 
>any phy. Phone. 
>
> 
>
>does anyone know, if  want to get traces from RTMT which option should I use 
>i.e. Cisco Call Manager will suffice ?
>
> 
>
>thanks 
>
> 
>
>From: Ryan Huff [mailto:ryanh...@outlook.com] 
>Sent: 15 September 2015 14:35
>To: abbas wali ; cisco-voip@puck.nether.net
>Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
>
> 
>
>Since you mention using extension mobility 
>
>When the Agent logs in with their Ex. mobility profile, does the DN happen to 
>be on another IP phone? The only way to "share" an ACD extension between 
>multiple devices is to assign it to a Device Profile exclusively and then 
>login using Extension Mobility to whatever device they wish to use.
>
>
>Thanks,
>
>Ryan
>
>From: abba...@gmail.com
>To: cisco-voip@puck.nether.net
>Date: Tue, 15 Sep 2015 13:54:13 +0100
>Subject: [cisco-voip] UCCX 9 EM agents cant login
>
>Hi all, 
>
> 
>
>Urgent issue here.
>
> 
>
>Ext Mob. Enabled agents cant login. Getting “Login failed due to a  
>configuration error with your phone and JTAPI or UCM. Contact your admin..”
>
> 
>
>The users profile is in the controlled list for RM application user. 
>
> 
>
>The phone they are loggin in – is used by other agents with their profiles and 
>they can get through. 
>
> 
>
>Not sure what else I can check. 
>
> 
>
>Please help !!
>
> 
>
>Thanks 
>
>
>___ cisco-voip mailing list 
>cisco-voip@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
>___
>cisco-voip mailing list
>cisco-voip@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
>
>
>-- 
>
>Ed Leatherman
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[cisco-voip] CSR 11 in the wild

[Rob Dawson]

Anyone have any substantial experience with CSR 11 in the wild? Looking for 
stability issues you may have experienced, etc.

Thanks,
Rob
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[cisco-voip] CCNA Voice test

[Nortel Nan via cisco-voip]

I'm taking it on Thursday and I would gladly take advice on what to focus on.


What is the test like? Is it multiple choice? Is it interactive with a lab of 
some kind?



What helped you most when you took the test?
What sections would you spend more time on?


Were there any online resources that were particularly helpful like practice 
tests?


Thanks,
Nan


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] CCNA Voice test

[Ben Story]

It's all multiple choice.  My best advice is to go over the guide at
https://learningnetwork.cisco.com/community/certifications/voice_ccna/icomm/exam-topics
.  It's a very picky exam in my opinion, but then again I failed it
recently and am gearing up to take it again tomorrow afternoon. :)

--
Ben Story
CCNP, CCNA, CCNA Wireless, CCDA
ben.st...@gmail.com

@ntwrk80
http://showbrain.blogspot.com
http://rand0mw0rds.blogspot.com


"From sour-faced saints and silly devotions, good Lord, preserve us!". -- St.
Teresa of Avila

On Tue, Sep 15, 2015 at 3:02 PM, Nortel Nan via cisco-voip <
cisco-voip@puck.nether.net> wrote:

> I'm taking it on Thursday and I would gladly take advice on what to focus
> on.
>
> What is the test like? Is it multiple choice? Is it interactive with a lab
> of some kind?
>
> What helped you most when you took the test?
> What sections would you spend more time on?
>
> Were there any online resources that were particularly helpful like
> practice tests?
>
> Thanks,
> Nan
>
>
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] UCCX 9 EM agents cant login

[Ryan Huff]

Have is the subsystem in partial service?

From: abba...@gmail.com
To: ryanh...@outlook.com; cisco-voip@puck.nether.net
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
Date: Tue, 15 Sep 2015 15:11:33 +0100

Thanks Ryan,  We have a dozen of other users who can login to them phones 
without any issues. Even I can do it on my CIPC  But these new 3 agents cant.  
From: Ryan Huff [mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 15:05
To: abbas wali ; cisco-voip@puck.nether.net
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login Assuming this isn't a 
new/upgrade UCCX and it isn't a JTAPI compatibility issue with CCM; assuming it 
was working and now it is not.

I would check these items;

Agent/phone checks;Make sure the RmCM user/password hasn't changed from what 
UCCX has recorded. NODoes the agent have the Standard CTI Role? YesDoes the 
agent have IPCCX defined in their profile? YesDoes the agent have CTI control 
of the phone? YesDoes the agent have control of the EM. profile? YesIs the 
physical phone associated to the RMCM user? Yes ( currently to log them in I am 
using my soft phone which is associated with RMCM user )

Server checks; yes as many other agent can login and are talking calls. DNS ... 
(are forward and reverse lookups working correctly) NTP ... NTP still working?

Thanks,


Ryan

From: abba...@gmail.com
To: ryanh...@outlook.com; cisco-voip@puck.nether.net
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
Date: Tue, 15 Sep 2015 14:53:54 +0100That is the case, the DN is exclusive only 
to the profile – its not used on any phy. Phone.  does anyone know, if  want to 
get traces from RTMT which option should I use i.e. Cisco Call Manager will 
suffice ? thanks  From: Ryan Huff [mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 14:35
To: abbas wali ; cisco-voip@puck.nether.net
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login Since you mention using 
extension mobility 

When the Agent logs in with their Ex. mobility profile, does the DN happen to 
be on another IP phone? The only way to "share" an ACD extension between 
multiple devices is to assign it to a Device Profile exclusively and then login 
using Extension Mobility to whatever device they wish to use.


Thanks,

RyanFrom: abba...@gmail.com
To: cisco-voip@puck.nether.net
Date: Tue, 15 Sep 2015 13:54:13 +0100
Subject: [cisco-voip] UCCX 9 EM agents cant loginHi all,  Urgent issue here. 
Ext Mob. Enabled agents cant login. Getting “Login failed due to a  
configuration error with your phone and JTAPI or UCM. Contact your admin..” The 
users profile is in the controlled list for RM application user.  The phone 
they are loggin in – is used by other agents with their profiles and they can 
get through.  Not sure what else I can check.  Please help !! Thanks 
___ cisco-voip mailing list 
cisco-voip@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip  
  ___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] UCCX 9 EM agents cant login

[abbas wali]

Sorry that will mean !! 

 

From: Ryan Huff [mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 15:18
To: abbas wali ; cisco-voip@puck.nether.net
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login

 

Have is the subsystem in partial service?

  _  

From: abba...@gmail.com  
To: ryanh...@outlook.com  ;
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
Date: Tue, 15 Sep 2015 15:11:33 +0100

Thanks Ryan, 

 

We have a dozen of other users who can login to them phones without any
issues. Even I can do it on my CIPC 

 

But these new 3 agents cant. 

 

From: Ryan Huff [mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 15:05
To: abbas wali  >;
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login

 

Assuming this isn't a new/upgrade UCCX and it isn't a JTAPI compatibility
issue with CCM; assuming it was working and now it is not.

I would check these items;

Agent/phone checks;

*   Make sure the RmCM user/password hasn't changed from what UCCX has
recorded. NO
*   Does the agent have the Standard CTI Role? Yes
*   Does the agent have IPCCX defined in their profile? Yes
*   Does the agent have CTI control of the phone? Yes
*   Does the agent have control of the EM. profile? Yes
*   Is the physical phone associated to the RMCM user? Yes ( currently
to log them in I am using my soft phone which is associated with RMCM user )



Server checks; yes as many other agent can login and are talking calls. 

*   DNS ... (are forward and reverse lookups working correctly) 
*   NTP ... NTP still working?



Thanks,


Ryan

  _  

From: abba...@gmail.com  
To: ryanh...@outlook.com  ;
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
Date: Tue, 15 Sep 2015 14:53:54 +0100

That is the case, the DN is exclusive only to the profile - its not used on
any phy. Phone. 

 

does anyone know, if  want to get traces from RTMT which option should I use
i.e. Cisco Call Manager will suffice ?

 

thanks 

 

From: Ryan Huff [mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 14:35
To: abbas wali  >;
cisco-voip@puck.nether.net  
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login

 

Since you mention using extension mobility 

When the Agent logs in with their Ex. mobility profile, does the DN happen
to be on another IP phone? The only way to "share" an ACD extension between
multiple devices is to assign it to a Device Profile exclusively and then
login using Extension Mobility to whatever device they wish to use.


Thanks,

Ryan

  _  

From: abba...@gmail.com  
To: cisco-voip@puck.nether.net  
Date: Tue, 15 Sep 2015 13:54:13 +0100
Subject: [cisco-voip] UCCX 9 EM agents cant login

Hi all, 

 

Urgent issue here.

 

Ext Mob. Enabled agents cant login. Getting "Login failed due to a
configuration error with your phone and JTAPI or UCM. Contact your admin.."

 

The users profile is in the controlled list for RM application user. 

 

The phone they are loggin in - is used by other agents with their profiles
and they can get through. 

 

Not sure what else I can check. 

 

Please help !!

 

Thanks 


___ cisco-voip mailing list
cisco-voip@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Phantom tomcat-trust cert

[Brian Meade]

Stop the certificate change notification service on all nodes and then
delete all the old tomcat-trust certs.  You can then restart the service
and they shouldn't come back.

On Tue, Sep 15, 2015 at 1:22 AM, James Andrewartha <
jandrewar...@ccgs.wa.edu.au> wrote:

> Hi list,
>
> Our cluster is nearly 5 years old, so I've done the certificate dance,
> including using Digicert for the tomcat multi-server cert. However, some
> old certs that are about to expire keep appearing as tomcat-trust certs.
> I've deleted them several times, but they keep coming back overnight.
> Even after I rebooted the cluster out of hours they've come back again.
> It's mostly cosmetic, I just keep getting alert emails saying they're
> going to expire. Has anyone seen this before? Running 10.5.2.
>
> Thanks,
>
> --
> James Andrewartha
> Network & Projects Engineer
> Christ Church Grammar School
> Claremont, Western Australia
> Ph. (08) 9442 1757
> Mob. 0424 160 877
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] CUCM Shared Line Appearance (SIP phones)

[Mark Holloway]

Thanks Nick and Daniel. That is all very helpful.


> On Sep 14, 2015, at 2:35 PM, Barnett, Nick 
>  wrote:
> 
> To add to this, the PKID is generated using newid(), a function defined in 
> the Informix database.
>  
> At one point, I started digging around to see if I could actually locate the 
> formula used within that function, but I wasn’t able to get very far. I was 
> able to find a reference to sqlfunctions within the sysprocedures table. I 
> don’t even know if it is related. According to the Informix documentation I 
> have read, the sysprocedures table stores all procedures, but I’m under the 
> impression this is a function, but it may just be a vocabulary issue on my 
> part. If anyone knows where the actual getid() is stored, I’d be interested 
> in looking at it.
>  
> run sql select * from sysprocedures where procname = "sqlfunctions"
>  
> Thanks,
> Nick
>  
> Disclaimer: IANADBA
>  
> From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of 
> Daniel Pagan
> Sent: Monday, September 14, 2015 10:07 AM
> To: Daniel Pagan; Mark Holloway; voip puck
> Subject: Re: [cisco-voip] CUCM Shared Line Appearance (SIP phones)
>  
> Adding to this… This is also the URI contained in the Contact header for SIP 
> requests transmitted *from* the IP phone, allowing CUCM to send future 
> requests to the phone within the same dialog using the PKID URI you’re 
> seeing. The PKID for the DN is obtained by the phone via TFTP configuration 
> file:
>  
> ae97ba4b-2397-4b52-5ddc-07589fb380ab
>  
> Hope this helps.
>  
> - Dan
>  
> From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net 
> ] On Behalf Of Daniel Pagan
> Sent: Monday, September 14, 2015 10:44 AM
> To: Mark Holloway >; 
> voip puck >
> Subject: Re: [cisco-voip] CUCM Shared Line Appearance (SIP phones)
>  
> The request-URI in this case is the PKID of the DN followed by the IP address 
> of the phone. Check it out:
>  
> https://10.10.13.100/ccmadmin/directoryNumberEdit.do?key=ae97ba4b-2397-4b52-5ddc-07589fb380ab
>  
> 
>  
> ^^^URL of a test DN.
> Key= ae97ba4b-2397-4b52-5ddc-07589fb380ab
>  
> INVITE 
> sip:ae97ba4b-2397-4b52-5ddc-07589fb380ab@10.10.31.6:50926;transport=tcp 
>  
> SIP/2.0
>  
> ^^^ Check out the request URI above.
>  
> Hope this helps.
>  
> - Dan
>  
> From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net 
> ] On Behalf Of Mark Holloway
> Sent: Saturday, September 12, 2015 8:39 AM
> To: voip puck >
> Subject: [cisco-voip] CUCM Shared Line Appearance (SIP phones)
>  
> Hi all. When CUCM sends a SIP Invite to shared lines on SIP phones the user 
> portion contains some sort of (what appears to b) a randomly calculated 
> alpha-numeric string. Is there any information or documentation available on 
> how Cisco actually calculates what this string will be? 
>  
> Here is an example of a SIP Invite going to two SIP phones sharing the same 
> phone number
>  
> INVITE 
> sip:8cc951b7-86b6-0c74-1e4d-c0108c268dc2@10.232.50.81:49422;transport=tcp 
>  
> SIP/2.0
> INVITE 
> sip:8cc951b7-86b6-0c74-1e4d-c0108c268dc2@10.232.50.91:51945;transport=tcp 
>  
> SIP/2.0
>  
>  
> Thanks,
> Mark
>  

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] UCCX 9 EM agents cant login

[Ryan Huff]

Assuming this isn't a new/upgrade UCCX and it isn't a JTAPI compatibility issue 
with CCM; assuming it was working and now it is not.

I would check these items;

Agent/phone checks;

Make sure the RmCM user/password hasn't changed from what UCCX has recorded.
Does the agent have the Standard CTI Role?Does the agent have IPCCX defined in 
their profile?Does the agent have CTI control of the phone?Does the agent have 
control of the EM. profile?Is the physical phone associated to the RMCM user?


Server checks;

DNS ... (are forward and reverse lookups working correctly)NTP ... NTP still 
working?

Thanks,


Ryan


From: abba...@gmail.com
To: ryanh...@outlook.com; cisco-voip@puck.nether.net
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login
Date: Tue, 15 Sep 2015 14:53:54 +0100

That is the case, the DN is exclusive only to the profile – its not used on any 
phy. Phone.  does anyone know, if  want to get traces from RTMT which option 
should I use i.e. Cisco Call Manager will suffice ? thanks  From: Ryan Huff 
[mailto:ryanh...@outlook.com] 
Sent: 15 September 2015 14:35
To: abbas wali ; cisco-voip@puck.nether.net
Subject: RE: [cisco-voip] UCCX 9 EM agents cant login Since you mention using 
extension mobility 

When the Agent logs in with their Ex. mobility profile, does the DN happen to 
be on another IP phone? The only way to "share" an ACD extension between 
multiple devices is to assign it to a Device Profile exclusively and then login 
using Extension Mobility to whatever device they wish to use.


Thanks,

RyanFrom: abba...@gmail.com
To: cisco-voip@puck.nether.net
Date: Tue, 15 Sep 2015 13:54:13 +0100
Subject: [cisco-voip] UCCX 9 EM agents cant loginHi all,  Urgent issue here. 
Ext Mob. Enabled agents cant login. Getting “Login failed due to a  
configuration error with your phone and JTAPI or UCM. Contact your admin..” The 
users profile is in the controlled list for RM application user.  The phone 
they are loggin in – is used by other agents with their profiles and they can 
get through.  Not sure what else I can check.  Please help !! Thanks 
___ cisco-voip mailing list 
cisco-voip@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip  
  ___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] UCCX 9 EM agents cant login

[Ryan Huff]

Since you mention using extension mobility 

When the Agent logs in with their Ex. mobility profile, does the DN happen to 
be on another IP phone? The only way to "share" an ACD extension between 
multiple devices is to 
assign it to a Device Profile exclusively and then login using Extension
 Mobility to whatever device they wish to use.


Thanks,

Ryan

From: abba...@gmail.com
To: cisco-voip@puck.nether.net
Date: Tue, 15 Sep 2015 13:54:13 +0100
Subject: [cisco-voip] UCCX 9 EM agents cant login

Hi all,  Urgent issue here. Ext Mob. Enabled agents cant login. Getting “Login 
failed due to a  configuration error with your phone and JTAPI or UCM. Contact 
your admin..” The users profile is in the controlled list for RM application 
user.  The phone they are loggin in – is used by other agents with their 
profiles and they can get through.  Not sure what else I can check.  Please 
help !! Thanks 
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip 
  ___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] CME 7.1 - Call-forward noan

[Barnett, Nick]

Are you running a SIP CME? If so, can you post your voice service, gateway and 
sip-ua configs?

sh run | sec voice service|gateway|sip-ua

having debugs of the call dropping would be beneficial as well.

Thanks,
Nick

From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of 
Quenten Grasso
Sent: Monday, September 14, 2015 5:54 PM
To: Cisco VoIP Group
Subject: [cisco-voip] CME 7.1 - Call-forward noan

Hi All,

I'm having a strange issue (one of many) with our cme 7.1.

We currently don't have voicemail so we divert off to our mobiles we have a 
call-forward noan set on our extensions.

However it seems the divert works fine if someone calls my extension and the 
number gets diverted off to my mobile but the call drops after about 4 minutes 
sometimes 4:15-4:20

So any ideas why this might be happening? (thanks in advance)

Regards,
Quenten Grasso
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[cisco-voip] UCCX 9 EM agents cant login

[abbas wali]

Hi all, 

 

Urgent issue here.

 

Ext Mob. Enabled agents cant login. Getting "Login failed due to a
configuration error with your phone and JTAPI or UCM. Contact your admin.."

 

The users profile is in the controlled list for RM application user. 

 

The phone they are loggin in - is used by other agents with their profiles
and they can get through. 

 

Not sure what else I can check. 

 

Please help !!

 

Thanks 

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection

[Brian Meade]

We're actually on 8.6.1.

I dug through the logs a bit more and found the same user also had an 8800
series phone logged in via MRA.  Doing some further searching, I found
someone who had the same issue logging into Jabber with an 8841 already
logged in via MRA.

I had the user unplug their 8841 and they were able to login to Jabber fine
after this.

It looks like I'll be reaching out to the feature preview folks to make
sure they know about this issue.

Brian

On Tue, Sep 15, 2015 at 8:20 AM, Kevin Przybylowski 
wrote:

> I almost upgraded our VCS servers to 8.6 last week and noticed a couple
> reviews on CCO so I stuck with 8.5.3.  I’ll give 8.6.1 a try in a few days.
>
>
>
>
>
> *From:* cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] *On Behalf
> Of *Ryan Huff
> *Sent:* Monday, September 14, 2015 4:00 PM
> *To:* bmead...@vt.edu; cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection
>
>
>
> Brian  I had this issue this weekend in 8.6.  My original issue was
> the "no home uds cluster" but I had issues with the proxy protocol
> violation.
>
> Tac's response was go to 8.6.1 (released 9/11/15 ... yikes) or roll back
> to 8.5
>
> Thanks,
>
> Ryan
>
>
>
>  Original Message 
> From: Brian Meade 
> Sent: Monday, September 14, 2015 03:49 PM
> To: cisco-voip@puck.nether.net
> Subject: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection
>
> Is anyone else having issues with the "HTTP proxy protocol violation"
> automated detection feature or Expressway?
>
>
>
> I've got over 10,000 hits on this built-in rule and it seems to be
> blocking some legitimate logins via Jabber.
>
>
>
> It looks like this in the event log:
>
> 2015-09-11T21:05:09-04:00   sh[1195]: Event="Intrusion Protection"
> Src-ip="X.X.X.X" Detail="Collaboration Edge HTTP Intrusion Protection
> blocking X.X.X.X" Level="INFO" UTCTime="2015/09/12-01:05:09"
>
> 2015-09-11T21:05:09-04:00   traffic_server[24581]: Event="Sending HTTP
> error response" Status="429" Reason="Unknown Status" Dst-ip="X.X.X.X"
> Dst-port="52940" UTCTime="2015-09-12 01:05:09,151"
>
>
>
> It looks like this in the Jabber log:
>
> 2015-09-11 17:09:15,746 INFO  [0x0dc0]
> [ls\src\http\BasicHttpClientImpl.cpp(399)] [csf.httpclient]
> [csf::http::executeImpl] - *-* HTTP response code 0 for request #2 to
> https://myexpressway.client.com:8443/bG9naWNub3cuY29t/get_edge_config?service_name=_cisco-uds_name=_cuplogin
>
> 2015-09-11 17:09:15,746 ERROR [0x0dc0]
> [ls\src\http\BasicHttpClientImpl.cpp(404)] [csf.httpclient]
> [csf::http::executeImpl] - There was an issue performing the call to
> curl_easy_perform for request #2: CONNECTION_TIMEOUT_ERROR
>
>
>
> It looks like this in the detailed expressway logging:
>
> 2015-09-11T11:12:06-04:00 atlitexpe1 UTCTime="2015-09-11 15:12:06,146"
> Event="System Configuration Changed" Node="clusterdb@127.0.0.1"
> PID="<0.3251.0>" Detail="xconfiguration fail2banJailStatus uuid
> 12f52e25-4df6-4fd3-9697-621d9de3a796 jail: http-ce-intrusion total_fails -
> changed from: 202411 to: 202416"
>
>
>
>
>
> Anyone else seeing issues like this?  This particular user also has an
> 8841 at home.  Is there a limit to number of MRA connections behind a
> single public IP?
>
>
>
> Thanks,
>
> Brian Meade
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection

[Ryan Huff]

I'll hav to sift through my logs and see if that is what my issue was. Thanks 
for the follow through Brian.

Thanks,

Ryan

Date: Tue, 15 Sep 2015 10:40:24 -0400
Subject: Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection
From: bmead...@vt.edu
To: kev...@advancedtsg.com
CC: ryanh...@outlook.com; cisco-voip@puck.nether.net

We're actually on 8.6.1.
I dug through the logs a bit more and found the same user also had an 8800 
series phone logged in via MRA.  Doing some further searching, I found someone 
who had the same issue logging into Jabber with an 8841 already logged in via 
MRA.
I had the user unplug their 8841 and they were able to login to Jabber fine 
after this.
It looks like I'll be reaching out to the feature preview folks to make sure 
they know about this issue.
Brian
On Tue, Sep 15, 2015 at 8:20 AM, Kevin Przybylowski  
wrote:








I almost upgraded our VCS servers to 8.6 last week and noticed a couple reviews 
on CCO so I stuck with 8.5.3.  I’ll give 8.6.1 a try in a few days.
 

 
From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net]
On Behalf Of Ryan Huff

Sent: Monday, September 14, 2015 4:00 PM

To: bmead...@vt.edu; cisco-voip@puck.nether.net

Subject: Re: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection
 
Brian  I had this issue this weekend in 8.6.  My original issue was the "no 
home uds cluster" but I had issues with the proxy protocol violation.

Tac's response was go to 8.6.1 (released 9/11/15 ... yikes) or roll back to 8.5

Thanks,

Ryan





 Original Message 

From: Brian Meade 

Sent: Monday, September 14, 2015 03:49 PM

To: cisco-voip@puck.nether.net

Subject: [cisco-voip] MRA (Collaboration Edge) Intrusion Protection

Is anyone else having issues with the "HTTP proxy protocol violation" automated 
detection feature or Expressway?

 


I've got over 10,000 hits on this built-in rule and it seems to be blocking 
some legitimate logins via Jabber.


 


It looks like this in the event log:



2015-09-11T21:05:09-04:00   sh[1195]: Event="Intrusion Protection" 
Src-ip="X.X.X.X" Detail="Collaboration Edge HTTP Intrusion Protection blocking 
X.X.X.X" Level="INFO" UTCTime="2015/09/12-01:05:09"


2015-09-11T21:05:09-04:00   traffic_server[24581]: Event="Sending HTTP error 
response" Status="429" Reason="Unknown Status" Dst-ip="X.X.X.X" 
Dst-port="52940" UTCTime="2015-09-12 01:05:09,151" 



 


It looks like this in the Jabber log:



2015-09-11 17:09:15,746 INFO  [0x0dc0] 
[ls\src\http\BasicHttpClientImpl.cpp(399)] [csf.httpclient] 
[csf::http::executeImpl] - *-* HTTP response code 0 for request #2 to

https://myexpressway.client.com:8443/bG9naWNub3cuY29t/get_edge_config?service_name=_cisco-uds_name=_cuplogin


2015-09-11 17:09:15,746 ERROR [0x0dc0] 
[ls\src\http\BasicHttpClientImpl.cpp(404)] [csf.httpclient] 
[csf::http::executeImpl] - There was an issue performing the call to 
curl_easy_perform for request #2: CONNECTION_TIMEOUT_ERROR



 


It looks like this in the detailed expressway logging:



2015-09-11T11:12:06-04:00 atlitexpe1 UTCTime="2015-09-11 15:12:06,146" 
Event="System Configuration Changed" Node="clusterdb@127.0.0.1" 
PID="<0.3251.0>" Detail="xconfiguration fail2banJailStatus uuid
 12f52e25-4df6-4fd3-9697-621d9de3a796 jail: http-ce-intrusion total_fails - 
changed from: 202411 to: 202416"



 


 


Anyone else seeing issues like this?  This particular user also has an 8841 at 
home.  Is there a limit to number of MRA connections behind a single public IP?


 


Thanks,


Brian Meade






  ___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip