Re: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt install with 2nd server

[Brian Meade]

Historically this was due to Red Hat not wanting bootable versions of their
OS out there for everybody.  I think there was a plan to go to CentOS for
UCOS at some point but not sure if that ever got anywhere.  That was going
to allow bootables on cisoc.com again.

I doubt 11.6 is on CentOS now because I would expect a refresh upgrade if
so but who knows.  Maybe Red Hat changed their agreement with Cisco?

On Fri, Aug 25, 2017 at 10:25 AM, Charles Goldsmith 
wrote:

> I remember years ago Cisco starting posting bootable ISO's and then turned
> around and pulled them due to issues with another department.  Here is the
> relevant thread: https://puck.nether.net/pipermail/cisco-voip/2010-
> August/015533.html  Have to read some of the quoted messages that were
> not posted to the list.
>
> On Fri, Aug 25, 2017 at 9:12 AM, Ryan Huff  wrote:
>
>> The Unified Communications IM and Presence ISO is bootable I believe
>> (maybe that changed?); although it's sister ISO, Unified Communications
>> Manager is not.
>>
>> --
>> *From:* cisco-voip  on behalf of
>> Anthony Holloway 
>> *Sent:* Friday, August 25, 2017 10:08 AM
>> *To:* Matthew Huff; cisco-voip list
>> *Subject:* Re: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt
>> install with 2nd server
>>
>> I don't have an answer for you, but you reminded me that UCCX 11.6 is
>> setting the new standard for ISOs.  The UCCX 11.6 ISO on CCO for upgrading,
>> is also bootable, and can be used for fresh installs as well.  Get on board
>> IM, so people don't have to create their own bootable media.
>>
>> *Single ISO for Upgrades and Fresh-Install*
>> *In UCCX 11.6, there is only 1 ISO released that is posted on Cisco.com
>> and this ISO can be used for either an upgrade or a fresh install. The ISO
>> follows the regular naming convention of UCSInstall_UCCX
>> _11.6.X-XX.sgn.iso  **This ISO is provided with both boot options,
>> so serves as a bootable image as well.*
>> *Source: 
>> https://www.cisco.com/c/en/us/support/docs/customer-collaboration/unified-contact-center-express/211582-Tech-Note-on-UCCX-11-6-Pre-Release-Commu.html
>> *
>>
>> On Thu, Aug 24, 2017 at 1:13 PM Matthew Huff  wrote:
>>
>>> I’ve tried repeatedly to install our second IM server, and it always
>>> fails with a corrupt file during post-install. I re-downloaded the ISO and
>>> recreated the bootable ISO, so I don’t believe it’s a ISO issue. Anyone see
>>> this?
>>> ___
>>> cisco-voip mailing list
>>> cisco-voip@puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>>
>>
>> ___
>> cisco-voip mailing list
>> cisco-voip@puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>>
>
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Outbound Video Calls to Webex fail with 481

[Ryan Huff]

In the case of WebEx / CMR Cloud; I believe WebEx will only support TLS for 
certificate verification when a CA signed certificate (TLS verify) is used, 
hence the base need for 5061 with a CA signed certificate even if the call is 
unencrypted.


In the WebEx Meeting Center Video Conferencing Enterprise Deployment guide for 
WBS30 (https://help.webex.com/docs/DOC-5355), it does appear to suggest on page 
7 that self-signed certificates can be used on the edge for signaling and media 
purposes with WebEx; although I have no experience with this as I have only 
ever participated in edge scenarios with CA signed certificates.


I suppose as long as the WebEx Meeting Center has the self-signed certificate 
in the trust it would work; although getting Cisco WebEx cloud to do this for 
the customer; I do not know but my suspicion would be no and valid CA certs may 
be required, hence TLS verify/port 5061 required.


That's my guess anyway,


-RH



From: bmead...@gmail.com  on behalf of Brian Meade 

Sent: Thursday, August 24, 2017 4:37 PM
To: Anthony Holloway
Cc: Jonathan Charles; Ryan Huff; cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Outbound Video Calls to Webex fail with 481

That's not the normal way that TLS call setup works which tries to connect at 
5061 from the start and does the TLS handshake.  WebEx might do some 
non-standard things though to try to force TLS.

On Thu, Aug 24, 2017 at 2:34 PM, Anthony Holloway 
> wrote:
Wait, explain that to me.  So, your original call setup was over port 5060, 
where you received the 481, but then mid-call something tried to switch to port 
5061?  Is that how escalation to encrypted SIP happens?  Starts on 5060 as 
clear text, then switches over to 5061 for encryption?  I'm obviously showing 
my ignorance with this, but willing to learn in spite of it.

On Thu, Aug 24, 2017 at 1:19 PM Jonathan Charles 
> wrote:
Just an FYI, I did get this fixed... the firewall guy told me all rules were 
implemented... and nothing was being blocked.

Turned out he did a permit for sip on the ACL, which did not include 5061...

Added 5061 and it works.



Thanks!


Jonathan

On Sun, Aug 20, 2017 at 7:53 PM, Jonathan Charles 
> wrote:
Ok, let me poke around a bit... I assume every problem is because of the 
firewall...


Jonathan

On Sun, Aug 20, 2017 at 7:36 PM, Ryan Huff 
> wrote:
To expand on this; it really sounds like where your trouble happens is during a 
re-invite event. If that is the case, it could very well be DNS as mentioned OR 
less likely (but plausible), a TCP timeout mismatch on a firewall.

The codec logs and CCM trace will tell the tale for sure though.

Thanks,

Ryan

On Aug 20, 2017, at 6:36 PM, Ryan Huff 
> wrote:

This might have to do with DNS. I would review all your internal/external SRV/A 
records for EXP/CUCM and your DNS zone in EXP.

It sounds like the call is traversing expressway, but call manager may be 
having trouble finding the call leg via DNS, to connect the codec to.

Pulling CCM traces and debug logs on the codec for a failed call will tell you 
for sure.

Thanks,

Ryan

On Aug 20, 2017, at 6:30 PM, Jonathan Charles 
> wrote:

Just a single VCSC and VCSE single CUCM 11.5... this is just a proof of 
concept...



Jonathan

On Sun, Aug 20, 2017 at 5:27 PM, Ryan Huff 
> wrote:
Do you have EXP clusters or is this a single C/E pair?

Sent from my iPhone

> On Aug 20, 2017, at 6:26 PM, Jonathan Charles 
> > wrote:
>
> We have an SX80 connected to CUCM 11.5 and VCSC 8.10  to a VCSE 8.10...
>
> Outbound calls route to Webex, you see them enter the meeting and then after 
> 4 seconds, they drop, the VCS E shows
>
> 481 Call/Transaction Does Not Exist
>
> Does anyone have any ideas?
>
>
>
>
> Jonathan
>
>
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt install with 2nd server

[Matthew Huff]

Yep, cisco TAC just told me that also. Evidently the error is pretty generic 
and related to issues on the pub.

From: Ryan Huff [mailto:ryanh...@outlook.com]
Sent: Friday, August 25, 2017 10:12 AM
To: Anthony Holloway ; Matthew Huff 
; cisco-voip list 
Subject: Re: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt install with 
2nd server


The Unified Communications IM and Presence ISO is bootable I believe (maybe 
that changed?); although it's sister ISO, Unified Communications Manager is not.


From: cisco-voip 
> 
on behalf of Anthony Holloway 
>
Sent: Friday, August 25, 2017 10:08 AM
To: Matthew Huff; cisco-voip list
Subject: Re: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt install with 
2nd server

I don't have an answer for you, but you reminded me that UCCX 11.6 is setting 
the new standard for ISOs.  The UCCX 11.6 ISO on CCO for upgrading, is also 
bootable, and can be used for fresh installs as well.  Get on board IM, so 
people don't have to create their own bootable media.

Single ISO for Upgrades and Fresh-Install
In UCCX 11.6, there is only 1 ISO released that is posted on Cisco.com and this 
ISO can be used for either an upgrade or a fresh install. The ISO follows the 
regular naming convention of UCSInstall_UCCX _11.6.X-XX.sgn.iso  This ISO 
is provided with both boot options, so serves as a bootable image as well.
Source: 
https://www.cisco.com/c/en/us/support/docs/customer-collaboration/unified-contact-center-express/211582-Tech-Note-on-UCCX-11-6-Pre-Release-Commu.html

On Thu, Aug 24, 2017 at 1:13 PM Matthew Huff 
> wrote:
I've tried repeatedly to install our second IM server, and it always fails with 
a corrupt file during post-install. I re-downloaded the ISO and recreated the 
bootable ISO, so I don't believe it's a ISO issue. Anyone see this?
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt install with 2nd server

[Ryan Huff]

The Unified Communications IM and Presence ISO is bootable I believe (maybe 
that changed?); although it's sister ISO, Unified Communications Manager is not.


From: cisco-voip  on behalf of Anthony 
Holloway 
Sent: Friday, August 25, 2017 10:08 AM
To: Matthew Huff; cisco-voip list
Subject: Re: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt install with 
2nd server

I don't have an answer for you, but you reminded me that UCCX 11.6 is setting 
the new standard for ISOs.  The UCCX 11.6 ISO on CCO for upgrading, is also 
bootable, and can be used for fresh installs as well.  Get on board IM, so 
people don't have to create their own bootable media.

Single ISO for Upgrades and Fresh-Install
In UCCX 11.6, there is only 1 ISO released that is posted on Cisco.com and this 
ISO can be used for either an upgrade or a fresh install. The ISO follows the 
regular naming convention of UCSInstall_UCCX _11.6.X-XX.sgn.iso  This ISO 
is provided with both boot options, so serves as a bootable image as well.
Source: 
https://www.cisco.com/c/en/us/support/docs/customer-collaboration/unified-contact-center-express/211582-Tech-Note-on-UCCX-11-6-Pre-Release-Commu.html

On Thu, Aug 24, 2017 at 1:13 PM Matthew Huff 
> wrote:
I’ve tried repeatedly to install our second IM server, and it always fails with 
a corrupt file during post-install. I re-downloaded the ISO and recreated the 
bootable ISO, so I don’t believe it’s a ISO issue. Anyone see this?
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt install with 2nd server

[Anthony Holloway]

I don't have an answer for you, but you reminded me that UCCX 11.6 is
setting the new standard for ISOs.  The UCCX 11.6 ISO on CCO for upgrading,
is also bootable, and can be used for fresh installs as well.  Get on board
IM, so people don't have to create their own bootable media.

*Single ISO for Upgrades and Fresh-Install*
*In UCCX 11.6, there is only 1 ISO released that is posted on Cisco.com and
this ISO can be used for either an upgrade or a fresh install. The ISO
follows the regular naming convention of UCSInstall_UCCX
_11.6.X-XX.sgn.iso  **This ISO is provided with both boot options, so
serves as a bootable image as well.*
*Source: 
https://www.cisco.com/c/en/us/support/docs/customer-collaboration/unified-contact-center-express/211582-Tech-Note-on-UCCX-11-6-Pre-Release-Commu.html
*

On Thu, Aug 24, 2017 at 1:13 PM Matthew Huff  wrote:

> I’ve tried repeatedly to install our second IM server, and it always fails
> with a corrupt file during post-install. I re-downloaded the ISO and
> recreated the bootable ISO, so I don’t believe it’s a ISO issue. Anyone see
> this?
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt install with 2nd server

[Matthew Huff]

Thanks Ben!

That was it. Didn't occur to me that there might be a problem in the ova 
template. Perhaps the secondary has to replicate during installation and there 
wasn't enough disk space? The BE6K comes with version 1.2 of the ova template, 
but there is a 1.4 version on CCO. The installation hasn't finished yet, but 
it's much further along than it been before.

From: Matthew Huff
Sent: Friday, August 25, 2017 5:19 AM
To: 'Ben Amick' ; cisco-voip list 

Subject: RE: Cisco IM & Presence 11 5.1 SU2 corrupt install with 2nd server

Yes, It's a BE6k. Haven't thought to re-download the template, worth a try.

From: Ben Amick [mailto:bam...@humanarc.com]
Sent: Thursday, August 24, 2017 3:26 PM
To: Matthew Huff >; cisco-voip list 
>
Subject: RE: Cisco IM & Presence 11 5.1 SU2 corrupt install with 2nd server

Just curious, is your first server from the BE6/7000 Preconfigures? I remember 
having a few major issues in the past adding servers to a cluster from one of 
the preconfigured templates on 10.5 and 11.0, wondering if it might be that 
same issue.

From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of 
Matthew Huff
Sent: Thursday, August 24, 2017 2:13 PM
To: cisco-voip list 
>
Subject: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt install with 2nd 
server

I've tried repeatedly to install our second IM server, and it always fails with 
a corrupt file during post-install. I re-downloaded the ISO and recreated the 
bootable ISO, so I don't believe it's a ISO issue. Anyone see this?

Confidentiality Note: This message is intended for use only by the individual 
or entity to which it is addressed and may contain information that is 
privileged, confidential, and exempt from disclosure under applicable law. If 
the reader of this message is not the intended recipient or the employee or 
agent responsible for delivering the message to the intended recipient, you are 
hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited. If you have received this communication 
in error, please contact the sender immediately and destroy the material in its 
entirety, whether electronic or hard copy. Thank you
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt install with 2nd server

[Matthew Huff]

Yes, It's a BE6k. Haven't thought to re-download the template, worth a try.

From: Ben Amick [mailto:bam...@humanarc.com]
Sent: Thursday, August 24, 2017 3:26 PM
To: Matthew Huff ; cisco-voip list 
Subject: RE: Cisco IM & Presence 11 5.1 SU2 corrupt install with 2nd server

Just curious, is your first server from the BE6/7000 Preconfigures? I remember 
having a few major issues in the past adding servers to a cluster from one of 
the preconfigured templates on 10.5 and 11.0, wondering if it might be that 
same issue.

From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of 
Matthew Huff
Sent: Thursday, August 24, 2017 2:13 PM
To: cisco-voip list 
>
Subject: [cisco-voip] Cisco IM & Presence 11 5.1 SU2 corrupt install with 2nd 
server

I've tried repeatedly to install our second IM server, and it always fails with 
a corrupt file during post-install. I re-downloaded the ISO and recreated the 
bootable ISO, so I don't believe it's a ISO issue. Anyone see this?

Confidentiality Note: This message is intended for use only by the individual 
or entity to which it is addressed and may contain information that is 
privileged, confidential, and exempt from disclosure under applicable law. If 
the reader of this message is not the intended recipient or the employee or 
agent responsible for delivering the message to the intended recipient, you are 
hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited. If you have received this communication 
in error, please contact the sender immediately and destroy the material in its 
entirety, whether electronic or hard copy. Thank you
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip