Re: [cisco-voip] Question about RISDB queries and ATA devices?

[Ryan Ratliff (rratliff)]

I’m not surprised the “phone” filter only shows you SEP devices. I was 
expecting RTMT to give you a friendlier way to browse around and find the ATAs.

Do any of the other risdb CLI filters give you those devices?

Interrogating the API directly is another option.
https://developer.cisco.com/docs/sxml/#!risport70-api-reference/selectcmdevice

-Ryan

From: cisco-voip  on behalf of Tim Reimers 

Date: Thursday, May 25, 2023 at 12:06 PM
To: Wes Sisk (wsisk) 
Cc: cisco-voip 
Subject: Re: [cisco-voip] Question about RISDB queries and ATA devices?
Hi Wes, Ryan, all

I'm not seeing any of the registered ATAs showing up in RTMT under a Device 
Search either -- only SEP devices.

I gather that you are all expecting that 'show risdb query phone' as well as 
RTMT should be showing the ATAs registered and counted alongside the SEP devices
so long as the ATAs are running in SCCP mode and not something else...

Thanks Tim

On Thu, May 25, 2023 at 10:17 AM Wes Sisk (wsisk) 
mailto:ws...@cisco.com>> wrote:
Yes, registration information is in RIS not in SQL(informix). I see some other 
mentions of this, but not clear resolution.

Note that ATA may follow different CM server resolution and 'show risdb' is 
per-node. Aka, have you checked all nodes with CM service activated where ATAs 
might be registered?

Oh, and ATAs could be h.323 for a while, so are they registering as SCCP?

-w

On May 25, 2023, at 9:50 AM, Tim Reimers 
mailto:treim...@ashevillenc.gov>> wrote:

Hi all -

I'm trying to find the ACTIVELY REGISTERED devices on my UCM 9.1 system.

I need to find the list of actively registered ATA 186 devices and their DNs.

* I'm using "show risdb query phones" command, as documented here among other 
sites
https://getpractical.co.uk/2021/10/11/cisco-cucm-reports-from-sql-show-risdb/

That seems to show only the SEPzzz devices, aka my 79XX SCCP phones.

I don't see any ATA devices being returned.
Are they not in the "phone" table of the RISDB?

Thanks, Tim

* my understanding is that any variation on the "run sql select" is
simply querying the Oracle? database for _configured_ devices only, and isn't 
looking
at the memory table of the Callmanager process to see the _currently 
registered_ devices.
(I've seen a number of other forum posts where people suggested "run sql" 
commands to gather info, but that is statically configured, not necessarily 
"registered", so that does not seem appropriate for the info I want).



--

Quis custodiet  
ipsos nexus

Tim Reimers

Network Administrator

I.T Services

City of Asheville

treim...@ashevillenc.gov

(desk) 828-259-5512

(cell)   828-552-1585

"That’s no ordinary rabbit  packet!  That’s the most foul, cruel, and bad 
tempered badly framed packet you ever set eyes on. Listen, that packet’s got a 
vicious streak a mile wide, he’s a killer.He’s got huge sharp MTU…eh, he can 
leap about and cross Vlans…. I warned you, I warned you but did you listen? No… 
ohhh no, it’s just a harmless little packet on the network, isn’t it now"
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip



--

Quis custodiet  
ipsos nexus

Tim Reimers

Network Administrator

I.T Services

City of Asheville

treim...@ashevillenc.gov

(desk) 828-259-5512

(cell)   828-552-1585

"That’s no ordinary rabbit  packet!  That’s the most foul, cruel, and bad 
tempered badly framed packet you ever set eyes on. Listen, that packet’s got a 
vicious streak a mile wide, he’s a killer.He’s got huge sharp MTU…eh, he can 
leap about and cross Vlans…. I warned you, I warned you but did you listen? No… 
ohhh no, it’s just a harmless little packet on the network, isn’t it now"
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Question about RISDB queries and ATA devices?

[Ryan Ratliff (rratliff)]

You are on the right track looking in RIS. Have you poked around in RTMT yet?.

-Ryan

From: cisco-voip  on behalf of Tim Reimers 

Date: Thursday, May 25, 2023 at 9:51 AM
To: cisco-voip 
Subject: [cisco-voip] Question about RISDB queries and ATA devices?
Hi all -

I'm trying to find the ACTIVELY REGISTERED devices on my UCM 9.1 system.

I need to find the list of actively registered ATA 186 devices and their DNs.

* I'm using "show risdb query phones" command, as documented here among other 
sites
https://getpractical.co.uk/2021/10/11/cisco-cucm-reports-from-sql-show-risdb/

That seems to show only the SEPzzz devices, aka my 79XX SCCP phones.

I don't see any ATA devices being returned.
Are they not in the "phone" table of the RISDB?

Thanks, Tim

* my understanding is that any variation on the "run sql select" is
simply querying the Oracle? database for _configured_ devices only, and isn't 
looking
at the memory table of the Callmanager process to see the _currently 
registered_ devices.
(I've seen a number of other forum posts where people suggested "run sql" 
commands to gather info, but that is statically configured, not necessarily 
"registered", so that does not seem appropriate for the info I want).



--

Quis custodiet  
ipsos nexus

Tim Reimers

Network Administrator

I.T Services

City of Asheville

treim...@ashevillenc.gov

(desk) 828-259-5512

(cell)   828-552-1585

"That’s no ordinary rabbit  packet!  That’s the most foul, cruel, and bad 
tempered badly framed packet you ever set eyes on. Listen, that packet’s got a 
vicious streak a mile wide, he’s a killer.He’s got huge sharp MTU…eh, he can 
leap about and cross Vlans…. I warned you, I warned you but did you listen? No… 
ohhh no, it’s just a harmless little packet on the network, isn’t it now"
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Jabber Team Messaging Mode: contact migration prompt does not appear (CSCvt55321)

[Ryan Ratliff (rratliff) via cisco-voip]

The bug has been updated.

It’s not just that line that signifies the bug, before that will be the Atlas 
discovery for the user that calls out migration is required.
Similar to:
INFO [0x10cc] [iscovery\AtlasLookupDirectorImpl.cpp(63)] 
[service-discovery] 
[CSFUnified::AtlasLookupDirectorImpl::determineIsSparkCustomer] - Atlas lookup 
result from server: Code: IS_SPARK_CUSTOMER; supportsSSO: 0; emailVerified: 1; 
migrationRequired: 1; migrationCompleted: 0

Then the second line for MigrationLifeCycle will show that’s not actually 
required, as Frank pointed out.

- Ryan

From: cisco-voip  on behalf of Lelio 
Fulgenzi 
Date: Tuesday, April 28, 2020 at 12:28 PM
To: "Wakelin, Frank" , cisco-voip list 

Subject: Re: [cisco-voip] Jabber Team Messaging Mode: contact migration prompt 
does not appear (CSCvt55321)

Sometimes I think we’re lucky they don’t classify a bug as sev 6 and carry on. ☹

From: cisco-voip  On Behalf Of Wakelin, 
Frank
Sent: Tuesday, April 28, 2020 12:02 PM
To: 'cisco-voip@puck.nether.net' 
Subject: [cisco-voip] Jabber Team Messaging Mode: contact migration prompt does 
not appear (CSCvt55321)


Thought I’d share this in the event someone else runs into this.  After 
experiencing this issue I looked for a bug that might explain the behavior and 
found this bug.  However because it said it was "fixed" and didn't sight the 
version I was running I opened a TAC case to verify.  After having to escalate 
to a senior TAC engineer, they still made me jump through all the hoops 
switching modes, collecting logs, etc.  When all was said and done the sighted 
the same bug ID I sent them in the first place.  Now I understand bugs need to 
be confirmed, so I'm fine with going through "the process".  This is 
(apparently) fixed in 12.8(2) which has yet to be released.  It is generally 
confirmed with the presence of the following in the log:

2020-04-27 10:23:59,572 WARN  [0x5714] 
[in\person\IMContactListProvider.cpp(111)] [csf.person] 
[csf::person::IMContactListProvider::fetchContactsOperation] - Contact list is 
not injected, it will be returned once it is injected.
2020-04-27 10:23:59,572 INFO  [0x4550] 
[rk\migration\MigrationLifeCycle.cpp(206)] [csf.person.spark] 
[csf::person::spark::MigrationLifeCycle::InMigrationStatus] - In migration 
mode: false
2020-04-27 10:23:59,572 DEBUG [0x4550] 
[directory\ContactListFeatureSet.cpp(550)] [ContactService-ContactsAdapter] 
[CSFUnified::ContactsAdapter::LoadContactsFromSource] - start 
ContactsAdapter::LoadContactsFromSource



If Cisco could just post accurate information in bugs it would save everyone a 
lot of time and I wouldn't have had to even open a case in the first place:

  *   The bug status should not be “Fixed” as it is clearly not.
  *   It should state it also affects 12.8(1).
  *   A reference to 12.8(2) should be listed in known fixed releases.
  *   Symptoms should include a reference to the log entry sited.


[CityofRichmond2]
Frank Wakelin · Senior Network Analyst, Information Technology
City of Richmond · 6911 No. 3 Road, Richmond, BC  V6Y 2C1
Å +16042764190 È+17788394693  › 
fwake...@richmond.ca


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] migrating mpp phones to callmanager (and back)

[Ryan Ratliff (rratliff) via cisco-voip]

Yes there is.

The guide on https://upgrade.cisco.com can walk you through it.

-Ryan

From: cisco-voip  on behalf of Lelio 
Fulgenzi 
Date: Monday, March 2, 2020 at 10:45 AM
To: cisco-voip list 
Subject: [cisco-voip] migrating mpp phones to callmanager (and back)


Is there anything specially about an mpp phone that wouldn’t allow you to load 
CUCM software on it? And then go back to MPP when needed?


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] [EXTERNAL] 7832 out of the box - needs to be reset to register

[Ryan Ratliff (rratliff) via cisco-voip]

For anyone that’s seen this, please unicast me with details on the phones so we 
can track them down.
SN, Mac Address, and as much info as you can recall or find (what firmware it 
shipped with, what happened out of box, etc).

Thanks,

Ryan

From: cisco-voip  on behalf of Brian Meade 

Date: Wednesday, February 19, 2020 at 9:37 PM
To: Lelio Fulgenzi 
Cc: cisco-voip list 
Subject: Re: [cisco-voip] [EXTERNAL] 7832 out of the box - needs to be reset to 
register

We're starting to see more and more phones that somehow got an ITL on them new 
from the factory.  Factory reset doesn't seem to always delete the ITL either 
so deleting Security Settings specifically is usually required in those cases.

On Tue, Feb 18, 2020 at 4:55 PM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:
It was last updated 2017. So, I can’t imagine it’s a new batch.

From: JASON BURWELL 
mailto:jason.burw...@foundersfcu.com>>
Sent: Tuesday, February 18, 2020 4:49 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>; voyp list, 
cisco-voip (cisco-voip@puck.nether.net) 
mailto:cisco-voip@puck.nether.net>>
Subject: RE: [EXTERNAL] 7832 out of the box - needs to be reset to register

I just got a 7832 New in the box today and had the exact thing happen. Never 
had this problem before on 7832s. Must be a bug with the default firmware they 
put on this batch.

Jason


From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Lelio Fulgenzi
Sent: Tuesday, February 18, 2020 4:09 PM
To: voyp list, cisco-voip 
(cisco-voip@puck.nether.net) 
mailto:cisco-voip@puck.nether.net>>
Subject: [EXTERNAL] 7832 out of the box - needs to be reset to register

CAUTION: This email originated outside of Founders Federal Credit Union. Do not 
click links or open attachments unless you recognize the sender and know the 
content is safe.


Any particular reason that I have to reset all settings on a 7832 before it 
registers?

Never seen that before.

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] best way to move CUCM Publisher from one host/DC to another

[Ryan Ratliff (rratliff) via cisco-voip]

Has anyone run into problems setting a static MAC on your ELM/PLM vm? Dynamic 
mac addresses can definitely bite you but I’m curious how this workaround (that 
we do document as best practice) works in the real world.


  *   Ryan

From: cisco-voip  on behalf of Charles 
Goldsmith 
Date: Wednesday, December 11, 2019 at 10:37 AM
To: Ryan Huff 
Cc: cisco-voip list 
Subject: Re: [cisco-voip] best way to move CUCM Publisher from one host/DC to 
another

Yes sir, moving to new hosts in the same DC, both hosts plugged into the same 
Nexus on 10gbit.

To UC Penguin's point, it was on 6.0

On Wed, Dec 11, 2019 at 7:46 AM Ryan Huff 
mailto:ryanh...@outlook.com>> wrote:
Interesting, was it 10GB end2end (nics and all)? I’ve done it on a 1GB end2end 
and got close to 700 mbps (if I recall correctly, 680-682 was the highest it 
hit).

Not disagreeing, just interesting... it would be worth some investigating 
someday.

Sent from my iPhone


On Dec 11, 2019, at 01:50, Charles Goldsmith 
mailto:w...@woka.us>> wrote:
I'm a big fan of SCP as well, but it's limited to 1 vCPU on the encryption, so 
that seems to limit it more than the links.  I know this because trying to move 
VM's over 10gbit connections and was only getting about 400 mbps.

If you have a middle pc/jump box, I'm a big fan of simple export/import if you 
don't have a vCenter in the picture.  That way, you get a backup of the VM.  
vCenter is nice, but migration moves it, doesn't copy, even with different 
storage.

I have never tried to use vmkstools, may have to investigate that the next time 
I migrate.

On Tue, Dec 10, 2019 at 8:26 PM Ryan Huff 
mailto:ryanh...@outlook.com>> wrote:
Yes, SCP is beholden to the line rate between the hosts. Though VMWare doesn’t 
“recommend” it, I can say I’ve also never had a problem with it, FWIW... and 
yeah, super convenient.

Is you have shared storage between the hosts and can migrate the storage and 
compute, I’d power off the VM and just do that.
Sent from my iPhone


On Dec 10, 2019, at 21:20, Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com>> 
wrote:
SCP is so slow and not recommended by VMware*, but damn if it's not convenient.

Ovftool is super fast but I think it requires a middle PC to be ran from.

It would be awesome if you could have the best of both worlds. Like run ovftool 
right on ESXi. I wonder.

I have used Veeam free backup to move VMs, which is as fast as ovftool, but a 
huge install for a one time move.

*To prevent performance and data management related issues on ESX, avoid the 
use of using scp, cp, or mv for storage operations; instead use vmkfstools, 
VMware's virtual machine Importer tool.
https://kb.vmware.com/s/article/1000936


On Tue, Dec 10, 2019, 7:50 PM Ryan Huff 
mailto:ryanh...@outlook.com>> wrote:
I don’t think vMotion would change the MAC address, UUID.. etc and I think 
you’d be fine (not while the VM is powered on though).

Typically, what I do is power the VM down and SCP the VM folder to the target 
host from the source host (requires SSH server/client be enabled and excluded 
in the host firewall for the hosts). Then in the target host, add the .vmx file 
into inventory and power on. You’ll initially be asked if you moved or copied 
the VM and you’ll want to select move (if you select copy, then it will 
randomize a few things like nic MAC .. etc).

Lastly, remove the source VM from inventory and after you’re sure the target VM 
is healthy and running fine, delete the source VM from storage on the source 
host.
Thanks,

Ryan


On Dec 10, 2019, at 20:42, naresh rathore 
mailto:nare...@hotmail.com>> wrote:
hi


We have to migrate our Voice VMs from one host/DC to another host/DC. i think 
if we clone or do vmotion, mac address gets changed and we have to apply for 
license, we may face database corruption.


Is there a way which Cisco recommends to do migration, if we have to migrate 
Voice VMs from one host to another?


Regards


Naray
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voipdata=02%7C01%7C%7C57141ead670d42edf74808d77ddb677d%7C84df9e7fe9f640afb435%7C1%7C0%7C637116253590181473sdata=z44wxHsKAhdz2lak4%2Fj7to5R2HV22lmr3D2%2BVr%2Fe5vQ%3Dreserved=0
___
cisco-voip mailing list

Re: [cisco-voip] When did tftp go out the door?

[Ryan Ratliff (rratliff) via cisco-voip]

The tftp process has supported that since 4.x days (it was used for the proxy 
tftp feature). Endpoints have been preferring it since the Cius days, when 
phone loads started getting so big traditional TFTP just wouldn’t work.

These days the TFTP process can take requests using tftp on UDP:69, HTTP on 
tcp:6970, and HTTPS on tls:6971 and tls:6972. The HTTPS ports use different 
server certs, Tomcat for Jabber clients and CallManager for phones.

No, you cannot get rid of TFTP option 150 just yet, that’s still how the phones 
learn the IP address to use for configuration files. I would imagine it gets 
replaced by DNS SRV records at some point.

- Ryan

From: cisco-voip  on behalf of Scott Voll 

Date: Thursday, November 14, 2019 at 4:53 PM
To: cisco-voip list 
Subject: [cisco-voip] When did tftp go out the door?

I'm looking at a phone register and I see no tftp traffic.  All http over 6970. 
 when did this happen?

I'm on 12.5

if this is the new norm, then can I get rid of tftp option in dhcp?

Scott

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] 8865s and MRA CUCM registration failover issue

[Ryan Ratliff (rratliff) via cisco-voip]

IIRC (it's been a looong time since I looked into this) failover with RMA was 
based on device->Expressway-E redundancy, not so much Expressway->CUCM. 
This is why you don't get any redundancy without a clustered Expressway. 

I'd recommend treating it as a bug and pushing for one to be created. If you 
have two Expressway-Es in the cluster (and the phone knows this via DNS 
lookups) then it should maintain connections to an active and standby CUCM. 

If anyone happens to have a cluster of 3 Expressways to test with, I wonder how 
that would look. 

- Ryan 

On 10/30/19, 2:57 PM, "cisco-voip on behalf of Erick Bergquist" 
 wrote:

Following up on this, still working to figure this out and have been
working with TAC.

Does anyone know if the 8865s when using MRA use only the first 2
servers in UCM group or will also the third server if present?

On the 8865 phone web page it shows all 3 servers from UCM group.

On the phone information page on phone itself, it shows the Active
Server and Stand-by Server only.

When we make the first server unreachable (CCM1) the 8865 over MRA
fails to second server CCM2 fine and the phone information screen
shows CCM1 as Active Server and the Stand-by Server field is empty.
The web page of phone shows all 3 servers still with CCM2 as Active.
When we make CCM2 unreachable the phone just spins and never goes to
the third server over MRA.  Phones on-premise use the third server
fine.

I can not find any documentation on this and so far no one seems to
really have an answer if 88xx phones over MRA will use the third
server in UCM group.

Thanks.

On Mon, Oct 14, 2019 at 12:25 PM Erick Bergquist  wrote:
>
> Thanks, I've seen that bug before (and another cisco doc) and that bug
> says fixed in 8.11.x which we are on.
>
> All 3 CUCMs are in our SRV records and show active on the Expressway side.
>
> On Mon, Oct 14, 2019 at 12:04 PM Brian Meade  wrote:
> >
> > You're may be hitting this limitation-  
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvj49486
> >
> >
> > If not, are all 3 CUCM servers in the _cisco-uds SRV record and 
resolvable by the Expressway-C?
> >
> > On Mon, Oct 14, 2019 at 11:47 AM Erick Bergquist  
wrote:
> >>
> >> Has anyone seen where 8865 model phones don't register over MRA  in
> >> the UCM group if the some servers are not reachable?
> >>
> >> 8865s with 12.5.1 SR3 firmware
> >> 12.5.1 SU1 CUCM
> >>
> >> 2 expressway pairs
> >>
> >> UCM group order (same as service group),
> >>
> >> CCM1
> >> CCM2
> >> CCM3
> >>
> >> When CCM1 and CCM2 are unreachable the MRA 8865 phone just spins at 
registering.
> >> Once CCM1 or CCM2 become reachable, the phone comes backs up.
> >>
> >> DX 70's and DX 80's register fine when CCM3 is only available over MRA.
> >>
> >>
> >> Thanks,
> >> Erick
> >> ___
> >> cisco-voip mailing list
> >> cisco-voip@puck.nether.net
> >> https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Question about CUCM CA-Signed certificates.

[Ryan Ratliff (rratliff) via cisco-voip]

Client Auth is required when the cert is used as the client in an mTLS session. 
For Tomcat I believe this would come up in secure ldap sync/auth, if the ldap 
server requests the client cert.

-Ryan

On Sep 27, 2019, at 5:56 PM, ROZA, Ariel  wrote:


Hi, people,

Out of curiosity, does anyone know what´s the specific purpose, in a CUCM 
cluster, of the “Client Authentication” extensión that we must include in the 
template used to sign CUCM certificates? Because I am renewing some expired 
tomcat certificates in a cluster, and those certs only have the “Server 
Authentication” extensión, instead of both, Server and Client.
And my customer never complained about issues in their setup.

Regards,

Ariel.
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] CUCM 11.5(1)SU6, Port 6972 and EC Certs

[Ryan Ratliff (rratliff) via cisco-voip]

Remember the cert presentation in a TLS setup happens after the server knows 
the client’s capabilities.

Try with a browser or ssl client that doesn’t support EC and see if you get the 
RSA cert.

Ryan Ratliff
Manager, Cisco Cloud Collaboration TAC
Standard Business Hours: 8:00AM-5:00PM EDT
Email: rratl...@cisco.com
Office: +1 919-476-2081
Mobile: +1-919-225-0448
Cisco U.S. Contact Numbers: +1-800-553-2447 or +1-408-526-7209

From: Brian Meade 
Date: Wednesday, September 4, 2019 at 1:59 PM
To: Anthony Holloway 
Cc: Tim Smith , Ryan Ratliff , 
cisco-voip list 
Subject: Re: [cisco-voip] CUCM 11.5(1)SU6, Port 6972 and EC Certs

This was on an 11.5 cluster without that setting changed from default.  I'm 
wondering if that setting doesn't potentially change it everywhere.

On Wed, Sep 4, 2019 at 12:18 PM Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com>> 
wrote:
So Brian, you (or someone) has then changed the HTTPS Ciphers Enterprise 
Parameter to use EC certs then?  Because that's not the default setting.

On Wed, Sep 4, 2019 at 10:20 AM Brian Meade 
mailto:bmead...@vt.edu>> wrote:
Some customers of mine with Linux environments connect to the CCMAdmin pages 
with the EC certs.  It's definitely a good idea to get those signed.

On Tue, Sep 3, 2019 at 11:06 PM Tim Smith 
mailto:tim.sm...@enject.com.au>> wrote:
Is it time to start getting our EC certs signed as well?


From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
on behalf of "cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>" 
mailto:cisco-voip@puck.nether.net>>
Reply to: "Ryan Ratliff (rratliff)" 
mailto:rratl...@cisco.com>>
Date: Wednesday, 4 September 2019 at 1:02 pm
To: Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com>>, 
"cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>" 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] CUCM 11.5(1)SU6, Port 6972 and EC Certs

TCP/6972 is hosted by the TFTP service specifically for secure download of 
configuration files and firmware (HTTPS using the Callmanager-EC cert) by 
endpoints. It’s using EC because only endpoints that support strong encryption 
will use support HTTPS downloads via TFTP.
TCP/6970 is for the same as HTTP
TCP/6971 is for the same as HTTPS using the Tomcat certificate (for Jabber)

None of these are intended to be used by your browser, though it works 
perfectly well for testing and troubleshooting.

Ryan Ratliff
Manager, Cisco Cloud Collaboration TAC
Standard Business Hours: 8:00AM-5:00PM EDT
Email: rratl...@cisco.com<mailto:rratl...@cisco.com>
Office: +1 919-476-2081
Mobile: +1-919-225-0448
Cisco U.S. Contact Numbers: +1-800-553-2447 or +1-408-526-7209

From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
on behalf of Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com>>
Date: Tuesday, September 3, 2019 at 10:03 PM
To: cisco-voip list 
mailto:cisco-voip@puck.nether.net>>
Subject: [cisco-voip] CUCM 11.5(1)SU6, Port 6972 and EC Certs

So, I just ran into something interesting where someone else took care of the 
certs for a CUCM I now have access to, and while the main CCMAdmin pages load 
fine in my browser with a full chain of trust, the 6972 page(s) are being 
delivered as EC certs, which were not signed, and thus, I get a warning in my 
browser.

Now, I have other CUCM deployments under my belt where the Tomcat RSA certs are 
signed and EC not, because the default setting for CUCM is to not use EC certs 
until you tell it to.  These deployments still present the RSA cert to me for 
6972.

The only difference is the SU6 part.

I couldn't find anything in the release notes nor in the bug search, and so I'm 
wondering if any of you know what might be happening.

I tried toggling the HTTP Ciphers from RSA only to All and back again, but that 
didn't work.

I tried re-uploading the RSA cert chain, starting from root, and then back 
through the 2 intermediates (yes, three layers deep, it's a public CA chain).

I've restarted Tomcat, I've deactivated/reactivate TFTP, I've rebooted the 
cluster, and I'm just at a loss.  It's not that big of a deal, it just bothers 
me that I don't know why it's doing this.
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Azure to Webex User Provisioning and Tokens

[Ryan Ratliff (rratliff)]

The URL is just a shortcut way to get an OAuth token for the integration.

You can easily do the same thing via the API if you had to.

Look at the URL itself:
https://idbroker.webex.com/idb/oauth2/v1/authorize

Here are the parameters for the GET request (leaving the %-encoded characters 
because I’m lazy):
response_type=token
client_id=
redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Fauth%2Fcode
scope=spark%3Apeople_read%20spark%3Apeople_write%20Identity%3ASCIM
state=this-should-be-a-random-string-for-security-purpose

You can see the definitions of the parameters at 
https://developer.webex.com/docs/integrations.

A given integration can have only one OAuth token at a time, so if you 
regenerate your token by logging into that URL then it will invalidate any 
previous ones.
The web page isn’t going away, it’s just the URL the OAuth generation 
redirected you to when it generated your token, which happens to include your 
token.
It’s non-developer speak for “don’t close your browser until you copy that 
token”, and worst case, generate a new one.

Ryan Ratliff
Manager, Cisco Cloud Collaboration TAC
Standard Business Hours: 8:00AM-5:00PM EDT
Email: rratl...@cisco.com
Office: +1 919-476-2081
Mobile: +1-919-225-0448
Cisco U.S. Contact Numbers: +1-800-553-2447 or +1-408-526-7209

From: cisco-voip  on behalf of Anthony 
Holloway 
Date: Wednesday, August 7, 2019 at 12:32 PM
To: Matthew Loraditch 
Cc: cisco-voip list 
Subject: Re: [cisco-voip] Azure to Webex User Provisioning and Tokens

Thank you for that confirmation.

It's concerning to me that the note below the URL says:

"We recommend that you paste this value into a text file and save it, so that 
you have a record of the token in case the URL is not available any more."

Considering the token expires every 365 days.  I sure hope the URL is available 
in the future.

On Wed, Aug 7, 2019 at 11:26 AM Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>> 
wrote:
FWIW the Cisco documents say the same thing: 
https://help.webex.com/en-us/aumpbz/Synchronize-Azure-Active-Directory-Users-into-Cisco-Webex-Control-Hub



Matthew Loraditch​
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com
 |
e: mloradi...@heliontechnologies.com
[Helion Technologies]
[Facebook]
[Twitter]
[LinkedIn]
From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Anthony Holloway
Sent: Wednesday, August 7, 2019 12:18 PM
To: Cisco VoIP Group 
mailto:cisco-voip@puck.nether.net>>
Subject: [cisco-voip] Azure to Webex User Provisioning and Tokens

I'm using the following link:

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/cisco-webex-provisioning-tutorial

And in step 6 it describes how to obtain the secret token from Cisco, to input 
into Azure.

It notes that the token is valid for 365 days, however, in my testing it's 
looking like it might be 30 days.

The resulting URL from step 6 has a URI parameter of:

expires_in=31535999

Which if you treat it as seconds, then it's 365 days, so the URL seems to match 
the document.

I'm wondering if there is anyone with experience on this topic, before I put 
some serious time in with TAC.

Thanks much!

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Cisco Hybrid Call and CUCM 10.5

[Ryan Ratliff (rratliff) via cisco-voip]

Nope. 11.5(1)SU3 is the min version as of March.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cloudCollaboration/spark/hybridservices/callservices/cmgt_b_ciscospark-hybrid-call-service-config-guide/cmgt_b_ciscospark-hybrid-call-service-config-guide_preface_0111.html


Ryan Ratliff
Voice CCIE #16809
Manager, Cisco Cloud Collaboration TAC
Standard Business Hours: 8:00AM-5:00PM EDT
Email: rratl...@cisco.com
Office: +1 919-476-2081
Mobile: +1-919-225-0448
Cisco U.S. Contact Numbers: +1-800-553-2447 or +1-408-526-7209

On Jul 12, 2019, at 5:43 PM, Jonathan Charles 
mailto:jonv...@gmail.com>> wrote:

Is it supported? Docs used to say 10.5 now, they say 11.5...

The Cisco Spark-RD device doesn't exist in 10.5... so curious if it is 
supported...


Jonathan
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Cloud registered user manual for room kits

[Ryan Ratliff (rratliff) via cisco-voip]

Yes you can dial anything with a SIP URI.
Two pretty good articles
https://help.webex.com/en-us/zhrr8q/Calling-Capabilities-in-Cisco-Webex-Teams

https://help.webex.com/en-us/7ej8gq/Requirements-for-Business-to-Business-B2B-SIP-Calls-To-and-From-the-Cisco-Webex-Cloud

Don’t overlook this very important note.
Cisco Webex Teams users or devices utilizing Cisco Webex Hybrid Call Services 
will have their B2B calling requirements defined by the on-premises equipment 
configuration,
such as Cisco Unified Communications Manager (Unified CM) and Cisco Expressway.

Ryan Ratliff
Voice CCIE #16809
Manager, Cisco Cloud Collaboration TAC
Standard Business Hours: 8:00AM-5:00PM EDT
Email: rratl...@cisco.com
Office: +1 919-476-2081
Mobile: +1-919-225-0448
Cisco U.S. Contact Numbers: +1-800-553-2447 or +1-408-526-7209

On Apr 25, 2019, at 10:14 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Ok. Silly question... is there a separate user guide for cloud registered room 
kits?

Just wondering what options are available vs. on-prem registered.

For example, can I call sip video endpoints /addresses with cloud registered 
room kits out of the box? Or does it depend on back end configurations or 
subscription options?

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] 15m10s timer for Jabber

[Ryan Ratliff (rratliff) via cisco-voip]

Look for a TCP idle session timeout setting on the firewall.

Ryan Ratliff
Voice CCIE #16809
Manager, Cisco Cloud Collaboration TAC
Standard Business Hours: 8:00AM-5:00PM EDT
Email: rratl...@cisco.com
Office: +1 919-476-2081
Mobile: +1-919-225-0448
Cisco U.S. Contact Numbers: +1-800-553-2447 or +1-408-526-7209

On Apr 16, 2019, at 6:36 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


We do have a firewall. We had another situation whereby SIP phones would reset 
after 3 minutes (or 6? Can’t recall) and were told it could be a SIP inspection 
setting on the firewall.

My colleagues did some testing and resolved that issue apparently. I just need 
to know what the status is of that, ie whether they implemented those changes 
after their brief test period.

Once I get that info, I’ll be able to proceed accordingly.



-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Apr 16, 2019, at 12:16 AM, Florian Kroessbacher 
mailto:florian.kroessbac...@gmail.com>> wrote:

Hy out there

i think this could be the standard reinvite timer. Is there some Firewall in 
between which blocks out the reinvite
Am 16. Apr. 2019, 05:59 +0200 schrieb Lelio Fulgenzi 
mailto:le...@uoguelph.ca>>:

Was having constant disconnects on a off-premise (expressway) Jabber 
conversation and before I blamed the other person, I thought I’d look into the 
length of the calls that were cut off.

Turns out each of the three times I was cut off, the calls lasted 15m10s. I 
went back to some calls two weeks ago and same thing, cut off at 15m10s.

This smells of a timer.

Any ideas?

I’ll have to open a case, after testing on-prem call length.

Lelio


-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

<>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] [EXTERNAL]Re: CUCM 12.5 CCMAdmin login error

[Ryan Ratliff (rratliff) via cisco-voip]

1. 7900 series phones that are so solid they would probably get certified by 
NASA to run in space.
1b. Except the hookswitches, after years (and years) they get dirty and 
contacts fail (or happen so fast it causes all sorts of fun things like ccm 
crashes).

2. Hookswitches enhanced to be self-cleaning (fix 1b)
2b. Customers lv being told to fix hookswitch issues by more 
hookswitching...

3. Hookswitches further evolved to not have mechanical parts (moving parts = 
weakness). Use a light sensor to detect off hook instead (neat!)
3b. Stop shining flashlights at my phones damn you...

That’s how my memory recalls it, any resemblance to or variance from the truth 
is coincidence.

Ryan

On Apr 1, 2019, at 4:08 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Oh. My.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Apr 1, 2019, at 1:59 PM, Mergenthal, Chase 
mailto:chase.mergent...@bestbuy.com>> wrote:

Can’t make this up:

“Direct Light on hook switch can cause phone to toggle on/off hook”
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCtf65633

There was also another one I saw where if you were on a g729 call, and there 
was a cisco phone next to you, and particular ringtone would trigger fax 
detection and trigger T38 and drop the call… I cant find the bug however…

-Chase

From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Lelio Fulgenzi
Sent: Friday, March 29, 2019 5:34 PM
To: Johnson, Ken mailto:kenjohn...@letu.edu>>
Cc: cisco-voip (cisco-voip@puck.nether.net) 
mailto:cisco-voip@puck.nether.net>>
Subject: [EXTERNAL]Re: [cisco-voip] CUCM 12.5 CCMAdmin login error


This message is from an external sender.
If you suspect this message is malicious, please click on the "Phish Reporter" 
button within Outlook OR forward this message to phishing @bestbuy.com, and 
please do NOT open any attachments or click on any links.

Yeah. Not sure. I’d usually get this look. Especially from execs. ;)

[image1.gif]
-sent from mobile device-


Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs
 | @UofGCCS on Instagram, Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Mar 29, 2019, at 6:23 PM, Johnson, Ken 
mailto:kenjohn...@letu.edu>> 
wrote:
The best thing about this was how effective it was in spite of how silly you 
felt doing it – we kept old hook-switches working for years with that trick 

From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>>
 On Behalf Of Lelio Fulgenzi
Sent: Friday, March 29, 2019 9:43 AM
To: Heim, Dennis 
mailto:dennis.h...@wwt.com>>; 
Chris Clouse 
mailto:chris.clo...@cdw.com>>;
 Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>>;
 cisco-voip 
(cisco-voip@puck.nether.net)
 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] CUCM 12.5 CCMAdmin login error


Best “solution” ever was the solution to an advisory/bug was the one for 
hookswitch issues. An oldie but a goldie. Published and everything. Something 
like, “…the hook switch is self cleaning. If you find it sticking, lift handset 
and depress and release hook switch repeatedly ten or twenty times.”

I wonder if wayback machine will help me find it. 

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

Re: [cisco-voip] 8851: always use first line for outbound calls with multiline

[Ryan Ratliff (rratliff) via cisco-voip]

It was an enhancement request to get Always Use Prime Line working for 88xx.

As an enhancement request “bug” it was rejected, that’s why it isn’t public. 
That means any further requests to change this behavior for these phones needs 
to be directed to the product marketing team through whatever channel is 
available to you.

Ryan Ratliff
Voice CCIE #16809
Manager, Cisco Cloud Collaboration TAC
Phone: +1 919-476-2081


From: cisco-voip  on behalf of Erick 
Bergquist 
Date: Thursday, March 21, 2019 at 4:59 PM
To: Lelio Fulgenzi 
Cc: cisco-voip list 
Subject: Re: [cisco-voip] 8851: always use first line for outbound calls with 
multiline

Just to confirm, this bug is for the always use prime line option not being 
used for calls?

Thanks.


On Thu, Mar 21, 2019 at 1:51 PM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:
Eek.

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

From: Wes Sisk (wsisk) mailto:ws...@cisco.com>>
Sent: Thursday, March 21, 2019 3:36 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>; 
cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] 8851: always use first line for outbound calls with 
multiline

Correction: it will not be visible.

On Mar 21, 2019, at 2:58 PM, Wes Sisk (wsisk) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:

Whoops, I thought it was. Thanks for the callout Lelio! It should be visible in 
24 hours.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh30732

-Wes

On Mar 21, 2019, at 11:40 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Wes - is there any way to make this big public? I’d like to understand what 
phone models and/or software this affects.
-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

Error! Filename not specified.

On Mar 20, 2019, at 1:03 PM, Wes Sisk (wsisk) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:
Please note at this point the 8851 product manager has elected not to address 
that request. If this feature is important to you then please press your 
account representative more.

Regards,
Wes

On Mar 20, 2019, at 5:56 AM, James Dust 
mailto:james.d...@charles-stanley.co.uk>> 
wrote:

Hi Reto,

We also have this issue, and it has been raised via our vendor with Cisco TAC

Cisco have raised this with their development team they have told us.

I believe the related bug id is: Bug ID CSCvh30732




Kind Regards

James Dust
ICT Network Infrastructure & Communications Engineer











55 Bishopsgate, London EC2N 
3AS

Telephone: 020 7149 6314 / 07989 491136
Website | 
LinkedIn | 
Twitter


















From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of Reto 
Gassmann
Sent: 20 March 2019 09:54
To: cisco-voip@puck.nether.net
Subject: [cisco-voip] 8851: always use first line for outbound calls with 
multiline

Hello Group

we have some IP Phones (8851) with two lines. For outgoing calls the first line 
is always used.
However, if the user receives a call on the second line (This is his secret 
privat line), the next outgoing call is initiated from the second line and 
sends the wrong (privat) number.
Is it possible to configure the phone that allways and automatically the first 
line is used for an outgoing call.
We have CUCM 10.5 and 8851 IP Phones.

Thanks a lot
Regards Reto

Consider the environment - Think before you print

The contents of this email are confidential to the intended recipient and may 
not be disclosed. Although it is believed that this email and any attachments 
are virus free, it is the responsibility of the recipient to confirm this.

You are advised that urgent, time-sensitive communications should not be sent 
by email. We hereby give you notice that a delivery receipt does not constitute 
acknowledgement or receipt by the intended recipient(s).

Details of Charles Stanley group companies and their regulators (where 
applicable), can be found at this URL 
http://www.charles-stanley.co.uk/contact-us/disclosure/

___

Re: [cisco-voip] ITL/CTL - CUCM 11

[Ryan Ratliff (rratliff) via cisco-voip]

See below.

 - Ryan Ratliff

On Mar 7, 2019, at 7:36 PM, Gr ccie mailto:grc...@gmail.com>> 
wrote:

Hi Ryan,

Sorry few more queries on ctl. Since the cluster is in non-secure mode (but has 
CTL due to historically being in mixed mode) and my main aim is to convert it 
to tokenless and keep ctl updated:

1) I think we don’t even need to convert cluster to mixed mode for updating the 
CTLs. I checked in lab and was able to run update ctl command in non-secure 
mode and updated ctl is pushed to phone (although had to reset it, it didn’t do 
with service restarts). Do you think there can be any complication if I just 
update the CTL without turning mixed on and then having to turn it off. As I 
save time/effort on that and its less risky as cluster is still in non-secure 
mode.

No complications, though if you have a CTL there is no downside I can think of 
to being mixed mode. You don’t have to set encrypted profiles anywhere, though 
it’s nice to have that option.

2) Second question is just to confirm even if the hardware token expires - the 
ctl file still remains valid and we can still go tokenless regardless of the 
hardware token expiry as long as certs signing ctl are not changed. Does CTL 
file have any expiry (apart from certs)?

Correct, the CTL itself does not expire, only the certificate that signed it.


3) Also can I check hardware token expiry from cli? For example if I had lost a 
CTL token can I tell from any command output - when the ctl tokens will expire

You can check it with the CLI (db query, maybe show cert) and in OS Admin via 
Certificate Management. The eToken certs are in the database and trust-store.


Thank You

On 27 Feb 2019, at 7:33 am, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:

Inline.

 - Ryan Ratliff

On Feb 26, 2019, at 7:39 AM, Gr ccie 
mailto:grc...@gmail.com>> wrote:

Hi Team,

Cucm cluster 11 was in secure mode once (using hw tokens) - then changed back 
to non-secure mode. The servers and phones both have the CTL files.

1) What issues can we run into if the hardware tokens expire? (Server has itl 
and ctl both)
Will the phones keep trusting files when it has both ITL AND CTL, based on ITL 
even if the CTL is corrupt or expired.

If they expire your chance to update them with anything besides CTLRecovery is 
gone.

2) Any real benefit of updating the CTLs using the software CTL tokens by 
changing to secure mode and then again turn off secure mode?

Only to avoid the case where your eTokens expire. It shifts this risk to when 
the cert that signed the CTL (publisher CallManager.pem) expires instead.

3) Would it be a good idea to delete the CTL files from the server and phones 
if we don’t want mixed mode? How can we do it, we can delete the CTL from cli 
but how abt the phones - can we remove ctl by another method apart from the 
third party tools like phone view?

Yes, if you really want to make it look like mixed-mode never happened then you 
have to delete the CTL file everywhere, including at the phones. You are 
looking at automation via some 3rd party tool to do this.

I believe LSC (being used for dot1x) would continue to operate by getting CAPF 
info from ITL.

Correct, the CAPF cert is in both ITL and CTL so as long as the ITL remains 
current you won’t have an issue obtaining LSCs.

3) I need to regenerate the certificates as well on this cluster 
(capf/callmanager/tvs) - will it matter to have an updated CTL or expired?

This depends on the phones. There was a bug at one point with 78xx/88xx where 
they would invalidate their good ITL at boot because the cert that signed it 
wasn’t in the CTL. If your firmware version is up to date you won’t be exposed 
to that but.

4) Another unrelated question if we push a blank ITL file (enabling cluster 
rollback feature) and then update CTL in a secure CUCM (not something I would 
do but asking for sake of clarity) will it still trust the updated CTL file 
based on blank ITL?

Empty ITL is still signed, it just doesn’t have a TFTP or CCM+TFTP role in it, 
so the phone doesn’t look for signed files from TFTP. Accepting that ITL is 
still subject to validation of the cert that signed it against the certs in the 
current trust store (CTL + ITL).


Thanks,
GR
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] ITL/CTL - CUCM 11

[Ryan Ratliff (rratliff) via cisco-voip]

 - Ryan Ratliff

On Feb 27, 2019, at 2:10 AM, Gr ccie 
mailto:grc...@gmail.com>> wrote:

Thanks Ryan - this is one of the  complex area in the CUCM.

1) If we let the hardware token expire, do you mean we will not be able to use 
CTL update from the CLI and use software tokens? And we will need to have TAC 
perform the CTL recovery procedure from the root similar to the ITL recovery 
procedure in case we need security in future? Apart from the bug you have 
mentioned there is no other complications as ITL will have the certs with TVS 
as fallback - right?

You can switch to using tokenless CTL or use the CTL recovery procedure (normal 
CLI, no root option) as long as your ITLRecovery cert is in the CTL currently. 
The biggest risk is devices that don’t support ITLs and TVS.

2) The only reason I am looking at updating the CTL is as sometimes the third 
party tools don’t work on all the phones. I have Phonview but it will show 
CTL/ITL status for some phones unknown or unreachable even though I can see 
ITL/CTL from the web page. I am thinking of updating CTL to software token may 
stand better chances of pushing CTL to a larger number of phones than the 
number of phones I may be able to clear out remotely.

I agree, given the difficulty in removing the CTL entirely you are better off 
keeping it around and moving forward with awareness of its dependencies.

Thanks

On 27 Feb 2019, at 7:33 am, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:

Inline.

 - Ryan Ratliff

On Feb 26, 2019, at 7:39 AM, Gr ccie 
mailto:grc...@gmail.com>> wrote:

Hi Team,

Cucm cluster 11 was in secure mode once (using hw tokens) - then changed back 
to non-secure mode. The servers and phones both have the CTL files.

1) What issues can we run into if the hardware tokens expire? (Server has itl 
and ctl both)
Will the phones keep trusting files when it has both ITL AND CTL, based on ITL 
even if the CTL is corrupt or expired.

If they expire your chance to update them with anything besides CTLRecovery is 
gone.

2) Any real benefit of updating the CTLs using the software CTL tokens by 
changing to secure mode and then again turn off secure mode?

Only to avoid the case where your eTokens expire. It shifts this risk to when 
the cert that signed the CTL (publisher CallManager.pem) expires instead.

3) Would it be a good idea to delete the CTL files from the server and phones 
if we don’t want mixed mode? How can we do it, we can delete the CTL from cli 
but how abt the phones - can we remove ctl by another method apart from the 
third party tools like phone view?

Yes, if you really want to make it look like mixed-mode never happened then you 
have to delete the CTL file everywhere, including at the phones. You are 
looking at automation via some 3rd party tool to do this.

I believe LSC (being used for dot1x) would continue to operate by getting CAPF 
info from ITL.

Correct, the CAPF cert is in both ITL and CTL so as long as the ITL remains 
current you won’t have an issue obtaining LSCs.

3) I need to regenerate the certificates as well on this cluster 
(capf/callmanager/tvs) - will it matter to have an updated CTL or expired?

This depends on the phones. There was a bug at one point with 78xx/88xx where 
they would invalidate their good ITL at boot because the cert that signed it 
wasn’t in the CTL. If your firmware version is up to date you won’t be exposed 
to that but.

4) Another unrelated question if we push a blank ITL file (enabling cluster 
rollback feature) and then update CTL in a secure CUCM (not something I would 
do but asking for sake of clarity) will it still trust the updated CTL file 
based on blank ITL?

Empty ITL is still signed, it just doesn’t have a TFTP or CCM+TFTP role in it, 
so the phone doesn’t look for signed files from TFTP. Accepting that ITL is 
still subject to validation of the cert that signed it against the certs in the 
current trust store (CTL + ITL).


Thanks,
GR
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] ITL/CTL - CUCM 11

[Ryan Ratliff (rratliff) via cisco-voip]

Inline.

 - Ryan Ratliff

On Feb 26, 2019, at 7:39 AM, Gr ccie 
mailto:grc...@gmail.com>> wrote:

Hi Team,

Cucm cluster 11 was in secure mode once (using hw tokens) - then changed back 
to non-secure mode. The servers and phones both have the CTL files.

1) What issues can we run into if the hardware tokens expire? (Server has itl 
and ctl both)
Will the phones keep trusting files when it has both ITL AND CTL, based on ITL 
even if the CTL is corrupt or expired.

If they expire your chance to update them with anything besides CTLRecovery is 
gone.

2) Any real benefit of updating the CTLs using the software CTL tokens by 
changing to secure mode and then again turn off secure mode?

Only to avoid the case where your eTokens expire. It shifts this risk to when 
the cert that signed the CTL (publisher CallManager.pem) expires instead.

3) Would it be a good idea to delete the CTL files from the server and phones 
if we don’t want mixed mode? How can we do it, we can delete the CTL from cli 
but how abt the phones - can we remove ctl by another method apart from the 
third party tools like phone view?

Yes, if you really want to make it look like mixed-mode never happened then you 
have to delete the CTL file everywhere, including at the phones. You are 
looking at automation via some 3rd party tool to do this.

I believe LSC (being used for dot1x) would continue to operate by getting CAPF 
info from ITL.

Correct, the CAPF cert is in both ITL and CTL so as long as the ITL remains 
current you won’t have an issue obtaining LSCs.

3) I need to regenerate the certificates as well on this cluster 
(capf/callmanager/tvs) - will it matter to have an updated CTL or expired?

This depends on the phones. There was a bug at one point with 78xx/88xx where 
they would invalidate their good ITL at boot because the cert that signed it 
wasn’t in the CTL. If your firmware version is up to date you won’t be exposed 
to that but.

4) Another unrelated question if we push a blank ITL file (enabling cluster 
rollback feature) and then update CTL in a secure CUCM (not something I would 
do but asking for sake of clarity) will it still trust the updated CTL file 
based on blank ITL?

Empty ITL is still signed, it just doesn’t have a TFTP or CCM+TFTP role in it, 
so the phone doesn’t look for signed files from TFTP. Accepting that ITL is 
still subject to validation of the cert that signed it against the certs in the 
current trust store (CTL + ITL).


Thanks,
GR
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Migrating from CM10.5 to 12.5

[Ryan Ratliff (rratliff) via cisco-voip]

No you don’t.

 - Ryan Ratliff

On Feb 19, 2019, at 9:37 AM, 
norm.nichol...@kitchener.ca wrote:



I have Cisco 7945/65 phones that run SCCP, do I need to convert them to SIP if 
we go to 12.5 ?




Thanks

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] PCI DSS compliance for Cisco IPT/UCCX

[Ryan Ratliff (rratliff) via cisco-voip]

BRKCOL-2009 is a good Cisco Live session entirely dedicated to the impact of 
PCI requirements on collab (TLS 1.2 particularly).

Transport Layer Security (TLS) 1.0 is being deprecated and may not provide the 
level of security required by an organization anymore. The Payment Card 
Industry Data Security Standard (PCI DSS) is for example requiring vendors to 
use newer versions of TLS for encrypted communications. This session will 
discuss the support of TLS 1.2 in the Cisco On-Premises Collaboration products. 
It will also cover the ability to disable TLS 1.0 and/or TLS 1.1, the 
interfaces that are affected by this, and the implications on the Cisco 
Collaboration solution. Finally, it will discuss limitations when older phones 
are still used in a environment where TLS 1.0 has been disabled.

 - Ryan Ratliff

On Jan 22, 2019, at 8:18 AM, Lamont, Joshua 
mailto:joshua_lam...@brown.edu>> wrote:

The complete guide is located here: 
https://www.pcisecuritystandards.org/documents/Protecting_Telephone_Based_Payment_Card_Data_v3-0_nov_2018.pdf

This was updated in November for the first time in seven years. If you are a 
business accepting credit cards this is definitely something you should read 
through.

Joshua Lamont
Senior Telecommunications Engineer
Brown University
office (401) 863-1003
cell(401) 749-6913


On Tue, Jan 22, 2019 at 7:36 AM Ryan Huff 
mailto:ryanh...@outlook.com>> wrote:
At a high level I’d think you’ll need to look into SRTP (aka voice encryption) 
enabled system-wide, no call recording (which you can’t do with SRTP anyway) 
and possibly no call monitoring too (at least on the PII calls).

Then adhere to all the physical access rules for servers that store or transmit 
PII (personally identifiable information).

You may need to research database storage requirements as it relates to PCI. 
I’m assuming the UCCX environment is what will be dealing with the PII; while 
UCCX doesn’t have the capacity to outright store CC info, it may be possible 
that some of that info is captured in logs, depending on how your environment 
is set up.

You’d have to do a lot of dry runs in the UCCX environment and run all the 
calling scenarios that interact with PII to ensure traces of it do not get 
logged.

Obviously nothing can be done to the UCCX database outside of what Cisco 
supports, like encrypt table values that aren’t encrypted.. etc

Sent from my iPhone

> On Jan 22, 2019, at 01:23, Ki Wi 
> mailto:kiwi.vo...@gmail.com>> wrote:
>
> Hi Group,
> I have a customer who is querying on how can we make their existing Cisco IPT 
> (with UCCX) PCI DSS compliance since the new upcoming site we are planning to 
> deploy will handle sensitive data such as credit cards information.
>
> Any folks out there have experience doing this?
>
> Do we need voice encryption? Turn on TLS v1.1 ? etc?
>
> --
> Regards,
> Ki Wi
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voipdata=02%7C01%7C%7Cb9218ac35b024bba75db08d680321fbe%7C84df9e7fe9f640afb435%7C1%7C0%7C636837350098382558sdata=%2Fb%2BfDpOqy2BHdBZ%2F%2F%2B%2BYB7FyBrE4lznDiRI1dlwChC4%3Dreserved=0
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Multiple COP Files Requiring Reboot

[Ryan Ratliff (rratliff) via cisco-voip]

Hitless COP in 11.5 is specific to device packs (and only on subscribers).

It means you can add support for new devices and no longer need to reboot the 
subscribers or restart services because we can now get database notification on 
those changes.

Outside of that specific database update I don’t think it has any impact on 
COPs in general.

 - Ryan Ratliff

On Jan 14, 2019, at 6:49 PM, Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>> wrote:

Keep in mind 11.5 has Hitless COP updates.  Google Fu that.  “Can wait to next 
maint window to reboot” and still use the new COP files.  Not clear why you 
even need to reboot with “Hitless”


From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Anthony Holloway
Sent: Monday, January 14, 2019 3:31 PM
To: Cisco VoIP Group 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] Multiple COP Files Requiring Reboot


Opened a PDI case for CUCM, and yes you can install multiple and reboot once at 
the end.

Also, I just learned that PDI goes away at the end of this week.

On Mon, Jan 14, 2019, 10:51 AM Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com> 
wrote:
Looks like I had better luck than I suspected I would when googling for the 
answer.

A Cisco employee responded that you can reboot once to a forum post:
https://community.cisco.com/t5/unified-communications/if-i-need-to-reboot-the-cucm-cluster-after-each-of-the-following/m-p/2939154/highlight/true#M14032

On Mon, Jan 14, 2019 at 10:39 AM Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com>> 
wrote:
I should mention, that normally I would open a PDI case for this type of 
question, however, it seems as though PDI dropped support for UCCX. If this 
thread doesn't get any traction, I might just open a similar case for CUCM. I 
thought I'd try a quick check here first.

On Mon, Jan 14, 2019 at 10:05 AM Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com>> 
wrote:
Can anyone confirm that one can install one or more COP files, each requiring a 
reboot, back to back, and just reboot once, as opposed to after each?

Specifically:

UCCX Struts and DST Fix COP files.


itevomcid
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Odd phone Firmware upgrade issue - 8811 at firmware 10.3.1-20 won't upgrade on CUCM 12.0 but will on 10.5

[Ryan Ratliff (rratliff) via cisco-voip]

My current working theory is that CUCM 12 seems to use an EC certificate on the 
HTTPS service that newer phones use to download firmware 
(https://:6972) , and the old firmware doesn’t 
support it.  But if this was true, why didn’t the 8811 phone fall back to 
plain-old TFTP over UDP 69.

You are correct that TFTP uses an HTTPS cert on that port, but Jabber is the 
only client that uses 6972 (it’s based on the Tomcat cert as well). Endpoints 
will use TCP 6970 and until UCM 12.5 won’t do any HTTPS for TFTP.

The biggest difference I can think of between TFTP signed files on 12.0 and 
10.5 is that the key signing files on 12.0 is going be the SHA2 private key 
that goes with the ITLRecovery cert. On 10.5 it’s likely still a SHA1 key for 
the CallManager.pem cert.

Can you provide the specific error you saw regarding the default config file?

 - Ryan Ratliff

On Jan 8, 2019, at 11:53 PM, Dana Tong 
mailto:dana.t...@yellit.com.au>> wrote:

You said you were able to get them upgraded on a 10.5x cluster and then 
connected them to the 12.x cluster? Did you delete the ITL file when trying to 
update on the 12.x cluster? Or have I misinterpreted the steps you tried here.

Regards,
Dana


From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Brian V
Sent: Wednesday, 9 January 2019 12:23 PM
To: cisco-voip@puck.nether.net
Subject: [cisco-voip] Odd phone Firmware upgrade issue - 8811 at firmware 
10.3.1-20 won't upgrade on CUCM 12.0 but will on 10.5

Odd phone Firmware upgrade issue - 8811 at firmware 10.3.1-20 won't upgrade on 
CUCM 12.0 but will on 10.5

8811 shipped with 10.3.1.-20 firmware, CUCM 12 and CUCM 10.5 both have default 
load for 8811 phones set to 12-1-1SR1-4.

Customer acquired some new 8811 phones with super old firmware. Unboxed them 
and attached to the network where other IP phones (8851,8861) are up and 
registered to CUCM 12.0.1.22900-11.  The 8811 would not upgrade code.  It had 
an error in the phone log about the default xml config file.  Tried resetting 
security settings, full factory reset, etc..  Nothing worked.  I was suspecting 
the old "2-hop upgrade" might be needed, but that didn’t work either.

I then erased the phone again and connected it to a CUCM 10.5.2 SU2 system with 
the latest device pack.  The default phone load on this CUCM 10.5 was the same 
as CUCM 12.0 and the 8811 phone was still at firmware 10.3.1-20.  The phone 
upgraded code no problem.

Once the phone was on firmware 12.1.1SR1-4, it registered fine to CUCM 12.0.

My current working theory is that CUCM 12 seems to use an EC certificate on the 
HTTPS service that newer phones use to download firmware 
(https://:6972) , and the old firmware doesn’t 
support it.  But if this was true, why didn’t the 8811 phone fall back to 
plain-old TFTP over UDP 69.

I have a TAC case open, but not making much headway yet.

The big issue is that I have 100's more of these 8811 phones in boxes and 
having to unbox each of them and temporally connecting to a CUCM 10.5 to get 
firmware upgraded is not a task I'm looking forward to.

Recap:
8811 phone at firmware 10.3.1-20 firmware will directly upgrade to firmware 
12-1-1SR1-4. on CUCM 10.5 but won't do the exact same thing on CUCM 12.0-SU2

Any thoughts on this issue ?

Brian Van Benschoten
Presidio



___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] WebEx Room 70 upgrade to CE 9.5.2 No Camera detected

[Ryan Ratliff (rratliff) via cisco-voip]

It’s in the release notes for CE9, and as Matthew noted the fact that the .pkg 
file doesn’t exist is a good clue.

Not that it’s stopped long-time Tandberg folks from ripping the pkg files out 
of the cop.sgn and working very hard to make their cameras not pair.

 - Ryan Ratliff

On Jan 8, 2019, at 9:39 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

This is news to me. Hopefully it’s written down somewhere? 

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Matthew Loraditch
Sent: Tuesday, January 8, 2019 9:28 AM
To: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>; 
Matt Jacobson mailto:m4ttjacob...@gmail.com>>
Cc: cisco-voip (cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>) 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] WebEx Room 70 upgrade to CE 9.5.2 No Camera detected

I was mostly thinking of a bug, of course you shouldn’t normally have to do 
that.

But good to know Room kits don’t support packages. I’m not sure I knew that. 
Although I suppose I would figure it out when the downloads don’t exist!



Matthew Loraditch​

Sr. Network Engineer


p: 443.541.1518



w: www.heliontechnologies.com<http://www.heliontechnologies.com/>

 |

e: mloradi...@heliontechnologies.com<mailto:mloradi...@heliontechnologies.com>





<https://facebook.com/heliontech>



<https://twitter.com/heliontech>


<https://www.linkedin.com/company/helion-technologies>







From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Tuesday, January 8, 2019 9:21 AM
To: Matt Jacobson mailto:m4ttjacob...@gmail.com>>
Cc: Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>>; 
cisco-voip (cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>) 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] WebEx Room 70 upgrade to CE 9.5.2 No Camera detected

Stepped upgrades haven’t been a thing with TC/CE endpoints since TC6 days.

The only thing that will really bite you with the Quad Camera and P60 on the 
newer “Room” series is that you have to upgrade using the cop.sgn on the 
endpoint, or by telling it to load a .loads file in CUCM.
Older endpoints have camera firmware bundled in the .pkg file. That is not the 
case for the room series and if you somehow manage to get the pkg file uploaded 
to the endpoint it won’t have camera firmware.

Aside from the “you’re not upgrading it correctly” scenario, the logs from boot 
are pretty good for this type of thing. The swupgrade.log will print at boot 
all the local firmware the codec has to give to peripherals. It does require 
the camera to initiate the network pairing so the upgrade can happen, but I’ve 
only seen that go wonky a couple times.

 - Ryan Ratliff

On Jan 8, 2019, at 2:39 AM, Matt Jacobson 
mailto:m4ttjacob...@gmail.com>> wrote:

Looking at the ce9 release notes, it states tc7.3.6 and above support direct 
upgrades to whatever target versions. I’ve done loads of upgrades from old ce8 
or tc7.3.x straight to most recent ce9, never any step upgrade related 
problems. Occasionally there is the odd peripheral or touch panel thing, but a 
reboot fixes this.

On Tue, Jan 8, 2019 at 04:40 Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>> 
wrote:
Have you tried downgrading and then if that works stepping through 9.3 and 9.4 
to 9.5?

Get Outlook for iOS<https://aka.ms/o0ukef>



Matthew Loraditch​

Sr. Network Engineer


p: 443.541.1518



w: www.heliontechnologies.com<http://www.heliontechnologies.com/>

 |

e: mloradi...@heliontechnologies.com<mailto:mloradi...@heliontechnologies.com>





<https://facebook.com/heliontech>



<https://twitter.com/heliontech>


<https://www.linkedin.com/company/helion-technologies>








From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
on behalf of Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>>
Sent: Monday, January 7, 2019 5:37 PM
To: cisco-voip (cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>)
Subject: [cisco-voip] WebEx Room 70 upgrade to CE 9.5.2 No Camera detected


After upgrading a working CUCM registered Room 70 Single from CE 9.2.1 to 9.5.2 
it appears from logs the camera is still stuck at firmware 9.2.1

Screen shows “No Camera Connected”

So far I have upgraded about 7 Room 55s to CE 9.5.2 and haven’t had any 
problems.

I’ve opened a TAC case.


-jason



This email and all contents are subject to the following disclaimer:
&

Re: [cisco-voip] WebEx Room 70 upgrade to CE 9.5.2 No Camera detected

[Ryan Ratliff (rratliff) via cisco-voip]

Stepped upgrades haven’t been a thing with TC/CE endpoints since TC6 days.

The only thing that will really bite you with the Quad Camera and P60 on the 
newer “Room” series is that you have to upgrade using the cop.sgn on the 
endpoint, or by telling it to load a .loads file in CUCM.
Older endpoints have camera firmware bundled in the .pkg file. That is not the 
case for the room series and if you somehow manage to get the pkg file uploaded 
to the endpoint it won’t have camera firmware.

Aside from the “you’re not upgrading it correctly” scenario, the logs from boot 
are pretty good for this type of thing. The swupgrade.log will print at boot 
all the local firmware the codec has to give to peripherals. It does require 
the camera to initiate the network pairing so the upgrade can happen, but I’ve 
only seen that go wonky a couple times.

 - Ryan Ratliff

On Jan 8, 2019, at 2:39 AM, Matt Jacobson 
mailto:m4ttjacob...@gmail.com>> wrote:

Looking at the ce9 release notes, it states tc7.3.6 and above support direct 
upgrades to whatever target versions. I’ve done loads of upgrades from old ce8 
or tc7.3.x straight to most recent ce9, never any step upgrade related 
problems. Occasionally there is the odd peripheral or touch panel thing, but a 
reboot fixes this.

On Tue, Jan 8, 2019 at 04:40 Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>> 
wrote:
Have you tried downgrading and then if that works stepping through 9.3 and 9.4 
to 9.5?

Get Outlook for iOS


Matthew Loraditch​
Sr. Network Engineer

p: 443.541.1518


w: www.heliontechnologies.com|  
e: mloradi...@heliontechnologies.com
















From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
on behalf of Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>>
Sent: Monday, January 7, 2019 5:37 PM
To: cisco-voip (cisco-voip@puck.nether.net)
Subject: [cisco-voip] WebEx Room 70 upgrade to CE 9.5.2 No Camera detected



After upgrading a working CUCM registered Room 70 Single from CE 9.2.1 to 9.5.2 
it appears from logs the camera is still stuck at firmware 9.2.1

Screen shows “No Camera Connected”

So far I have upgraded about 7 Room 55s to CE 9.5.2 and haven’t had any 
problems.

I’ve opened a TAC case.


-jason



This email and all contents are subject to the following disclaimer:
"http://www.dimensiondata.com/emaildisclaimer;
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] CallManager and PLM 11.5.1 ports (firewall issues)

[Ryan Ratliff (rratliff) via cisco-voip]

I’d second the MTU problem, especially if frame 13 in the capture (the 1514 
one) has DF set.

Assuming this was taken at the remote CUCM, the retransmitted packets at the 
bottom are all 1514 bytes, so it’s very likely whatever frame 13 was never 
received by PLM.

 - Ryan Ratliff

On Dec 21, 2018, at 1:51 PM, Brian Meade 
mailto:bmead...@vt.edu>> wrote:

One thing to start looking at would be why the TLS Client Hello from PLM is 
showing as malformed.  There's some large packets in there as well (1482 and 
1514).  I'd bet you've got an MTU issue somewhere on the path.

Was the capture taken from the CUCM side?  I would bet it does since it's 
sending 1514 byte packets and those are the ones you're not getting Acks from 
PLM on.

On Fri, Dec 21, 2018 at 12:17 PM Anthony Holloway 
mailto:avholloway%2bcisco-v...@gmail.com>> 
wrote:
To echo what Brian is saying with his question: 443 is a server listening port 
(HTTPS), and therefore, the port on PLM talking to it, is an ephemeral client 
port, or random port, and wouldn't be documented anywhere.

This is similar to the whole UAS/UAC discussion with SIP and 5060.

Take this Outbound call for example, where my CUBE (UAS) is talking SIP with 
CUCM (UAC) (10.10.10.10) on CUCM's port 50124

PeerAddress=+16125551212
PeerId=2100
RemoteSignallingIPAddress=10.10.10.10
RemoteSignallingPort=50124
RemoteMediaIPAddress=10.20.20.20
RemoteMediaPort=28326
tx_DtmfRelay=rtp-nte
VAD = disabled
CoderTypeRate=g711ulaw

And then this Inbound call example, where my CUBE (UAC) is talking SIP with 
CUCM (UAS) (10.10.10.10) on CUCM's port 5060

PeerAddress=+16215551212
PeerId=2200
RemoteSignallingIPAddress=10.10.10.10
RemoteSignallingPort=5060
RemoteMediaIPAddress=10.20.20.20
RemoteMediaPort=28524
tx_DtmfRelay=rtp-nte
VAD = disabled
CoderTypeRate=g711ulaw

PS I get that output from the following command on CUBE: show call active voice 
| in PeerAddr|PeerId|RemoteS|RemoteM|Dtmf|Coder|VAD

Put that in an alias command, and you're a few short keystrokes away from some 
sexy data.

Now, back to the TCP re-transmissions, this is most likely a lower layer issue, 
and not a problem with PLM/CUCM.

A quick google search resulted in this article, which I found well written, but 
does go deep, with links to other articles which take you even deeper:

https://www.netcraftsmen.com/application-analysis-using-tcp-retransmissions-part-1/

Since you have the same PLM talking to multiple CUCM clusters, and only a 
problem with one cluster (or so it sounded like), I'd wager this problem is not 
with the PLM side, but is probably on the network path where it begins to be 
unique for this CUCM cluster in question, to include the CUCM cluster (or more 
specifically, the Publisher) itself.

As for logs, I'd imagine it wont show you anything more valuable than your 
packet capture; that's probably pretty telling.

Good luck.  I'm curious to see how this turns out.

On Fri, Dec 21, 2018 at 10:08 AM Brian Meade 
mailto:bmead...@vt.edu>> wrote:
Are you sure the destination port is 56648 and it's not the source port in that 
handshake?

On Fri, Dec 21, 2018 at 10:51 AM Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>> wrote:


Have a centralized Prime License Manager (PLM) for several clusters.   One 
cluster the Product Instance shows “Unknown error”.  We have firewalls between 
PLM and clusters.

I hit Test Connection in PLM and see traffic from source PLM coming in to 
remote cluster on TCP/443 and then I see traffic back source TCP/443 to 
destination TCP/56648 and then lots of TCP retransmissions.  The GUI in PLM 
says “Test Connection Failed.The cause of the error is unknown. Check the Cisco 
Prime License Manager log for details.”

I can’t find in the Port Usage guide where TCP/56648 is documented?  What log 
file do I look at via RTMT on PLM?



Jason Aarons, CCIEx2 No. 38564
Advanced Technology Consultant
Dimension Data
904-338-3245



This email and all contents are subject to the following disclaimer:
"http://www.dimensiondata.com/emaildisclaimer;
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Call Quality for Cisco 7821

[Ryan Ratliff (rratliff) via cisco-voip]

MOS as a reflection of call quality isn’t used any longer and has been replaced 
by concealment ratios (SCS, CCS).

This talks a bit about the difference.
https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-collaboration/white-paper-c11-735409.html

-Ryan

On Dec 13, 2018, at 4:19 AM, Ki Wi 
mailto:kiwi.vo...@gmail.com>> wrote:

Hi Group,
I'm aware that for Cisco 7821 is unable to generate the mos score.

Along the way, if it passes through the voice gateway, potentially the mos 
score can be generated or seem.

If it is peer to peer, is there a way to get a mos score? Do I really need to 
implement a sniffer or something for this purpose?

--
Regards,
Ki Wi
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] 11.x Mixed mode back to Insecure

[Ryan Ratliff (rratliff) via cisco-voip]

Many times (in the lab).

Pretty straight-forward, except you have to manually delete the CTL file on all 
the endpoints when done, so it’s generally not worth going out of mixed-mode.

-Ryan

On Dec 3, 2018, at 6:35 PM, Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>> wrote:



Anyone done a CUCM mixed mode back to Insecure via utils cmd? CUCM 11.x



Get Outlook for Android



This email and all contents are subject to the following disclaimer:
"http://www.dimensiondata.com/emaildisclaimer;
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] CallManager Process being restarted (8.5(1))

[Ryan Ratliff (rratliff) via cisco-voip]

There most certainly will be, but what it is depends on the hardware. It’s a 
server so there will be some type of management agent that has probably been 
trying to get somebody’s attention for a few weeks.

I wouldn’t be surprised if there is a non-green led or two if you look at the 
disks themselves.

-Ryan

On Dec 3, 2018, at 12:18 PM, Nilson Costa 
mailto:nilsonl...@gmail.com>> wrote:

Is there anyway to troubleshoot the disks to see which one is on defect?

Regards

Em seg, 3 de dez de 2018 às 15:08, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> escreveu:
#1  0x044a9935 in raise () from /lib/tls/libc.so.6
#2  0x044ab399 in abort () from /lib/tls/libc.so.6
#3  0x0842e457 in preabort () at ProcessCMProcMon.cpp:80
#4  0x0842fe7c in CMProcMon::verifySdlRouterServices () at 
ProcessCMProcMon.cpp:720

The ccm process is killing itself because it isn’t getting enough resources.

Nov 29 17:26:12 CMBL-03-01 local7 2 : 1: CMBL-03-01.localdomain: Nov 29 2018 
19:26:12.340 UTC :  %UC_CALLMANAGER-2-CallManagerFailure: 
%[HostName=CMBL-03-01][IPAddress=192.168.183.3][Reason=4][Text=CCM Intentional 
Abort: SignalName: SIPSetupInd, DestPID: SIPD[1:100:67:7]][AppID=Cisco 
CallManager][ClusterID=StandAloneCluster][NodeID=CMBL-03-01]: Indicates an 
internal failure in Unified CM

So much good info in the syslog.
Here’s a super-useful tidbit.

Nov 28 03:59:23 CMBL-03-01 local7 2 : 1543: CMBL-03-01.localdomain: Nov 28 2018 
05:59:23.840 UTC :  %UC_RTMT-2-RTMT_ALERT: 
%[AlertName=CallProcessingNodeCpuPegging][AlertDetail= Processor load over 
configured threshold for configured duration of time . Configured high 
threshold is 90 % tomcat (2 percent) uses most of the CPU.
 Processor_Info:

 For processor instance 1: %CPU= 99, %User= 2, %System= 2, %Nice= 0, %Idle= 0, 
%IOWait= 97, %softirq= 0, %irq= 0.

 For processor instance _Total: %CPU= 93, %User= 2, %System= 1, %Nice= 0, 
%Idle= 7, %IOWait= 90, %softirq= 0, %irq= 0.

 For processor instance 0: %CPU= 86, %User= 2, %System= 1, %Nice= 0, %Idle= 14, 
%IOWait= 83, %softirq= 0, %irq= 0.

 For processor instance 3: %CPU= 87, %User= 2, %System= 2, %Nice= 0, %Idle= 13, 
%IOWait= 83, %softirq= 0, %irq= 0.

 For processor instance 2: %CPU= 99, %User= 4, %System= 1, %Nice= 0, %Idle= 0, 
%IOWait= 96, %softirq= 0, %irq= 0.
 ][AppID=Cisco AMC Service][ClusterID=][NodeID=CMBL-03-01]: RTMT Alert

Looking back just a bit further, and there are a TON of these.

Nov 15 21:22:00 CMBL-03-01 local7 2 : 582: CMBL-03-01.localdomain: Nov 15 2018 
23:22:00.256 UTC :  %UC_RTMT-2-RTMT_ALERT: 
%[AlertName=HardwareFailure][AlertDetail= At Thu Nov 15 21:22:00 BRST 2018 
on node 192.168.183.3, the following HardwareFailure events generated:  
hwStringMatch : Nov 15 21:21:26 CMBL-03-01 daemon 4 Director Agent: 
LSIESG_DiskDrive_Modified 500605B0027C6D50 Command timeout on PD 01(e0xfc/s1) 
Path 50e116ac4ce2, CDB: 2a 00 10 98 b9 9d 00 00 08 00 Sev: 3. AppID : Cisco 
Syslog Agent ClusterID :  NodeID : CMBL-03-01  TimeStamp : Thu Nov 15 21:21:26 
BRST 2018   hwStringMatch : Nov 15 21:21:26 CMBL-03-01 daemon 4 Director Agent: 
LSIESG_AlertIndication 500605B0027C6D50 Command timeout on PD 01(e0xfc/s1) Path 
50e116ac4ce2, CDB: 2a 00 10 98 b9 9d 00 00 08 00 Sev: 3. AppID : Cisco 
Syslog Agent ClusterID :  NodeID : CMBL-03-01  TimeStamp : Thu Nov 15 21:21:27 
BRST 2018   hwStringMatch : Nov 15 21:21:26 CMBL-03-01][AppID=Cisco AMC 
Service][ClusterID=][NodeID=CMBL-03-01]: RTMT Alert

You’ve lost or are in the middle of losing at least one disk drive. It probably 
lost them all at the same time on the 13th and the OS marked the entire 
filesystem readonly.

-Ryan

On Dec 3, 2018, at 9:28 AM, Nilson Costa 
mailto:nilsonl...@gmail.com>> wrote:

Hello All,

I´m deploying a new CUCM on a customer that has an old one working just as call 
routing for a Genesys system for call center.

As you can see the picture below, they have some MGCP Gateways connected to 
this CUCM where the calls come in and via some CTI route points, controlled by 
Genesys, route the call to to 2 Avaya PBX or to a another CUCM


On november 13th they lost access to Tomcat on the Publisher, when we looked at 
the server several services were restarting including Cisco CallManager, just 
on the Publisher.
We decided to reboot the whole cluster, but after the reboot we are facing some 
wierd issues that are not that relevant, I think, but there is one which we are 
really worried

The Cisco CallManager process are still restarting ramdomly and generating some 
coredumps I´m attaching this logs here also I´m attaching the syslogs from the 
publisher.

Can anybody here on the group help me finding out what is triggering the Cisco 
CallManager restart?

--
Nilson Lino da Costa Junior
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip



--
Nil

Re: [cisco-voip] CallManager Process being restarted (8.5(1))

[Ryan Ratliff (rratliff) via cisco-voip]

#1  0x044a9935 in raise () from /lib/tls/libc.so.6
#2  0x044ab399 in abort () from /lib/tls/libc.so.6
#3  0x0842e457 in preabort () at ProcessCMProcMon.cpp:80
#4  0x0842fe7c in CMProcMon::verifySdlRouterServices () at 
ProcessCMProcMon.cpp:720

The ccm process is killing itself because it isn’t getting enough resources.

Nov 29 17:26:12 CMBL-03-01 local7 2 : 1: CMBL-03-01.localdomain: Nov 29 2018 
19:26:12.340 UTC :  %UC_CALLMANAGER-2-CallManagerFailure: 
%[HostName=CMBL-03-01][IPAddress=192.168.183.3][Reason=4][Text=CCM Intentional 
Abort: SignalName: SIPSetupInd, DestPID: SIPD[1:100:67:7]][AppID=Cisco 
CallManager][ClusterID=StandAloneCluster][NodeID=CMBL-03-01]: Indicates an 
internal failure in Unified CM

So much good info in the syslog.
Here’s a super-useful tidbit.

Nov 28 03:59:23 CMBL-03-01 local7 2 : 1543: CMBL-03-01.localdomain: Nov 28 2018 
05:59:23.840 UTC :  %UC_RTMT-2-RTMT_ALERT: 
%[AlertName=CallProcessingNodeCpuPegging][AlertDetail= Processor load over 
configured threshold for configured duration of time . Configured high 
threshold is 90 % tomcat (2 percent) uses most of the CPU.
 Processor_Info:

 For processor instance 1: %CPU= 99, %User= 2, %System= 2, %Nice= 0, %Idle= 0, 
%IOWait= 97, %softirq= 0, %irq= 0.

 For processor instance _Total: %CPU= 93, %User= 2, %System= 1, %Nice= 0, 
%Idle= 7, %IOWait= 90, %softirq= 0, %irq= 0.

 For processor instance 0: %CPU= 86, %User= 2, %System= 1, %Nice= 0, %Idle= 14, 
%IOWait= 83, %softirq= 0, %irq= 0.

 For processor instance 3: %CPU= 87, %User= 2, %System= 2, %Nice= 0, %Idle= 13, 
%IOWait= 83, %softirq= 0, %irq= 0.

 For processor instance 2: %CPU= 99, %User= 4, %System= 1, %Nice= 0, %Idle= 0, 
%IOWait= 96, %softirq= 0, %irq= 0.
 ][AppID=Cisco AMC Service][ClusterID=][NodeID=CMBL-03-01]: RTMT Alert

Looking back just a bit further, and there are a TON of these.

Nov 15 21:22:00 CMBL-03-01 local7 2 : 582: CMBL-03-01.localdomain: Nov 15 2018 
23:22:00.256 UTC :  %UC_RTMT-2-RTMT_ALERT: 
%[AlertName=HardwareFailure][AlertDetail= At Thu Nov 15 21:22:00 BRST 2018 
on node 192.168.183.3, the following HardwareFailure events generated:  
hwStringMatch : Nov 15 21:21:26 CMBL-03-01 daemon 4 Director Agent: 
LSIESG_DiskDrive_Modified 500605B0027C6D50 Command timeout on PD 01(e0xfc/s1) 
Path 50e116ac4ce2, CDB: 2a 00 10 98 b9 9d 00 00 08 00 Sev: 3. AppID : Cisco 
Syslog Agent ClusterID :  NodeID : CMBL-03-01  TimeStamp : Thu Nov 15 21:21:26 
BRST 2018   hwStringMatch : Nov 15 21:21:26 CMBL-03-01 daemon 4 Director Agent: 
LSIESG_AlertIndication 500605B0027C6D50 Command timeout on PD 01(e0xfc/s1) Path 
50e116ac4ce2, CDB: 2a 00 10 98 b9 9d 00 00 08 00 Sev: 3. AppID : Cisco 
Syslog Agent ClusterID :  NodeID : CMBL-03-01  TimeStamp : Thu Nov 15 21:21:27 
BRST 2018   hwStringMatch : Nov 15 21:21:26 CMBL-03-01][AppID=Cisco AMC 
Service][ClusterID=][NodeID=CMBL-03-01]: RTMT Alert

You’ve lost or are in the middle of losing at least one disk drive. It probably 
lost them all at the same time on the 13th and the OS marked the entire 
filesystem readonly.

-Ryan

On Dec 3, 2018, at 9:28 AM, Nilson Costa 
mailto:nilsonl...@gmail.com>> wrote:

Hello All,

I´m deploying a new CUCM on a customer that has an old one working just as call 
routing for a Genesys system for call center.

As you can see the picture below, they have some MGCP Gateways connected to 
this CUCM where the calls come in and via some CTI route points, controlled by 
Genesys, route the call to to 2 Avaya PBX or to a another CUCM


On november 13th they lost access to Tomcat on the Publisher, when we looked at 
the server several services were restarting including Cisco CallManager, just 
on the Publisher.
We decided to reboot the whole cluster, but after the reboot we are facing some 
wierd issues that are not that relevant, I think, but there is one which we are 
really worried

The Cisco CallManager process are still restarting ramdomly and generating some 
coredumps I´m attaching this logs here also I´m attaching the syslogs from the 
publisher.

Can anybody here on the group help me finding out what is triggering the Cisco 
CallManager restart?

--
Nilson Lino da Costa Junior
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Telepresence DX 80 CE 8.x to 9.5 and CTL vs ITL

[Ryan Ratliff (rratliff) via cisco-voip]

CTS is immersive endpoints, TX, CTS, IX, and the like.

TC and CE both have supported ITL and CTL for quite some time. There was 
probably just a bug in 8.2 that was fixed in 9.5.

I know for sure TVS was pretty broken before a recent 9.x version.

-Ryan

On Nov 30, 2018, at 7:24 PM, Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>> wrote:



Found the problem, appears CTS only used CTL and not ITL.  Did that change with 
CE 9.5 ?
https://community.cisco.com/t5/telepresence-and-video/telepresence-endpoints-itl-security-by-default/td-p/2702643


Pubs and subs have CTL, but not new subs.
admin:show ctl
Length of CTL file: 0
CTL File not found. Please run CTLClient plugin or run the CLI - utils ctl.. to 
generate the CTL file.
Error parsing the CTL File.


Looks like they ran a USB hardware eToken on the cluster,  I’d rather do a 
“utils ctl set-cluster non-secure-mode” and reboot cluster then convert to 
Tokenless CTL.

Jason Aarons, CCIEx2 No. 38564
Advanced Technology Consultant
Dimension Data
904-338-3245

From: Jason Aarons (Americas)
Sent: Friday, November 30, 2018 6:23 PM
To: cisco-voip (cisco-voip@puck.nether.net) 
mailto:cisco-voip@puck.nether.net>>
Subject: Telepresence DX 80 CE 8.x to 9.5 and CTL vs ITL

Anyone familiar about changes in CE endpoints going from 8.2 to 9.5 ?  Did 
older video endpoints use CTL and maybe change to ITL?



I added some new subscribers and TFTP server (realized now without running the 
capf utility) , and noticed the DX80s have issues talking to new subs/tftp (we 
are in Mixed Mode) but if I upgrade 9.5+ CE they work fine.  Maybe the upgrade 
is resetting security settings?  Kind of stumped why upgrade fixes problem.  
Also think I need to run a “tils ctl set-cluster non-secure-mode” and reboot 
cluster.  Don’t really need mixed-mode.






Jason Aarons, CCIEx2 No. 38564
Advanced Technology Consultant
Dimension Data
904-338-3245



This email and all contents are subject to the following disclaimer:
"http://www.dimensiondata.com/emaildisclaimer;
 ___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] TelePresence DX80 and CUCM 11.5

[Ryan Ratliff (rratliff) via cisco-voip]

I’m not sure there is any appetite for changing device names inside the UCM 
database, regardless of branding.

-Ryan

On Nov 14, 2018, at 4:57 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:

Something else to note: I just went to upgrade a Telepresence DX80 to CE 9.5, 
and the name of the device on Cisco.com<http://Cisco.com> is now WebEx DX80.  I 
thought this was a change in architecture, like when we went from Cisco DX80 
(Android) to Telepresence DX80 (CE); however, it appears to be a marketing name 
change only, and not actually a new device type.

I suspect the Spark Room Kit name changes will be the same, and you wont see 
the new names in CUCM until after an upgrade or devpack which contains them.  
But for now, you can ignore the name.

On Wed, Nov 14, 2018 at 1:12 PM Ryan Ratliff (rratliff) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:
Also, since working with these video endpoints may be new to many traditional 
UCM customers, unlike the various phone models that each have their own unique 
configuration options in UCM, endpoints that run TC and/or CE share the same 
set of configurable options in CUCM, regardless of platform.

Until you see a huge overhaul in this (in an upcoming release of UCM) expect 
that when it comes to UCM provisioning, they all act the same and take the same 
parameters.


-Ryan

On Nov 14, 2018, at 2:00 PM, Ryan Ratliff (rratliff) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:

That calls for judicious use of the Feedback button :)

-Ryan

On Nov 14, 2018, at 1:58 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Interesting. I don’t see the roomkit (only pro) listed in those boxes, that’s 
why I didn’t pay heed.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:53 PM, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:

Not specific to 9.4, but 
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/compat/matrix/CMDP_BK_CCBDA741_00_cucm-device-package-compatibility-matrix/CMDP_BK_CCBDA741_00_cucm-device-package-compatibility-matrix_chapter_00.html#reference_C67FF54CF76D6B85FED05DC56940C5B0
 has an entry for “Cisco Collaboration Endpoint Software 9”.

-Ryan

On Nov 14, 2018, at 1:46 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Thanks Ryan.

I found it odd though that I couldn’t find mention of it in any of the devpack 
release notes (dated after su4 release date).

How do we know exactly which dev pack added it?

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:30 PM, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:

That’s 100% related to the feature.

The CE9 release notes covers both of these, in the updates section for 9.4.
The endpoint side was introduced in 9.2, just the CUCM side was in 9.4 (and the 
device pack that accompanied it).

-Ryan

On Nov 14, 2018, at 1:25 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Not sure if related, but I had to install latest devpack to get settings menu 
option in CUCM config screen for WebEx roomkit. Option wasn’t there in 
11.5(1)su4.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:03 PM, Ryan Ratliff (rratliff) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:

You need CE9.4 on the DX for it to apply that setting from CUCM.

-Ryan

On Nov 14, 2018, at 10:42 AM, Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>> wrote:



I have a CUCM 11.5.1SU5 registered DX80 running CE 9.2.2

In CUCM under Device > Phone was does Settings Menu Mode supposed to do if set 
to Restricted?  I set it to Restricted and find I can still edit setting on the 
screen gui of DX80.  Nothing seems restricted, f

Re: [cisco-voip] TelePresence DX80 and CUCM 11.5

[Ryan Ratliff (rratliff) via cisco-voip]

Also, since working with these video endpoints may be new to many traditional 
UCM customers, unlike the various phone models that each have their own unique 
configuration options in UCM, endpoints that run TC and/or CE share the same 
set of configurable options in CUCM, regardless of platform.

Until you see a huge overhaul in this (in an upcoming release of UCM) expect 
that when it comes to UCM provisioning, they all act the same and take the same 
parameters.


-Ryan

On Nov 14, 2018, at 2:00 PM, Ryan Ratliff (rratliff) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:

That calls for judicious use of the Feedback button :)

-Ryan

On Nov 14, 2018, at 1:58 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Interesting. I don’t see the roomkit (only pro) listed in those boxes, that’s 
why I didn’t pay heed.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:53 PM, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:

Not specific to 9.4, but 
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/compat/matrix/CMDP_BK_CCBDA741_00_cucm-device-package-compatibility-matrix/CMDP_BK_CCBDA741_00_cucm-device-package-compatibility-matrix_chapter_00.html#reference_C67FF54CF76D6B85FED05DC56940C5B0
 has an entry for “Cisco Collaboration Endpoint Software 9”.

-Ryan

On Nov 14, 2018, at 1:46 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Thanks Ryan.

I found it odd though that I couldn’t find mention of it in any of the devpack 
release notes (dated after su4 release date).

How do we know exactly which dev pack added it?

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:30 PM, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:

That’s 100% related to the feature.

The CE9 release notes covers both of these, in the updates section for 9.4.
The endpoint side was introduced in 9.2, just the CUCM side was in 9.4 (and the 
device pack that accompanied it).

-Ryan

On Nov 14, 2018, at 1:25 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Not sure if related, but I had to install latest devpack to get settings menu 
option in CUCM config screen for WebEx roomkit. Option wasn’t there in 
11.5(1)su4.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:03 PM, Ryan Ratliff (rratliff) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:

You need CE9.4 on the DX for it to apply that setting from CUCM.

-Ryan

On Nov 14, 2018, at 10:42 AM, Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>> wrote:



I have a CUCM 11.5.1SU5 registered DX80 running CE 9.2.2

In CUCM under Device > Phone was does Settings Menu Mode supposed to do if set 
to Restricted?  I set it to Restricted and find I can still edit setting on the 
screen gui of DX80.  Nothing seems restricted, factory reset, time zone, etc.

Just trying to limit end users for editing some items.

Jason Aarons, CCIEx2 No. 38564
Advanced Technology Consultant
Dimension Data
904-338-3245



This email and all contents are subject to the following disclaimer:
"http://www.dimensiondata.com/emaildisclaimer;<http://www.dimensiondata.com/Global/Policies/Pages/Email-Disclaimer.aspx>
 ___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip



___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
ht

Re: [cisco-voip] TelePresence DX80 and CUCM 11.5

[Ryan Ratliff (rratliff) via cisco-voip]

That calls for judicious use of the Feedback button :)

-Ryan

On Nov 14, 2018, at 1:58 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Interesting. I don’t see the roomkit (only pro) listed in those boxes, that’s 
why I didn’t pay heed.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:53 PM, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:

Not specific to 9.4, but 
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/compat/matrix/CMDP_BK_CCBDA741_00_cucm-device-package-compatibility-matrix/CMDP_BK_CCBDA741_00_cucm-device-package-compatibility-matrix_chapter_00.html#reference_C67FF54CF76D6B85FED05DC56940C5B0
 has an entry for “Cisco Collaboration Endpoint Software 9”.

-Ryan

On Nov 14, 2018, at 1:46 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Thanks Ryan.

I found it odd though that I couldn’t find mention of it in any of the devpack 
release notes (dated after su4 release date).

How do we know exactly which dev pack added it?

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:30 PM, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:

That’s 100% related to the feature.

The CE9 release notes covers both of these, in the updates section for 9.4.
The endpoint side was introduced in 9.2, just the CUCM side was in 9.4 (and the 
device pack that accompanied it).

-Ryan

On Nov 14, 2018, at 1:25 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Not sure if related, but I had to install latest devpack to get settings menu 
option in CUCM config screen for WebEx roomkit. Option wasn’t there in 
11.5(1)su4.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:03 PM, Ryan Ratliff (rratliff) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:

You need CE9.4 on the DX for it to apply that setting from CUCM.

-Ryan

On Nov 14, 2018, at 10:42 AM, Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>> wrote:



I have a CUCM 11.5.1SU5 registered DX80 running CE 9.2.2

In CUCM under Device > Phone was does Settings Menu Mode supposed to do if set 
to Restricted?  I set it to Restricted and find I can still edit setting on the 
screen gui of DX80.  Nothing seems restricted, factory reset, time zone, etc.

Just trying to limit end users for editing some items.

Jason Aarons, CCIEx2 No. 38564
Advanced Technology Consultant
Dimension Data
904-338-3245



This email and all contents are subject to the following disclaimer:
"http://www.dimensiondata.com/emaildisclaimer;<http://www.dimensiondata.com/Global/Policies/Pages/Email-Disclaimer.aspx>
 ___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip



___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] TelePresence DX80 and CUCM 11.5

[Ryan Ratliff (rratliff) via cisco-voip]

Not specific to 9.4, but 
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/compat/matrix/CMDP_BK_CCBDA741_00_cucm-device-package-compatibility-matrix/CMDP_BK_CCBDA741_00_cucm-device-package-compatibility-matrix_chapter_00.html#reference_C67FF54CF76D6B85FED05DC56940C5B0
 has an entry for “Cisco Collaboration Endpoint Software 9”.

-Ryan

On Nov 14, 2018, at 1:46 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Thanks Ryan.

I found it odd though that I couldn’t find mention of it in any of the devpack 
release notes (dated after su4 release date).

How do we know exactly which dev pack added it?

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:30 PM, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:

That’s 100% related to the feature.

The CE9 release notes covers both of these, in the updates section for 9.4.
The endpoint side was introduced in 9.2, just the CUCM side was in 9.4 (and the 
device pack that accompanied it).

-Ryan

On Nov 14, 2018, at 1:25 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Not sure if related, but I had to install latest devpack to get settings menu 
option in CUCM config screen for WebEx roomkit. Option wasn’t there in 
11.5(1)su4.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:03 PM, Ryan Ratliff (rratliff) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:

You need CE9.4 on the DX for it to apply that setting from CUCM.

-Ryan

On Nov 14, 2018, at 10:42 AM, Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>> wrote:



I have a CUCM 11.5.1SU5 registered DX80 running CE 9.2.2

In CUCM under Device > Phone was does Settings Menu Mode supposed to do if set 
to Restricted?  I set it to Restricted and find I can still edit setting on the 
screen gui of DX80.  Nothing seems restricted, factory reset, time zone, etc.

Just trying to limit end users for editing some items.

Jason Aarons, CCIEx2 No. 38564
Advanced Technology Consultant
Dimension Data
904-338-3245



This email and all contents are subject to the following disclaimer:
"http://www.dimensiondata.com/emaildisclaimer;<http://www.dimensiondata.com/Global/Policies/Pages/Email-Disclaimer.aspx>
 ___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] TelePresence DX80 and CUCM 11.5

[Ryan Ratliff (rratliff) via cisco-voip]

That’s 100% related to the feature.

The CE9 release notes covers both of these, in the updates section for 9.4.
The endpoint side was introduced in 9.2, just the CUCM side was in 9.4 (and the 
device pack that accompanied it).

-Ryan

On Nov 14, 2018, at 1:25 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Not sure if related, but I had to install latest devpack to get settings menu 
option in CUCM config screen for WebEx roomkit. Option wasn’t there in 
11.5(1)su4.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 14, 2018, at 1:03 PM, Ryan Ratliff (rratliff) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:

You need CE9.4 on the DX for it to apply that setting from CUCM.

-Ryan

On Nov 14, 2018, at 10:42 AM, Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>> wrote:



I have a CUCM 11.5.1SU5 registered DX80 running CE 9.2.2

In CUCM under Device > Phone was does Settings Menu Mode supposed to do if set 
to Restricted?  I set it to Restricted and find I can still edit setting on the 
screen gui of DX80.  Nothing seems restricted, factory reset, time zone, etc.

Just trying to limit end users for editing some items.

Jason Aarons, CCIEx2 No. 38564
Advanced Technology Consultant
Dimension Data
904-338-3245



This email and all contents are subject to the following disclaimer:
"http://www.dimensiondata.com/emaildisclaimer;<http://www.dimensiondata.com/Global/Policies/Pages/Email-Disclaimer.aspx>
 ___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] TelePresence DX80 and CUCM 11.5

[Ryan Ratliff (rratliff) via cisco-voip]

You need CE9.4 on the DX for it to apply that setting from CUCM.

-Ryan

On Nov 14, 2018, at 10:42 AM, Jason Aarons (Americas) 
mailto:jason.aar...@dimensiondata.com>> wrote:



I have a CUCM 11.5.1SU5 registered DX80 running CE 9.2.2

In CUCM under Device > Phone was does Settings Menu Mode supposed to do if set 
to Restricted?  I set it to Restricted and find I can still edit setting on the 
screen gui of DX80.  Nothing seems restricted, factory reset, time zone, etc.

Just trying to limit end users for editing some items.

Jason Aarons, CCIEx2 No. 38564
Advanced Technology Consultant
Dimension Data
904-338-3245



This email and all contents are subject to the following disclaimer:
"http://www.dimensiondata.com/emaildisclaimer;
 ___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] anonymous proximity issues?

[Ryan Ratliff (rratliff) via cisco-voip]

Being EDU I foresee an engineering student’s senior project to create a device 
to wash out the 20-22kHz ultrasound, making an invisible fence for proximity's 
ultrasound when used in open spaces.

Also, for all of your Proximity questions:
https://community.cisco.com/t5/mobile-applications-documents/troubleshooting-guide-cisco-proximity/ta-p/3148841#toc-hId--2135534734


-Ryan

On Oct 11, 2018, at 10:32 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


H, I don’t remember seeing anything on the screen when I connected via 
proximity. Will have to check again. My head was likely looking down at my 
device.

The idea of macros is nice, but not sure it really helps secure the system 
while they actually want to use it.

It’s not ideal, but in EDUs, there’s very little segmentation when it comes to 
a student logging into wireless vs staff/faculty. Not to say all students are 
looking to cause trouble, but, well, you know.

And in today’s cubicle environment, those frequencies are reaching far outside 
the glass walls. But I’ll need to do more testing once the device is in place. 
Even a quick site survey might appease our concerns.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Oct 11, 2018, at 9:50 PM, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:

It’s not PIN controlled, the idea is that if the device is in range of the 
ultrasound and on a network that has https connectivity to the codec then it 
can connect.

Users in the room also see a notification on the screen when a proximity client 
connects, so it’s not hidden.

If you want your users to have control over toggling the feature take an 
example from https://github.com/CiscoDevNet/roomdevices-macros-samples and 
create a macro that works with in-room-controls to give your users a button to 
flip the config on/off.

-Ryan

On Oct 10, 2018, at 5:04 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Unless I am completely mistaken, it seems that proximity participation in a t/p 
session enabled for proximity is completely anonymous without acknowledgement 
from the t/p operator side of things. At least one document says that if you 
are afraid of people outside your office participating, you should disable 
proximity on your device. Wait, what?

I read somewhere where you can lower the proximity HF volume(?), but that’s 
like lowering the wifi antenna power to restrict wifi access.

I’m thinking of enabling only proximity itself and not sharing, so at least 
webex users can select the endpoint. I mean, they may call a user’s endpoint, 
but in the end, they have to accept the call. No biggie there.

But it really is a shame that there was no acknowledgement or PIN displayed, 
like on an Apple TV when you want to join the session.

Does anyone know if proximity will be PIN controlled (or anything like this) 
any time soon?

Lelio


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] [EXTERNAL] Re: 8832 Design Issue?

[Ryan Ratliff (rratliff) via cisco-voip]

I think this has been covered on this list before but that specific issue is 
NOT a problem that requires an RMA to resolve.

It’s an incompatibility of older loads with the PoE injector.
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cuipph/8832/firmware/12-1-1/cs88_b_conference-8832-rn-for-12_1_1.html#concept_E6B0DE96F47A653545A3BF51ED1C1E45

You just need to get it powered up and back on the network with the ethernet 
injector or force it to boot to the alternate load (after installing a newer 
load on CUCM).

-Ryan

On Oct 9, 2018, at 3:49 PM, JASON BURWELL 
mailto:jason.burw...@foundersfcu.com>> wrote:

Yes, also we hit some bugs with an early FW release. Once it downgraded from 
the factory load, it would brick the phone. Must be a major issue because I had 
to wait almost 2 months for RMA fulfillment. Now that we are running current 
firmware with that bugfix, we seem to be past that issue but now seeing this 
problem.


From: Nimloth [mailto:niml...@nimloth.pl]
Sent: Tuesday, October 09, 2018 3:40 PM
To: JASON BURWELL 
mailto:jason.burw...@foundersfcu.com>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: [EXTERNAL] Re: [cisco-voip] 8832 Design Issue?

CAUTION: This email originated outside of Founders Federal Credit Union. Do not 
click links or open attachments unless you recognize the sender and know the 
content is safe.

To be honest I won't deploy 8832 in my org as we still struggling to get one up 
and running since few months. Few TAC/RMA already in progress.
W dniu 9 paź 2018, o 20:35, użytkownik JASON BURWELL 
mailto:jason.burw...@foundersfcu.com>> napisał:
Has anyone else using 8832s had a problem with the USB-C cord coming unplugged 
from the phone when people grab it to slide or move the phone towards them? 
Starting to see some issues with this and I only have a few deployed so far. 
Hoping someone has figured out a workaround or clip to help retain the cord.



This was never a problem before because all the other Cisco Conf phones are not 
only held in by RJ45 clip but also cord clips made in to the base. The 8832 has 
neither, just USB-C cord that plugs in to the back. Thanks! Jason





cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] anonymous proximity issues?

[Ryan Ratliff (rratliff) via cisco-voip]

It’s not PIN controlled, the idea is that if the device is in range of the 
ultrasound and on a network that has https connectivity to the codec then it 
can connect.

Users in the room also see a notification on the screen when a proximity client 
connects, so it’s not hidden.

If you want your users to have control over toggling the feature take an 
example from https://github.com/CiscoDevNet/roomdevices-macros-samples and 
create a macro that works with in-room-controls to give your users a button to 
flip the config on/off.

-Ryan

On Oct 10, 2018, at 5:04 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Unless I am completely mistaken, it seems that proximity participation in a t/p 
session enabled for proximity is completely anonymous without acknowledgement 
from the t/p operator side of things. At least one document says that if you 
are afraid of people outside your office participating, you should disable 
proximity on your device. Wait, what?

I read somewhere where you can lower the proximity HF volume(?), but that’s 
like lowering the wifi antenna power to restrict wifi access.

I’m thinking of enabling only proximity itself and not sharing, so at least 
webex users can select the endpoint. I mean, they may call a user’s endpoint, 
but in the end, they have to accept the call. No biggie there.

But it really is a shame that there was no acknowledgement or PIN displayed, 
like on an Apple TV when you want to join the session.

Does anyone know if proximity will be PIN controlled (or anything like this) 
any time soon?

Lelio


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook



___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Roomkit only dials SIP uri from phonebook :(

[Ryan Ratliff (rratliff) via cisco-voip]

There have been a number of bugs raised for this since CE came out. You can 
dial the DN if you search via the admin web page under call control, but not in 
the Touch.

As for getting URIs on your DNs, that can be done automatically with device 
association and setting the primary DN for the end user.

-Ryan

On Sep 29, 2018, at 12:18 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Finally got phonebook working within my roomkit. Turned out, the partner forgot 
to disable the “8.0” enterprise parameter after our migration and TVS 
certificate wasn’t making its way to the unit.

Anyways, when I select a search result, my only option is to dial the SIP uri 
(email address in our case) and no option to select the telephone number entry. 
On the sx20 running tc software, at least I can drill down and select the 
telephone number.

Anyone find a way around this? I mean, other than manually adding SIP Uris to 
every DN?


-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] do video endpoints like SX20 and roomkit display alerting information of called number?

[Ryan Ratliff (rratliff) via cisco-voip]

I’m afraid it’s an intentional behavior at this point to provide a similar 
experience whether the endpoint is registered to Expressway/VCS or UCM. There 
is an open enhancement to change it for UCM-registered endpoints but it has not 
been implemented (nor on any roadmap that I’m aware of).

-Ryan

On Oct 2, 2018, at 9:21 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Ugh. Turns out it’s a bug. With likely no resolution. This really irks me.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi70756/

Symptom:
CE9, CE8 and TC7 codecs do not change remote party name while dialing, only 
after call is connected.
We can see Remote-Party-ID header present in both 180 Ringing and 200 OK, but 
it is not processed after 180 Ringing by codec SW.

Known Fixed Releases:

(0)

No release planned to fix this bug


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook



From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Lelio Fulgenzi
Sent: Monday, September 24, 2018 6:06 PM
To: voyp list, cisco-voip 
(cisco-voip@puck.nether.net) 
mailto:cisco-voip@puck.nether.net>>
Subject: [cisco-voip] do video endpoints like SX20 and roomkit display alerting 
information of called number?


OK – coming at this from a different angle…

For those of you who have multiple video endpoints like SX20 and roomkits 
installed, when you dial between those units and other DNs, like Jabber or 
hardphones, do you not see the Alerting Name programmed on the far end called 
party displayed on your screen?

I could have sworn this worked in the past.

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook



___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] webkit fun!

[Ryan Ratliff (rratliff) via cisco-voip]

That’s the one. You can use it for phones too :)

-Ryan

On Sep 17, 2018, at 4:07 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Oh Snap – looks like there’s a new System > Phone NTP Reference option in CUCM 
Admin….

IS this what you’re talking about?

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Lelio Fulgenzi
Sent: Monday, September 17, 2018 4:01 PM
To: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!


Provisioned by CUCM how, though? We’re using an external DHCP server without 
any NTP options set. And I don’t see any NTP settings options on the config 
page.

From the admin guide, there’s only these options:

Value space: Auto/Manual/Off Auto: The system will use an NTP server for time 
reference. As default, the server address will be obtained from the network's 
DHCP server. If a DHCP server is not used, or if the DHCP server does not 
provide an NTP server address, the NTP server address that is specified in the 
NetworkServices NTP Server [n] Address setting will be used. Manual: The system 
will use the NTP server that is specified in the NetworkServices NTP Server [n] 
Address setting for time reference. Off: The system will not use an NTP server. 
The NetworkServices NTP Server [n] Address setting will be ignored.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Monday, September 17, 2018 3:52 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

NTP will be provisioned by CUCM, but they must be unicast sources and not 
directed broadcast (the default).

Turning provisioning off/cucm just forces the endpoint to go get a new config 
file immediately.

When in doubt, turn up extended logging, toggle provisioning, then go look at 
the logs. They are very well done on these endpoints.

-Ryan

On Sep 17, 2018, at 3:40 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


OK I think I found what I was seeing – it seems (and this is likely the 
anticipated behavior), that if I change the device’s provisioning from CUCM to 
OFF and from OFF to CUCM, it looses all custom configurations. For example, 
something simple as setting NTP to manual and entering my NTP servers works 
until I change the provisioning, then those settings are lost.

Seems like a drag, but I understand. But, still. Ugh.

I wish that CUCM interface had all of these settings to be provisioned.

Now to figure out why a user with user privileges is allowed to change the 
provisioning method !

Lelio


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Monday, September 17, 2018 12:31 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

Yes you should.  Save on endpoint, refresh on CUCM to see the changes.

-Ryan


On Sep 17, 2018, at 12:11 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Will do!

I’m hoping I will see any changes reflected in the CUCM configuration pages, 
right? So if I make the change on the unit and then go back to the config page, 
the setting will be different?

It’s just an easier test for me at this point.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Monday, September 17, 2018 12:07 PM
To: Leli

Re: [cisco-voip] webkit fun!

[Ryan Ratliff (rratliff) via cisco-voip]

NTP will be provisioned by CUCM, but they must be unicast sources and not 
directed broadcast (the default).

Turning provisioning off/cucm just forces the endpoint to go get a new config 
file immediately.

When in doubt, turn up extended logging, toggle provisioning, then go look at 
the logs. They are very well done on these endpoints.

-Ryan

On Sep 17, 2018, at 3:40 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


OK I think I found what I was seeing – it seems (and this is likely the 
anticipated behavior), that if I change the device’s provisioning from CUCM to 
OFF and from OFF to CUCM, it looses all custom configurations. For example, 
something simple as setting NTP to manual and entering my NTP servers works 
until I change the provisioning, then those settings are lost.

Seems like a drag, but I understand. But, still. Ugh.

I wish that CUCM interface had all of these settings to be provisioned.

Now to figure out why a user with user privileges is allowed to change the 
provisioning method !

Lelio


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Monday, September 17, 2018 12:31 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

Yes you should.  Save on endpoint, refresh on CUCM to see the changes.

-Ryan


On Sep 17, 2018, at 12:11 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Will do!

I’m hoping I will see any changes reflected in the CUCM configuration pages, 
right? So if I make the change on the unit and then go back to the config page, 
the setting will be different?

It’s just an easier test for me at this point.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Monday, September 17, 2018 12:07 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

If you troubleshoot locally make sure to turn on extended debugging first, 
otherwise you won’t see the content of SIP messages.

-Ryan



On Sep 17, 2018, at 11:59 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Wow. Thanks so much Ryan!

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Monday, September 17, 2018 11:55 AM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

Here’s an example.



2018-09-17T11:49:50.605-04:00 rratliff-rkplus appl[1750]: CuilApp[1]: 
Successfully changed configuration 'Configuration/Proximity/Mode' to 'On' by 
admin from .



2018-09-17T11:49:55.806-04:00 rratliff-rkplus appl[1750]: PROV[3]: 
[sendThrottledConfig] Notifying SIP stack about vendor config




2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket I: SIP Msg: 
Outgoing => REFER, CSeq: 101 REFER, Remote: 172.18.120.72:5060, CallId: 
db63adeda53772b3ac1cf516c4ddbe60

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: REFER 
sip:172.18.120.72 SIP/2.0

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: Via: 
SIP/2.0/TCP 
10.80.114.79:44255;branch=z9hG4bKe9a85770060f257bc99036fc6abfdeb4;rport

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Call-ID: db63adeda53772b3ac1cf516c4ddbe60

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: CSeq: 
101 REFER

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Content-Id: mailto:e6929c13a865eb5b@127.0.0.1>>

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Contact: 
;sip.cisco.multistream

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Refer-To: 

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Refe

Re: [cisco-voip] webkit fun!

[Ryan Ratliff (rratliff) via cisco-voip]

Yes you should.  Save on endpoint, refresh on CUCM to see the changes.

-Ryan

On Sep 17, 2018, at 12:11 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Will do!

I’m hoping I will see any changes reflected in the CUCM configuration pages, 
right? So if I make the change on the unit and then go back to the config page, 
the setting will be different?

It’s just an easier test for me at this point.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Monday, September 17, 2018 12:07 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

If you troubleshoot locally make sure to turn on extended debugging first, 
otherwise you won’t see the content of SIP messages.

-Ryan


On Sep 17, 2018, at 11:59 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Wow. Thanks so much Ryan!

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Monday, September 17, 2018 11:55 AM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

Here’s an example.



2018-09-17T11:49:50.605-04:00 rratliff-rkplus appl[1750]: CuilApp[1]: 
Successfully changed configuration 'Configuration/Proximity/Mode' to 'On' by 
admin from .



2018-09-17T11:49:55.806-04:00 rratliff-rkplus appl[1750]: PROV[3]: 
[sendThrottledConfig] Notifying SIP stack about vendor config




2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket I: SIP Msg: 
Outgoing => REFER, CSeq: 101 REFER, Remote: 172.18.120.72:5060, CallId: 
db63adeda53772b3ac1cf516c4ddbe60

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: REFER 
sip:172.18.120.72 SIP/2.0

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: Via: 
SIP/2.0/TCP 
10.80.114.79:44255;branch=z9hG4bKe9a85770060f257bc99036fc6abfdeb4;rport

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Call-ID: db63adeda53772b3ac1cf516c4ddbe60

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: CSeq: 
101 REFER

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Content-Id: mailto:e6929c13a865eb5b@127.0.0.1>>

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Contact: 
;sip.cisco.multistream

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Refer-To: 

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Referred-By: 

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: From: 
;tag=c70d1756d9d3e262

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: To: 


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Max-Forwards: 70

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: Route: 


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
User-Agent: TANDBERG/529 (ce9.3.3.655fc73f140) Cisco-CodecPlus

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Expires: 0

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Require: norefersub

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Content-Type: application/x-cisco-remotecc-request+xml

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Content-Length: 2269

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]:   


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
70On20OffAuto0On0On060006000UDSupgrade.cisco.com<http://upgrade.cisco.com/>rratliff-rkplusVideoHelpdeskDisabledDisabledDisabledOnOn10PrivacyPositionOnOnOffOnOnOffLDAPSOffTLSv1.2


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]:   


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 



TLDR, change to config made, SIP stack gets notified by provisioning, the 
entire vendorConfig (device specific settings) XML g

Re: [cisco-voip] webkit fun!

[Ryan Ratliff (rratliff) via cisco-voip]

If you troubleshoot locally make sure to turn on extended debugging first, 
otherwise you won’t see the content of SIP messages.

-Ryan

On Sep 17, 2018, at 11:59 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Wow. Thanks so much Ryan!

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Monday, September 17, 2018 11:55 AM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

Here’s an example.



2018-09-17T11:49:50.605-04:00 rratliff-rkplus appl[1750]: CuilApp[1]: 
Successfully changed configuration 'Configuration/Proximity/Mode' to 'On' by 
admin from .



2018-09-17T11:49:55.806-04:00 rratliff-rkplus appl[1750]: PROV[3]: 
[sendThrottledConfig] Notifying SIP stack about vendor config




2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket I: SIP Msg: 
Outgoing => REFER, CSeq: 101 REFER, Remote: 172.18.120.72:5060, CallId: 
db63adeda53772b3ac1cf516c4ddbe60

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: REFER 
sip:172.18.120.72 SIP/2.0

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: Via: 
SIP/2.0/TCP 
10.80.114.79:44255;branch=z9hG4bKe9a85770060f257bc99036fc6abfdeb4;rport

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Call-ID: db63adeda53772b3ac1cf516c4ddbe60

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: CSeq: 
101 REFER

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Content-Id: mailto:e6929c13a865eb5b@127.0.0.1>>

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Contact: 
;sip.cisco.multistream

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Refer-To: 

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Referred-By: 

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: From: 
;tag=c70d1756d9d3e262

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: To: 


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Max-Forwards: 70

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: Route: 


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
User-Agent: TANDBERG/529 (ce9.3.3.655fc73f140) Cisco-CodecPlus

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Expires: 0

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Require: norefersub

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Content-Type: application/x-cisco-remotecc-request+xml

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Content-Length: 2269

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]:   


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
70On20OffAuto0On0On060006000UDSupgrade.cisco.com<http://upgrade.cisco.com/>rratliff-rkplusVideoHelpdeskDisabledDisabledDisabledOnOn10PrivacyPositionOnOnOffOnOnOffLDAPSOffTLSv1.2


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]:   


2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 



TLDR, change to config made, SIP stack gets notified by provisioning, the 
entire vendorConfig (device specific settings) XML gets pushed back up to CUCM.

-Ryan


On Sep 17, 2018, at 11:49 AM, Ryan Ratliff (rratliff) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:

As long as Provisioning is set to CUCM and On (and it’s registered) then local 
config changes should get sent back up via SIP where CUCM commits them to the 
database.

-Ryan


On Sep 17, 2018, at 11:38 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Hmmm, pretty sure any change I made on the endpoint reverted to what it was on 
CUCM after a reset. Is there something special I need to do on the endpoint to 
tell CUCM to take this new setting?

I think I was looking at the proximity settings as an example – I changed them 
on the end point, but they don’t seem to be in sync on CUCM. I’ll have to 
double check.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca

Re: [cisco-voip] webkit fun!

[Ryan Ratliff (rratliff) via cisco-voip]

Here’s an example.



2018-09-17T11:49:50.605-04:00 rratliff-rkplus appl[1750]: CuilApp[1]: 
Successfully changed configuration 'Configuration/Proximity/Mode' to 'On' by 
admin from .


2018-09-17T11:49:55.806-04:00 rratliff-rkplus appl[1750]: PROV[3]: 
[sendThrottledConfig] Notifying SIP stack about vendor config



2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket I: SIP Msg: 
Outgoing => REFER, CSeq: 101 REFER, Remote: 172.18.120.72:5060, CallId: 
db63adeda53772b3ac1cf516c4ddbe60
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: REFER 
sip:172.18.120.72 SIP/2.0
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: Via: 
SIP/2.0/TCP 
10.80.114.79:44255;branch=z9hG4bKe9a85770060f257bc99036fc6abfdeb4;rport
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Call-ID: db63adeda53772b3ac1cf516c4ddbe60
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: CSeq: 
101 REFER
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Content-Id: mailto:e6929c13a865eb5b@127.0.0.1>>
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Contact: 
;sip.cisco.multistream
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Refer-To: 
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Referred-By: 
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: From: 
;tag=c70d1756d9d3e262
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: To: 

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Max-Forwards: 70
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: Route: 

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
User-Agent: TANDBERG/529 (ce9.3.3.655fc73f140) Cisco-CodecPlus
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Expires: 0
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Require: norefersub
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Content-Type: application/x-cisco-remotecc-request+xml
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
Content-Length: 2269
2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]:   

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 
70On20OffAuto0On0On060006000UDSupgrade.cisco.com<http://upgrade.cisco.com>rratliff-rkplusVideoHelpdeskDisabledDisabledDisabledOnOn10PrivacyPositionOnOnOffOnOnOffLDAPSOffTLSv1.2

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]:   

2018-09-17T11:49:55.807-04:00 rratliff-rkplus appl[1750]: SipPacket[2]: 


TLDR, change to config made, SIP stack gets notified by provisioning, the 
entire vendorConfig (device specific settings) XML gets pushed back up to CUCM.

-Ryan

On Sep 17, 2018, at 11:49 AM, Ryan Ratliff (rratliff) via cisco-voip 
mailto:cisco-voip@puck.nether.net>> wrote:

As long as Provisioning is set to CUCM and On (and it’s registered) then local 
config changes should get sent back up via SIP where CUCM commits them to the 
database.

-Ryan

On Sep 17, 2018, at 11:38 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Hmmm, pretty sure any change I made on the endpoint reverted to what it was on 
CUCM after a reset. Is there something special I need to do on the endpoint to 
tell CUCM to take this new setting?

I think I was looking at the proximity settings as an example – I changed them 
on the end point, but they don’t seem to be in sync on CUCM. I’ll have to 
double check.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Monday, September 17, 2018 11:30 AM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: Brian Meade mailto:bmead...@vt.edu>>; cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

Yea, it will overwrite it with the CUCM configuration.  You can try turning off 
provisioning and point it manually to CUCM.

I’m catching up from last week but don’t do this. Endpoints registered to CUCM 
must be provisioned by CUCM. Any config that is set on the Device page in 
CCMAdmin can actually be pushed back up to CUCM if it is changed on the 
endpoint itself, a very cool feature created for the TC/CE endpoints. This 
means the endpoint and CUCM should be in sync.


-Ryan


On

Re: [cisco-voip] webkit fun!

[Ryan Ratliff (rratliff) via cisco-voip]

As long as Provisioning is set to CUCM and On (and it’s registered) then local 
config changes should get sent back up via SIP where CUCM commits them to the 
database.

-Ryan

On Sep 17, 2018, at 11:38 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Hmmm, pretty sure any change I made on the endpoint reverted to what it was on 
CUCM after a reset. Is there something special I need to do on the endpoint to 
tell CUCM to take this new setting?

I think I was looking at the proximity settings as an example – I changed them 
on the end point, but they don’t seem to be in sync on CUCM. I’ll have to 
double check.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Monday, September 17, 2018 11:30 AM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: Brian Meade mailto:bmead...@vt.edu>>; cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

Yea, it will overwrite it with the CUCM configuration.  You can try turning off 
provisioning and point it manually to CUCM.

I’m catching up from last week but don’t do this. Endpoints registered to CUCM 
must be provisioned by CUCM. Any config that is set on the Device page in 
CCMAdmin can actually be pushed back up to CUCM if it is changed on the 
endpoint itself, a very cool feature created for the TC/CE endpoints. This 
means the endpoint and CUCM should be in sync.


-Ryan


On Sep 14, 2018, at 3:39 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

I’m ok with that – the more I can do on CUCM the better in my opinion. But I’m 
not sure where to set the SIP URI for the device in CUCM.

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Brian Meade mailto:bmead...@vt.edu>>
Sent: Friday, September 14, 2018 3:29 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

Yea, it will overwrite it with the CUCM configuration.  You can try turning off 
provisioning and point it manually to CUCM.

On Fri, Sep 14, 2018 at 3:21 PM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Alright, got this webkit registered, both on-prem and through expressway. My 
testing while on expressway wasn't going so well, so I'm going to concentrate 
on on-prem first and certify all functions then move to expressway registration 
after that.

Biggest thing is that the SIP URI shows as 
d...@cucm-host.acme.com<mailto:d...@cucm-host.acme.com><mailto:d...@cucm-host.acme.com<mailto:d...@cucm-host.acme.com>>
 which is causing me nothing but grief. This SIP URI won't work because we need 
to use the service domain to get calls in but this is what shows during 
proximity. Yuck.

I've tried changing it but it still doesn't work and it changes with every 
reset/re-registration.

I've tried adding SIP URIs in the user setup and on the DN setup but to no 
avail. For some reason, I think this is even breaking just DN dialing, 
usin...@servicedomain.acme.com<mailto:d...@servicedomain.acme.com><mailto:d...@servicedomain.acme.com<mailto:d...@servicedomain.acme.com>>
 which was working to my SX20 without any SIP URI configuration, although the 
SX20 is using TC software, not CE.

I'm going to break out the admin and user guides, but thought I'd ask.

Also - what's the rule of thumb with setting things in CUCM Device Config Page 
vs Device GUI? It seems like I can change things on the device GUI, but if the 
setting exists in CUCM Device Config Page, that value overwrites on next reset.



---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca><mailto:le...@uoguelph.ca<mailto:le...@uoguelph.ca>>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs><http://www.uoguelph.ca/ccs> | 
@UofGCCS on Instagram, Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net

Re: [cisco-voip] webkit fun!

[Ryan Ratliff (rratliff) via cisco-voip]

Yea, it will overwrite it with the CUCM configuration.  You can try turning off 
provisioning and point it manually to CUCM.

I’m catching up from last week but don’t do this. Endpoints registered to CUCM 
must be provisioned by CUCM. Any config that is set on the Device page in 
CCMAdmin can actually be pushed back up to CUCM if it is changed on the 
endpoint itself, a very cool feature created for the TC/CE endpoints. This 
means the endpoint and CUCM should be in sync.


-Ryan

On Sep 14, 2018, at 3:39 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

I’m ok with that – the more I can do on CUCM the better in my opinion. But I’m 
not sure where to set the SIP URI for the device in CUCM.

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook



From: Brian Meade mailto:bmead...@vt.edu>>
Sent: Friday, September 14, 2018 3:29 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] webkit fun!

Yea, it will overwrite it with the CUCM configuration.  You can try turning off 
provisioning and point it manually to CUCM.

On Fri, Sep 14, 2018 at 3:21 PM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Alright, got this webkit registered, both on-prem and through expressway. My 
testing while on expressway wasn't going so well, so I'm going to concentrate 
on on-prem first and certify all functions then move to expressway registration 
after that.

Biggest thing is that the SIP URI shows as 
d...@cucm-host.acme.com>
 which is causing me nothing but grief. This SIP URI won't work because we need 
to use the service domain to get calls in but this is what shows during 
proximity. Yuck.

I've tried changing it but it still doesn't work and it changes with every 
reset/re-registration.

I've tried adding SIP URIs in the user setup and on the DN setup but to no 
avail. For some reason, I think this is even breaking just DN dialing, 
usin...@servicedomain.acme.com>
 which was working to my SX20 without any SIP URI configuration, although the 
SX20 is using TC software, not CE.

I'm going to break out the admin and user guides, but thought I'd ask.

Also - what's the rule of thumb with setting things in CUCM Device Config Page 
vs Device GUI? It seems like I can change things on the device GUI, but if the 
setting exists in CUCM Device Config Page, that value overwrites on next reset.



---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca>

www.uoguelph.ca/ccs | 
@UofGCCS on Instagram, Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] TMS Phonebooks and Spark Room Kit Plus on CUCM

[Ryan Ratliff (rratliff) via cisco-voip]

Please open a TAC SR.

That bug wasn’t able to be reproduced so your info could help get it resolved.

Thanks,

-Ryan

On Sep 13, 2018, at 2:30 AM, Dana Tong 
mailto:dana.t...@yellit.com.au>> wrote:

Hi all,


My Room Kit Plus isn’t getting it’s TMS Phonebook (I have a bunch of custom 
lists) and I found the following:

I have set the option to NO (which is the workaround) but the problem still 
exists. The software is TMS 15.7 and the CUCM is 12.x
I’ve reset the endpoint and the TMS server but its still not putting to the 
endpoint.

Cheers
Dana



https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf53020

Cisco Bug: CSCvf53020 - TMS doesn't push phonebook to spark room kit
Last Modified
Feb 25, 2018
Products (1)
• Cisco TelePresence Management Server
Known Affected Releases
15.5
Description (partial)
Symptom:
When route phone book entries is set to yes, TMS doesn't send SIP phone book 
entries to spark room kit endpoint.

If route phone book entries is set to no, then all phonebook entries are 
populated (SIP and H323 entries).

Conditions:
TMS 15.5.0
Spark room kit registered to CUCM

TMS Route phone book entries is set to yes

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Content Sharing with Proximity

[Ryan Ratliff (rratliff) via cisco-voip]

The clients are supposed to redirect you to each other (if they are both 
installed).

I don’t think the Webex meetings app is smart enough to share via Proximity, if 
you have a wired connection to a room system it will ask if you are sharing via 
the room.
I’ve only seen it detect a video system for sharing when I’m physically 
connected (via HDMI), and honestly I think you will get a better experience 
sharing natively with the Meetings app.

-Ryan

On Sep 12, 2018, at 1:07 AM, Dana Tong 
mailto:dana.t...@yellit.com.au>> wrote:

My bad. It looks like Share from an on-prem endpoint is Cisco Proximity only.

I might suppress the Webex Meetings App on the desktop and just use Proximity 
and Jabber.

I did have a thought once that maybe they could use the http reverse proxy 
Expressway and send the fqdn of the endpoint for on-prem devices and proximity 
access via the Internet but I guess the way forward is to move all these 
endpoints to the cloud.

Regards,
Dana


From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Dana Tong
Sent: Wednesday, 12 September 2018 12:03 PM
To: cisco-voip voyp list 
mailto:cisco-voip@puck.nether.net>>
Subject: [cisco-voip] Content Sharing with Proximity

Hi all,

Just wondering what your thoughts on content sharing and proximity were.

I have a customer here now with all the bells n whistles.

They have:
CUCM with video phones, Room Series endpoints, Jabber for Windows, Jabber for 
mobile devices.
They have Webex and they have Webex Boards. All the endpoints are CUCM 
registered. And they have two Webex boards which are cloud registered.

Originally, the customer was going to deploy the stand-alone Cisco “Proximity” 
app.

The customer can join video conferences using Jabber dialing the SIP URI, or 
using the Webex Meetings App. The new Webex App has a version of Proximity now 
in it.
Is this purely just for endpoint detection so that Webex can “call my video 
system”? Or can this be used for content sharing?

I know that when in a video conference you can share your screen using the 
Webex app.
But (without introducing too many “chat clients” on the desktop), can they use 
the Webex app for content sharing to a CUCM registered  endpoint when not in a 
Webex Meeting?

Ie they don’t want to use Webex Teams. Or will they have to install Proximity 
to all devices? But Proximity won’t work for the Webex Boards, or will it?

Cheers
Dana




___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Fixed in?

[Ryan Ratliff (rratliff) via cisco-voip]

Anything with that “98000” is typically a development branch for the next 
release, so this one should be in 11.5 base for sure. It should have been 
updated with the version that went to cisco.com but I guess 
back in 2014 there was a hiccup.

Are you checking to make sure or are you seeing evidence that the fix isn’t 
there?

-Ryan

On Sep 12, 2018, at 9:54 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


It certainly should be a lot easier to figure this out. I looked at the readme 
for each 11.5 release and couldn’t find the bug listed. Doesn’t mean it’s not 
there, could have been rolled into 11.5.1 which is deferred with no readme 
available.




---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook



From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Jason Aarons (Americas)
Sent: Wednesday, September 12, 2018 12:09 AM
To: cisco-voip (cisco-voip@puck.nether.net) 
mailto:cisco-voip@puck.nether.net>>
Subject: [cisco-voip] Fixed in?


So if bug is fixed in version CUCM 11.5(0.98000.126) and I am running 
11.5.1.15900-18 I already have the fix?
Wanting to verify SU5 has the bug fix for case sensitivity in CSR.   CSCur46416
-jason


Get Outlook for Android



This email and all contents are subject to the following disclaimer:
"http://www.dimensiondata.com/emaildisclaimer;
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] cisco hdmi to dvi cable - audio from HDMI?

[Ryan Ratliff (rratliff) via cisco-voip]

Interesting... macro to switch pc to main video stream? how so?

Depending on the codec you have there’s a good chance your content 
(presentation from the pc) channel will have a max of 15fps (this varies by 
bandwidth & resolution for the call).

If the content being shared is video, then the way you get that PC input into 
the main video RTP stream is to tell the codec your PC input is a camera 
(xConfiguration Video Input ConnectorX InputSourceType), and set that camera as 
the active source.

You won’t be able use a macro with in-room-controls to do this on a C40, but 
your SX20 can if it’s running CE software.

If you haven’t already hop into the admin page of any codec running recent CE 
code and bring up the macro editor. The examples there can get you started 
doing very neat things, provided you are familiar with any type or programming 
or scripting.

-Ryan

On Sep 9, 2018, at 9:02 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

I like when things come full circle...

I remember when doing my research for HDMI-to-USB capture devices, one of them 
mentioned I could customize the resolutions available to lock in what I wanted. 
I never went with their solution, but Lo and behold, they were using EDID.

https://www.epiphan.com/blog/what-is-edid-and-why-is-it-important/

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Sep 8, 2018, at 10:32 AM, Heim, Dennis 
mailto:dennis.h...@wwt.com>> wrote:

I haven’t been following this thread too closely, so I might be off base, but 
here goes. I have a C40 and my laptop has HDMI and through more work than it 
should be am able to share video and audio.

Laptop->HDMI->HDMI Doctor/EDID spoofer->HDMI splitter->C40.

The HDMI doctor is used to make my laptop think audio is supported down the 
HDMI wire.
Connected to the HDMI doctor is a gefen HDMI audio extractor which sends the 
audio via RCA/SPDIF to the C40. The video travels down hdmi, which has a 
HDMI->DVI adapter. I have been using this setup for about 3 years.

Dennis Heim | Emerging Technology Architect (Collaboration)
World Wide Technology, Inc. | +1 314-212-1814
<https://twitter.com/CollabSensei>

"Worry less about who you might offend, and more about who you might inspire" 
-- Tim Allen
“When you have unlimited time, its easy” – Captain Chesley Sullenberger
“There is a fine line between Wrong and Visionary. Unfortunately, you have to 
be a visionary to see it." – Sheldon Cooper
“The greatest danger for most of us is not that our aim is too high and we miss 
it, but that it is too low and we reach it.” -- Michelangelo Buonarroti
“Mediocore managers play checkers (assuming everyone is the same). Great 
managers play chess (acknowledging that everyone is unique)” – Marcus Buckingham
“If you’re not failing every now and again, it’s a sign you’re not doing 
anything very innovative” – Woody Allen

Click here to join me in my Collaboration Meeting 
Room<https://wwt.webex.com/meet/dennis.heim>

From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of Lelio 
Fulgenzi
Sent: Friday, September 07, 2018 9:08 PM
To: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Cc: voyp list, cisco-voip 
(cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>) 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] cisco hdmi to dvi cable - audio from HDMI?


Interesting... macro to switch pc to main video stream? how so?
-sent from mobile device-


Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Sep 7, 2018, at 4:35 PM, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:
Playing music through the room audio system (maybe that’s just me).

On your side it’s going to be driven by your users I think, but keep in mind 
that if they are sharing a video you’ll want a macro set up to switch the PC 
input to the main video stream from content to take advantage of the higher 
framerates on the main channel.

-Ryan


On Sep 7, 2018, at 3:37 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Alright – before I go spending big bucks… what do we think the use case here is?

I plug my laptop into the V/C unit so I get my display 

Re: [cisco-voip] cisco hdmi to dvi cable - audio from HDMI?

[Ryan Ratliff (rratliff) via cisco-voip]

Playing music through the room audio system (maybe that’s just me).

On your side it’s going to be driven by your users I think, but keep in mind 
that if they are sharing a video you’ll want a macro set up to switch the PC 
input to the main video stream from content to take advantage of the higher 
framerates on the main channel.

-Ryan

On Sep 7, 2018, at 3:37 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Alright – before I go spending big bucks… what do we think the use case here is?

I plug my laptop into the V/C unit so I get my display to share. When would I 
need audio? For fancy slide shows, maybe a video show?

I’m thinking it’s not gonna happen often…

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Friday, September 7, 2018 9:19 AM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: voyp list, cisco-voip 
(cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>) 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] cisco hdmi to dvi cable - audio from HDMI?

I’m quite certain it will not transfer digital audio from the HDMI port to the 
analog 3.5mm connector on the DVI side. That would require an active converter.

Given the complexities in this (and how it breaks HDCP) unless the thing you 
are buying specifically says it does it assume it does not.

Amazon has boxes that will do this, but a quick search doesn’t give me any 
cables that do it.

-Ryan


On Sep 6, 2018, at 2:54 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Does anyone know if the CAB-DVI-HDMI-8M+= cable will take audio directly from 
the HDMI source and pump it to the audio cable in the DVI end? Or whether both 
1/8” jacks need to be plugged in to feed audio to the far end?

https://www.cdw.ca/product/cisco-video-audio-cable-hdmi-dvi-8-m/4486020#PO

We have a C60 and two SX20s that only have DVI in with a spare mic input. Of 
course, laptops nowadays have HDMI. Not too many have the audio out. Or close 
enough for that little pigtail.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] cisco hdmi to dvi cable - audio from HDMI?

[Ryan Ratliff (rratliff) via cisco-voip]

The boxes on Amazon aren’t that expensive and if you find one that works well 
enough you can run HDMI to the table, then terminate that HDMI at the box by 
the codec, where it’s broken out to DVI and audio, all hidden to the user

-Ryan

On Sep 7, 2018, at 10:11 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Ok. I’m more worried about laptops without a 1/8” speaker/headphone port or 
those with the dreaded combo headset port.

I think what I’ll end up doing (for proof of concept anyways) is getting a 
cheap USB-to-headphone+mic adapter and/or a headset-to-headphone+mic splitter 
and try those out. I’m thinking those should work very well.

The alternative, like you said, would be an active HDMI to DVI/audio out 
splitter that could be purchased by departments if required.

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



From: Ryan Ratliff (rratliff) mailto:rratl...@cisco.com>>
Sent: Friday, September 7, 2018 9:19 AM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: voyp list, cisco-voip 
(cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>) 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] cisco hdmi to dvi cable - audio from HDMI?

I’m quite certain it will not transfer digital audio from the HDMI port to the 
analog 3.5mm connector on the DVI side. That would require an active converter.

Given the complexities in this (and how it breaks HDCP) unless the thing you 
are buying specifically says it does it assume it does not.

Amazon has boxes that will do this, but a quick search doesn’t give me any 
cables that do it.

-Ryan


On Sep 6, 2018, at 2:54 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Does anyone know if the CAB-DVI-HDMI-8M+= cable will take audio directly from 
the HDMI source and pump it to the audio cable in the DVI end? Or whether both 
1/8” jacks need to be plugged in to feed audio to the far end?

https://www.cdw.ca/product/cisco-video-audio-cable-hdmi-dvi-8-m/4486020#PO

We have a C60 and two SX20s that only have DVI in with a spare mic input. Of 
course, laptops nowadays have HDMI. Not too many have the audio out. Or close 
enough for that little pigtail.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca<mailto:le...@uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, 
Twitter and Facebook



___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] cisco hdmi to dvi cable - audio from HDMI?

[Ryan Ratliff (rratliff) via cisco-voip]

I’m quite certain it will not transfer digital audio from the HDMI port to the 
analog 3.5mm connector on the DVI side. That would require an active converter.

Given the complexities in this (and how it breaks HDCP) unless the thing you 
are buying specifically says it does it assume it does not.

Amazon has boxes that will do this, but a quick search doesn’t give me any 
cables that do it.

-Ryan

On Sep 6, 2018, at 2:54 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Does anyone know if the CAB-DVI-HDMI-8M+= cable will take audio directly from 
the HDMI source and pump it to the audio cable in the DVI end? Or whether both 
1/8” jacks need to be plugged in to feed audio to the far end?

https://www.cdw.ca/product/cisco-video-audio-cable-hdmi-dvi-8-m/4486020#PO

We have a C60 and two SX20s that only have DVI in with a spare mic input. Of 
course, laptops nowadays have HDMI. Not too many have the audio out. Or close 
enough for that little pigtail.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook



___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Conference Phones w/Wireless Mic

[Ryan Ratliff (rratliff) via cisco-voip]

I don’t know for certain, but it probably has to do with DECT frequency ranges 
used by the microphones. This caused lots of “fun” with the 8831s. 

-Ryan

> On Sep 3, 2018, at 10:24 AM, Gary Parker  wrote:
> 
> Afternoon all, could someone please confirm my suspicion that Cisco no longer 
> offers a conference phone with wireless expansion mics outside the US?
> 
> It would appear that the 7832 doesn’t support expansion mics at all, but that 
> the 8832 only has wireless mics for use in North America (CP-8832-MIC-WLS=)
> 
> I’m struggling to cover a large conference room at the moment without cables 
> dangling everywhere...
> 
> (And don’t get me started on the mess that is the USB-C power and no-onboard 
> wired ethernet situation *gr*)
> 
> 
> ---
> /-Gary Parker--f--\
> | Unified Communications Service Manager  |
> n  Loughborough University, IT Services   |
> | tel:+441509635635 sip:g...@lboro.ac.uk  o
> |https://www.osx.ninja/pubkey.txt |
> \r--d-/
> 
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Retrofitting sx20 quickset with trc6 and touch10 panel

[Ryan Ratliff (rratliff) via cisco-voip]

One thing to add about using the remote vs Touch. The CE software will 
completely change the UI when a Touch is paired so you won’t get the menu 
on-screen to navigate via the remote. I don’t think it’s intended to use both 
on the same codec, so YMMV.

For instructions on connecting the Touch10 refer to the Peripherals section for 
the Admin Guide for your version.
Here’s the 9.0 doc, these are all PDFs so I can’t link directly to the section.
https://www.cisco.com/c/dam/en/us/td/docs/telepresence/endpoint/ce90/sx20-administrator-guide-ce90.pdf

If the SX and Touch are on the same network (definitely recommended) if you 
reboot the SX the Touch will be able to discover it for pairing. This discovery 
is only available for 10 minutes after the codec boots.

-Ryan

On Aug 30, 2018, at 2:46 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

Omg. Why can’t they include that info in some of the data sheets. Ugh. I mean, 
I knew remote pairing was available, but I didn’t know it was the only way.

I’m hoping I can get this thing to register to CUCM via Expressway without much 
effort. I’d rather do that than open up all the ports on the voice VLAN to make 
the touch panel and proximity work.

Lelio


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook



From: Brian Meade mailto:bmead...@vt.edu>>
Sent: Thursday, August 30, 2018 2:36 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: Jeremy Bresley mailto:b...@brezworks.com>>; cisco-voip 
voyp list mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] Retrofitting sx20 quickset with trc6 and touch10 panel

For SX20, you have to pair the Touch10 over the network.  You can't attach it 
direct.  There were originally some plans for a USB to Ethernet adapter for 
Touch10 but that got cancelled.

On Thu, Aug 30, 2018 at 2:22 PM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:
Thanks Jeremy… especially the part about the upgrades. I’m on the fence about 
pushing them out from CUCM just now, especially with how few we have.

I’d like both the TRC6 and the touch 10 in order to display the differences 
between the two to the users who may have one. The Touch 10 is quite a bit more 
expensive – I’m not sure I’m even going to get one, let alone two. 

After what you mention, and reviewing the documentation though, I’m lost on one 
piece… How the heck do I connect the touch 10 to the SX20? The SX20 only has 
one network port.  What am I missing here?

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Jeremy Bresley
Sent: Thursday, August 30, 2018 1:44 PM
To: cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Retrofitting sx20 quickset with trc6 and touch10 panel

On 8/30/18 13:15, Lelio Fulgenzi wrote:

I’m looking at retrofitting our two sx20 quicksets with a minimum of a trc6 and 
hopefully with a touch10 panel. This all in an effort to support the clients 
getting a webex room kit which is using CE software.

I’ll need to upgrade the SX20 to the latest CE software once I get at least one 
of the two peripheral upgrades mentioned above.

Just wondering if anyone has done this?

A little confusion between the SX data sheet (updated March 2018) which refers 
to the CTS-CTRL-DVX-10 and a power injector (CTS-PWR-AIR-INJ5=) vs the Touch 10 
data sheet (updated December 2017) which indicates the SX20 uses the CS-TOUCH10 
model, with the CTS-CTRL-DV10 for IX series, and no mention of power injector.

Data sheet references:

https://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/telepresence-sx20-quick-set/data_sheet_c78-688342.html

https://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/telepresence-touch/data_sheet_c78-646041.html


The CTS-CTRL-DVX-10 is the original model touch 10 (identifiable by the USB 
ports on the side, and the plastic flap over the ethernet jack).  This is 
supported on all currently shipping endpoints including the IX.

The CS-TOUCH10 is the new model which removed some of the hardware which wasn't 
used (audio jack, USB ports) and simplified the ethernet jack on the back 
(eliminated the flap which tended to break off).  It also can be identified by 
the Cisco logo on the bottom of the face and the foot stand which folds 
completely flat 

Re: [cisco-voip] dev packs - ugh

[Ryan Ratliff (rratliff) via cisco-voip]

When it comes to dev packs the “bugs” listed aren’t really bugs. They are just 
the identifier we use to track the changes in the device xml files that get 
inserted into the database for device definitions.

Recalling the ES vs SU thread, the truth is in the versioning. Dev packs are 
generated with engineering specials, so their versioning follows the same rules 
when comparing to an SU. This also means they are definitely cumulative.

The good part about listing the defect IDs used for each device update means 
that if you aren’t sure if an SU, devpack, or ES you got includes the change 
just look up the defect on Cisco.com. All the versions with 
the fix are listed (and accurate).

Lastly, it’s pretty common these device update bugs are put into an ES well 
before the devpack is released. That’s how a fix may end up in an SU for one 
version before a devpack for another.

-Ryan

On Aug 18, 2018, at 10:04 AM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:



On Aug 17, 2018, at 7:13 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:

Each device pack file contains all of the logic to add new firmware, and add 
support for all of the phones contained within it.  So yes, they're cumulative.

Ok. Good to know.



When you say that SUs are not listed, do you mean the matrix?  If so, that's 
probably because it's not a factor.  Just match Major.Minor.Patch.

I can work with that. For now :)


Are you referring to Table-2 in the Device Pack Readme when you say "shows 
database updates for" or "does not show updates for"?

That's just a list of the defects fixed/addressed by the device pack, not which 
phones are getting updates.

I see that they are there to address a defect, but the fact that there is a 
database update means I can’t get away with just installing the updated 
firmware. The devpack is need to address this bug. Yes?



Personally, I would not use any version, other than the one listed on the 
matrix.  In your case, that would rule out 11.5(1.16083) device pack for me.  
If it's too new for Cisco to put out proper documentation, then it's too new 
for me to use.  The reason is simple: I would not be able to cite documentation 
stating that the version is on the supported version list (the matrix).  And 
being able to cite documentation is important to me.

Ok - so I went back and took a second look. In the matrix, the links to the dev 
packs are different, based on what the model needs. So, under the Unified CM 
11.5(1) column, although the all say 
“cmterm-devicepack11.5.1”,
 they link to different published versions. You can see the date below the text 
which indicates this. I missed this the first time around.



Lastly, it sounds like you already have support for these phone models, if 
you're seeing the device defaults listed in your 11.5(1)SU4.  So, are you 
trying to add support, or just upgrade the firmware on them?

Yes - support is there with firmware shipped with 11.5(1)su4. I do want to 
update the firmware to the latest version, but I also want to ensure I have the 
latest database updates to address any of the bugs. Specifically: CSCvj22837 : 
UCM Configuration files for 8832/8832NR 12.1.1 release included in 11.5(1.15078)

If the packs are cumulative, I might as well load the latest. Which has been 
referenced in the matrix for other phones.



On Fri, Aug 17, 2018 at 4:13 PM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

I have to tell you, figuring out when to install a dev pack or not is confusing 
as hell to me. The documentation never includes (or is updated to include) SUs.

Can I assume (*scream*) that if I need any of the database updates included in 
the readme for a dev pack that is dated after my SU, that I need to install 
that dev pack? Is going by date enough?

Are dev packs cumulative? Their readmes don't appear so. A database update note 
that appears in one dev pack does not appear in the later dev pack release 
notes.

Here's my scenario:

I'm on CUCM 11.5(1)SU4 (dated 05-FEB-2018) and we're looking to deploy some 
8832 and 8865 phones. CUCM 11.5(1)SU4 has default firmware listed for both 
these phones in the readme. This is what the TAC told me indicates that 
v11.5(1)SU4 supports the phones without the need for a dev pack.

When I look to the dev pack downloads page, I see the following dev packs 
available that are dated after 05-FEB-2018:

11.5(1.15078) - 04-Jun-2018
11.5(1.16083) - 13-Aug-2018

v11.5(1.15078) shows database updates for 7800/8800 series phones, 8832 
conference phone. Fine, I'm good with that.
11.5(1.16083) does not show updates for any of the 8800 series phones, but does 
show updates for "Collaboration Endpoint Software" - which I think I might need.

So, is my process correct - I need to install only 11.5(1.16083) since it's 
cumulative and includes v11.5(1.15078) which has things I need? And I don't 

Re: [cisco-voip] CUCM Build to Version Conversion

[Ryan Ratliff (rratliff) via cisco-voip]



I suspect (hope) the majority of customers don’t get involved with ES at all 
and only care about major/minor/SU upgrades. Those customers just need to know 
if a license change is involved or how risky the upgrade is (is the version 
incrementing).

The fact that our SUs are basically minor releases these days is a whole other 
debate.

-Ryan

On Aug 17, 2018, at 4:41 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:

I had a good laugh when you posted the link to the careers section of 
cisco.com<http://cisco.com>.  That was good.  ;)

Thank you for such a detailed post about the versioning.  The only thing I 
really have to say, regards your comment "I would recommend focusing on the 
version number rather than any labels like ES or SU. The letters are just for 
convenience."

So, if you recommend that approach, and the documentation only lists the build, 
then why even bother with the letters?  As it turns out, this "convenience" is 
an inconvenience, when I have to spend effort converting between them.  Would 
it be possible, in your opinion to just drop the two formats, and use build 
numbers only?

On Fri, Aug 17, 2018 at 8:16 AM Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:
0) Is there some mapping utility for build to version already out there?  
cisco.com<http://cisco.com/> downloads in not ideal, because not always can you 
find all historical versions, and rarely if ever can you find ESes,

Good question, it would probably be a tech doc that somebody in TAC wrote, if 
there is one.

1) For an ES, is it always tied to an SU?  Example: 11.5.1.11101-n would be 
11.5(1)SU1ES1, correct? And 11.5.1.11901-n would be 11.5(1)SU1a, right?  But 
then, how would 11.5(1)SU1aES1 look, as a build version?

There is a relationship between ES and SU but it’s not the way you are 
describing. ES images are built on a fixed schedule, for every version that is 
still being maintained. The code changes that go into them are restricted to 
only bug fixes that customers hit AND have specifically requested to go into an 
ES. I would recommend focusing on the version number rather than any labels 
like ES or SU. The letters are just for convenience.

Each SU starts as an ES (forked from that branch, in sw dev terms). When the SU 
branch is pulled it’s “Y” number (from the slide) is incremented. At that point 
the SU branch is updated separately from the ES, though it’s likely some bug 
fixes go into both. Any features or other work that is intended to go into the 
SU will also be committed to the SU, but not to the ES.

After the SU is released the ES branch will get merged with the SU branch. At 
this time the “Y” number in the ES version will be incremented to match the SU.

The part you should care about here is:
1)  If you get an ES from TAC that has the “Y” number higher than your current 
version you will automatically pick up any features that were in the SU(s), so 
be aware.
2)  If you upgrade to an SU and hit a bug that is fixed in an ES, you must wait 
until an ES is available with the same “Y” number or you will be downgrading. 
Only early adopters of SUs may hit this situation because the ES versions 
typically merge with the SUs within a month of release.

2) When the patch on the minor or SU comes out, does that usually mean the 
previous patch version was differed?  E.g., 11.5(1a) differs 11.5(1) or 
11.5(1)SU2a differs 11.5(1)SU2

Typically yes, it’s not often that a bug fix is so severe that it warrants 
quickly incrementing a version that was posted to cisco.com<http://cisco.com> 
and when it happens you the get the letter added to indicate that it’s 
something different, but newer than the older one.

3) What do the postfix digits represent?  E.g., The 6 at the end of 
11.5.1.1-6.

Without going into too much detail the last number increments with each build 
of the release. The most important thing about this last number is that if for 
whatever reason a customer is running some version that isn’t quite the version 
on cisco.com<http://cisco.com> (11.5.1.1-4 for example) then they must get 
to a public release immediately. At the point we start numbering a build for 
public release the only reasons we increment the build are for bugs that we 
absolutely will not include in code that goes out.

If you really must know the minutia of how the versions work, there’s a form 
you can fill out here<https://www.cisco.com/c/en/us/about/careers.html>.

4) How do we know what version is considered a long life release?  I can guess 
that all .0 releases are NOT long life, but then in the case of 9.0, 9.1(1) and 
9.1(2), we have: short, short, long.  And in the case of 8.0, 8.5, 8.6, we 
have: short, short, long.  Therefore, it's not accurate to say, .5 releases are 
long life, because in 9.x there wasn't one, and in 8.x it was actually 8.6.  
Therefore, you likely cannot derive it from the number

Re: [cisco-voip] CUCM Build to Version Conversion

[Ryan Ratliff (rratliff) via cisco-voip]

0) Is there some mapping utility for build to version already out there?  
cisco.com downloads in not ideal, because not always can you 
find all historical versions, and rarely if ever can you find ESes,

Good question, it would probably be a tech doc that somebody in TAC wrote, if 
there is one.

1) For an ES, is it always tied to an SU?  Example: 11.5.1.11101-n would be 
11.5(1)SU1ES1, correct? And 11.5.1.11901-n would be 11.5(1)SU1a, right?  But 
then, how would 11.5(1)SU1aES1 look, as a build version?

There is a relationship between ES and SU but it’s not the way you are 
describing. ES images are built on a fixed schedule, for every version that is 
still being maintained. The code changes that go into them are restricted to 
only bug fixes that customers hit AND have specifically requested to go into an 
ES. I would recommend focusing on the version number rather than any labels 
like ES or SU. The letters are just for convenience.

Each SU starts as an ES (forked from that branch, in sw dev terms). When the SU 
branch is pulled it’s “Y” number (from the slide) is incremented. At that point 
the SU branch is updated separately from the ES, though it’s likely some bug 
fixes go into both. Any features or other work that is intended to go into the 
SU will also be committed to the SU, but not to the ES.

After the SU is released the ES branch will get merged with the SU branch. At 
this time the “Y” number in the ES version will be incremented to match the SU.

The part you should care about here is:
1)  If you get an ES from TAC that has the “Y” number higher than your current 
version you will automatically pick up any features that were in the SU(s), so 
be aware.
2)  If you upgrade to an SU and hit a bug that is fixed in an ES, you must wait 
until an ES is available with the same “Y” number or you will be downgrading. 
Only early adopters of SUs may hit this situation because the ES versions 
typically merge with the SUs within a month of release.

2) When the patch on the minor or SU comes out, does that usually mean the 
previous patch version was differed?  E.g., 11.5(1a) differs 11.5(1) or 
11.5(1)SU2a differs 11.5(1)SU2

Typically yes, it’s not often that a bug fix is so severe that it warrants 
quickly incrementing a version that was posted to cisco.com 
and when it happens you the get the letter added to indicate that it’s 
something different, but newer than the older one.

3) What do the postfix digits represent?  E.g., The 6 at the end of 
11.5.1.1-6.

Without going into too much detail the last number increments with each build 
of the release. The most important thing about this last number is that if for 
whatever reason a customer is running some version that isn’t quite the version 
on cisco.com (11.5.1.1-4 for example) then they must get 
to a public release immediately. At the point we start numbering a build for 
public release the only reasons we increment the build are for bugs that we 
absolutely will not include in code that goes out.

If you really must know the minutia of how the versions work, there’s a form 
you can fill out here.

4) How do we know what version is considered a long life release?  I can guess 
that all .0 releases are NOT long life, but then in the case of 9.0, 9.1(1) and 
9.1(2), we have: short, short, long.  And in the case of 8.0, 8.5, 8.6, we 
have: short, short, long.  Therefore, it's not accurate to say, .5 releases are 
long life, because in 9.x there wasn't one, and in 8.x it was actually 8.6.  
Therefore, you likely cannot derive it from the number alone, so is it 
published somewhere?

It is my understanding that the .5 releases are long life. The concept of short 
vs long life releases didn’t exist when 8.x was released so don’t try to apply 
it back that far.

-Ryan

On Aug 16, 2018, at 2:36 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:

In the Cisco Live presentation for Best Practices for Migration Previous 
Versions of 
CUCM.
 the following slide is given:



I'm wondering if the list can help answer the following questions:

0) Is there some mapping utility for build to version already out there?  
cisco.com downloads in not ideal, because not always can you 
find all historical versions, and rarely if ever can you find ESes,

1) For an ES, is it always tied to an SU?  Example: 11.5.1.11101-n would be 
11.5(1)SU1ES1, correct? And 11.5.1.11901-n would be 11.5(1)SU1a, right?  But 
then, how would 11.5(1)SU1aES1 look, as a build version?

2) When the patch on the minor or SU comes out, does that usually mean the 
previous patch version was differed?  E.g., 11.5(1a) differs 11.5(1) or 
11.5(1)SU2a differs 11.5(1)SU2

3) What do the postfix digits represent?  E.g., The 6 at the end of 
11.5.1.1-6.

4) 

Re: [cisco-voip] Cisco IP Phone Top Buttons Flashing Green, Amber, Red

[Ryan Ratliff (rratliff) via cisco-voip]

Resurrecting this because we are finally making progress.

It appears that root cause on this is a script that the phone runs when it 
fails to load the MIC. If you get a PRT or ssh into a phone with the lights and 
run “show cpu” you’ll see a process running called mic_err.sh (this command is 
logged in the show-output file in the PRT).

I have a request for anyone that has had one of these blinking phones in the 
past that and fixed the blinking by upgrading the phone.
Can you reboot that phone and pull a PRT?  You can send it to me directly. I 
want to verify if the phone was able to load the MIC when it booted.

All we know so far is that this mic_err script makes the lights blink, a phone 
that gets them stuck that way needs to be replaced via RMA, but I don’t have 
much data on a fixed phone.

Thanks,

-Ryan

On May 18, 2017, at 12:48 PM, Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:

I just filed CSCve49657 to track it.

If anyone can get a PRT from a phone that’s doing it (preferably right after a 
boot) please send it to me directly or work through TAC.

-Ryan

On May 18, 2017, at 12:25 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:

Well, moving to the following did fix the flashing lights by the way.

Active Load ID: sip88xx.11-7-1-17
Inactive Load ID: sip88xx.11-5-1SR1-1

I then flipped the phone back to 11.5(1), and the problem did not return, so 
the upgrade to 11.7(1) permanently fixed the issue.

So, no documented defect for this then Ryan, is that right?

FYI I also posted my experience in the forum posting for future Googlers.

On Thu, May 18, 2017 at 9:59 AM Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:
I can see a few cases on it, some are just RMAs and others are fixed by an 
upgrade.

If anyone has one that’s not getting fixed by an upgrade get a case open and 
let me know the SR number. We will probably need to get it sent to us for 
debugging.

I'd like to have some official documentation from Cisco explaining that they 
know their phones do this and what the course of action needs to be.

I (personally) had never heard of this before your email this morning. I am now 
aware that this is a problem observed by a small number of customers (the 
number of cases I can find is somewhere between a peck and a bushel) and the 
official course of action needs to be open a TAC SR fur further investigation.

-Ryan

On May 18, 2017, at 9:38 AM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:

Can someone confirm whether or not this issue linked below has been filed as a 
defect please?

https://supportforums.cisco.com/discussion/12960896/cp-8851-featuresession-buttons-flashing-red-amber-and-green

I don't have an active SmartNet contract on my phones (like most people, I'm 
sure) and so I cannot open a TAC case for it.  I'd like to have some official 
documentation from Cisco explaining that they know their phones do this and 
what the course of action needs to be.  So far, this forum posting is all I 
have found; though I'm no bugsearch ninja.

Thanks.
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Firmware question

[Ryan Ratliff (rratliff) via cisco-voip]

As a last resort go look in the AlternateSyslog on your call processing server 
to find a registration event for a phone from before the COP upload. Almost all 
of those include the phone’s active version.

-Ryan

On Jun 13, 2018, at 3:48 AM, daniele visaggio 
mailto:visaggio.dani...@gmail.com>> wrote:

Yes, it is possible.

Go in ssh on the cucm node where the firmware has been installed.

Then do: show version active

it will give you the actual cucm version and the list of all the installed 
firmware.

2018-06-13 8:22 GMT+02:00 James Dust 
mailto:james.d...@charles-stanley.co.uk>>:
On version 11.5 cucm, is it possible once a cop.sgn file has been uploaded to 
view the previous firmware versions that reside on the nodes?

For instance once the cop file is uploaded and has refreshed the device 
defaults page on an SCCP 7970, how would I know what previous 7970 firmware’s 
reside on the cluster?

Regards

James

Consider the environment - Think before you print

The contents of this email are confidential to the intended recipient and may 
not be disclosed. Although it is believed that this email and any attachments 
are virus free, it is the responsibility of the recipient to confirm this.

You are advised that urgent, time-sensitive communications should not be sent 
by email. We hereby give you notice that a delivery receipt does not constitute 
acknowledgement or receipt by the intended recipient(s).

Details of Charles Stanley group companies and their regulators (where 
applicable), can be found at this URL 
http://www.charles-stanley.co.uk/contact-us/disclosure/

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] CUCM Bulk TFTP File Upload

[Ryan Ratliff (rratliff) via cisco-voip]

If you’re really in a bind “file get tftp *”.

I agree syncing files between nodes with TFTP activated the way to go.

-Ryan

On Jun 6, 2018, at 11:43 AM, Charles Goldsmith 
mailto:wo...@justfamily.org>> wrote:

filelist doesn't work anymore, correct, and you can file get via the cli as 
well.  Neither is a "bulk" way to download and can be a lot of work.  :)  We 
just need a 1 click button to copy all extra files from one node to another

On Wed, Jun 6, 2018 at 10:35 AM Ryan Ratliff (rratliff) 
mailto:rratl...@cisco.com>> wrote:
If you know the files you can use curl or your favorite http package to get 
them http://tftp.ip:6970/.

On some versions you can get http://tftp.ip:6970/filelist.txt to get an index 
of files. I think that file went away in 11.5 or 12.0 with enhancements made to 
serving static files.

-Ryan

On Jun 6, 2018, at 10:18 AM, Charles Goldsmith 
mailto:wo...@justfamily.org>> wrote:

Thanks very much for this!  Has anyone worked out an easy way to bulk download 
this data?  Say you have to rebuild or add a node to an existing cluster and 
the customer doesn't have all of this info archived properly?


On Mon, Jun 4, 2018 at 1:20 PM Brian Meade 
mailto:bmead...@vt.edu>> wrote:
Now on Github- https://github.com/bmeade90/BulkTFTP

On Mon, Jun 4, 2018 at 8:47 AM, Brian Meade 
mailto:bmead...@vt.edu>> wrote:
Thanks for cleaning that up Anthony!

My main goal with this is to bulk upload entire directories and all the 
sub-directories so I can easily upload all the Desktops directories and such.

Since I'm bulk uploading so many files, I decided to just do a single node at a 
time but your edit should work fine to make this multi-node.

Attached my finalized script I was able to use to upload a few hundred files to 
a 4-node cluster on Friday.

On Sat, Jun 2, 2018 at 3:19 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:
Here's your code re-worked a little Brian, for you or for anyone else, and I 
tested it on 11.5 and it works.  I did not put in any error handling, so I'll 
leave that up to you.  You can do things like Try/Catch or checking for 
resp.status_code == 200, file existence checking, etc.  I figure, knowing how 
to make it work was the challenge, not error handling, so I left that out.

# Install Python 2.7 and choose the option to add to path (off by default)
# Then install two modules
#  C:\>pip install requests
#  C:\>pip install BeautifulSoup
# Then run the program
#  C:\>python tftp.py

import requests
from BeautifulSoup import BeautifulSoup
requests.packages.urllib3.disable_warnings()

tftp_host = ""
tftp_user = ""
tftp_pass = ""
tftp_file = ""
tftp_path = ""

url_base = "https://{}/cmplatform/".format(tftp_host)
url_login = "{}j_security_check".format(url_base)
url_upload = "{}tftpFileUpload.do".format(url_base)

# Allows us to keep track of our login session
print "\nLogging in to {}...".format(tftp_host),
connection = requests.Session()

# Start a new session by simply access a page on the server
resp = connection.get(url_base, verify = False)

# Our login form data
form_data = {
"appNav": "cmplatform",
"j_username": tftp_user,
"j_password": tftp_pass
}

# Our login submission to the server
resp = connection.post(url_login, verify = False, data = form_data)
print "Success!\n"

# We need to grab the token the server gives us, so we can pass it back upon 
upload
print "Grabbing a new token...",
soup = BeautifulSoup(connection.get(url_upload, verify = False).content)

# It's a hidden input element on the upload form with the name of "token"
token = soup.find("input", {"name": "token"}).get("value")
print "Found! [{}]\n".format(token)

# Our upload form submission data
payload = {
"struts.token.name<http://struts.token.name/>": (None, "token"),
"token": (None, token),
"file": (tftp_file, open(tftp_file, "rb"), {"Content-Type": "text/plain"}),
"directory": (None, tftp_path)
}

# Our upload submission to the server
print "Uploading file: {}...".format(tftp_file),
resp = connection.post(url_upload, verify = False, files = payload)
print "Success!\n"

print "Done!"

If you want multiple server/multiple file support, it's really just a small 
modification (highlighted in red):

# Install Python 2.7 and choose the option to add to path (off by default)
# Then install two modules
#  C:\>pip install requests
#  C:\>pip install BeautifulSoup
# Then run the program
#  C:\>python tftp.py

import requests
from BeautifulSoup import BeautifulSoup
requests.packages.urllib3.disable_warnings()

tftp_hosts = [
"host1",
"hostN"
]
tftp_user = ""
tftp_pa

Re: [cisco-voip] CUCM Bulk TFTP File Upload

[Ryan Ratliff (rratliff) via cisco-voip]

If you know the files you can use curl or your favorite http package to get 
them http://tftp.ip:6970/.

On some versions you can get http://tftp.ip:6970/filelist.txt to get an index 
of files. I think that file went away in 11.5 or 12.0 with enhancements made to 
serving static files.

-Ryan

On Jun 6, 2018, at 10:18 AM, Charles Goldsmith 
mailto:wo...@justfamily.org>> wrote:

Thanks very much for this!  Has anyone worked out an easy way to bulk download 
this data?  Say you have to rebuild or add a node to an existing cluster and 
the customer doesn't have all of this info archived properly?


On Mon, Jun 4, 2018 at 1:20 PM Brian Meade 
mailto:bmead...@vt.edu>> wrote:
Now on Github- https://github.com/bmeade90/BulkTFTP

On Mon, Jun 4, 2018 at 8:47 AM, Brian Meade 
mailto:bmead...@vt.edu>> wrote:
Thanks for cleaning that up Anthony!

My main goal with this is to bulk upload entire directories and all the 
sub-directories so I can easily upload all the Desktops directories and such.

Since I'm bulk uploading so many files, I decided to just do a single node at a 
time but your edit should work fine to make this multi-node.

Attached my finalized script I was able to use to upload a few hundred files to 
a 4-node cluster on Friday.

On Sat, Jun 2, 2018 at 3:19 PM, Anthony Holloway 
mailto:avholloway+cisco-v...@gmail.com>> wrote:
Here's your code re-worked a little Brian, for you or for anyone else, and I 
tested it on 11.5 and it works.  I did not put in any error handling, so I'll 
leave that up to you.  You can do things like Try/Catch or checking for 
resp.status_code == 200, file existence checking, etc.  I figure, knowing how 
to make it work was the challenge, not error handling, so I left that out.

# Install Python 2.7 and choose the option to add to path (off by default)
# Then install two modules
#  C:\>pip install requests
#  C:\>pip install BeautifulSoup
# Then run the program
#  C:\>python tftp.py

import requests
from BeautifulSoup import BeautifulSoup
requests.packages.urllib3.disable_warnings()

tftp_host = ""
tftp_user = ""
tftp_pass = ""
tftp_file = ""
tftp_path = ""

url_base = "https://{}/cmplatform/".format(tftp_host)
url_login = "{}j_security_check".format(url_base)
url_upload = "{}tftpFileUpload.do".format(url_base)

# Allows us to keep track of our login session
print "\nLogging in to {}...".format(tftp_host),
connection = requests.Session()

# Start a new session by simply access a page on the server
resp = connection.get(url_base, verify = False)

# Our login form data
form_data = {
"appNav": "cmplatform",
"j_username": tftp_user,
"j_password": tftp_pass
}

# Our login submission to the server
resp = connection.post(url_login, verify = False, data = form_data)
print "Success!\n"

# We need to grab the token the server gives us, so we can pass it back upon 
upload
print "Grabbing a new token...",
soup = BeautifulSoup(connection.get(url_upload, verify = False).content)

# It's a hidden input element on the upload form with the name of "token"
token = soup.find("input", {"name": "token"}).get("value")
print "Found! [{}]\n".format(token)

# Our upload form submission data
payload = {
"struts.token.name": (None, "token"),
"token": (None, token),
"file": (tftp_file, open(tftp_file, "rb"), {"Content-Type": "text/plain"}),
"directory": (None, tftp_path)
}

# Our upload submission to the server
print "Uploading file: {}...".format(tftp_file),
resp = connection.post(url_upload, verify = False, files = payload)
print "Success!\n"

print "Done!"

If you want multiple server/multiple file support, it's really just a small 
modification (highlighted in red):

# Install Python 2.7 and choose the option to add to path (off by default)
# Then install two modules
#  C:\>pip install requests
#  C:\>pip install BeautifulSoup
# Then run the program
#  C:\>python tftp.py

import requests
from BeautifulSoup import BeautifulSoup
requests.packages.urllib3.disable_warnings()

tftp_hosts = [
"host1",
"hostN"
]
tftp_user = ""
tftp_pass = ""

tftp_files = [
"file1",
"fileN"
]
tftp_path = ""

for tftp_host in tftp_hosts:

url_base = "https://{}/cmplatform/".format(tftp_host)
url_login = "{}j_security_check".format(url_base)
url_upload = "{}tftpFileUpload.do".format(url_base)

# Allows us to keep track of our login session
print "\nLogging in to {}...".format(tftp_host),
connection = requests.Session()

# Start a new session by simply access a page on the server
resp = connection.get(url_base, verify = False)

# Our login form data
form_data = {
"appNav": "cmplatform",
"j_username": tftp_user,
"j_password": tftp_pass
}

# Our login submission to the server
resp = connection.post(url_login, verify = False, data = form_data)
print "Success!\n"
for tftp_file in tftp_files:

# We need to grab the token the server gives us, so we can pass it back upon 
upload
print "Grabbing a new token...",
soup = BeautifulSoup(connection.get(url_upload, verify = False).content)

# It's a hidden input 

Re: [cisco-voip] what are the cool kids using to read CUCM logs nowadays?

[Ryan Ratliff (rratliff)]

This is more than something, it’s like the Future peeking around the corner to 
give you a hint of how cool and awesome it’s going to be when you get there.

It’s also 100% created and developed by TAC engineers.

-Ryan

On May 17, 2018, at 12:15 PM, Florian Kroessbacher 
> wrote:

Maybe this is something

https://cway.cisco.com/tools/CollaborationSolutionsAnalyzer/


--

Florian Krößbacher

florian.kroessbac...@gmail.com

[https://s3.amazonaws.com/htmlsig-assets/grey/twitter.png]
 [https://s3.amazonaws.com/htmlsig-assets/grey/googleplus.png] 
  
[https://s3.amazonaws.com/htmlsig-assets/grey/linkedin.png] 


Am 17. Mai 2018, 18:12 +0200 schrieb Lelio Fulgenzi 
>:
Awesome info! Thanks.

My hope is to just get an idea of what’s going on. But I agree, I usually tend 
to go to the TAC for more detailed help.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook



From: Anthony Holloway 
>
Sent: Thursday, May 17, 2018 10:56 AM
To: Ryan Huff >
Cc: Lelio Fulgenzi >; voyp list, 
cisco-voip (cisco-voip@puck.nether.net) 
>
Subject: Re: [cisco-voip] what are the cool kids using to read CUCM logs 
nowadays?

I also second TranslatorX as my first stop.  Make sure to have CDR enabled on 
the cluster, and just dump all of the compressed logs into it, pop open the 
Call List, find your call, double click it to see some good high level details 
(disconnect cause, duration, codecs, dtmf, ip addresses, device names) about 
the call, then generate a filter if you need to see the ladder diagram.  I 
don't use it for more complex log analysis, for that I sail over to Ryan's 
island and ask to use his Windows ME box and fire up Notepad++.

The find in files feature is amazing, but you will need to un-compress the logs 
first (RTMT can do this for you). The highlighting is helpful, and if you know 
regex, you're golden.  PS Some folks in TAC have syntax highlighting for CM 
traces in Notepad++, but so far they have not been willing to share it with me.

Which brings me to my final point.  Reading CM traces is not an easy effort, 
and you should give yourself a time limit, then just open a TAC case (or send 
it to Daniel Pagan; the human parser).  The Troubleshooting IP Telephony book 
is pretty good, and there's a few nuggets on the mailing list, but really, if 
you're not working in TAC, or a TAC like job function, you're swimming up 
stream.  You might have better luck performing controlled experiments, swapping 
components in and out to isolate the root cause.

With that said, you'll never get better at log parsing, if you're not log 
parsing.  So, if you're sick and twisted like Ryan and Daniel able to devote 
some time to log parsing, go for it.

On Thu, May 17, 2018 at 8:33 AM Ryan Huff 
> wrote:
For the money (free) and usability; yeah, I’d go with Paul’s TranslatorX. 
Especially if your troubleshooting call behaviors because of its ability to 
organize by session ID and parse out OPTIONS messages.

- Geany text editor does a good job because of its ability to highlight similar 
entities (Linux, not sure if there is a Windows port).

- Notepad++ if I’m on an island and that’s all I have.

Really though, anything that can parse the
character will work in a pinch but you’ll have to deal with the default 
chronologically logged readout. Whereas something like TranslatorX has more 
purposeful filters that allow you to follow the call’s message stack a little 
easier.

-Ryan-

On May 17, 2018, at 09:17, Lelio Fulgenzi 
> wrote:

I need to do some log analysis to see why a certain group of fax machines are 
getting reorder tone when trying to dial a number. I’ve got some other 
troubleshooting steps to do first, but I have a feeling I’m going to have to 
take a look.

Is it translator X still?

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

Re: [cisco-voip] 8832s

[Ryan Ratliff (rratliff)]

phones, 
looking to add support for the Webex Room Kit device, so we need a Device Pack, 
but they are not ready to roll out a major firmware upgrade from 11.x to 12.x 
on all of their 78/8800 series phones.  Therefore, I have to now dance around 
the firmware upgrade, in what should be an otherwise easy task of applying 
support for just this specific device model.

I'd be curious to know how many people are actually delivering phone firmware 
via Device Packs, versus CUCM upgrades, versus COP files, versus ZIPs.

For me, it goes like this:

1. CUCM Upgrades are for upgrading CUCM, I typically freeze the existing phone 
firmware upgrades (and will do them pre- or post-upgrade of CUCM)
2. Device Packs are for adding support for newer models, I typically freeze the 
existing phone firmware upgrades
3. COP Files are almost never used for upgrading phone firmware, they change 
the device defaults, when my intention is never to upgrade 100% of a model 
right from the start (pilot first)
*If COPs didn't change device defaults, I'd likely use these over ZIP 
files.  Do these restart TFTP automatically?  I cannot recall.
4. ZIP Files are my preferred approach, because they are low risk because I can 
easily control their distribution in the environment (like running a pilot 
first)



On Mon, Apr 30, 2018 at 12:45 PM Ryan Ratliff (rratliff) 
<rratl...@cisco.com<mailto:rratl...@cisco.com>> wrote:
Since Cisco already drops support for all firmware older than the most recent 
firmware:


“You keep using that word, I do not think it means what you think it means”.

In all seriousness, and as the author of the document you quoted, there’s a 
reason why the bulk of that document is dedicated to explaining the fact that 
that the word “support” can mean many things, and even lists examples to 
highlight this point.

I would also like to point out the fact that said document describes itself as 
a “policy”, and policies don’t exist in a vacuum. They exist because there are 
situations that require them to be applied, and it’s generally helpful when a 
company you work with to publicly document whatever policy they are applying to 
you. Equally important is that you are told exactly how and why that policy is 
being applied to your situation.

All of that said my point is that the word “support” gets thrown around a lot 
in the customer support business. We all should be certain to explain exactly 
what version of the word we mean when using it, and if you find yourself on the 
receiving end of a policy that limits some form of support for which you feel 
you are entitled, you owe it to yourself and the other person to ask for 
clarification.

Anyone that can’t provide that clarification or context is either being lazy or 
doesn’t know what they are talking about.

-Ryan

On Apr 30, 2018, at 9:06 AM, Anthony Holloway 
<avholloway+cisco-v...@gmail.com<mailto:avholloway+cisco-v...@gmail.com>> wrote:

I wish CUCM didn't ship with newer phone firmware.

Since Cisco already drops support for all firmware older than the most recent 
firmware:

- For each IP Phone model, once Cisco releases a new firmware version, the 
older versions are no longer supported.
- Cisco expects customers who encounter a problem on an older version of 
firmware to test the latest firmware on a subset of phones in order to confirm 
that the problem still exists.
Source: 
http://www.cisco.com/c/en/us/support/docs/collaboration-endpoints/unified-ip-phone-7900-series/116684-technote-ipphone-00.html

And most people agree that you should upgrade firmware before a CUCM upgrade 
anyway, just remove firmware from CUCM.

Not too mention it clutters up TFTP.

I also think that the firmware should be decoupled from the Device Packs.  When 
adding support for a single model phone, rarely am I also trying to upgrade 
100% of the phones in the environment too.

On Sun, Apr 29, 2018 at 8:22 PM Charles Goldsmith 
<wo...@justfamily.org<mailto:wo...@justfamily.org>> wrote:
Since the 8832 is a dual bank phone, shouldn't it have the old image on it in 
the backup bank?  Maybe hardcoding the old image on the phone configuration and 
doing a reset will cause it to boot from it?


On Sun, Apr 29, 2018 at 7:06 PM Ryan Huff 
<ryanh...@outlook.com<mailto:ryanh...@outlook.com>> wrote:
Sounds like the ole’ ‘step upgrade’ issue that plagued the 79xx series back in 
the 8.x days 

My guess is they don’t actually need RMA’ed, just the easiest way to deal with 
it 

I’d flash the phones and advertise an isolated tftp server to them with the 
firmware load and XML bootstrap file. The phones aren’t working now, so 
flashing them and then still not getting them to load right isn’t going to make 
it any worse.

Use DNS in the DHCP scope in your isolation network with the TFTP server and 
pcap/debug the DNS queries to see the bootstrap and load files it’s looking for.

In the 79xx series back in the day when I would perform thi

Re: [cisco-voip] 8832s

[Ryan Ratliff (rratliff)]

Since Cisco already drops support for all firmware older than the most recent 
firmware:


“You keep using that word, I do not think it means what you think it means”.

In all seriousness, and as the author of the document you quoted, there’s a 
reason why the bulk of that document is dedicated to explaining the fact that 
that the word “support” can mean many things, and even lists examples to 
highlight this point.

I would also like to point out the fact that said document describes itself as 
a “policy”, and policies don’t exist in a vacuum. They exist because there are 
situations that require them to be applied, and it’s generally helpful when a 
company you work with to publicly document whatever policy they are applying to 
you. Equally important is that you are told exactly how and why that policy is 
being applied to your situation.

All of that said my point is that the word “support” gets thrown around a lot 
in the customer support business. We all should be certain to explain exactly 
what version of the word we mean when using it, and if you find yourself on the 
receiving end of a policy that limits some form of support for which you feel 
you are entitled, you owe it to yourself and the other person to ask for 
clarification.

Anyone that can’t provide that clarification or context is either being lazy or 
doesn’t know what they are talking about.

-Ryan

On Apr 30, 2018, at 9:06 AM, Anthony Holloway 
> wrote:

I wish CUCM didn't ship with newer phone firmware.

Since Cisco already drops support for all firmware older than the most recent 
firmware:

- For each IP Phone model, once Cisco releases a new firmware version, the 
older versions are no longer supported.
- Cisco expects customers who encounter a problem on an older version of 
firmware to test the latest firmware on a subset of phones in order to confirm 
that the problem still exists.
Source: 
http://www.cisco.com/c/en/us/support/docs/collaboration-endpoints/unified-ip-phone-7900-series/116684-technote-ipphone-00.html

And most people agree that you should upgrade firmware before a CUCM upgrade 
anyway, just remove firmware from CUCM.

Not too mention it clutters up TFTP.

I also think that the firmware should be decoupled from the Device Packs.  When 
adding support for a single model phone, rarely am I also trying to upgrade 
100% of the phones in the environment too.

On Sun, Apr 29, 2018 at 8:22 PM Charles Goldsmith 
> wrote:
Since the 8832 is a dual bank phone, shouldn't it have the old image on it in 
the backup bank?  Maybe hardcoding the old image on the phone configuration and 
doing a reset will cause it to boot from it?


On Sun, Apr 29, 2018 at 7:06 PM Ryan Huff 
> wrote:
Sounds like the ole’ ‘step upgrade’ issue that plagued the 79xx series back in 
the 8.x days 

My guess is they don’t actually need RMA’ed, just the easiest way to deal with 
it 

I’d flash the phones and advertise an isolated tftp server to them with the 
firmware load and XML bootstrap file. The phones aren’t working now, so 
flashing them and then still not getting them to load right isn’t going to make 
it any worse.

Use DNS in the DHCP scope in your isolation network with the TFTP server and 
pcap/debug the DNS queries to see the bootstrap and load files it’s looking for.

In the 79xx series back in the day when I would perform this Lazarus trick for 
some lucky customers; the bootstrap filename was XMLDefault.cnf.xml. Not sure 
if it’s the same nowadays though.

Here is the Cisco doc on the procedure for the older stuff  worth a shot 
but not sure if it still works on the newer gear.

https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/200582-Update-Cisco-IP-Phone-Firmware-through-T.html


-Ryan-

On Apr 29, 2018, at 18:53, Jason Aarons (Americas) 
> wrote:




I have a customer with four 8832 conference room phones. Their CUCM was running 
version 12.0.1 of the 8832 firmware. These phones shipped with version 
12.0.1SR2. When they registered the first two phones they downgraded from 
12.0.1SR2 to 12.0.1 and are now unusable. They sit on “Connecting” after 
booting up. They do not get an IP address. You cannot set an IP address 
manually. If you reset the phone it doesn’t fix it, nor does a factory 
reset
 allow the phone to revert to the firmware they shipped with. Cisco TAC says 
they must be RMA’d. We upgraded CUCM to 12.0.1SR3 and the other two phones 
upgraded fine from 12.0.1SR2 to 12.0.1SR3.

Does anyone have any ideas on what we could do to fix 

Re: [cisco-voip] CUCM Pre-Upgrade Checklist

[Ryan Ratliff (rratliff)]

Just filed CSCvj14739 to see if they will update the docs. Given the last 
release of FreeFTPd was a number of years ago there’s no guarantee it will 
happen, but that doesn’t mean it won’t work any longer.

-Ryan

On Apr 24, 2018, at 3:10 PM, Ryan Huff 
<ryanh...@outlook.com<mailto:ryanh...@outlook.com>> wrote:

It was the 1GB max per transaction file size, but was then fixed. I don’t think 
they’ve restricted their cipher suites either, so I think it still works with 
CBC-Blowfish and other older/weaker suites  which is why folks like it on 
CUCM; might not be the most secure but it just works.

Sent from my iPhone

On Apr 24, 2018, at 15:06, Ryan Ratliff (rratliff) 
<rratl...@cisco.com<mailto:rratl...@cisco.com>> wrote:

I vaguely recall something changing with FreeFTPd that specifically broke our 
DRS and that’s why it’s no longer supported.
i don’t know if it was a max file size or something else.

-Ryan

On Apr 24, 2018, at 12:33 PM, Anthony Holloway 
<avholloway+cisco-v...@gmail.com<mailto:avholloway+cisco-v...@gmail.com>> wrote:

I just noticed Cisco now supports freeFTPd, but they stopped supporting my 
favorite SFTP product "free FTDP."  :(

"Cisco does not support using the SFTP product free FTDP."

Source: same document

On Sat, Mar 31, 2018 at 10:38 PM Anthony Holloway 
<avholloway+cisco-v...@gmail.com<mailto:avholloway%2bcisco-v...@gmail.com>> 
wrote:
Has anyone seen this lately?  This thing is nuts.  I've been doing upgrades for 
like 10 years now, and this seems a little over the top.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/upgrade/11_5_1/cucm_b_upgrade-guide-cucm-115/cucm_b_upgrade-guide-cucm-115_chapter_010001.html

Some Highlights:

"If you have custom ringtones or background images in the TFTP directory, you 
need to create a separate backup for these files. They are not included in the 
Disaster Recovery System (DRS) backup file."

Good to know.  I must admit that I didn't know that.

"Record the following login and password information: all application users 
credentials, such as DRS, AXL, and accounts for other third-party integration"

What?  Why?  What do you plan on doing with my configuration?

"Record the settings for Enterprise Parameters on both [CM] nodes and [IM] 
nodes. [T]he settings that are configured on Unified Communications Manager 
nodes overwrite the settings configured on IM and Presence Service nodes during 
the upgrade process."

Well that's some lazy software engineering right there folks.

"Export user records using the Bulk Administration Tool (BAT)."

That's a nice list of users you got there.  It would be a shame if this upgrade 
deleted all of them.

And the list just goes on, and on, and on.  The pre-upgrade is as long as the 
upgrade.  Who legitimately is already doing 100% of these things?
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Cisco Jabber, UDS, High CPU

[Ryan Ratliff (rratliff)]

What version of UCM are you on? If it’s 11.5 SU3 check informix ccm.log for 
something like this:
23:13:59 SCHAPI: last statement aus_refresh_stats(integer,integer)
23:13:59 SCHAPI: [Auto Update Statistics Refresh 43-2] Error -217 Column 
(aus_cmd_dbs_priority) not found in any table in the query (or SLV is 
undefined).

This is CSCva78144.

I ask because I’m pretty sure one of those last two numbers is the time taken 
to process the request, and neither of those are a good number.

-Ryan

On Apr 13, 2018, at 2:22 PM, ROZA, Ariel 
> wrote:

Hi, guys and gals.

I am trying to troubleshoot a High CPU Alarm on a CUCM Subscriber:

I ran the “utils diagnose test” command and got warnings on the tomcat_sessions 
module. gathered all the  tomcats logs around the time of the event and found 
lots of  GET /cucm-uds/users HTTP/1.1 200 1383 1611 queries.

In the Bug Search tool I found several bugs for old jabber versions regarding 
this, one enhancement request but no fixes.

I was wondering if it is possible to load balance the UDS queries around the 
cluster using several DNS SRV records for _cisco-uds._tcp with the same 
priority /weight to load balance the queries, or if this breaks functionality, 
somehow. The only examples I found are ones with different weight/priority.

Regards,

Ariel Roza
Collaboration Support Engineer
t: +54 11 5282-0458
c: +54 9 11 5017-4417 webex: http://logicalis-la.webex.com/join/ariel.roza
Av. Belgrano 955 – Piso 20 – CABA – Argentina – C1092AAJ
www.la.logicalis.com
_
Business and technology working as one




 
 


Logicalis Argentina S.A. solo puede ser obligado por sus representantes legales 
conforme los límites establecidos en el acto constitutivo y la legislación en 
vigor.
El contenido del presente correo electrónico e inclusive sus anexos contienen 
información confidencial.
El mismo no puede ser divulgado y/o utilizado por cualquiera otro distinto al 
destinatario, ni puede ser copiado de cualquier forma.

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] 500 series headsets

[Ryan Ratliff (rratliff)]

With respect to comparisons on that post to other vendors, on my DX it 
displaced a Jabra Evolve 80 (which I loved) and I immediately got feedback on 
the audio quality improvement.

My calls are primarily to Spark and WebEx meetings with video so these aren’t 
just g.711 calls so I’m probably not exactly in the target audience for this 
first line of headsets.

Most people in TAC won’t adopt until a wireless model is available.

-Ryan

On Apr 13, 2018, at 11:14 AM, Ryan Ratliff (rratliff) 
<rratl...@cisco.com<mailto:rratl...@cisco.com>> wrote:

With the DX it’s just a headset, no special ringtone. I have to update my lab 
to connect to an 88xx phone.

-Ryan

On Apr 13, 2018, at 10:28 AM, Brian Meade 
<bmead...@vt.edu<mailto:bmead...@vt.edu>> wrote:

I didn't test that out.  Sounds like Ryan may be able to answer that.

On Fri, Apr 13, 2018 at 10:21 AM, Anthony Holloway 
<avholloway+cisco-v...@gmail.com<mailto:avholloway+cisco-v...@gmail.com>> wrote:
Do you know if it plays the ringtone from the phone, or if it plays its own 
ringing audio sound?

On Fri, Apr 13, 2018 at 8:57 AM Brian Meade 
<bmead...@vt.edu<mailto:bmead...@vt.edu>> wrote:
I played around with them at Enterprise Connect.  They seemed pretty nice 
especially with the phone menu integration to adjust settings and test audio.  
I wasn't a fan of how small the in-call indicator is.  I think they should have 
made that a full ring.

Having the deep integration into Jabber and the phones will be really nice, but 
I've heard they are going to open this up to other headset vendors as well in 
the future most likely.

For softphones, I always have customers complaining of different software 
taking control of the headset and breaking audio for CIPC/Jabber.  If this can 
address those issues, it's definitely worth the premium price point and will 
help me to start pushing customers more towards softphones.

On Fri, Apr 13, 2018 at 8:39 AM, Lelio Fulgenzi 
<le...@uoguelph.ca<mailto:le...@uoguelph.ca>> wrote:

For those of you with collab user group memberships... an interesting thread on 
the new headsets


Cisco Series 500 Headsets

Collaboration Customer Connection (members only) - View the full 
discussion<https://communities.cisco.com/message/287567#287567>


Sent from my iPhone

___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] 500 series headsets

[Ryan Ratliff (rratliff)]

With the DX it’s just a headset, no special ringtone. I have to update my lab 
to connect to an 88xx phone.

-Ryan

On Apr 13, 2018, at 10:28 AM, Brian Meade 
> wrote:

I didn't test that out.  Sounds like Ryan may be able to answer that.

On Fri, Apr 13, 2018 at 10:21 AM, Anthony Holloway 
> wrote:
Do you know if it plays the ringtone from the phone, or if it plays its own 
ringing audio sound?

On Fri, Apr 13, 2018 at 8:57 AM Brian Meade 
> wrote:
I played around with them at Enterprise Connect.  They seemed pretty nice 
especially with the phone menu integration to adjust settings and test audio.  
I wasn't a fan of how small the in-call indicator is.  I think they should have 
made that a full ring.

Having the deep integration into Jabber and the phones will be really nice, but 
I've heard they are going to open this up to other headset vendors as well in 
the future most likely.

For softphones, I always have customers complaining of different software 
taking control of the headset and breaking audio for CIPC/Jabber.  If this can 
address those issues, it's definitely worth the premium price point and will 
help me to start pushing customers more towards softphones.

On Fri, Apr 13, 2018 at 8:39 AM, Lelio Fulgenzi 
> wrote:

For those of you with collab user group memberships... an interesting thread on 
the new headsets


Cisco Series 500 Headsets

Collaboration Customer Connection (members only) - View the full 
discussion


Sent from my iPhone

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] BE6K Starter Pack behavior/limitation

[Ryan Ratliff (rratliff)]

Somewhere a DC sales person is drooling and doesn’t know why…

-Ryan

On Apr 13, 2018, at 10:19 AM, Anthony Holloway 
> wrote:

Oooo!  I like the sound of that!  With full mesh SIP trunks between all of the 
clusters too.

On Fri, Apr 13, 2018 at 7:57 AM daniele visaggio 
> wrote:
Ops, I misread. Sorry

You bought two starter kits, so 70 CUWL in total.

The answer to both your questions then is yes.

Each cucm asks to the plm all the needed licenses, as per your configuration.

As long as the total users among the two clusters with less than 10 devices is 
<= 70, you are fine.

In theory you could have 70 clusters with one user each 

Regards

2018-04-13 14:15 GMT+02:00 Matthew Loraditch 
>:
The starter pack is a marketing thing, on the backend it’s just regular 
licenses and can be pooled.
It will just show as 70 licenses as you mentioned and can be shared.




Matthew Loraditch​
Sr. Network Engineer

p: 443.541.1518


w: www.heliontechnologies.com|  
e: mloradi...@heliontechnologies.com













From: cisco-voip 
> 
On Behalf Of Ki Wi
Sent: Friday, April 13, 2018 4:02 AM
To: cisco-voip@puck.nether.net
Subject: [cisco-voip] BE6K Starter Pack behavior/limitation


Hi Group,

If I purchased 2 x BE6k starter packs of 35 CUWL Standard license for 
installation with 2 different clusters. There are located in 2 different part 
of the world, there's latency issues so we have to do this although number of 
users are low.

How will it show up in PLM? 70 CUWL STD license? Can it be shared among the 2 
clusters?

Let's say 1 cluster will be using 45 CUWL standard licenses while another one 
use like 25 CUWL ? Will this lead to any license violation in the PLM?

--
Regards,
Ki Wi

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] 500 series headsets

[Ryan Ratliff (rratliff)]

I’m using a 532 with a DX80 and have been pretty happy with it.  I’ve gotten 
good feedback on audio quality and background noise as well.

For those not on CUG these are the headsets.
https://www.cisco.com/c/en/us/products/collaboration-endpoints/headset-500-series/index.html


-Ryan

On Apr 13, 2018, at 9:56 AM, Brian Meade 
> wrote:

I played around with them at Enterprise Connect.  They seemed pretty nice 
especially with the phone menu integration to adjust settings and test audio.  
I wasn't a fan of how small the in-call indicator is.  I think they should have 
made that a full ring.

Having the deep integration into Jabber and the phones will be really nice, but 
I've heard they are going to open this up to other headset vendors as well in 
the future most likely.

For softphones, I always have customers complaining of different software 
taking control of the headset and breaking audio for CIPC/Jabber.  If this can 
address those issues, it's definitely worth the premium price point and will 
help me to start pushing customers more towards softphones.

On Fri, Apr 13, 2018 at 8:39 AM, Lelio Fulgenzi 
> wrote:

For those of you with collab user group memberships... an interesting thread on 
the new headsets


Cisco Series 500 Headsets

Collaboration Customer Connection (members only) - View the full 
discussion


Sent from my iPhone

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Audio cut-through delays upon transfer

[Ryan Ratliff (rratliff)]

In those scenarios you typically need simultaneous packet captures on both 
sides and debugging on anything in the infrastructure to identify the bad actor.

-Ryan

On Apr 13, 2018, at 12:42 AM, James Andrewartha 
<jandrewar...@ccgs.wa.edu.au<mailto:jandrewar...@ccgs.wa.edu.au>> wrote:

Indeed it does. Also it seems if you don't lose any packets after the first 
then the count is still zero. I managed to get a packet capture from one end 
and it looks fine, just 5 seconds later audio packets from the other end start 
showing up. On another call I did see out of order and then retransmitted SCCP 
TCP packets during call setup which is a bit of concern, the only layer 3 
device between the phones and CUCM is a 2921.


Parameter Origination Destination MediaTransportAdd_Ip 10.100.254.10 
10.100.253.203 PayLoadCapability 6 6 MediaCap_g723BitRate 0 0 Packets Sent 
14381 14381 Octets Sent 2473532 2473532 Packets Received 13870 14380 Octets 
Received 2385640 2473360 Packets Lost 0 0 Jitter 0 0 Latency 0 0 QoS G G 
VideoCap_Codec 0 0 VideoCap_Bandwidth 0 0 VideoCap_Resolution 0 0 
VideoTransportAddress_IP 0.0.0.0 0.0.0.0 VideoTransportAddress_Port 0 0

James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877

From: Anthony Holloway 
<avholloway+cisco-v...@gmail.com<mailto:avholloway+cisco-v...@gmail.com>>
Sent: Thursday, 12 April 2018 2:55 AM
To: Ryan Ratliff (rratliff)
Cc: James Andrewartha; cisco-voip list
Subject: Re: [cisco-voip] Audio cut-through delays upon transfer

Makes sense.




On Wed, Apr 11, 2018 at 1:19 PM Ryan Ratliff (rratliff) 
<rratl...@cisco.com<mailto:rratl...@cisco.com>> wrote:
Lost is a delta in sequence numbers from one packet to the next. If you never 
receive a first packet you can’t lose any.

-Ryan

On Apr 11, 2018, at 12:01 PM, Anthony Holloway 
<avholloway+cisco-v...@gmail.com<mailto:avholloway+cisco-v...@gmail.com>> wrote:

How does it show 0 packets received, but also 0 packets lost?  Somethings not 
right in the report from CMR.

On Tue, Apr 10, 2018 at 10:48 PM James Andrewartha 
<jandrewar...@ccgs.wa.edu.au<mailto:jandrewar...@ccgs.wa.edu.au>> wrote:
On 13/01/17 09:25, James Andrewartha wrote:
> We've experienced something similar for about 2.5 years, on some calls
> one party won't be able to hear audio for 5-10 seconds. These are all
> internal calls, single site, phones (7965 and 7975, SCCP) on a flat L2
> network, one pub, one sub. It even survived an upgrade from 8.6 to 10.5.
> We opened a case and TAC asked for a trace of it happening, but we
> couldn't reproduce it easily. I keep meaning to get back to it, but
> haven't had the time given how hard it is to reproduce.

Well, some staff have moved to a demountable with a switch daisy-chained
from another and it's happening quite a bit now. Looking at the CDR I
can see that one end is just not receiving the packets. The phones are
on the same subnet/VLAN, and the switch ports have no errors. I'm going
to set up a span capture but does anyone have any suggestions on where
to look? CUCM 10.5.2.15900-8, 7975/7965 with SCCP[47]5.9-4-2SR2-2S.

Parameter   Origination Destination
MediaTransportAdd_Ip10.100.254.227  10.100.253.223
PayLoadCapability   6   6
MediaCap_g723BitRate0   0
Packets Sent714 712
Octets Sent 122808  122464
Packets Received711 0
Octets Received 122292  0
Packets Lost0   0
Jitter  0   0
Latency 0   0
QoS G   G
VideoCap_Codec  0   0
VideoCap_Bandwidth  0   0
VideoCap_Resolution 0   0
VideoTransportAddress_IP0.0.0.0 0.0.0.0
VideoTransportAddress_Port  0   0
 --
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip



___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Audio cut-through delays upon transfer

[Ryan Ratliff (rratliff)]

Lost is a delta in sequence numbers from one packet to the next. If you never 
receive a first packet you can’t lose any.

-Ryan

On Apr 11, 2018, at 12:01 PM, Anthony Holloway 
> wrote:

How does it show 0 packets received, but also 0 packets lost?  Somethings not 
right in the report from CMR.

On Tue, Apr 10, 2018 at 10:48 PM James Andrewartha 
> wrote:
On 13/01/17 09:25, James Andrewartha wrote:
> We've experienced something similar for about 2.5 years, on some calls
> one party won't be able to hear audio for 5-10 seconds. These are all
> internal calls, single site, phones (7965 and 7975, SCCP) on a flat L2
> network, one pub, one sub. It even survived an upgrade from 8.6 to 10.5.
> We opened a case and TAC asked for a trace of it happening, but we
> couldn't reproduce it easily. I keep meaning to get back to it, but
> haven't had the time given how hard it is to reproduce.

Well, some staff have moved to a demountable with a switch daisy-chained
from another and it's happening quite a bit now. Looking at the CDR I
can see that one end is just not receiving the packets. The phones are
on the same subnet/VLAN, and the switch ports have no errors. I'm going
to set up a span capture but does anyone have any suggestions on where
to look? CUCM 10.5.2.15900-8, 7975/7965 with SCCP[47]5.9-4-2SR2-2S.

Parameter   Origination Destination
MediaTransportAdd_Ip10.100.254.227  10.100.253.223
PayLoadCapability   6   6
MediaCap_g723BitRate0   0
Packets Sent714 712
Octets Sent 122808  122464
Packets Received711 0
Octets Received 122292  0
Packets Lost0   0
Jitter  0   0
Latency 0   0
QoS G   G
VideoCap_Codec  0   0
VideoCap_Bandwidth  0   0
VideoCap_Resolution 0   0
VideoTransportAddress_IP0.0.0.0 0.0.0.0
VideoTransportAddress_Port  0   0
 --
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Windows AXL Query Tool

[Ryan Ratliff (rratliff)]

I discovered SoapUI helping somebody with a TMS case earlier this week.
https://developer.cisco.com/site/sxml/learn/soap-ui-tutorial/

It’s based off the RIS API but the utility is generic to any SOAP interface and 
extremely easy to use. Just point at the wsdl and you get a full-featured gui 
interface.

-Ryan

On Mar 29, 2018, at 10:57 AM, Pete Brown 
> wrote:

Thanks Ben and Stephen.  I looked at getting an app cert, but unfortunately 
I've blow my hobby budget for the near future.  Bought a few upgrades for my 
Oculus PC.  Will look into a cert again in a few months when the wife has 
calmed down.

Someone pointed out that the tree structure for the tables & columns is almost 
identical to the IFX Ontape Browser and that I might merge the two.  It's a 
great idea, but the only problem is that you could not run normal SQL queries 
against backups.  I'd have to implement a copy of Informix's SQL language in my 
parsing module.  I may still merge them, but I'd have to remove the SQL query 
window when parsing backup data.

As usual, thoughts and suggestions are welcome.


From: Stephen Welsh 
>
Sent: Wednesday, March 28, 2018 11:33 AM
To: Pete Brown
Cc: Anthony Holloway; Lelio Fulgenzi; 
cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Windows AXL Query Tool

Hi Pete,

When downloading Windows SmartScreen checks the signing certificate of the 
application (if applied), if you haven’t already it’s best to buy a code 
signing certificate and sign your exe’s etc. with it (we use signtool.exe to do 
that).

Recently we updated the code signing cert for PhoneView and initially (even 
with a valid cert) it was flagged by SmartScreen until it had been downloaded a 
few times.

Haven’t looked at your tool, but congrats for putting it out there, a simple 
way to query and export raw SQL data is sorely needed, something I was going to 
do but ended up going down a different path ;)

Thanks

Stephen Welsh
CTO
UnifiedFX

On 28 Mar 2018, at 17:14, Pete Brown > 
wrote:

Yeah, for some reason Windows 10 keeps flagging my apps as viruses.  Have to 
figure that one out someday.

Thanks for the feedback; those are all great suggestions.  Will knock out the 
easiest ones first: listing columns under the tables in the tree, copy/paste in 
Excel and executing on keystroke.



From: Anthony Holloway 
>
Sent: Wednesday, March 28, 2018 10:56 AM
To: Lelio Fulgenzi
Cc: Brian Meade; Pete Brown; 
cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Windows AXL Query Tool

Ok, now that I've downloaded it, and installed your virus...err...appit's 
actually really nice!  ;)

A few quick notes:

The copy paste of the data doesn't work too well in Excel.  Specifically, it 
adds a column to the left of the first column.

It would be nice to have a feature to let me find data in the tables like CUDLI 
does.  E.g., I need to find a table and column where this specific phone number 
is used.

It would be nice to have a feature to let me see the columns for a table, which 
I see that you're doing by automatically returning the first 10 rows, but a 
vertical list like the tables would be better for me.

It would be nice to be able to query CAR as well, but I know that' not apart of 
the same AXL API, rather its CDROnDemand, no?

It would be nice to be able to run multiple commands at once with a line 
delimiter.

It would be nice to be able to hit a keystroke to execute the command.

On Wed, Mar 28, 2018 at 10:46 AM Anthony Holloway 
> 
wrote:
No not really.

The work flow is like this:

1. Download the ZIP file from CUCM plugins page and extract to your PC.  It's 
simply called Cisco AXL Toolkit, but the file is axlsqltoolkit.zip
2. Open a command prompt to the working folder you extracted the files to, such 
that you're in the same folder as the README.txt
3. Open the README.txt and make a copy of the command example for your 
platform: windows or linux, and for me it's windows, so line 22 I will copy to 
the line below the example (CTRL+d in Notepad++)
4. Correct the username and password, host for your environment
5. Add the input/output file switches: -input=test.xml -output=test.txt (we'll 
create the test.xml in the next step, and it will create the test.txt file for 
you)
6. Make a copy of the sample.xml file and we'll name it test.xml for this 
exercise
7. Edit the test.xml so it only contains 1 query; we'll use this one for 
testing: 
8. Copy your command line from the README.txt and paste it into your command 
prompt
9. Watch the activity scroll up the screen, and check your test.txt file for 
the output

Be 

Re: [cisco-voip] Renewing TVS and IPSec certificates

[Ryan Ratliff (rratliff)]

You also don’t need to restart the TFTP service when regenerating TVS certs, in 
fact it can cause problems depending on how quickly you pull the trigger and 
how many phones you have.

-Ryan

On Mar 27, 2018, at 1:37 PM, Brian Meade 
> wrote:

If just doing IPSec, you just need to restart the DRS services.  No affect on 
ITL.

As soon as you regenerate TVS on any node, all phones will reboot and ITL will 
be updated instantly.  Be very careful to do this one node at a time making 
sure all phones re-register before moving on.  Really only a huge issue if you 
are doing the CallManager.pem at the same time.

TVS certs aren't in the CTL last I checked so you shouldn't need to regenerate 
the CTL on mixed-mode clusters if just updating TVS/IPSec.

On Tue, Mar 27, 2018 at 1:03 PM, ROZA, Ariel 
> wrote:
Hi guys,

I have some specific questions regarding renewing some certificates.
The situation is this. In a cluster with 4 servers, I have two of them that 
have their tvs.pem and ipsec.pem certificates paste their due date.
I have reviewed a lot of the documentation available, and designed a 
step-by-step procedure to renew them, doing so one server at a time, stopping 
the TFTP, etc.

But still I have some specific doubts:

If I just want to renew the ipsec.pem cert ¿Do I have to go through the 
complete process to renew the ITL and reset the phones to get it? Or can I just 
renew the self-signed cert and restart the DRS Services?
If I am using mixed mode ¿Do I have to regenerate the CTL file as well?

Regards,

Ariel Roza
Collaboration Support Engineer
t: +54 11 5282-0458
c: +54 9 11 5017-4417 webex: 
http://logicalis-la.webex.com/join/ariel.roza
Av. Belgrano 955 – Piso 20 – CABA – Argentina – C1092AAJ
www.la.logicalis.com
_
Business and technology working as one




 
 


Logicalis Argentina S.A. solo puede ser obligado por sus representantes legales 
conforme los límites establecidos en el acto constitutivo y la legislación en 
vigor.
El contenido del presente correo electrónico e inclusive sus anexos contienen 
información confidencial.
El mismo no puede ser divulgado y/o utilizado por cualquiera otro distinto al 
destinatario, ni puede ser copiado de cualquier forma.


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Wireless Phones

[Ryan Ratliff (rratliff)]

For DECT Spectralink has phones on the Cisco GPL via SolutionsPlus.
https://www.spectralink.com/sites/default/files/Spectralink_Cisco_PrdctOver_A4_030215.pdf

-Ryan

On Mar 16, 2018, at 12:39 PM, Brian Meade 
> wrote:

Cisco just announced some DECT headsets so maybe they'll have the expertise to 
do something like this in the future.  But I don't see Cisco selling a product 
that gets customers away from buying their wireless infrastructure.

On Fri, Mar 16, 2018 at 5:12 AM, Gary Parker 
> wrote:


> On 15 Mar 2018, at 21:00, Natambu Obleton 
> > wrote:
>
> What are people using for wireless phones? Any good experiences?

Sadly only bad experience here. When we first moved to CUCM from an isdx 8 
years ago our users where generally unhappy with the lack of DECT product from 
Cisco. We tried putting PSTN DECT basestations on ATAs but found those to be 
very unreliable. Cisco’s wifi handsets are prohibitively expensive and, last 
time we looked, had poor battery life and required per device certificates to 
get on our 802.1x wifi.

We tried out the Cisco SMB offering, the SPA232D DECT/SIP bridge and handsets. 
They were able to register as “advanced SIP devices” in callmanager but we 
found them to be quite unreliable, the handsets were fragile and broke often, 
and Cisco eventually discontinued them.

I’m aware of enterprise DECT/SIP gateways such as Aastra (which now appears to 
have been bought by Mitel) and we looked into this, but the initial investment 
to install was deemed to high for our site as user density in any one place 
wouldn’t justify the cost.

I’m now recommending users make use of remote destination with their work 
mobiles. It’s a bit more management over head for me, but it’s the best we’ve 
been able to offer. I keep asking Cisco for cucm compatible DECT product but it 
seems they’re not interested.


---
/-Gary Parker--f--\
| Unified Communications Service Manager  |
n  Loughborough University, IT Services   |
| tel:+441509635635 
sip:g...@lboro.ac.uk  o
|https://www.osx.ninja/pubkey.txt |
\r--d-/


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] CUCM and Auto Fill Credentials

[Ryan Ratliff (rratliff)]

The challenge here is that you want the “type” of the input to be set to 
password for these fields so the browser will replace the contents with *.

What would you rename in this case?  Is it the label for the input, the id of 
the input itself? For the login and ssh password fields the ids don’t match and 
neither do the label fields (login page doesn’t have a label at all).

With respect to the service profile this is also resolved in 12.0 where 
username and password are no longer in the service profile.

I brought this issue up with PSIRT today and the general consensus is that we 
are trying to do the right thing by specifying autocomplete=off on these 
fields. The fact that the browser ignores this for password input fields is a 
problem, but we need more inputs from the DEs on how or if we can prevent this. 
We are going to look into back-porting the fix from 12.0 into older releases.

-Ryan

On Mar 16, 2018, at 2:10 PM, Anthony Holloway 
> wrote:

"...I think they need to rename some of these fields so that password autofill 
doesn't happen."

Exactly!  If you're going to build a web app, you have to understand how the 
browser works.  Granted, the browser should be a little more intelligent about 
what it thinks is a login form, but the web developers should know how that 
process works, and how to avoid having the browser mistake their fields for 
login forms.

On Fri, Mar 16, 2018 at 11:32 AM Brian Meade 
> wrote:
This is also a problem on the Service Profile page filling in LDAP 
Username/Password.  I see so many customers with their admin accounts filled in 
here from autofill on their browsers.  These are sent clear-text to Jabber 
clients.

I think I talked to some Cisco folks on this and it didn't get anywhere since 
it was more a browser issue.  I think they need to rename some of these fields 
so that password autofill doesn't happen.

On Wed, Mar 14, 2018 at 9:49 PM, Anthony Holloway 
> wrote:
I'm working on something, and was wondering if you could check something for 
me, so I can better understand why and how often this is happening.

So, I was looking at phone config file today, and I noticed the ccmadmin 
username and password was in the XML, and in plain text nonetheless.

I found out that the browser, when told to remember your credentials, will 
treat the SSH username/password fields as login fields whenever you modify a 
phone, and you might be unknowingly save your credentials for clear text view 
by unauthenticated users.

Is anyone already aware of this?

You could you run the following command on your clusters:

run sql select name, sshuserid from device where sshuserid is not null and 
sshuserid <> ""

Then in the output, if there are any hits, look at the config XML file for the 
phone and see if the passwords are there.

E.g.,

output might be:

SEP6899CD84B710 aholloway

So then you would navigate your browser to:

http://:6970/SEP6899CD84B710.cnf.xml

You then might have to view the HTML source of the page, because the browser 
might mess up the output.

You're then looking for the following two fields, your results will vary:

aholloway
MyP@ssw0rd

Then, since we now know it's happening, get list of how many different 
usernames you have with this command:

run sql select distinct sshuserid from device where sshuserid is not null and 
sshuserid <> "" order by sshuserid

This could also be happening with Energy Wise settings, albeit not on the same 
web pages.

I'm curious about two things:

1) Is it even happening outside of my limited testing scenarios?
2) How many different usernames and passwords were there?

If the answers are yes, and 1 or more, then this is an issue Cisco should 
address.

The reason it's happening is because the way in which browsers identify login 
forms, is different from the way in which web developers understand it to work. 
 Cisco uses the element attribute on these fields "autocomplete = false" and 
unfortunately, most browser ignore that directive.

I have noticed that this does not happen, if you have more than 1 saved 
password for the same site, rather it will only happen if you use the same 
login for the entire site.  Our highest chance of seeing this happen are for 
operations teams where they login with their own accounts, and do not use DRS 
or OS Admin.

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net

Re: [cisco-voip] CUCM and Auto Fill Credentials

[Ryan Ratliff (rratliff)]

With respect to storing passwords the intent for the ssh username/password 
field for IP phones is something that was generally not considered very 
sensitive info. The separation of ssh credentials from enabling SSH was also 
done to help mitigate the fact that this info is available to anyone by default.

For TP endpoints while their admin credentials can be configured in UCM the 
endpoint ignores that setting unless the TFTP config file is encrypted, for 
just this reason.

With respect to the fix in 12.0 I haven’t figured that out just yet. The id and 
name attributes on the HTML inputs are different, but both have type 
“password”. Personally I can’t imagine why the browser would think a stored 
credential from one html element should be autofilled into an entirely 
different field, but I guess the browser is trying to be helpful.

The only big difference I can see in 12.0 is the proper use of tags in the 
input and labels associated with them.
10.5

Secure Shell Password 





12.x

Secure Shell Password 


Password







I’m not an expert in HTML autocomplete so it’s going to take some more testing 
to figure out exactly why the login credentials aren’t auto-filled in this 
field any longer.


-Ryan

On Mar 15, 2018, at 9:38 AM, Anthony Holloway 
> wrote:

It's certainly a complicated problem: .  Also, Cisco is storing the password in 
the DB encrypted, as you could see by modifying the SQL query to:

run sql select name, sshuserid, sshpassword from device where sshuserid is not 
null and sshuserid <> ''

Which is what the defect Ryan posted is talking about, the stored encrypted 
password length.

However, the TFTP files do contain the plain text credentials.  You could 
encrypt your TFTP config files to protect yourself completely, but who's doing 
that these days?

And lastly, like I said before, this is also happening with the Energy Wise 
fields, albeit on other web pages, and those are stored in the DB in plain text.

E.g.,

run sql select xml from enterprisephoneconfigxml where xml like '%energy%'

Output will contain the following if impacted 
"theuserthepassword"
 which is also transmitted in plain text to phones via the phone XML config 
file.

There may be others too.

On Thu, Mar 15, 2018 at 11:02 AM Lelio Fulgenzi 
> wrote:

Thank you very much for bring this to the group’s attention. And for providing 
some great troubleshooting steps to see whether we might be affected. Thanks to 
others for providing other information as well.


On the one hand, I see it being a browser issue – autocompleting when it 
shouldn’t (although you’re asked at least once, are you not?) and ignoring the 
autocomplete=false…. But…

Should Cisco really be storing passwords in clear text anywhere?




---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook






From: cisco-voip 
[mailto:cisco-voip-boun...@puck.nether.net]
 On Behalf Of Anthony Holloway
Sent: Wednesday, March 14, 2018 9:50 PM

To: Cisco VoIP Group 
>
Subject: [cisco-voip] CUCM and Auto Fill Credentials


I'm working on something, and was wondering if you could check something for 
me, so I can better understand why and how often this is happening.

So, I was looking at phone config file today, and I noticed the ccmadmin 
username and password was in the XML, and in plain text nonetheless.

I found out that the browser, when told to remember your credentials, will 
treat the SSH username/password fields as login fields whenever you modify a 
phone, and you might be unknowingly save your credentials for clear text view 
by unauthenticated users.

Is anyone already aware of this?

You could you run the following command on your clusters:

run sql select name, sshuserid from device where sshuserid is not null and 
sshuserid <> ""

Then in the output, if there are any hits, look at the config XML file for the 
phone and see if the passwords are there.

E.g.,

output might be:

SEP6899CD84B710 aholloway

So then you would navigate your browser to:

http://:6970/SEP6899CD84B710.cnf.xml

You then might have to view the HTML source of the page, because the browser 
might mess up the output.

You're then looking for the following two fields, your results will vary:

aholloway
MyP@ssw0rd

Then, since we now know it's happening, get list of how many different 
usernames you have with this command:

run sql select distinct sshuserid from device where sshuserid is not null and 
sshuserid <> "" order by 

Re: [cisco-voip] CUCM and Auto Fill Credentials

[Ryan Ratliff (rratliff)]

There’s an internal defect on this that cites CSCvb33351 as the source of the 
fix for this problem, fixed in 12.0.

Interestingly enough for me in Firefox (on 12.0) I don’t get ccmadmin passwords 
auto-populated in ssh fields, but I do get saved ssh username/passwords 
auto-populated in the ccmadmin login fields.

Thanks for raising this issue everyone.

-Ryan

On Mar 15, 2018, at 7:54 AM, Anthony Holloway 
> wrote:

I didn't actually check the file contents before replying.  What I meant to say 
was, the ConfigFileCacheList.txt is the file I was wondering if existed.  Since 
it does, then one could write a scraping tool to search for and confirm 
credentials in one fell swoop.

Thanks for the information, Stephen.

I should also mention, some members of this group are replying to me directly, 
off the list, and the results are confirming that this is indeed an issue worth 
Cisco's time and attention.  One member of the list confirmed that passwords 
stored with 3rd party password tools, such as LastPass, protect you from this 
behavior.

Like I said earlier, it's the browser/user causing the autocomplete to happen, 
but Cisco's attempt to have these fields NOT auto filled, is faulty.

You can read more below on why that might be.

https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion#The_autocomplete_attribute_and_login_fields



On Thu, Mar 15, 2018 at 7:46 AM Anthony Holloway 
> 
wrote:
I don't know about any of those additional files, and the FileList one was 
something I was looking for.

Today's goal will be to write a Python script to: grab that file, then grab all 
phone configs, then auth against CUCM, and finally, store the credentials that 
worked.

It might even be worth looking at the credentials which don't work, because it 
might tell you something about password habits, allowing you to predict future 
passwords. Eg Summer2010

On Mar 15, 2018 2:34 AM, "Stephen Welsh" 
> wrote:
While we are on the subject here are some other non encrypted TFTP server items:


  *   ConfigFileCacheList.txt
  *   FileList.txt
  *   BinFileCacheList.txt
  *   PerfMon.txt
  *   ParamList.txt
  *   lddefault.cfg

So you could use the following to get a list of all the device MAC addresses 
anonymously from the TFTP server:

http://TFTPServer:6970/FileList.txt

So with the scenario you describe and just the TFTP Server IP Address you could 
scan all the device configs on the cluster to see if even just one of them has 
the admin credentials saved accidentally on the SSH User/Password field.

I suspect this may apply to most clusters

Kind Regards

Stephen Welsh
CTO
UnifiedFX

On 15 Mar 2018, at 07:25, Stephen Welsh 
> wrote:

Hi Anthony,

Yes, the SSH credentials saved on the device page are available in clear text 
in the phone XML config, it’s not just your environment unfortunately. Also I 
believe the same thing applies for the Telepresence endpoints (anything running 
CE including the DX) for the web page admin credentials that are saved in the 
vendor config section.

We noticed this a little while ago but given most people did not populate it 
did not consider as a serious issue, however the auto-population of credentials 
is not something we considered. So yes this does look like a serious problem 
when you combine those two together.

Kind Regards

Stephen Welsh
CTO
UnifiedFX

On 15 Mar 2018, at 01:50, Anthony Holloway 
> wrote:

I'm working on something, and was wondering if you could check something for 
me, so I can better understand why and how often this is happening.

So, I was looking at phone config file today, and I noticed the ccmadmin 
username and password was in the XML, and in plain text nonetheless.

I found out that the browser, when told to remember your credentials, will 
treat the SSH username/password fields as login fields whenever you modify a 
phone, and you might be unknowingly save your credentials for clear text view 
by unauthenticated users.

Is anyone already aware of this?

You could you run the following command on your clusters:

run sql select name, sshuserid from device where sshuserid is not null and 
sshuserid <> ""

Then in the output, if there are any hits, look at the config XML file for the 
phone and see if the passwords are there.

E.g.,

output might be:

SEP6899CD84B710 aholloway

So then you would navigate your browser to:

http://:6970/SEP6899CD84B710.cnf.xml

You then might have to view the HTML source of the page, because the browser 
might mess up the output.

You're then looking for the following two fields, your results 

Re: [cisco-voip] Cisco 7975 or 7965 stuck at speaker button Red LED, sorry if this is a repost

[Ryan Ratliff (rratliff)]

For what it’s worth the symptom you describe matches the Field Notice that was 
provided earlier. This means one of the memory modules has died and the phone 
cannot be recovered (that I know of).

-Ryan

On Feb 12, 2018, at 12:44 PM, Terry Oakley 
<terry.oak...@rdc.ab.ca<mailto:terry.oak...@rdc.ab.ca>> wrote:

Vinnie do you have the # button pressed before or after you plug in the POE 
cable?   You need to have the # button pressed before.

Terry


From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of 
Vinnie Dao
Sent: Monday, February 12, 2018 10:25 AM
To: 'Ryan Ratliff (rratliff)' <rratl...@cisco.com<mailto:rratl...@cisco.com>>; 
'Anthony Holloway' 
<avholloway+cisco-v...@gmail.com<mailto:avholloway+cisco-v...@gmail.com>>
Cc: cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
Subject: Re: [cisco-voip] Cisco 7975 or 7965 stuck at speaker button Red LED, 
sorry if this is a repost

That was awesome guys, however, I tried many times what you said but the phone 
can’t pass Green LED light on Speaker phone.
Here is what I have done,
Plug in POE cable to power up the phone,
Press # button,  and get to the green light on speaker phone and stay there 
like forever.  I can’t even across that point and can’t even get to the 
flashing line 1 to 8 of CP-7975 LED of the phone.
Any other suggestion before I give up on these?

Thank you very much in advance to all.


From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of Ryan 
Ratliff (rratliff)
Sent: Monday, February 12, 2018 8:11 AM
To: Anthony Holloway
Cc: cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
Subject: Re: [cisco-voip] Cisco 7975 or 7965 stuck at speaker button Red LED, 
sorry if this is a repost

There are 3 I can find documented internally.
1. Soft Reset (documented publicly)
2. Hard Reset (see below)
3. Hard Reset but keep network settings (Terry’s)

The hard reset is:
3491672850*# - the “nuke it from orbit” option which is a total format the 
flash, hard reset but does not preserve the network.

Prior to version 8.3.3 only the first 2 existed, but number 2 unintentionally 
kept the network preferences, acting like number 3 does today (see CSCsi60439).

-Ryan

On Feb 12, 2018, at 10:39 AM, Anthony Holloway 
<avholloway+cisco-v...@gmail.com<mailto:avholloway+cisco-v...@gmail.com>> wrote:

"The code for the network preservation hard reset is: *7412369#085"

And then there were three.

Wes, Ryan, Brian, how many are there really?

On Mon, Feb 12, 2018 at 9:31 AM Terry Oakley 
<terry.oak...@rdc.ab.ca<mailto:terry.oak...@rdc.ab.ca>> wrote:
I have used the below to reset 79xx series phones and load a new firmware on 
them.  Setup a laptop with a TFTP server on it and on most I have been able to 
recover what looked like a bricked unit.

Thanks

Terry


Terry Oakley
Telecommunications Coordinator | Information Technology Services
Red Deer College |100 College 
Blvd<https://maps.google.com/?q=100%0D+College+Blvd=gmail=g>. | 
Box 5005 | Red Deer | Alberta | T4N 5H5
work (403) 342-3521   |  FAX (403) 343-4034<tel:(403)%20343-4034>



#Total Hard Reset
The code for the total hard reset is: 3491672850*#
A total hard reset formats /flash0 blowing away everything except CNU.  All 
settings and personalization of the phone is removed.
#Hard Reset with Network Setting Preservation
The code for the network preservation hard reset is: *7412369#085
And it also does a complete format of /flash0 - yet it preserves the network 
settings so that after the format, any static IP and other network settings are 
preserved. The settings are stored in volatile RAM, so it is important to not 
remove power to the phone during this process
#Prerequisites
There are a number of prerequsites that are necessary for a successful factory 
reset.
1.You must have a network environment in which DHCP is used to 
provide the phone with an IP address and a TFTP server (i.e. DHCP option 150).
2.There must be an appropriate default load for your phone model on 
that TFTP server:
o The default load name is: termxx.default.loads (where xx is part 
of the model number, 41 for 7941, 62 for 7962, 70 for 7970, etc.)
o The version of the default load must be the same signing type 
(dev or release) as the phone on which you wish to do a factory reset.
o This file (termxx.default.loads) is packaged with every phoneload 
that is installed on the callmanager, but since the name is not unique per 
phoneload version, the copy of termxx.default.loads is always the one from the 
most recent load that was installed on the callmanager. It may not be the type 
(dev or release) that you want.


From: cisco-voip 
[mailto:cisco-voip-boun...@puck.nether.net<mailto:cisco-voip-boun...@puck.nether.net>]
 On Behalf Of Vinnie Dao
Sent: Sunday, February 11, 2018 11:07 AM
To: 'Anthony Holloway' 
<avh

Re: [cisco-voip] Cisco 7975 or 7965 stuck at speaker button Red LED, sorry if this is a repost

[Ryan Ratliff (rratliff)]

There are 3 I can find documented internally.
1. Soft Reset (documented publicly)
2. Hard Reset (see below)
3. Hard Reset but keep network settings (Terry’s)

The hard reset is:
3491672850*# - the “nuke it from orbit” option which is a total format the 
flash, hard reset but does not preserve the network.

Prior to version 8.3.3 only the first 2 existed, but number 2 unintentionally 
kept the network preferences, acting like number 3 does today (see CSCsi60439).

-Ryan

On Feb 12, 2018, at 10:39 AM, Anthony Holloway 
> wrote:

"The code for the network preservation hard reset is: *7412369#085"

And then there were three.

Wes, Ryan, Brian, how many are there really?

On Mon, Feb 12, 2018 at 9:31 AM Terry Oakley 
> wrote:
I have used the below to reset 79xx series phones and load a new firmware on 
them.  Setup a laptop with a TFTP server on it and on most I have been able to 
recover what looked like a bricked unit.

Thanks

Terry


Terry Oakley
Telecommunications Coordinator | Information Technology Services
Red Deer College |100 College 
Blvd. | 
Box 5005 | Red Deer | Alberta | T4N 5H5
work (403) 342-3521   |  FAX (403) 343-4034



#Total Hard Reset
The code for the total hard reset is: 3491672850*#
A total hard reset formats /flash0 blowing away everything except CNU.  All 
settings and personalization of the phone is removed.
#Hard Reset with Network Setting Preservation
The code for the network preservation hard reset is: *7412369#085
And it also does a complete format of /flash0 - yet it preserves the network 
settings so that after the format, any static IP and other network settings are 
preserved. The settings are stored in volatile RAM, so it is important to not 
remove power to the phone during this process
#Prerequisites
There are a number of prerequsites that are necessary for a successful factory 
reset.
1.You must have a network environment in which DHCP is used to 
provide the phone with an IP address and a TFTP server (i.e. DHCP option 150).
2.There must be an appropriate default load for your phone model on 
that TFTP server:
o The default load name is: termxx.default.loads (where xx is part 
of the model number, 41 for 7941, 62 for 7962, 70 for 7970, etc.)
o The version of the default load must be the same signing type 
(dev or release) as the phone on which you wish to do a factory reset.
o This file (termxx.default.loads) is packaged with every phoneload 
that is installed on the callmanager, but since the name is not unique per 
phoneload version, the copy of termxx.default.loads is always the one from the 
most recent load that was installed on the callmanager. It may not be the type 
(dev or release) that you want.


From: cisco-voip 
[mailto:cisco-voip-boun...@puck.nether.net]
 On Behalf Of Vinnie Dao
Sent: Sunday, February 11, 2018 11:07 AM
To: 'Anthony Holloway' 
>

Cc: cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Cisco 7975 or 7965 stuck at speaker button Red LED, 
sorry if this is a repost

HI Anthony,
Appreciated your reply,
The link you sent requires login,

I am not sure what version on them, since they are stand by units for a while,  
from the last time they were working at one point.  I tried to reset, 
1234567890*# but still the same issue.

From: Anthony Holloway [mailto:avholloway+cisco-v...@gmail.com]
Sent: Sunday, February 11, 2018 9:53 AM
To: Vinnie Dao
Cc: cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Cisco 7975 or 7965 stuck at speaker button Red LED, 
sorry if this is a repost

Did you already look through the bug search tool?

https://bst.cloudapps.cisco.com/bugsearch/search?kw=stuck%20boot=prdNm=269065653=anfr

What version of firmware is it, and what can you do to clear the problem?  
I.e., Power cycle the phone?

On Sun, Feb 11, 2018 at 11:49 AM Vinnie Dao 
> wrote:
Greeting to all,

Lately, I have some CP-7965 and CP-7975 stuck at speaker button during boot up 
as red LED and stay there for long time.  Has anyone got this issue and know 
how to fix it?

Please advise where to go from here to resolve this issue, and thank you very 
much for your time.

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Disable Phone services in Jabber

[Ryan Ratliff (rratliff)]

Video without audio is going to be a terrible user experience, so where is the 
audio going to these calls?

My assumption is you want audio to the desk phone, but video through the PC. 
This is possible and called Desk Phone Video in Jabber. It still requires Phone 
Services but doesn’t need a CSF device, just the CTI connection for phone 
control.

-Ryan

On Feb 7, 2018, at 12:27 PM, Anthony Holloway 
> wrote:

In order to establish a video call, you'll need a working audio call first; 
therefore, disabling phone services or removing the CSF will not be an option 
(sans WebEx cloud Jabber which can do Jabber to Jabber calls without a CSF).

Wild idea here, keep the CSF device, but use the SIP Profile to stuff all audio 
into a small UDP range, like say 3000 - 3002, and then use network ACLs (or 
Windows firewall) to block the audio stream.

On Wed, Feb 7, 2018 at 3:41 AM Sarjo Touray 
> wrote:
Hi All,

I have a requirement to disable phone services in Jabber but allow video, this 
will be apply to certain group of people within our organisation. I see that 
from Jabber you can disable phone services from the main window, is there any 
way of disabling phone services without end user intervention?

Any ideas?


Many thanks

Sarjo.
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Which ATA 191 firmware for my CUCM version

[Ryan Ratliff (rratliff)]

The devpack in your screenshot is the one you want, it adds the device 
definition and 12.0(1) firmware for the ATA191.

Just be aware that it will include firmware for all phones, so unless you want 
those changing make a note of your Device Defaults before the install and 
change the values back before you reboot.

-Ryan

On Jan 25, 2018, at 10:20 AM, Jonatan Quezada 
> wrote:

I totally have to get this right, I dont see my exact version here?



--



Johnny Q
Voice Technology Analyst - TelNet
Chemeketa Community College
johnn...@chemeketa.edu
Building 22 Room 131
Work 5033995294
Mobile 9712182110
SIP 5035406686
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Spectre and Meltdown remediation as relevant to Cisco systems

[Ryan Ratliff (rratliff)]

The only baremetal versions of those products that would require a patch are 
the ones that ran on Windows. Since we moved to linux root has been locked down 
and you can’t run custom code on the box, which is a requirement for 
exploitation of this vulnerability.

-Ryan

On Jan 9, 2018, at 9:58 PM, Lelio Fulgenzi 
> wrote:


I'm wondering if products like CUCM v9 and UCCx v9 will be investigated/patched 
for vulnerabilities? Especially since they're bare metal compatible.

If Linux is affected, then wouldn't these be as well?

We're in the process of migrating but it would be good to know.

Sent from my iPhone

On Jan 9, 2018, at 8:32 PM, Lelio Fulgenzi 
> wrote:


To be honest, I'm a little worried about the rumoured slowdown the fixes are 
gonna have. Will this impact the supported status of certain CPUs in collab 
suite?

Sent from my iPhone

On Jan 9, 2018, at 9:47 AM, Lelio Fulgenzi 
> wrote:

Good question. I’m not sure of the impact either. I _suspect_ that because ESXi 
abstracts the CPU that the intel CPU bug would affect ESXi only, not the 
underlying applications. Because you can’t run the software on baremetal any 
longer, there shouldn’t be a need to update the voice applications.

I’m also guessing that CIMC would likely need some updates too.

But yes, interesting to see how this plays out.


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook



From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of Ben 
Amick
Sent: Monday, January 8, 2018 4:27 PM
To: voip puck >
Subject: [cisco-voip] Spectre and Meltdown remediation as relevant to Cisco 
systems

So I haven’t had much time to look into this, but has anyone else compiled a 
list of or needs for remediation for cisco systems for the Spectre and Meltdown 
vulnerabilities?

I know the one only affects Intel and some ARM processors, whereas the other is 
more OS level, if I understand properly?

So being that all the cisco telephony products are on virtualized product now, 
I assume that we would go to VMWare for any patching relevant to those, but I 
would imagine that we would also need a security patch for the redhat/centos OS 
the Unified Communications products run on (and doubly so for those of us using 
old MCS physical chassis?)

It looks like routers and switches, as well as ASAs are all potentially 
vulnerable as well.

I’ve found the following articles on their website: 
https://tools.cisco.com/security/center/viewAlert.x?alertId=56354 and 
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel
 that details the issues a bit, but it looks like Cisco hasn’t found anything 
yet nor delivered any patches?

Ben Amick
Unified Communications Analyst


Confidentiality Note: This message is intended for use only by the individual 
or entity to which it is addressed and may contain information that is 
privileged, confidential, and exempt from disclosure under applicable law. If 
the reader of this message is not the intended recipient or the employee or 
agent responsible for delivering the message to the intended recipient, you are 
hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited. If you have received this communication 
in error, please contact the sender immediately and destroy the material in its 
entirety, whether electronic or hard copy. Thank you
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Weird One: Discrete Right Audio Channel doesn't get sent out Jabber and WebEx

[Ryan Ratliff (rratliff)]

Very likely depends on the codec as well. Even on high-end TP endpoints you 
don’t get stereo audio until you are in a conference call with a high-bw audio 
codec.

As for the encoding of the audio stream from PC input to application I wouldn’t 
be surprised if the PC hardware and OS had some role in how it ends up either.

-Ryan

On Dec 22, 2017, at 11:06 AM, Brian Meade 
> wrote:

I don't believe WebEx or Jabber does stereo.  Probably just pulling the left 
stream in as mono.

You'll probably need an adapter or mixer to combine the 2 channels into a mono 
channel.

On Tue, Dec 19, 2017 at 7:32 PM, Lelio Fulgenzi 
> wrote:

Ok. This is a weird one.

It seems as though any discrete right audio channel sent to either jabber or 
WebEx is not sent off (or not received) at the far end.

I've tested this a few ways, with different equipment, in different spots along 
the path, and it all points to software.

The weird thing is, the application audio test components show signal strength. 
It just doesn't make it to the other side.

Has anyone tested out discrete audio channels being sent to WebEx or Jabber?

The use case here is bridging purpose built audio/video equipment with PC based 
collaboration tools, e.g. Webex, Jabber, Teams, Zoom, etc.

For video (and sometimes audio), I'm using the Inogeni HD(HDMI)-to-USB3 
converter.

For audio, I've tried a USB enabled Behringer mixer. That's worked, because I'm 
pretty sure the left and right channels are the same.

I also have an ART USB Dual Pre device which has both USB and analog out. In 
both cases, the right channel is not making it out to the far end, at least 
intelligibly. It's ever so faint and low and slowed down sometimes.

In the ART analog example above, I used a cable that fed the two outputs into 
the camera's mic input. Left channel fine, right channel nada.

Again, all along the path, signal strength is good and responsive.

What gives?

Lelio



Sent from my iPhone
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Configuring intercom in DX80

[Ryan Ratliff (rratliff)]

If you are running CE on the DX (which I think you are) then intercom isn’t a 
supported feature. It’s only available on the Android software.


-Ryan

On Dec 28, 2017, at 9:15 AM, ROZA, Ariel 
> wrote:

Hi!

Has anyone configured intercom in a DX80 before?

I am trying to set it up on a DX90 with 9.1.4 firmware but I´m running into an 
issue that’s driving me nuts.

The device is taking the “standard phone button template” and its copies. which 
have only has one, unmodifiable, line.
There is a second PBT defined in CUCM, called “Cisco DX80 SIP” that has more 
lines, but the phone doesn´t list it as a vaild option in the PBT drop-down 
list.

The CUCM version Is 9.1. The DX80 firmware is 9.1.4, and the date sheet says 
that the feature is supported on the device.

¿Has anyone done it before?

Ariel Roza
Support Engineer / Southern Cone
t: +54 11 5282-0458
c: +54 9 11 5017-4417
Av. Belgrano 955 – Piso 20 – CABA – Argentina – C1092AAJ
www.la.logicalis.com
_
Business and technology working as one


 
 


Logicalis Argentina S.A. solo puede ser obligado por sus representantes legales 
conforme los límites establecidos en el acto constitutivo y la legislación en 
vigor.
El contenido del presente correo electrónico e inclusive sus anexos contienen 
información confidencial.
El mismo no puede ser divulgado y/o utilizado por cualquiera otro distinto al 
destinatario, ni puede ser copiado de cualquier forma.

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Teradici Zero Client packet loss when connected through Phones

[Ryan Ratliff (rratliff)]

Two things I can think of to investigate.
1. EEE settings on the phones (especially if they are on old software). This 
caused tons of problems with PCs a while back and may be coming into play here.
2. Automatic Port Synchronization - This setting forces the PC port to the same 
speed as the Switch port, so if your switch is 1000/Full and the Zero client 
doesn’t agree this could cause issues.

Given Mike’s reply about forcing them to 100/Full I’m guessing the 2nd setting 
could be coming into play.

-Ryan

On Dec 13, 2017, at 2:20 PM, Mike King 
> wrote:

We have some Teradici Zero Clients, and began to have issues with them last 
year.   We ended up hard coding them to 100/Full, and our issues went away.

We did have a different use case, as we were having the zero clients at the end 
of runs, not plugged into a device with what has to be less than a 14 foot 
cord.  So I don't know.  We were attributing it to some kind of attenuation on 
the cable plant (We didn't own the cable plant, nor did we have test results of 
it), and dropping to 100/Full cleared it up so we stopped investigating.   We 
only had about 5 of the devices, and they are extremely static, so it wasn't 
worth the effort to investigate further.

On Tue, Dec 12, 2017 at 10:54 PM, Nathan Reeves 
> wrote:
Interested to know if anyone's seen issues when connecting Teradici Zero 
Clients through the switchport on Cisco Phones.  In this case 8845 and 7841 
phones.

Customer is moving to CUCM and has an established base of Zero Clients.  
They're starting to see packet loss reported on their clients only when 
connected to the network via the phones.  Not previously noted packet loss with 
their previous IP Phone (Siemens).

Anyone know of any best practices / issues with this setup?

Thanks

Nathan

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] moving/upgrading Expressway VMs

[Ryan Ratliff (rratliff)]

If you really don’t want mac changing then you should use a static mac address 
on the VM, similar to ELM/PLM.

https://kb.vmware.com/s/article/219

-Ryan

On Dec 5, 2017, at 6:48 AM, Nathan Reeves 
> wrote:

Licensing on the expressway VM's is tied to the BIOS UUID (uuid.bios) and the 
Ethernet0 MAC Address (ethernet0.address) of the VM's.  The Serial number (and 
subsequently generated Release Keys based on the Serial number) should remain 
the same across upgrades.  Moving the VM between ESXi Hosts (assuming a VMware 
cluster) should not impact the Licensing in any way.  Move of the machine to a 
new host manually will most likely prompt asking if you copied or moved, I 
would suggest choosing moved, but not 100% sure that this maintains the machine 
UUID or just the VC uuid.

Recovery wise, you can record the UUID and Mac address (grab the VMX file from 
the ESXi host) of the current VM's, along with the Serial and Release keys.

Once you've deployed the new VM from OVA, manually update the VM vmx file:
- Remove the VM from Inventory (not delete from disk).
- Download the new vmx file, update the uuid.bios and ethernet0.address values, 
and then upload to the VM folder on the ESXi Datastore.
- Right click on the vmx file and choose 'Add to inventory'.

This ~should~ end up giving you the same serial number on the VM on boot and 
allow you to re-enter the release keys.  If you don't see the same serial 
number, double check your values in the vmx.


HTH

Nathan

On Tue, Nov 28, 2017 at 10:52 PM, Lelio Fulgenzi 
> wrote:

I'm new to the Expressway world, so new, we had a partner come in and help us 
set them up. :O

We had a weird experience with the licensing with one host, which needed manual 
intervention, but for the most things went ok.

This raises the question, however, of how I can plan to move these VMs to 
another host, upgrade them, then move them again.

As far as I can tell, the serial number to which the license is tied is 
generated at installation time and is not changed when a VM is moved, but I'm 
not sure this holds when the expressway o/s is upgraded.

My goal is to upgrade the 4 vm cluster (2C+2E) offline then move them to the 
online network, rebalancing our ESXi hosts as we do this.

I understand that even if we are successful in moving the VMs without rehosting 
the license, if we ever encounter a situation where we need to recover from 
backup, we need to consider if this will fail because of the licenses or is 
there a way around that?

Thoughts?

Lelio

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Cisco Voice Operating System-Based Products Unauthorized Access Vulnerability

[Ryan Ratliff (rratliff)]

I’d rather you take the approach of telling all of your customers to install 
the COP file rather than pen-testing on a live system :)

If you want to see if they are exposed get the system-history.log and 
install.log and upload them to a TAC SR or manually inspect them to determine 
the timeline of install & upgrade types. All the info you need is in the 
advisory.
PCD Migration -> exposed
RU Upgrade -> exposed
L2 Upgrade -> not exposed

-Ryan

On Nov 20, 2017, at 11:25 AM, Brian Meade 
> wrote:

Anyone got some ideas on trying to crack this UCOS password?  Should help us 
out in scanning our customers to see if they are affected, but we wouldn't want 
this password to end up indexed by google and make the issue even worse.

On Fri, Nov 17, 2017 at 4:46 PM, Anthony Holloway 
> wrote:
Bwahaha! I just logged in to your CUCM Tim.

On a serious note, I think it’s interesting how this “flag” issue is such a big 
deal, when back in the old days of UCCX, Cisco was creating an intentional 
back-door in all installs, using the same username and password on all of them.

For the curious, it was :

Username: CRSAdministrator
Password: NwY.t9g(f'L9[3C

If you have access to a UCCX 7x or lower, try logging in to Windows with that 
account and report back if it worked.

If it does work, check the MADM logs on the C: for the clear text AXL username 
and password, so you can compromise CUCM too!
On Fri, Nov 17, 2017 at 1:46 PM Tim Frazee 
> wrote:
heads up

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-vos


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] UCS C210 Replace 146 GB Disk in RAID5 with 300 GB Disk

[Ryan Ratliff (rratliff)]

The 4 arrays on BE7K also have an impact on IOPS for the volume, though the 
servers are primarily built that way for array rebuild times as has been noted 
previously in this thread.

On that server especially while one volume may be fine from a space perspective 
note that the amount of IOPS for DAS is derived from the number of disk 
spindles in the array.
This means it is entirely possible to cause IO starvation problems on a BE7K by 
putting all the VMs on a single storage volume.
Spreading your VMs across the arrays will provide you protection against 
multiple disk failures (because they are RAID 5) AND spread the IOPS load 
across them.

With respect to rebuilding a TRC’s RAID5 into RAID6 or RAID10 that server is no 
longer classified as a TRC and thus Cisco cannot guarantee the same level of 
performance we would otherwise.
You may be perfectly comfortable with making such a change and willing to take 
on the risk, but guaranteeing the server meets the IOPS requirements of the 
apps running on it is your responsibility, not ours.

If things go sideways you can expect TAC to ask you to rebuild it to a RAID5 
(or at least one volume) the way it shipped as part of the troubleshooting 
process.

-Ryan

On Nov 14, 2017, at 11:33 AM, Lelio Fulgenzi 
> wrote:

Yeah, I hear ya. I mean, it’s not like there are not advantages, but, still, 
the managing of which array to put things in. ugh.


From: Charles Goldsmith [mailto:wo...@justfamily.org]
Sent: Tuesday, November 14, 2017 10:48 AM
To: Lelio Fulgenzi >
Cc: Ryan Huff >; 
cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] UCS C210 Replace 146 GB Disk in RAID5 with 300 GB Disk

Lelio, if you are using those be7k's for UC apps, your limiting factor is 
always the CPU cores, you won't run out of drive space.  Also, the be7K-h is a 
workhorse of a server, fastest one I've ever built a cluster on.  4 independent 
arrays means you can easily do maintenance on one app without affecting the 
performance of another, assuming you separate your apps between arrays and 
stagger them out.  I did 4 simultaneous installs on one, each app on it's own 
partition and they were all done in under 2 hours.

Sadly, the pricepoint on the H isn't there for most customers.  the M is nice, 
but only has 2 of the arrays, but I'll take an H for an install any day!

On Tue, Nov 14, 2017 at 9:34 AM, Lelio Fulgenzi 
> wrote:

The idea of RAID drives and managing the different volumes always had me on the 
fence on how to do things. In a perfect world, I’d stick with one big RAID 6 
array with a spare on the shelf.

The BE7K servers I ordered were delivered with 4 RAID 5 arrays. Personally, 
while I can appreciate separating the arrays, I don’t like losing that extra 
space and managing which volume to put images on is a pain.

I’ll admit, I looked at RAID 10 (when I was first reading the TRC specs) and 
was confused to heck. I did finally understand things after referring to a 
colleague, but it was a lot of drawing out.

I will say this, RAID isn’t gonna protect you if you don’t have platform 
monitoring on. You need to know the second a drive fails so you can proceed 
accordingly.

Also, if the ever do construction in your computer room, do yourself a favour, 
go to the hardware store, buy a 9.99 loose fibre furnace filter and stick it in 
front of your air intakes.



From: cisco-voip 
[mailto:cisco-voip-boun...@puck.nether.net]
 On Behalf Of Charles Goldsmith
Sent: Tuesday, November 14, 2017 9:48 AM
To: Ryan Huff >
Cc: cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] UCS C210 Replace 146 GB Disk in RAID5 with 300 GB Disk

I've seen one URE fail in a raid 5 resilvering process, years ago on a DG 
system.  Had to rebuild and restore from backup, fun times.

I agree Ryan, on a TRC system and RMA a drive, you stick with it.

From my reading on TRC, you can rebuild as a RAID 10 and get faster speeds, but 
you lose some space in the process.

On my personal systems, I'm using RAID 10 everywhere.

On Tue, Nov 14, 2017 at 8:17 AM, Ryan Huff 
> wrote:
As I’ve read and understood; it isn’t due to actual functionality though. It is 
as you say, due mostly to longer rebuild times (indexing a physically larger 
geometry than the rest of the array members, for a smaller logical geometry) 
and the risk (rare IMO) to the rest of the array (as a rebuild will stress the 
array and could cause other, near-death disks to fail thereby causing the array 
to fail). It also wastes the extra horsepower of the disk since the existing 
RAID can’t capitalize on the resources of the larger disk.

So in a case of, 

Re: [cisco-voip] Looking for advice on sRTP using tokenless CTL

[Ryan Ratliff (rratliff)]

Additionally in 11.5SU3 and 12.0 we now sign the ITL and tokenless CTL files 
with the ITLRecovery certificate instead of CallManager.pem.
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/11_5_1/SU3/cucm_b_release-notes-cucm-imp-1151su3/cucm_b_release-notes-cucm-imp-1151su3_chapter_00.html#reference_9C103B26C27EFA3008B593B943A6950C

This should greatly reduce the risk of inadvertent trust list issues caused by 
certificate operations.

-Ryan

On Oct 19, 2017, at 3:08 PM, Brian Meade 
> wrote:

In 10.x, CTL/ITL are signed by the CallManager.pem if you do tokenless.  
There's a recovery key in the ITL so you can run "utils itl reset localkey" to 
resign the ITL with the recovery key to recover your cluster.  But this doesn't 
help you with devices that don't support SBD like Jabber.

In 11.x, CTL/ITL are signed by the CallManager.pem if you do tokenless but 
there's also a recovery key for the CTL.  You can run "utils ctl reset 
localkey" to resign the CTL with the recovery key to recover your cluster.

So I'd recommend in your case that you upgrade to 11.x first or use physical 
tokens.

The latest 11.5 SU requires you to order a free encryption license through PUT 
as well.



On Tue, Oct 17, 2017 at 2:01 PM, Ryan Huff 
> wrote:
Looking at enabling sRTP on a 10.x cluster (CUCM, EXPRESSWAY, CXN, UCCX). As I 
have been researching this topic; I’ve found the “riskiest” task to be enabling 
CTL / Mixed Mode in CUCM. Specifically, if you have devices that do not support 
Security By Default.

It’s my understanding that once the callmanager cert changes, any device that 
can’t negotiate with the TVS service to establish verification will not be able 
to download the new CTL, and therefore not be able to re-register to CUCM until 
their CTL is removed.

The device/trunk security profile configurations seems straight forward as do 
the steps to take on CUBE and Expressway (regarding the trunk security).

I haven’t completed my research into the CXN/UCCX requirements for SRTP with 
CUCM.

Are their any other major/general pitfalls I should look out for? Anyone have 
any horror stories or lessons learned to share?

Thanks,

Ryan

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Inactive Device Query?

[Ryan Ratliff (rratliff)]

It uses data from a db table called registrationdynamic.

From what I recall this is only updated once per day (around midnight by 
default) so last registered will only get you to within a 24-hour period. To 
find the specific time the phone unregistered you have to go to the syslogs.

As an example here is my lab 12.0 box. Note the Last Registered always shows 
“Now” for currently registered, “Never” for something that’s never registered, 
or the last time the update task ran and that phone happened to be registered.

[cid:99637FA4-4208-406B-8257-AE83275B67DA@cisco.com]


-Ryan

On Sep 12, 2017, at 1:10 PM, Brian Meade 
> wrote:

The RIS Database contains a LastActTimeStamp field which is when that device 
last registered in Epoch time.

The problem is you have to cross-reference between nodes as a device may have 
last registered to the publisher 2 years ago but is currently registered to a 
subscriber node.

The new feature in 12.0 to track this on the webpage probably uses this field 
that's been there for a while.

You can run "show risdb query phone" on each node to pull this information.

On Tue, Sep 12, 2017 at 11:56 AM, Ben Amick 
> wrote:
I haven’t seen it mentioned before, but I feel like it’s a common thing to go 
through an audit old phones in the environment, but other than looking through 
lists of terminated users and cross referencing active users, I can’t think of 
any good way to audit phones to see if they’re alive anymore, especially with 
softphones.

In AD I would just pull a report with powershell of users/computers not logged 
in for >90 days, is there any comparable option in CUCM for inactive phones 
that you could audit against? Like last registration date or some such?

Ben Amick
Unified Communications Analyst


Confidentiality Note: This message is intended for use only by the individual 
or entity to which it is addressed and may contain information that is 
privileged, confidential, and exempt from disclosure under applicable law. If 
the reader of this message is not the intended recipient or the employee or 
agent responsible for delivering the message to the intended recipient, you are 
hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited. If you have received this communication 
in error, please contact the sender immediately and destroy the material in its 
entirety, whether electronic or hard copy. Thank you
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] firmware COP files - TFTP server only? or all nodes?

[Ryan Ratliff (rratliff)]

That’s a good call-out for the SU release notes. I’ll ask the docs team to 
include it.

If you are paying close attention you will notice that the device pack versions 
are numbered exactly like UCM builds. This is 100% on purpose and you can 
assume a higher-numbered SU will always include the changes from a 
lower-numbered device pack.


-Ryan

On Sep 12, 2017, at 12:42 PM, Lelio Fulgenzi 
<le...@uoguelph.ca<mailto:le...@uoguelph.ca>> wrote:

That’s very interesting information about the image and reboot/reset icon.

Unfortunately, I know it’s hard to go back to update documentation when newer 
versions of software are released, but it would be good to know exactly when a 
device pack is necessary. For example, if the device pack for the particular 
version of software is older than the latest SU patch, I’m pretty sure it’s 
not. So rather than updating the documentation for firmware files, at least 
updating the documentation for the device pack when new patch files are 
released would be good. Or include information in the release notes that say, 
“this release includes device pack xyz, no need to install it”

And of course, someone’s gonna tell me that that information _is_ included in 
the release notes next. ☺

---
Lelio Fulgenzi, B.A.
Senior Analyst, Network Infrastructure
Computing and Communications Services (CCS)
University of Guelph

519-824-4120 Ext 56354
le...@uoguelph.ca<mailto:le...@uoguelph.ca>
www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs>
Room 037, Animal Science and Nutrition Building
Guelph, Ontario, N1G 2W1

From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of Ryan 
Ratliff (rratliff)
Sent: Tuesday, September 12, 2017 11:41 AM
To: Dave Goodwin
Cc: cisco-voip list
Subject: Re: [cisco-voip] firmware COP files - TFTP server only? or all nodes?

In some cases the device definitions (e.g. support for new model or new product 
specific configuration settings) need to be updated. I believe that is another 
reason that *some* devpacks need to be installed on all nodes rather than just 
TFTP nodes.

There are three basic pieces required to add new device support to the cluster.


  1.  The device definition xml files. These contain the information that will 
be added to the varions database tables (typemodel, productsupportsfeature, 
etc) that tell the various processes about the new device.
  2.  The image that CCMAdmin uses for the icon on the Device->Phones page.
  3.  The firmware files associated with the model.


Number 1 only happens on the publisher, because it’s a change in the database 
tables. The subscribers pick up the changes through dbreplication, and in 11.5 
the ccm process picks up the new model through change notification on those db 
tables. Because the process to load the device xml files into the database 
isn’t selective there is too much change on the publisher’s database for change 
notification to work so you still have to restat the Cisco CallManager process 
on the publisher to pick up new devices.

Number 2 is often overlooked (because it’s cosmetic), but is why a device pack 
for a new model should be installed on all nodes. Most people ignore this part 
and I bet never notice it because they don’t use CCMAdmin on subscribers. You 
must restart Cisco Tomcat on each node after the device pack is installed for 
it to display the icon correctly. I’ve seen it once or twice where after a 
reboot the icon doesn’t load correctly until the next Tomcat restart.

Number 3 is optional since new devices will ship with their first release 
version (mostly). It is pretty common these days for the device pack that adds 
a new device to not include the release software, and for some endpoints we 
never package firmware in a device pack. If you are loading software then for 
this to work the device pack must be installed on all TFTP servers.




-Ryan

On Sep 11, 2017, at 5:20 PM, Dave Goodwin 
<dave.good...@december.net<mailto:dave.good...@december.net>> wrote:

In some cases the device definitions (e.g. support for new model or new product 
specific configuration settings) need to be updated. I believe that is another 
reason that *some* devpacks need to be installed on all nodes rather than just 
TFTP nodes.

If you are concerned about the Device Defaults being updated when you install 
the devpack on the publisher (a good thing to be thinking about), one thing you 
could consider doing is as follows. Prior to doing anything, take a snip of the 
Device Defaults and then stop Cisco TFTP on the TFTP nodes (or de-activate 
under Service Activation, since these installs sometimes call for a reboot in 
the docs). Then after your devpack install is complete, go to Device Defaults 
and change anything back to the pre-devpack state if that is your wish. Then 
you can start up Cisco TFTP again. After that, you may wish to initiate an 
all-devices restart by hand or through BAT. Especially if any of the devpack 
updates af

Re: [cisco-voip] firmware COP files - TFTP server only? or all nodes?

[Ryan Ratliff (rratliff)]

In some cases the device definitions (e.g. support for new model or new product 
specific configuration settings) need to be updated. I believe that is another 
reason that *some* devpacks need to be installed on all nodes rather than just 
TFTP nodes.

There are three basic pieces required to add new device support to the cluster.


  1.  The device definition xml files. These contain the information that will 
be added to the varions database tables (typemodel, productsupportsfeature, 
etc) that tell the various processes about the new device.
  2.  The image that CCMAdmin uses for the icon on the Device->Phones page.
  3.  The firmware files associated with the model.

Number 1 only happens on the publisher, because it’s a change in the database 
tables. The subscribers pick up the changes through dbreplication, and in 11.5 
the ccm process picks up the new model through change notification on those db 
tables. Because the process to load the device xml files into the database 
isn’t selective there is too much change on the publisher’s database for change 
notification to work so you still have to restat the Cisco CallManager process 
on the publisher to pick up new devices.

Number 2 is often overlooked (because it’s cosmetic), but is why a device pack 
for a new model should be installed on all nodes. Most people ignore this part 
and I bet never notice it because they don’t use CCMAdmin on subscribers. You 
must restart Cisco Tomcat on each node after the device pack is installed for 
it to display the icon correctly. I’ve seen it once or twice where after a 
reboot the icon doesn’t load correctly until the next Tomcat restart.

Number 3 is optional since new devices will ship with their first release 
version (mostly). It is pretty common these days for the device pack that adds 
a new device to not include the release software, and for some endpoints we 
never package firmware in a device pack. If you are loading software then for 
this to work the device pack must be installed on all TFTP servers.




-Ryan

On Sep 11, 2017, at 5:20 PM, Dave Goodwin 
> wrote:

In some cases the device definitions (e.g. support for new model or new product 
specific configuration settings) need to be updated. I believe that is another 
reason that *some* devpacks need to be installed on all nodes rather than just 
TFTP nodes.

If you are concerned about the Device Defaults being updated when you install 
the devpack on the publisher (a good thing to be thinking about), one thing you 
could consider doing is as follows. Prior to doing anything, take a snip of the 
Device Defaults and then stop Cisco TFTP on the TFTP nodes (or de-activate 
under Service Activation, since these installs sometimes call for a reboot in 
the docs). Then after your devpack install is complete, go to Device Defaults 
and change anything back to the pre-devpack state if that is your wish. Then 
you can start up Cisco TFTP again. After that, you may wish to initiate an 
all-devices restart by hand or through BAT. Especially if any of the devpack 
updates affects your existing devices.

Just keep in mind, sometimes the product specific configuration updates that 
are provided with devpacks actually require new device firmware to be 
installed. So you could get into a state where you try to configure something 
in UCM with a setting in there, but you can't make the config take effect if 
you prevent the phone from actually updating to a firmware version that 
recognizes the new setting flag.

-Dave

On Mon, Sep 11, 2017 at 2:57 PM, Ryan Huff 
> wrote:
The only reason I add to all nodes for firmware (versus just tftp) is because 
and in case, you decide to change how the nodes are used or function in the 
cluster at some point; then you don't have to worry about what is or is not on 
the node; just activate the service and go :).

Thanks,

Ryan

On Sep 11, 2017, at 2:37 PM, Lelio Fulgenzi 
> wrote:

This was my understanding from the last couple of times. We don’t have any 
alternate TFTP servers so they just attempt to grab it from the one server.

I don’t even like adding it to the publisher since it updates the device 
defaults page. And we want to do that in a controlled way.

---
Lelio Fulgenzi, B.A.
Senior Analyst, Network Infrastructure
Computing and Communications Services (CCS)
University of Guelph

519-824-4120 Ext 56354
le...@uoguelph.ca
www.uoguelph.ca/ccs
Room 037, Animal Science and Nutrition Building
Guelph, Ontario, N1G 2W1

From: bmead...@gmail.com [mailto:bmead...@gmail.com] 
On Behalf Of Brian Meade
Sent: Monday, September 11, 2017 2:33 PM
To: Lelio Fulgenzi
Cc: voyp list, cisco-voip 
(cisco-voip@puck.nether.net)
Subject: Re: 

Re: [cisco-voip] Automatically exporting just the DN and Description fields

[Ryan Ratliff (rratliff)]

If you really want to dive into the UCM database you can find the data 
dictionaries in the AXL section of 
developer.cisco.com.

-Ryan

On Aug 31, 2017, at 5:53 PM, Anthony Holloway 
> wrote:

Thanks!  I wrote that off the top of my head too.  I know there's like 50 more 
things to know, but if you master those basics, you can figure out the rest 
with very little additional effort.

I've spent a lot of time in the tables on CUCM, a fair but careful amount in 
CUC, very little 
in UCCX (mostly callcontactdetail), and none at all for other products.

On Thu, Aug 31, 2017 at 3:40 PM Stephen Welsh 
> wrote:


Wow, that’s the best advice I’ve every seen on getting to grips with CUCM’s 
database.

Kind Regards

Stephen Welsh
CTO
UnifiedFX

Sent from my iPad

On 31 Aug 2017, at 21:37, Anthony Holloway 
> wrote:

For the record, the API part is not necessary, you can just run your SQL 
queries on the CLI.  However, using the AXL API method to run the SQL query for 
you, allows you to do so programmatically.

As for the database, here are a few key points:

  *   Anything that registers is a Device and is in the device table.

  *   Anything that is a pattern is in the numplan table

  *   End Users are in the enduser table, while Application Users are in the 
applicationuser table

  *   The database is a relational database, meaning that data from one table 
will have a relationship to data in another table

  *   Some tables are joined by holding a GUID in their PKID column, which 
other tables refer to with a column name in their own table, named "fk" + 
tablename E.g., device.fkenduser = enduser.pkid

  *   Some tables are joined by holding an enum (number) in their enum column, 
which other tables refer to with a column name in their own table, named "tk" + 
tablename E.g., device.tkmodel = typemodel.enum (slightly different that fk)

  *   Some data objects are mapped together to form a new object in a third 
table named: tablename1 + tablename2 + "map"  E.g., devicenumplanmap holds line 
appearances for phones and DNs

  *   To find a list of table names: select tabname from systables order by 
tabname

  *   To find a list of columns in a table: select colname from syscolumns 
where tabid = (select tabid from systables where tabname = 'numplan') order by 
colname

  *   Sometimes when I don't know what the name of something is in the 
database, I just access the resource in the web admin, and then look at logs
This tip is courtesy of Wes Sisk: 
http://cisco-voip.markmail.org/thread/vtoasdkgieadmou3


  *   Other times I just look at the HTML on the web page to find out the name 
of the field, which is usually the name of the column (99% of the time)


  *   

On Thu, Aug 31, 2017 at 2:08 PM Ben Amick 
> wrote:
Do you have a quick reference sheet of the field names? I’d like to do 
something similar to this but also including the RNA timer/destination, user 
associations, external number mask, and the recording setting for each line.

Really, I’d like to do a run against all my translations, phones, CTI route 
points, etc to just automagically generate all my documentation, but I have not 
nearly enough knowledge about hot to use the API or the database structure in 
general. You wouldn’t happen to have a crash course on all that, would you?

From: cisco-voip 
[mailto:cisco-voip-boun...@puck.nether.net]
 On Behalf Of Brian Meade
Sent: Wednesday, August 30, 2017 5:28 PM
To: Tim Reimers >
Cc: cisco-voip >
Subject: Re: [cisco-voip] Automatically exporting just the DN and Description 
fields

Use the AXL API and the following SQL query to automate this:

select dnorpattern,description from numplan where tkpatternusage='2'

You can put "run sql" before the query to run via SSH to CUCM.

On Wed, Aug 30, 2017 at 4:45 PM, Tim Reimers 
> wrote:
Hi all-

In CUCM 9.12
I'm trying to figure out how to export just a few of the fields from the UCM 
database.
What we're after is simply the DN number, and the contents of the Description 
field associated with that DN

I've done a Phone export, and the resulting CSV is so huge it's unusable in 
Google Sheets.
I know I can set up an Export as a repeated schedule, but I have two questions.

- Can I somehow reduce the export query to a limited set of details about lines 
only. I don't need phone info particularly.
- Is there a way to transfer the file off the UCM environment automatically, so 
that it's available 

Re: [cisco-voip] 11.5.1su3 and 12.0 release notes

[Ryan Ratliff (rratliff)]

Inquiries have been made, I’m waiting to see what happened.

I suspect it’s simple human error because so many features were common to the 
two releases and they went out at almost the same time.

-Ryan

On Aug 24, 2017, at 2:02 PM, Charles Goldsmith 
<wo...@justfamily.org<mailto:wo...@justfamily.org>> wrote:

Thanks for the answer Ryan.  Any chance we can get the release notes corrected 
as to which features are in which release?  For example, the new User Interface 
updates are not in SU3, but show in the release notes.

Thanks again!

On Thu, Aug 24, 2017 at 12:53 PM, Ryan Ratliff (rratliff) 
<rratl...@cisco.com<mailto:rratl...@cisco.com>> wrote:
It is definitely the case that some of the 12.0 features were ported back to 
11.5su3.

I’m not sure what’s up with APNS stuff in the 12.0 doc, I’m 99% sure it’s there.

-Ryan

On Aug 23, 2017, at 6:02 PM, Lelio Fulgenzi 
<le...@uoguelph.ca<mailto:le...@uoguelph.ca>> wrote:


I hope they clear this up soon. The worst part is, they (Cisco) mentioned that 
SU3 isn't even the final version we should expect to be running come September 
2018.

I cried a little inside when I read that in the forums.



Sent from my iPhone

On Aug 23, 2017, at 5:10 PM, Charles Goldsmith 
<wo...@justfamily.org<mailto:wo...@justfamily.org>> wrote:

Several sections in the New and Changed Features mentions 12.0 features, and I 
wasn't sure if this was a copy/paste issue, or if these features are available 
in su3 as well.

One came to mind: 
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/11_5_1/SU3/cucm_b_release-notes-cucm-imp-1151su3/cucm_b_release-notes-cucm-imp-1151su3_chapter_00.html#reference_6D6A4367D19A6A792BA1844DE6F9A9A5

Also, of note, 12.0 doesn't have info about apple's new APNs changes that SU3 
has, I'm assuming that feature will come to an SU for 12.0 or was it just not 
documented?

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/12_0_1/cucm_b_release-notes-for-cucm-imp-1201/cucm_b_release-notes-for-cucm-imp-1201_chapter_00.html

Thanks
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip



___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] 11.5.1su3 and 12.0 release notes

[Ryan Ratliff (rratliff)]

It is definitely the case that some of the 12.0 features were ported back to 
11.5su3.

I’m not sure what’s up with APNS stuff in the 12.0 doc, I’m 99% sure it’s there.

-Ryan

On Aug 23, 2017, at 6:02 PM, Lelio Fulgenzi 
> wrote:


I hope they clear this up soon. The worst part is, they (Cisco) mentioned that 
SU3 isn't even the final version we should expect to be running come September 
2018.

I cried a little inside when I read that in the forums.



Sent from my iPhone

On Aug 23, 2017, at 5:10 PM, Charles Goldsmith 
> wrote:

Several sections in the New and Changed Features mentions 12.0 features, and I 
wasn't sure if this was a copy/paste issue, or if these features are available 
in su3 as well.

One came to mind: 
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/11_5_1/SU3/cucm_b_release-notes-cucm-imp-1151su3/cucm_b_release-notes-cucm-imp-1151su3_chapter_00.html#reference_6D6A4367D19A6A792BA1844DE6F9A9A5

Also, of note, 12.0 doesn't have info about apple's new APNs changes that SU3 
has, I'm assuming that feature will come to an SU for 12.0 or was it just not 
documented?

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/12_0_1/cucm_b_release-notes-for-cucm-imp-1201/cucm_b_release-notes-for-cucm-imp-1201_chapter_00.html

Thanks
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip