Cisco Ip Phone 7942 authentication ISE

Hello

I'm installing Cisco ISE soon and I have a question. Why I can't authenticate the model of Cisco IP phone 7942 using 802.1 x? I see that the phone has this option (it is not enabled). I am told that the Cisco IP phones must be authenticated to the ISE using profiling or MAB. This uses expensive advanced license from there to achieve.

All the world had a bit of luck in this area?

Thank you

Bob

Hello

Is your 7942 g model? In this case, these phones could have a built-in certificate of Cisco (certificate of manufacturer installed) that can be used for the EAP - TLS protocol. The common name start with MS och CP ether.

Kind regards

Philippe

Tags: Cisco Security

Similar Questions

NAC - STACKED IN THE AUTHENTICATION VLAN IF THE PC IS CONNECTED TO THE CISCO IP PHONE

Hello

I have configured my NAC in L3OOB, if I connect my pc directly to the switch I have no problem, I can access the network as out-of-band user, I can pass authentication. BUT IF I CONNECT a Cisco ip to switch phone and my pc is connected to the Cisco ip phone I'm stacked to the vlan authentication and cannot access the network. The event logs of the my CAM, it's say that it detects several mac address.

Please guys help me with this problem...

Thank you and best regards.

Hello

Have you added your phone MAC address to your CAM in the filter to IGNORE it?

Faisal

Cisco Ip phone 3905 calls do not

We have 15 Cisco IP phone 3905 on a network with CUCME ver 9.1. Phones record fine and received number EXT. It has tone. But we can't write another post after dialing '1' the tone cut and nothing happens.

This problem has been posted here before. https://supportforums.Cisco.com/discussion/11651601/3905-issue-making-call

Except in my case, I only use 3905 and calls cannot take place. See my sh run and debug errors and debugging ccsip attached massages ccsip. Thanks for your help.

SH run
Building configuration...

Current configuration: 7315 bytes
!
! Last configuration change at 13:56:27 UTC Thursday, April 24, 2014 by nim
version 15.2
horodateurs service debug datetime msec
Log service timestamps datetime msec
no password encryption service
!
hostname NIM_CME
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
!
No aaa new-model
!
IP cef
!
!
!
no record of conflict ip dhcp
DHCP excluded-address 192.168.0.1 IP 192.168.0.10
DHCP excluded-address IP 192.168.80.1 192.168.80.10
DHCP excluded-address IP 192.168.80.250 192.168.80.255
DHCP excluded-address IP 192.168.70.1 192.168.70.10
DHCP excluded-address IP 192.168.70.250 192.168.70.255
DHCP excluded-address IP 192.168.60.1 192.168.60.10
DHCP excluded-address IP 192.168.60.250 192.168.60.255
DHCP excluded-address IP 192.168.50.1 192.168.50.10
DHCP excluded-address IP 192.168.50.250 192.168.50.255
DHCP excluded-address IP 192.168.40.1 192.168.40.10
DHCP excluded-address IP 192.168.40.250 192.168.40.255
DHCP excluded-address IP 192.168.30.1 192.168.30.10
DHCP excluded-address IP 192.168.30.250 192.168.30.255
DHCP excluded-address 192.168.20.1 IP 192.168.20.10
DHCP excluded-address IP 192.168.20.250 192.168.20.255
IP dhcp excluded-address 192.168.0.250 192.168.0.255
!
dhcp PHCBase IP pool
import all
network 192.168.0.0 255.255.255.0
default router 192.168.0.1
option 150 ip 192.168.0.1
Rental 30
!
dhcp YenegoaLAN IP pool
network 192.168.80.0 255.255.255.0
router by default - 192.168.80.1
lease 10
!
dhcp OronLAN IP pool
network 192.168.70.0 255.255.255.0
router by default - 192.168.70.1
lease 10
!
dhcp EketLAN IP pool
network 192.168.60.0 255.255.255.0
router by default - 192.168.60.1
lease 10
!
dhcp CalabarLAN IP pool
network 192.168.50.0 255.255.255.0
router by default - 192.168.50.1
lease 10
!
dhcp BonnyLAN IP pool
network 192.168.40.0 255.255.255.0
router by default - 192.168.40.1
option 150 ip 192.168.40.1
lease 10
!
dhcp OnneLAN IP pool
network 192.168.30.0 255.255.255.0
default router 192.168.30.1
lease 10
!
dhcp PortOfficeLAN IP pool
network 192.168.20.0 255.255.255.0
router by default - 192.168.20.1
lease 10
!
!
!
no ip domain search
"yourdomain.com" of the IP domain name
No ipv6 cef
Authenticated MultiLink bundle-name Panel
!
!
!
!
!
!
Crypto pki trustpoint TP-self-signed-2286552849
enrollment selfsigned
name of the object cn = IOS - Self - signed - certificate - 2286552849
revocation checking no
rsakeypair TP-self-signed-2286552849
!
!
TP-self-signed-2286552849 crypto pki certificate chain
certificate self-signed 01
3082022B 30820194 02020101 300 D 0609 2A 864886 F70D0101 05050030 A0030201
2 060355 04031326 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 31312F30
69666963 32323836 35353238 6174652D 3439301E 170 3133 30383230 30353236
33395A 17 0D 323030 31303130 30303030 305A 3031 06035504 03132649 312F302D
4F532D53 5369676E 656C662D 43 65727469 66696361 74652 32 32383635 65642D
35323834 3930819F 300 D 0609 2A 864886 01050003, 818, 0030, 81890281 F70D0101
8100B 979 6576 B1DBA804 61398EE7 DFB6E285 AEBE044F 300D381C 1FBC941C 407D
D062F622 47E0A79E 20641E4C CC90F308 8D65DC2C CC475EC3 0A62175E 867366ED
C5B35A90 83090DDF ADDAF4A4 CA49F2C4 7C3421F1 0B4EC5AE D26A0CE9 7DC3CC55
E604A7A2 0AF66F47 66FAF1BA 2A823FD3 EC9AAC89 5FCEDD29 6B2DDCF9 E1C41D9F
010001A 3 53305130 1 130101 FF040530 030101FF 301F0603 0F060355 C9B50203
B 551 2304 18301680 1486, 158 90DD3652 93809798 C3311ABE 9EC6263E 09301D 06
03551D0E DD365293 809798 C6263E09 311ABE9E 3 C 300 D 0609 B 04160414 86, 15890
2A 864886 05050003 81810000 2B614A99 9B090B99 3A7F9085 C29503B3 F70D0101
E92AB95A ABD6EED5 E9226AAD 63E60837 FF913665 96D2ECAB 6F6DA306 42751B 49
8CC3EF9B E13C3B49 B2B978AD ABC1A42E EFA8D5EF FC4C9C6A A1662E2D 0C140E5D
5F0B6752 CAEC8E8A 53EB3353 E27A8575 C18381D7 9342773B CB3BCD65 54C0DF25
D629972D 409A2F6D 2C82C541 611A1F
quit smoking
voice-card 0
!
!
!
voip phone service
allow sip to sip connections
Fax protocol t38 ls-redundancy version 0 0 hs-redundancy 0 help none
SIP
binding control source-interface GigabitEthernet0/0
bind media source-interface GigabitEthernet0/0
Registration Server expires max 1200 min 300
!
!
Global voice registry
FMC of fashion
source-address 192.168.0.1 port 5060
Max - dn 30
Max-pool 25
load of 3905 CP3905.9 - 2-1-0
1 4085251 model numbering plan... extension-length 3
Flash TFTP-path:
text file
create the profile synchronization 0035041805641981
!
Register of voice dn 1
Number 101
name numbers1
label 4085251001
!
Register of voice dn 2
number 102
name telephone2
label 4085251002
!
Register of voice dn 3
number 103
name Phone3
label 4085251003
!
Register of voice dn 4
number 104
name Phone4
label 4085251004
!
vocal range pool 1
Mac ID 7 95. F323. B7B6
type of 3905
Number 1 dn 1
DTMF-relay rtp - nte
!
Register of voice pool 2
Mac ID 7 95. F323. B81D
type of 3905
Number 1 dn 2
DTMF-relay rtp - nte
Cisco password username user2
!
Register of voice pool 3
Mac ID 7 95. F323. BB30
type of 3905
Number 1 dn 3
DTMF-relay rtp - nte
username cisco password user3
!
Register of voice pool 4
Mac ID 7 95. F323. B7B7
type of 3905
Number 1 dn 4
DTMF-relay rtp - nte
Cisco password username user4
!
!
!
!
!
license udi pid CISCO2911/K9 sn FCZ1734609V
HW-module pvdm 0/0
!
!
!
username privilege 15 secret 4 nimout lpMHsjg3v8XIXfjVSuCP0Tf3rTGlWmA/nJHqUqryL7w
username admin privilege 15 secret 4 twCnybukZZA6Z960oKoBqFYi5O74Z5b73d7LIBiSjrY
!
redundancy
!
!
!
!
!
!
the Embedded-Service-Engine0/0 interface
no ip address
Shutdown
!
interface GigabitEthernet0/0
Description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE $ 0/0
the IP 192.168.0.1 255.255.255.0
automatic duplex
automatic speed
!
interface GigabitEthernet0/0.20
encapsulation dot1Q 20
address 192.168.20.1 255.255.255.0
!
interface GigabitEthernet0/0.30
encapsulation dot1Q 30
192.168.30.1 IP address 255.255.255.0
!
interface GigabitEthernet0/0.40
encapsulation dot1Q 40
192.168.40.1 IP address 255.255.255.0
!
interface GigabitEthernet0/0.50
encapsulation dot1Q 50
192.168.50.1 IP address 255.255.255.0
!
interface GigabitEthernet0/0.60
encapsulation dot1Q 60
IP 192.168.60.1 255.255.255.0
!
interface GigabitEthernet0/0.70
encapsulation dot1Q 70
IP 192.168.70.1 255.255.255.0
!
interface GigabitEthernet0/0.80
encapsulation dot1Q 80
192.168.80.1 IP address 255.255.255.0
!
interface GigabitEthernet0/1
no ip address
Shutdown
automatic duplex
automatic speed
!
interface GigabitEthernet0/2
no ip address
Shutdown
automatic duplex
automatic speed
!
IP forward-Protocol ND
!
IP http server
local IP http authentication
IP http secure server
IP http timeout policy slowed down 60 life 86400 request 10000
!
!
!
!
flash TFTP server: APP3905.9 - 2-1 - 0.zz
flash TFTP server: CP3905.9 - 2-1 - 0.loads
!
control plan
!
!
!
!
!
!
!
profile MGCP default
!
!
!
!
!
access controller
Shutdown
!
!
phone service
No auto-reg ephone
MAX conferences 8-6 win
DN-webedit
transfer full-consult system
!
!
!
Line con 0
password @nimout123
local connection
line to 0
line 2
no activation-character
No exec
preferred no transport
transport output pad rlogin lapb - your MOP v120 udptn ssh telnet
StopBits 1
line vty 0 4
privilege level 15
password @nimout123
local connection
transport input telnet ssh
line vty 5
privilege level 15
password @nimout123
local connection
transport input telnet ssh
line vty 6 15
privilege level 15
local connection
transport input telnet ssh
!
Scheduler allocate 20000 1000
Master of NTP
!
end

#debug ccsip error
Trouble shooting call SIP is enabled
NIM_CME #.
NIM_CME #.
* 24 apr 11:08:36.251: //-1/9D9F100280CC/SIP/Error/ccsip_ipip_media_forking_updat
e_preferred_codec:
MF: Not a forked leg SIP...
SIP: (68) attribute mid, instance of level 1 1 not found.
* Apr 24 11:08:36.251: / / 68/9D9F100280CC/SIP/error/sipSPIStreamTypeAndDtmfRelay:

No voice codec and dtmf-relay correspondence
* Apr 24 11:08:36.251: / / 68/9D9F100280CC/SIP/error/sipSPIDoAudioNegotiation:
Failure of the negotiations in media for m-line 1
* Apr 24 11:08:36.251: / / 68/9D9F100280CC/SIP/error/sipSPIDoMediaNegotiation:

No valid fax or audio stream
* Apr 24 11:08:36.251: / / 68/9D9F100280CC/SIP/error/sipSPIHandleInviteMedia:
Failure of the negotiation of media for an incoming call
* Apr 24 11:08:36.251: / / 68/9D9F100280CC/SIP/error/sipSPIContinueNewMsgInvite:
Unacceptable media for INVITE
* 24 apr 11:08:39.303: //-1/9F70C2BB80D0/SIP/Error/ccsip_ipip_media_forking_updat
e_preferred_codec:
MF: Not a forked leg SIP...
SIP: (69) attribute mid, instance of level 1 1 not found.
* Apr 24 11:08:39.303: / / 69/9F70C2BB80D0/SIP/error/sipSPIStreamTypeAndDtmfRelay:

No voice codec and dtmf-relay correspondence
* Apr 24 11:08:39.303: / / 69/9F70C2BB80D0/SIP/error/sipSPIDoAudioNegotiation:
Failure of the negotiations in media for m-line 1
* Apr 24 11:08:39.303: / / 69/9F70C2BB80D0/SIP/error/sipSPIDoMediaNegotiation:

No valid fax or audio stream
* Apr 24 11:08:39.303: / / 69/9F70C2BB80D0/SIP/error/sipSPIHandleInviteMedia:
Failure of the negotiation of media for an incoming call
* Apr 24 11:08:39.303: / / 69/9F70C2BB80D0/SIP/error/sipSPIContinueNewMsgInvite:
Unacceptable media for INVITE
* 24 apr 11:08:42.871: //70/A191CD1180D4/SIP/Error/ccsip_spi_register_incoming_re
gistration:

No entry found in reg number Table for 104
* 24 apr 11:08:47.803: //-1/xxxxxxxxxxxx/SIP/Error/ccsip_reg_delete_from_cc_call_
id_table:
Entry not found for the search key

* 24 apr 11:08:47.803: //-1/xxxxxxxxxxxx/SIP/Error/ccsip_reg_delete_from_mac_tabl
e:
BCR with mac [7c95f323b7b7] has been deleted
* Apr 24 11:08:47.803: POOL - 4 VOICE REGISTER has not been saved. Name: SEP7C95F323B7
B7 IP:192.168.40.11 DeviceType:Phone

* 24 apr 11:08:47.803: //-1/xxxxxxxxxxxx/SIP/Error/sipSPI_ipip_PassthruContentCon
tainerFreeHelper:
ContentQ null - output
* 24 apr 11:08:47.803: //-1/xxxxxxxxxxxx/SIP/Error/ccsip_register_handle_e164_unr
registration:
SIP registry Error: Invalid args in unreg
* 24 apr 11:08:47.803: //-1/xxxxxxxxxxxx/SIP/Error/ccsip_register_handle_e164_unr
registration:
SIP registry Error: Invalid args in unreg
* 24 apr 11:09:20.891: //-1/B83B30D980D5/SIP/Error/ccsip_ipip_media_forking_updat
e_preferred_codec:
MF: Not a forked leg SIP...
SIP: (71) attribute mid, instance of level 1 1 not found.
* Apr 24 11:09:20.895: / / 71/B83B30D980D5/SIP/error/sipSPIStreamTypeAndDtmfRelay:

No voice codec and dtmf-relay correspondence
* Apr 24 11:09:20.895: / / 71/B83B30D980D5/SIP/error/sipSPIDoAudioNegotiation:
Failure of the negotiations in media for m-line 1
* Apr 24 11:09:20.895: / / 71/B83B30D980D5/SIP/error/sipSPIDoMediaNegotiation:

No valid fax or audio stream
* Apr 24 11:09:20.895: / / 71/B83B30D980D5/SIP/error/sipSPIHandleInviteMedia:
Failure of the negotiation of media for an incoming call
* Apr 24 11:09:20.895: / / 71/B83B30D980D5/SIP/error/sipSPIContinueNewMsgInvite:
Unacceptable media for INVITE
* 24 apr 11:09:24.535: //-1/BA67393580D9/SIP/Error/ccsip_ipip_media_forking_updat
e_preferred_codec:
MF: Not a forked leg SIP...
SIP: (72) attribute mid, instance of level 1 1 not found.
* Apr 24 11:09:24.535: / / 72/BA67393580D9/SIP/error/sipSPIStreamTypeAndDtmfRelay:

No voice codec and dtmf-relay correspondence
* Apr 24 11:09:24.535: / / 72/BA67393580D9/SIP/error/sipSPIDoAudioNegotiation:
Failure of the negotiations in media for m-line 1
* Apr 24 11:09:24.535: / / 72/BA67393580D9/SIP/error/sipSPIDoMediaNegotiation:

No valid fax or audio stream
* Apr 24 11:09:24.535: / / 72/BA67393580D9/SIP/error/sipSPIHandleInviteMedia:
Failure of the negotiation of media for an incoming call
* Apr 24 11:09:24.535: / / 72/BA67393580D9/SIP/error/sipSPIContinueNewMsgInvite:
Unacceptable media for INVITE
* 24 apr 11:09:53.307: //-1/CB8CDFE280DD/SIP/Error/ccsip_ipip_media_forking_updat
e_preferred_codec:
MF: Not a forked leg SIP...
SIP: (73) attribute mid, instance of level 1 1 not found.
* Apr 24 11:09:53.307: / / 73/CB8CDFE280DD/SIP/error/sipSPIStreamTypeAndDtmfRelay:

No voice codec and dtmf-relay correspondence
* Apr 24 11:09:53.307: / / 73/CB8CDFE280DD/SIP/error/sipSPIDoAudioNegotiation:
Failure of the negotiations in media for m-line 1
* Apr 24 11:09:53.307: / / 73/CB8CDFE280DD/SIP/error/sipSPIDoMediaNegotiation:

No valid fax or audio stream
* Apr 24 11:09:53.307: / / 73/CB8CDFE280DD/SIP/error/sipSPIHandleInviteMedia:
Failure of the negotiation of media for an incoming call
* Apr 24 11:09:53.307: / / 73/CB8CDFE280DD/SIP/error/sipSPIContinueNewMsgInvite:
Unacceptable media for INVITE

ebug ccsip?
All activate SIP all traces of debugging
the calls allow CCSIP SPI called backtrace
The trace debugging DHCP enable SIP-DHCP
error activate SIP debug trace
Activate SIP events backtrace
function activate SIP debug trace
Info to activate SIP info trace debugging
Activate SIP media backtrace
messages enable CCSIP SPI debug trace
preauthentication activate SIP preauthentication debugging traces
Activate CCSIP SPI States debug trace
definition of translation activate SIP debug trace
transport transport activate SIP, traces of debugging
Verbose Enable verbose mode

Event ccsip NIMASA_CME #debug
Events to call SIP tracing is enabled
NIMASA_CME #.
April 24, 12:23:59.435: / / 167/25A61E588123/SIP/event/Session-Timer/sipSTSLMain: Eve
NT: E_STSL_SESSION_REFRESH_REQ
April 24, 12:23:59.435: / / 167/25A61E588123/SIP/event/Session-Timer/sipSTSLMain: dir
: method 2, p. 102, resp_code:0, container: 3DAA7E00
Apr 24 12:23:59.435: //167/25A61E588123/SIP/Event/Session-Timer/sipSTSLPrintTDCo
ntainer: Peer-Event: E_STSL_LEG_BY_LEG, SE value: 0, SE reminder: no, Min - SE Va
read: 1800, flags: 2000
April 24, 12:23:59.435: / / 167/25A61E588123/SIP/event/Session-Timer/sipSTSLMain: Eve
NT: E_STSL_SESSION_REFRESH_RESP
April 24, 12:23:59.435: / / 167/25A61E588123/SIP/event/Session-Timer/sipSTSLMain: dir
: method 1, p. 102, resp_code:488, container: 3DAA8220
April 24, 12:24:04.583: / / 168/28B8405A8127/SIP/event/Session-Timer/sipSTSLMain: Eve
NT: E_STSL_SESSION_REFRESH_REQ
April 24, 12:24:04.583: / / 168/28B8405A8127/SIP/event/Session-Timer/sipSTSLMain: dir
: method 2, p. 102, resp_code:0, container: 3DAA8E80
Apr 24 12:24:04.583: //168/28B8405A8127/SIP/Event/Session-Timer/sipSTSLPrintTDCo
ntainer: Peer-Event: E_STSL_LEG_BY_LEG, SE value: 0, SE reminder: no, Min - SE Va
read: 1800, flags: 2000
April 24, 12:24:04.583: / / 168/28B8405A8127/SIP/event/Session-Timer/sipSTSLMain: Eve
NT: E_STSL_SESSION_REFRESH_RESP
April 24, 12:24:04.583: / / 168/28B8405A8127/SIP/event/Session-Timer/sipSTSLMain: dir
: method 1, p. 102, resp_code:488, container: 3DAB0BF8
April 24, 12:24:07.155: / / 169/2A401975812B/SIP/event/Session-Timer/sipSTSLMain: Eve
NT: E_STSL_SESSION_REFRESH_REQ
April 24, 12:24:07.155: / / 169/2A401975812B/SIP/event/Session-Timer/sipSTSLMain: dir
: method 2, p. 102, resp_code:0, container: 3DAA7F08
Apr 24 12:24:07.155: //169/2A401975812B/SIP/Event/Session-Timer/sipSTSLPrintTDCo
ntainer: Peer-Event: E_STSL_LEG_BY_LEG, SE value: 0, SE reminder: no, Min - SE Va
read: 1800, flags: 2000
April 24, 12:24:07.155: / / 169/2A401975812B/SIP/event/Session-Timer/sipSTSLMain: Eve
NT: E_STSL_SESSION_REFRESH_RESP
April 24, 12:24:07.155: / / 169/2A401975812B/SIP/event/Session-Timer/sipSTSLMain: dir
: method 1, p. 102, resp_code:488, container: 3DAA8220
April 24, 12:24:11.595: / / 170/2CE63252812F/SIP/event/Session-Timer/sipSTSLMain: Eve
NT: E_STSL_SESSION_REFRESH_REQ
April 24, 12:24:11.595: / / 170/2CE63252812F/SIP/event/Session-Timer/sipSTSLMain: dir
: method 2, p. 102, resp_code:0, container: 3DAB0CA8
Apr 24 12:24:11.595: //170/2CE63252812F/SIP/Event/Session-Timer/sipSTSLPrintTDCo
ntainer: Peer-Event: E_STSL_LEG_BY_LEG, SE value: 0, SE reminder: no, Min - SE Va
read: 1800, flags: 2000
April 24, 12:24:11.595: / / 170/2CE63252812F/SIP/event/Session-Timer/sipSTSLMain: Eve
NT: E_STSL_SESSION_REFRESH_RESP
April 24, 12:24:11.595: / / 170/2CE63252812F/SIP/event/Session-Timer/sipSTSLMain: dir
: method 1, p. 102, resp_code:488, container: 3DAB0BF8
NIMASA_CME #undebug ccsip events
Events to call SIP tracing is disabled
NIMASA_CME #.
Error ccsip NIMASA_CME #debug
Trouble shooting call SIP is enabled
NIMASA_CME #.
Apr 24 12:24:46.175: //-1/4182B07D8133/SIP/Error/ccsip_ipip_media_forking_update
_preferred_codec:
MF: Not a forked leg SIP...
SIP: (171) of the mid, found 1 1 level instance attribute.
April 24, 12:24:46.175: / / 171/4182B07D8133/SIP/error/sipSPIDoAudioNegotiation:
Failure of the negotiations in media for m-line 1
April 24, 12:24:46.175: / / 171/4182B07D8133/SIP/error/sipSPIDoMediaNegotiation:

No valid fax or audio stream
April 24, 12:24:46.175: / / 171/4182B07D8133/SIP/error/sipSPIHandleInviteMedia:
Failure of the negotiation of media for an incoming call
April 24, 12:24:46.175: / / 171/4182B07D8133/SIP/error/sipSPIContinueNewMsgInvite:
Unacceptable media for INVITE
Apr 24 12:24:50.227: //-1/43EC5D8E8137/SIP/Error/ccsip_ipip_media_forking_update
_preferred_codec:
MF: Not a forked leg SIP...
SIP: (172) the mid not found 1 1 level instance attribute.
April 24, 12:24:50.227: / / 172/43EC5D8E8137/SIP/error/sipSPIDoAudioNegotiation:
Failure of the negotiations in media for m-line 1
April 24, 12:24:50.227: / / 172/43EC5D8E8137/SIP/error/sipSPIDoMediaNegotiation:

No valid fax or audio stream
April 24, 12:24:50.227: / / 172/43EC5D8E8137/SIP/error/sipSPIHandleInviteMedia:
Failure of the negotiation of media for an incoming call
April 24, 12:24:50.227: / / 172/43EC5D8E8137/SIP/error/sipSPIContinueNewMsgInvite:
Unacceptable media for INVITE
Apr 24 12:24:52.031: //-1/45003EE4813B/SIP/Error/ccsip_ipip_media_forking_update
_preferred_codec:
MF: Not a forked leg SIP...
SIP: (173) of the mid, found 1 1 level instance attribute.
April 24, 12:24:52.031: / / 173/45003EE4813B/SIP/error/sipSPIDoAudioNegotiation:
Failure of the negotiations in media for m-line 1
April 24, 12:24:52.031: / / 173/45003EE4813B/SIP/error/sipSPIDoMediaNegotiation:

No valid fax or audio stream
April 24, 12:24:52.031: / / 173/45003EE4813B/SIP/error/sipSPIHandleInviteMedia:
Failure of the negotiation of media for an incoming call
April 24, 12:24:52.031: / / 173/45003EE4813B/SIP/error/sipSPIContinueNewMsgInvite:
Unacceptable media for INVITE

CCSIP DEBUG MESSAGES

Apr 24 14:18:11.086: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Envoy:
SIP/2.0 488 Media is not Acceptable
Via: SIP/2.0/UDP 192.168.0.13:5060; rport; branch = z9hG4bKPjmYBG2kj6Ljizpy4D3JhcmoM
f0RhNAekv
From: "telephone1" <> [email protected]/ * / >; tag = 3b114524-60cb-4f40-97ee-21dd2016e031
To: sip:[email protected]/ * /; tag = 138F9F8-451
Date: Thu, April 24, 2014 14:18:11 GMT
Call ID: 4dd4fcb7-662c-4e25-8836-feaeeb979f81
CSeq: INVITE 16958
Allow-events: telephone-event
WARNING: 304 192.168.0.1 "Media type (s) not available.
Reason: Q.850; cause = 65
Server: Cisco-SIPGateway/IOS-15.2.4.M4
Content-Length: 0

Apr 24 14:18:11.102: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP ACK:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.0.13:5060; rport; branch = z9hG4bKPjmYBG2kj6Ljizpy4D3JhcmoM
f0RhNAekv
Max-Forwards: 70
From: "telephone1" <> [email protected]/ * / >; tag = 3b114524-60cb-4f40-97ee-21dd2016e031
To: sip:[email protected]/ * /; tag = 138F9F8-451
Call ID: 4dd4fcb7-662c-4e25-8836-feaeeb979f81
CSeq: ACK 16958
Content-Length: 0

Apr 24 14:20:40.786: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
GUEST sip:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.0.12:5060; rport; branch = z9hG4bKPjvoVJeyhxpOvfwgDDywmTGiU
keV.m - NL1
Max-Forwards: 70
From: 'Téléphone2' <> [email protected]/ * / >; tag = 700813bc-4b2d-47a5-8ea5-1e8aec850a3c
To: sip:[email protected]/ * /.
"Contact: <> [email protected]/ * /: 5060 >; + sip.instance = '.<>
00-0000-0000-7c95f323b81d > '; + u.sip! DeviceName.CCM.Cisco.com = "SEP7C95F323B81D"; + u
. SIP! model.ccm.cisco.com = "592"
Call ID: dce6e9c3-0dab-4c9f-86a6-56fe383c60e0
CSeq: 1575 INVITE
Allow: PRACK, GUEST, ACK, BYE, CANCEL, update, SUBSCRIBE, NOTIFY, REFER, MESSAG
E, OPTIONS
User-Agent: Cisco-CP3905/9.2.1
Support: replaces,join,sdp-anat,norefersub,extended-refer,X-cisco-callinfo,X-c
ISCO-ServiceUri,X-Cisco-escapecodes,X-Cisco-Service-Control,X-Cisco-monrec,X-CIS
Co-config,X-Cisco-SIS-4.0.0,X-Cisco-xsi-7.0.1
Expires: 180
Accept: application/sdp
Allow-events: kpml, dialog box
Remote-Party-ID: 'Téléphone2'<>[email protected]/ * /: 5060 >; intimacy = off
Content-Type: application/sdp
Content-Length: 292

v = 0
o =-2208994977 2208994977 IN IP4 192.168.0.12
s = FOXPHONE
c = in IP4 in 192.168.0.12
t = 0 0
a = X - nat:0
m = audio RTP/AVP 0 8 18 111 16392
a = rtpmap:0 PCMU/8000
a = rtpmap:8 PCMA/8000
a G729/8000 rtpmap:18 =
a = annex b fmtp:18 = yes
a = sendrecv
a rtpmap:111 telephone-event/8000 =
a = fmtp:111 0-15

Apr 24 14:20:40.790: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Envoy:
SIP/2.0 488 Media is not Acceptable
Via: SIP/2.0/UDP 192.168.0.12:5060; rport; branch = z9hG4bKPjvoVJeyhxpOvfwgDDywmTGiU
keV.m - NL1
From: 'Téléphone2' <> [email protected]/ * / >; tag = 700813bc-4b2d-47a5-8ea5-1e8aec850a3c
To: sip:[email protected]/ * /; tag = 13B42C0-812
Date: Thu, April 24, 2014 14:20:40 GMT
Call ID: dce6e9c3-0dab-4c9f-86a6-56fe383c60e0
CSeq: 1575 INVITE
Allow-events: telephone-event
WARNING: 304 192.168.0.1 "Media type (s) not available.
Reason: Q.850; cause = 65
Server: Cisco-SIPGateway/IOS-15.2.4.M4
Content-Length: 0

Apr 24 14:20:40.806: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP ACK:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.0.12:5060; rport; branch = z9hG4bKPjvoVJeyhxpOvfwgDDywmTGiU
keV.m - NL1
Max-Forwards: 70
From: 'Téléphone2' <> [email protected]/ * / >; tag = 700813bc-4b2d-47a5-8ea5-1e8aec850a3c
To: sip:[email protected]/ * /; tag = 13B42C0-812
Call ID: dce6e9c3-0dab-4c9f-86a6-56fe383c60e0
CSeq: 1575 ACK
Content-Length: 0

Apr 24 14:22:16.110: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
GUEST sip:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.0.14:5060; rport; branch = z9hG4bKPjT3UaPZ-qfLE2EACrxGcnjqG
noFQuZXi7
Max-Forwards: 70
From: 'Phone3' <> [email protected]/ * / >; tag = 8ce0e16a-Davis-448 b-8d9c-d0b4ad52589f
To: sip:[email protected]/ * /.
"Contact: <> [email protected]/ * /: 5060 >; + sip.instance = '.<>
00-0000-0000-7c95f323bb30 > '; + u.sip! DeviceName.CCM.Cisco.com = "SEP7C95F323BB30"; + u
. SIP! model.ccm.cisco.com = "592"
Call ID: d5ec8dba-bbe3-44ac-9902-0d52b327c514
CSeq: INVITE 16131
Allow: PRACK, GUEST, ACK, BYE, CANCEL, update, SUBSCRIBE, NOTIFY, REFER, MESSAG
E, OPTIONS
User-Agent: Cisco-CP3905/9.2.1
Support: replaces,join,sdp-anat,norefersub,extended-refer,X-cisco-callinfo,X-c
ISCO-ServiceUri,X-Cisco-escapecodes,X-Cisco-Service-Control,X-Cisco-monrec,X-CIS
Co-config,X-Cisco-SIS-4.0.0,X-Cisco-xsi-7.0.1
Expires: 180
Accept: application/sdp
Allow-events: kpml, dialog box
Remote-Party-ID: 'Phone3'<>[email protected]/ * /: 5060 >; intimacy = off
Content-Type: application/sdp
Content-Length: 292

v = 0
o =-2208995063 2208995063 IN IP4 192.168.0.14
s = FOXPHONE
c = IN IP4 192.168.0.14
t = 0 0
a = X - nat:0
m = audio RTP/AVP 0 8 18 111 16388
a = rtpmap:0 PCMU/8000
a = rtpmap:8 PCMA/8000
a G729/8000 rtpmap:18 =
a = annex b fmtp:18 = yes
a = sendrecv
a rtpmap:111 telephone-event/8000 =
a = fmtp:111 0-15

Apr 24 14:22:16.114: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Envoy:
SIP/2.0 488 Media is not Acceptable
Via: SIP/2.0/UDP 192.168.0.14:5060; rport; branch = z9hG4bKPjT3UaPZ-qfLE2EACrxGcnjqG
noFQuZXi7
From: 'Phone3' <> [email protected]/ * / >; tag = 8ce0e16a-Davis-448 b-8d9c-d0b4ad52589f
To: sip:[email protected]/ * /; tag = 13CB71C - 8 9
Date: Thu, April 24, 2014 14:22:16 GMT
Call ID: d5ec8dba-bbe3-44ac-9902-0d52b327c514
CSeq: INVITE 16131
Allow-events: telephone-event
WARNING: 304 192.168.0.1 "Media type (s) not available.
Reason: Q.850; cause = 65
Server: Cisco-SIPGateway/IOS-15.2.4.M4
Content-Length: 0

Apr 24 14:22:16.126: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP ACK:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.0.14:5060; rport; branch = z9hG4bKPjT3UaPZ-qfLE2EACrxGcnjqG
noFQuZXi7
Max-Forwards: 70
From: 'Phone3' <> [email protected]/ * / >; tag = 8ce0e16a-Davis-448 b-8d9c-d0b4ad52589f
To: sip:[email protected]/ * /; tag = 13CB71C - 8 9
Call ID: d5ec8dba-bbe3-44ac-9902-0d52b327c514
CSeq: ACK 16131
Content-Length: 0

Apr 24 14:23:17.418: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
GUEST sip:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPjfEwqupP3utIfGrv - WEaaI
hjdCy1q-hM
Max-Forwards: 70
From: 'Phone4' <> [email protected]/ * / >; tag = 93e43cc1-7e69-49ef-899 d-c81bd29eae11
To: sip:[email protected]/ * /.
"Contact: <> [email protected]/ * /: 5060 >; + sip.instance = '.<>
000-0000-0000-7c95f323b7b7 > '; + u.sip! DeviceName.CCM.Cisco.com = "SEP7C95F323B7B7"; +
u.SIP! Model.CCM.Cisco.com = "592"
Call ID: c9eb73ff-f89c-4aad-861d-724af1bd1f36
CSeq: INVITE 27309
Allow: PRACK, GUEST, ACK, BYE, CANCEL, update, SUBSCRIBE, NOTIFY, REFER, MESSAG
E, OPTIONS
User-Agent: Cisco-CP3905/9.2.1
Support: replaces,join,sdp-anat,norefersub,extended-refer,X-cisco-callinfo,X-c
ISCO-ServiceUri,X-Cisco-escapecodes,X-Cisco-Service-Control,X-Cisco-monrec,X-CIS
Co-config,X-Cisco-SIS-4.0.0,X-Cisco-xsi-7.0.1
Expires: 180
Accept: application/sdp
Allow-events: kpml, dialog box
Remote-Party-ID: 'Phone4'<>[email protected]/ * /: 5060 >; intimacy = off
Content-Type: application/sdp
Content-Length: 294

v = 0
o =-2208995137 2208995137 IN IP4 192.168.40.11
s = FOXPHONE
c = IN IP4 192.168.40.11
t = 0 0
a = X - nat:0
m = audio RTP/AVP 0 8 18 111 16388
a = rtpmap:0 PCMU/8000
a = rtpmap:8 PCMA/8000
a G729/8000 rtpmap:18 =
a = annex b fmtp:18 = yes
a = sendrecv
a rtpmap:111 telephone-event/8000 =
a = fmtp:111 0-15

Apr 24 14:23:17.422: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Envoy:
SIP/2.0 488 Media is not Acceptable
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPjfEwqupP3utIfGrv - WEaaI
hjdCy1q-hM
From: 'Phone4' <> [email protected]/ * / >; tag = 93e43cc1-7e69-49ef-899 d-c81bd29eae11
To: sip:[email protected]/ * /; tag = 13DA698 - 1 25
Date: Thu, April 24, 2014 14:23:17 GMT
Call ID: c9eb73ff-f89c-4aad-861d-724af1bd1f36
CSeq: INVITE 27309
Allow-events: telephone-event
WARNING: 304 192.168.0.1 "Media type (s) not available.
Reason: Q.850; cause = 65
Server: Cisco-SIPGateway/IOS-15.2.4.M4
Content-Length: 0

Apr 24 14:23:17.434: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP ACK:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPjfEwqupP3utIfGrv - WEaaI
hjdCy1q-hM
Max-Forwards: 70
From: 'Phone4' <> [email protected]/ * / >; tag = 93e43cc1-7e69-49ef-899 d-c81bd29eae11
To: sip:[email protected]/ * /; tag = 13DA698 - 1 25
Call ID: c9eb73ff-f89c-4aad-861d-724af1bd1f36
CSeq: 27309 ACK
Content-Length: 0

Apr 24 14:23:19.690: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
GUEST sip:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPjfW2oLTIRE62UkXCzpFyuAa
gpbtooQCuv
Max-Forwards: 70
From: 'Phone4' <> [email protected]/ * / >; tag = e8ed6eb5-8653-4154-93ab-1755749c84a6
To: sip:[email protected]/ * /.
"Contact: <> [email protected]/ * /: 5060 >; + sip.instance = '.<>
000-0000-0000-7c95f323b7b7 > '; + u.sip! DeviceName.CCM.Cisco.com = "SEP7C95F323B7B7"; +
u.SIP! Model.CCM.Cisco.com = "592"
Call ID: aa729730-fc15-4fc4-8bee-8d3e9840cc8b
CSeq: 10138 INVITE
Allow: PRACK, GUEST, ACK, BYE, CANCEL, update, SUBSCRIBE, NOTIFY, REFER, MESSAG
E, OPTIONS
User-Agent: Cisco-CP3905/9.2.1
Support: replaces,join,sdp-anat,norefersub,extended-refer,X-cisco-callinfo,X-c
ISCO-ServiceUri,X-Cisco-escapecodes,X-Cisco-Service-Control,X-Cisco-monrec,X-CIS
Co-config,X-Cisco-SIS-4.0.0,X-Cisco-xsi-7.0.1
Expires: 180
Accept: application/sdp
Allow-events: kpml, dialog box
Remote-Party-ID: 'Phone4'<>[email protected]/ * /: 5060 >; intimacy = off
Content-Type: application/sdp
Content-Length: 294

v = 0
o =-2208995139 2208995139 IN IP4 192.168.40.11
s = FOXPHONE
c = IN IP4 192.168.40.11
t = 0 0
a = X - nat:0
m = audio RTP/AVP 0 8 18 111 16390
a = rtpmap:0 PCMU/8000
a = rtpmap:8 PCMA/8000
a G729/8000 rtpmap:18 =
a = annex b fmtp:18 = yes
a = sendrecv
a rtpmap:111 telephone-event/8000 =
a = fmtp:111 0-15

Apr 24 14:23:19.694: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Envoy:
SIP/2.0 488 Media is not Acceptable
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPjfW2oLTIRE62UkXCzpFyuAa
gpbtooQCuv
From: 'Phone4' <> [email protected]/ * / >; tag = e8ed6eb5-8653-4154-93ab-1755749c84a6
To: sip:[email protected]/ * /; tag = 13DAF78-5 b 0
Date: Thu, April 24, 2014 14:23:19 GMT
Call ID: aa729730-fc15-4fc4-8bee-8d3e9840cc8b
CSeq: 10138 INVITE
Allow-events: telephone-event
WARNING: 304 192.168.0.1 "Media type (s) not available.
Reason: Q.850; cause = 65
Server: Cisco-SIPGateway/IOS-15.2.4.M4
Content-Length: 0

Apr 24 14:23:19.706: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP ACK:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPjfW2oLTIRE62UkXCzpFyuAa
gpbtooQCuv
Max-Forwards: 70
From: 'Phone4' <> [email protected]/ * / >; tag = e8ed6eb5-8653-4154-93ab-1755749c84a6
To: sip:[email protected]/ * /; tag = 13DAF78-5 b 0
Call ID: aa729730-fc15-4fc4-8bee-8d3e9840cc8b
CSeq: 10138 ACK
Content-Length: 0

Apr 24 14:23:21.194: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
GUEST sip:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPj1I0P8BoX0CIMO3qfwTYEWe
y.fSEokHib
Max-Forwards: 70
From: 'Phone4' <> [email protected]/ * / >; tag = d56894bf-896e-42b7-8b69-5da16d2337bc
To: sip:[email protected]/ * /.
"Contact: <> [email protected]/ * /: 5060 >; + sip.instance = '.<>
000-0000-0000-7c95f323b7b7 > '; + u.sip! DeviceName.CCM.Cisco.com = "SEP7C95F323B7B7"; +
u.SIP! Model.CCM.Cisco.com = "592"
Call ID: e472fb51-35f0-4f2c-a84a-f0efd0cf9f2e
CSeq: INVITE 12021
Allow: PRACK, GUEST, ACK, BYE, CANCEL, update, SUBSCRIBE, NOTIFY, REFER, MESSAG
E, OPTIONS
User-Agent: Cisco-CP3905/9.2.1
Support: replaces,join,sdp-anat,norefersub,extended-refer,X-cisco-callinfo,X-c
ISCO-ServiceUri,X-Cisco-escapecodes,X-Cisco-Service-Control,X-Cisco-monrec,X-CIS
Co-config,X-Cisco-SIS-4.0.0,X-Cisco-xsi-7.0.1
Expires: 180
Accept: application/sdp
Allow-events: kpml, dialog box
Remote-Party-ID: 'Phone4'<>[email protected]/ * /: 5060 >; intimacy = off
Content-Type: application/sdp
Content-Length: 294

v = 0
o =-2208995140 2208995140 IN IP4 192.168.40.11
s = FOXPHONE
c = IN IP4 192.168.40.11
t = 0 0
a = X - nat:0
m = audio RTP/AVP 0 8 18 111 16392
a = rtpmap:0 PCMU/8000
a = rtpmap:8 PCMA/8000
a G729/8000 rtpmap:18 =
a = annex b fmtp:18 = yes
a = sendrecv
a rtpmap:111 telephone-event/8000 =
a = fmtp:111 0-15

Apr 24 14:23:21.198: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Envoy:
SIP/2.0 488 Media is not Acceptable
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPj1I0P8BoX0CIMO3qfwTYEWe
y.fSEokHib
From: 'Phone4' <> [email protected]/ * / >; tag = d56894bf-896e-42b7-8b69-5da16d2337bc
To: sip:[email protected]/ * /; tag = 13DB558-1845
Date: Thu, April 24, 2014 14:23:21 GMT
Call ID: e472fb51-35f0-4f2c-a84a-f0efd0cf9f2e
CSeq: INVITE 12021
Allow-events: telephone-event
WARNING: 304 192.168.0.1 "Media type (s) not available.
Reason: Q.850; cause = 65
Server: Cisco-SIPGateway/IOS-15.2.4.M4
Content-Length: 0

Apr 24 14:23:21.210: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP ACK:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPj1I0P8BoX0CIMO3qfwTYEWe
y.fSEokHib
Max-Forwards: 70
From: 'Phone4' <> [email protected]/ * / >; tag = d56894bf-896e-42b7-8b69-5da16d2337bc
To: sip:[email protected]/ * /; tag = 13DB558-1845
Call ID: e472fb51-35f0-4f2c-a84a-f0efd0cf9f2e
CSeq: 12021 ACK
Content-Length: 0

Apr 24 14:23:23.262: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
GUEST sip:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPjzDEPLi9QFHsCPzfcVR.g72
hEIRSMbivf
Max-Forwards: 70
From: 'Phone4' <> [email protected]/ * / >; tag = 3dffd3d9-8f9a-48e7-b9a0-9a9f4c6c984d
To: sip:[email protected]/ * /.
"Contact: <> [email protected]/ * /: 5060 >; + sip.instance = '.<>
000-0000-0000-7c95f323b7b7 > '; + u.sip! DeviceName.CCM.Cisco.com = "SEP7C95F323B7B7"; +
u.SIP! Model.CCM.Cisco.com = "592"
Call ID: ea647ad6-36d2-414e-83d3-0e04b35e8129
CSeq: INVITE 26904
Allow: PRACK, GUEST, ACK, BYE, CANCEL, update, SUBSCRIBE, NOTIFY, REFER, MESSAG
E, OPTIONS
User-Agent: Cisco-CP3905/9.2.1
Support: replaces,join,sdp-anat,norefersub,extended-refer,X-cisco-callinfo,X-c
ISCO-ServiceUri,X-Cisco-escapecodes,X-Cisco-Service-Control,X-Cisco-monrec,X-CIS
Co-config,X-Cisco-SIS-4.0.0,X-Cisco-xsi-7.0.1
Expires: 180
Accept: application/sdp
Allow-events: kpml, dialog box
Remote-Party-ID: 'Phone4'<>[email protected]/ * /: 5060 >; intimacy = off
Content-Type: application/sdp
Content-Length: 294

v = 0
o =-2208995142 2208995142 IN IP4 192.168.40.11
s = FOXPHONE
c = IN IP4 192.168.40.11
t = 0 0
a = X - nat:0
m = audio RTP/AVP 0 8 18 111 16386
a = rtpmap:0 PCMU/8000
a = rtpmap:8 PCMA/8000
a G729/8000 rtpmap:18 =
a = annex b fmtp:18 = yes
a = sendrecv
a rtpmap:111 telephone-event/8000 =
a = fmtp:111 0-15

Apr 24 14:23:23.266: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Envoy:
SIP/2.0 488 Media is not Acceptable
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPjzDEPLi9QFHsCPzfcVR.g72
hEIRSMbivf
From: 'Phone4' <> [email protected]/ * / >; tag = 3dffd3d9-8f9a-48e7-b9a0-9a9f4c6c984d
To: sip:[email protected]/ * /; tag = 13DBD6C-1273
Date: Thu, April 24, 2014 14:23:23 GMT
Call ID: ea647ad6-36d2-414e-83d3-0e04b35e8129
CSeq: INVITE 26904
Allow-events: telephone-event
WARNING: 304 192.168.0.1 "Media type (s) not available.
Reason: Q.850; cause = 65
Server: Cisco-SIPGateway/IOS-15.2.4.M4
Content-Length: 0

Apr 24 14:23:23.278: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
SIP ACK:[email protected]/ * /: SIP-5060/2.0
Via: SIP/2.0/UDP 192.168.40.11:5060; rport; branch = z9hG4bKPjzDEPLi9QFHsCPzfcVR.g72
hEIRSMbivf
Max-Forwards: 70
From: 'Phone4' <> [email protected]/ * / >; tag = 3dffd3d9-8f9a-48e7-b9a0-9a9f4c6c984d
To: sip:[email protected]/ * /; tag = 13DBD6C-1273
Call ID: ea647ad6-36d2-414e-83d3-0e04b35e8129
CSeq: 26904 ACK
Content-Length: 0

Hello

In my view, that the call fails because the phone of 3905 Announces g729annexB codec. could you please try to configure "voice-class codec" or a "codec G711a/G711u' command under voice register pools 1-4 and check the behavior?

Suresh

Please note all useful posts

802.1 x and Cisco IP Phone

I'm trying to authenticate a 7970 Cisco IP phone that is configured for 802. 1 x with ACS. When I check the logs on ACS is hows that the phone has no authentication, but the phone is still allowed on the network and can make calls. I've added the MAC address as a user of the CSA and set up a password that matches the password configured on the phone. If I put the wrong password in its still authorized on the network port is never stop. I was talking to someone who was able to do this and some how turned on the av-pair. Only I don't know what to put in it. There when even an idea as to which would need to go there so that when a phone fails to authenticate its put in the comments VLAN or access?

Right. It's the phone doing MD5. All phones will have a unique and encoded username hard. It is designed to simplify the configuration on the side of the phone.

You need to check, since I'm not really practice, but I think that the user name is something like "MS-mac-address-phone-model" or something like that.

HTH,

Bluetooth headset with Cisco IP phones

Hi all

A client tries to connect a headset bluetooth Plantronics Savi WT/1 t with a Cisco 7940 IP phone and it seems to work very well when he receives a call and press the button 'phone' at the bottom of the phone. However, he wants to be able to walk outside his office and be able to receive calls by pressing the button on his bluetooth headset but the button is not admissible. Is there a way to configure that? I have the impression that the button on the helmet and the helmet on the IP phone button would somehow be synchronized but I don't see how that's possible. Someone has configured an earpiece bluetooth with a Cisco IP phone and have this feature work?

Thank you for your help in advance.

Hello Asad,

To make this work, you would need a number of things;

-a phone that supports HHC (headset hookswitch control) such as

Cisco 7942G, 7962G, 7945 G, 7965G, 7975 G

-the right to work with the Savi Plantronics cable, it would be

connect to the port on the bottom of the phone and works together with the

with the HHC funtion (enabled) on the config of the phone in CUCM

-minimum sr7 CUCM 4.1 (3)

I can't find the model of Savi, you're connected, but if you could check the exact model

number/name we could provide more details.

See you soon!

Rob

Switchport security best practices for Cisco IP phones

Hello.

I have some difficulty to understand what the safest method is to ensure a Cisco IP Phone.

Can't get info on how many course connect a switchport and a telephone computer IP Cisco with a daisy chained to him.

The thing I fear more precisely is how to secure against attacks of Double VLAN tagging and COP on this port.

I searched regardless of the possible resource for the answer and you have not found anything useful.

I also have a question regarding port security on a switch: can you set a minimum amount of MAC addresses active and then limit the period of ageing on the MAC addresses on a specific switchport, such that if someone disconnects the phone and sets up a Cisco switch or other device of thugs, then the port should be stopped during the period of ageing.

Let me know, what you would suggest to better secure the hose between the Cisco IP phone and the switch.

Best regards

Casper.

If you see all these as the attack vector for your environment, there are only 802. 1 x that can help you.

Turn on Cisco IP Phones to the (VMWI or MWI) message waiting indicator Visual?

How can I brighten Cisco IP Phones to the (VMWI or MWI) message waiting indicator Visual programmatically?

Then, you have to ask in the forum of developers for this kind of things.

HTH

Java

If it helps, please note

www.Cisco.com/go/pdihelpdesk

Configuration SGE2000P using Cisco IP phones

Hello, I need to know if it is possible to configure the Cisco SGE2000P switch if I use an IP of Cisco 7945 phone for voice and data.

Configuration is easy with other 3560 switches that we got, but a colleague bought this switch to install it in a warehouse with 10 IP phones and we cannot make it work with the vlans separate (one for voice) and the other for data

Any ideas?

Thank you very much.

Jose

Hi Jose,

Because there is no COP on the switch itself, you will probably have to tell phones what VLAN to which they belong.

I suppose that as a prerequisite not switch has configured both tag and ports without tag VLAN assigned to all ports, even the uplink.

Now in the case which is properly set up, goto telephones themselves.

1. press the settings button

2 unlock them with the keyboard command * #.

3. set their. admin VLAN Id for the number of vlan tagged which is used for voice traffic. You will need to find this option, probably under the Network Configuration settings.

Save these changes. See if that makes a difference.

Best regards, Dave

Cisco Nexus to use authentication Radius AAA using Microsoft 2008 NPS

I have a Nexus 7010 running

I was wondering if you can help me with something. I'm having a problem with the approval of the order through our aaa config. We have not an authentication problem of command approval that does not work. From what I've seen and read Nexus NX - OS 6.x has not all orders for the aaa authorization, unless you configure GANYMEDE +. My basic config is below if you can help would be much appreciated.

> ip source interface mgmt radius 0

> key RADIUS-server XXXXX

> host X.X.X.X key radius server authentication XXXXX accountant

> RADIUS-server host X.X.X.X XXXXX key authentication accountant aaa

> authentication login default group aaa authentication Radius_Group

> RADIUS server logon group console local aaa Radius_Group

> server X.X.X.X

> server X.X.X.X

> mgmt0 interface-source

Also nobody how to configure Microsoft 2008 NPS as Raduis server to work with Nexus? I read a few post that suggests to change the

Shell: roles = "vdc-admin" in the value field of the attribute in the RADIUS server

Anyone know if it works?

Thank you

I haven't used NPS before but sounds like you are on the right track. As Ed mentioned in his post, GBA, you can set the type of protocols that you will accept during an authentication session. Authentication Nexus sessions is considered as PAP/ASCII, so you should be good to go. I don't have a Nexus switch to test with, but if you can use wireshark to capture the session and see the exact protocol / method used. However, I am sure that PAP is the way to go:

http://www.Cisco.com/c/en/us/TD/docs/switches/Datacenter/SW/4_1/NX-OS/se...

I also found the link that you might find useful:

http://www.802101.com/2013/08/Cisco-Nexus-and-AAA-authentication.html

Thank you for evaluating useful messages!

interface web cisco ip phone from the computer LAN

Hello

On the uc540 the DATA VLAN is en 192.168.10.0 as the VLAN DATA it is en en 10.1.1.0, I want to access them from the local network the computer the my client who is en 192.168.0.0 to web interfaces of the cisco ip phone so by going to http://10.1.1.x without needing to modifier already exists, how can this be done? I have available in my not to a manageable switch that would allow me to integrate the lan that does not exist in the DATA VLAN of the CPU.

Thanks for advance

Hello

The voice VLAN 10.1.1.0 is not routed in your network.

Namely that workstations do not know that there is, and this due to the fact that their router default doesn't know not router network.

Here's how to fix that little problem of routing:

1 / if the default router for the positions in the VLAN data isn't the UC 500, just to add a static route in this router with the sub network 10.1.1.0 and address of next hop (IP address of the router that helps you achieve this subnet).

For example: If the default router is a Cisco router, it is in the VLAN data with the UC500 and the UC500a as the IP address 192.168.0.1.

conf term

!

Route IP 10.1.1.0 255.255.255.0 192.168.0.1

!

end

2 / if we can't change this router by default, we must add a path in given work stations of the VLAN.

In a post Windows you do that in a CMD window with the ROUTE ADD command

c:\>route add 10.1.1.0 mask 255.255.255.0 192.168.0.1

and you can check your local routing table with the command

c:\>route print

If you want that this road remains in positions of work even after a reboot, use option-p of the route command added

c:\>route add 10.1.1.0 mask 255.255.255.0 192.168.0.1 Pei

Control the Access-list! : Of course, after having solved the problems of routing, assure you that there is not an access list that blocks traffic

FINISH POUR a bit of security. Allow access to the VLAN voice is not a good practice!

As long as possible, to avoid to make the voice VLAN too accessible from anywhere. Therefore, a good practice is to not allow the VLAN data access to the VLAN voice.

Patrick

Cisco IP Phone 6921 crashes

Cisco IP phone 6921 is part of the hunting algorithm which is broadcast group

Firmware: SCCP69xx.9 - 3-3-2-SR1, CUCM version: 8.6.2

When the end user not used this phone 30 Min (Aprox), this phone is having hung

The Conference will be coming to the phone, but he isn't rings and not be able to access one of the buttons, I can join the call by taking the receiver

Still one of the buttons do not work, had to perform a reboot hard to fix

Please suggest

Hello

Please upgrade to the latest firmware 1.0000 SR2 6921 phones and see if the problem persists.

https://software.Cisco.com/download/release.html?mdfid=282622815&softwareid=282074289&release=9.4%281%29SR2&relind=available&rellifecycle=&RelType=all

Let us know if that helps.

Cisco Unified Video Advantage connect not not Cisco IP Phone

Hi, I have the following text:
- CUVA 2.2.2.0 installed on windows 7 x 64.
- UC560.
- IP phone 7965.
The first time I installed the program, everything was ok, didn t try the video feature, but it was connecting and recognize.

Now I'm with another phone, also a 7965 but CUVA said that it is not connected. He also says: "cisco unified video advantage can't connect to cisco ip phone" and asked him to contact the system administrator.

It has been a long time (about 3 weeks) because I checked the last time he was working on the previous phone, I'm not sure if it's because I'm on another phone now, but I do not.

Any ideas?

When you go to CUVA-> all show the driver see CDP?

Have you tried to close your wireless adapter or set a higher metric?

Got a GPO that would restrict CUVA on windows firewall?

MAB Cisco phones successfully authenticated, VLANASSIGN assigned and failed authorization?

I'm getting a strange behavior with a Catalyst switch and 802. 1 x. I use multi-auth, with a PC and phone Cisco patched in. The two devices to authenticate correctly, but only the PC is allowed depending on the switch logs.

Switch terminal logs:

Apr  7 09:27:37.836 EDT: %AUTHMGR-5-START: Starting 'mab' for client (001b.d585.205e) on Interface Fa0/1 AuditSessionID 0A0A050E000003B93EBE2E09Apr  7 09:27:37.945 EDT: %MAB-5-SUCCESS: Authentication successful for client (001b.d585.205e) on Interface Fa0/1 AuditSessionID 0A0A050E000003B93EBE2E09Apr  7 09:27:37.945 EDT: %AUTHMGR-5-VLANASSIGN: VLAN 100 assigned to Interface Fa0/1 AuditSessionID UnassignedApr  7 09:27:37.970 EDT: %AUTHMGR-5-FAIL: Authorization failed for client (001b.d585.205e) on Interface Fa0/1 AuditSessionID 0A0A050E000003B93EBE2E09Apr  7 09:27:39.295 EDT: %AUTHMGR-5-START: Starting 'dot1x' for client (0015.c547.7069) on Interface Fa0/1 AuditSessionID 0A0A050E000003BA3EBE5082Apr  7 09:27:43.775 EDT: %DOT1X-5-SUCCESS: Authentication successful for client (0015.c547.7069) on Interface Fa0/1 AuditSessionID Apr  7 09:27:43.783 EDT: %AUTHMGR-5-VLANASSIGN: VLAN 212 assigned to Interface Fa0/1 AuditSessionID 0A0A050E000003BA3EBE5082Apr  7 09:27:45.570 EDT: %AUTHMGR-5-SUCCESS: Authorization succeeded for client (0015.c547.7069) on Interface Fa0/1 AuditSessionID 0A0A050E000003BA3EBE5082

Config switch:

aaa authentication dot1x default group RADIUS-DOT1Xaaa authorization network default group radius ip radius source-interface Loopback0 radius-server vsa send accountingradius-server vsa send authenticationdot1x system-auth-controldot1x guest-vlan supplicant

Configuration interface:

interface FastEthernet0/1 switchport mode access srr-queue bandwidth share 10 10 60 20 priority-queue out  authentication event fail action next-method authentication event server dead action authorize voice authentication event no-response action authorize vlan 999 authentication host-mode multi-auth authentication order dot1x mab authentication port-control auto authentication periodic authentication violation protect mab mls qos trust cos auto qos voip trust  dot1x pae authenticator no mdix auto spanning-tree portfast

NPS Windows Server policy:

radius_attributes.PNG

and

vendor_specific_attributes.PNG

Hello Jim,

Try to use the domain host instead of multi-auth mode multiplayer.