Cisco vcs 'Phantom' or false attempts at URI dialing

A customer reported that there are many attempts to appeal to non-registered or 'false' URIs in their control of VCS and VCS Expressway, the consecuence is the saturation of internet bandwidth customer due to the many requests.

This has been discussed before in these forums.  Take a look at some of the following threads:

Wayne

--
Remember the frequency responses and mark your question as answered if appropriate.

Tags: Cisco Support

Similar Questions

  • Restricting calls between a subarea and specific extensions on Cisco VCS

    Hello, I use Cisco VCS 8.5.3, my goal is to restrict calls between a subarea and specific extensions.
    I tried following solutions:

    1. Download of XML strategy
    2. Use of political appeal web interface in order to limit calls

    XML file:


     
     


     
       
       

       
       

       
       

         
       

       

     


    But when I apply the XML file, or try using the web simple rule (for example: 11111 12222 destination source, dismiss the action) I'm still able to place the call to 11111 to 12222.

    What can be the cause of the problem and what else can I try to be able to prohibit calls between a particular Subzone and exentions?

    Attached, is an example of CPL script that should work.  Using this script, CPL, I was able to block calls to a subarea set to a destination alias located in the subzone of default and was always able to call any other end point in the default subfield without problem.  Note that you must enter the name of the subarea, as you have configured on the VCS, including spaces if they exist.

    The scenario is based on the example of CPL "limiting access to a local gateway" X8.5 VCS Administrator's Guide on pg 413, other documents of CPL reference and examples can be seen starting on pg 410.

  • Cisco VCS and MCU - Conference does not

    Dear community members

    I have problems in the VCS configuration to work with the MCU to join to several endpoints in a conference. The components that I use:

    -Cisco VCS control v8.7.

    -Cisco 5300 MCU 5310 v 4.5 (1.72)

    -3 x SX20 end points

    I recorded every endpoint and MCU on VCS, but I'm not able to do a conference call 3-way, the only option is 1 video and 1 audio (I disabled the Multisite option). It seems that VCS does not yet call the MCU in the game.

    Kindly help us with it.

    Can you tell us how you set up the Conference and how you have configured MCU and endpoints?

    From the sounds of it, you call each end point of one of the SX20s, but you must call simply directly in the Conference on the MCU.  If you want to have a conference point to point between two end points and then degenerate into a multipoint conference on the MCU, you must configure Multiway.

    With the help of Multiway with Cisco TelePresence systems

  • Vcs Tandberg and Cisco VCS control

    Hello

    I have a client with an old would invest video and new servers.

    Old video servers

    Control system Tandberg video Communication Server - part number = 117500

    Application of Tandberg video Communication Server Expressway - part number = 1163402

    New video servers:

    VCS License Control - Part Number - R-VMVCS-CTRL-K9

    VCS Expressway License - Part Number - R-VMVCS-EXPWY-K9

    According to Cisco x8.2 Clustering:

    -Each peer runs on a hardware platform with equivalent functionality; for example, you cannot cluster one
    peer running on one core 2 average VM with peers running on base 8 large virtual machines

    Means that the physical old VCS cannot be grouped with new virtual VCS.

    Thank you.

    Hi zizou.

    You can include a device VCS with a VCS VM as long as their matches of software and their hardware platforms have equivalent capabilities.

    Device VCS clustered with VCS VM running on core 2 MediumVM = YES

    VCS machine clustered with VCS VM running on 8 cores LargeVM = No.

    "you can even cluster that are running on the standard devices with peers running on core 2 Medium VMs, but you can not group a peer running on a standard unit with peers running on base 8 large virtual machines.

    (p.4)

    http://www.Cisco.com/c/dam/en/us/TD/docs/Telepresence/infrastructure/VCs/config_guide/x8-7/Cisco-VCs-cluster-creation-and-maintenance-deployment-guide-x8-7.PDF

  • Cisco VCS - C keeps filling in Purge on MSDS systems

    Hello

    I have a very weird question that is quite difficult to explain. We had a few failures of Fan on my Cisco VCS - C and we did a RMA number and received a new one. I installed this VCS in April this year. I start then notice every time we add a new system to their MSDS ID TMS is of the order of 2860. We have only 42 systems at this stage. Then I noticed when I'm in the systems tab Purge TMS keep my new Cisco VCS - C, populating the name of the system and the type of system, this product about 2800 times. Someone else experiencing something similar to this?

    I'll try to purge these systems, the only thing is that this happen, what can I do else do I completely purge my VCS of TMS and readd it?

    TMS system IDs are generated by TMS and increases when you add several systems.  You might be able to change the ID of the SQL database, systems are stored in the dbo.objSystem table, but I do not recommend because the ID of the system could be used elsewhere and you can potentially break TMS and make things worse.

  • URI dialing problems

    I started a new job and have been invited to support our video-conference equipment, I have limited expereince with kit v/c, however I have several years expereince with network & unix, so please take it easy.

    I have a C20 of Tandberg & C60, which are both on the public ip, I don't have a VCS or a bridge of some sort. I can dial directly to any intellectual property, and they can call me directly. However, I can not dial all numbers that require a string of URI style ([email protected] / * /).  Just quick call fails and no reason given.

    I have a MSD Setup who can see both units, I can also connect to the web interface, the tsh & the command-line as root on both units.  I googled about as much as I can, but cannot understand what may be the problem. If anyone can point me in the right direction as to what file newspaper or the config setting I should be looking, that would be greatly appreciated.

    Stephen Bancroft wrote:

    I have been testing from the C60 which has software version TC4.1.0.247017

    And there is your problem...

    You cannot use the URI dialing with software versions prior to TC4.2 unless the system is registered with a Gatekeeper.

    Cisco only introduced full support for H.323 Annex O in TC4.2 - you'll need to upgrade your system.

    As is the case, you can dial IP address.

    If you do not have a service contract in place, you will still be able to upgrade the device as per the below security advises:

    http://Tools.Cisco.com/Security/Center/content/CiscoSecurityAdvisory/Cisco-SA-20130619-TPC

    Contact TAC for the release key etc.

    /Jens

    Please note the answers and score the questions as "answered" as appropriate.

  • Configure SIP URI dialing

    Hello

    I tried to activate the SIP URI dial, unfortunately with no success yet. Here you can see what I've done, maybe one of you can tell me what is missing:

    • Set up the LDAP synchronization, assign msRTCSIP-PrimaryUserAddress URI directory (because of the interoperability of Lync)
    • DNs associated with devices of CSF and BOT
    • Associate the URIs directory with directory numbers
    • The "phones" partition of directory URI alias value
    • Modify a SIP profile (named Jabber) later
      • Define interpreting string dial with 0-9, *, # and +.
      • Use the FULL domain name in the SIP application
      • Allow the presentation of bfcp
    • Assign the profile Jabber SIP devices CSF and BOT
    • Set the DNs route partition as an alias of the directory URI (phones)
    • Jabber - config.xml and change download
      • msrtcsip-primaryuseraddress in section of the book
      • true in section strategies
    • Restart the tftp server and re - open a session with Jabber

    We have 9.1.2.11900 - 12 Call Manager Server Instant Messaging and presence 9.1.1.10000 - 8 and 9.6/9.7 Jabber clients.

    Is there anything I missed or misconfigured?

    Thank you

    LACI

    Hi Labelle,

    If you put DirectoryURI in the uri section directory publication is no longer available in the client.

    Of the documentention, I got that it belongs to the policies. But if I put it here my click to call URI is always the address e-mail and not msRTCSIP-PrimaryUserAddress. So I'll do some research here.

    One thing I found is the resolution of contact section. If I signed to jabber my name did not appear. Instead, it was my msRTCSIP-PrimaryUserAddress.

    To resolve this problem, you will need to add this to jabber - config.Xml.

    true
      msRTCSIP-PrimaryUserAddress
      SIP:

    Kind regards

    Paul

  • Cisco VCS and composition to an IP address

    I have a question about the composition of address Ip and VCS. In the Administrator's guide, he says that VCS determines that an IP address that will be called if it is:

    -is the IP of a locally registered endpoint

    -Beach one of the subzone of address membership rules is the responsibility of intellectual property

    The second point is that of interest. As part of the way in which it is presented, I take this means that if a subarea membership rule has a range of IP addresses that includes the address of a non-registered endpoint then VCS will still attempt to place the call to the endpoint not registered regardless of the setting "Calls for unknown IP addresses" (under the numbering plan). For example,.

    Assume the end point has (EP - A) is enrolled in a VCS control that is configured to use the mode indirectly for "calls to unknown IP addresses. The idea here is that there is a highway of VCS. Suppose that there is an end point (EP - B) on the internal network that EP - A wants to call. EP - B is behind the firewall, but it does is not registered in the VCS - C. Finally, suppose the SCV - C has a subarea (let's call it "Internal-Unregistered") with a membership of 10.10.10.0/24 rule.

    Now, if the address IP of EP - B is 10.10.10.10 and EP - A dials by IP, will be the call successfully established? Based on the Administrator's guide, the VCS will see the EP - B IP as "known." The Administrator's guide does, really, that the call would be placed. I'm stuck sorta messaging RAS, since EP - B would not be exchanging messages with the VCS - C RAS.

    I also wonder about calls from unregistered endpoint. EP - B could call EP - A directly. I don't want to support this behavior in the design (I recommend rather using the numbering of the URI. I am considering set up the Alias of relief on the VCS - C to channel calls from unknown devices to an attendant on the MCU. Regardless, what I was asking is the following:

    If I have a membership rule subarea as above and EP - B sends a message of call setup to the VCS - C, the VCS - C would still see the call as coming from the default Zone of the local area? The reason I wonder is because of the way the Administrator's guide defines "known IP addresses.

    Thanks in advance.

    Kind regards

    Bill

    Hi Bill,

    to answer your question about the first scenario (where EP at dials the address IP of the EP B), VCS would attempt to place the call if there is a rule of type search 'AnyIPAddress' for the local area on the VCS - C (and assuming that the previously mentioned subzone containing 10.10.10.0/24 exists). VCS would be in this case send a message of CONFIGURATION H225 EP B.

    For the second scenario, where EP B contains the IP of the EP, EP B would send that an INSTALLATION H225 EP EP a. message would then for the message INSTALLATION with an INSTALLATION containing a reason 'routeCallToGatekeeper", instructing EP B to dial the address IP of VCS instead, since the VCS want to be included in the call, signaling path.

    To answer your last question, with regard to the area in which a call of an endpoint not registered (when the IP address of endpoint belongs to a subnet-type subfield) comes on, the answer is that the appeal turns on the default Zone. Calls will be local area if the call comes from a real end point recorded.

    I hope this helps.

    -Andreas

  • VCS E change address IP in URI

    We run VCS E worm 8.7

    It is necessary to get this routing of a call:

    W.X.Y.Z. => [email protected] / * / , where IP address W.X.Y.Z. in one.

    The user composes an endpoint IP address and must be changed to a URI.

    The point of termination/codec dial IP is registered in the VCS E via h323.

    We tried a transformation to change the IP composed in the URI, however, since the recording of endpoint is h323 VCS E fails to do so, saying "IP address aliases are not supported for the special criteria.

    It has been brought to my attention, it might be possible with a custom CPL.

    What type of endpoint lance call, why not just have them dial [email protected] / * / instead of this rather than an IP address?  All the endpoints of these days can dial [email protected] / * /, unless they are running old software.

    If you need to dial via IP address, you will need to use a CPL script on venture capital to convert it to an address URI, attached is an example of script I threw as well, however, there are two things to take note of:

    1. You can use the regex in the destination domain to match IP addresses or specify the exact IP you want to match.  However if you use the regular expression, you must specify the alias of the endpoint calling also in the original field to avoid the problems of other calls based on IP addresses and avoid a false match.
    2. Depending on whether the calling end point is authenticated to the VCS or not, you need to change the original type: 'origin' is authenticated, and "origin unauthenticated" is obviously not authenticated.  VCS area where the endpoint is saved to determine one to use, you can check by looking at the record itself says, there is an "Authenticated" field which will either be true or false.
  • integration of lync 2013 with cisco vcs - c

    Hello

    I found a lot of documentation on integrating to Lync 2010 with VCS - C, but can't find much on the integration of Lync 2013.  Could someone shine some light on this for me?
    Thank you!

    Hi, David,.

    It would be preferable that you contacted Cisco re: integration

    https://supportforums.Cisco.com/thread/2181356

    Cisco PDF

    Or try to repost your question to the TechNet Forum

    http://social.technet.Microsoft.com/forums/en-us/ocsinterop/thread/319f9e94-f7ec-4c6e-994C-f5412e345e2e

  • Cisco VCS and integration Lync2013

    Hello!

    Could you tell me please, when CISCO officially support Lync2013 - free new software for VCS - C and documentation on integration?

    The main interest is the possibility of transferring video between CISCO/MCU and Lync endpoints on the H.264 Protocol, who hails from Lync2013.

    Right now, I've got VCS - C and RTM Lync2013 X7.2. During the video call without AMGW appeal established as audio only.

    When using with Lync2010, it worked on Protocol H.263 and CIF resolution.

    Evgeniy salvation,

    We are currently investigating the possibilities to achieve interoperability between Lync 2013, VCS and video devices on the side of the VCS standards-based, it is a work in progress and at this stage, it is to early to provide any factual information on when interop will be available.

    In contrast to Lync 2010, Lync 2013 does not support H.263 for video and it so that will remove the OCS/Lync integration. I do however think that you should be able to make a two-way video between Lync 2013 and VCS-joined endpoints if you use an AMGW tried that yet?

    Thank you

    Andreas

  • Cisco AnyConnect VPN Client (connection attempt failed because the network or pc problem cisco)

    Hi all

    I am trying to connect to my Cisco AnyConnect VPN Client but everytime I try, I get an error (connection attempt failed because the network or pc problem cisco)

    Can anyone help me please with this.

    Thank you

    Zia

    What is the local firewall on your computer?

  • Cisco VCS - server certificate

    I get the warning "certificate unsecure: this cystem uses the default server certificate.". We recommend... "On my VCS' are

    1. is there something that I have to take into consideration related to endpoints or other VCS (this is a cluster) before you download a new certificate?

    2. communication between endpoints will affect?

    Hello

    If you are looking to get your certificates signed by yourself or a public certification authority I would first make sure that your servers have host names and configured DNS records. In addition, if you plan to use the edge of the collaboration (MRA) you should take a look at the additional without required for this:

    http://www.Cisco.com/c/dam/en/us/TD/docs/voice_ip_comm/Expressway/config...

    You shouldn't have issues with endpoints being affected, in my experience, the certificates have affected only edge of collaboration.

    Thank you, Simon

  • History of calls Cisco VCS 7.0.2

    Hello

    I have a cluster of Cisco Telepresence Video Communication Server x7.0.2 and disappear every week we'll restart devices for maintenance but the call history when the devices is restarted.

    I'm trying to find this call history, but I couldn't find it.

    Do someone know where this call histroy is or is deleted as soon as the devices is restarted?

    I need the call history for statistics, as a Manager (or Unified Communication Manager) Call CDRs

    Thanks in advance.

    Best regards

    Hello

    You can try to access the VCS as root and go to/mnt/hardisk/logs and then search for journal of the 'messages' for the date that you are interested in. Open it with a text editor and try to filter out them on h225.setup and method = invite messages - these are your calls. There are also a lot of other messages.

    Best regards / / Andrey

  • Make use of crossing call instead of Non-traversal on Cisco VCS - C

    Hello

    I have a test of Cisco's VCS running non-traversal 20 and 100 license course. I need once I have start a session of Cisco's Jabber client to one of the cameras (Studios). I want the VCS to consume a license of traversal appeal?

    Is - this possibe?

    Hello

    If you enable interoperability and call Jabber on sip to H323 endpoint. <->SIP h323 will consume a crossing

    Lisence.

    / Magnus

    Sent by Cisco Support technique iPhone App

Maybe you are looking for

  • Need BIOS password for my HP Mini 110-1026NR computer

    I don't remember password to access my HP mini 110-1026NR.  I get a CNU936377F message when I want to enter.  I would appreciate your help.  It is a very frustrating situation.  My age (68) probably has something to do with it. Sorry

  • HP solution Center

    I have HP office Jet 6500 e 709n series printer all in one. I have Windows Vista 32 bit I have a HP Pavilian dv 900 laptop. When I try to start the HP Solution Center, I receive an error message saying that I need to have the correct version of Adobe

  • removal of the old updates

    I have recently updated from Vista Home Basic to Vista Service Pack 1 (KB936330).  Can the previous updates now be deleted, from 2007 to clear more space?

  • Download SP3 for transfer to another computer

    (If wrong forum please to move - 1st post) Download SP3 and transfer to another computer?   Mobile dongle does not work on it because it does that SP1 is installed. old 7yr Dell Dimension 4600 desktop (XP) in perfect condition, used only for work (CA

  • HP LaserJet P1102w: App´s authorization has been revoked.

    Hello, I tried to use my printer, HP Laserjet P1102w, when I noticed I couldn t. As a first step, the problem is that my computer didn t want to recognize the USB cable, so I went into another room with the same printer, same model than the previous