VCS commands
Hello
Is it possible to configure a VCS using a configuration script that will be put in SSH?
I know that you can make a model through TMS. But I want to configure it with CLI commands.
So I would put Xconf commands in a list. This will then put in venture capital and by running the script, the VCS will be configured.
Welcome them
Stijn
Hi Stijn
Look in TeraTerm. I created a few scripts with this in the past for endpoints push the different kinds of xcommand and xconfigs. Worked like a charm and it's a lot of info on how to write and send commands via ssh on the net. Not soecifically relatkng to telepresence, but once you know how to connect and how to send commands is easy.
Passwords may be hardcoded to authenticate automatically as well.
Im sure there are many other methods to do this, but I found this one to go around.
Your a smart guy so you'll understand. I tried to find my old scripts but they are unfortunately lost.
/Magnus
Sent by Cisco Support technique iPhone App
Tags: Cisco Support
Similar Questions
-
VCS slow response in the GUI after X7.1 upgraded
We recentlty improved our VCS to X7.1 and see the GUI response is very slow.
We have the box integrated with LDAP for authentication for the admin user. We tried using the box with both local and remote authentication.
But still the connection time takes about 3 minutes.
Should check us here to continue further on that. Pls suggest.
Reboot option will be the last resort.
I had the same problem with one of my VCS highways after the implementation of LDAP authentication on 7.1.
I have 6 VCS commands and 4 highways all on the same version of the software and the integration of LDAP in the same environment video and just a box was not happy.
Cisco suggested I try to factory reset the box and reconfigure but which did not help.
I eventually found a number of RMA.
-
How to stop a VCS from the command line?
Is there any command that can turn off a VCS?
Enter xCommand reboot?
Kind regards...
Hello
I think that you can not stop VCS of CLI. To do this, you need to do through GUI under Maintenance contract - stop
CLI, you can run the command xcommand restart to restart
regds,
Aman
-
Configuration of the firewall on VCS via command xconfig rules
Hello
We have all the days of the "bad guys", how want to use our VCSE for calls to PSTN numbers.
It is possible to configure the firewallrules via Xconfiguration or only on the web page?
Thank you
Stephan
Actually, I just re-read your post and it seems that the firewall rules are not what you are after, but rather call policy (CPL) Scripts. Firewall rules, could be used to stop or allow to use specific IP addresses to connect to a service that runs on your VCS - such as SSH or HTTPS, not really for the filtering of the calls.
-
Strange orders in the log Configuration for VCS Expressway
Check my journal of VCS configuration, I found hundreds (perhaps many) of these commands:
2015 04-28 T 16: 02:23 - 03:00 "Elements UTCTime =" 2015-04-28 19:02:23, 515"Event ='System Configuration changed" node = "[email protected] / * /" detail ="xconfiguration fail2banJailStatus uuid 09637cfe-b0af-4d6f-9bab-6f59ba305156 prison: total_fails http this intrusion - last: 3 to: 4" What is c? A hacker trying to invade my VCS?
This highway of VCS is in a public IP address, with the disabled SSH, HTTPS is only allowed.
In a manner of speaking, possibly. These are due to having you activated automatic detection. The IP address 127.0.0.1 is always "self." The VCS is simply the recording of hack attempts. You can see the numbers from 0 to 1, 4 or 5, etc., as attempted access failures are recorded. It depends on what you have set up in the automated detection of which is controlled, and eventually be blocked in case of several events in the detection window. You will need to look at your configuration and possibly other newspapers to determine if a real intrusion event occurs.
-
Need an idea to fix a few alarms on my cluster configuration two VCS.
VCS are running X8.5.1
Had five alarms on the my resume
1. the replication is no longer available. Systems have 4ms between them.
2 lost all Admin user accounts less? Strange... Newspapers reported that no one was in the VCS
3. admin VCS Master on the master account was returned to the TANDBERG default? (Alarm has stated that this was the case).
Changed the admin password and recreated my admin on the master account.
4 approves. it 2 (slave) lost all VCS user account, but the admin password reset not and does not have that I have listed.
My partner has been able to connect to the peer 2 VCS, even if his account is not listed in the list of users?
------------------------------------------------------------------------------
After the captain restart now, I have three alarms
a. unexpected software error has been detected in ClusterDB: unknown reason on the slave?
b. There is a port conflict between the media (36000-47999) port range and the range of ports UDP ephermeral (40000-49999) on Master
c. Core dump mode has been changed, but a reboot is required before this takes effect on Master
1. any ideas what could have caused the user accounts to disappear on the page? I think that they are still in the VCS configured just cannot see them.
2 will be restarting on the master clear alarms b and c?
3. a reboot on the peer 2 (slave) would open the ClusterDB alarm?
I can't restart until later tonight that calls are up on both.
Oh finally where one or even any changes a core dump mode?
Thank you
Connect to the VCS via Telnet/SSH/series and log in as 'root '.
use the command 'selectsw' to see what partition software he's using now, then, if image1 is active, allows the command "selectsw image2" switch to the other, or vice versa, and then restart your computer.
Wayne
--
Remember the frequency responses and mark your question as answered as appropriate. -
Cisco VCS: You can change the root within the TSH Admin password?
I know you can reset password "admin" to root, by running the tsh, but you can change the 'root' password in the 'admin' tsh?
Hi David,
No you can not change it until and unless you follow the documented procedure to reset the password using console.
However, you can go to t-root shell using the command 'tsh' and set up a new admin account, then log into the VCS GUI admin with new administrator and reset the password for the default Administrator account.
Thank you
Alok
-
I plan go my VCS control and version 6.1 to 7.2 highway.
Do I need a license to upgrade to make it work? Also will be the keys different option still installed after the upgrade?
Hi Ben,
Yes, you need a software license key separated for the upgrade to the 6.1 to 7.2.
You can get the license key by writing to [email protected] / * / and provide the serial number of the boxes of VCS.
Also note the software that you download from the site of cisco, when you perform the upgrade. There are both encrypted and unencrypted version.
then download the software you paid for
Also, please follow the procedure to upgrade from vcs in the VCS cluster guide as when you take the vcs on x6.1 backup, you need to run the sequence of commands before doing the backup.
mkdir/tandberg/persist/oti
mkdir/tandberg/persist/management
keys opiton would remain after the upgrade. However please note the same or take screen shot before that you were going to upgrade.
see you soon
Alok
-
Reset password on VCS Starter Pack x7.2
Hello!!
I had little problem with the remote control of the VCS Starter Pack... I have only access root via the serial number.
Could you tell me, what command could you help me change the admin name and password for the web access? How I understand it, the commands of version 6 does not work fo 7.2.
I did already try with aproach via pwrec but for some reason any, that it did not work. So I only need CLI command for version 7.2
Kind regards.
pwrec should also work, but works only in shortly after a restart.
As you say you have root access, you can simply set the admin password yourself.
Access the VCS as root, type:
admin passwd
~ # passwd admin
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
You will be asked to enter your new password twice, and there you go :-)
The following xcommand path appear to be removed from the current version:
SystemUnit AdminAccount [1..15] Password:
Defines the password of an administrator user who can login to the VCS web interface. The maximum plaintext length is 16 characters, which will then be encrypted.
Example: xConfiguration SystemUnit AdminAccount 1 Password: "password123"
SystemUnit Password:
Defines the password for the default 'admin' account. This account is used to log in to the VCS via Telnet, HTTP(S), SSH, SCP, and on the serial port. The maximum plaintext length is 16 characters, which will then be encrypted.
Example: xConfiguration SystemUnit Password: "password123"
And of course, there is also the way to factory default your vcs.
For more information, see the vcs administration guide
-
local network 1 Console VCS configuration
Hi all
Recently, we have made a change to vcs on the network and the network lost connectivity... I have the box that is physically in front of me... How should I go around to change the IP address?
Should I console in it? If the answer is "Yes"; What are the commands that I do not have to use...
Thx for your help!
Sent by Cisco Support technique iPad App
-
Question about VCS 7.1 Media flow-thru
We currently have a way to call that looks like this:
Endpoint (SIP and H323) > VCS control > VCS - E (SIP and H323) neighbouring area > firewall > neighbouring area to the CUBE (NOT only).
When the VCS-E they interact SIP to H323 he directed media flow-thru allowing traffic through the firewall because it proxies all media and signaling. However, if the call all the way SIP, it will proxy the call signaling but not the media. Right now, we have it working, but we need to convert SIP H323 calls then back to SIP for it to work.
Is there a way to force the VCS-E to proxy all media to the CUBE, rather than some media of interoperability calls? I know it's usually what a crossing area is for, but AFAIK that does not work when you use CUBE to VCS-E.
VCS - E has obviously the hardware capacity and processing to do this (because he now works via workarounds) so I hope that there is a way I can do a little more cleanly.
Hello Nick!
I don't know your deployment, especially when you run a nearby area of the
VCS - c to the-e probably works, but you should know how it behaves for really knowing why
to use it, and a hack so save licenses is often not the best starting point.
You can configure the routing of locking media which will link the media to the vcs-e.
(this may not work with all types of areas, at least all the profiles of the area, but at least it does with custom)
*h xConfiguration Zones Zone [1..1000] Neighbor SIP MediaRouting Mode:
"Specifies how the VCS handles the media for calls to and from this neighbor, and where it will forward the media destined for this neighbor. Signaled: the media is always taken for calls to and from this neighbor. It will be forwarded as signaled in the SDP received from this neighbor. Latching: the media is always taken for calls to and from this neighbor. It will be forwarded to the IP address and port from which media from this neighbor is received. Auto: media is only taken if the call is a traversal call. If this neighbor is behind a NAT the VCS will forward the media to the IP address and port from which media from this zone is received (latching). Otherwise it will forward the media to the IP address and port signaled in the SDP (signaled). Default: Auto"
You must find the area id, then enter in the tsh - cli (admin ssh access):
(replace with your number)
xConfiguration Zones Zone Neighbor SIP MediaRouting Mode: Latching
There are other options that might be of interest as setting routed to this area for ever,
interwork or custom zone settings options, I would recommend that you're looking for by using the command line and Administrator's guide
-
We have a topology that looks like this:
CTS-> CUCM-> CUBE-> VCS-> telepresence server.
CTS-3000 s can make calls to the telepresence server, but the other way for a TC-3000 calls fail, with VCS search history gives a too small "Session Timer" error
I must point out that demand for CTS-1000 units works very well in both directions.
On the telepresence server, it seems to connect for a second before dropping. The TP server logs indicate that the CTS-300 has negotiated OK TIP/SIP-MUX, then it disconnects immediately.
I read documentationon 'Timer Session small' problem between VCS and CUCM and have made the appropriate changes, however I do not know how having a CUBE in the middle would be afefct this
CUCM version: 8.6
VCS: 5.1.1
TP server: 2.2 (1.48)
CUBE: IOS 15.1
Hi Nick,
I'm the engineer who worked on this through your ticket of TAC. I know that you now have the fix, but I thought that I have would be the bases here in case others come across this thread with a similar problem.
In this case, the error "Session Timer too small" came from the CUBE itself. As you mentioned that you have the VCS and the CUCM set to 500, those who are OK. However, the CUBE was always the default value of 1800 so he sent this error. The fix for this is to change this value with the following commands:
voip phone service
SIP
min - to 500-500 expires
However in the end, wasn't the cause of the failure of the actual call. Changing the value of the cube fixed 'too small logoff' mistakes, but always calls disconnected right after login. The fix for this turned out be a CUCM configuration change, which I won't go into here.
-
Is there a script or a process for automatic system backups or the manual process via the web UI the only option?
Thank you
Chris
Sent by Cisco Support technique iPad App
TMS, the backup is very easy. It's the best way to go. Don't always plan you a backup in TMS, but it is easy to make a backup of the configuration of all devices at the same time from a single interface. Very convenient. Typically, telepresence (especially infrastructure) hardware configuration changes usually very often. Not as much as a server, for example, is generally safe for backup systems whenever you made a configuration change. And, as we all know, those who are not always "regular" but are in response to an event or a directive. So that's how the TMS is structured.
If you use not TMS you could theoretically use either a client PCS to log on to the VCS root account and make a copy of the config.db file. But you should allow access for root account on the logon server, and it's maybe a little more risk that it is worth. You can probably also set up a SSH connection (safer) and the capture of text runs the xconfig command in the CLI. But at the point where you set up this that automated programming, you might as well do a manual backup.
Remember that you do not want to save the VCS if something changed that you do not want to keep! Unlike a server, it is not dynamic data stored in the database of real configuration on the system. It's just the settings information.
Hope that helps.
Eric
NAC, compass Business Solutions (telepresence)
-
Hello
I just put in place a control of VCS and a highway of VCS. I set up the traversal client on the VCS control using the port 6001 H.323 and SIP 7001. I set up the crossing on the VCS Exp server using the same ports. I get "H.323 could not not connect to x.x.x.x:6001 no response of the system.
The SIP will not connect either 'connection failed '.
There is no list of the control of VCS to VCS highway. Authentication is disabled. They are both pointed out the same NTP.
Any ideas?
Thank you!!
Rhonda,
In short, the configuration looks OK. Can specify you what other types of devices couche3 between the VCS - C and VCS-E outside the ASA?
If the firewall is not the issue, the problem may be caused by routing problems. If you allow ICMP from the command to the highway, you can check if the routing of the works by logging in as root (with SSH) for the VCS - C and launching the command
Traceroute x.x.x.x
where x.x.x.x is the IP address of your Expressway.
Thank you
Andreas
-
How to activate the two IPS on VCS starter pack express
I have the Starter of Cisco Express works with a single IP address using a NAT. This only works inside the LAN. To enable this machine on the internet, I bought the key option to double network interface. I enabled both interfaces, but I don't know how I should configure the two IPS by access from the internet. I tried to activate the static NAT, but it did not work.
There is only a single default gateway and this is where most of the traffic will be released and which should point to the internet router.
If you have addresses of internall more than 'LAN', you can simply add additional routes via the administration console.
As if LAN is connected to LAN2 192.168.150.0/24 and you 192.168.175.0/24 your home and where your laptops
router for tha is 192.168.150.1 you would add that, on the road to xcommand, add the command:
xcommand RouteAdd
*h 'xCommand RouteAdd'
"Adds and configures a new IP route (also known as a static route)."
Address(r): "Specifies an IP address used in conjunction with the prefix length to determine the network to which this route applies."
PrefixLength(r): <1..128> "Specifies the number of bits of the IP address which must match when determining the network to which this route applies. Default: 32"
Gateway(r): "Specifies the IP address of the gateway for this route."
Interface: "Specifies the LAN interface to use for this route. Auto: the VCS will select the most appropriate interface to use. Default: Auto"
for the example given, it would be (user admin via ssh):
xcommand road add an address: 192.168.175.0 LG: gateway interface 24 192.168.150.1: LAN2
But to be honest I'm not sure jabbervideo it works well with the highway espress in
a lan environment double anyway.
As with a vcs - c / e deployment you have the model of the internal and external with vcs
different hosts where he tries to get funding and then depending on who gets the data
for the record. It may be that in any case only get you external IP of the vcs-e.
I would therefore simply deploy a DMZ where the outside and inside can reach the starterpack with
the same address or even external ip using a NAT that is hosted in LAN1 put directly on a public ip address in a dmz...
Maybe you are looking for
-
iCloud library does not download
My phone will not download the photos to the photo library to iCloud. I did all of the normal solutions. Nothing has worked to resolve this issue.
-
Satellite P10 problems with Mat * a DVD ROM
Hello I have a problem with my P10,I bought it for 2 months and 4 months ago myCarpet * a DVD ROM does strange things.When I try to copy a CD for example, it reads the cd source, after I put in those recordable, it starts to burn and suddenly it stop
-
Portege M400 - CD/DVD Drive not accessible, Incorrect function.
Hello We have 1 machine that shows the above error, and strangely enough, it is only to show this error when you try to play the DVD. CD is reading and fine engraving. The H/W is a carpet * a DVD - RAM UJ-8425. The drive is correctly activated and we
-
How to fix the error of the AMD graphics driver in windows 8
H! everyoneI bought a laptop (Dell inspiron 15R-5521) with windows 8 is already installed on here is the error message I get little from time to time. No AMD graphics driver is installed; or the drver AMD does not work properly. Please install the dr
-
Windows 8 How can I go back to Windows 7
I just bought a new laptop with Windows 8. I must say that using windows 8 is the big challenge for me and it's the worst experience since I started using windows in 1995. He is a merciless gesture (from win7 for win8) and a complication very. Please