Need to simulate WAN failure to test SRST

Unanswered Question
Jan 29th, 2008
User Badges:

I have a centralized CCM deployment with a pub and sub.


In a remote office, it is not possible for me to take down the WAN to test SRST. What is the simplist way to do this?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (2 ratings)
Loading.
dezoconnor Tue, 01/29/2008 - 06:40
User Badges:
  • Silver, 250 points or more

You could stop the CCM service on your Pub and Sub but this would affect all your telephony users across all your sites.


Best way is to have your local IT at the remote sites just simply disconnect the WAN link. You're going to need someone on site to make test calls anyway!

hauchinango Tue, 01/29/2008 - 06:48
User Badges:

I am at the remote site. I cannot bring down the WAN link, but I may bring down the voice in order to test SRST. I cannot stop the ccm service becasue this will affect all locations.


I am just looking for an easy way to simulate WAN failure at the far end.

chris.mann Tue, 01/29/2008 - 06:49
User Badges:

Depending on your WAN design, you could maybe just break the IP Routing between the voice vlan at the site, and your call managers. That would leave your data traffic up, and not interrupt your users there, but the phones would be forced to fail over to srst.

Jon Nelson Tue, 01/29/2008 - 09:22
User Badges:
  • Silver, 250 points or more


Create an ACL on the remote router that blocks traffic coming from the PUB/SUB. This way it only affects voice traffic. Make sure you keep an allow for other traffic as you don't want to lock yourself out completely!


HTH


Thank you,

Jon Nelson

mattcalderon Tue, 01/29/2008 - 11:34
User Badges:
  • Silver, 250 points or more

Just to add on to the good info from Jon, you can simulate SRST for one phone only by using an extended ACL and block traffic from the pub/sub to the ip of the phone itself.


Matt

pcameron Tue, 01/29/2008 - 13:45
User Badges:
  • Cisco Employee,

There is an even simpler method ... On the actual WAN router, use an host ip route for the CCM IP address and send it to null0.


ip route 10.1.1.1 255.255.255.255 null0

ip route 10.1.1.2 255.255.255.255 null0


Any traffic for the Pub/Sub will be sent to the router's bit bucket, so the all traffic to the CCM is blocked, and the devices loose keepalive responses.


All other services on the router remain unaffected. This allows you get around issues with incorrect access lists blocking all traffic to the router (it happens all the time...)


The only caveat with doing this - be VERY CAREFUL if you are running a routing protocol and you have the command 'redistribute static' - you don't want your entire network's traffic learning about this low cost route and then having all packets for the CCM dropped!

guy.richard Fri, 02/01/2008 - 00:31
User Badges:

What I do is olso affecting routing but I do it to the IP Phone I want to test SRST to.

On the central router or L3 switch I add a route /32 to null0 for one or two Ip Phones I want to prevent seeing the CUCM.

webstd.design Fri, 02/01/2008 - 00:47
User Badges:

stop stop stop bunny :)))



only thing.that you should to do is


access-list 111 deny tcp "you internal network ip range" host CCMIP eq 2000

access-list 111 permit ip any any


so you block SCCP port


and add ip access-group 111 in to you desired interface, thats all. Everything is working

jason-calbert_2 Fri, 02/01/2008 - 12:43
User Badges:
  • Bronze, 100 points or more

If the phone is in the same subnet as the SRST router just change the default gateway on 1 particular phone to point to a fake IP address. This way the phone can't reach callmanager and will unregister. The phone will then try and register with SRST


Using this method you can test just one phone without having to take down all voice at this site.


Just something I use and thought might be helpfull to you


Jason

Actions

This Discussion