CM7 Gatekeeper Trunk rejects calls

Unanswered Question
Apr 16th, 2009

CM7 -> GK -> CM4 works fine. CM4 -> GK -> CM7 gets admission reject with a Security Denial. CM7 is new install. Attached is the h225 asn1 debug . thoughts are welcome

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Tommer Catlin Thu, 04/16/2009 - 19:44

are you sure you CM7 is registered endpoint on the GK? Do a show gatekeeper endpoint and see if both CUCMs are registered. If not, I'd start there.

balitewiczp Mon, 04/20/2009 - 05:43

The Trunk is registered with the GK. This is only happening inbound towards the CM7 cluster. Calling out from the CM7 cluster works fine. Maybe something with the hub_none location?

Tommer Catlin Mon, 04/20/2009 - 05:45

Could be, but most likely its a CSS/PT issue not hitting what you want. Are the lines built with the correct number for incoming or is there a translation going on somehwere?

balitewiczp Mon, 04/20/2009 - 12:05

There is no translation. I am dialing 194554. my zone prefix is 19* I have both 194554 and 4554 as line appearances

Strange, but I can see from the debug h225 asn1 that the the address of the cm7 is all 0's ( ip '00000000'H)

Chris Deren Mon, 04/20/2009 - 12:23

Please attach your GK configuration, are you using multiple zones for your routing or relying on tech-prefix?

Also, please provide "debug gatek main 10" for one of the failed calls.



balitewiczp Mon, 04/20/2009 - 12:33

Nice debug command, definetly easier to read than the h225 asn1. Attached is the files requested, and it definetly shows where I'm failing. Curious as to your thoughts. thanks

Chris Deren Mon, 04/20/2009 - 13:11

CM does not register its endpoints with GK, so prefix routing is not going to work for you. It's going the other way most likely becuase the other CM cluster is registered with the default tech prefix. You have 2 options here:

1. Use different tech-prefix for each CM and include the tech-prefix in your dialing (you can silently prefix it at the route list, route pattern, etc)

2. Use alias command and appropriate parameter changes on CM side to route the calls.

I would stronly recommand first option as it will be maintenance free, keep in mind that GK will not strip off the tech-prefix so on the inboudn side in CM from GK you will need to strip it off via either translation pattern or proper sigDigits config.



balitewiczp Mon, 04/20/2009 - 13:14

this config is working nicely for all my cm4 clusters. I have 16 registrations, which are cm4 pub and sub's from other clusters. cm7 is registered with its sub and backup also.


This Discussion