FAC UC500

Unanswered Question
Aug 15th, 2009
User Badges:

Hi, I configure the UC500 whit the following commands to enable the Force  Authorizatin Code:


application
service clid_authen_collect
param  uid-len 3
param pin-len 3


aaa new-model
aaa authentication login  h323 local
aaa authorization exec h323 local
aaa authorization network  h323 local
username 452 password 452
username 452 autocommand exit


dial-peer cor custom
name internal
name local
name  international
name international-fac


dial-peer cor list  call-international-fac
member international-fac


dial-peer cor list  user-international-fac
member internal
member local
member  international-fac


dial-peer voice 10 pots
service  clid_authen_collect
tone ringback alert-no-PI
destination-pattern  9[1-9]T
direct-inward-dial
corlist incoming call-international-fac 
corrlist outgoing call-international-fac


ephone-dn 20 dual-line 
corlist incoming user-international-fac


dir flash: 
enter_account.au
enter_pin.au


But the call is established  whitout enter the username and password. The call is established without  problem. but the prompt is not heard. What is the error o missing in the  configuration?
:(
Thanks





Source: https://www.myciscocommunity.com/docs/DOC-1400;jsessionid=E5DC5DD8503D5F829C71F08FFF02C2B8

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
ThomasBond_2 Sun, 08/16/2009 - 10:59
User Badges:

Hi Marcos,


But the application dont trigger with POTs dial peer ? I need enable FAC to international call (PSTN).


(Yo necesito habilitar FAC para las llamadas hacia la red publica PSTN, ¿Se puede activar FAC para dial-peers tipo POTS?)


Thanks

Gracias

Marcos Hernandez Sun, 08/16/2009 - 14:44
User Badges:
  • Blue, 1500 points or more

To trigger the application, it is necessary to use a H.323 loopbacck dial peer. Your POTS will be used for routing still, but you need the VOIP peer.


El uso del dial peer voip es obligatorio. Lo necesitas para que se active el script que luego te presenta la voz prepragabada y que controla todo el tema de accounting. Esta explicado en el ejemplo que te mande.


Saludos,


Marcos

ThomasBond_2 Sun, 08/16/2009 - 15:23
User Badges:

Ok, de acuerdo Marcos.

Pero mi necesidad es habilitar FAC especificamente en el DP siguiente:


dial-peer voice 10 pots
service  clid_authen_collect
tone ringback alert-no-PI
destination-pattern  9[1-9]T
direct-inward-dial
corlist incoming call-international-fac 
corrlist outgoing call-international-fac


En este escenario como lo hago ??

Muchas Gracias

Marcos Hernandez Sun, 08/16/2009 - 15:27
User Badges:
  • Blue, 1500 points or more

Quita el comando "service" de tu DP POTS y anade "preference 5". Luego, anade este DP:


dial-peer voice 5500 voip<br/> description International Calls<br/> service clid_authen_collect<br/> destination-pattern 9[1-9]T<br/> session target ipv4:10.1.1.1<br/> incoming called-number 9[1-9]T
dtmf-relay h245-alphanumeric<br/> codec g711ulaw<br/> no vad<br/>

e intenta la llamada internacional desde un telefono IP.


Saludos,


Marcos

ThomasBond_2 Sun, 08/16/2009 - 15:37
User Badges:

Entonces quedaria la siguiente configuracion:

dial-peer voice 10 pots
tone ringback alert-no-PI
destination-pattern  9[1-9]T
direct-inward-dial
corlist incoming call-international-fac
corrlist outgoing call-international-fac
preference 5

dial-peer voice 5500 voip
description International Calls
service clid_authen_collect
destination-pattern 9[1-9]T
session target ipv4:10.1.1.1
incoming called-number 9[1-9]T
dtmf-relay h245-alphanumeric
codec g711ulaw
no vad

(La ip del session target deberia ser la IP del CCME?)

FAC es mucho mas simple el Call Manager Exterprise



ThomasBond_2 Wed, 08/19/2009 - 22:58
User Badges:

Hola Marcos,


He implemetado FAC, personalize el promt que solicita username y password, la autenticacion es correcta de la misma manera el establecimiento de la llamada. El problemas es que el prompt o la autenticacion es presentada al usuario de manera aleatoria, esto quiere decir que por ejemplo el usuario A marca a un numero X la autenticacion es satisfactorio y la llamada tambien, luego de unos instantes el mismo usuairo nuevamente llama al numero X y la autenticacion no es presentada (nose ingresa username) y la llamada es establecia sin autenticacion.


Esto es normal ?

Desde ya gracias !!

Saludos




Marcos Hernandez Thu, 08/20/2009 - 05:39
User Badges:
  • Blue, 1500 points or more

No, esto no es normal. Lo que esta pasando aqui es que el dial peer que invoca la aplicacion (VOIP) no esta siendo seleccionado el 100% del tiempo. Debes tener un problema de preferencia. Asegurate que otros dial peers con el mismo destination pattern tengan el comando "preference 5" por ejemplo, mientras que tu dial peer de la aplicacion debe tener "preference 0" (que es el default y por lo tanto invisible).


Saludos,


Marcos


The problem is that the caller is being presented with the authentication prompt only 50% of the time. This is likely due to an incorrect preference setting between dial peers with the same destination pattern. The loopback dial-peer (the one that invokes the application) should have the lowest preference (preference 0) while others should be set with a higher preference (which in reality means selection order).

ThomasBond_2 Fri, 08/21/2009 - 08:50
User Badges:

Ok, Gracias Marcos por tu apollo.


Mira esta es mi configuracion actual:


application
  service clid_authen_collect
  param uid-len 4
  param pin-len 4


username 8914 password 6732
username 8914 autocommand exit


dial-peer cor custom
name internal
name local
name international
name international-fac


dial-peer cor list call-international-fac
member international-fac


dial-peer cor list user-international-fac
member international-fac


dial-peer voice 10 pots
tone ringback alert-no-PI
destination-pattern 9[2-9].....
direct-inward-dial
port 0/0/0:15


dial-peer voice 11 pots
tone ringback alert-no-PI
destination-pattern 9156[1-9]T
direct-inward-dial
port 0/0/0:15


dial-peer voice 12 pots
trunkgroup Outgoing
tone ringback alert-no-PI
destination-pattern 909[6-9].......
direct-inward-dial


dial-peer voice 15 pots
tone ringback alert-no-PI
destination-pattern 91560T
direct-inward-dial
port 0/0/0:15


dial-peer voice 711 voip
corlist incoming call-international-fac
corlist outgoing call-international-fac
service clid_authen_collect
destination-pattern 9156[1-9]T
session target ipv4:192.168.78.1
incoming called-number 9156[1-9]T

preference 5
dtmf-relay h245-alphanumeric
codec g711ulaw
no vad


dial-peer voice 715 voip
corlist incoming call-international-fac
corlist outgoing call-international-fac
description Llamados LDI
service clid_authen_collect
destination-pattern 91560T
session target ipv4:192.168.78.1
incoming called-number 91560T

preference 5
dtmf-relay h245-alphanumeric
codec g711ulaw
no vad


dial-peer voice 712 voip
corlist incoming call-international-fac
corlist outgoing call-international-fac
description Celular
service clid_authen_collect
destination-pattern 909[6-9].......
session target ipv4:192.168.78.1
incoming called-number 909[6-9].......

preference 5

dtmf-relay h245-alphanumeric
codec g711ulaw
no vad


ephone-dn  28  dual-line
  number 6675
  corlist incoming user-international-fac



ephone-dn  29  dual-line
  number 6676
  corlist incoming user-international-fac



Si bien las preferencias correspondientes estan aplicadas, aun sigue el sintoma. Alguna Sugerencia?


Gracias !.

Marcos Hernandez Fri, 08/21/2009 - 09:00
User Badges:
  • Blue, 1500 points or more

Los tienes al reves. El dial-peer voip, tal y como te dije en mi post anterior, debe tener preferencia 0, no 5. Otra cosa, estos foros son para UC500 exclusivamente y no ISR/CME que es lo que estas usando. Para soporte tecnico del ISR/CME, puedes usar Netpro o abrir un caso con el TAC.


Un saludo,


Marcos


I have recommended the customer to contact Netpro or TAC. These forums are not for ISR/CME support.

Imthiyas Khan K I Thu, 08/26/2010 - 01:04
User Badges:
  • Bronze, 100 points or more

Hi Marcos,


I have a similar configuration for UC520, but call is going out without FAC


!

application
  service clid_authen_collect
  param uid-len 3
  param pin-len 3

!

!

dial-peer cor custom
name International
name National
name National_Restricted
name Manager
!
dial-peer cor list International
member International
!
dial-peer cor list National
member National
!
dial-peer cor list Manager
member International
member National
!
dial-peer cor list NationalRestricted
member National_Restricted
!

!
dial-peer voice 801 voip
description International Calls Authentic
preference 1
service clid_authen_collect
destination-pattern 900.T
session target ipv4:10.1.10.1
incoming called-number 900.T
dtmf-relay h245-alphanumeric
codec g711ulaw
no vad
!

!
dial-peer voice 80 pots
corlist outgoing International
description **International**
translation-profile outgoing callingnumber
preference 2
destination-pattern 900.T
port 0/2/0:15
forward-digits all
no sip-register
!

!

ephone-dn  14  dual-line
number 151 no-reg primary
label 151
call-forward busy 132
call-forward noan 132 timeout 20
corlist incoming Manager
!

!

jason.yipngow Thu, 08/26/2010 - 06:33
User Badges:

Under dial-peer voice 801

session-target ipv4 should point to 10.1.1.1 not 10.1.10.1


therefore:


config should be as follows


conf t

dial-peer voice 801

session-target ipv4:10.1.1.1

exit



You will still have a little bit of changing to do after, but that should ensure you get the FAC prompt code.


rgds.

Imthiyas Khan K I Fri, 08/27/2010 - 14:51
User Badges:
  • Bronze, 100 points or more

Thank you Jason,


It's working working now, now am able to get the prompt.


after entering the user name and password, the call is disconnecting without any message.

do i need to do anything more..


regards

Imthiyas


nils_guerrero Thu, 01/23/2014 - 09:03
User Badges:

Buenas tardes Marco, tengo un UC540 he intentado replicar esta config pero nunca logro que se reproduzca los audios para la autenticación y contraseña. Aquí está mi config:



application


service clid_authen_collect

  param max-retries 3

  param passwd-prompt flash:enter_pin.au

  param passwd 54321

  param user-prompt flash:enter_account.au

  param term-digit #

  param abort-digit *

  param uid-len 3

  param max-digits 32

  param pin-len 3



dial-peer cor custom

name internal

name local

name local-plus

name international

name national

name national-plus

name emergency

name toll-free

name international-fac

dial-peer cor list user-international-fac

member internal

member local

member local-plus

member international

member national

member national-plus

member emergency

member toll-free

member international-fac


dial-peer cor list call-international-fac

member international-fac


dial-peer voice 91 pots

trunkgroup ALL_FXO

corlist outgoing call-international

description **CCA*Venezuela*International Calls**

translation-profile outgoing OUTGOING_TRANSLATION_PROFILE

preference 5

destination-pattern 900.T

incoming called-number 900.T

forward-digits all

no sip-register

dial-peer voice 2500 voip

corlist incoming call-international-fac

corlist outgoing call-international-fac

description International Calls

service clid_authen_collect

destination-pattern 900.T

session protocol sipv2

session target ipv4:10.2.1.1

incoming called-number 900.T

voice-class sip outbound-proxy ipv4:10.1.10.1 

dtmf-relay h245-alphanumeric

codec g711ulaw

no vad


ephone  5

device-security-mode none

corlist incoming user-international-fac

mac-address 04C5.A4B0.0955

ephone-template 16

username xxxxx

paging-dn 1

type 7911

button  1:289




Agradecido de antemano,


Saludos

hugosaavedra1 Wed, 02/05/2014 - 05:35
User Badges:

hola Marcos te comento que tengo el problema con UC-560 no puedo hacer uqe me pida el codigo en los dial peer pots queria ver si me podria hechar una mano he seguido los comentarios anteriores pero no esta funcionando


dial-peer voice 58 pots
corlist incoming call-national
corlist outgoing call-national
description **CCA*IDEAY*Llamadas a Fijos**
preference 5
destination-pattern 9.T
port 0/3/0:15
forward-digits 8


dial-peer voice 5500 voip

description NACIONALES

service clid_authen_collet

destination-pattern 9.T

session target ipv4:10.2.2.1

incomming called-numbre 9.T

dtnf-relay h245-alpahnumeric

codec g711ulaw

no vad

felixguzman Tue, 11/06/2012 - 08:06
User Badges:

Que tal Marcos, una pregunta es posible enviar el codigo de cuenta y pin via servidor syslog ???


Veo que via Servidor Radius, si veo el codigo de cuenta y pin, pero en servidor syslog no recibo tal informacion, no veo tal campo que tenga tal informacion, esto lo requiero para cuestiones de ver el consumo de tal clave asignado.


Gracias


Saludos, FGA