07-20-2010 04:55 AM
Hi, could you please help me, I have simple connection
(192.168.159.19 Cisco IP Phone SCCP)->ASA5505----------vpn--------ASA5550<------Router(CME 192.168.107.5)
I have a FW rules in asa5505, and this kind of message, my IP phone can not register to my CME, what this message mean? And how can I fix it?
07-20-2010 05:24 AM
firstly we will need to see if the packets are getting there,
is the vpn tunnel working fine for these subnets
07-20-2010 06:22 AM
Yes, all others connections works fine, I meen from one network to another, such applications like Citrix,ICMP,..an so on, only IPhone can't register
07-20-2010 06:48 AM
can you apply captures on the inside interface of the asa and see if the packets are getting out of the
vpn and whether the cme is responding back,
i dont understand voice technologies a great lot but we with captures we can verify whether the vpn tunnel is th eproblem here or whether it is something el
se
on the asa 5550 apply these captures
access-list capin extended permit ip host 192.168.159.19 host 192.168.107.5
access-list capin extended permit ip host 192.168.107.5 host 192.168.159.19
capture capi interface inside access-list capin
after you initiated some traffic in your case i believe its something to do with registering, you should start capturing traffic and you can view it by
show capture capi
see if you have traffic in both directions or do u see it only in one direction, if you see in one direction it means that there could be some issue with CME
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide