UC520 8.6 & Jabber problem

Unanswered Question
Jul 26th, 2012

I'm having problems trying to get Cisco Jabber 8.6.5 registered on our UC520.

I used the CCA to add a new Cisco IOS device and in the Jabber configuration screen, I cannot get past the window requesting for SIP digest authentication info.  I keep getting "invalid credentials".

I am currently connected to voice vlan via wireless. 

When I run a debug tftp events, I get the following -

Jul 26 20:14:04.833: TFTP: Looking for CTLFile.tlv

Jul 26 20:14:04.849: TFTP: Looking for SEP8C5877646102.cnf.xml

Jul 26 20:14:04.849: TFTP: Opened flash:/SEP8C5877646102.cnf.xml, fd 0, size 3419 for process 269

Jul 26 20:14:04.937: TFTP: Finished flash:/SEP8C5877646102.cnf.xml, time 00:00:00 for process 269

Jul 26 20:14:05.001: TFTP: Looking for CUPC/AppDialRules.xml

Jul 26 20:14:05.037: TFTP: Looking for CUPC/DirLookupDialRules.xml

not sure if it helps but

debug voice register events

Jul 26 20:15:07.840: VOICE_REG_POOL: Register request for (217) from (10.1.1.38)

Jul 26 20:15:07.840: auth absent

Jul 26 20:15:07.840: VOICE_REG_POOL: key(154714E70481E4BF) added to nonce table

Jul 26 20:15:12.136: VOICE_REG_POOL: Register request for (217) from (10.1.1.38)

Jul 26 20:15:12.136: auth present

Jul 26 20:15:16.556: VOICE_REG_POOL: Register request for (217) from (10.1.1.38)

Jul 26 20:15:16.556: auth present

Jul 26 20:15:17.388: EVENT: 1 node in nonce tree obsolete

Jul 26 20:15:17.388: VOICE_REG_POOL: deleted key(C4E2344F0481CC53) from nonce table

Jul 26 20:15:18.004: VOICE_REG_POOL: Register request for (217) from (10.1.1.38)

Jul 26 20:15:18.004: auth present

Jul 26 20:15:47.389: EVENT: 1 node in nonce tree obsolete

Jul 26 20:15:47.389: VOICE_REG_POOL: deleted key(5DFE01DE0481DC49) from nonce table

------------------------ here are the configs on my UC520

voice service voip

ip address trusted list

  ipv4 0.0.0.0 0.0.0.0

allow-connections h323 to h323

allow-connections h323 to sip

allow-connections sip to h323

allow-connections sip to sip

sip

  registrar server expires max 600 min 60

  no update-callerid

!

voice class codec 1

codec preference 1 g711ulaw

codec preference 2 g729r8

!

voice register dn  1

number 217

name Test Iphone

no-reg

label 217

!

voice register global

mode cme

source-address 10.1.1.1 port 5060    <====== this originally had my vlan 1 IP address.  I changed this to vlan 100 IP address

max-dn 224

max-pool 56

load 7971 term71.default

authenticate register

authenticate realm domain.com

hold-alert

voicemail 400

tftp-path flash:

create profile sync 0467524178137408

!

voice register pool  1

registration-timer max 720 min 660

id mac 8C58.7764.xxxx

session-transport tcp

type CiscoMobile-iOS

number 1 dn 1

dtmf-relay rtp-nte

username 217 password 217

codec g711ulaw

-----------------------------------------------------------

Can someone shed some light on my issue?   thanks!    

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 0 (0 ratings)
johschaf Thu, 07/26/2012 - 14:33

Hello jyoopro4ia,

Are you using 217 for the username and password? What type of iPhone are you using, and what version of iOS(Apple's not Cisco's)?

Thanks,

-john

jyoopro4ia Fri, 07/27/2012 - 06:36

john,

yes 217 is username & password.  I'm using Iphone 4 and using iOS 5.1.1

jyoopro4ia Tue, 07/31/2012 - 08:18

John,

Yes I did.  I see that Jabber also requires a license to be purchased.  Will not having the license cause the "invalid credentials" error?  What is the product SKU for the license?

Thank you.

johschaf Tue, 07/31/2012 - 12:13

Hello jyoopro4ia,

Jabber doesn't require a license(other than a normal user license). If you are trying to connect over a VPN, then that requires an ASA with a AnyConnect VPN license. You said that you are trying to register your iPhone locally, correct?

Have you tried just deleting and recreating the phone? Can you post a full debug of the TFTP events while the phone is trying to register?

Thanks,

-john

jyoopro4ia Tue, 07/31/2012 - 12:15

correct.  Locally, not over VPN.  I'll post up the debugs shortly.

jyoopro4ia Tue, 07/31/2012 - 12:35

John,

voice register global

      source-address 10.1.1.1 port 5060  

Should the above IP address be voice vlan IP of phone system or data vlan IP?  just wanted to confirm it should be voice vlan IP.

I am getting this debug info (show debug tftp events)

Jul 31 19:35:02.375: TFTP: Looking for CTLFile.tlv

Jul 31 19:35:02.403: TFTP: Looking for SEP8C5877646102.cnf.xml

Jul 31 19:35:02.603: TFTP: Looking for CUPC/AppDialRules.xml

Jul 31 19:35:02.627: TFTP: Looking for CUPC/DirLookupDialRules.xml

and getting Unable to verify account information on the Jabber client.

johschaf Tue, 07/31/2012 - 12:58

Hello jyoopro4ia,

The voice register global source-address is correct, it is the UC's IP on the voice vlan.

As for the debugs:

Jul 31 19:35:02.375: TFTP: Looking for CTLFile.tlv

Jul 31 19:35:02.403: TFTP: Looking for SEP8C5877646102.cnf.xml

Jul 31 19:35:02.603: TFTP: Looking for CUPC/AppDialRules.xml

Jul 31 19:35:02.627: TFTP: Looking for CUPC/DirLookupDialRules.xml

I wouldn't worry about the CTLFile or CUPC files, those show up in my TFTP debug but they are not on the flash. However, SEP8C5877646102.cnf.xml does matter. Does the TFTP events show that file being opened?

Also, can you post the following:

voice register global

voice register DN

voice register pool

Thanks,

-john

jyoopro4ia Tue, 07/31/2012 - 13:00

John,

Those 4 lines are the only things I see during debug of tftp events.  Nothing more.  I don't see that file being opened at all.

Please see my original post for the voice register global, register dn and register pool.

johschaf Tue, 07/31/2012 - 13:04

Hello jyoopro4ia,

Hhhhmmm, under telephony-service what is the location of the CNF files? System or flash? If flash, do you see the cnf.xml file in the flash? If not, do a "no create cnf"  and then a "create cnf" and check again.

Thanks,

-john

johschaf Tue, 07/31/2012 - 13:07

Hello jyoopro4ia,

Also, under the voice register global configuration, can you remove the following: "authenticate realm domain.com"

Thanks,

-john

jyoopro4ia Tue, 07/31/2012 - 13:31

John,

It looks like I'm getting further... I checked telephony services and I did not see the following lines in the config -

(the system dates back when UC520 was first released)

cnf-file location: flash:

I added the above line.

Also, I removed "authenticate realm domain.com" from voice register global as well.  I recreated cnf and voice register profile.  When I tried initially to register Jabber, the debugs looked good and showed the phone registered, however it was not able to create a dial-peer due to memory issues (my other discussion that you were assisting me with - https://supportforums.cisco.com/message/3693878#3693878).  Too bad I didn't get to copy this debug output. 

Register attempts after the first one looks only like this -

Jul 31 20:29:32.967: TFTP: Looking for CTLFile.tlv

Jul 31 20:29:32.995: TFTP: Looking for SEP8C5877646102.cnf.xml

Jul 31 20:29:32.995: TFTP: Opened flash:/SEP8C5877646102.cnf.xml, fd 0, size 3416 for process 269

Jul 31 20:29:33.059: TFTP: Finished flash:/SEP8C5877646102.cnf.xml, time 00:00:00 for process 269

Jul 31 20:29:33.119: TFTP: Looking for CUPC/AppDialRules.xml

Jul 31 20:29:33.151: TFTP: Looking for CUPC/DirLookupDialRules.xml

Although I am still unsuccessful in getting Iphone Jabber registered, I feel like I'm a step closer to resolution.

johschaf Tue, 07/31/2012 - 13:39

Hello jyoopro4ia,

Did the jabber phone register at one point? You said: "When I tried initially to register Jabber, the debugs looked good and showed the phone registered"

Are you still getting the invalid credentials error? If so, can you create a username/password with at least 6 digits, since that is what worked for me in the lab.

Thanks,

-john

jyoopro4ia Tue, 07/31/2012 - 14:01

yes it looked like it was trying to register on my first attempt after making the config changes but I cannot replicate it anymore.  I changed the username & pw to 6 chars (123456 / 123456) and am still getting invalid credentials error.

here is the debug output

Jul 31 21:00:22.154: TFTP: Looking for CTLFile.tlv

Jul 31 21:00:22.182: TFTP: Looking for SEP8C5877646102.cnf.xml

Jul 31 21:00:22.182: TFTP: Opened flash:/SEP8C5877646102.cnf.xml, fd 0, size 3425 for process 269

Jul 31 21:00:22.250: TFTP: Finished flash:/SEP8C5877646102.cnf.xml, time 00:00:00 for process 269

Jul 31 21:00:22.310: TFTP: Looking for CUPC/AppDialRules.xml

Jul 31 21:00:22.350: TFTP: Looking for CUPC/DirLookupDialRules.xml

johschaf Tue, 07/31/2012 - 17:03

Hello jyoopro4ia,

I'd like to confirm a few settings.

1. Internet Calling

  •      Device ID is SEP plus the wireless MAC of the iPhone. You can locate the wireless MAC of the iPhone under General -> About -> Wi-Fi Address
  • TFTP Server is 10.1.1.1
  • Use Authentication is on
  • Username is 123456 and the password is 123456

2. Voicemail

  • Username is 123456
  • Password is 123456
  • Server is 10.1.10.1
  • No port is defined

Thanks,

-john

jyoopro4ia Wed, 08/01/2012 - 08:01

John,

1. Internet Calling

  • Device ID is SEP plus the wireless MAC of the iPhone. You can locate the wireless MAC of the iPhone under General -> About -> Wi-Fi Address
  • TFTP Server is 10.1.1.1
  • Use Authentication is on
  • Username is 123456 and the password is 123456

Do you want to confirm the above settings for my Jabber client?  That's exactly how it's setup currently.

2. Voicemail

  • Username is 123456
  • Password is 123456
  • Server is 10.1.10.1
  • No port is defined

Are you saying I should be able to log into CUE gui at 10.1.10.1 using 123456 / 123456? 

johschaf Wed, 08/01/2012 - 12:16

Hello jyoopro4ia,

I would like for you to just confirm those settings.

I would like for you to run an additional debug when you are trying to register the Jabber client:

debug ccsip messages

Please post or attach that debug out here. This should also us to see the SIP registration and why the UC is not accepting it.

Thanks,

-john

johschaf Wed, 08/01/2012 - 14:01

Hello jyoorpro4ia,

Thanks for providing that debug.

Comparing this to my lab debug, I do see the registration in both cases initially rejected. Then the 2nd registration in my lab works, but fails in your debug with the following error:

Aug  1 19:49:46.752: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:

Sent:

SIP/2.0 500 Internal Server Error

Via: SIP/2.0/TCP 10.1.1.40:56312;branch=z9hG4bK41b6d8ba

From: ;tag=00000000000000090da87b66-303d6c8b

To: ;tag=4BE19CA8-1E96

Date: Wed, 01 Aug 2012 19:49:46 GMT

Call-ID: 00000000-00000004-04395e26-525412f4@10.1.1.40

Server: Cisco-SIPGateway/IOS-12.x

CSeq: 106 REGISTER

Content-Length: 0

Is there anymore configuration under the voice service voip than what was listed above? If I recall correctly, did we remove the bind statements for the MWI issue? If so, I think we need to add those back in for Jabber.

Thanks,

-john

jyoopro4ia Wed, 08/01/2012 - 14:04

This is what I have currently -

voice service voip

ip address trusted list

  ipv4 0.0.0.0 0.0.0.0

allow-connections h323 to h323

allow-connections h323 to sip

allow-connections sip to h323

allow-connections sip to sip

sip

  registrar server expires max 600 min 60

  no update-callerid

I removed the bind statements to get my MWI working again.  Does Jabber require these bind statements?  I believe CCA added the bind statements in when I added a Jabber client.

johschaf Wed, 08/01/2012 - 14:19

Hello jyoopro4ia,

Yes, it does seem like Jabber requires those bind statements. Please add the following back to the configuration:

voice service voip

sip

  bind control source-interface Vlan100

  bind media source-interface Vlan100

We might have to change the CUE MWI notification to unsolicited to resolve the MWI issue. Please see your other post regarding MWI for the unsolicted configuraiton.

Thanks,

-john

Actions

Login or Register to take actions

This Discussion

Posted July 26, 2012 at 1:18 PM
Stats:
Replies:21 Avg. Rating:
Views:1757 Votes:0
Shares:0
Tags: sip, uc520, jabber
+

Related Content

Discussions Leaderboard