VG224 Rogue MAC address created in CCM

jerake · ‎10-20-2005

I'm running one VG224 - 12.3(14)T2 - with CCM 4.1.3 via SCCP. Everything is working great except...

One night this week I had to restart the VG224; some ports were showing Out of Service (OOS) under the sh stcapp device summary command, and users of those ports were reporting getting nothing but reorder when they picked up the handset. I reset the ports in CCM first, and that seemed to fix the issue, but it started happening again, so I bounced the VG224. All seemed fine, the OOS didn't happen again.

Then, I took a look at the CCM Event Logs...I keep getting a transient connection attempt for a device with the MAC/device name of AN0C863A06B1FFF. Problem is, when I seach on the MAC/device name in the CCMAdmin pages, it returns 0 results. However, when I go and take a peek at the Device table in the database (on any of my CCM's, pub or subs), it shows a device/MAC of AN0C863A06B1FFF!

The errors on the CCM started happening when I rebooted the VG224, so the rogue MAC had to be created at that time. How this happened I'm not even sure, but does anyone have any idea how to get rid of this? If push comes to shove, I'm going to pull the VG224 out of CCM, see if that fixes it...anyone else have any ideas?

kthorngr · ‎10-24-2005

A MAC address ending in "FFF" (AN0C863A06B1FFF) is a virtual endpoint that is used for auto download of the CCM config to the GW. The GW will register the end point with CCM. CCM uses this connection to signal the GW when a Reset is performed or when the CCM wants to download the config to the GW.

Make sure you have the following three commands in the VG224:

ccm-manager config server 10.1.1.1 (CCM IP address)

ccm-manager sccp local FastEthernet0/1 (sccp interface)

ccm-manager sccp (enable auto-download)

Use the following to see the status for the config download:

sh ccm-manager config-download

The following debug might help determine why you are getting many transient connections with this endpoint:

debug ccm-manager config-download all

Go ahead and post these along with your sanatized config.

Kevin

jerake · ‎10-24-2005

Thanks so much for your response.

Here's the results of the sh ccm-manager config-download; so, I'm noticing that the endpoint downloads are successful, but that the gateway isn't registered to a CCM (there's no place for the gateway to register in CCM, unless I totally missed something):

Configuration Auto-Download Information

=======================================

No configurations downloaded

Current state: Downloading XML file

Configuration Download statistics:

Download Attempted : 1

Download Successful : 0

Download Failed : 0

Configuration Attempted : 0

Configuration Successful : 0

Configuration Failed(Parsing): 0

Configuration Failed(config) : 0

Last config download command:

SCCP auto-configuration status

===============================================================

Registered with Call Manager: No

Local interface: FastEthernet0/0 (000c.863a.06b1)

Current version-id: {3B667E21-2F90-4420-B532-2DBF232D3307}

Current config applied at: 22:02:22 CDT/CST Oct 20 2005

Gateway downloads succeeded: 1

Gateway download attempts: 2

Last gateway download attempt: 22:02:21 CDT/CST Oct 20 2005

Last successful gateway download: 22:02:22 CDT/CST Oct 20 2005

Current TFTP server: 192.168.234.4

Gateway resets: 0

Gateway restarts: 0

Managed endpoints: 24

Endpoint downloads succeeded: 24

Endpoint download attempts: 24

Last endpoint download attempt: 22:02:23 CDT/CST Oct 20 2005

Last successful endpoint download: 22:02:23 CDT/CST Oct 20 2005

Endpoint resets: 0

Endpoint restarts: 0

____

And here's what is configured for ccm-manager, per my sanitized config (I'm not showing all the port/dial peer configurations, but I have all 24 ports and all dial-peers configured the exact same way):

Current configuration : 8586 bytes

!

! Last configuration change at 13:35:40 CDT/CST Mon Oct 24 2005

! NVRAM config last updated at 01:02:48 CDT/CST Fri Oct 21 2005

!

version 12.3

service config

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname VGC-D-MDF-1

!

boot-start-marker

boot-end-marker

!

enable secret XXXXX

enable password XXXXX

!

no aaa new-model

!

resource policy

!

clock timezone CDT/CST -5

ip subnet-zero

no ip dhcp use vrf connected

!

no ftp-server write-enable

!

stcapp ccm-group 1

stcapp

!

voice-card 0

!

interface FastEthernet0/0

ip address 192.168.14.18 255.255.255.0

ip helper-address 192.168.234.10

duplex auto

speed auto

no cdp enable

!

interface FastEthernet0/1

no ip address

shutdown

duplex auto

speed auto

no cdp enable

!

ip default-gateway 192.168.14.1

ip classless

ip route 0.0.0.0 0.0.0.0 192.168.14.1

!

ip http server

!

no cdp run

!

control-plane

!

voice-port 2/0

idle-voltage high

timeouts initial 60

timeouts interdigit 60

caller-id enable

!

voice-port 2/1

idle-voltage high

timeouts initial 60

timeouts interdigit 60

caller-id enable

!

ccm-manager config server 192.168.234.4

ccm-manager config

ccm-manager config dialpeer-prefix 847

ccm-manager sccp local FastEthernet0/0

ccm-manager sccp

!

sccp local FastEthernet0/0

sccp ccm 192.168.234.4 identifier 3

sccp ccm 192.168.134.18 identifier 2

sccp ccm 192.168.12.18 identifier 1

sccp

!

sccp ccm group 1

description DIST CCM GROUP

associate ccm 3 priority 3

associate ccm 2 priority 2

associate ccm 1 priority 1

switchover method immediate

switchback method immediate

!

dial-peer voice 3070 voip

service stcapp

destination-pattern 3070

session target ipv4:192.168.12.18

!

dial-peer voice 84720 pots

service stcapp

service session out-bound

port 2/0

!

----

jerake · ‎10-24-2005

I think this may be fixed...there's this:

ccm-manager sccp local FastEthernet0/0

Which I already had configured, but that made me remember this:

sccp local FastEthernet0/0

I shut down the sccp service (no sccp), issued the above command, then added the sccp service. The errors stopped immediately. So, looks like you have to bind it twice, once to the ccm-manager sccp, and then again to just sccp.

I'd love to know how this happened in the first place, but oh well.

jerake · ‎10-27-2005

Just an update to this:

Every time I rebooted the VG224, even after resetting the sccp local FastEthernet0/0, the errors would appear for MAC AN0C863A06B1FFF. I had to do a no sccp/sccp in order to get the errors to stop after every reboot.

When I first set up this VG224, being a complete novice to IOS, I set this up running SCCP by the seat of my pants, so I was unaware that the ccm-manager commands I had in place were telling the VG224 to autodownload from the CCM.

Once I took out the ccm-manager commands and set up SCCP manually (see http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00804202c9.html) the errors stopped completely, no matter how many times I rebooted the VG224. Just wanted to post an update in case anyone else runs into this.

TMH