10-13-2010 06:28 PM - edited 03-16-2019 01:20 AM
I ran into an issue where 7961 and 7941 phones are unable to register to ccme router 2811, looks like a .tlv file that begins with CTLSEP is missing at the cme router.
Tried to factory reset the phone, installed various IOS images on the 2811 but still not working
If any one has dealt with this issue previously, please let me know how you fixed it. Thanks
Solved! Go to Solution.
10-14-2010 12:33 AM
Hi
Don't worry about the CTLSEP file; it's basically the phone trying to download a certificate trust list in case the CME/CUCM it is trying to register to is configured in 'secure' mode:
Secure and Nonsecure Configuration
The Cisco IP Phone 7960 and 7940 platform supports configuration-file authentication, certificate installation, and device authentication with the call control unit. By default, the phone is nonsecure until the phone detects that it needs to take additional steps to configure itself in secure mode. The initial step in this determination is through a CTLSEP MAC file request upon bootup (for example, CTLSEP003094C25D2E.tlv). The CTLSEP MAC file is a certificate trust list, which if populated, contains information about the servers to which the phone is attempting to connect and whether the server connection will be secure or nonsecure.
The CTLSEP MAC file is the first file requested in the universal application loader, followed by the additional six configuration files in the hunt algorithm defined in the "Universal Application Loader" section. If the CTLSEP MAC file is present, the phone proceeds with additional security actions regarding phone and server communication; if the CTLSEP MAC file is not present or is empty, the phone proceeds in nonsecure mode with the hunt algorithm.
Perhaps post up your CME config.
Have you configured 'create cnf-files' under telephone-service?
Are you debugging TFTP from the router, or from the phone status messages screen?
Aaron
10-15-2010 10:05 PM
get into config t
Unter telephony service replace that ip address with the loopback address.
ip source-address
exit
Create cnf-files
reset your ephone
and see if it registers.
If this helps, please rate.
thanks.
10-14-2010 12:33 AM
Hi
Don't worry about the CTLSEP file; it's basically the phone trying to download a certificate trust list in case the CME/CUCM it is trying to register to is configured in 'secure' mode:
Secure and Nonsecure Configuration
The Cisco IP Phone 7960 and 7940 platform supports configuration-file authentication, certificate installation, and device authentication with the call control unit. By default, the phone is nonsecure until the phone detects that it needs to take additional steps to configure itself in secure mode. The initial step in this determination is through a CTLSEP MAC file request upon bootup (for example, CTLSEP003094C25D2E.tlv). The CTLSEP MAC file is a certificate trust list, which if populated, contains information about the servers to which the phone is attempting to connect and whether the server connection will be secure or nonsecure.
The CTLSEP MAC file is the first file requested in the universal application loader, followed by the additional six configuration files in the hunt algorithm defined in the "Universal Application Loader" section. If the CTLSEP MAC file is present, the phone proceeds with additional security actions regarding phone and server communication; if the CTLSEP MAC file is not present or is empty, the phone proceeds in nonsecure mode with the hunt algorithm.
Perhaps post up your CME config.
Have you configured 'create cnf-files' under telephone-service?
Are you debugging TFTP from the router, or from the phone status messages screen?
Aaron
10-15-2010 07:19 PM
Hey
Problem is still there, right now there are two phones 7960 and 7961, 7960 is fine, only 7961, if I remember correctly, 7941 also had this issue.
Yes, ‘create cnf-files’ has been configured under telephony-service. The debug tftp event output may indicate that CTLSEP….tlv could be the issue.
*Oct 16 02:09:17.425: TFTP: Looking for CTLSEP000AB830C3A6.tlv
*Oct 16 02:09:17.545: TFTP: Looking for SEP000AB8A8C3A6.cnf.xml
*Oct 16 02:09:17.549: TFTP: Opened flash:/its/vrf1/SEP000AB830C3A6.cnf.xml, fd 7, size 1278 for process 232
*Oct 16 02:09:17.557: TFTP: Finished flash:/its/vrf1/SEP000AB830C3A6.cnf.xml, time 00:00:00 for process 232
Phone status message also has similar messages
1:01:14a File Not Found : CTLFile.tlv
1:01:14a No CTL installed
1:01:14a SEP000AB830C3A6.cnf.xml
1:04:08a File Not Found : CTLFile.tlv
1:04:09a No CTL installed
1:04:09a SEP000AB830C3A6.cnf.xml
br2-rtr#show ephone
ephone-1[0] Mac:0007.8551.EC18 TCP socket:[1] activeLine:0 REGISTERED in SCCP ver 11/9
mediaActive:0 offhook:0 ringing:0 reset:0 reset_sent:0 paging 0 debug:0 caps:8
IP:10.10.202.55 50570 Telecaster 7960 keepalive 43 max_line 6 available_line 6
button 1: dn 1 number 3001 CH1 IDLE
Preferred Codec: g711ulaw
ephone-2[1] Mac:000A.B830.C3A6 TCP socket:[-1] activeLine:0 UNREGISTERED
mediaActive:0 offhook:0 ringing:0 reset:0 reset_sent:0 paging 0 debug:0 caps:0
IP:0.0.0.0 0 Unknown 0 keepalive 0 max_line 0 available_line 0
Preferred Codec: g711ulaw
br2-rtr#show ephone registered
ephone-1[0] Mac:0007.8551.EC18 TCP socket:[1] activeLine:0 REGISTERED in SCCP ver 11/9
mediaActive:0 offhook:0 ringing:0 reset:0 reset_sent:0 paging 0 debug:0 caps:8
IP:10.10.202.55 50570 Telecaster 7960 keepalive 43 max_line 6 available_line 6
button 1: dn 1 number 3001 CH1 IDLE
Preferred Codec: g711ulaw
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname br2-rtr
!
boot-start-marker
boot system flash flash:c2800nm-adventerprisek9-mz.124-22.T4.bin
boot-end-marker
!
card type t1 0 0
card type e1 0 1
logging message-counter syslog
!
no aaa new-model
clock timezone CET 1
clock summer-time CET recurring
no network-clock-participate wic 0
network-clock-participate wic 1
!
dot11 syslog
ip source-route
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.202.1 10.10.202.49
ip dhcp excluded-address 10.10.202.70 10.10.202.254
!
ip dhcp pool CME
network 10.10.202.0 255.255.255.0
option 150 ip 10.10.110.3
default-router 10.10.202.1
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
voice-card 0
!
!
!
!
!
vtp mode client
archive
log config
hidekeys
! controller T1 0/0/0
cablelength long 0db
channel-group 0 timeslots 1-24
!
controller T1 0/0/1
cablelength long 0db
!
controller E1 0/1/0
!
!
!
!
!
interface Loopback0
ip address 10.10.110.3 255.255.255.255
ip ospf network point-to-point
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/3/0
switchport mode trunk
!
interface FastEthernet0/3/1
!
interface FastEthernet0/3/2
!
interface FastEthernet0/3/3
!
interface Serial0/0/0:0
no ip address
encapsulation frame-relay IETF
no fair-queue
frame-relay lmi-type ansi
!
interface Serial0/0/0:0.1 point-to-point
ip address 10.10.112.2 255.255.255.0
ip ospf mtu-ignore
snmp trap link-status
frame-relay interface-dlci 102
!
interface Service-Engine1/0
no ip address
shutdown
!
interface Vlan1
no ip address
!
interface Vlan200
ip address 10.10.102.1 255.255.255.0
!
interface Vlan400
ip address 10.10.202.1 255.255.255.0
!
router ospf 1
router-id 10.10.202.1
log-adjacency-changes
network 10.10.0.0 0.0.255.255 area 0
!
ip forward-protocol nd
ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
tftp-server flash:P00308000900.bin alias P00308000900.bin
tftp-server flash:P00308000900.loads alias P00308000900.loads
tftp-server flash:P00308000900.sb2 alias P00308000900.sb2
tftp-server flash:P00308000900.sbn alias P00308000900.sbn
tftp-server flash:apps41.8-3-2-27.sbn alias apps41.8-3-2-27.sbn
tftp-server flash:cnu41.8-3-2-27.sbn alias cnu41.8-3-2-27.sbn
tftp-server flash:cvm41sccp.8-3-2-27.sbn alias cvm41sccp.8-3-2-27.sbn
tftp-server flash:dsp41.8-3-2-27.sbn alias dsp41.8-3-2-27.sbn
tftp-server flash:jar41sccp.8-3-2-27.sbn alias jar41sccp.8-3-2-27.sbn
tftp-server flash:SCCP41.8-3-3S.loads alias SCCP41.8-3-3S.loads
tftp-server flash:term41.default.loads alias term41.default.loads
tftp-server flash:term61.default.loads alias term61.default.loads
tftp-server flash:MK-SCCP.JAR alias English_United_States/mk-sccp.jar
tftp-server flash:G3-TONES.XML alias United_States/g3-tones.xml
!
control-plane
!
!
!
ccm-manager fax protocol cisco
!
!
!
!
!
gateway
timer receive-rtp 1200
!
sip-ua
!
!
!
telephony-service
no auto-reg-ephone
max-ephones 3
max-dn 3
ip source-address 10.10.100.3 port 2000
system message BR2 CME
cnf-file location flash:
cnf-file perphone
load 7960-7940 P00308000900
load 7961 SCCP41.8-3-3S
date-format dd-mm-yy
max-conferences 8 gain -6
transfer-system full-consult
create cnf-files version-stamp 7960 Oct 15 2010 06:55:06
!
!
ephone-dn 1
number 3001
description 3214-3001
!
!
ephone-dn 2
number 3002
description 3214-3002
!
!
ephone-dn 3
number 3003
description 3214-3003
!
!
ephone 1
device-security-mode none
mac-address 0007.8551.EC18
max-calls-per-button 5
busy-trigger-per-button 3
type 7960
button 1:1
ephone 2
device-security-mode none
mac-address 000A.B830.C3A6
max-calls-per-button 5
busy-trigger-per-button 3
type 7961
button 1:2
!
!
!
line con 0
line aux 0
line 66
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
line vty 0 4
privilege level 15
password cisco
login
transport input all
line vty 5 15
privilege level 15
password cisco
login
!
scheduler allocate 20000 1000
ntp source Vlan400
ntp server 10.10.100.2
end
10-15-2010 07:32 PM
Searched for other postings, this post has a similar issue. https://supportforums.cisco.com/message/337619#337619. my temporary work around is to use this 7961 to register to call manager and use another 7960 phone for br2. But I really want to find an answer. Thanks.
10-15-2010 10:05 PM
get into config t
Unter telephony service replace that ip address with the loopback address.
ip source-address
exit
Create cnf-files
reset your ephone
and see if it registers.
If this helps, please rate.
thanks.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide