04-16-2009 12:59 PM - edited 03-15-2019 05:30 PM
CM7 -> GK -> CM4 works fine. CM4 -> GK -> CM7 gets admission reject with a Security Denial. CM7 is new install. Attached is the h225 asn1 debug . thoughts are welcome
04-16-2009 07:44 PM
are you sure you CM7 is registered endpoint on the GK? Do a show gatekeeper endpoint and see if both CUCMs are registered. If not, I'd start there.
04-16-2009 10:08 PM
In the CM7 cluster, make sure that the CM group for the GK trunk contains the UCM server that the GK is trying to register with.
04-20-2009 05:43 AM
The Trunk is registered with the GK. This is only happening inbound towards the CM7 cluster. Calling out from the CM7 cluster works fine. Maybe something with the hub_none location?
04-20-2009 05:45 AM
Could be, but most likely its a CSS/PT issue not hitting what you want. Are the lines built with the correct number for incoming or is there a translation going on somehwere?
04-20-2009 12:05 PM
There is no translation. I am dialing 194554. my zone prefix is 19* I have both 194554 and 4554 as line appearances
Strange, but I can see from the debug h225 asn1 that the the address of the cm7 is all 0's ( ip '00000000'H)
04-20-2009 06:27 AM
Again, did you check the device pool and UCM group settings of the GK trunk against the IP that the gatekeeper is using to register? If this is wrong the trunk will still register but the calls will fail.
04-20-2009 12:23 PM
Please attach your GK configuration, are you using multiple zones for your routing or relying on tech-prefix?
Also, please provide "debug gatek main 10" for one of the failed calls.
HTH,
Chris
04-20-2009 12:33 PM
04-20-2009 01:11 PM
CM does not register its endpoints with GK, so prefix routing is not going to work for you. It's going the other way most likely becuase the other CM cluster is registered with the default tech prefix. You have 2 options here:
1. Use different tech-prefix for each CM and include the tech-prefix in your dialing (you can silently prefix it at the route list, route pattern, etc)
2. Use alias command and appropriate parameter changes on CM side to route the calls.
I would stronly recommand first option as it will be maintenance free, keep in mind that GK will not strip off the tech-prefix so on the inboudn side in CM from GK you will need to strip it off via either translation pattern or proper sigDigits config.
HTH,
Chris
04-20-2009 01:14 PM
this config is working nicely for all my cm4 clusters. I have 16 registrations, which are cm4 pub and sub's from other clusters. cm7 is registered with its sub and backup also.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide