SRST MGCP don't see PRI

[webstd.design]

when phones registers with SRST on gateway , appear dial-peers like 1001$,1002$,1003$ . Phones can call internal numbers, but they don't see PRI

Here is the dial-peer:

dial-peer voice 4 pots

tone ringback alert-no-PI

destination-pattern [234].....

no digit-strip

direct-inward-dial

port 0/0/0:15

[pcameron]

this rule would only work for first 10 numbers 422860 - 422869, so you might to add other sub rules under voice translation-rule 111 , for example :

voice translation-rule 111

rule 1 /^42286/ /100/

rule 2 /^42287/ /101/

rule 3 /^42288/ /102/

rule 4 /^42289/ /103/

...

[webstd.design]

Didn't help,

Feb 4 13:49:03.947: ISDN Se0/0/0:15 Q931: RX <- SETUP pd = 8 callref = 0x0061

Sending Complete

Bearer Capability i = 0x8090A3

Standard = CCITT

Transfer Capability = Speech

Transfer Mode = Circuit

Transfer Rate = 64 kbit/s

Channel ID i = 0xA18381

Preferred, Channel 1

Progress Ind i = 0x8281 - Call not end-to-end ISDN, may have in-band info

Called Party Number i = 0x81, '422864'

Plan:ISDN, Type:Unknown

Feb 4 13:49:03.955: ISDN Se0/0/0:15 Q931: TX -> RELEASE_COMP pd = 8 callref = 0x8061

Cause i = 0x809B - Destination out of order

Feb 4 13:49:13.503: ISDN Se0/0/0:15 Q931: RX <- SETUP pd = 8 callref = 0x0062

Sending Complete

Bearer Capability i = 0x8090A3

Standard = CCITT

Transfer Capability = Speech

Transfer Mode = Circuit

Transfer Rate = 64 kbit/s

Channel ID i = 0xA18381

Preferred, Channel 1

Progress Ind i = 0x8281 - Call not end-to-end ISDN, may have in-band info

Called Party Number i = 0x81, '422864'

Plan:ISDN, Type:Unknown

Feb 4 13:49:13.515: ISDN Se0/0/0:15 Q931: TX -> RELEASE_COMP pd = 8 callref = 0x8062

Cause i = 0x809B - Destination out of order

[webstd.design]

You ALSO should know that outgoing calls don't see D channel

and look for this,

80 pots up up 0 down 0/0/0:15

3 pots up up 0[1234] 0 up 0/0/0:15

4 pots up up [234]..... 0 up 0/0/0:15

is it right, that this dial-peer is down?

command no shut didn't help

[n.lichatz]

is this a local number? if so why are you matching 6 digits instead of 7 I would say you need another . in you destination pattern, correct me if im wrong

[webstd.design]

Maybe this help you:

3825#sh ccm-manager fallback-mgcp

Current active Call Manager: 10.10.0.1

MGCP Fallback mode: Enabled/OFF

Last MGCP Fallback start time: 17:56:05 UA Feb 4 2008

Last MGCP Fallback end time: 17:59:11 UA Feb 4 2008

I test SRST function with this

access-list 111 deny tcp 10.11.0.1 0.0.0.255 host 10.10.0.1 eq 2000

access-list 111 deny tcp 10.11.0.1 0.0.0.255 host 10.10.0.2 eq 2000

access-list 111 permit ip any any

int GigabitEthernet0/1.10

no ip access-group 111 in

[pcameron]

I know you suggested this particular access list in this earlier post to Netpro -

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Unified%20Communications%20and%20Video&topic=IP%20Telephony&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.2cbf5f35/7#selected_message

However, you have completely forgotten that MGCP uses a combination of traffic on UDP port 2427 (for registration and voice port control) and TCP 2428 for the TCP backhaul. The access list above will only block SCCP traffic from the phones, so the phones will go into SRST mode, but your gateway will still be registered to the call manager, which is why this is not working.

So you have two options.

1) Create an new access list to block outwards traffic on UDP port 2427 and TCP port 2428 and apply this on your WAN port in the outwards direction, alongside the other access list that you have applied in the inwards directions to block the SCCP responses.

2) or simply add these IP route statements so ALL traffic to the CCM is blocked and after a short period the CCM will not send any Keepalive repsonses -

ip route 10.10.0.1 255.255.255.255 null 0

ip route 10.10.0.2 255.255.255.255 null 0

[webstd.design]

You are very helpful!Thanks!

But lets now suggest, what I should do.

(I don't to test SRST more +1 week)

I'm not strong in ACL

So, if I have network 10.111.70.1 that have phones which want to access CallManager ip address 10.10.10.1 so ?

access-list 111 deny tcp 10.111.70.0 0.0.0.255 host 10.10.10.1 eq 2000

access-list 111 deny tcp 10.111.70.0 0.0.0.255 host 10.10.10.1 eq 2428

access-list 111 deny udp 10.111.70.0 0.0.0.255 host 10.10.10.1 eq 2427

access-list 111 permit ip any any

and then

ip access-group 111 in

?

[pcameron]

Deny on the gateway towards the call manager. This blocks outgoing packets, including keepalive traffic, so the CCM stops responding to the devices and they will all drop into SRST and the MGCP will hand over to local call processing -

access-list 111 deny tcp 10.111.70.0 0.0.0.255 host 10.10.10.1 eq 2000

access-list 111 deny tcp 10.111.70.0 0.0.0.255 host 10.10.10.1 eq 2428

access-list 111 deny udp 10.111.70.0 0.0.0.255 host 10.10.10.1 eq 2427

access-list 111 permit ip any any

and then

interface gigabit 0/0

ip access-group 111 out

[webstd.design]

command "ip access-group 111 out"

doesn't help

where have I to use this ACL?

I use it on Gateway 10.111.70.1

When I used ACL with "in" in the end

ip access-group 111 in

phones registers on the GATEWAY 10.111.70.1

As you understand, I should simulate local failure in the range of GATEWAY, whithout touching something like CCM etc.

[pcameron]

Can you draw us a simple text picture of how this system is connected ? Is your SRST router the WAN gateway router ? Or is there another router that is the main WAN connection ?

Paste the complete config of your routers here as well so we can understand exactly why this is not working. Without all the details it is too difficult to give you a solution.

[webstd.design]

access-list 111 deny tcp 10.111.70.0 0.0.0.255 host 10.10.10.1 eq 2000

access-list 111 deny tcp 10.111.70.0 0.0.0.255 host 10.10.10.1 eq 2428

access-list 111 deny udp 10.111.70.0 0.0.0.255 host 10.10.10.1 eq 2427

access-list 111 permit ip any any

and then

interface gigabit 0/0

ip access-group 111 out/in

When I use ACL "ip access-group 111 in" phones register on Gateway 3825,but without FALLBACK MODE

[webstd.design]

so,how can I simulate SRST with ACL only

without using any ip routes?

Help me Gurus