Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Clarification require on iwf@VCS_IP_Address

Hi All

We have faced the below problem in our VCS X7.2 enironment.

Since the search history on VCS Expressway display the iwf@VCS_IP_Address.Can anybody tell me why below search history entry created.our setup is VCSc & VCSe and two hundred endpoint.



  • TelePresence

Clarification require on iwf@VCS_IP_Address

Hi Soundar,

this could be possible that there might be an interworking happening on the calls and that's the reason it is swhowing iwf@vcs ip-address.

however you haven't define what's your scenarion when do you see this error ?



VIP Purple

Clarification require on iwf@VCS_IP_Address

I've seen this once, someone called in our video network and it came up in the search as @vcs-ip-address instead of @domain.  This was because the device doing the calling only supported IP dialing, they were dialing in the method of alias@vcs-ip-address.  To get around this, I put in a transform into our VCS that will transform the @vcs-ip-address and stip the IP off of the called address, alternativly you could replace vcs-ip-address with a domain.

Option #1:  Remove IP from IP URI

Pattern Type:  Suffix

Pattern String: @%ip%

Pattern behavior:  Strip


Option #2:  Remove IP from IP URI and replace with domain

Pattern Type:  Regex

Pattern String: @%ip%

Pattern behavior:  Replace

Replace string:  \1@domain

Note:  %ip% will match any IP address assigned to the VCS.


New Member

Re: Clarification require on iwf@VCS_IP_Address

Hi Patrick

Can you please tell me where i need to put this tranform VCSe or VCSc.

At present below transforms we applied on VCSe

Priority State Description Pattern Type Behavior Replace Actions
1EnabledRemove Domains(.*)@%localdomains%.*RegexReplace\1 View/Edit

3EnabledStrip IP of VCS-E(.+)@203.145.X.X.*RegexReplace\1 View/Edit
VIP Purple

Clarification require on iwf@VCS_IP_Address

There are two options, you could put the transform on just the VCS that you are seeing the alias@vcs-ip-address issue on, or you could put it on both VCSs (C and E).

New Member

Re: Clarification require on iwf@VCS_IP_Address

Hi Alok

I am getting below error on everyday on my VCS Expressway.During this time we checked VCSc and no calls from internal to external

2013-10-26 12:45:06H323 (LRQ)100@
2013-10-26 12:45:06SIP (OPTIONS)100@
2013-10-26 12:09:02SIP (OPTIONS)iwf@ DetectedView
2013-10-26 12:09:02H323 (LRQ)iwf@ unavailable - Loop detectedView
2013-10-26 12:09:02SIP (OPTIONS)iwf@ URI SchemeView
2013-10-26 12:09:00SIP (OPTIONS)iwf@ URI SchemeView
2013-10-26 12:08:59H323 (LRQ)020244537346@tecResource unavailable - Loop detectedView
2013-10-26 12:08:59H323 (LRQ)020244537346@teIncomplete address - Invalid alias for SIP interworkingView
2013-10-26 08:52:07SIP (OPTIONS)iwf@ URI SchemeView
2013-10-26 08:52:04H323 (LRQ)100@ unavailable - Loop detectedView

Clarification require on iwf@VCS_IP_Address


do you recognize address ?

you need to harden your security as some bad guys try to come in with typical 100@ address. how? TAC

iwf@ip-address is interworked call



New Member

Re: Clarification require on iwf@VCS_IP_Address

Hi Ahmad

It's our VCSc IP address.



Clarification require on iwf@VCS_IP_Address

The transforms used to not look good as you strip away the local domains, which causes

such kind of trouble.

The basic vcs-e / c deployment guide is a good example on how to build your search rules.

In addition also check that your registrations are proper, h323 and sip shall use both

the full uri with the domain as its registration address.

Please remember to rate helpful responses and identify helpful or correct answers.

Please remember to rate helpful responses and identify

New Member

Re: Clarification require on iwf@VCS_IP_Address

HI Martin

Thanks for your suggestion. We will check the transforms rules and we got a another alternative solution from your old post ( We enable the CPL on VCSe and now hackers get the forbidden msg.

2013-10-28 16:39:14SIP (OPTIONS)100@
2013-10-28 15:25:36SIP (OPTIONS)100@
2013-10-28 13:28:11SIP (OPTIONS)100@

Thanks & Regards


This widget could not be displayed.