I have a VCS-E configured in the DMZ. I can call in and out from the corporate network. However when I register to VCS-E from the Internet using a movi client and try to call to an endpoint on the Internet , I don't get audio/video. Can someone point me in the right troubleshooting path? What path does the media take?
Currently VCS-E use “Media Latching” for SIP NAT traversal which media (RTP&RTCP) is sent to remote end after media packet is received (this opens up the NAT binding).
Possibly firewall block ACK message for Invite or block actual video/audio RTP payload.
The debug level diagnostic log should give more clarification about ACK message reachability (if you kept see continue 200 OK with SDP from call receiver side although 200 OK send back to call receiver, highly suspect this packet doesn’t reached to far end device).
* as you mention that you use the VCS in a DMZ, do you use NAT (like having the vcs on a private ip and nat it to the public ip)? If so, this requires the dual interface option (even if only one interface is used, but the nat feature is part
of that license as well) There are more forum entries about this topic.
* check that no application layer gateway / nat helper, ... is in the path of the VCS/endpoints/infrastructure/...
* check that your firewall allows in and outbound traffic to all media ports of the vcs-e. The default udp ports on X7.1 are
* 2776-2777 (multiplexed rtp)
* 50000-52399 (generic rtp media)
* 60000-61799 (turn - might not be used)
* 56000-57000 (b2bua - most likely not be used on vcse)
* outbound must be from these ports to >=1024 as you never know which high ports the remote site will use
* do you use turn/stun/ice with movi?
that might change the traffic flow drastically as it also supports direct media in between clients as well as the usage of the turn relay which adds additional ports.
Anyhow, a tac case might bring the quickest results, but please update us what caused your issue.
George and all others: please rate the answers using the stars below!
I'm not able to access my old voice mail messages all of a sudden. The recording says something like 'the message is currently not available'. This has never happened before in all the years I have been using this system. I have t...
If you have 2 ISR routers, one acting as Failover, do we need to have both the same number of SRST licenses on the 2 routers?
No. You will only need the SRST licenses on the primary router. Because this feature...
You have reached the Cisco Logistics Support Center.. To Check Status of your RMA, visit Product Returns & Replacements (RMA).
Need help? Contact us by Phone or Email.
Phone: 1800 553 2447 Option 4