I can make an outside call through the CUPC/VPN and it works perfectly. If I call an internal extension (CUPC or IP Phone) from CUPC/VPN, then I have 2-way audio for a variable period of time, then it changes to 1-way audio (only I can hear).
Anytime you have one way audio, its going to be at your firewall or where NAT is taking place.
The call is using SIP back Presence. So 5060 or 5070 depending on how CUPS is configured, etc. Then the SIP invites/requests are sent to CUCM for processing of the call to/from your gateway.
Why it runs, then drops is a little odd. You can enable logging on the CUPC client, then check the logs on your local PC to see what the messages are saying. If you are getting nothing in the logs, check the RTMT on the CUPS server and watch the SIP Proxy to see possibly why it has dropped.
Ensure you have a clear path between CUPS, VPN and back to your client at the remote end. SIP is usually pretty good about keeping the connection open.
I have used CUPC over CheckPoint with no problems. I would keep looking over your VPN/Firewall
We finally figured it out that the problem was we didn't include the voice vlan subnet in our split-tunnel configuration. I don't know why we didn't think of it before. The calls would connect but since there was no ACL to allow SIP devices (on 10.21.X.X) to talk with our IP Phones (10.90.X.X) the audio path would not setup. Once we added the 10.90.X.X ACL to our split tunnel cfg it started working. Glad we got that fixed.
Yes, I did get this resolved some time ago, but forgot to post the fix. TAC had me upgrade the VPN client to version 5.0+. The reason for the suggestion is a defect (CSCso83716) in the VPN client, which no longer exists in the 5.x+ train.
The short answer is that you don't.... That isn't entirely true while at
the same time it kind of is, but for the most part you don't configure
the softkeys. You enable or disable them via TCL. Here is the long
answer. Be sure to read the whole thing or e...
Topology: IP Phone > Switches > Microsoft NPS setup to forward 802.1x
proxy to > ISE 2.1 patch 3 Authentication: EAP-TLS using Cisco MIC SANs
Phone Models 802.1X support? 802.1x flavor Addtl Comment EAP-MD5 EAP-TLS
Cisco 3905 Y Y N Cisco 6911 Y Y N Cisco ...
This document describe how DST changes and how time changes are
implemented in DST. Daylight Saving Time (DST) is the practice of
setting the clocks forward 1 hour from standard time during the summer
months, and back again in the fall, in order to make b...