[cisco-voip] Securing an IP Phone with a PIN

Kumar, Narinder Narinder.Kumar at getronics.com
Tue Sep 23 01:55:22 EDT 2008


Peter, under ur telephony service you need to block the pattern 
e.g something like below:
block pattern 1 900 24x7.
Once you do that than assign pin to the users to overwrite the block
pattern.

Cheers
Narinder

-----Original Message-----
From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of
cisco-voip-request at puck.nether.net
Sent: Tuesday, 23 September 2008 6:07 AM
To: cisco-voip at puck.nether.net
Subject: cisco-voip Digest, Vol 59, Issue 185

Send cisco-voip mailing list submissions to
	cisco-voip at puck.nether.net

To subscribe or unsubscribe via the World Wide Web, visit
	https://puck.nether.net/mailman/listinfo/cisco-voip
or, via email, send a message with subject or body 'help' to
	cisco-voip-request at puck.nether.net

You can reach the person managing the list at
	cisco-voip-owner at puck.nether.net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of cisco-voip digest..."


Today's Topics:

   1. Re: Cisco VPN for voice routers... (Joe Cisco)
   2. Re: Cisco VPN for voice routers... (Joe Cisco)
   3. Re: MeetingPlace express VMware ESX (Voice Noob)
   4. Securing an IP Phone with a PIN (Peter Nyamukusa)


----------------------------------------------------------------------

Message: 1
Date: Mon, 22 Sep 2008 14:30:32 -0500
From: "Joe Cisco" <smetsysocsic at gmail.com>
Subject: Re: [cisco-voip] Cisco VPN for voice routers...
To: "Corbett Enders" <cenders at homesbyavi.com>
Cc: cisco-voip at puck.nether.net, Hoon Hong <Hoon.Hong at mulvannyg2.com>
Message-ID:
	<ae303060809221230l99badcek1806da544f68e012 at mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

You can't QoS over the internet, unless perhaps you have the same
provider at each location and for a nominal fee they'll provide QoS
across their network.

I'd stick with Cisco and go with the ASA. I believe Cisco EoL'd the
VPN Concentrators. The added benefit of staying with cisco is if/when
you call tech support there is no finger pointing between different
brands.

-Joe C.


On Mon, Sep 22, 2008 at 2:21 PM, Corbett Enders <cenders at homesbyavi.com>
wrote:
> Regarding the QoS, there is little other traffic than voice on the
VPN.
> Besides, how do you use QoS on the Internet anyway?
>
>
>
> From: Hoon Hong [mailto:Hoon.Hong at MulvannyG2.com]
> Sent: Monday, September 22, 2008 12:57 PM
> To: Corbett Enders; cisco-voip at puck.nether.net
> Subject: RE: [cisco-voip] Cisco VPN for voice routers...
>
>
>
> Cisco for sure. Router will be even better. So you can set QOS all the
way
> thru.
>
>
>
> Hoon Hong (? ?)   | Network Engineer (CCVP, SCP, CCSA)
>
> MulvannyG2 Architecture
> T: 425.463.1327 (IP Phone)
> C: 425.241.2646
>
> Hoon
>
> The contents of this e-mail and any attachment(s) are confidential and
the
> property of MulvannyG2 Architecture.
>
>
>
> From: cisco-voip-bounces at puck.nether.net
> [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Corbett
Enders
> Sent: Monday, September 22, 2008 10:02 AM
> To: cisco-voip at puck.nether.net
> Subject: Re: [cisco-voip] Cisco VPN for voice routers...
>
>
>
> I should add that we're currently using a Watchguard Core firewall but
for
> some reason after a while a few of the VPNs will drop and won't
recreate
> unless I reboot the Cisco router. This happens to only a couple of the
> remote sites, not all of them.  Of course, the config across all of
the
> remote sites and VPN settings on the Watchguard's are the same (other
than
> their respective unique pieces).
>
>
>
> From: Corbett Enders
> Sent: Monday, September 22, 2008 9:49 AM
> To: 'cisco-voip at puck.nether.net'
> Subject: Cisco VPN for voice routers...
>
>
>
> We have 25 remote sites with Cisco 2801 routers for Voice. Which is
the best
> device I should use at my head office for establishing a VPN to each
of
> these sites?
>
>
>
> Cisco or non-Cisco, I have no preference but of course non-cisco
> interoperability is a concern as no one seems to follow the IPSEC spec
100%.
>
>
>
> Corbett Enders
>
> Network Manager
> Homes by Avi - 2007 Canadian Builder of the Year.
> Tel: (403) 536-7170
> Fax: (403) 536-7171
> www.homesbyavi.com
>
> ? Please consider the environment before printing this email.
>
>
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>

------------------------------

Message: 2
Date: Mon, 22 Sep 2008 14:32:30 -0500
From: "Joe Cisco" <smetsysocsic at gmail.com>
Subject: Re: [cisco-voip] Cisco VPN for voice routers...
To: "Corbett Enders" <cenders at homesbyavi.com>
Cc: cisco-voip at puck.nether.net, Hoon Hong <Hoon.Hong at mulvannyg2.com>
Message-ID:
	<ae303060809221232t76d8a825x515bfaaee8f8f69e at mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

I forgot to add... i'd recommend configuring the remote sites as g729 as
well.

-Joe C.

On Mon, Sep 22, 2008 at 2:21 PM, Corbett Enders <cenders at homesbyavi.com>
wrote:
> Regarding the QoS, there is little other traffic than voice on the
VPN.
> Besides, how do you use QoS on the Internet anyway?
>
>
>
> From: Hoon Hong [mailto:Hoon.Hong at MulvannyG2.com]
> Sent: Monday, September 22, 2008 12:57 PM
> To: Corbett Enders; cisco-voip at puck.nether.net
> Subject: RE: [cisco-voip] Cisco VPN for voice routers...
>
>
>
> Cisco for sure. Router will be even better. So you can set QOS all the
way
> thru.
>
>
>
> Hoon Hong (? ?)   | Network Engineer (CCVP, SCP, CCSA)
>
> MulvannyG2 Architecture
> T: 425.463.1327 (IP Phone)
> C: 425.241.2646
>
> Hoon
>
> The contents of this e-mail and any attachment(s) are confidential and
the
> property of MulvannyG2 Architecture.
>
>
>
> From: cisco-voip-bounces at puck.nether.net
> [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Corbett
Enders
> Sent: Monday, September 22, 2008 10:02 AM
> To: cisco-voip at puck.nether.net
> Subject: Re: [cisco-voip] Cisco VPN for voice routers...
>
>
>
> I should add that we're currently using a Watchguard Core firewall but
for
> some reason after a while a few of the VPNs will drop and won't
recreate
> unless I reboot the Cisco router. This happens to only a couple of the
> remote sites, not all of them.  Of course, the config across all of
the
> remote sites and VPN settings on the Watchguard's are the same (other
than
> their respective unique pieces).
>
>
>
> From: Corbett Enders
> Sent: Monday, September 22, 2008 9:49 AM
> To: 'cisco-voip at puck.nether.net'
> Subject: Cisco VPN for voice routers...
>
>
>
> We have 25 remote sites with Cisco 2801 routers for Voice. Which is
the best
> device I should use at my head office for establishing a VPN to each
of
> these sites?
>
>
>
> Cisco or non-Cisco, I have no preference but of course non-cisco
> interoperability is a concern as no one seems to follow the IPSEC spec
100%.
>
>
>
> Corbett Enders
>
> Network Manager
> Homes by Avi - 2007 Canadian Builder of the Year.
> Tel: (403) 536-7170
> Fax: (403) 536-7171
> www.homesbyavi.com
>
> ? Please consider the environment before printing this email.
>
>
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>

------------------------------

Message: 3
Date: Mon, 22 Sep 2008 14:58:31 -0500
From: "Voice Noob" <voicenoob at gmail.com>
Subject: Re: [cisco-voip] MeetingPlace express VMware ESX
To: "Reto Gassmann" <voip at mrga.ch>
Cc: "cisco-voip at puck-nether.net" <cisco-voip at puck.nether.net>
Message-ID:
	<535625f70809221258x1018b2f2u907c1965cb985926 at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

Thanks but I said that I have already converted it in my original
e-mail. I
did use the VMware tool . The problem is that the server image that is
shipped uses IDE drives and ESX does not support IDE. So during the
conversion proccess it converts it to SCSI and then when I start the vm
the
GRUB loader does not boot the system.

On Mon, Sep 22, 2008 at 1:27 PM, Reto Gassmann <voip at mrga.ch> wrote:

>  Hi
>
> try to import the image with the VMWare Converter.
> http://www.vmware.com/products/converter/
> you can set source and destination and it converts the Image from
VMServer
> to ESX.
>
>   ----- Original Message -----
> *From:* Voice Noob <voicenoob at gmail.com>
> *To:* cisco-voip at puck-nether.net
> *Sent:* Monday, September 22, 2008 8:18 PM
> *Subject:* [cisco-voip] MeetingPlace express VMware ESX
>
>
> Has anyone found a way to install Meetingplace 2.x in Vmware ESX? I
know
> you can order the NFR from Cisco and they will send you a VMware image
> already configured. The problem is all I have at my company. ESX and
not
> vmware server. I have tried to convert it and it will not boot.
>
> ------------------------------
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20080922/0cdc9
cad/attachment-0001.html>

------------------------------

Message: 4
Date: Mon, 22 Sep 2008 23:02:46 +0300
From: "Peter Nyamukusa" <peter.nyamukusa at africaonline.co.tz>
Subject: [cisco-voip] Securing an IP Phone with a PIN
To: <cisco-voip at puck.nether.net>
Message-ID:
	<023501c91cee$2f137bd0$8d3a7370$@nyamukusa at africaonline.co.tz>
Content-Type: text/plain; charset="us-ascii"

Hi Folks,

 

I am new to this group I acquired a Cisco call manager system running on
Cisco 2821 with c2800nm-spservicesk9-mz.124-9.T7.bin

I have managed to set my VoIP network using documentation on the Cisco
websites, I have several FXO ports connecting to the PSTN, Mobile
operators,
and an IP Planet VOIP GW  terminating my VOIP WAN. My IP Phones consist
of
7941G and 7906G phones and I would like to secure each ext using a pin
before any calls to the PSTN are permitted

I have the following config below which does not seem to be working 

 

ephone  1 

 no multicast-moh

 description NOC

 mac-address 001F.9EAB.6C20

 username "peter" password xxxxx

 type 7941

 button  1:1 2:2

 pin 1234  

 

Any help or pointers is appreciated

 

Regards,

Peter Nyamukusa - CCIP, JNCIS, MCSE 2000/2003, Linux+
Technical Manager
Africa Online (T) Ltd
Tel: +255 (22) 211 6090
Fax: +255 (22) 211 6089
Email:  <mailto:petern at africaonline.co.tz>
peter.nyamukusa at africaonline.co.tz
AIM: petenya

 



A member of the Telkom South Africa
Groupcid:image004.jpg at 01C8E2CC.6068DD30

Africa Online Disclaimer and Confidentiality Note 

This e-mail, its attachments and any rights attaching hereto are, unless
the
context clearly indicates otherwise, the property of Africa Online
Holdings
(Mauritius) Limited and / or its subsidiaries ("the Group"). It is
confidential and intended for the addressee only. Should you not be the
addressee and have received this e-mail by mistake, kindly notify the
sender, delete this e-mail immediately and do not disclose or use the
same
in any manner whatsoever. Views and opinions expressed in this e-mail
are
those of the sender unless clearly stated as those of the Group. The
Group
accepts no liability whatsoever for any loss or damages, however
incurred,
resulting from the use of this e-mail or its attachments. The Group does
not
warrant the integrity of this e-mail, nor that it is free of errors,
viruses, interception or interference. For more information about Africa
Online, please visit our website at http://www.africaonline.com

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20080922/402ef
2ab/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 6441 bytes
Desc: not available
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20080922/402ef
2ab/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 2701 bytes
Desc: not available
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20080922/402ef
2ab/attachment.jpe>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/octet-stream
Size: 6356 bytes
Desc: not available
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20080922/402ef
2ab/attachment.obj>

------------------------------

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


End of cisco-voip Digest, Vol 59, Issue 185
*******************************************


More information about the cisco-voip mailing list