[cisco-voip] Connectivity problem with remote site

[Ryan Ratliff]

The version of skinny used between the phone and CUCM is determined by both sides indicating the highest version they support, and the highest that both support is used.  In the ASA's case it didn't support the new messages with version 17 so if the phone had an 8.4 phone load and you are using CUCM 7 then the devices would be using skinny version 17 and you would get odd issues when making calls (as the ASA would drop certain messages it didn't know how to inspect).

In your case if the phones couldn't even stay registered it's likely some other inspection issue was causing the tcp sessions to get terminated.

-Ryan

On Feb 10, 2010, at 9:18 AM, Ed Leatherman wrote:

Ryan,

Is the phone firmware 8.5 specifically what's making the problem, or
is it the combination of that firmware + CM 7? I'm planning an upgrade
from 6.1 to 7.1 next month, is it reasonable to just load 8.5 firmware
on some phones now on 6.1 to verify that the ASA's will behave ok?

We have a few ASA's around on our campus network, and my group doesn't
have direct control over them - so trying to get all my info straight
on this issue. The ASA's are running 8.2.X, trying to find out if they
are running skinny inspection.

On Tue, Feb 9, 2010 at 9:23 AM, Ryan Ratliff <rratliff at cisco.com> wrote:
> If you are not doing NAT then I don't believe you need to inspect skinny
> traffic.  If you aren't on an ASA version that supports skinny 17 and you've
> been on CUCM 7 with 8.5 phone firmware since October then I'd say you are
> lucky it worked for this long (or somebody just turned on inspection and
> didn't tell anyone).
> -Ryan
> On Feb 8, 2010, at 5:29 PM, Mike King wrote:
> 
> 
> On Mon, Feb 8, 2010 at 4:56 PM, Ryan Ratliff <rratliff at cisco.com> wrote:
>> 
>> Did you upgrade the phone firmware last week?  Originally the ASAs did not
>> support sccp version 17 (default with CUCM 7 and firmware 8.5) but that was
>> fixed with version 8.4 on the ASA.
> 
> Nope.  Phones have been on 8-5-3S since last October.
> Our ASA's are on Version 8.02 (trust me, I want to upgrade to 8.4, but there
> is a technical/business reason that is preventing us)
> Will disabling inspect skinny have any side-effects?  (Least till we can get
> onto 8.4 which is targeted sometime in the next two months)
> Mike



-- 
Ed Leatherman