[cisco-voip] Outbound calls failing after IOS upgrade

[Chris Ward (chrward)]

"If your customer upgrades to IOS 15.1.2T or later and suddenly finds
that calls (TDM GW, CME, SRST, CUBE, VXML...) that used to work start
failing, pls have them update the new "IP trust list" in IOS that was
introduced to help mitigate against increasing incidents of toll fraud
on GWs, CME and CUBE.

 

More info at:

http://www.cisco.com/en/US/tech/tk652/tk90/technologies_tech_note09186a0
080b3e123.shtml

 

We normally do not change the default operation of features, but this
feature did precisely that because toll fraud hackers exploited the
default (e.g. default dial-peer 0 matching) behaviour in IOS to accept
all incoming voice calls unless more explicit incoming dial-peers are
configured (which most customers do not bother to do).

 

As of 15.1.2T, by default, only calls from "trusted" source IP addresses
will be accepted, similar to CUCM operation (only registered endpoints
and IP addresses defined on trunks).

 

You can turn the feature off to restore old IOS default behaviour, but
it is strongly recommended not to do this - this feature was put in for
customers' protection against hackers. To run off, use:

   voice service voip
      no ip address trusted authenticate

 

By default, calls will be rejected with SIP 403, and you may see this
type of error on the box:

Aug 17 22:24:10.358: %VOICE_IEC-3-GW: Application Framework Core:
Internal Error (Toll fraud call rejected): IEC=1.1.228.3.31.0 on callID
130 GUID=84E305C1A9A611DF81BAD1554600BE83"

 

HTH

 

+Chris

HCS TME & Solution Architecture Team

 

From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Sechaba Mokoena
Sent: Tuesday, September 21, 2010 10:36 AM
To: sashank
Cc: cisco-voip at puck.nether.net
Subject: Re: [cisco-voip] Outbound calls failing after IOS upgrade

 

Hi Venkata,

 

I ran a debug isdn q931 initially and I didn't see any call coming into
the router. I haven't tried removing the gateway from call manager yet,
I'll try that. I received a fast busy signal when my call failed. Thanks
for the info.

 

Kind regards,

 

Sechaba Mokoena

On Mon, Sep 20, 2010 at 11:11 AM, sashank <sasanka.pathi at locuz.com>
wrote:

Check the following:

 

Debug voip dialpeer

 

Do this to check any call coming from the call manager to the gateway.
If the call is coming in then we have something to do with the gateway.
Remove the gateway on  the CUCM and add the gateway once again.  What
are u getting when you are calling a number. Is it a fast busy signal or
some error.

 

Warm Regards, 

 

Venkata Sasanka.pathi(-91 950 265 2290)

Consultant | unified communications

Locuz Enterprise Solutions Ltd. (A Subsidiary of 3i-Infotech)

(office:914066115656)

 sasanka.pathi at locuz.com

www.locuz.com

 

From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Sechaba Mokoena
Sent: Saturday, September 18, 2010 8:14 PM
To: cisco-voip at puck.nether.net
Subject: [cisco-voip] Outbound calls failing after IOS upgrade

 

Hi,

I recently upgraded my router to
c2900-universalk9_npe-mz.SPA.151-2.T1.bin to support SRST 8.0. I
upgraded so my 6921 phones would be supported in SRST. After upgrading I
couldn't place any outbound calls, but I could receive calls. Using the
CSIM start command from the router, I can dial any external number. Can
anyone help here, according to prior IOS release notes, this issue
should've been resolved.

Kind regards,

Sechaba Mokoena

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20100921/2d64744a/attachment.html>