[cisco-voip] testing new ACLs: VG224 issues

[Ed Leatherman]

I've been wondering about that port 4001 myself, couldn't find it in
the port util guide. Ended up just permitting it but I never nailed it
down to what it was for. So you're seeing it during a hold?

On Thu, Dec 1, 2011 at 3:46 PM, Lelio Fulgenzi <lelio at uoguelph.ca> wrote:
> I'm testing some new voice VLAN ACLs and have noticed a problem with a VG224
> port calling an IP phone. If the IP phone puts the VG224 call on hold, no
> problem, but if the IP phone receives another inbound call and goes to
> answer it (automatically putting the VG224 call on hold) the VG224 call is
> dropped.
>
> I noticed the following deny statements being logged.
>
> list voice_endpoints_out denied icmp a.b.c.d -> i.j.k.l (3/3), 1 packet
> list voice_endpoints_out denied udp w.x.y.z(19441) -> i.j.k.l(4001), 1
> packet
>
> a.b.c.d is the ip address of one of the ethernet interfaces where a ping
> packet would be sourced
> w.x.y.z is the loopback address where voice traffic would be sourced
> i.j.k.l is the IP phone
>
> Why is the VG224 trying to ping my ip phone?
> What is UDP traffic destined to 4001 all about?
>
>
>
>
>
> ---
> Lelio Fulgenzi, B.A.
> Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1
> (519) 824-4120 x56354 (519) 767-1060 FAX (ANNU)
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> Cooking with unix is easy. You just sed it and forget it.
>                               - LFJ (with apologies to Mr. Popeil)
>
>
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>



-- 
Ed Leatherman