[cisco-voip] testing new ACLs: VG224 issues (RESOLVED)

[Lelio Fulgenzi]

Turns out this problem was not related to ACLs and was far more encompassing than originally thought. 

Essentially, any IP phone that has a VG248 port associated to the line which has max/busy set to 2/2 will experience this issue regarding of calling party type. 

I'm not sure if this is a bug or working like designed but when the phone has a VG224 port associated to the line with the same 2/2 setting, the problem does not happen. 

Very weird. 

--- 
Lelio Fulgenzi, B.A. 
Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1 
(519) 824-4120 x56354 (519) 767-1060 FAX (ANNU) 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 
Cooking with unix is easy. You just sed it and forget it. 
- LFJ (with apologies to Mr. Popeil) 


----- Original Message -----
From: "Lelio Fulgenzi" <lelio at uoguelph.ca> 
To: "Cisco VoIPoE List" <cisco-voip at puck.nether.net> 
Sent: Thursday, December 1, 2011 3:46:26 PM 
Subject: testing new ACLs: VG224 issues 


I'm testing some new voice VLAN ACLs and have noticed a problem with a VG224 port calling an IP phone. If the IP phone puts the VG224 call on hold, no problem, but if the IP phone receives another inbound call and goes to answer it (automatically putting the VG224 call on hold) the VG224 call is dropped. 

I noticed the following deny statements being logged. 

list voice_endpoints_out denied icmp a.b.c.d -> i.j.k.l (3/3), 1 packet 
list voice_endpoints_out denied udp w.x.y.z(19441) -> i.j.k.l(4001), 1 packet 

a.b.c.d is the ip address of one of the ethernet interfaces where a ping packet would be sourced 
w.x.y.z is the loopback address where voice traffic would be sourced 
i.j.k.l is the IP phone 

Why is the VG224 trying to ping my ip phone? 
What is UDP traffic destined to 4001 all about? 





--- 
Lelio Fulgenzi, B.A. 
Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1 
(519) 824-4120 x56354 (519) 767-1060 FAX (ANNU) 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 
Cooking with unix is easy. You just sed it and forget it. 
- LFJ (with apologies to Mr. Popeil) 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20111207/903e5e6a/attachment.html>