[cisco-voip] ASA Phone-Proxy, CUCM 7.1(5b)SU4, and 7921/7925

Wed Mar 28 16:50:28 EDT 2012

There have been a few interim releases, the newest is -26 I believe
Here is a list of all the fixes: http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html

Matthew G. Loraditch - CCVP, CCNA, CCDA

1965 Greenspring Drive
Timonium, MD 21093

voice. 410.252.8830
fax.  410.252.9284

Twitter<http://twitter.com/heliontech>  |  Facebook<http://www.facebook.com/#!/pages/Helion/252157915296>  | Website<http://www.heliontechnologies.com/>  |  Email Support<mailto:support at heliontechnologies.com?subject=Technical%20Support%20Request>

From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of c3voip
Sent: Wednesday, March 28, 2012 4:47 PM
To: 'Wes Sisk'
Cc: cisco-voip at puck.nether.net
Subject: Re: [cisco-voip] ASA Phone-Proxy, CUCM 7.1(5b)SU4, and 7921/7925

I am on ASA 8.2.5.  There is nothing newer in the 8.2 train posted online.  I would definitely try that if there was something newer out there.

-C

From: Wes Sisk [mailto:wsisk at cisco.com]<mailto:[mailto:wsisk at cisco.com]>
Sent: Wednesday, March 28, 2012 4:40 PM
To: c3voip
Cc: 'Ryan Ratliff'; cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
Subject: Re: [cisco-voip] ASA Phone-Proxy, CUCM 7.1(5b)SU4, and 7921/7925

CUCM upgrade almost always necessitates ASA upgrade when doing proxy or inspection.

/wes

On Mar 28, 2012, at 4:35 PM, c3voip wrote:

After more careful review of the captures from the outside and inside simultaneously, it appears that the ASA is failing to forward some ACK's that the phone is sending.

1.       The phone requests Ringlist.xml and CUCM sends block 1 and the ASA ACK's it
2.       CUCM sends block 2 (last block) to the ASA, but ASA does not ACK that one
3.       ASA then sends block 1 to phone, and phone ACK's it
4.       ASA then sends block 2 to phone, and phone ACK's it
5.       ASA never sends ACK for block 2

CUCM continues to try to send the last block but neither the phone nor the ASA ever ACK it.

This happens similarly for DistinctiveRinglist.xml too.

It looks like CUCM tries to resend the last 2 blocks for these 2 files while the phone is in the middle of requesting WLAN-1.4.1SR1.SBN.  Not sure how the phone handles that, but it continues to ask for WLAN-1.4.1SR1.SBN 4 more times after that then stops asking.

Looks like I'll be opening a TAC case.

Something must have changed with these 2 Ringlist.xml files that is causing issues with the ASA Phone-proxy feature, since nothing changed on the ASA side.

-C

From: Ryan Ratliff [mailto:rratliff at cisco.com]<mailto:[mailto:rratliff at cisco.com]>
Sent: Tuesday, March 27, 2012 4:21 PM
To: c3voip
Cc: 'Wes Sisk'; cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
Subject: Re: [cisco-voip] ASA Phone-Proxy, CUCM 7.1(5b)SU4, and 7921/7925

Does a packet capture on the outside ASA interface show the phone sending the Acks or that the data is getting out to the phone even?

-Ryan

On Mar 27, 2012, at 3:39 PM, c3voip wrote:

It is just stops seeing ACK's come back.

Socket[35] Async IO started successfully|<CLID::CCM1-Cluster><NID::TFTP><LVL::Significant><MASK::0004>
No ACK, Socket[35] Serving File[TNUXH-1.4.1SR1.SBN] Expecting block[359] Retrying [1] times...|<CLID:: CCM1-Cluster><NID::TFTP><LVL::Detailed><MASK::0004>
No ACK, Socket[35] Serving File[TNUXH-1.4.1SR1.SBN] Expecting block[359] Retrying [2] times...|<CLID:: CCM1-Cluster><NID::TFTP><LVL::Detailed><MASK::0004>
No ACK, Socket[35] Serving File[TNUXH-1.4.1SR1.SBN] Expecting block[359] Retrying [3] times...|<CLID:: CCM1-Cluster><NID::TFTP><LVL::Detailed><MASK::0004>
No ACK, Socket[35] Serving File[TNUXH-1.4.1SR1.SBN] Expecting block[359] Retrying [4] times...|<CLID:: CCM1-Cluster><NID::TFTP><LVL::Detailed><MASK::0004>
No ACK, Socket[35] Serving File[TNUXH-1.4.1SR1.SBN] Expecting block[359] Retrying [5] times...|<CLID:: CCM1-Cluster><NID::TFTP><LVL::Detailed><MASK::0004>
No ACK, Socket[35] Serving File[TNUXH-1.4.1SR1.SBN] Expecting block[359] Retrying [6] times...|<CLID:: CCM1-Cluster><NID::TFTP><LVL::Detailed><MASK::0004>
No ACK, Closing Socket[35] Serving File[TNUXH-1.4.1SR1.SBN] After[6]retries...|<CLID:: CCM1-Cluster><NID::TFTP><LVL::Detailed><MASK::0004>

It is almost like it is the phone that stops communicating, but I have tried all of the versions of firmware for these wifi phones and they are all the same.

-C

From: Wes Sisk [mailto:wsisk at cisco.com]<mailto:[mailto:wsisk at cisco.com]>
Sent: Tuesday, March 27, 2012 1:13 PM
To: c3voip
Cc: cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
Subject: Re: [cisco-voip] ASA Phone-Proxy, CUCM 7.1(5b)SU4, and 7921/7925

sounds like a timing issue.  historically when turning on debugs works around a problem the underlying reason is that debugs slow down processing sufficiently to mask the race condition.

one tidbit does come to mind here - tftp retransmits.  The tftp server on cucm has very limited retransmits, like maybe one.

when TFTP fails what do debugs, packet captures, or ccm TFTP server traces show?

/wes

On Mar 26, 2012, at 2:36 PM, c3voip wrote:

I have upgraded from CUCM 7.1(2a) to CUCM 7.1(5b)SU4 without any issues, but now I am having issues loading firmware to my 7921 and 7925 wifi phones through my ASA5520 with the Phone Proxy feature.

Here comes the curveball, if I turn on phone-proxy tftp debugs on the ASA everything works normally, but nothing has changed on the ASA so why should this allow tftp to work?

I have taken packet captures from both sides of the ASA, without the debug turned on, and the wifi phone just looks like it stops ACK'ing the tftp packets.

Does anyone else have a setup similar to mine or has anyone experienced anything like this?

Thanks,
-C
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20120328/a338f31d/attachment.html>