[cisco-voip] phone hardware / LSC question - 8945

[Brian Meade (brmeade)]

Erick,

That should be the only way the CAPF.pem is able to be regenerated.

Do you have Auto Network Detect enabled on the VPN profile?  If so, you might want to try creating a new profile for that user with it turned off.  Auto Network Detect doesn't work well with some home routers due to proxy ARP.  Do you have the Alternate TFTP hard set on the phone as well?

Brian

From: Erick Wellnitz [mailto:ewellnitzvoip at gmail.com]
Sent: Thursday, October 31, 2013 6:01 PM
To: Brian Meade (brmeade)
Cc: cisco-voip
Subject: Re: [cisco-voip] phone hardware / LSC question - 8945

LSC shows as installed.  The VPN wouldn't even try to connect and it wouldn't allow us to turn VP Non in the settings.  Nothing had changed prior to when it stopped working.

The only way CAPF.pem would get regenerated is by doing so through certificate management, correct?

On Thu, Oct 31, 2013 at 4:50 PM, Brian Meade (brmeade) <brmeade at cisco.com<mailto:brmeade at cisco.com>> wrote:
It should be saved on the built-in flash just like the MIC.  Does the phone show the LSC as being installed?

The console logs are really good for VPN issues.  It should print out exactly why the VPN connection is failing with the new LSC.  Has your CAPF.pem been regenerated on the publisher since the last time you issued phone VPN LSCs?

Brian
From: cisco-voip [mailto:cisco-voip-bounces at puck.nether.net<mailto:cisco-voip-bounces at puck.nether.net>] On Behalf Of Erick Wellnitz
Sent: Thursday, October 31, 2013 5:16 PM
To: cisco-voip
Subject: [cisco-voip] phone hardware / LSC question - 8945

Phone hardware question.  Does the LSC get stored somewhere other than the same place the firmware image gets stored on the phone?

The reason I ask is we had a VPN phone lose power a few days back (probably not connected to a surge protector).  Had the user bring the phone into the office to reinstall the LSC and it still could not connect to the VPN.

Anyone ever encountered something like this?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20131101/bc315ea6/attachment.html>