[cisco-voip] SCCP Session Border Controllers

Thu Jun 12 10:00:08 EDT 2014

Long usernames and password complexity.  Using the 10-key method on a 7965 drove me nuts.  Go with certificates ☺

From: bmeade90 at gmail.com [mailto:bmeade90 at gmail.com] On Behalf Of Brian Meade
Sent: Thursday, June 12, 2014 9:59 AM
To: Jason Aarons (AM)
Cc: Euan McGregor; cisco-voip at puck.nether.net
Subject: Re: [cisco-voip] SCCP Session Border Controllers

Looks like it is lost after a reset/power down- http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/8_5_1/secugd/sec-851-cm/secvpfet.html#wp1017196

On Thu, Jun 12, 2014 at 9:55 AM, Brian Meade <bmeade90 at vt.edu<mailto:bmeade90 at vt.edu>> wrote:
I haven't tried it with a full power down so not sure on that one.  If it does, I'd expect it to just be a hash and hopefully salted.

Brian

On Thu, Jun 12, 2014 at 9:52 AM, Jason Aarons (AM) <jason.aarons at dimensiondata.com<mailto:jason.aarons at dimensiondata.com>> wrote:
If the phone powers off/on is it storing your username/password somewhere on the phone?

From: bmeade90 at gmail.com<mailto:bmeade90 at gmail.com> [mailto:bmeade90 at gmail.com<mailto:bmeade90 at gmail.com>] On Behalf Of Brian Meade
Sent: Thursday, June 12, 2014 9:49 AM
To: Jason Aarons (AM)
Cc: Euan McGregor; cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>

Subject: Re: [cisco-voip] SCCP Session Border Controllers

Jason,

I think checking "Enable Password Persistence" on the VPN Profile configuration will allow you to re-connect automatically using username/password authentication.

Brian

On Wed, Jun 11, 2014 at 5:19 PM, Jason Aarons (AM) <jason.aarons at dimensiondata.com<mailto:jason.aarons at dimensiondata.com>> wrote:
And I would second Phone VPN but I highly recommend using Certificates and not username/passwords.  I found my Phone VPN 7965 would be offline when it dropped the connection (power/ISP)  waiting for my username/password.  With certificates it automagically rec-onnects ☺

From: cisco-voip [mailto:cisco-voip-bounces at puck.nether.net<mailto:cisco-voip-bounces at puck.nether.net>] On Behalf Of Brian Meade
Sent: Wednesday, June 11, 2014 3:30 PM

To: Euan McGregor
Cc: cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
Subject: Re: [cisco-voip] SCCP Session Border Controllers

I've done a lot of phone proxy work.  It doesn't really work for new phones that used signed config files.  It was pretty much abandoned completely once Phone VPN was introduced.  If you're using a CUCM 7.x or earlier environment, phone proxy is still a good choice. It also works pretty well in newer CUCM versions if you're running 7940s/7960s.

I would suggest just doing Phone VPN if possible.  It's much easier and works on pretty much all of the newer phones.

On Wed, Jun 11, 2014 at 2:54 PM, Euan McGregor <euan at mcgregor.co<mailto:euan at mcgregor.co>> wrote:
Thanks, I was looking at the ASA someone told me that the phone proxy on the ASA just did not work, have you had an experience in the ASA Phone Proxy?

Does the line side support on the CUBE support SCCP I thought it was only SIP and the newer 9900 phones.

Thanks

On 11 June 2014 18:40, Heim, Dennis <Dennis.Heim at wwt.com<mailto:Dennis.Heim at wwt.com>> wrote:
CUBE supports line side registrations

Dennis Heim | Collaboration Solutions Architect
World Wide Technology, Inc. | +1 314-212-1814<tel:%2B1%20314-212-1814>
[twitter]<https://twitter.com/CollabSensei>
[chat][Phone]<tel:+13142121814>[video]

From: cisco-voip [mailto:cisco-voip-bounces at puck.nether.net<mailto:cisco-voip-bounces at puck.nether.net>] On Behalf Of Brian Meade
Sent: Wednesday, June 11, 2014 12:19 PM
To: Euan McGregor
Cc: cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
Subject: Re: [cisco-voip] SCCP Session Border Controllers

ASA can do TLS proxy.

Depending on phone models/CUCM version, you could use the ASA phone proxy feature as well if you're not mixed mode on CUCM.

On Wed, Jun 11, 2014 at 11:23 AM, Euan McGregor <euan at mcgregor.co<mailto:euan at mcgregor.co>> wrote:
Hello all,

We are looking to replace our, now Avaya, Sipera Session Border Controller box. We are looking for something that will do SCCP and essentially proxy the session back to call manager.

Does anybody know if there any products or solution either paid or open source that can do this for us?

Any help appreciated.

Thanks,

Euan

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

itevomcid

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20140612/a524a797/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 3876 bytes
Desc: image001.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20140612/a524a797/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 1389 bytes
Desc: image002.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20140612/a524a797/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 1292 bytes
Desc: image003.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20140612/a524a797/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 1391 bytes
Desc: image004.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20140612/a524a797/attachment-0003.png>