[cisco-voip] CUBE ignoring SDP responses from ITSP
Ryan Huff
ryanhuff at outlook.com
Fri Aug 10 23:16:35 EDT 2018
If the media is getting through but not SIP, it really does sound like the ACL since it operates in different layer than monitor.
Sent from my iPhone
On Aug 10, 2018, at 23:13, Benjamin Turner <benmturner at hotmail.com<mailto:benmturner at hotmail.com>> wrote:
The 101 access list was for the monitor capture. To capture traffic from outside interface IP and ISP IP. That was my next step to open up the trust list.
Get Outlook for Android<https://aka.ms/ghei36>
________________________________
From: Ryan Huff <ryanhuff at outlook.com<mailto:ryanhuff at outlook.com>>
Sent: Friday, August 10, 2018 11:11:59 PM
To: Benjamin Turner
Cc: Bill Talley; cisco-voip voyp list
Subject: Re: [cisco-voip] CUBE ignoring SDP responses from ITSP
Knock off the access list 101 on 0/0/0 and turn off the ipv4 trusted list temporarily ... anything?
Sent from my iPhone
On Aug 10, 2018, at 23:10, Benjamin Turner <benmturner at hotmail.com<mailto:benmturner at hotmail.com>> wrote:
Cucm default ip is that of the cube's inside interface. Cucm can send and receive from cube.
Get Outlook for Android<https://aka.ms/ghei36>
________________________________
From: Bill Talley <btalley at gmail.com<mailto:btalley at gmail.com>>
Sent: Friday, August 10, 2018 11:08:15 PM
To: Benjamin Turner
Cc: Ryan Huff; cisco-voip voyp list
Subject: Re: [cisco-voip] CUBE ignoring SDP responses from ITSP
In other words, your signaling is bound to the public address on CUBE. Unless the inside interface on CUBE is the default gateway for call manager, or Call Managers default gateway has a host route pointing that traffic to the inside address of CUBE, the traffic may be going out the firewall and hitting the outside address of CUBE? Again, my apologies if this is outlined in one of the other emails.
Sent from an iOS device with very tiny touchscreen input keys. Please excude my typtos.
On Aug 10, 2018, at 10:01 PM, Bill Talley <btalley at gmail.com<mailto:btalley at gmail.com>> wrote:
This may have already been asked, sorry. Since everything is bound to the outside address on CUBE, is call manager sending traffic back to your firewall instead of CUBE and getting dropped by the firewall or redirect by the firewall to CUBE?
Sent from an iOS device with very tiny touchscreen input keys. Please excude my typtos.
On Aug 10, 2018, at 9:15 PM, Benjamin Turner <benmturner at hotmail.com<mailto:benmturner at hotmail.com>> wrote:
Very basic:
version 15.5
voice service voip
ip address trusted list
ipv4 67.231.8.75
ipv4 67.231.12.12
ipv4 192.168.1.20
ipv4 162.245.36.90
address-hiding
mode border-element license capacity 100
allow-connections sip to sip
no supplementary-service sip moved-temporarily
no supplementary-service sip refer
fax protocol pass-through g711ulaw
sip
bind control source-interface GigabitEthernet0/0/0
bind media source-interface GigabitEthernet0/0/0
registrar server
no update-callerid
early-offer forced
midcall-signaling passthru
pass-thru content sdp
!
voice class codec 1
codec preference 1 g711ulaw
codec preference 2 g729r8
!
!
voice class sip-profiles 30
request ANY sdp-header Audio-Attribute modify "a=ptime:20" "a=ptime:30"
!
!
!
!
!
voice translation-rule 2
rule 1 /\+1\([2-9].........\)/ /\1/
!
voice translation-rule 11
rule 1 /\([2-9]..[2-9]......$\)/ /+1\1/
rule 2 /\(.*\)/ /+\1/
!
voice translation-rule 22
rule 1 /9\(1[2-9]..[2-9]......\)$/ /\1/
rule 2 /9\(911\)$/ /\1/
rule 3 /9\([2-8]11\)$/ /\1/
!
!
voice translation-profile 10DigitTo+1
translate calling 11
translate called 11
!
voice translation-profile LOCALIZE
translate calling 2
!
voice translation-profile OutgoingToBandwidthSIP
translate calling 2
translate called 11
!
!
!
!
voice-card 0/4
dsp services dspfarm
no watchdog
!
!
interface GigabitEthernet0/0/0
description WAN SIP TRUNK TO BANDWIDTH
ip address 162.245.36.90 255.255.255.248
ip nat outside
ip access-group 101 in
ip access-group 101 out
negotiation auto
no cdp enable
!
interface GigabitEthernet0/0/1
description LAN
ip address 192.168.1.1 255.255.255.0
ip nat inside
negotiation auto
!
interface GigabitEthernet0/0/2
no ip address
negotiation auto
!
interface Service-Engine0/4/0
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
negotiation auto
!
!
ip nat inside source list 100 interface GigabitEthernet0/0/0 overload
!
!
!
dial-peer voice 1000 voip
description BANDWIDTH Incoming SIP and VOIP calls
session protocol sipv2
session target sip-server
incoming called-number .
voice-class codec 1
dtmf-relay rtp-nte sip-notify
no vad
!
dial-peer voice 4000 voip
description Local Dialing (10-Digit) to Bandwidth SIP Trunk
translation-profile outgoing OutgoingToBandwidthSIP
destination-pattern [2-9]..[2-9]......$
session protocol sipv2
session target ipv4:67.231.8.75
voice-class codec 1
dtmf-relay rtp-nte
no vad
!
dial-peer voice 4001 voip
description LD Dialing (11-Digit) to Bandwidth SIP Trunk
translation-profile outgoing OutgoingToBandwidthSIP
destination-pattern 1[2-9]..[2-9]......$
session protocol sipv2
session target ipv4:67.231.8.75
voice-class codec 1
dtmf-relay rtp-nte
no vad
!
dial-peer voice 2001 voip
description Incoming SIP Calls to CUCM Sub
translation-profile incoming LOCALIZE
destination-pattern [2-9]..[2-9]......$
session protocol sipv2
session target ipv4:192.168.1.20
voice-class codec 1
no voice-class sip outbound-proxy
dtmf-relay rtp-nte sip-notify
no vad
!
!
sip-ua
!
Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10
________________________________
From: Ryan Huff <ryanhuff at outlook.com<mailto:ryanhuff at outlook.com>>
Sent: Friday, August 10, 2018 10:04:54 PM
To: Benjamin Turner
Cc: Loren Hillukka; cisco-voip voyp list
Subject: Re: [cisco-voip] CUBE ignoring SDP responses from ITSP
Can I get a show tech or at least a show run?
Sent from my iPhone
On Aug 10, 2018, at 22:03, Benjamin Turner <benmturner at hotmail.com<mailto:benmturner at hotmail.com>> wrote:
Its an edge device no fw in place between cube and provider
Get Outlook for Android<https://aka.ms/ghei36>
________________________________
From: Ryan Huff <ryanhuff at outlook.com<mailto:ryanhuff at outlook.com>>
Sent: Friday, August 10, 2018 10:02:42 PM
To: Benjamin Turner
Cc: Loren Hillukka; cisco-voip voyp list
Subject: Re: [cisco-voip] CUBE ignoring SDP responses from ITSP
Is it a PA, ASA? Do you have inspection and ALG disabled on the firewall?
Sent from my iPhone
On Aug 10, 2018, at 22:00, Benjamin Turner <benmturner at hotmail.com<mailto:benmturner at hotmail.com>> wrote:
Sit in front of the fw
Get Outlook for Android<https://aka.ms/ghei36>
________________________________
From: Loren Hillukka <lchillukka at hotmail.com<mailto:lchillukka at hotmail.com>>
Sent: Friday, August 10, 2018 9:58:49 PM
To: Benjamin Turner
Cc: Ryan Huff; cisco-voip voyp list
Subject: Re: [cisco-voip] CUBE ignoring SDP responses from ITSP
Any firewall in place there? I have seen firewalls modify/drop just enough to make the gateway not recognize a response.
Sent from my iPhone
On Aug 10, 2018, at 8:35 PM, Benjamin Turner <benmturner at hotmail.com<mailto:benmturner at hotmail.com>> wrote:
Yes, and my LAN side too
Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10
________________________________
From: Ryan Huff <ryanhuff at outlook.com<mailto:ryanhuff at outlook.com>>
Sent: Friday, August 10, 2018 9:33:49 PM
To: Benjamin Turner
Cc: Brian Meade; cisco-voip voyp list
Subject: Re: [cisco-voip] CUBE ignoring SDP responses from ITSP
So do you have all the correct signaling addresses from the provider included in the ipv4 trusted list (SIP ACL)?
Sent from my iPhone
On Aug 10, 2018, at 21:31, Benjamin Turner <benmturner at hotmail.com<mailto:benmturner at hotmail.com>> wrote:
A debug ccsip messages never sees these responses. Here is the monitor capture from the cube:
-------------------------------------------------------------
# size timestamp source destination protocol
-------------------------------------------------------------
0 927 0.000000 162.245.36.90 -> 67.231.8.75 UDP
0000: 70E42202 57CB00B6 70707740 08004568 p.".W...ppw at ..Eh
0010: 03910000 0000FF11 A472A2F5 245A43E7 .........r..$ZC.
0020: 084BF7D6 13C4037D C3C2494E 56495445 .K.....}..INVITE
0030: 20736970 3A313935 34363338 39303635 sip:19546389065
1 363 0.043989 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 015DBFAA 40003311 731C43E7 084BA2F5 .].. at .3.s.C..K..
0020: 245A13C4 13C40149 21EA5349 502F322E $Z.....I!.SIP/2.
0030: 30203130 30205472 79696E67 0D0A5669 0 100 Trying..Vi
2 927 0.500026 162.245.36.90 -> 67.231.8.75 UDP
0000: 70E42202 57CB00B6 70707740 08004568 p.".W...ppw at ..Eh
0010: 03910001 0000FF11 A471A2F5 245A43E7 .........q..$ZC.
0020: 084BF7D6 13C4037D C1C2494E 56495445 .K.....}..INVITE
0030: 20736970 3A313935 34363338 39303635 sip:19546389065
3 363 0.544015 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 015DBFB1 40003311 731543E7 084BA2F5 .].. at .3.s.C..K..
0020: 245A13C4 13C40149 21EA5349 502F322E $Z.....I!.SIP/2.
0030: 30203130 30205472 79696E67 0D0A5669 0 100 Trying..Vi
4 927 1.500026 162.245.36.90 -> 67.231.8.75 UDP
0000: 70E42202 57CB00B6 70707740 08004568 p.".W...ppw at ..Eh
0010: 03910002 0000FF11 A470A2F5 245A43E7 .........p..$ZC.
0020: 084BF7D6 13C4037D BFC2494E 56495445 .K.....}..INVITE
0030: 20736970 3A313935 34363338 39303635 sip:19546389065
5 363 1.544015 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 015DC013 40003311 72B343E7 084BA2F5 .].. at .3.r.C..K..
0020: 245A13C4 13C40149 21EA5349 502F322E $Z.....I!.SIP/2.
0030: 30203130 30205472 79696E67 0D0A5669 0 100 Trying..Vi
6 439 2.289039 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 01A9C09D 40003311 71DD43E7 084BA2F5 .... at .3.q.C..K..
0020: 245A13C4 13C40195 CADC5349 502F322E $Z........SIP/2.
0030: 30203138 33205365 7373696F 6E205072 0 183 Session Pr
7 927 3.500026 162.245.36.90 -> 67.231.8.75 UDP
0000: 70E42202 57CB00B6 70707740 08004568 p.".W...ppw at ..Eh
0010: 03910003 0000FF11 A46FA2F5 245A43E7 .........o..$ZC.
0020: 084BF7D6 13C4037D CECA494E 56495445 .K.....}..INVITE
0030: 20736970 3A313935 34363338 39303635 sip:19546389065
8 439 3.544015 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 01A9C0D7 40003311 71A343E7 084BA2F5 .... at .3.q.C..K..
0020: 245A13C4 13C40195 CADC5349 502F322E $Z........SIP/2.
0030: 30203138 33205365 7373696F 6E205072 0 183 Session Pr
9 927 7.500026 162.245.36.90 -> 67.231.8.75 UDP
0000: 70E42202 57CB00B6 70707740 08004568 p.".W...ppw at ..Eh
0010: 03910004 0000FF11 A46EA2F5 245A43E7 .........n..$ZC.
0020: 084BF7D6 13C4037D C6CA494E 56495445 .K.....}..INVITE
0030: 20736970 3A313935 34363338 39303635 sip:19546389065
10 439 7.544015 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 01A9C17A 40003311 710043E7 084BA2F5 ...z at .3.q.C..K..
0020: 245A13C4 13C40195 CADC5349 502F322E $Z........SIP/2.
0030: 30203138 33205365 7373696F 6E205072 0 183 Session Pr
11 789 10.953998 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 0307C459 40003311 6CC343E7 084BA2F5 ...Y at .3.l.C..K..
0020: 245A13C4 13C402F3 36525349 502F322E $Z......6RSIP/2.
0030: 30203230 30204F4B 0D0A5669 613A2053 0 200 OK..Via: S
12 789 11.454023 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 0307C495 40003311 6C8743E7 084BA2F5 .... at .3.l.C..K..
0020: 245A13C4 13C402F3 36525349 502F322E $Z......6RSIP/2.
0030: 30203230 30204F4B 0D0A5669 613A2053 0 200 OK..Via: S
13 789 12.450026 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 0307C542 40003311 6BDA43E7 084BA2F5 ...B at .3.k.C..K..
0020: 245A13C4 13C402F3 36525349 502F322E $Z......6RSIP/2.
0030: 30203230 30204F4B 0D0A5669 613A2053 0 200 OK..Via: S
14 789 14.453016 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 0307C6B3 40003311 6A6943E7 084BA2F5 .... at .3.jiC..K..
0020: 245A13C4 13C402F3 36525349 502F322E $Z......6RSIP/2.
0030: 30203230 30204F4B 0D0A5669 613A2053 0 200 OK..Via: S
15 789 18.448027 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 0307C7FD 40003311 691F43E7 084BA2F5 .... at .3.i.C..K..
0020: 245A13C4 13C402F3 36525349 502F322E $Z......6RSIP/2.
0030: 30203230 30204F4B 0D0A5669 613A2053 0 200 OK..Via: S
16 789 22.452025 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 0307CA0B 40003311 671143E7 084BA2F5 .... at .3.g.C..K..
0020: 245A13C4 13C402F3 36525349 502F322E $Z......6RSIP/2.
0030: 30203230 30204F4B 0D0A5669 613A2053 0 200 OK..Via: S
17 789 26.447020 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 0307CC02 40003311 651A43E7 084BA2F5 .... at .3.e.C..K..
0020: 245A13C4 13C402F3 36525349 502F322E $Z......6RSIP/2.
0030: 30203230 30204F4B 0D0A5669 613A2053 0 200 OK..Via: S
18 789 30.451018 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 0307CE5F 40003311 62BD43E7 084BA2F5 ..._ at .3.b.C..K..
0020: 245A13C4 13C402F3 36525349 502F322E $Z......6RSIP/2.
0030: 30203230 30204F4B 0D0A5669 613A2053 0 200 OK..Via: S
19 396 34.456022 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 017ED190 40003311 611543E7 084BA2F5 .~.. at .3.a.C..K..
0020: 245A13C4 13C4016A B45A4259 45207369 $Z.....j.ZBYE si
0030: 703A3536 31323932 35323039 40313632 p:5612925209 at 162
20 396 34.948993 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 017ED1E2 40003311 60C343E7 084BA2F5 .~.. at .3.`.C..K..
0020: 245A13C4 13C4016A B45A4259 45207369 $Z.....j.ZBYE si
0030: 703A3536 31323932 35323039 40313632 p:5612925209 at 162
21 396 35.955005 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 017ED2D9 40003311 5FCC43E7 084BA2F5 .~.. at .3._.C..K..
0020: 245A13C4 13C4016A B45A4259 45207369 $Z.....j.ZBYE si
0030: 703A3536 31323932 35323039 40313632 p:5612925209 at 162
22 396 37.946994 67.231.8.75 -> 162.245.36.90 UDP
0000: 00B67070 7740046C 9D59F3D0 08004548 ..ppw at .l.Y....EH
0010: 017ED350 40003311 5F5543E7 084BA2F5 .~.P at .3._UC..K..
0020: 245A13C4 13C4016A B45A4259 45207369 $Z.....j.ZBYE si
0030: 703A3536 31323932 35323039 40313632 p:5612925209 at 162
<B25E410DF89143769AD0C60141937C05.png>
Benjamin Turner
Senior Collaboration Engineer
bturner at c3cloud.com<mailto:bturner at c3cloud.com>
Direct: 561.939.4002
<D419B95F598C431394BFB6C03BB940A4.png>
Come Meet With Us!
Oct 9-12
Channel Evolution / Philadelphia
Booth 530
Jan 29-Feb 1
ITEXPO / Fort Lauderdale
Booth 809
Apr 9-12
Channel Partners / Las Vegas
Booth 7043
<D419B95F598C431394BFB6C03BB940A4.png>
<F60F3978D7164ED69F2520FB0F125D27.jpg><http://www.c3cloud.com>
110 E Atlantic Avenue - Suite 420
Delray Beach, FL 33444
www.c3cloud.com<http://www.c3cloud.com>
Main: 561.939.4000
Help Desk: 877.247.4949 <144479115B534386BBD84134E78DB2A3.png><http://www.facebook.com/c3office> <10889A3292EE41C4A7127ACD0CF1DA7C.png><http://www.linkedin.com/company/cloud-computing-concepts-llc-c3-> <D04742E927C5495886C9A9206DEF7F91.png><http://www.twitter.com/c3office>
Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10
________________________________
From: cisco-voip <cisco-voip-bounces at puck.nether.net<mailto:cisco-voip-bounces at puck.nether.net>> on behalf of Benjamin Turner <benmturner at hotmail.com<mailto:benmturner at hotmail.com>>
Sent: Friday, August 10, 2018 9:26:35 PM
To: Brian Meade
Cc: cisco-voip voyp list
Subject: Re: [cisco-voip] CUBE ignoring SDP responses from ITSP
SIP is bound to the outside interface going to the ITSP:
bind control source-interface GigabitEthernet0/0/0
bind media source-interface GigabitEthernet0/0/0
* Tried to bind it to the dial-peer as well
No response from carrier
IP is for outbound Invite is my public IP configured on gi0/0/0
<DEB31912DBE84EA0A9775C00DA7EF37A.png>
Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10
From: Brian Meade<mailto:bmeade90 at vt.edu>
Sent: Friday, August 10, 2018 8:52 PM
Subject: Re: [cisco-voip] CUBE ignoring SDP responses from ITSP
What does your SIP bind config look like? What IP addresses do you see in the 1XX response from the carrier? What is the IP in the Contact header for the outbound invite?
On Fri, Aug 10, 2018 at 6:42 PM Benjamin Turner <benmturner at hotmail.com<mailto:benmturner at hotmail.com>> wrote:
Hey guys,
Ran out of options. I have a new CUBE deployment to Bandwidth.com<http://Bandwidth.com> SIP provider and I see the SDP invites going out the egress interface and running a monitor capture on the CUBE, I see the return 1xx responses but still not seeing them on the debug messages. So, CUCM sends a CANCEL after not receiving any reply’s from the CUBE. The kicker is the call still connects. Any help at this point will be great.
Thanks,
Ben
Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20180811/78c26617/attachment.html>
More information about the cisco-voip
mailing list