I would guess its something on your network causing SCCP packets to get dropped or delayed. Phone tries to register over to another server etc at that point and puts messages in your event viewer. If the user is on a call while the phone is trying to re-register and they try to use some feature like hold or transfer, it will drop the call since there is no server to facilitate the action.
<br><br>Example, we had a PIX firewall messing with the sccp traffic at one site, phone reset/re-registered constantly until we figured what was causing it.<br><br><div><span class="gmail_quote">On 8/16/07, <b class="gmail_sendername">
omar parihuana</b> <<a href="mailto:omar.parihuana@gmail.com">omar.parihuana@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div>Hi List,</div>
<div> </div>
<div>Since two weeks I have issues with my IP Phones, after check CCM 4.0 I saw a lot of errors by device unregistered, and my users are complain because the calls in course are dropped. I don't know why the IP Phones unregistered, pls any suggestions... thanks.
</div>
<div> </div>
<div>My CCM logs are:</div>
<div> </div><font face="Courier New" size="2">
</font><p><font face="Courier New" size="2">Event Type: Error</font></p>
<p><font face="Courier New" size="2">Event Source: Cisco CallManager</font></p>
<p><font face="Courier New" size="2">Event Category: None</font></p>
<p><font face="Courier New" size="2">Event ID: 3</font></p>
<p><font face="Courier New" size="2">Date: 16/08/2007</font></p>
<p><font face="Courier New" size="2">Time: 10:25:04 a.m.</font></p>
<p><font face="Courier New" size="2">User: N/A</font></p>
<p><font face="Courier New" size="2">Computer: PECMA01</font></p>
<p><font face="Courier New" size="2">Description:</font></p>
<p><font face="Courier New" size="2">Error: DeviceUnregistered - Device unregistered.</font></p>
<p><font face="Courier New" size="2">Device name.: SEP0013605818CA</font></p>
<p><font face="Courier New" size="2">Device IP address.: <a href="http://10.20.0.132" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">10.20.0.132</a></font></p>
<p><font face="Courier New" size="2">Device type. [Optional]: 30007</font></p>
<p><font face="Courier New" size="2">Device description [Optional].: Patricia Verastegui 2237</font></p>
<p><font face="Courier New" size="2">Reason Code [Optional].: 8</font></p>
<p><font face="Courier New" size="2">App ID: Cisco CallManager</font></p>
<p><font face="Courier New" size="2">Cluster ID: PECMA01-Cluster</font></p>
<p><font face="Courier New" size="2">Node ID: <a href="http://10.20.0.16" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">10.20.0.16</a></font></p>
<p><font face="Courier New" size="2">Explanation: A device that has previously registered with Cisco CallManager</font></p>
<p><font face="Courier New" size="2">has unregistered. This event may be issued as part of normal unregistration</font></p>
<p><font face="Courier New" size="2">event or due to some other reason such as loss of keepalives.</font></p>
<p><font face="Courier New" size="2">Recommended Action: No action is required if unregistration of this device</font></p>
<p><font face="Courier New" size="2">was expected..</font></p>
<p><font face="Courier New" size="2"> </font></p>
<p><font face="Courier New" size="2"> </font></p>
<p><font face="Courier New" size="2">Event Type: Error</font></p>
<p><font face="Courier New" size="2">Event Source: Cisco CallManager</font></p>
<p><font face="Courier New" size="2">Event Category: None</font></p>
<p><font face="Courier New" size="2">Event ID: 3</font></p>
<p><font face="Courier New" size="2">Date: 16/08/2007</font></p>
<p><font face="Courier New" size="2">Time: 10:24:52 a.m.</font></p>
<p><font face="Courier New" size="2">User: N/A</font></p>
<p><font face="Courier New" size="2">Computer: PECMA01</font></p>
<p><font face="Courier New" size="2">Description:</font></p>
<p><font face="Courier New" size="2">Error: DeviceUnregistered - Device unregistered.</font></p>
<p><font face="Courier New" size="2">Device name.: SEP00131A41940B</font></p>
<p><font face="Courier New" size="2">Device IP address.: <a href="http://10.20.1.114" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">10.20.1.114</a></font></p>
<p><font face="Courier New" size="2">Device type. [Optional]: 30007</font></p>
<p><font face="Courier New" size="2">Device description [Optional].: Stephanie Kilimajer 2215</font></p>
<p><font face="Courier New" size="2">Reason Code [Optional].: 8</font></p>
<p><font face="Courier New" size="2">App ID: Cisco CallManager</font></p>
<p><font face="Courier New" size="2">Cluster ID: PECMA01-Cluster</font></p>
<p><font face="Courier New" size="2">Node ID: <a href="http://10.20.0.16" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">10.20.0.16</a></font></p>
<p><font face="Courier New" size="2">Explanation: A device that has previously registered with Cisco CallManager</font></p>
<p><font face="Courier New" size="2">has unregistered. This event may be issued as part of normal unregistration</font></p>
<p><font face="Courier New" size="2">event or due to some other reason such as loss of keepalives.</font></p>
<p><font face="Courier New" size="2">Recommended Action: No action is required if unregistration of this device</font></p>
<p><font face="Courier New" size="2">was expected..</font></p>
<p><font face="Courier New" size="2"> </font></p>
<p><font face="Courier New" size="2"> </font></p>
<p><font face="Courier New" size="2">Event Type: Error</font></p>
<p><font face="Courier New" size="2">Event Source: Cisco CallManager</font></p>
<p><font face="Courier New" size="2">Event Category: None</font></p>
<p><font face="Courier New" size="2">Event ID: 3</font></p>
<p><font face="Courier New" size="2">Date: 16/08/2007</font></p>
<p><font face="Courier New" size="2">Time: 10:24:34 a.m.</font></p>
<p><font face="Courier New" size="2">User: N/A</font></p>
<p><font face="Courier New" size="2">Computer: PECMA01</font></p>
<p><font face="Courier New" size="2">Description:</font></p>
<p><font face="Courier New" size="2">Error: DeviceTransientConnection - Transient connection attempt.</font></p>
<p><font face="Courier New" size="2">Connecting Port: 0</font></p>
<p><font face="Courier New" size="2">Device name [Optional].:</font></p>
<p><font face="Courier New" size="2">Device IP address.: <a href="http://10.20.20.45" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">10.20.20.45</a></font></p>
<p><font face="Courier New" size="2">Device type. [Optional]: 255</font></p>
<p><font face="Courier New" size="2">Reason Code [Optional].: 6</font></p>
<p><font face="Courier New" size="2">App ID: Cisco CallManager</font></p>
<p><font face="Courier New" size="2">Cluster ID: PECMA01-Cluster</font></p>
<p><font face="Courier New" size="2">Node ID: <a href="http://10.20.0.16" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">10.20.0.16</a></font></p>
<p><font face="Courier New" size="2">Explanation: A connection was established and immediately dropped before</font></p>
<p><font face="Courier New" size="2">completing registration. Incomplete registration may indicate a device is</font></p>
<p><font face="Courier New" size="2">rehoming in the middle of registration. The alarm could also indicate a</font></p>
<p><font face="Courier New" size="2">device misconfiguration, database error, or an illegal/unknown device</font></p>
<p><font face="Courier New" size="2">trying to attempt a connection.</font></p>
<p><font face="Courier New" size="2">Recommended Action: No action is required if this event was issued as a</font></p>
<p><font face="Courier New" size="2">result of a normal device rehome..</font></p>
<p><font face="Courier New" size="2"> </font></p>
<p><font face="Courier New" size="2"> </font></p>
<p><font face="Courier New" size="2"> </font></p>
<p><font face="Courier New" size="2">Event Type: Error</font></p>
<p><font face="Courier New" size="2">Event Source: Cisco CallManager</font></p>
<p><font face="Courier New" size="2">Event Category: None</font></p>
<p><font face="Courier New" size="2">Event ID: 3</font></p>
<p><font face="Courier New" size="2">Date: 16/08/2007</font></p>
<p><font face="Courier New" size="2">Time: 10:24:29 a.m.</font></p>
<p><font face="Courier New" size="2">User: N/A</font></p>
<p><font face="Courier New" size="2">Computer: PECMA01</font></p>
<p><font face="Courier New" size="2">Description:</font></p>
<p><font face="Courier New" size="2">Error: DeviceUnregistered - Device unregistered.</font></p>
<p><font face="Courier New" size="2">Device name.: SEP001360581428</font></p>
<p><font face="Courier New" size="2">Device IP address.: <a href="http://10.20.1.164" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">10.20.1.164</a></font></p>
<p><font face="Courier New" size="2">Device type. [Optional]: 30007</font></p>
<p><font face="Courier New" size="2">Device description [Optional].: Ursula Quevedo 1897</font></p>
<p><font face="Courier New" size="2">Reason Code [Optional].: 9</font></p>
<p><font face="Courier New" size="2">App ID: Cisco CallManager</font></p>
<p><font face="Courier New" size="2">Cluster ID: PECMA01-Cluster</font></p>
<p><font face="Courier New" size="2">Node ID: <a href="http://10.20.0.16" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">10.20.0.16</a></font></p>
<p><font face="Courier New" size="2">Explanation: A device that has previously registered with Cisco CallManager</font></p>
<p><font face="Courier New" size="2">has unregistered. This event may be issued as part of normal unregistration</font></p>
<p><font face="Courier New" size="2">event or due to some other reason such as loss of keepalives.</font></p>
<p><font face="Courier New" size="2">Recommended Action: No action is required if unregistration of this device</font></p>
<p><font face="Courier New" size="2">was expected..</font></p>
<p><font face="Courier New" size="2"> </font></p>
<p><font face="Courier New" size="2"> </font></p>
<p><font face="Courier New" size="2"> </font></p>
<p><font face="Courier New" size="2">Event Type: Error</font></p>
<p><font face="Courier New" size="2">Event Source: Cisco CallManager</font></p>
<p><font face="Courier New" size="2">Event Category: None</font></p>
<p><font face="Courier New" size="2">Event ID: 3</font></p>
<p><font face="Courier New" size="2">Date: 16/08/2007</font></p>
<p><font face="Courier New" size="2">Time: 10:23:54 a.m.</font></p>
<p><font face="Courier New" size="2">User: N/A</font></p>
<p><font face="Courier New" size="2">Computer: PECMA01</font></p>
<p><font face="Courier New" size="2">Description:</font></p>
<p><font face="Courier New" size="2">Error: DeviceTransientConnection - Transient connection attempt.</font></p>
<p><font face="Courier New" size="2">Connecting Port: 2000</font></p>
<p><font face="Courier New" size="2">Device name [Optional].: SEP0012D9167518</font></p>
<p><font face="Courier New" size="2">Device IP address.: <a href="http://10.20.1.228" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">10.20.1.228</a></font></p>
<p><font face="Courier New" size="2">Device type. [Optional]: 30007</font></p>
<p><font face="Courier New" size="2">Reason Code [Optional].: 1</font></p>
<p><font face="Courier New" size="2">App ID: Cisco CallManager</font></p>
<p><font face="Courier New" size="2">Cluster ID: PECMA01-Cluster</font></p>
<p><font face="Courier New" size="2">Node ID: <a href="http://10.20.0.16" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">10.20.0.16</a></font></p>
<p><font face="Courier New" size="2">Explanation: A connection was established and immediately dropped before</font></p>
<p><font face="Courier New" size="2">completing registration. Incomplete registration may indicate a device is</font></p>
<p><font face="Courier New" size="2">rehoming in the middle of registration. The alarm could also indicate a</font></p><font face="Courier New" size="2">
</font><p><font face="Courier New" size="2">device misconfiguration, database error, or an illegal/unknown device</font></p>
<p><font face="Courier New" size="2">trying to attempt a connection.</font></p>
<p><font face="Courier New" size="2">Recommended Action: No action is required if this event was issued as a</font></p>
<p><font face="Courier New" size="2">result of a normal device rehome..</font></p>
<p></p>
<p> </p>
<div><br clear="all"><br>-- <br>Omar E.P.T<br> </div>
<br>_______________________________________________<br>cisco-voip mailing list<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">
https://puck.nether.net/mailman/listinfo/cisco-voip</a><br></blockquote></div><br><br clear="all"><br>-- <br>Ed Leatherman<br>Senior Voice Engineer<br>West Virginia University<br>Telecommunications and Network Operations