<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hmm, 8088 was the port associated with IPPhone Agent service. Phones
now figure out appropriate URL based on configuration; they don't
follow the URLs provided in the config file directly. See CSCtc19931.<br>
<br>
/Wes<br>
<br>
On Tuesday, March 23, 2010 4:38:09 PM, Ed Leatherman
<a class="moz-txt-link-rfc2396E" href="mailto:ealeatherman@gmail.com"><ealeatherman@gmail.com></a> wrote:<br>
<blockquote
cite="mid:94a1afde1003231338t84126afn220019d86bfa561a@mail.gmail.com"
type="cite">
<pre wrap="">URL's all look "correct" in the xml file.
Think I found the problem, Ryan was right at first I believe.
I was able to get a packet cap of a phone trying to initiate this
connection, and directly before that it had a voice mail left to it,
and Unity tried to initiate the phone view operation on the phone.
Phone sent an auth request to the auth URL, it was denied, and in the
reply back the authentication server specified a URL <a class="moz-txt-link-freetext" href="http://pub:8088">http://pub:8088</a>.
The phone immediately tried to connect to port 8088 on the publisher.
Pub replied with a Reset packet and then ignored further attempts to
connect.
We've had IPCC setup as the authentication server for awhile now, IIRC
in the past we had to have this setup for IP Phone Agent to work
properly. Perhaps this is no longer the case.
2 questions i'm going to have to figure out - A) can I switch the auth
URL back to the normal one for the publisher and not break anything,
and B) why did Unity try to initiate phone view, when the
phone/account isn't setup for that feature.
Thanks for all the suggestions everyone.
On Tue, Mar 23, 2010 at 10:30 AM, Wes Sisk <a class="moz-txt-link-rfc2396E" href="mailto:wsisk@cisco.com"><wsisk@cisco.com></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Ed,
You might fetch the phone's config file manually and check the URL's
provided to the phones in the config file.
tftp -i <cm_tftp> get SEP<mac>.cnf.xml
/Wes
On Monday, March 22, 2010 2:42:40 PM, Ed Leatherman <a class="moz-txt-link-rfc2396E" href="mailto:ealeatherman@gmail.com"><ealeatherman@gmail.com></a>
wrote:
I got a RSPAN on one of the phones that had a number of hits on the
ACL earlier today - maybe I can catch it in the act. Only service
provisioned on the phone is FastDials, which is pointing at <pub
IP>:8080.
On Mon, Mar 22, 2010 at 1:45 PM, Wes Sisk <a class="moz-txt-link-rfc2396E" href="mailto:wsisk@cisco.com"><wsisk@cisco.com></a> wrote:
I don't believe port 8088 is open in the firewall by default. I also don't
see anything listening on 8088.
</pre>
</blockquote>
<pre wrap=""><!---->
</pre>
</blockquote>
<br>
</body>
</html>