<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Scott,<br>
<br>
Contact Unity team to enable traces so they can find the looping
handler(s) on the next occurrence.<br>
<br>
/Wes<br>
<br>
Scott Voll wrote:
<blockquote
style="border: medium none ! important; padding-left: 0px ! important; padding-right: 0px ! important; margin-left: 0px ! important; margin-right: 0px ! important;"
cite="mid:AANLkTimtsZB=RsjJ6aQ-5kxASTeTFrzv_-YpSWyVygyo@mail.gmail.com"
type="cite">Wes--
<div><br>
</div>
<div>So this is the second time in two weeks this has happened.</div>
<div><br>
</div>
<div>The next time I will do a capture on the ASA and open a ticket
with the ASA team and work backwards from there. All I know (from now
past experience) is reset port, traffic goes back down to normal levels.</div>
<div><br>
</div>
<div>--Scott<br>
<br>
<div class="gmail_quote">On Tue, Dec 28, 2010 at 12:08 PM, Wes Sisk <span
dir="ltr"><<a moz-do-not-send="true" href="mailto:wsisk@cisco.com">wsisk@cisco.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div bgcolor="#ffffff" text="#000000">A quick chat between the CM
and Unity teams -<br>
We can't figure out how you get 5Mbps in this scenario unless a network
loop and possibly ICMP unreachables with full payload instead of
headers.<br>
<br>
That said the root of the problem sounds like Unity Connection not
hanging up. Unity Connection does not understand call preservation as
best we can tell - i.e. UC does not take any action when CM sends "temp
fail", "cm down features disabled", softkey updates, callstate update,
or any other indication of call preservation.<br>
<br>
It is a pretty common issue for systems to be configured with a
greeting loop. A greeting loop will loop through greetings if user ever
stops providing input. This is essentially what happens with call
preservation. <br>
<br>
The Unity team is on board to look for a greeting loop to help
automatically terminate the call.<br>
<br>
This would not explain how the ASA reached 5Mbps on the inside
interface. That investigation would start with packet captures at the
ASA and work backward from there. Multiple people posited, and I tend
to agree, that a network loop must be involved somehow. Some napkin
math:<br>
5Mbps = 39 G.711 calls @ 128kbps<br>
if route to remote PC goes down there will be ICMP unreachables
generated. there are usually header only but if they contained full
payload somehow then ICMP would account for 50% of traffic<br>
5Mbps = (19 G711 calls @ 128kbps)*2 if ICMP *every* RTP packet<br>
<br>
Even this doesn't add up for 1 single user. Possibly if that user were
in a conference with 18 other WAN users? It just gets more
hypothetical from there. Packet captures on ASA would show traffic,
source, and headers to look for loops.<br>
<br>
/Wes<br>
<br>
Scott Voll wrote:
<blockquote
style="border: medium none ! important; padding-left: 0px ! important; padding-right: 0px ! important; margin-left: 0px ! important; margin-right: 0px ! important;"
type="cite">
<div>
<div class="h5">
<p class="MsoNormal"><font face="Verdana, sans-serif">Puckers--</font></p>
<p class="MsoNormal"><span style="font-size: 10pt;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt;">I’m
not sure how to open a ticket with Cisco on this as so much is at play.</span></p>
<p class="MsoNormal"><span style="font-size: 10pt;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt;">ASA
running 8.2.4.<span> </span>anyconnect client running
2.5.1024.<span> </span>IPC 7.0.5.1 Unity connection
7.1.5.32018-24.<span> </span>CM 7.1.5.31900-3.</span></p>
<p class="MsoNormal"><span style="font-size: 10pt;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt;">Telecommuter
is VPN’d in and using their softphone.<span> </span>Not sure what
happens… Disconnect possibly.<span> </span>But
Locks a UC port and streams large amounts
of traffic to the ASA on the inside.<span> </span>Only way to clear
it is to find the port that is locked in
RTMT then go
to UC and restart port.<span> </span>Then it stops
streaming traffic.<span> </span>Where do I start with
opening a ticket? ASA group, CM group, or the UC group?</span></p>
<p class="MsoNormal"><span style="font-size: 10pt;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt;">See
Graph of the issue on the ASA attached.</span></p>
<p class="MsoNormal"><span style="font-size: 10pt;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt;">Thanks</span></p>
<p class="MsoNormal"><span style="font-size: 10pt;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt;">Scott</span></p>
</div>
</div>
<pre><hr size="4" width="90%"><div class="im">
_______________________________________________
cisco-voip mailing list
<a moz-do-not-send="true" href="mailto:cisco-voip@puck.nether.net"
target="_blank">cisco-voip@puck.nether.net</a>
<a moz-do-not-send="true"
href="https://puck.nether.net/mailman/listinfo/cisco-voip"
target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a>
</div></pre>
</blockquote>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
</body>
</html>