<html><head><base href="x-msg://227/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">If you're only doing VPN and not NAT then I *think* you can disable SCCP and SIP inspection. So long as you are permitting traffic otherwise from the lower security interface to higher security interface.<div><br></div><div>Option #2 - Update ASA to latest version. CUCM and ASA have to upgrade in lock step when inspection is used.<br><div><br></div><div>Regards,</div><div>Wes</div><div><br></div><div><div><div>On Nov 22, 2011, at 10:55 AM, Matthew Loraditch wrote:</div><br class="Apple-interchange-newline"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div fpstyle="1" ocsi="0" style="word-wrap: break-word; "><div style="direction: ltr; font-family: Tahoma; color: rgb(0, 0, 0); font-size: 10pt; "><div style="margin-top: 0px; margin-bottom: 0px; ">Wes,</div><div style="margin-top: 0px; margin-bottom: 0px; ">That may be, I've got an ASA on either end of the VPN. The phone did work when it was used by another use in the main office before.</div><div style="margin-top: 0px; margin-bottom: 0px; ">I've had to change SCCP inspection before on VPNs to make things work for remote phones in some scenarios, but didn't think about SIP. I will check it out.</div><div><p style="margin-top: 0px; margin-bottom: 0px; "> </p><div style="font-family: Tahoma; font-size: 13px; "><div><font size="2" face="Tahoma"><div style="margin-top: 0px; margin-bottom: 0px; "><span style="font-family: Calibri, sans-serif; color: rgb(36, 64, 97); font-size: 11pt; "><strong>Matthew Loraditch, CCVP, CCNA, CCDA</strong><br>1965 Greenspring Drive</span></div><div style="margin-top: 0px; margin-bottom: 0px; "><span style="font-family: Calibri, sans-serif; color: rgb(36, 64, 97); font-size: 11pt; "><font size="2" face="calibri">Timonium, MD 21093</font><br><a tabindex="0" href="mailto:support@heliontechnologies.com" target=""><span style="color: rgb(36, 64, 97); ">support@heliontechnologies.com</span></a><br>(p) (410) 252-8830<br>(F) (443) 541-1593<br><br>Visit us at<span class="Apple-converted-space"> </span><a tabindex="0" href="http://www.heliontechnologies.com" target="_blank"><span style="color: rgb(36, 64, 97); ">www.heliontechnologies.com</span></a><span class="Apple-converted-space"> </span><br>Support Issue? Email<span class="Apple-converted-space"> </span><a tabindex="0" href="mailto:support@heliontechnologies.com" target=""><span style="color: rgb(36, 64, 97); ">support@heliontechnologies.com</span></a><span class="Apple-converted-space"> </span>for fast assistance!</span></div></font></div></div></div><div style="font-family: 'Times New Roman'; color: rgb(0, 0, 0); font-size: 16px; "><hr tabindex="-1"><div id="divRpF486322" style="direction: ltr; "><font color="#000000" size="2" face="Tahoma"><b>From:</b><span class="Apple-converted-space"> </span>Wes Sisk [wsisk@cisco.com]<br><b>Sent:</b><span class="Apple-converted-space"> </span>Tuesday, November 22, 2011 9:44 AM<br><b>To:</b><span class="Apple-converted-space"> </span>Matthew Loraditch<br><b>Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br><b>Subject:</b><span class="Apple-converted-space"> </span>Re: [cisco-voip] 9971 Video Failing/Call Failing<br></font><br></div><div></div><div>I've worked on something similar before. We found a device doing SIP inspection along the path and causing problems. Specifically that device did not like how CM/Phones used 2 different TCP sessions. One for sending calls and one for receiving calls. Given this is a remote user is there any SIP or network inspection device along the path? If the same (or similar phone) is on the HQ network or somewhere closer to CM do video calls work?<div><br></div><div>Regards,</div><div>Wes<br><div><br><div><div>On Nov 21, 2011, at 5:02 PM, Matthew Loraditch wrote:</div><br class="Apple-interchange-newline"><span class="Apple-style-span" style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; border-collapse: separate; font: normal normal normal medium/normal Helvetica; white-space: normal; orphans: 2; word-spacing: 0px; "><div lang="EN-US"><div class="WordSection1"><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: Calibri, sans-serif; font-size: 11pt; ">We sent a remote user a 9971 with camera so that his boss could see him when they talked. User is connected. He can call anyone, we cannot call him, if he calls other 9971s video doesn’t work. Phone is for now in the same region/DP as all the other phones involved so codecs shouldn’t be an issue. I am looking at traces in Translator X and don’t see anything obvious but am not 100% sure what to look for or that those are the logs I should be viewing.</div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: Calibri, sans-serif; font-size: 11pt; "> </div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: Calibri, sans-serif; font-size: 11pt; ">For once this isn’t for a customer who needs it now so I figured I’d try to hone some of my lackluster trace reading skills on this.</div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: Calibri, sans-serif; font-size: 11pt; "> </div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: Calibri, sans-serif; font-size: 11pt; ">Thanks in advance for any insight.</div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: Calibri, sans-serif; font-size: 11pt; "> </div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: Calibri, sans-serif; font-size: 11pt; "><span style="font-family: Arial, sans-serif; font-size: 10pt; "></span> </div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: Calibri, sans-serif; font-size: 11pt; "><b><span style="color: black; ">Matthew Loraditch, CCVP, CCNA, CCDA</span></b><span style="color: black; "><br>1965 Greenspring Drive</span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: Calibri, sans-serif; font-size: 11pt; "><span style="color: black; ">Timonium, MD 21093<span class="Apple-converted-space"> </span><br><a href="mailto:support@heliontechnologies.com" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: black; ">support@heliontechnologies.com</span></a><br>(p) (410) 252-8830<br>(F) (443) 541-1593<br><br>Visit us at<span class="Apple-converted-space"> </span><a href="http://www.heliontechnologies.com/" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: black; ">www.heliontechnologies.com</span></a><span class="Apple-converted-space"> </span><br>Support Issue? Email<span class="Apple-converted-space"> </span><a href="mailto:support@heliontechnologies.com" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: black; ">support@heliontechnologies.com</span></a><span class="Apple-converted-space"> </span>for fast assistance!</span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: Calibri, sans-serif; font-size: 11pt; "> </div></div>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" target="_blank" style="color: blue; text-decoration: underline; ">cisco-voip@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank" style="color: blue; text-decoration: underline; ">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br></div></span></div><br></div></div></div></div></div></div></span><br class="Apple-interchange-newline"></div><br></div></div></body></html>