<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Verdana; font-size: 10pt; color: #000000'>Here is the original syslog output:<br><br>Dec 1 13:53:27 dist-mckn.net.uoguelph.ca 46161: Dec 1 13:53:26.957 EST: %SEC-6-IPACCESSLOGDP: list voice_endpoints_out denied icmp vg224.eth.0.ipaddr -> my.ip.phone.ipaddr (3/3), 1 packet<br>Dec 1 13:53:52 dist-mckn.net.uoguelph.ca 46162: Dec 1 13:53:51.354 EST: %SEC-6-IPACCESSLOGP: list voice_endpoints_out denied udp vg224.loop.back.ipaddr(19441) -> my.ip.phone.ipaddr(4001), 1 packet<br><br><span>I'm going to try and add port 4001 and see how that helps and then maybe add the ping, ahem, I mean ICMP somehow.<br><br>Any more advice would be helpful.<br><br><span name="x"></span><br></span><br><hr id="zwchr"><b>From: </b>"Wes Sisk" <wsisk@cisco.com><br><b>To: </b>"Lelio Fulgenzi" <lelio@uoguelph.ca><br><b>Cc: </b>"Cisco VoIPoE List" <cisco-voip@puck.nether.net><br><b>Sent: </b>Thursday, December 1, 2011 6:04:05 PM<br><b>Subject: </b>Re: [cisco-voip] testing new ACLs: VG224 issues<br><br>udp w.x.y.z(19441) -> i.j.k.l(4001)<div><br></div><div>router tries to sent phone RTCP. phones do not support RTCP.</div><div><br></div><div>icmp a.b.c.d -> i.j.k.l </div><div><br></div><div>are you positive on this direction and the explanations of addresses? It would fit better for this to be the ICMP port unreachable coming from the phone back to the router.</div><div><br></div><div>/wes</div><div><br><div><div>On Dec 1, 2011, at 4:23 PM, Lelio Fulgenzi wrote:</div><br class="Apple-interchange-newline"><div><div style="font-family: Verdana; font-size: 10pt; color: rgb(0, 0, 0); ">So the VG224 is trying to connect to to the IP phone to do RTCP?<span><br><br><span></span>---<br>Lelio Fulgenzi, B.A.<br>Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1<br>(519) 824-4120 x56354 (519) 767-1060 FAX (ANNU)<br>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>Cooking with unix is easy. You just sed it and forget it.<span class="Apple-converted-space"> </span><br> - LFJ (with apologies to Mr. Popeil)<br><span></span><br></span><br><hr id="zwchr"><b>From:<span class="Apple-converted-space"> </span></b>"Wes Sisk" <<a href="mailto:wsisk@cisco.com" target="_blank">wsisk@cisco.com</a>><br><b>To:<span class="Apple-converted-space"> </span></b>"Lelio Fulgenzi" <<a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a>><br><b>Cc:<span class="Apple-converted-space"> </span></b>"Cisco VoIPoE List" <<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a>><br><b>Sent:<span class="Apple-converted-space"> </span></b>Thursday, December 1, 2011 4:20:51 PM<br><b>Subject:<span class="Apple-converted-space"> </span></b>Re: [cisco-voip] testing new ACLs: VG224 issues<br><br>CM does and phones do not do RTCP. However, it looks like CUCM may default the RTCP port to 4001 during some capabilities and port exchanges.<div><br><div><div>On Dec 1, 2011, at 3:46 PM, Lelio Fulgenzi wrote:</div><br class="Apple-interchange-newline"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; font-size: medium; "><span class="Apple-style-span" style="font-family: Verdana; font-size: 13px; ">What is UDP traffic destined to 4001 all about?<br></span></span></div><br></div></div></div><br class="Apple-interchange-newline"></div><br></div></div></body></html>