is there a way to specify the ports that IPC, and 7961 phones use for there RTP stream?<div><br></div><div>I tested this morning with full access on the Anyconnect connection and it worked. So I'm guessing it has to do with the anyconnect ACL we use:</div>
<div><br></div><div><div>15 elements; name hash: 0x1857c43a (dynamic)</div><div> line 3 extended permit udp any any eq tftp </div><div> line 4 extended permit tcp any any eq 2000 </div><div> line 5 extended permit udp any any eq 16384 </div>
<div> line 6 extended permit udp any any eq 16385 </div><div> line 7 extended permit udp any any eq 16386 </div><div> line 8 extended permit tcp any host 10.0.2.200 eq www </div><div> line 9 extended permit tcp any host 10.0.2.199 eq www </div>
<div> line 10 extended permit tcp any host 10.0.2.199 eq 8080 </div><div> line 11 extended permit tcp any host 10.0.2.200 eq 8080 </div><div> line 15 extended deny tcp any any</div><div><br></div><div>Any idea what I'm missing? This is the ACL I inherited from the previous person and it seemed to have worked, but since adding the Lan to Lan IPsec tunnel, I started having problems with it.</div>
<div><br></div><div>topology is IPC -- anyconnect -- ASA -- IPSEC L2L Tunnel -- 881 (router) -- 7961</div><div><br></div><div>TIA</div><div><br></div><div>Scott</div><br><div class="gmail_quote">On Thu, Dec 8, 2011 at 5:40 AM, Wes Sisk <span dir="ltr"><<a href="mailto:wsisk@cisco.com">wsisk@cisco.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div style="word-wrap:break-word">It's difficult to say with the information available here. This could just be an IP routing issue. TAC case? CM SDI traces. Packet Capture if available.<div>
<span class="HOEnZb"><font color="#888888"><div><br></div><div>/wes</div></font></span><div><div class="h5"><div><br><div><div>On Dec 7, 2011, at 6:24 PM, Scott Voll wrote:</div><br>There was some talk a week or two ago, about ASA compatibility with CM and having to keep them lock step. Am I running into this kind of issue? ASA 8.4.2 / CM 7.1.5?<div>
<br></div><div>Scott<br><br><div class="gmail_quote">
On Wed, Dec 7, 2011 at 12:13 PM, Wes Sisk <span dir="ltr"><<a href="mailto:wsisk@cisco.com" target="_blank">wsisk@cisco.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
SCCP devices advertise capabilities on registration. Those capabilities are never renegotiated unless video is added/removed/invoked.<br>
<br>
A little insight here -<br>
CM tells the phones the codec it *should* receive in the OpenReceiveChannel sent to the phone. However, the phones do not trust that. The phone figures out the codec it is receiving based on the first few RTP packets received.<br>
<br>
If you are seeing ?? under codec I would be more suspecting of RTP not arriving at the phone.<br>
<br>
<br>
SIP and H.323 advertise codecs on a per-call basis. MGCP advertises codecs once during registration.<br>
<br>
Regards,<br>
Wes<br>
<div><div><br>
On Dec 7, 2011, at 2:30 PM, Scott Voll wrote:<br>
<br>
can anyone tell me how Codec negotiation works? Specifically what ports it works on?<br>
<br>
I have telecommuters using IPC 7.0.5 connecting with anyconnect (2.5) connecting to an ASA at the head end. Calls to inside 7961's work fine.<br>
<br>
but I also have 881's doing site to site VPN with 7961 hanging off the back coming into the same ASA. That phone can call internal 7961 also.<br>
<br>
The problem comes from IPC telecommuters calling 7961's behind the 881's. When you place the call, it rings, they answer, the timer increments up. But with a ?? it does not show a Codec. It looks like we never negotiate the Codec.<br>
<br>
is this a Version problem? CM is 7.1.5 and ASA is 8.4.2. I THINK it worked with ASA version 8.2.4 (but I Can't downgrade to double check).<br>
<br>
Any other ideas?<br>
<br>
I have a TAC case with the ASA team and they are like ya, the vpn connections work.... open a new ticket with the voice team. And before I did so, I figured you guys are really smart and probably have deal with these kinds of issues.<br>
<br>
<br>
Scott<br>
</div></div>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br>
</blockquote></div><br></div>
</div><br></div></div></div></div></div></blockquote></div><br></div>