<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<base href="x-msg://464/"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">In my case this was an option, because the servers wasn’t sending out ITL’s. Wes, has there been any movement on the Cisco front as far as a way to wipe the
ITL/CTL from Callmanager? <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">Dennis Heim<br>
Senior Engineer (Unified Communications)<br>
CDW Advanced Technology Services<br>
10610 9<sup>th</sup> Place<br>
Bellevue, WA 98004<br>
<br>
425.310.5299 Single Number Reach (WA)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">317.569.4255 Single Number Reach (IN)<br>
317.569.4201 Fax</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">
<br>
<a href="mailto:dennis.heim@cdw.com"><span style="font-size:10.0pt">dennis.heim@cdw.com</span></a></span><u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:blue"><br>
</span></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><a href="http://www.cdw.com/content/solutions/unified-communications/">cdw.com/content/solutions/unified-communications/</a><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Wes Sisk [mailto:wsisk@cisco.com]
<br>
<b>Sent:</b> Friday, March 02, 2012 1:50 PM<br>
<b>To:</b> Dennis Heim<br>
<b>Cc:</b> Justin Steinberg; cisco voip<br>
<b>Subject:</b> Re: [cisco-voip] ITL issue - incomplete ITL files cached on TFTP ?<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We are still working through the details but deleting or regenerating callmanager.pem or the cert used to sign tftp configuration files has definitely led to the need to manually delete ITL files.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Be very careful when deleting or regenerating certificates on 8.x with security by default:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">CSCto51228 SBD: OS CLI does not give enough warning about ITL certificate regen<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">/wes<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Mar 2, 2012, at 2:34 PM, Dennis Heim wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I ran into something similar with an upgrade a week ago. 3 ccm’s total. The pub and sub were fine. I was getting the host not found, but only on phone connected
to sub2. I found that sub2’s phones were not getting ITL’s. I did a “Show itl” from the command line, and it said ITL verification failed. I deleted the callmanager.pem under certificates, and reset the phones and ITL’s were being built correctly.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">Dennis Heim<br>
Senior Engineer (Unified Communications)<br>
CDW Advanced Technology Services<br>
10610 9<sup>th</sup><span class="apple-converted-space"> </span>Place<br>
Bellevue, WA 98004<br>
<br>
425.310.5299 Single Number Reach (WA)</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">317.569.4255 Single Number Reach (IN)<br>
317.569.4201 Fax</span><span class="apple-converted-space"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span></span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><br>
<a href="mailto:dennis.heim@cdw.com"><span style="font-size:10.0pt">dennis.heim@cdw.com</span></a></span><u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:blue"><br>
</span></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><a href="http://www.cdw.com/content/solutions/unified-communications/">cdw.com/content/solutions/unified-communications/</a></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span class="apple-converted-space"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> </span></span><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""><a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a><span class="apple-converted-space"> </span><a href="mailto:[mailto:cisco-voip-bounces@puck.nether.net]">[mailto:cisco-voip-bounces@puck.nether.net]</a><span class="apple-converted-space"> </span><b>On
Behalf Of<span class="apple-converted-space"> </span></b>Justin Steinberg<br>
<b>Sent:</b><span class="apple-converted-space"> </span>Friday, March 02, 2012 10:09 AM<br>
<b>To:</b><span class="apple-converted-space"> </span>cisco voip<br>
<b>Subject:</b><span class="apple-converted-space"> </span>[cisco-voip] ITL issue - incomplete ITL files cached on TFTP ?</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Worked on an upgrade last night from CM 7.1 to 8.5.<br>
<br>
After the upgrade I am having some ITL issues and think I have a couple ways to work this out but wanted to run this past the group as I haven't seen anyone with a specific issue like this.<br>
<br>
CM 8.5.1su2 with three CUCMs running CallManager & TFTP service<br>
<br>
What is not working:<br>
-Corporate Directory - I am receiving host not found. I verified on the phone console logs that I am having a TVS/ITL issue.<br>
-When I look at the contents of the ITL file on the phone LCD, I am only seeing entries for TFTP and TVS on the server that TFTP is pointing to. I do not see any entries for other cluster nodes<br>
<br>
What is working:<br>
-TFTP downloads (ring tones, etc) and TFTP config changes<br>
-'show itl' from CLI is showing verification is ok on all nodes<br>
<br>
When I do a TFTP get and download the ITL file from CUCM and compare the Md5 with the phone things match. Show ITL on the CLI shows verification is ok. However, if I open the ITLSEPxxxxx.tlv file in notepad, I am not seeing all of my servers listed in the
ITL file. However, when I do a 'show ITL' from the CLI, all the servers show up in there. It is almost like the TFTP server has old versions of the ITL file (based on switch-version times? etc) and was not updated as other subs went through the switch-version
from 7.1 to 8.5.<br>
<br>
On a hunch, I restarted the TFTP service on a sub that no phones actually use for TFTP. After restarting the TFTP service, if I download the ITLSEPxxxx.tlv file and do a MD5, the value changed from pre-TFTP service restart. Now when I open the file in notepad,
I see all of my CUCMs listed in the ITL file. <span class="apple-converted-space"> </span><br>
<br>
My question is, can I just restart the TFTP service on the sub that my phones are actually using for TFTP? I am thinking the TFTP restart will cause the ITL to update (and include the other cluster nodes) but I am not sure whether the phones will then fail
with ITL mismatch or whether the phones will update their ITL file and now include the other servers.<br>
<br>
I am also thinking of implementing the rollback to PRE 8.0 service parameter, resetting the phones to clear the ITL and then restart the TFTP service.<br>
<br>
Any thoughts on whether restarting the TFTP service on the node that phones are using for TFTP will just update the existing ITL the phones use with the other CM nodes or whether that will in effect create an entirely new ITL which would then require manually
deleting the ITL files ?<br>
<br>
Thanks<br>
<br>
Justin<br>
<br>
<br>
<br>
<o:p></o:p></p>
<p class="MsoNormal">_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>