<div dir="ltr">Hi,<div>quite likely you are running into <font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:15px">CSCeg63177. We had the exact same behaviour.</span></font></div><div><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:15px">Would it be possible to increase the port security ageing timer to 5?</span></font></div>
<div><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:15px"><br></span></font></div><div><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:15px">cheers</span></font></div><div>
<font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:15px">bernhard</span></font></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Jun 5, 2014 at 8:10 PM, Mar, Tashi <span dir="ltr"><<a href="mailto:tmar@align.com" target="_blank">tmar@align.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="color:#1f497d">Hi all, appreciate the feedback. There are some SCCP phones (along with SIP) that reset too; TAC could not pinpoint any phone firmware or CUCM bugs either.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">Will find out the switch OS, but environment is all stacked 3750s at the core and access layers in both locations. Any chance you recall the bug ID?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">Definitely will check into:<u></u><u></u></span></p>
<p><u></u><span style="color:#1f497d"><span>-<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span style="color:#1f497d">Switch bug related to spanning tree and excessive Topology Change Notifications (TCN). They actually replaced some access switches, but that doesn’t mean the configuration was modified.</span><span style="color:#1f497d"><u></u><u></u></span></p>
<p><u></u><span style="color:#1f497d"><span>-<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span style="color:#1f497d">Circular buffer packet captures<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">We did verify that the ASAs are not doing any SIP or SCCP inspection; voice traffic on this network does not pass through firewalls anyway.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">Thanks!<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<div>
<p class="MsoNormal" style="margin-right:0in;margin-bottom:2.0pt;margin-left:0in">
<span style="font-size:12.0pt;color:#595959">Tashi Mar</span><span style="font-size:12.0pt;color:#7f7f7f"> |
</span><span style="font-size:9.0pt;color:#7f7f7f">IP Telephony Engineer</span><span style="font-size:12.0pt;color:#7f7f7f"><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Terry Oakley [mailto:<a href="mailto:Terry.Oakley@rdc.ab.ca" target="_blank">Terry.Oakley@rdc.ab.ca</a>]
<br>
<b>Sent:</b> Thursday, June 05, 2014 2:02 PM<br>
<b>To:</b> Heim, Dennis; Mar, Tashi; <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> RE: Intermittent phone resets<u></u><u></u></span></p>
</div>
</div><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span lang="EN-CA" style="color:#1f497d">What version of switches and OS were you using?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="color:#1f497d">Thanks<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="color:#1f497d">Terry<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">mailto:cisco-voip-bounces@puck.nether.net</a>]
<b>On Behalf Of </b>Heim, Dennis<br>
<b>Sent:</b> June-05-14 11:50 AM<br>
<b>To:</b> Mar, Tashi; <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] Intermittent phone resets<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-CA"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">I had this awhile back, and it ended up being a bug on the switches related to spanning tree and excessive Topology Change Notifications (TCN).<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<div>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;color:black">Dennis Heim | Collaboration Solutions Architect</span></b><span style="color:black"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;color:black">World Wide Technology, Inc. | <a href="tel:%2B1%20314-212-1814" value="+13142121814" target="_blank">+1 314-212-1814</a><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><a href="https://twitter.com/CollabSensei" target="_blank"><span style="text-decoration:none"><img border="0" width="124" height="25" src="cid:image001.png@01CF80C7.E0808500" alt="twitter"></span></a><span style="color:black"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><a><span style="color:#1f497d;text-decoration:none"><img border="0" width="95" height="28" src="cid:image002.png@01CF80C7.E0808500" alt="chat"></span></a><a href="tel:+13142121814" target="_blank"><span style="color:#1f497d;text-decoration:none"><img border="0" width="95" height="28" src="cid:image003.png@01CF80C7.E0808500" alt="Phone"></span></a><a><span style="color:#1f497d;text-decoration:none"><img border="0" width="95" height="28" src="cid:image004.png@01CF80C7.E0808500" alt="video"></span></a><span style="color:#1f497d"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="color:black"><u></u> <u></u></span></p>
</div>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">mailto:cisco-voip-bounces@puck.nether.net</a>]
<b>On Behalf Of </b>Mar, Tashi<br>
<b>Sent:</b> Thursday, June 05, 2014 1:43 PM<br>
<b>To:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> [cisco-voip] Intermittent phone resets<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Hi, troubleshooting an issue where phones intermittently reset, either on hook or off hook (drops the call in progress). Logs and TAC claim it’s a network issue, but has anyone seen similar problems on Call Manager 9.1? Basically, we
want to rule out Call Manager as the culprit.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Majority of phones using SIP, models 8891 and 9951, experiencing issues similar to those outlined here:
<a href="https://supportforums.cisco.com/discussion/10846666/ip-phones-randomly-rebooting" target="_blank">
https://supportforums.cisco.com/discussion/10846666/ip-phones-randomly-rebooting</a><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Steps already taken:<u></u><u></u></p>
<p class="MsoNormal">- upgrade to latest firmware<u></u><u></u></p>
<p class="MsoNormal">- verify no POE errors on switch<u></u><u></u></p>
<p class="MsoNormal">- cpu, memory on UCS servers ok<u></u><u></u></p>
<p class="MsoNormal">- point phones to backup SUB, no change. Phones randomly reset when homed to Pub or Sub (both in separate locations).<u></u><u></u></p>
<p class="MsoNormal">- Wireshark to see KeepAlives dropping<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">1. Phone logs show:<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10.0pt">SEP0DD3B4E90000.cnf.xml.sgn (HTTP)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"> 8:05:20p TCP connection timed out<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"> 8:07:22p Falling back to different CUCM<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"> 11:16:50p TCP connection timed out<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"> 11:18:51p Falling back to different CUCM<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"> 6:52:38p TCP connection timed out<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"> 6:54:39p Falling back to different CUCM<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"> 9:55:04a TCP connection timed out<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"> 9:57:05a Falling back to different CUCM<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">2. Call Manager logs show:<u></u><u></u></p>
<p class="MsoNormal">- phone unregisters from Primary CUCM due to:<u></u><u></u></p>
<p class="MsoNormal">[Reason=6] ConnectivityError - Network communication between the device and Unified CM has been interrupted.<u></u><u></u></p>
<p class="MsoNormal">- phones fallback to secondary CUCM and then rehome to Primary CUCM:<u></u><u></u></p>
<p class="MsoNormal">Reason code = 28, FallbackInitiated - The device has initiated a fallback and will automatically re-register to a higher-priority Unified CM. No action is necessary.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">3. Call Manager syslogs display EndPointUnregistered:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="font-size:10.0pt">Apr 01 14:34:18 %UC_CALLMANAGER-3-EndPointUnregistered: %[DeviceName=SEP0DD3B4E90000][IPAddress=10.1.10.211][Protocol=SIP][DeviceType=540][Description=User][Reason=6][IPAddrAttributes=0][LastSignalReceived=SIPConnControlInd][CallState=5286-call_initiated1][AppID=Cisco
CallManager][ClusterID=NAregion][NodeID=CCMSub]: An endpoint has unregistered<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">Apr 01 14:36:22 %UC_-3-LastOutOfServiceInformation: %[DeviceName=SEP0DD3B4E90000][DeviceIPv4Address=<a href="http://10.1.10.211/24%5D%5BIPv4DefaultGateway=192.168.51.1%5D%5BDeviceIPv6Address=::%5D%5BIPv6DefaultGateway=::%5D%5BModelNumber=CP-8961%5D%5BNeighborIPv4Address=%5D%5BNeighborIPv6Address=%5D%5BNeighborDeviceID=%5D%5BUNKNOWN_PARAMNAME:NeighborIPortID=%5D%5BDHCPv4Status=1%5D%5BDHCPv6Status=3%5D%5BTFTPCfgStatus=1%5D%5BDNSStatusUnifiedCM1=4%5D%5BDNSStatusUnifiedCM2=4%5D%5BDNSStatusUnifiedCM3=0%5D%5BUNKNOWN_PARAMNAME:DNSv6StatusUnifiedCM1=0%5D%5BUNKNOWN_PARAMNAME:DNSv6StatusUnifiedCM2=0%5D%5BUNKNOWN_PARAMNAME:DNSv6StatusUnifiedCM3=0%5D%5BVoiceVLAN=50%5D%5BUnifiedCMIPAddress=10.1.10.5%5D%5BLocalPort=50382%5D%5BTimeStamp=1396377375%5D%5BReasonForOutOfService=18%5D%5BLastProtocolEventSent=Sent:INVITE" target="_blank">10.1.10.211/24][IPv4DefaultGateway=192.168.51.1][DeviceIPv6Address=::][IPv6DefaultGateway=::][ModelNumber=CP-8961][NeighborIPv4Address=][NeighborIPv6Address=][NeighborDeviceID=][UNKNOWN_PARAMNAME:NeighborIPortID=][DHCPv4Status=1][DHCPv6Status=3][TFTPCfgStatus=1][DNSStatusUnifiedCM1=4][DNSStatusUnifiedCM2=4][DNSStatusUnifiedCM3=0][UNKNOWN_PARAMNAME:DNSv6StatusUnifiedCM1=0][UNKNOWN_PARAMNAME:DNSv6StatusUnifiedCM2=0][UNKNOWN_PARAMNAME:DNSv6StatusUnifiedCM3=0][VoiceVLAN=50][UnifiedCMIPAddress=10.1.10.5][LocalPort=50382][TimeStamp=1396377375][ReasonForOutOfService=18][LastProtocolEventSent=Sent:INVITE</a>
<a>sip:915138521010@10.1.10.2;user=phone</a> SIP/2.0 Cseq:101 INVITE CallId:b4e9b08c-a3ad023c-1fec1fa7-3b9727b1@10.1][LastProtocolEventReceived=Rcvd:SIP/2.0 202 Accepted Cseq:104 REFER <a href="mailto:CallId%3Ab4e9b08c-a3ad026a-30d892f1-02c748ba@10.1.10.211" target="_blank">CallId:b4e9b08c-a3ad026a-30d892f1-02c748ba@10.1.10.211</a>][AppID=Cisco
CallManager][ClusterID=NAregion][NodeID=CCMSub]: Information related to the last out-of-service event
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">Apr 01 14:36:24 %UC_CALLMANAGER-6-EndPointRegistered: %[DeviceName=SEP0DD3B4E90000][IPAddress=10.1.10.211][Protocol=SIP][DeviceType=540][PerfMonObjType=2][Description=User][UserID=User1][LoadID=sip8961.9-4-1-9][AssociatedDNs=5286,5285,5242,5237,5262,5217,5284,5294,5282,#86,][MACAddress=0DD3B4E90000][IPAddrAttributes=0][ActiveLoadId=sip8961.9-4-1-9.loads][InactiveLoadId=sip8961.9-3-2SR1-1.loads][AppID=Cisco
CallManager][ClusterID=NAregion][NodeID=CCMSub]: Endpoint registered<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">Apr 01 14:36:24 %UC_CALLMANAGER-6-DeviceDnInformation: %[DeviceName=SEP0DD3B4E90000][DeviceType=540][StationDesc=User][StationDn=5286,5285,5242,5237,5262,5217,5284,5294,5282,#86][AppID=Cisco CallManager][ClusterID=NAregion][NodeID=CCMSub]:
List of directory numbers (DN) associated with this device<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">4. Switchport configuration:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">interface GigabitEthernet3/0/x<u></u><u></u></p>
<p class="MsoNormal">switchport access vlan 10<u></u><u></u></p>
<p class="MsoNormal">switchport mode access<u></u><u></u></p>
<p class="MsoNormal">switchport voice vlan 11<u></u><u></u></p>
<p class="MsoNormal">switchport port-security maximum 3<u></u><u></u></p>
<p class="MsoNormal">switchport port-security<u></u><u></u></p>
<p class="MsoNormal">switchport port-security aging time 2<u></u><u></u></p>
<p class="MsoNormal">switchport port-security violation restrict<u></u><u></u></p>
<p class="MsoNormal">switchport port-security aging type inactivity<u></u><u></u></p>
<p class="MsoNormal">load-interval 30<u></u><u></u></p>
<p class="MsoNormal">spanning-tree portfast<u></u><u></u></p>
<p class="MsoNormal">spanning-tree bpduguard enable<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thanks, Tashi<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"><br>
The information contained in this message is confidential and is intended only for the use of the individual or entity named above. It may contain proprietary or legally privileged information. Mistransmission shall not constitute a waiver of any rights or
privileges. If you are not the designated recipient of this message, you are hereby notified that any use, dissemination, distribution or reproduction of this message is strictly prohibited. If you have received this message in error, please immediately notify
the sender.<br>
<br>
Although this e-mail and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that they are virus-free. Align Communications
Inc. does not accept, and specifically disclaims, any liability or obligation for any loss or damage arising in any way from the use of this e-mail or any attachment. Thank You.</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u><u></u></span></p>
</div></div></div><div><div class="h5">
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
The information contained in this message is confidential and is intended only for the use of the individual or entity named above. It may contain proprietary or legally privileged information. Mistransmission shall not constitute a waiver of any rights or
privileges. If you are not the designated recipient of this message, you are hereby notified that any use, dissemination, distribution or reproduction of this message is strictly prohibited. If you have received this message in error, please immediately notify
the sender.<br>
<br>
Although this e-mail and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that they are virus-free. Align Communications
Inc. does not accept, and specifically disclaims, any liability or obligation for any loss or damage arising in any way from the use of this e-mail or any attachment. Thank You.<br>
</font>
</div></div></div>
<br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Bernhard Albler, +4369917207384<br>--<br>"Was Nachwelt! Wie komm' ich dazu was für die Nachwelt zu tun? Was hat denn die Nachwelt für mich getan?"<br>
--Carl Friedrich Zelter
</div>