<div dir="ltr">This was connecting to both Webex and B2B ... I initially got into the ASA and did a permit tcp any any to the VCSE and proved it was a firewall, then saw the permit sip, and added 5061 and removed the any any and it worked...<div><br></div><div><br></div><div>Jonathan</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Aug 24, 2017 at 1:34 PM, Anthony Holloway <span dir="ltr"><<a href="mailto:avholloway+cisco-voip@gmail.com" target="_blank">avholloway+cisco-voip@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Wait, explain that to me. So, your original call setup was over port 5060, where you received the 481, but then mid-call something tried to switch to port 5061? Is that how escalation to encrypted SIP happens? Starts on 5060 as clear text, then switches over to 5061 for encryption? I'm obviously showing my ignorance with this, but willing to learn in spite of it.</div><div class="HOEnZb"><div class="h5"><br><div class="gmail_quote"><div dir="ltr">On Thu, Aug 24, 2017 at 1:19 PM Jonathan Charles <<a href="mailto:jonvoip@gmail.com" target="_blank">jonvoip@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Just an FYI, I did get this fixed... the firewall guy told me all rules were implemented... and nothing was being blocked.<div><br></div><div>Turned out he did a permit for sip on the ACL, which did not include 5061...</div><div><br></div><div>Added 5061 and it works.</div><div><br></div><div><br></div><div><br></div><div>Thanks!</div></div><div dir="ltr"><div><br></div><div><br></div><div>Jonathan</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Aug 20, 2017 at 7:53 PM, Jonathan Charles <span dir="ltr"><<a href="mailto:jonvoip@gmail.com" target="_blank">jonvoip@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Ok, let me poke around a bit... I assume every problem is because of the firewall...<span class="m_3375833278933653019m_1496950737120279579HOEnZb"><font color="#888888"><div><br></div><div><br></div><div>Jonathan</div></font></span></div><div class="m_3375833278933653019m_1496950737120279579HOEnZb"><div class="m_3375833278933653019m_1496950737120279579h5"><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Aug 20, 2017 at 7:36 PM, Ryan Huff <span dir="ltr"><<a href="mailto:ryanhuff@outlook.com" target="_blank">ryanhuff@outlook.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="auto">
<div>To expand on this; it really sounds like where your trouble happens is during a re-invite event. If that is the case, it could very well be DNS as mentioned OR less likely (but plausible), a TCP timeout mismatch on a firewall.</div>
<div id="m_3375833278933653019m_1496950737120279579m_6804235212589423170m_8441752709796754753AppleMailSignature"><br>
</div>
<div id="m_3375833278933653019m_1496950737120279579m_6804235212589423170m_8441752709796754753AppleMailSignature">The codec logs and CCM trace will tell the tale for sure though.<br>
<br>
Thanks,</div>
<div id="m_3375833278933653019m_1496950737120279579m_6804235212589423170m_8441752709796754753AppleMailSignature"><br>
</div>
<div id="m_3375833278933653019m_1496950737120279579m_6804235212589423170m_8441752709796754753AppleMailSignature">Ryan</div><div><div class="m_3375833278933653019m_1496950737120279579m_6804235212589423170h5">
<div><br>
On Aug 20, 2017, at 6:36 PM, Ryan Huff <<a href="mailto:ryanhuff@outlook.com" target="_blank">ryanhuff@outlook.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<div>This might have to do with DNS. I would review all your internal/external SRV/A records for EXP/CUCM and your DNS zone in EXP.</div>
<div id="m_3375833278933653019m_1496950737120279579m_6804235212589423170m_8441752709796754753AppleMailSignature"><br>
</div>
<div id="m_3375833278933653019m_1496950737120279579m_6804235212589423170m_8441752709796754753AppleMailSignature">It sounds like the call is traversing expressway, but call manager may be having trouble finding the call leg via DNS, to connect the codec to.<br>
<br>
Pulling CCM traces and debug logs on the codec for a failed call will tell you for sure.</div>
<div id="m_3375833278933653019m_1496950737120279579m_6804235212589423170m_8441752709796754753AppleMailSignature"><br>
Thanks,</div>
<div id="m_3375833278933653019m_1496950737120279579m_6804235212589423170m_8441752709796754753AppleMailSignature"><br>
</div>
<div id="m_3375833278933653019m_1496950737120279579m_6804235212589423170m_8441752709796754753AppleMailSignature">Ryan</div>
<div><br>
On Aug 20, 2017, at 6:30 PM, Jonathan Charles <<a href="mailto:jonvoip@gmail.com" target="_blank">jonvoip@gmail.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<div dir="ltr">Just a single VCSC and VCSE.... single CUCM 11.5... this is just a proof of concept...
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Jonathan</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Sun, Aug 20, 2017 at 5:27 PM, Ryan Huff <span dir="ltr">
<<a href="mailto:ryanhuff@outlook.com" target="_blank">ryanhuff@outlook.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Do you have EXP clusters or is this a single C/E pair?<br>
<br>
Sent from my iPhone<br>
<div>
<div class="m_3375833278933653019m_1496950737120279579m_6804235212589423170m_8441752709796754753h5"><br>
> On Aug 20, 2017, at 6:26 PM, Jonathan Charles <<a href="mailto:jonvoip@gmail.com" target="_blank">jonvoip@gmail.com</a>> wrote:<br>
><br>
> We have an SX80 connected to CUCM 11.5 and VCSC 8.10 to a VCSE 8.10...<br>
><br>
> Outbound calls route to Webex, you see them enter the meeting and then after 4 seconds, they drop, the VCS E shows<br>
><br>
> 481 Call/Transaction Does Not Exist<br>
><br>
> Does anyone have any ideas?<br>
><br>
><br>
><br>
><br>
> Jonathan<br>
><br>
><br>
</div>
</div>
> ______________________________<wbr>_________________<br>
> cisco-voip mailing list<br>
> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
> <a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">
https://puck.nether.net/<wbr>mailman/listinfo/cisco-voip</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
</div>
</blockquote>
<blockquote type="cite">
<div><span>______________________________<wbr>_________________</span><br>
<span>cisco-voip mailing list</span><br>
<span><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a></span><br>
<span><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/<wbr>mailman/listinfo/cisco-voip</a></span><br>
</div>
</blockquote>
</div></div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>
______________________________<wbr>_________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">https://puck.nether.net/<wbr>mailman/listinfo/cisco-voip</a><br>
</blockquote></div>
</div></div></blockquote></div><br></div>