topic Re: Cisco IP phone is not registering to server in General Topics

Cisco IP phone is not registering to server

BraveTiger — Sat, 01 Feb 2020 09:28:11 GMT

Hi all,

I have Palo alto in my network connected to CISCO Call manager server and Cisco DX650 IP phone. I am facing issue that DX 650 is not registering to Call manager server when I capture log I found that the traffic comming from Call manager server and IP phone into Firewall is completing TCP connection but when outgoing traffic from firewall towards Call manager server and IP Phones is sending TCP (RST/ACK) message. I also have cisco 8811 IP phone which got registered so please help me with this

Re: Cisco IP phone is not registering to server

RobinClayton — Mon, 03 Feb 2020 12:14:49 GMT

Have you got denied traffic logged?

Does the phone have static or is it trying to obtain a DHCP IP address..

Is there a Proto Difference between the two types of phone ( Skinny vs SIP )

Re: Cisco IP phone is not registering to server

BraveTiger — Mon, 03 Feb 2020 14:37:23 GMT

Hi, thank for reply

All IP PHONES ARE WORKING ON STATIC IP

I HAVE INFORCE ONE WAY POLYCY FROM IP PHONES TOWARDS CUCM SERVER AND ALLOWED ANY APPLICATION OR PROTO..

DO I NEED TO INFROCE REVERSE POLICY FROM CUCM SERVER TOWARDS IP PHONES?

Re: Cisco IP phone is not registering to server

BraveTiger — Mon, 03 Feb 2020 14:38:21 GMT

Hi, thank for reply

All IP PHONES ARE WORKING ON STATIC IP

I HAVE INFORCE ONE WAY POLYCY FROM IP PHONES TOWARDS CUCM SERVER AND ALLOWED ANY APPLICATION OR PROTO..

DO I NEED TO INFROCE REVERSE POLICY FROM CUCM SERVER TOWARDS IP PHONES?

Re: Cisco IP phone is not registering to server

RobinClayton — Mon, 03 Feb 2020 14:48:35 GMT

For registration the CUCM should not necessarily need a rule as the Phone is the client.

Have your got logging turned on for your "default interzone" block??

Do you see any traffic from the phone?

Is the routing from the phone to the CUCM correct?

You will need a rule from the CUCM to the phone for SIP/SCCP, and perhaps the RTP traffic.

Re: Cisco IP phone is not registering to server

BraveTiger — Mon, 03 Feb 2020 17:11:12 GMT

I HAVE 8 PHONES IN SAME RANGE FROM

X.X.X.200 TO X.X.X.207 SIX OF THEM ARE 8811 WHICH GOT REGISTERED SUCCESSFULLY AND 2 OF THEM ARE DX650 FOR WHICH I AM FACING ISSUE . FOR DX 650 TRAFFIC FROM IP PHONE TO PALO ALTO AND FROM CUCM TOWARD PALO ALTO ARE ESTABLISING TCP CONNECTION BUT TRAFFIC FROM PALO ALTO TO DX 650 AND TOWARD CUCM ARE SHOWING (RST/ACK) .

CUCM------------->PALOALTO<-----------IP PHONE

IS ESTABLISHING TCP CONNECTION

BUT

CUCM<------------PALOALTO----------->IP PHONE

IS SHOWING 【RST/ACK】

Re: Cisco IP phone is not registering to server

RobinClayton — Tue, 04 Feb 2020 08:13:40 GMT

Have you tried a full allow rule in both directions? That will indicate if it's a security policy or other issue.

Re: Cisco IP phone is not registering to server

BraveTiger — Tue, 04 Feb 2020 17:13:05 GMT

I am gonna try it tommorow and will let you know what happen

Re: Cisco IP phone is not registering to server

BraveTiger — Thu, 06 Feb 2020 05:47:19 GMT

I have tried a full allow rule in both directions but HTTP packets are getting a drop in both situation from the firewall which DX 650 IP Phone use to fetch configuration from CUCM server

Re: Cisco IP phone is not registering to server

RobinClayton — Thu, 06 Feb 2020 08:51:53 GMT

Sounds like a L3 routing issue to me then.

Rob

Re: Cisco IP phone is not registering to server

BraveTiger — Thu, 06 Feb 2020 10:44:43 GMT

but all other phones are getting registred and all are in same range

Re: Cisco IP phone is not registering to server

BraveTiger — Thu, 06 Feb 2020 15:36:15 GMT

I have define service as Application default should I try with any services

Re: Cisco IP phone is not registering to server

RobinClayton — Thu, 06 Feb 2020 16:58:12 GMT

What is in your Application?

You should remove application, and set service any in order to test unfiltered connections.

Rob

Re: Cisco IP phone is not registering to server

RobinClayton — Tue, 11 Feb 2020 09:39:52 GMT

Solved??? How?

Re: Cisco IP phone is not registering to server

BraveTiger — Tue, 11 Feb 2020 14:52:19 GMT

Not solved so far

Re: Cisco IP phone is not registering to server

BraveTiger — Tue, 11 Feb 2020 14:52:59 GMT

I will share you once get solved

Re: Cisco IP phone is not registering to server

BraveTiger — Fri, 21 Feb 2020 07:03:17 GMT

The phone got registered it's working fine. I allowed WEB BROWSING, SIP, SSL, TFTP and SERVICE: TCP 6950, TCP 8443, TCP 6970, TCP 2445, TCP/UDP 5060

Thank you for your assistance