Cisco IP phone is not registering to server

Reply
Highlighted
L2 Linker

Cisco IP phone is not registering to server

Hi all,

I have Palo alto in my network connected to CISCO Call manager server and Cisco DX650 IP phone. I am facing issue that DX 650 is not registering to Call manager server when I capture log I found that the traffic comming from Call manager server and IP phone into Firewall is completing TCP connection but when outgoing traffic from firewall towards Call manager server and IP Phones is sending TCP (RST/ACK) message. I also have cisco 8811 IP phone which got registered so please help me with this


Accepted Solutions
Highlighted
L4 Transporter

Re: Cisco IP phone is not registering to server

What is in your Application?

 

You should remove application, and set service any in order to test unfiltered connections.

 

Rob

View solution in original post


All Replies
L4 Transporter

Re: Cisco IP phone is not registering to server

Have you got denied traffic logged?

 

Does the phone have static or is it trying to obtain a DHCP IP address..

 

Is there a Proto Difference  between the two types of phone ( Skinny vs SIP )

Highlighted
L2 Linker

Re: Cisco IP phone is not registering to server

Hi, thank for reply 

All IP PHONES ARE WORKING ON STATIC IP 

I HAVE INFORCE ONE WAY POLYCY FROM IP PHONES  TOWARDS CUCM SERVER AND ALLOWED ANY APPLICATION OR PROTO..

DO I NEED TO INFROCE REVERSE POLICY FROM CUCM SERVER TOWARDS IP PHONES?

 

 

Highlighted
L2 Linker

Re: Cisco IP phone is not registering to server

Hi, thank for reply 

All IP PHONES ARE WORKING ON STATIC IP 

I HAVE INFORCE ONE WAY POLYCY FROM IP PHONES  TOWARDS CUCM SERVER AND ALLOWED ANY APPLICATION OR PROTO..

DO I NEED TO INFROCE REVERSE POLICY FROM CUCM SERVER TOWARDS IP PHONES?

Highlighted
L4 Transporter

Re: Cisco IP phone is not registering to server

For registration the CUCM should not necessarily need a rule as the Phone is the client.

 

Have your got logging turned on for your "default interzone" block??  

 

Do you see any traffic  from the phone?

 

Is the routing from the phone to the CUCM correct?

 

You will need a rule from the CUCM to the phone for SIP/SCCP, and perhaps the RTP traffic.

Highlighted
L2 Linker

Re: Cisco IP phone is not registering to server

I HAVE 8 PHONES IN SAME RANGE FROM 

X.X.X.200 TO X.X.X.207   SIX OF THEM ARE 8811 WHICH GOT REGISTERED SUCCESSFULLY AND 2 OF THEM ARE DX650 FOR WHICH I AM FACING ISSUE . FOR DX 650 TRAFFIC FROM IP PHONE TO PALO ALTO AND FROM CUCM TOWARD PALO ALTO ARE ESTABLISING TCP CONNECTION BUT TRAFFIC FROM PALO ALTO TO DX 650 AND TOWARD CUCM ARE SHOWING (RST/ACK) . 

 

CUCM------------->PALOALTO<-----------IP PHONE

IS ESTABLISHING TCP CONNECTION 

BUT 

 

CUCM<------------PALOALTO----------->IP PHONE

IS SHOWING 【RST/ACK】

 

 

 

Highlighted
L4 Transporter

Re: Cisco IP phone is not registering to server

Have you tried a full allow rule in both directions? That will indicate if it's a security policy or other issue.

Highlighted
L2 Linker

Re: Cisco IP phone is not registering to server

I am gonna try it tommorow and will let you know what happen

Highlighted
L2 Linker

Re: Cisco IP phone is not registering to server

I have tried a full allow rule in both directions but HTTP packets are getting a drop in both situation from the firewall which DX 650 IP Phone use to fetch configuration  from CUCM server

 
Tags (0)
 
Highlighted
L4 Transporter

Re: Cisco IP phone is not registering to server

Sounds like a L3 routing issue to me then.

 

Rob

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!