Cisco IP phone is not registering to server

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Cisco IP phone is not registering to server

L2 Linker

Hi all,

I have Palo alto in my network connected to CISCO Call manager server and Cisco DX650 IP phone. I am facing issue that DX 650 is not registering to Call manager server when I capture log I found that the traffic comming from Call manager server and IP phone into Firewall is completing TCP connection but when outgoing traffic from firewall towards Call manager server and IP Phones is sending TCP (RST/ACK) message. I also have cisco 8811 IP phone which got registered so please help me with this

1 accepted solution

Accepted Solutions

What is in your Application?

 

You should remove application, and set service any in order to test unfiltered connections.

 

Rob

View solution in original post

16 REPLIES 16

L4 Transporter

Have you got denied traffic logged?

 

Does the phone have static or is it trying to obtain a DHCP IP address..

 

Is there a Proto Difference  between the two types of phone ( Skinny vs SIP )

Hi, thank for reply 

All IP PHONES ARE WORKING ON STATIC IP 

I HAVE INFORCE ONE WAY POLYCY FROM IP PHONES  TOWARDS CUCM SERVER AND ALLOWED ANY APPLICATION OR PROTO..

DO I NEED TO INFROCE REVERSE POLICY FROM CUCM SERVER TOWARDS IP PHONES?

 

 

Hi, thank for reply 

All IP PHONES ARE WORKING ON STATIC IP 

I HAVE INFORCE ONE WAY POLYCY FROM IP PHONES  TOWARDS CUCM SERVER AND ALLOWED ANY APPLICATION OR PROTO..

DO I NEED TO INFROCE REVERSE POLICY FROM CUCM SERVER TOWARDS IP PHONES?

For registration the CUCM should not necessarily need a rule as the Phone is the client.

 

Have your got logging turned on for your "default interzone" block??  

 

Do you see any traffic  from the phone?

 

Is the routing from the phone to the CUCM correct?

 

You will need a rule from the CUCM to the phone for SIP/SCCP, and perhaps the RTP traffic.

I HAVE 8 PHONES IN SAME RANGE FROM 

X.X.X.200 TO X.X.X.207   SIX OF THEM ARE 8811 WHICH GOT REGISTERED SUCCESSFULLY AND 2 OF THEM ARE DX650 FOR WHICH I AM FACING ISSUE . FOR DX 650 TRAFFIC FROM IP PHONE TO PALO ALTO AND FROM CUCM TOWARD PALO ALTO ARE ESTABLISING TCP CONNECTION BUT TRAFFIC FROM PALO ALTO TO DX 650 AND TOWARD CUCM ARE SHOWING (RST/ACK) . 

 

CUCM------------->PALOALTO<-----------IP PHONE

IS ESTABLISHING TCP CONNECTION 

BUT 

 

CUCM<------------PALOALTO----------->IP PHONE

IS SHOWING 【RST/ACK】

 

 

 

Have you tried a full allow rule in both directions? That will indicate if it's a security policy or other issue.

I am gonna try it tommorow and will let you know what happen

I have tried a full allow rule in both directions but HTTP packets are getting a drop in both situation from the firewall which DX 650 IP Phone use to fetch configuration  from CUCM server

 
Tags (0)
 

Sounds like a L3 routing issue to me then.

 

Rob

but all other phones are getting registred and all are in same range

I have define service as Application default should I try with any services

What is in your Application?

 

You should remove application, and set service any in order to test unfiltered connections.

 

Rob

Solved??? How?

Not solved so far

  • 1 accepted solution
  • 13880 Views
  • 16 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!