Cisco :: How To Enable International Calling For A Single User
Apr 19, 2013
Found you on Google and prays that the regulars here will take pity on a former Juniper admin. I've got a brand new shop to handle that is all Cisco including CUCM 8.x and I have zero Call Manager experience. How to enable international calling for a single user
[code]...
brief flow/steps for making sure a user can dial international? I figured it was as easy as making sure their DN CSS had the ability to do so, but apparently not.
In CUCME if you do not configure any translation rules and leave the system mainly at default, when a call is routed to the PSTN the CUCME system sends the true calling party ID which would be a users extension number. Is it correct to assume that a CUCM server based system, when too left at the majority of default (without translation rules or stripping etc) that it will send the true calling ID to the gateway?
I am having an issue with the user VPNs. For users connected via the AnyConnect VPN client, all of their Internet traffic goes out their local Internet connection, since I am using split tunneling. However, I need a specific public IP address to go through the VPN tunnel and out the DIA at the main office, rather than the user's local internet connection. I managed to have this IP address go through the tunnel to the ASA at the main office, but it appears that it gets blocked somewhere there, or maybe the return traffic gets blocked. I am using an ASA 5520 at the main office, with software version 8.3.
I have a WLAN with 5 1200 Series AP (A/G) configured for Fast Roaming using the Cisco supplied documentation. Can I use one user name for all of my devices to connect to the Internal Radius Server? This would be similar to having a passphrase for WPA.
Actually not randomly. It's normally after weekly reboots. This causes the Great Plains DB to be locked to 1 person, so other people get errors.
Sometimes I can just unrestrict access, other times it's grayed out and I have to drop the DB and restart the services to take it out of single user mode.
We are currently using two Nexus 5548UP's as our Datacenter Network Core. I have a pretty simple objective: I would like to enable Jumbo Frames on a single VLAN only(VLAN 65). This VLAN is used strictly for backups. I do not want to enable Jumbo Frames on the other VLANs(VLANs 1-10). Im not sure what the best way to do this is.....or if it is even possible but I am hoping to get some configuration examples.
how to set WLC 5508 to allow single create web authentication user account to get connected in a same time. i found that i can use the same username and password combo to be login in 2 machine in the same time.
I have a Cisco ASA 5505 that I've setup with an SSL VPN. This is for personal use, and I therefore don't have need for anything more than local authentication. [code]
I'd like to have one profile/policy where I only encrypt data going to my split-tunnel ACL, and I'd like to have one profile/policy where I encrypt all traffic.
The issue ive been fighting is - it doesn't seem like its possible to associate more than one group policy per user. If it IS possible - can you tell me how I associate both groups to my local account?
I've installed Cisco ACS 5.3. After I created several internal users (defined password and enabled password), Identiy Groups, Access Polices, Network Devices and AAA Clients (e.g. Cisco 1841) for Radius and configured my Router like this:
... aaa authentication login VTY group radius local-case aaa authentication enable default group radius enable ....
Now I'm able to login successful using my internal User. But if I try to use enable to enter the enable level I'll receive the message "% Error in authentication." when I use the defined enable password.
In the ACS logging I'll can see that "$enab15$" is missing. If I setup a user name "$enab15" I can login to enable level, but what have I to do, to use the custom enable passwords?
Step 1.2 - 1.5 is requiered for both (Radius and Tacacs). Then you have to switch to 2.1-2.7 for Radius or 3.1 - 3.7 for Tacacs authentication.
I can't seem to enable in ASA with a non-15 privilege level user configured in ACS 4.2 (tacacs).When I enable in IOS device, it enables and "show privilege" shows level 10 as expected. ACS should be configured correctly as it works fine with IOS. User is not set with explicit settings. Group is set with "max enable level" 15 and "shell exec priv level" 15. The enable password is set to the internal ACS PAP password. Works fine in IOS.When I enable in ASA, it fails to enable, and ACS log says "Tacacs+ enable privilege too low". I suspect that ASA tries to enable into level 15 explicitely. If I try to issue "enable 10" command in ASA it says: Enabling to privilege levels is not allowed when configured for AAA authentication. Use 'enable' only. [code]
I have a Cisco 6509 with IOS "s222-ipservicesk9_wan-mz.122-18.SXF16.bin"I need to enable dot1x on user's ports on the switch. each user is connected to the switch through the IP phone.
I just found out that I can not enabled dot1x on trunk port. I have tried to use "switchport voice vlan " but I got:
We have an ASA 5510 and are having issues supporting a client in Europe. After about 5 minutes (sometimes it will last up to 30 minutes) we drop the connection with Reason 412: The remote peer is no longer responding. We are using the Cisco VPN client with the newest software version. We have also tried this on both 32 bit and 64 bit OS's. We have no issues VPNing to any other clients or with anyone VPNing into us. It's only with the client in Europe. We are able to VPN into their US site without any problems. They also claim they have no issues with anyone else VPNing into them.
i have a 4Mbps DSL internet connection with 3 PCs connected through a router. 2 are connected wirelessly and the other is wired via an ethernet cable.i noticed that when downloading a file from an international server, the transfer rate on the wireless PCs is 2-3 times slower than on the wired PC. the wireless PC would get about 150-200kb/s, whereas the wired PC can max out to 450kb/s on a single download.however when i download from a local or nearby server instead, the transfer rate on the wireless and wired PCs are the same and can both reach up to 450kb/s per download.i don't understand why the wireless connection is slower to international servers compared to the wired PC. don't they all go through the same router? or am i missing something?my wireless signal is at 54Mbps with "excellent" strength. i also tested the ping results from both the wireless and wired PCs to international servers and they are pretty much the same. there doesn't seem to be any extra latency all PCs are running windows XP SP3- the modem/router is a D-Link 2640B
On my country, international bandwidth still expensive. I want to split local and international bandwidth and limit inbound and outbound bandwidth for each ip like this:
IP 10.100.10.11 can use 100Mbps local bandwidth, 1Mbps international bandwidth
IP 10.100.10.12 can use 100Mbps local bandwidth, 2Mbps international bandwidth
I want to use
Router 3825Switch 2960 NB: I have online one internet line.
Was the above equipment can perform functions that I want or need any additional equipment? And Should i use 2 line to achieve my goal?
Region : Germany Model : TL-MR3020 Hardware Version : V1
when visiting Switzerland and Italy with my German SIM card I noticed that roaming is not working very good with the TL-MR3020. The reason is that the internet provider needs to be set in the config, in my case to o2 Germany.When I travel with this SIM card to another country, I roam into other networks.As I cannot what provider is currently active (as o2 has contracts with almost every provider outside Germany) and even if I could see it I have to adjust the settings in the config if anything changes, the satisfaction effect on this trip was not very good.
Also I noticed that sometimes (only sometimes) the setting resetted itself to o2 Germany when unplugging the device, this added some extra negative satisfaction to everything.In my understanding the router should have an auto detection for the currently active network and auto setup for the dialin parameters and everything else. Like every smartphone on the planet. Maybe you can also add a setting where you can enable or disable data roaming to save people money if they do not have a international data option booked.
Both of these ISDNs are up, this gives us 4 channels. Someone said they recieved a busy tone when they attempted to dial out. I looked over the system and seen there are two outbound pots dial-peers. Each dial-peer references one of the BRI ports. The preferences are the same on each dial-peer. I think what is happening is that the system is randomly selecting one of the dial-peers due to the preference, even if both channels of the BRI are in use. How does the system know if that port has both channels in use? I've not used ISDN before, so tried to enter the B-channel sub interface and the system (UC500) tells me I cannot do this. I was thinking about adding each channel into a trunk group and then referencing the trunk group in the dial-peer. I can obviously add both BRI's into one trunk group.
Is it possible to connect an analog phone to an FXS port on a CME router and a VoIP phone to a switch connected to said router and have voice connectivity between the phones? Also, is it possible to connect an FXO port on that same CME to a RJ-11 wall jack to connect to the PSTN and be able to call that VoIP phone as well as the analog phone from my cellphone? I'm trying to tie as I read the CCNA Voice OCG.
How to get this VC traffic through this network. I am quite new to ASAs, and I feel I am making a tonne of headway
The setup: The VCS Expressway is currently sitting within the DMZ (ip 172.16.10.10) which is NAT'd to 208.118.125.130. The internal VCS Control is pointed to the the VCS Expressway within the DMZ (as it is designed to do).
I have accessibility from the DMZ to the internal network. And from the DMZ to outside seems works partially (more on that below).
The problem:
Calls signalling is able to get through my network, but not media. IE, the call initiates, but media does not connect. Furthermore, I registered an internal endpoints (10.2.20.118) to the DMZ expressway (172.16.10.10). The registration works fine, but again, when I call to another endpoint (internal GK register endpoint to external GK registered endpoint) the call sets up, but media doesn't establish.
Here is the network topology, and below that is the run config.
ASA Version 8.0(4) ! host name ignite CSGfw enable password awUSpLuFs5wdhqJE encrypted password 2KFQnbNIdI.2KYOU encrypted names name 10.0.0.0 inside-network name 172.16.10.10 VCSE
i have a 4Mbps DSL internet connection with 3 PCs connected through a router. 2 are connected wirelessly and the other is wired via an ethernet cable. i noticed that when downloading a file from an international server, the transfer rate on the wireless PCs is 2-3 times slower than on the wired PC. the wireless PC would get about 150-200kb/s, whereas the wired PC can max out to 450kb/s on a single download. however when i download from a local or nearby server instead, the transfer rate on the wireless and wired PCs are the same and can both reach up to 450kb/s per download. i don't understand why the wireless connection is slower to international servers compared to the wired PC.my wireless signal is at 54Mbps with "excellent" strength. i also tested the ping results from both the wireless and wired PCs to international servers and they are pretty much the same.
- all PCs are running windows XP SP3 - the modem/router is a D-Link 2640B
we have a Cisco 1801 at one of our remote sites that uses an ADSL line for it's primary connection and ISDN as backup. Despite no apparent problems with the ADSL line the ISDN is repeatedly dialling the internet every 2-3 mins during office hours and considerable expense to the customer.
Just recently bought a Linksys E4200 router and it's been rocking so far! I upgraded from a WRT320N. However it seems that calling with SIP (using my Voip Buster account) doesn't work anymore.I don't seem to be able to register with the Voip service. Port is the standard 5060 (if my memory serves me well, I'm not at home now) and I already activated on the router the special tick for Voip ALG calling. Router is upgraded to the latest firmware and it's the V1 router.With all of the above, I still can't connect using SIP to VoiceBuster. It worked like a charm with the WRT320N so it's something with the router?.
I can't make skype calling on any land line or cell phone anymore. I think I Isp have blocked it. Is it possible that any isp can block ant internet calling?
I have some tunnels which terminate to my home router. I'm allowing the other ends of the tunnels to use my voice setup. I need to prepend *67 to all called numbers which don't originate from my house. I don't want people calling my home number based on the caller-id number they see when someone across one of the tunnels calls.
So if 5008 calls 212-333-4444 I want it sent to my provider as *672123334444. If 5001 calls a number, I don't want it touched. Can I do this? I can use IOS or CUCM here.
We are running ACS 5.2 patch 6 and want to restrict access for users to be able to add devices to the system.For example, admin person in site A can only add devices into the site A group and cannot see/access other sites groups.
We are using an ASA 5510 and remote access (SSL VPN) using the AnyConnect client.
Is it possible to display a user message when a user connects using the AnyConnect client, matching a specific dynamic access policy? Can the message be displayed when the action is "Continue" rather than "Terminate"? I can't seem to get this to work and wondered if there was a LUA function to do this.
We have a DAP which gives a restricted ACL when the user's anti-virus is out of date, and I wanted to notify the user to update their anti-virus and reconnect.
Question: how would STP or RSTP behave in a star topology with a hub in the middle?i.e. you have four switches all linked to the same central hub. Single links, no loops.Each switch would then get BPDUs from everybody.Going by theory, it should be OK since it still sees the root's BPDU and will see the link to the hub as the root port, despite presence of other BPDUs from other switches? No different from receiving an inferior BPDU from an upstream switch and a superior BPDU from a further upstream root switch.I guess I could lab it by turning off spanning tree on a switch to simulate a hub? I've never previously had to deal with STP issues where there are hubs that aren't strictly point to point bridging so to speak (ok they're not bridging but you get the drift).I've got a scenario I'm examining at the moment where this is the topology, except all switches have bpdufilter running hence effectively no spanning tree. I'm curious to know what would happen should I remove the bpdufilter.I realise there is zero benefit in spanning tree in this instance as I don't have any redundant loops to fall back on, but I'm reluctant to turn off STP on those vlans (since obviously theres stuff behind those switches). The BPDUfilter method seems like an elegant solution but I wonder if its actually necessary.(the hub is actually a VPLS mesh, most sites terminate PE to CE router but I'm playing around with switches as the termination points – run our own Q in Q, split vlans off before it gets to layer 3 as separation, etc.)
I have a client that requires a single router with POE for placement at an economical price. I was considering the Linksys WAPPOE12, but that is discontinued. What would work with that router?
I have got a cisco 1841 router. I need to do many nat. I have got a lots of virtual interface on this router. How many nat inside and outside does it supports ? Can I do more than one nat insdie and outside in different virual interfaces on the same single router.
First and foremost, what I have are 2 x 7204VXR (Gateways), 1 x 4507R-E (Coreswitch), and our ISP have 7609.Got some issues with redundancy with our ISP.
7609 I I I I 7204-A 7204-B | | | vrrp | | | -4507R-E- | | internal network
Both outside interfaces of 7204 gateways are connecting to 7609 with different public ip block. I used VRRP for my internal nework and failover have been tested working.
Even tried to remove link of 7204-A and 7609, the failover works perfect. If I shutdown/ remove the link between my 4507R-E and 7204-A (primary gw_higher vrrp priority), vrrp redundancy/failover still works, but pings from internal network to internet is only 50% success....alternate 4 ping reply and 4 time out.
