gomez’s blog

In following blog posts I will write about different Cisco based VoIP solutions and I will try to cover some foundation topics like voice signaling protocols and so on. My aim is to present different solutions and possibilities and I hope that you will find it interesting and helpful.

About MGCP and reasons to use it

Media Gateway Control Protocol is client server voice signaling protocol. Call control is handled by call agent (Cisco Unified Communications Manager) and media translation is performed by voice gateway. It is important to mention that it is only client – server model based voice signaling protocol on the market. Also, it is well know for its simple configuration (it is just matter of configuring call agent and remembering several gateway commands), centralized management and one of the main benefits is it’s use for MGCP back-haul QSIG configurations (in short: Layer 2 signalization is handled by voice gateway which is under control of call agent, and layer 3 signalization is forwarded to call agent – Cisco Unified Communications Manager – CallManager). Please note that MGCP is often called Megaco by telco people.

MGCP Messages

1. Create connection – CRCX
2. Notification request – RQNT
3. Notify – NTFY
4. Modify connection – MDCX
5. Delete connection – DLCX
6. Audit endpoint – AUEP
7. Endpoint configuration – EPCF
8. Restart in progress – RSIP

MGCP Call flow

MGCP configuration basics

This part of text will cover MGCP configuration – just foundations. Please note that it won’t include all specific configurations, it will just cover base configuration, but in several new posts I will try to cover different configuration scenarios and solutions.

So, let assume that MGCP call agent, in our case Cisco Unified Communications Manager – CallManager is working on IP address 192.168.1.95. Also, assume that redundant CallManager is working on IP address 192.168.1.100.  This text does not show CallManager side of configuration of a gateway and I assume that that part is already successfully configured (I will eventually edit this blog post to include that configuration, afterwards)

Configurations is as follows:

1. From global configuration mode start MGCP proces:

Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#mgcp
Router(config)#

2. Next thing we need to do is to configure call agent, redundant call agent and we need to inform voice gateway that call agent is under control of MGCP. We can do that as follows:

Router(config)#mgcp call-agent 192.168.1.95
Router(config)#ccm-manager redundant-host 192.168.1.100
Router(config)#ccm-manager mgcp

3. Once done with that, we can configure out Cisco Unified Communications Manager gateway options. So to do that, navigate to your CallManager and in Cisco Unified CM Administration configuration menu select Device > Gateway > Add new. Select your voice gateway model from the drop down list and click Next. For Protocol select MGCP and click Next. Once there, configure Domain name (please note that this field needs to be in following format: gatewayhostname.domainname, for example CCIEVoiceLab.localnetwork.lab) and other required options (add cards and preform complete gateway configuration). Once you are done with voice gateway configuration you are required to configure dial plan which will include this gateway into configuration. That goes beyond the scope of this blog post and I will write about it in some of following blog posts.

4. Once done with CallManager configuration we need to instruct voice gateway about the TFTP address where CallManager stores configuration, and that is typically IP address of the CallManager it self:

Router(config)#ccm-manager config server 192.168.1.95
Router(config)#

5. Once we are done with that we can instruct our gateway to download and apply configuration by issuing following command:

Router(config)#ccm-manager config
Router(config)#

Wait several seconds and you can verify your downloaded and applied configuration with following command:

Router#show running-config
Router(config)#

At that point your voice gateway will be controlled by call agent, in this case CallManager. To verify your configuration please give a check to Troubleshooting commands.

MGCP Troubleshooting

Once you are done with MGCP gateway configuration, you can verify your configuration by issuing following commands:

Router#show mgcp
MGCP Admin State ACTIVE, Oper State ACTIVE – Cause Code NONE
MGCP call-agent: 192.168.1.95 Initial protocol service is MGCP 0.1
MGCP validate call-agent source-ipaddr DISABLED
MGCP validate domain name DISABLED
MGCP block-newcalls DISABLED
MGCP send SGCP RSIP: forced/restart/graceful/disconnected DISABLED
…

This command will show all MGCP settings, timers and so on.

Router#show ccm-manager
MGCP Domain Name: Router
Priority        Status                   Host
======================================
Primary         Registering with CM      192.168.1.95
First Backup    Down                     192.168.1.100
Second Backup   None

Current active Call Manager:    None
Backhaul/Redundant link port:   2428
…

This command will show registration status and other statistics.

Beside above commands, we can use:

Router#show mgcp endpoint
Router#show voice port summary

That would be all for this post. I hope that this blog post is helpful and if you do have some questions in regards to MGCP please let me know and we can try to find solution. In next several posts I will write about MGCP fallback, backhaul and DTMF configurations.

1. Media Gateway Control Protocol
2. MGCP messages

Two years ago I have decided to start working on Cisco Voice Professional certification track. It was logical step to make for me since I was working for several years in voice industry with different solutions, so when I started with Cisco solutions there was no doubt what to choose and why. In prior to further discussion about certification I would like to point that I am full time employed with lot of different responsibilities which can and does impact preparations for certification.  So, for some people that might take this certification track this might be resolved faster, but all depends on attitude, basic knowledge and many other factors. I took a newer track based and created around Cisco Unified Communications Manager 6.0. When I started preparing myself for CCVP, there was active certification based on Cisco Unified Communications Manager 4.1, and main difference beside versions of Cisco Unified Communications Manager  is that old certification path included Gateway and Gatekeeper exam. I took all of the exams as Cisco is recommending on their web site for CCVP certification. So, that is as follows:

Cisco Certified Network Associate Voice – CCNA V

Few months ago I passed Implementing Cisco Quality of Service (QoS). It was one of those “real life” exams with lot of simulations and drag and drop questions. Passing score was set to around ~80% and there was around 50 questions or so. Since Quality of Service is one of the huge areas there is lot of viable documentation. I would recommend Cisco QOS Exam Certification Guide (IP Telephony Self-Study), 2nd Edition from Cisco Press, but there are plenty of other books focused on this area as well. One of the best organized online learn sessions that I have found to be focused on this area was written by Paul Stryer from Global Knowledge. Please find links below text pointing to that online learn session. I need to mention that it is best practice to give a try to all of the solutions that you can find in this texts on real equipment, deploy Quality of Service in your organization and you will gain required understanding and experience to pass this exam. Beside that, you will have your network working much better than it was in prior to implementing QoS within your organization. Since I am following Cisco CCVP track this was only exam that is not directly related to voice (I mean it is not organized around voice strictly) and it was very nice experience. Personally I really enjoyed learning and preparing this stuff, and most of the solutions that I have learned are something that needs and can be implemented in networks that I was working with.

Quality of Service, Part 1 – Introduction
Quality of Service, Part 2 – Introduction
Quality of Service, Part 3 – Introduction
Quality of Service, Part 4 – QoS Mechanisms
Quality of Service, Part 5 – Classification
Quality of Service, Part 6 – Marking
Quality of Service, Part 7 – Service Policy
Quality of Service, Part 8 – Congestion Management
Quality of Service, Part 9 – FIFO Queuing
Quality of Service, Part 10 – Weighted Fair Queuing
Quality of Service, Part 11 – CBWFQ
Quality of Service, Part 12 – Low Latency Queuing
Quality of Service, Part 13 – MQC Pop Quiz
Quality of Service, Part 14 – MQC Pop Quiz Answer

I hope that you will enjoy reading above texts and that you will enjoy implementing Cisco Quality of Service. If you would need some additional information please leave a comment.

Few days ago we finally got our new optical connection. It is working like a charm. Having optical connection and Cisco router from one side and Asterisk server from the other side was a clear sign that we could/should implement QoS for voice traffic. By default, Asterisk is using port range 10000 to 20000 for RTP streams (which is adjustable in /etc/asterisk/rtp.conf) so you have several solutions how to implement Low Latency Queuing – LLQ on Cisco router. You can:

1. use Network Based Application Recognition NBAR to recognize your RTP traffic by using command ‘match protocol rtp’ within required class map;
2. create access control list which would comprehend all the traffic which is working as UDP in port range 10000 to 20000 by executing command ‘access-list 101 permit udp any range 10000 20000 any’ and then call that access control list within class map by using command ‘match access-group 101′;
3. make your Asterisk mark your SIP or RTP traffic by default.

From above listed solutions to this problem, third solution was most logical to me, although all solutions would work. Since there is recommendation to mark traffic as close to source as possible third option was very logical thing to go for. If you are using Asterisk which is working on Linux as root user (in most cases it is working with asterisk user by default) you will need to edit your sip.conf and within section [general] you will need to add following:

tos_sip=cs3
tos_audio=ef

Once done with that, save your configuration, reload asterisk and you are ready to go for Cisco configuration.

As I already mentioned, in most cases Asterisk is using user asterisk for the Asterisk daemon. If that is a case, above listed solution won’t work for you because Linux as operating system won’t allow you to mark your packages as non root user. That is very logical since we would be able to mark our web or some peer to peer traffic packages as EF (expedited forwarding) and obtain priority which is not desired at all. But, there is very powerful solution by using iptables. As root, you will need to execute following:

iptables -A OUTPUT -t mangle -p udp -m udp –dport 5060 -j DSCP –set-dscp 0×28
iptables -A OUTPUT -t mangle -p udp -m udp –sport 10000:20000 -j DSCP –set-dscp 0×28

By executing above commands you will mark your SIP and RTP traffic as DSCP CS5 (IP Precedence 5). You can verify that by catching a trace using snoop/tcpdump.

In case that you would like to set different DSCP values for some traffic, please find partial list here:
Expedited Forwarding, DSCP = 0x2E
CS5, DSCP = 0×28
CS6, DSCP = 0×30
CS7, DSCP = 0×38

Now last thing that we would need to do on the Linux side is to add those iptables rules to load on boot. Edit /etc/rc.local using your favorite text editor and paste above listed iptables lines and save it. Please note that rc.local file is loaded after the network, so if you are planning to put some firewall lines beside those that mark sip and trp traffic you might end up without your firewall rules for few seconds (otherwise, you can execute ‘iptables-save >/etc/iptables.rules‘ and then you would just need to add following line ‘pre-up iptables-restore < /etc/iptables.rules‘ to ‘/etc/network/interfaces‘ by using your favorite text editor to be loaded with network).

On the Cisco router side, we will configure Low Latency Queueing – LLQ to put some priority onto our CS5 marked packages. First thing that we need to do is to create class map from the global configuration mode by executing following commands:

router>enable
router#conf t
router(config)#class-map match-any voice
router(config-cmap)#match ip dscp cs5
router(config-cmap)#exit
router(config)#

By creating class map as listed above we would select our Asterisk marked cs5 packages. Next thing that we need to do is to define what we want to do with above selected cs5 marked packages. We are doing that by creating policy map as follows:

router(config)#policy-map llq
router(config-pmap)#class voice
router(config-pmap-c)#priority percent 20
router(config-pmap-c)#exit
router(config-pmap)#class class-default
router(config-pmap-c)#fair-queue

As per above configuration we are creating policy map called llq, and within that we are specifying 20 percent of available bandwidth for class voice. Please note that we need to have correct bandwidth statement under interface which is connected to WAN. Also, please note that we have enabled fair queueing on class-default (all data which is not selected by some other class map).

Last thing to do in regards to configuration is to enable policy map on interface which is facing connection towards your Internet Service Provider (WAN interface). We can do that by navigating to interface configuration mode and applying service policy in output direction as per following example:

router(config-pmap-c)#exit
router(config-pmap)#exit
router(config)#interface fastEthernet0/1
router(config-if)#service-policy output llq

And that is all. Now, we need to check results of our work by executing following command:

router#show policy-map interface fastEthernet 0/1
FastEthernet0/1

Service-policy output: llq

queue stats for all priority classes:
Queueing
queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0
(pkts output/bytes output) 947031/193919404

Class-map: voice (match-any)
856803 packets, 170900643 bytes
1 minute offered rate 22000 bps, drop rate 0 bps
Match: ip dscp cs5 (40)
856803 packets, 170900643 bytes
1 minute rate 0 bps
Priority: 20% (400 kbps), burst bytes 15000, b/w exceed drops: 0

Class-map: class-default (match-any)
5321936 packets, 1534281066 bytes
1 minute offered rate 20000 bps, drop rate 0 bps
Match: any
Queueing
queue limit 64 packets
(queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0
(pkts output/bytes output) 5322316/1531545858
Fair-queue: per-flow queue limit 16

Please note packet counts under voice class on this policy. That means that we have deployed working configuration which will improve your voip experience. Your voip traffic will get priority among other aggressive traffic flows. Please find some additional information below, and feel free to contact me in order that you have additional questions.

1. Low Latency Queueing
2. Quality of Service

More than year ago when I started using Nokia Eseries one of the reasons to switch to new mobile platform was SIP stack and client support with Eseries (I used to have Nokia E71, now I am proud owner of Nokia E72). By that, I was able to connect to Asterisk or Cisco Unified Communications Manager (by using SIP digest authentication) and that was working like a charm (I am still using SIP integration heavily).

Then, I started to think about different approaches with Nokia in business environment, followed with different cost saving strategies so i asked myself about Nokia Eseries integration with Unified Communication Manager (UCCM and CME environment) by using SCCP. That was logical thing to think of, since there is SIP support already integrated into this phone series and there are plenty of Call Manager deployments in production worldwide natively working with Skinny (SCCP stands for Skinny Client Control Protocol which is often just called Skinny). And, as expected, there was really nice integration prepared by Nokia for their business users called Nokia Call Connect for Cisco.

Nokia Call Connect for Cisco integrates compatible Nokia Eseries devices with compatible enterprise voice infrastructure. When you enter the coverage area of the office wireless local area network, your device automatically registers to Cisco Unified Communications Manager and thereby activates business mode. In business mode, you can use Cisco Unified Communications Manager services to handle business calls.

With Call Connect, you can:

• Use high-speed WLANs instead of cellular networks to make calls when you are within WLAN coverage
• Use the services of Cisco Unified Communications Manager to handle business calls
• Route calls over the enterprise voice and data network to help minimize mobile phone bills
• Benefit from improved mobile phone coverage within buildings by using high-speed WLANs
• Receive notifications of new voice mail as text messages
• Access online services, such as corporate directory

Solution deployment can be splited in two parts:

• Configuring Unified Communications Manager
• Configuring Nokia Eseries phone

Since I am working in lab environment with Unified Communications Manager 6.0 and Nokia E72, I needed to make sure to download proper required packages, as follows:

Nokia Call Connect for Cisco client v2.0 (v2.0(1005)) (SIS, 1,66 MB)
NOTE: Supported devices include Nokia E52, Nokia E55, Nokia E63, Nokia E66, Nokia E71, Nokia E72 and Nokia E75

Cisco option package (COP) file for CUCM 4.x, 5.x and 6.0 for Nokia Call Connect for Cisco clients (.zip, 8 kB)
The file should be imported to Cisco Unified Communications Manager server 4.x, 5.x and 6.0 to add the Nokia Eseries devices in the device list of Communications Manager if the correct device type isn’t yet included there.

Please note that client file provided in the list above is actually trail version of the Nokia Call Connect for Cisco, and it is going to be active for 60 days after which it is going to expire and you will need to purchase real license. This text is not going to describe how to install this client, but I will suggest to install it from OVI store (it is easiest and most convenient way to do so).

Cisco Unified Communications Manager Configuration

After we have downloaded above files, we need to import Cisco Option Package to Unified Communications Manager. Once we are done with that process we will have Nokia S60 listed as valid phone type in CallManager Phones configuration. Process of adding COP file is straight forward and is described in following sections. Please note that you will need to have up and running FTP server in your network to accomplish installation of COP file.

First, we need to navigate to Cisco Unified Communications Manager Serviceability configuration pages (selection can be made from upper right corner as shown on screenshot):

Once logged into Serviceability configuration pages, we need to navigate to Software Upgrades drop down menu, and we need to select Install/Upgrade:

Once there, we need to assume control if there was some previous session:

Next thing is to select preferred source of installation. In our case that is going to be FTP server. Valid options are Remote Filesystem and CD/DVD.

Please fill all required fields (fields indicated with *). Also, make sure to put COP file in root directory of your FTP server, so that CallManager is able to find it as valid upgrade option. You will need to provide Directory (put / for root on your FTP server), Server (IP address of your FTP server), Username and Password (valid user information) and Transfer protocol which can be SFTP and FTP.

Once done with filling up required field, press Next and Call Manager will attempt to contact FTP server. If there is valid COP file (valid upgrade option), and if we are working with proper user information and running FTP server, Call Manager will list valid upgrade options  as per following screenshot:

Please note that valid COP file for Nokia S60 phone type is called cmterm-nokia_s60_001-sccp.cop.sgn. If that is what you have listed, press Next and importing process will start (downloading):

Once it is downloaded you will be presented with MD5 hash value which you can compare with one provided by Nokia from security reasons:

Once you press Next, import process will start and you will be presented with progress as follows:

Process will run for few minutes and once it has been completed, you will be prompted about it as follows:

Once done with this step, we have imported new phone type to Call Manager: Nokia S60. To make sure that it is there, we will need to check it in Cisco Unified CM Administration configuration pages. Therefore, we will need to make proper selection in upper right corner:

Once we are in Cisco Unified CM Administration pages, we need to navigate to Device drop down menu and we need to select Phone.

Once there, we will need to add new phone, and we can do that by pressing Add new button as per following picture:

Once the page is loaded we need to make proper selection, and in our case we need to select Nokia S60. If we are able to see Nokia S60 then our COP import was successful.

Now, assuming that you have installed Call Connect client (.sis) on your Nokia Eseries device and that it works fine, we can continue with configuration. In this section, we will add new phone with phone type device Nokia S60 as listed above. Please notice that product type is now listed as Nokia S60 and that Device protocol is Skinny:

Next thing that we need to do is to check  wireless MAC address on phone since it is one of the required fields in order to add new phone. Fastest way to achieve that on Nokia E71/E72 is to type following code: *#62209526# and you will be prompted with WLAN MAC address. Once you type that into MAC address field, Description field will be populated automatically. Please note that we need to fill up all the fields indicated with asterisk (*).

We will needed to select Phone Button Template and Commong Phone Profile fields since they are required. Also, that includes Presence Groups and Device Security Profile fields as shown on following screenshot:

Once done with basic configuration, we need to save changes by hiting Save button. Then, we need to configure associated information which includes configuration of directory numbers as per following:

Once there, we need to click on Line [1] – Add a new DN and we need to fill up required fields. Field of interest is Directory number. Also, please notice that in Associated Devices box, our Nokia Eseries device will be listed:

Once done with directory number configuration, click on Save and you will have your new Nokia S60 phone configured and listed on phone list, as follows:

Once we are done with configuring Cisco Unified Communications Manager side which includes importing COP file and configuring new phone, we can start configuring Call Connect client which we installed on Nokia Eseries phone.

Configuring Nokia Eseries phone

Since we have server side up and running, we can start configuring our Nokia Eseries Call Connect client. In our lab environment, we are using Nokia E72 and following screenshots are taken on that phone. First thing that we need to do is to open installed application by navigating to Menu > Apps > Nokia CC Cisco. Please notice that Call Connect is offering multiple productivity features such as Call pick up, Group Call pickup, Call divert and DND. Also, please notice that we do not have SCCP active profiles, and in following sections we will describe process of configuring one.

To configure new SCCP service, select Options > Settings > New profile

Once in the New profile configuration mode, we will need to configure Profile name, select default Access Point and configure TFTP server. Please note that in our example Profile name is set to Call Manager, 6BFlat5 is default access point and that TFTP is manually set to 192.168.1.10 which is in our case IP address of our lab Call Manager. Valid option for selecting TFTP server is also DHCP, but in that case we would need to configure DHCP server with option 150, which would indicate IP address of our TFTP server.

Once we are done with basic profile configuration, we can click on Back. We will see our new profile in “Not registered” state. To register service, we will need to navigate to Contacts and then from viable options drop down list we need to select Cisco VoIP and select “Activate service”, as shown below:

Once you activate the service, you will see your newly created profile registered.

Once registered, one additional step can be made in order to make sure that all is working properly. Navigate to Menu > Apps > Nokia CC Cisco and select Status information. You will be able to check what is the Stack version, Outgoing phone number, License information, MAC address, DHCP related information, Networking information and SCCP profile information.

To make sure that all is running fine on Unified Communications Manager, navigate to Cisco Unified CM Administration configuration pages, select Devices drop down list and from there pick up Phones and click on Find/List. You should receive output that indicates that SCCP phone is registered, as follows:

Please notice that in upper right corner on your phone you will be able to see your configured directory number followed by the SCCP profile name (in our example it is (1003)CallManager), and also, registration status will be indicated by the small VoIP icon in bottom part of the screen of your Nokia Eseries phone. Once you have your profile registered with Unified Communications Manager, you can start making VoIP phone calls and you can start using productivity features that we already mentioned in previous text.

For more details about Call Connect please refer to following links:

1. Nokia Call Connect For Cisco
2. Nokia Call Connect For Cisco: Licensing and Support

After a long time, Zenica GNU/Linux Users are about to have meeting! It is going to take a place in Caffe “Ekran” at 18h on 31. Jan ’10. We intend to talk about some future projects, Linux based solutions that we have learned about during our many months of inactivity, and we intend to have good time. Since we were inactive for some time we are happy that there are some new users that we intend to meet with on this meeting. If you are interested in our projects and who we are, just show up. We will be willing to meet you, help you with your Linux/Networking/Programing/IT issues (you don’t have to be Linux user as you can see, and we can help up to level that we are capable to help) and to share our experience!

1. Linux Users group of Bosnia and Hercegovina
2. Zenica Linux users forum

If you are using some Cisco router which is capable of modular QoS you are able to get statistics about bandwidth consumption by specific protocol in your network. Cisco modular QoS is using Network Based Application Recognizition, feature that you will like a lot if you are working with QoS and feature that will make your networking job lot easier. Basically, NBAR is able to recognize type of application/protocol which is communicating over network, and based on that you are able to manipulate that data. You could mark that traffic, shape or police it. This blog post won’t cover those techniques, but my intention is to show how to get statistics. Procedure is very simple:

1. Verify your interface configuration:

R1#show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            80.239.11.100   YES NVRAM  up                    up
FastEthernet0/1            unassigned      YES NVRAM  up                    up
FastEthernet0/1.1          192.168.1.1     YES NVRAM  up                    up
FastEthernet0/1.20         192.168.20.1    YES NVRAM  up                    up
FastEthernet0/1.40         192.168.40.1    YES NVRAM  up                    up
NVI0                       unassigned      NO  unset  up                    up
Tunnel0                    10.100.100.1      YES NVRAM  up                    up

Verify which interface your WAN is working on. In this case it is FastEthernet0/0. We will use that interface for our statistics.

2. Navigate to global configuration mode, and then to interface configuration mode:

R1#
R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#interface FastEthernet 0/0

3. While in interface configuration mode, activate NBAR protocol discovery:

R1(config-if)#ip nbar protocol-discovery
R1(config-if)#

4. It would be good to tune load interval for statistics that we will gather from default 5 minutes to 1 minute:

R1(config-if)#load-interval 60
R1(config-if)#

5. Next, we need to issue proper show command to get statistics, and that would be:

R1#show ip nbar protocol-discovery stats bit-rate top-n 10

FastEthernet0/0
Input                    Output
—–                    ——
Protocol                 1min Bit Rate (bps)      1min Bit Rate (bps)
———————— ———————— ————————
dhcp                     22000                    0
http                     0                        1000
gre                      0                        0
rtp                      0                        0
ipsec                    0                        0
secure-http              0                        0
ssh                      0                        0
dns                      0                        0
icmp                     0                        0
snmp                     0                        0
unknown                  64000                    0
Total                    86000                    1000

As you can see in above example, we are able to get statistics by protocol on specific interface in 1 min bit rate in inbound and outbound direction. Based on those statistics you can make some decisions, what needs to be blocked, shaped, policed or marked. I found this to be a first logical step when deploying QoS.

6. Optional step would be to create alias for show command that is being used in above example:

alias exec traffic ip nbar protocol-discovery stats bit-rate top-n 10

Now, once we type traffic command in privileged mode, we will get protocol statistics:

R1#traffic

FastEthernet0/0
Input                    Output
—–                    ——
Protocol                 1min Bit Rate (bps)      1min Bit Rate (bps)
———————— ———————— ————————
dhcp                     22000                    0
http                     0                        1000
gre                      0                        0
rtp                      0                        0
ipsec                    0                        0
secure-http              0                        0
ssh                      0                        0
dns                      0                        0
icmp                     0                        0
snmp                     0                        0
unknown                  64000                    0
Total                    86000                    1000

For more information please refer to following links:

1. Modular QoS
2. Quality of Service

One of the best Cisco Unified Communications Manager VoIP features is Extension Mobility in my personal opinion. It allows you to temporarily configure another IP Phone as your own by logging in to that phone. Once logged in you will have your number, speed dials and etc. onto that phone, and if you are working as teleworker you would know to appreciate those kind of options. Following text describes how to configure CallManager 6.0 to support Extension Mobility.

Task 1: Verify Extension Mobility Service is Running

Step 1: From the Navigation menu select Cisco Unified CallManager Serviceability

Step 2: Select Tools>Control Center – Feature Services

Step 3: Make sure that the Cisco Extension Mobility service shows status Activated

Task 2: Configure Extension Mobility Service

Step 1: From the Navigation menu select Cisco Unified CallManager Administration

Step 2: Select Device>Device Settings>Phone Services

Step 3: Click Add New

Step 4: In the Service Name field, type Extension Mobility
Step 5: In the Service Description field, type Login and logout service
Step 6: In the Service URL field, Enter the following URL: http://YOURCUCMIPADDRESS/emapp/EMAppServlet?device=#DEVICENAME#

Step 7: Click Save

Task 3: Modify Enterprise Parameters to Reflect IP Address of CallManager (remove DNS reliance)

Step 1: Select System>Enterprise Parameters

Step 2: Under Phone URL parameters, change all fields to reflect IP addresses instead of hostnames. Change ONLY the host name, not the reset of the field.

Step 3: Click Save
Step 4: Click Ok from the pop-up warning.
Step 5: Click Reset
Step 6: In the pop-up window select Reset
Step 7: Click Close

Task 4: Create Device Profile Default for Each Phone Model that shall Support Cisco Extension Mobility (this step is optional)

Step 1: Select Device>Device Settings>Default Device Profile
Step 2: From the drop down list, select the phone model to be configured, for example, Cisco 7960.
Step 3: Under Description, enter a description of this profile.
Step 4: Under Phone Button Template, select Standard 7960 SCCP.
Step 5: Click Save
Step 6: Repeat for each model phone to be configured

Task 5: Create Device User Profile for a User

Step 1:  Choose Device>Device Settings>Device Profile and click Add New.

Step 2: From the drop down list, select the phone model to be configured, for example, Cisco 7960
Step 3: Click Next
Step 4: Enter a Device Profile Name (in this example KemalSanjtaProfile).
Step 5: From the Phone Button Template field, select Standard 7960 SCCP.
Step 6: Click Save.

Step 7: On the left hand side of the screen, click the link Line [1] – Add a new DN.

Step 8: Choose a valid DN from your NIP, enter that DN in the Directory Number field.
Step 9: Under Route Partition, select your city’s Headquarters Partition.

Step 10: Under Directory Number Settings choose a CSS of appropriate access.

Step 11:  Enter any Call Forward and Call Pickup Settings as necessary.
Step 12: In the Display (Internal Caller ID)
Step 13: Click Save.
Step 14: From the Related Links: menu, select Subscribe/Unsubscribe Services.

Step 15: In the Select a Service, select Extension Mobility, then click Next.

Step 16: Click Subscribe.

Step 17: Click Save.
Step 18: Repeat steps 7-13 for any additional lines.

Task 6: Associate User Device Profile to a User

Step 1: From the menu, select User Management>End User.

Step 2: Click Find
Step 3: Select the user from the list that matches the profile that was created.

Step 4: Under Extension Mobility>Available Profiles, select the profile that was created in the previous exercise and move it to the Controlled Profiles selection (in our example it is KemalSanjtaProfile).

Step 5: Under Default Profile, select the profile.
Step 6: Click Save.

Task 7: Configure and Subscribe Cisco Unified Ip Phones to Service and Enable it.

Step 1:  Select Device>Phone from the menu.

Step 2:  Select the phone from the list of devices.

Step 3: In the Related Links: field, select Subscribe/Unsubscribe Services and click Go

Step 4: In the pop-up window, under Service Information, in the Select a Service pull down menu, select Extension Mobility.

Step 5: Click Next
Step 6: Click Subscribe

Step 7: Click Save

Step 8: Close the pop-up window

Step 9: Under Extension Information , check the Enable Extension Mobility box.
Step 10: Under the Logout Profile field, select – Use Current Device Settings –
Step 11: Click Save.

Step 12: Click Ok from the pop-up warning.
Step 13: Click Reset
Step 14: In the pop-up window select Reset.
Step 15: Click Close.

Note: This post has been updated on 12/03/2010 in order to describe how to assign Extension Mobility Phone service to Device Profile (including screenshots).

Few days ago we had request to shape http and https traffic to one megabit in our network. This post will describe full procedure in several simple steps.

First thing that we need to do is to create class map which will match http and https traffic. To do so, we need to do following:

enable

conf t

class-map match-any WEB

match protocol http

match protocol secure-http

exit

Explanation:

1. switch to privileged mode;
2. switch to global configuration mode;
3. once in global configuration mode, we are able to create class-map and to name it WEB. Please note that we have match-any statement as well. There are two possibilities that we can use: match-any and match-all. Difference between them is same as with logical or and logical and. In case of using match-any we are matching host or https or http traffic;
4. we are matching http traffic for this class-map;
5. we are matching https traffic for this class-map.

Once we are done with creating class-map, we need to create policy-map which will match class-map that we previously defined and we need to set policing options in order to shape http and https traffic to one megabit. Here is the procedure:

policy-map OUTPOLICY

class WEB

police 1000000 conform-action transmit  exceed-action drop  violate-action drop

exit

Here is the explanation of above configuration:

1. Creating policy-map named OUTPOLICY;
2. we are matching class WEB with OUTPOLICY which means that all that we configure will apply to class WEB;
3. We are allowing one megabit for http and https traffic previously defined in class map WEB and matched in previous step (that traffic is allowed with conform-action transmit and all traffic above that will be dropped by statement exceed-action drop).

Now, lets imagine that we have router with two interfaces: FastEthernet 0/0 which is being used for WAN link and FastEthernet 0/1 which is used as interface on which is LAN connected (lets say that it is working with IP address 192.168.0.1 and it is default gateway for hosts in your network).

We need to apply our QoS configuration on both interfaces. Configuration is as follows:

interface FastEthernet 0/0

service-policy output OUTPOLICY

exit

interface FastEthernet 0/1

service-policy output OUTPOLICY

exit

As you can see, we are setting service-policy OUTPOLICY in outband direction and we are doing that on both interfaces. If we are watching our network from our network towards Internet this rule will mean that we are limiting upload (rule on the interface FastEthernet0/0), if we are watching from the Internet side towards your local network, rule on FastEthernet 0/1 interface will mean that we are limiting download. I know that it can be confusing, because it would be logical to have this rule in inbound direction for local interface FastEthernet0/1, but all depends of point of view. All the concept is very similar to access lists.

To make sure that all is working fine, we can execute following commands:

show class-map WEB

show policy-map interface FastEthernet0/0 (FastEthernet0/1)

Since I am working for company that will not ever never let us connect to their network without VPN client, and taking in consideration that I wanted to use Linux on my laptop it was time to get my hands on selecting appropriate VPN client since I am working as teleworker (this sounds cool to me).

Now, before I start describing anything I need to say that I am using Ubuntu 9.04 on my laptop. Few of the reasons for using Ubuntu would be that it is working very nice, it is fast enough, it is nice looking and very stable at the same time, and at the end of day it is Debian based, and I proudly admit that I am emotional when it is about Debian. Ok, now back to VPN clients.

We are using IPsec. Therefore, I needed something that can support it and actually I have found two real possibilities:

1. Cisco VPN client for Linux
2. vpnc

I was working with vpnc before and I have to admit that it was my first selection. In my personal opinion it is working very nice, and it is really easy to use. network-manager-vpnc is actually just a vpnc plugin for network-manager and is nice solution because you will be able to use it from nm-applet from panel which is more friendly than connecting over console. vpnc is capable of working just over UDP and I have found it as huge limitation. I am working from the network which is reaching limits almost all the time, and UDP in those kind of networks is not that good solution. In most cases, if you are using UDP and you are working from those described networks you will see on the statistics that you are sending bytes, but you are not receiving anything. I was trying to find some vpnc clone that is working over TCP, because we obviously need some packet delivery guarantee, but I wasn’t that successful. That was reason to try Cisco VPN client.

There is really good project page for Cisco VPN client at this link. As i have heard, people were complaining that it is hard to compile it and install it, but with installations provided on the above link, it is not that hard to accomplish that. Main reason why em I actually using Cisco VPN client is ability to work over TCP. It is working really good, it is stable and I would, from my personal experience, recommend it.

I have noticed that huge disadvantage of using Cisco VPN client is using it over wireless network. After certain period of time my Ubuntu just freezes and only way to get it working is to turn it off, and start it over again. Solution is to use wired network, after that it is all work fine. It seems that Intel wireless driver is actually making this problem, but I was reading that some of the users are complaining on really bad multi core support. One of the solutions was to start it with just one core (which means to disable one core in prior to starting vpn client), which is not that user friendly. One of following posts will describe procedure how to install and to configure both vpnc and cisco vpn client, and how to resolve some of the issues that might occur while using them.

I am not writing this blog that often as much as I would like to. But that is kind of normal, I would say so, because it is summer time. I have noticed in last few years that Blog community is not that active over summer, like in the other parts of the year. I was off for almost a month, vacations and other took a place in activity. I can see that cloud computing enters on big doors this year, so that is something interesting where can we expect news from big dealers. Also 100GbE competing between Cisco and Juniper is going on, it will be nice to follow up that story as well.

However, good thing that I was working on in past several months and I was not mentioning that on my blog is that I was preparing for Cisco CVOICE exam. I have passed exam with 92% or something like that, and I am really proud on that. Ok, it is very similar to CCNA Voice, but some topics are covered with lot more details than it is case with CCNA Voice. Exam contains around 60 questions, and I was surprised that there is just one simulation. I was reading about exam on several forums before going to it, and it seems that other people had one or none of the simulations, which is something that surprises me from Cisco. There was several drag and drop questions as well. I don’t have intention to speak about questions but there was a lot of E&M ports related questions, so beware!

Next cert that I intend to work on is CIPT. Good thing that Cisco did is that they left opportunity to install Cisco Unified Communications Manager in VMware. That is really good because we are now able to create home labs and prepare it without renting a rack or buying expensive HP or IBM compatible hardware in order to test some things. That is all for this blog post.

More than six months from getting my CCNA certificate, I have passed CCNA Voice (few weeks ago actually, but I am not refreshing this blog as much as I would like to). For me, that was logical step to take, because I was working few years in VoIP industry and I was interested in Cisco’s way of solving some VoIP based tasks, like voice routing, productivity features (music on hold, call transfer, blind and consultative, after hours call blocking, directory, call forwarding, call park/pickup and so on). CCNA Voice cert is covering all of those topics in details including setup of Cisco Unity (their voicemail solution), codecs and many other configuration based things that you could face as real-world requirements (like PSTN fail-over for example). There is up to 65 questions on the test and you are having two hours for that. There is just one simulation on the exam (I have expected more, but there is no as much as on the CCNA exam). Questions are in the form of the single answer, multiple choice and drag and drop. It was real pleasure for me to prepare this exam, since I was having two deployments of Cisco VoIP in prior to my decision to get certified in this field, and at the moment I am dealing with Cisco voice gateways. In next few months I will try to get some more voice certs, depending on my free time. Everyone interested in voice over ip, or generally in voice and is Cisco oriented should check this huge and interesting area.

One of the good things about Spanning Tree Protocol is that it works well by default. I have faced multiple situations where i needed to deal with it, but it is rare that it does not preform like you would expect it to (also, I do remember one situation with Cisco WLS controller and Cisco switches from the series 500 / those are not Catalyst series and there is no console port / where I was trying to find solution while at the same time STP was blocking some ports and I was not able to find out what is really happening so i overnight at deployment).

Basically, STP is preventing evil infinite loops in our networks. And it works well. But there is occasion where it works against us, and that is situation where we have two interconnected switches with multiple physical connections. We would expect that if we have two separate connections between switches twice as much data could be sent from one switch to the other than if there was only one connection. But, in normal network scenario one of the ports based on certain criteria would be blocked in order to prevent infinite loops (broadcast storms).

So, to follow up the scenario, let say that we have two switches, switch1 and switch2 trunked on the FastEthernet0/4 and FastEthernet0/5, so if we execute:

switch1#show spanning vlan 20
Interface Role Sts Cost Prio.Nbr Type
—————- —- — ——— ——– ——————–
Fa0/4 Root FWD 19 128.11 P2p
Fa0/5 Altn BLK 19 128.12 P2p

we will see that FastEthernet0/4 is forwarding traffic (FWD state) and that FastEthernet0/5 i blocked (Role Alt and Sts BLK). So if we somehow reconfigure Fa0/5 to be in FWD state we could double the bandwidth available between the two switches if we could use that path that is currently being blocked.

Ok, to take advantage of this situation we could do two things:

1. To configure EtherChannel
2. To play with VLANS and STP costs and trunk allowed vlan command (if scenario allows that)

We will describe configuration of the EtherChannel. An Etherchannel is simply a logical bundling of 2 – 8 physical connections between two Cisco switches (it is interesting that EtherChannel is mentioned in Cisco CCNA curriculum as a technology but actually is not described from the configuration point).

To configure EtherChannel we will need to execute “channel-group 1 mode on” command on the trunked ports. We need to follow this procedure on all interconnected/trunked ports (because line protocol could stay in status down otherwise on ports).

Good thing is that STP will see EtherChannel as one virtual connection. If some connection in EtherChannel goes offline we will not face any STP recalculation, and of-course, transmission will be slowed but we will avoid STP recalculation and transmission delay .

Configuration as follows:

switch1#conf t
switch1(config)#interface fast 0/4
switch1(config-if)#channel-group 1 mode on
Creating a port-channel interface Port-channel 1

switch(config-if)#interface fast 0/5
switch1(config-if)#channel-group 1 mode on

switch2#conf t
switch2(config)#int fast 0/4
switch2(config-if)#channel-group 1 mode on
switch2(config-if)#int fast 0/5
switch2(config-if)#channel-group 1 mode on

To verify configuration we will use command:

switch2#show spanning vlan 20
Interface Role Sts Cost Prio.Nbr Type
—————- —- — ——— ——– —————
Po1 Desg FWD 12 128.65 P2p

Please note that instead of physical ports listed we are now able to see virtual port Po1 as the designated forwarding port. Po1 stands for Port-Channel1. It is the logical interface created automatically once the EtherChannel configuration is done.

Now, just for the comparison reasons, if one of the interconnected interfaces goes down in scenario without EtherChannel, STP will go through recalculation process and ports will go through learning, listening and other stated until it ends up in the FWD state. That process could take up to one minute! In case that we have EtherChannel in place, our Po1 listed above would still be in FWD state and we wouldn’t notice any transmission delay.

I strongly believe that we are dealing with really good technology and this is also one of the solutions (like HSRP) that could save a lot of time and make your day-to-day job easier.

Few weeks ago I was working with several Cisco layer three switches, to be precise those were Cisco 3560 series. The part of the scenario was to provide stable and powerful fail over technology  in case that one of those switches goes down from some reason (I don’t know why, but when I am talking about downtime on the cisco devices i am always thinking of lightening although i don’t have any experience with cisco devices going down from that reason). To simplify scenario, i will talk about two switches in active/standby configuration.

How to achieve that? Is there light at the end of tunnel? Yes, there is a light! And it is called HSRP. HSRP stands for Hot Standby Router Protocol and that is first-hop redundancy protocol designed to allow for transparent fail-over of the first-hop router. Yes, i know it sounds ultra complicated and tuff, but I would say that it is just that fist impression that we have when dealing with something new.

When HSRP is configured on a network segment, it provides a virtual MAC address and an IP address that is shared among a group of routers running HSRP. The address of this HSRP group is referred to as the virtual IP address. One of these devices is selected by the protocol to be the active router. The active router receives and routes packets destined for the MAC address of the group. For n routers running HSRP, n + 1 IP and MAC addresses are assigned.

HSRP detects when the designated active router fails, at which point a selected standby router assumes control of the MAC and IP addresses of the Hot Standby group. A new standby router is also selected at that time.

HSRP uses a priority mechanism to determine which HSRP configured router is to be the default active router. To configure a router as the active router, you assign it a priority that is higher than the priority of all the other HSRP-configured routers. The default priority is 100, so if you configure just one router to have a higher priority, that router will be the default active router.

Devices that are running HSRP send and receive multicast User Datagram Protocol (UDP)-based hello messages to detect router failure and to designate active and standby routers. When the active router fails to send a hello message within a configurable period of time, the standby router with the highest priority becomes the active router. The transition of packet forwarding functions between routers is completely transparent to all hosts on the network.

OK, now when we know how cool is HSRP and what nice benefits it is providing to us, it is time to configure it. As you will see, it is simple straight forward process:

1. enable
Enables privileged EXEC mode.
2. configure terminal
Enters global configuration mode.
3. interface FastEthhernet0/5
Configures an interface type and enters interface configuration mode.
4. ip address 192.168.1.10 255.255.255.0
Specifies an IP address for an interface.
5. standby 1 priority 110
Configures HSRP priority (default priority is 100).
6. standby 1 preempt delay minimum 380
Configures HSRP preemption and preemption delay. By default, the router that comes up later becomes the standby.
7. standby 1 ip 192.168.1.254
Activates HSRP.
8. end
Returns to privileged EXEC mode.
9. show standby brief
Displays HSRP information.
10. show standby FastEthernet0/10
Displays HSRP information about specific interface.

Follow the procedure for all devices that you would like to work with HSRP and enjoy. There is lot more features that you can configure with HSRP like authentication, object tracking and so on, but I am not having intention to explain those in details. I strongly encourage you to dig deeper about HSRP because it is really good and fully working technology that can make your day to day job (or life) easier.

Although I was never working with Juniper Networks stuff directly I need to admit that I always wanted to. Since I am working with Cisco related stuff mostly I didn’t needed to, or it is better to say that I just didn’t have opportunity or need to work that much with other competitors networking hardware. Definitely, this is not a time or place to talk about Cisco’s market share .) Good friend of mine was working with Juniper for like almost a decade and he was always speaking how they do have some nice  procedures for solving some nightmare networking scenarios related to security, QoS, and things like that. What I really like about Juniper is their operating system JunOS, which is working at the top of BSD (and for those guys that are coming from the FOSS community is always something nice to know about). Also, as far as i know their configuration file is stored in really nice and organized manner so that you can see dependant part of configurations (for example VPN part of configuration starts with { and ends with }).

Today, in RSS feed i saw on the Cisco blog link that i want to share. Actually, it is Juniper Networks Fasttrack Certification program.

The Juniper Networks Certification Fast Track program is specifically designed for experienced networking professionals who want to become certified in JUNOS® Software. Between January and December of 2009, you have online access to study materials at no charge so you can quickly increase your value by earning JUNOS-based certifications. If you’re interested in enterprise routing, enterprise switching, or the latest security platforms running JUNOS, this is the place to go for courseware and discounts on certification exams.

Seems to be some really good chance to get serious with Juniper related stuff and prepare yourself for their Exams. If I catch some time, i will definitely try to get my hands on some of their routers/switches and start learning their way of organizing and configuring networking equipment.

1. Juniper Networks
2. Juniper Networks FastTrack certification program

Few months ago i decided to buy Nokia E71. Although i was not fan of those full qwerty mobiles (they always seemed to be so big) i have decided to buy this one after realising that it is piece of good and really powerful hardware (400 Mhz ARM processor, almost like my first PC). And really, i found it to be really good. From connectivity point of view we are dealing with mobile phone that is working with Bluetooth, Wireless LAN and SIP (which i personally admire as killer feature) VPN and other interesting stuff, which is more then enough for normal business user. As i already mentioned, the best thing for me that it is working with SIP. In company that I am working for, we have Asterisk telephony solution which is working with SIP and IAX protocol so i have my personal extension for mobile phone and when i am working out of office, in area that is covered with wireless internet connectivity, i can make free phone calls (at the moment we are considering one of those nice analog cards from Digium or Sangoma so that we can make calls to PSTN) which is really good. This is classical business oriented phone with a lot of nice features that could be used in different environments and for different business needs. Also, it is working with Simbian so there is a lot of good and useful applications available. I would fully recommend this phone to anyone who needs business phone.

1. Full phone specifications

For I find lot of pleasure in networking control. Administering all over the Spain.

U prisustvu preko tri stotine učesnika, od poslovnih i tehničkih menadžera vodećih kompanija u BiH, predstavnika stranih kompanija u BiH, javnih institucija, vodećih Cisco partnera, do brojnih predstavnika medija, otvorena je Cisco Expo 2008 Konferencija u Sarajevu

U dvodnevnom zaista zgusnutom programu nakon svečanog otvaranja g. Harisa Prnje, generalnog direktora Cisco za BiH, specijalni gost bio je g. Kan Terzloglu, predsjednik Cisca za Centralnu i Istočnu Evropu . U izložbenom prostoru predstavljan je program: Net riders-Ciscov program, a paralelno je išla i izložba svjetskih i bosanskohercegovačkih kompanija: Logo soft, BH telecom.Pandult, Lanaco, Verso, Sys Company, MiBo komunikacije i Ava com group.

U Sarajevu , u organizaciji Cisco BH o od 26 .do 27. .marta, u prostorijama hotela Radon Pleza odžana tradicionalna Konferencija. Naravno najzanimljiviji dio manifestacije bila su predavnja, razvrstsna u nekoliko kategorija od plenarnih, sponzorskih, poslovnih, pa preko predavanja operatera i provajdera do najzanimljivijih tehnoloških predavanja.

Od gostiju koji su držali predavnja izdvojio bih najzanimljivija i najposjećanija predavanja: Petera Gaspara koji je izneo najnovija rešanja za Mobilni WiMax, zatim Telefoniju za biznis korisnike, koju je saopštio Damir Šaranović. Veliku pažnju je privukla je i tema Iron Port: Proizvodi i tehnologije za zaštitu e-maila i Weba Hrvoja Dogan.

Vrlo zanimljivo bilo je i predavanje Gorana Peteha: Mreža koja se sama brani – novosti iz sigurnosnih rešanja , a novosti iz Objedinjenih komunikacija izneo je Aleksandar Vulović.

Kao i svake godine na kraju manifestacije dodijeljene su i nagrade srećnim dobitnicima, koji su bili posjetioci i učesnici ove zanimljive i značajne manifestacije. U dobroj organizaciji trebalo je u bogatom izboru tema odabrati one koje su najzanimljivije i najaktuelnije.

Ne stižem da napišem detaljni izvještaj sa konferencije, ali ovaj koji sam našao u potpunosti odgovara. Sve u svemu, dosta lijepo iskustvo, a čekam i neke slike koje imam namjeru da objavim ovdje.

1. Source
2. Oficijelna vijest o održavanju konferencije

Poštovani prijatelji i partneri,

LogoVeliko mi je zadovoljstvo i čast obavijestiti Vas da će kompanija Cisco BiH i ove, kao i prošle godine, organizirati Cisco Expo konferenciju.

Cisco Expo 2008 će se održati 26. i 27. marta u hotelu Radon Plaza u Sarajevu, gdje očekujemo preko tri stotine učesnika – poslovnih i tehničkih menadžera vodećih domaćih kompanija, predstavnika stranih kompanija u BiH, Vlade i javnih institucija, vodećih Cisco partnera, te predstavnika medija – koji će se u inovativnom okruženju upoznati sa najnovijim dostignućima mrežnih tehnologija.

Svrha ove konferencije je predstavljanje modernih tehnoloških ostvarenja u obliku predavanja, radionica i okruglih stolova. Cilj nam je okupiti poslovne ljude najvećih domaćih kompanija, inžinjere i ostale stručnjake iz bosanskohercegovačkog i regionalnog IT tržišta. Želimo predstaviti najnovija Cisco tehnička i poslovna rješenja za različite sektore privrede kao i rješenja trećih kompanija čije su tehnologije i usluge u interakciji sa Cisco mrežnim rješenjima.

Očekujemo Vas u Radon plazi!

Haris Pinjo
direktor
Cisco BiH