Re: [OSL | CCIE_Voice] UCM DHCP

2013-06-22 Thread Bill Lake
So you see the request coming into the server but the phone never gets them
back?

Can you ping the voice vlan from the server?




On Sat, Jun 22, 2013 at 3:05 PM, Somphol Boonjing  wrote:

> Hi Anuritha,
>
> The screenshot is useful.  The 4 parameters in the bottom of the screen
> must be set.  Once you know what they means it will make sense.
>
> For now set them to in these order,  you can change them later to fit your
> need.
>
> 3000
> 28800
> 14400
> 18800
> On 23/06/2013 4:33 AM, "anuritha konjety"  wrote:
>
>> Whats interesting is if I do a sh cdp neigh detail on Switch A, I see one
>> of the phones got an IP
>>
>> Device ID: SEP001BD4C6986C
>> Entry address(es):
>>   IP address: 10.10.200.129
>> Platform: Cisco IP Phone 7960,  Capabilities: Host Phone
>> Interface: FastEthernet1/0/2,  Port ID (outgoing port): Port 1
>> Holdtime : 138 sec
>>
>> But the phone itself doesn't seem to have an IP, nothing shows up under
>> sh ip int bri either.
>>
>> Got a capture from callmanager pub. Filter to ip.addr == 10.10.200.3,  I
>> see DHCP request coming from 10.10.200.3 & also see call manager responding
>> with an IP(10.10.200.129). However the see the 10.10.200.3 send the request
>> again & again, looks like its stuck in a loop.
>> Is this a bug?
>>
>> Attached to this email are screenshot f UCM config, capture from UCM
>> pub(DHCP server) and sh run/debugs from Switch A, Router A.
>>
>>
>> \itha konjety  wrote:
>>
>>> Debugs from Router: seeing similar errors //no SVI on switch//
>>>
>>> Jun 22 17:01:50.907: DHCPD: checking for expired leases.
>>>  --More--
>>> Jun 22 17:01:52.723: DHCPD: Sending notification of DISCOVER:
>>> Jun 22 17:01:52.723:   DHCPD: htype 1 chaddr 001b.d4c6.986c
>>> Jun 22 17:01:52.723:   DHCPD: remote id 020a0a0ac8030066
>>> Jun 22 17:01:52.723:   DHCPD: circuit id 
>>> Jun 22 17:01:52.723: DHCPD: Seeing if there is an internally specified
>>> pool class:
>>> Jun 22 17:01:52.723:   DHCPD: htype 1 chaddr 001b.d4c6.986c
>>> Jun 22 17:01:52.727:   DHCPD: remote id 020a0a0ac8030066
>>> Jun 22 17:01:52.727:   DHCPD: circuit id 
>>> Jun 22 17:01:52.727: DHCPD: setting giaddr to 10.10.200.3.
>>> Jun 22 17:01:52.727: DHCPD: BOOTREQUEST from 0100.1bd4.c698.6c forwarded
>>> to 10.10.210.10.
>>>
>>>
>>>
>>> On Sat, Jun 22, 2013 at 9:30 AM, anuritha konjety 
>>> wrote:
>>>

 Thanks Somphol, I will start debugging at the router level.
 The SVI was initially not there, I was trying few different things to
 get this to work & added it.


 On Sat, Jun 22, 2013 at 5:36 AM, Somphol Boonjing wrote:

> A few points that I think worth double check:
>
> [1]
>
> Assuming this is the configuration of the DHCP on CUCM, I think the
> primary router doesn't require subnet mask to be specified
>
> DHCP Server : 10.10.210.10
> subnet IPV4 address: 10.10.200.0
> primary start addr: 10.10.200.120
> primary end addr : 10.10.200.130
> primary router : 10.10.200.3/255.255.255.0
>
> [2]
>
> In the same broadcast domain (VLAN 102), you seem to have two routing
> interface, one on the router and another on as SVI on the switch.
> Unless
> it serves other purpose, I think you can safely remove the SVI.
>
> interface FastEthernet0/0.102
>  encapsulation dot1Q 102
>  ip address 10.10.200.3 255.255.255.0
>  ip helper-address 10.10.210.10
> !
>
> interface Vlan102
>  ip address 10.10.200.120 255.255.255.0
> !
>
> [3]
>
> Once the SVI "interface vlan102" is removed, then the interface that
> actually forward your request to the CUCM DHCP should be the fa0/0.102 on
> the router that has already been configured with ip helper-address
> 10.10.210.10 (assuming that this is your CUCM IP).
>
> Then, the following trace on the switch will not be relevant anymore.
>
>
> 01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on
> interface Vlan102.
> 01:58:00: DHCPD: there is no pool for 10.10.200.120.
>
> Once removing SVI 102, then you should try to focus your debugging
> effort on the Router and not on the switch.
>
>
> [4]
>
> Your DHCP range seems to start with 10.10.200.120 and that could cause
> a collision with the SVI's IP address, even if everything else is correct.
>   I remember that IOS-based DHCP seems to assign the last IP address in 
> the
> pool, but I'm not sure how CUCM DHCP select the IP address from the pool.
>
>
> --Somphol
>
>
> On Sat, Jun 22, 2013 at 10:27 AM, anuritha konjety <
> anurith...@gmail.com> wrote:
>
>> Ovidiu,
>>
>> Yes, & ip helper-address is configured.
>>
>> Regards,
>> Anu
>>
>>
>> On Fri, Jun 21, 2013 at 4:32 PM, Ovidiu Popa wrote:
>>
>>> Hello Anuritha
>>>
>>> Do you by any chance have an SVI on vlan 102 ?
>>>

Re: [OSL | CCIE_Voice] UCM DHCP

2013-06-22 Thread Somphol Boonjing
Hi Anuritha,

The screenshot is useful.  The 4 parameters in the bottom of the screen
must be set.  Once you know what they means it will make sense.

For now set them to in these order,  you can change them later to fit your
need.

3000
28800
14400
18800
On 23/06/2013 4:33 AM, "anuritha konjety"  wrote:

> Whats interesting is if I do a sh cdp neigh detail on Switch A, I see one
> of the phones got an IP
>
> Device ID: SEP001BD4C6986C
> Entry address(es):
>   IP address: 10.10.200.129
> Platform: Cisco IP Phone 7960,  Capabilities: Host Phone
> Interface: FastEthernet1/0/2,  Port ID (outgoing port): Port 1
> Holdtime : 138 sec
>
> But the phone itself doesn't seem to have an IP, nothing shows up under sh
> ip int bri either.
>
> Got a capture from callmanager pub. Filter to ip.addr == 10.10.200.3,  I
> see DHCP request coming from 10.10.200.3 & also see call manager responding
> with an IP(10.10.200.129). However the see the 10.10.200.3 send the request
> again & again, looks like its stuck in a loop.
> Is this a bug?
>
> Attached to this email are screenshot f UCM config, capture from UCM
> pub(DHCP server) and sh run/debugs from Switch A, Router A.
>
>
> \itha konjety  wrote:
>
>> Debugs from Router: seeing similar errors //no SVI on switch//
>>
>> Jun 22 17:01:50.907: DHCPD: checking for expired leases.
>>  --More--
>> Jun 22 17:01:52.723: DHCPD: Sending notification of DISCOVER:
>> Jun 22 17:01:52.723:   DHCPD: htype 1 chaddr 001b.d4c6.986c
>> Jun 22 17:01:52.723:   DHCPD: remote id 020a0a0ac8030066
>> Jun 22 17:01:52.723:   DHCPD: circuit id 
>> Jun 22 17:01:52.723: DHCPD: Seeing if there is an internally specified
>> pool class:
>> Jun 22 17:01:52.723:   DHCPD: htype 1 chaddr 001b.d4c6.986c
>> Jun 22 17:01:52.727:   DHCPD: remote id 020a0a0ac8030066
>> Jun 22 17:01:52.727:   DHCPD: circuit id 
>> Jun 22 17:01:52.727: DHCPD: setting giaddr to 10.10.200.3.
>> Jun 22 17:01:52.727: DHCPD: BOOTREQUEST from 0100.1bd4.c698.6c forwarded
>> to 10.10.210.10.
>>
>>
>>
>> On Sat, Jun 22, 2013 at 9:30 AM, anuritha konjety 
>> wrote:
>>
>>>
>>> Thanks Somphol, I will start debugging at the router level.
>>> The SVI was initially not there, I was trying few different things to
>>> get this to work & added it.
>>>
>>>
>>> On Sat, Jun 22, 2013 at 5:36 AM, Somphol Boonjing wrote:
>>>
 A few points that I think worth double check:

 [1]

 Assuming this is the configuration of the DHCP on CUCM, I think the
 primary router doesn't require subnet mask to be specified

 DHCP Server : 10.10.210.10
 subnet IPV4 address: 10.10.200.0
 primary start addr: 10.10.200.120
 primary end addr : 10.10.200.130
 primary router : 10.10.200.3/255.255.255.0

 [2]

 In the same broadcast domain (VLAN 102), you seem to have two routing
 interface, one on the router and another on as SVI on the switch.Unless
 it serves other purpose, I think you can safely remove the SVI.

 interface FastEthernet0/0.102
  encapsulation dot1Q 102
  ip address 10.10.200.3 255.255.255.0
  ip helper-address 10.10.210.10
 !

 interface Vlan102
  ip address 10.10.200.120 255.255.255.0
 !

 [3]

 Once the SVI "interface vlan102" is removed, then the interface that
 actually forward your request to the CUCM DHCP should be the fa0/0.102 on
 the router that has already been configured with ip helper-address
 10.10.210.10 (assuming that this is your CUCM IP).

 Then, the following trace on the switch will not be relevant anymore.


 01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on
 interface Vlan102.
 01:58:00: DHCPD: there is no pool for 10.10.200.120.

 Once removing SVI 102, then you should try to focus your debugging
 effort on the Router and not on the switch.


 [4]

 Your DHCP range seems to start with 10.10.200.120 and that could cause
 a collision with the SVI's IP address, even if everything else is correct.
   I remember that IOS-based DHCP seems to assign the last IP address in the
 pool, but I'm not sure how CUCM DHCP select the IP address from the pool.


 --Somphol


 On Sat, Jun 22, 2013 at 10:27 AM, anuritha konjety <
 anurith...@gmail.com> wrote:

> Ovidiu,
>
> Yes, & ip helper-address is configured.
>
> Regards,
> Anu
>
>
> On Fri, Jun 21, 2013 at 4:32 PM, Ovidiu Popa wrote:
>
>> Hello Anuritha
>>
>> Do you by any chance have an SVI on vlan 102 ?
>> If yes have you tried configuring ip helper-address on that SVI ?
>>
>> Regards,
>> Ovidiu
>>
>>
>>
>> On Sat, Jun 22, 2013 at 12:26 AM, anuritha konjety <
>> anurith...@gmail.com> wrote:
>>
>>> Hello,
>>>
>>>I am having trouble with getting phones Ip address when UCM(pub)
>>> is configured as the DHC

Re: [OSL | CCIE_Voice] UCM DHCP

2013-06-22 Thread anuritha konjety
Debugs from Router: seeing similar errors //no SVI on switch//

Jun 22 17:01:50.907: DHCPD: checking for expired leases.
 --More--
Jun 22 17:01:52.723: DHCPD: Sending notification of DISCOVER:
Jun 22 17:01:52.723:   DHCPD: htype 1 chaddr 001b.d4c6.986c
Jun 22 17:01:52.723:   DHCPD: remote id 020a0a0ac8030066
Jun 22 17:01:52.723:   DHCPD: circuit id 
Jun 22 17:01:52.723: DHCPD: Seeing if there is an internally specified pool
class:
Jun 22 17:01:52.723:   DHCPD: htype 1 chaddr 001b.d4c6.986c
Jun 22 17:01:52.727:   DHCPD: remote id 020a0a0ac8030066
Jun 22 17:01:52.727:   DHCPD: circuit id 
Jun 22 17:01:52.727: DHCPD: setting giaddr to 10.10.200.3.
Jun 22 17:01:52.727: DHCPD: BOOTREQUEST from 0100.1bd4.c698.6c forwarded to
10.10.210.10.


On Sat, Jun 22, 2013 at 9:30 AM, anuritha konjety wrote:

>
> Thanks Somphol, I will start debugging at the router level.
> The SVI was initially not there, I was trying few different things to get
> this to work & added it.
>
>
> On Sat, Jun 22, 2013 at 5:36 AM, Somphol Boonjing wrote:
>
>> A few points that I think worth double check:
>>
>> [1]
>>
>> Assuming this is the configuration of the DHCP on CUCM, I think the
>> primary router doesn't require subnet mask to be specified
>>
>> DHCP Server : 10.10.210.10
>> subnet IPV4 address: 10.10.200.0
>> primary start addr: 10.10.200.120
>> primary end addr : 10.10.200.130
>> primary router : 10.10.200.3/255.255.255.0
>>
>> [2]
>>
>> In the same broadcast domain (VLAN 102), you seem to have two routing
>> interface, one on the router and another on as SVI on the switch.Unless
>> it serves other purpose, I think you can safely remove the SVI.
>>
>> interface FastEthernet0/0.102
>>  encapsulation dot1Q 102
>>  ip address 10.10.200.3 255.255.255.0
>>  ip helper-address 10.10.210.10
>> !
>>
>> interface Vlan102
>>  ip address 10.10.200.120 255.255.255.0
>> !
>>
>> [3]
>>
>> Once the SVI "interface vlan102" is removed, then the interface that
>> actually forward your request to the CUCM DHCP should be the fa0/0.102 on
>> the router that has already been configured with ip helper-address
>> 10.10.210.10 (assuming that this is your CUCM IP).
>>
>> Then, the following trace on the switch will not be relevant anymore.
>>
>> 01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on
>> interface Vlan102.
>> 01:58:00: DHCPD: there is no pool for 10.10.200.120.
>>
>> Once removing SVI 102, then you should try to focus your debugging effort
>> on the Router and not on the switch.
>>
>>
>> [4]
>>
>> Your DHCP range seems to start with 10.10.200.120 and that could cause a
>> collision with the SVI's IP address, even if everything else is correct.
>> I remember that IOS-based DHCP seems to assign the last IP address in the
>> pool, but I'm not sure how CUCM DHCP select the IP address from the pool.
>>
>>
>> --Somphol
>>
>>
>> On Sat, Jun 22, 2013 at 10:27 AM, anuritha konjety 
>> wrote:
>>
>>> Ovidiu,
>>>
>>> Yes, & ip helper-address is configured.
>>>
>>> Regards,
>>> Anu
>>>
>>>
>>> On Fri, Jun 21, 2013 at 4:32 PM, Ovidiu Popa  wrote:
>>>
 Hello Anuritha

 Do you by any chance have an SVI on vlan 102 ?
 If yes have you tried configuring ip helper-address on that SVI ?

 Regards,
 Ovidiu



 On Sat, Jun 22, 2013 at 12:26 AM, anuritha konjety <
 anurith...@gmail.com> wrote:

> Hello,
>
>I am having trouble with getting phones Ip address when UCM(pub) is
> configured as the DHCP server. Following is partial config from the switch
> & the router. I have made sure -
>
> 1. Dot1q trunk on HQ-RTR interface (on the switch). Make sure that all
> appropriate vlans are allowed on the trunk link and that native VLAN lines
> up (1 is default).
> 2. Ensure VLANs are provisioned correctly, assigned to the right
> interfaces, and active (sh vlan b)
> 3. Double check scope config on CUCM Pub. Check each parameter.
> 4. Made sure helper-address is configured
> 5. disabled CSA service from pub
> 6. restarted DHCP service several times
>
> DHCP Server : 10.10.210.10
> subnet IPV4 address: 10.10.200.0
> primary start addr: 10.10.200.120
> primary end addr : 10.10.200.130
> primary router : 10.10.200.3/255.255.255.0
>
> debug ip dhcp server events:
> SiteA-Switch#
> $
>
> 01:58:00: DHCPD: Reload workspace interface Vlan102 tableid 0.
> 01:58:00: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
> 01:58:00: DHCPD: client's VPN is .
> 01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on
> interface Vlan102.
> 01:58:00: DHCPD: there is no pool for 10.10.200.120.
> SiteA-Switch#$
> 01:58:34: DHCPD: checking for expired leases.
> SiteA-Switch#$
> 01:59:25: DHCPD: Reload workspace interface Vlan102 tableid 0.
> 01:59:25: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
> 01:59:25: DHCPD: client's VPN is .
>

Re: [OSL | CCIE_Voice] UCM DHCP

2013-06-22 Thread anuritha konjety
Thanks Somphol, I will start debugging at the router level.
The SVI was initially not there, I was trying few different things to get
this to work & added it.

On Sat, Jun 22, 2013 at 5:36 AM, Somphol Boonjing  wrote:

> A few points that I think worth double check:
>
> [1]
>
> Assuming this is the configuration of the DHCP on CUCM, I think the
> primary router doesn't require subnet mask to be specified
>
> DHCP Server : 10.10.210.10
> subnet IPV4 address: 10.10.200.0
> primary start addr: 10.10.200.120
> primary end addr : 10.10.200.130
> primary router : 10.10.200.3/255.255.255.0
>
> [2]
>
> In the same broadcast domain (VLAN 102), you seem to have two routing
> interface, one on the router and another on as SVI on the switch.Unless
> it serves other purpose, I think you can safely remove the SVI.
>
> interface FastEthernet0/0.102
>  encapsulation dot1Q 102
>  ip address 10.10.200.3 255.255.255.0
>  ip helper-address 10.10.210.10
> !
>
> interface Vlan102
>  ip address 10.10.200.120 255.255.255.0
> !
>
> [3]
>
> Once the SVI "interface vlan102" is removed, then the interface that
> actually forward your request to the CUCM DHCP should be the fa0/0.102 on
> the router that has already been configured with ip helper-address
> 10.10.210.10 (assuming that this is your CUCM IP).
>
> Then, the following trace on the switch will not be relevant anymore.
>
> 01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on interface
> Vlan102.
> 01:58:00: DHCPD: there is no pool for 10.10.200.120.
>
> Once removing SVI 102, then you should try to focus your debugging effort
> on the Router and not on the switch.
>
>
> [4]
>
> Your DHCP range seems to start with 10.10.200.120 and that could cause a
> collision with the SVI's IP address, even if everything else is correct.
> I remember that IOS-based DHCP seems to assign the last IP address in the
> pool, but I'm not sure how CUCM DHCP select the IP address from the pool.
>
>
> --Somphol
>
>
> On Sat, Jun 22, 2013 at 10:27 AM, anuritha konjety 
> wrote:
>
>> Ovidiu,
>>
>> Yes, & ip helper-address is configured.
>>
>> Regards,
>> Anu
>>
>>
>> On Fri, Jun 21, 2013 at 4:32 PM, Ovidiu Popa  wrote:
>>
>>> Hello Anuritha
>>>
>>> Do you by any chance have an SVI on vlan 102 ?
>>> If yes have you tried configuring ip helper-address on that SVI ?
>>>
>>> Regards,
>>> Ovidiu
>>>
>>>
>>>
>>> On Sat, Jun 22, 2013 at 12:26 AM, anuritha konjety >> > wrote:
>>>
 Hello,

I am having trouble with getting phones Ip address when UCM(pub) is
 configured as the DHCP server. Following is partial config from the switch
 & the router. I have made sure -

 1. Dot1q trunk on HQ-RTR interface (on the switch). Make sure that all
 appropriate vlans are allowed on the trunk link and that native VLAN lines
 up (1 is default).
 2. Ensure VLANs are provisioned correctly, assigned to the right
 interfaces, and active (sh vlan b)
 3. Double check scope config on CUCM Pub. Check each parameter.
 4. Made sure helper-address is configured
 5. disabled CSA service from pub
 6. restarted DHCP service several times

 DHCP Server : 10.10.210.10
 subnet IPV4 address: 10.10.200.0
 primary start addr: 10.10.200.120
 primary end addr : 10.10.200.130
 primary router : 10.10.200.3/255.255.255.0

 debug ip dhcp server events:
 SiteA-Switch#
 $

 01:58:00: DHCPD: Reload workspace interface Vlan102 tableid 0.
 01:58:00: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
 01:58:00: DHCPD: client's VPN is .
 01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on
 interface Vlan102.
 01:58:00: DHCPD: there is no pool for 10.10.200.120.
 SiteA-Switch#$
 01:58:34: DHCPD: checking for expired leases.
 SiteA-Switch#$
 01:59:25: DHCPD: Reload workspace interface Vlan102 tableid 0.
 01:59:25: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
 01:59:25: DHCPD: client's VPN is .
 01:59:25: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on
 interface Vlan102.
 01:59:25: DHCPD: there is no pool for 10.10.200.120.

 HQ Switch:-
 
 SiteA-Switch#sh run

 interface FastEthernet1/0/1
  description TRUNK to HQ-RTR
  switchport trunk encapsulation dot1q
  switchport mode trunk
  speed 100
  duplex full
 !
 interface FastEthernet1/0/2
  description HQ PHONE 1- 7960 phone
  switchport access vlan 101
  switchport mode access
  switchport voice vlan 102
  spanning-tree portfast
 !
 interface FastEthernet1/0/3
 !
  --More-- interface FastEthernet1/0/4
  description SERVER port- do not change
  switchport access vlan 103
  switchport mode access
  duplex half
  spanning-tree portfast
 !

 interface FastEthernet1/0/23
  description HQ PHONE 2- 7962 phone
  switchport access 

Re: [OSL | CCIE_Voice] UCM DHCP

2013-06-22 Thread Josh Petro
It may sound silly, but I had a similar issue on a Cisco 360 program lab
this week and a reboot of the CUCM sub and pub fixed it. Nothing else we
did fixed the issue.
On Jun 21, 2013 4:23 PM, "anuritha konjety"  wrote:

> Hello,
>
>I am having trouble with getting phones Ip address when UCM(pub) is
> configured as the DHCP server. Following is partial config from the switch
> & the router. I have made sure -
>
> 1. Dot1q trunk on HQ-RTR interface (on the switch). Make sure that all
> appropriate vlans are allowed on the trunk link and that native VLAN lines
> up (1 is default).
> 2. Ensure VLANs are provisioned correctly, assigned to the right
> interfaces, and active (sh vlan b)
> 3. Double check scope config on CUCM Pub. Check each parameter.
> 4. Made sure helper-address is configured
> 5. disabled CSA service from pub
> 6. restarted DHCP service several times
>
> DHCP Server : 10.10.210.10
> subnet IPV4 address: 10.10.200.0
> primary start addr: 10.10.200.120
> primary end addr : 10.10.200.130
> primary router : 10.10.200.3/255.255.255.0
>
> debug ip dhcp server events:
> SiteA-Switch#
> $
>
> 01:58:00: DHCPD: Reload workspace interface Vlan102 tableid 0.
> 01:58:00: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
> 01:58:00: DHCPD: client's VPN is .
> 01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on interface
> Vlan102.
> 01:58:00: DHCPD: there is no pool for 10.10.200.120.
> SiteA-Switch#$
> 01:58:34: DHCPD: checking for expired leases.
> SiteA-Switch#$
> 01:59:25: DHCPD: Reload workspace interface Vlan102 tableid 0.
> 01:59:25: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
> 01:59:25: DHCPD: client's VPN is .
> 01:59:25: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on interface
> Vlan102.
> 01:59:25: DHCPD: there is no pool for 10.10.200.120.
>
> HQ Switch:-
> 
> SiteA-Switch#sh run
>
> interface FastEthernet1/0/1
>  description TRUNK to HQ-RTR
>  switchport trunk encapsulation dot1q
>  switchport mode trunk
>  speed 100
>  duplex full
> !
> interface FastEthernet1/0/2
>  description HQ PHONE 1- 7960 phone
>  switchport access vlan 101
>  switchport mode access
>  switchport voice vlan 102
>  spanning-tree portfast
> !
> interface FastEthernet1/0/3
> !
>  --More-- interface FastEthernet1/0/4
>  description SERVER port- do not change
>  switchport access vlan 103
>  switchport mode access
>  duplex half
>  spanning-tree portfast
> !
>
> interface FastEthernet1/0/23
>  description HQ PHONE 2- 7962 phone
>  switchport access vlan 101
>  switchport mode access
>  switchport voice vlan 102
>  switchport voice detect cisco-phone
>  spanning-tree portfast
> !
> interface FastEthernet1/0/24
>  description *** DO NOT CHANGE - THIS IS YOUR L3 CONNECTION TO YOUR VPN!!!
> ***
>  switchport access vlan 101
>  switchport mode access
>  speed 100
>  duplex full
>  no cdp enable
> !
> interface GigabitEthernet1/0/1
> !
> interface GigabitEthernet1/0/2
> !
>  --More-- interface Vlan1
>  no ip address
> !
> interface Vlan101
>  ip address 10.10.100.3 255.255.255.0
> !
> interface Vlan102
>  ip address 10.10.200.120 255.255.255.0
> !
> control-plane
> !
> !
> line con 0
>  exec-timeout 0 0
>  --More-- logging synchronous
> line vty 0 4
>  exec-timeout 0 0
>  privilege level 15
>  logging synchronous
>  no login
> line vty 5 15
>  exec-timeout 0 0
>  privilege level 15
>  logging synchronous
>  no login
> !
> end
> 
>
> HQ router:-
> 
> interface FastEthernet0/0.101
>  encapsulation dot1Q 101
>  ip address 10.10.100.1 255.255.255.0
> !
> interface FastEthernet0/0.102
>  encapsulation dot1Q 102
>  ip address 10.10.200.3 255.255.255.0
>  ip helper-address 10.10.210.10
> !
> interface FastEthernet0/0.103
>  encapsulation dot1Q 103
>  ip address 10.10.210.1 255.255.255.0
> !
> interface FastEthernet0/1
>  no ip address
>  shutdown
>  duplex auto
>  speed auto
> 
>
> ___
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
> Are you a CCNP or CCIE and looking for a job? Check out
> www.PlatinumPlacement.com
>
___
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Re: [OSL | CCIE_Voice] UCM DHCP

2013-06-22 Thread Somphol Boonjing
A few points that I think worth double check:

[1]

Assuming this is the configuration of the DHCP on CUCM, I think the primary
router doesn't require subnet mask to be specified

DHCP Server : 10.10.210.10
subnet IPV4 address: 10.10.200.0
primary start addr: 10.10.200.120
primary end addr : 10.10.200.130
primary router : 10.10.200.3/255.255.255.0

[2]

In the same broadcast domain (VLAN 102), you seem to have two routing
interface, one on the router and another on as SVI on the switch.Unless
it serves other purpose, I think you can safely remove the SVI.

interface FastEthernet0/0.102
 encapsulation dot1Q 102
 ip address 10.10.200.3 255.255.255.0
 ip helper-address 10.10.210.10
!

interface Vlan102
 ip address 10.10.200.120 255.255.255.0
!

[3]

Once the SVI "interface vlan102" is removed, then the interface that
actually forward your request to the CUCM DHCP should be the fa0/0.102 on
the router that has already been configured with ip helper-address
10.10.210.10 (assuming that this is your CUCM IP).

Then, the following trace on the switch will not be relevant anymore.

01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on interface
Vlan102.
01:58:00: DHCPD: there is no pool for 10.10.200.120.

Once removing SVI 102, then you should try to focus your debugging effort
on the Router and not on the switch.


[4]

Your DHCP range seems to start with 10.10.200.120 and that could cause a
collision with the SVI's IP address, even if everything else is correct.
I remember that IOS-based DHCP seems to assign the last IP address in the
pool, but I'm not sure how CUCM DHCP select the IP address from the pool.


--Somphol


On Sat, Jun 22, 2013 at 10:27 AM, anuritha konjety wrote:

> Ovidiu,
>
> Yes, & ip helper-address is configured.
>
> Regards,
> Anu
>
>
> On Fri, Jun 21, 2013 at 4:32 PM, Ovidiu Popa  wrote:
>
>> Hello Anuritha
>>
>> Do you by any chance have an SVI on vlan 102 ?
>> If yes have you tried configuring ip helper-address on that SVI ?
>>
>> Regards,
>> Ovidiu
>>
>>
>>
>> On Sat, Jun 22, 2013 at 12:26 AM, anuritha konjety 
>> wrote:
>>
>>> Hello,
>>>
>>>I am having trouble with getting phones Ip address when UCM(pub) is
>>> configured as the DHCP server. Following is partial config from the switch
>>> & the router. I have made sure -
>>>
>>> 1. Dot1q trunk on HQ-RTR interface (on the switch). Make sure that all
>>> appropriate vlans are allowed on the trunk link and that native VLAN lines
>>> up (1 is default).
>>> 2. Ensure VLANs are provisioned correctly, assigned to the right
>>> interfaces, and active (sh vlan b)
>>> 3. Double check scope config on CUCM Pub. Check each parameter.
>>> 4. Made sure helper-address is configured
>>> 5. disabled CSA service from pub
>>> 6. restarted DHCP service several times
>>>
>>> DHCP Server : 10.10.210.10
>>> subnet IPV4 address: 10.10.200.0
>>> primary start addr: 10.10.200.120
>>> primary end addr : 10.10.200.130
>>> primary router : 10.10.200.3/255.255.255.0
>>>
>>> debug ip dhcp server events:
>>> SiteA-Switch#
>>> $
>>>
>>> 01:58:00: DHCPD: Reload workspace interface Vlan102 tableid 0.
>>> 01:58:00: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
>>> 01:58:00: DHCPD: client's VPN is .
>>> 01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on
>>> interface Vlan102.
>>> 01:58:00: DHCPD: there is no pool for 10.10.200.120.
>>> SiteA-Switch#$
>>> 01:58:34: DHCPD: checking for expired leases.
>>> SiteA-Switch#$
>>> 01:59:25: DHCPD: Reload workspace interface Vlan102 tableid 0.
>>> 01:59:25: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
>>> 01:59:25: DHCPD: client's VPN is .
>>> 01:59:25: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on
>>> interface Vlan102.
>>> 01:59:25: DHCPD: there is no pool for 10.10.200.120.
>>>
>>> HQ Switch:-
>>> 
>>> SiteA-Switch#sh run
>>>
>>> interface FastEthernet1/0/1
>>>  description TRUNK to HQ-RTR
>>>  switchport trunk encapsulation dot1q
>>>  switchport mode trunk
>>>  speed 100
>>>  duplex full
>>> !
>>> interface FastEthernet1/0/2
>>>  description HQ PHONE 1- 7960 phone
>>>  switchport access vlan 101
>>>  switchport mode access
>>>  switchport voice vlan 102
>>>  spanning-tree portfast
>>> !
>>> interface FastEthernet1/0/3
>>> !
>>>  --More-- interface FastEthernet1/0/4
>>>  description SERVER port- do not change
>>>  switchport access vlan 103
>>>  switchport mode access
>>>  duplex half
>>>  spanning-tree portfast
>>> !
>>>
>>> interface FastEthernet1/0/23
>>>  description HQ PHONE 2- 7962 phone
>>>  switchport access vlan 101
>>>  switchport mode access
>>>  switchport voice vlan 102
>>>  switchport voice detect cisco-phone
>>>  spanning-tree portfast
>>> !
>>> interface FastEthernet1/0/24
>>>  description *** DO NOT CHANGE - THIS IS YOUR L3 CONNECTION TO YOUR
>>> VPN!!! ***
>>>  switchport access vlan 101
>>>  switchport mode access
>>>  speed 100
>>>  duplex full
>>>  no cdp enable
>>> !
>>> interface GigabitEthernet1/0/1
>

Re: [OSL | CCIE_Voice] UCM DHCP

2013-06-21 Thread anuritha konjety
Ovidiu,

Yes, & ip helper-address is configured.

Regards,
Anu

On Fri, Jun 21, 2013 at 4:32 PM, Ovidiu Popa  wrote:

> Hello Anuritha
>
> Do you by any chance have an SVI on vlan 102 ?
> If yes have you tried configuring ip helper-address on that SVI ?
>
> Regards,
> Ovidiu
>
>
>
> On Sat, Jun 22, 2013 at 12:26 AM, anuritha konjety 
> wrote:
>
>> Hello,
>>
>>I am having trouble with getting phones Ip address when UCM(pub) is
>> configured as the DHCP server. Following is partial config from the switch
>> & the router. I have made sure -
>>
>> 1. Dot1q trunk on HQ-RTR interface (on the switch). Make sure that all
>> appropriate vlans are allowed on the trunk link and that native VLAN lines
>> up (1 is default).
>> 2. Ensure VLANs are provisioned correctly, assigned to the right
>> interfaces, and active (sh vlan b)
>> 3. Double check scope config on CUCM Pub. Check each parameter.
>> 4. Made sure helper-address is configured
>> 5. disabled CSA service from pub
>> 6. restarted DHCP service several times
>>
>> DHCP Server : 10.10.210.10
>> subnet IPV4 address: 10.10.200.0
>> primary start addr: 10.10.200.120
>> primary end addr : 10.10.200.130
>> primary router : 10.10.200.3/255.255.255.0
>>
>> debug ip dhcp server events:
>> SiteA-Switch#
>> $
>>
>> 01:58:00: DHCPD: Reload workspace interface Vlan102 tableid 0.
>> 01:58:00: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
>> 01:58:00: DHCPD: client's VPN is .
>> 01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on
>> interface Vlan102.
>> 01:58:00: DHCPD: there is no pool for 10.10.200.120.
>> SiteA-Switch#$
>> 01:58:34: DHCPD: checking for expired leases.
>> SiteA-Switch#$
>> 01:59:25: DHCPD: Reload workspace interface Vlan102 tableid 0.
>> 01:59:25: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
>> 01:59:25: DHCPD: client's VPN is .
>> 01:59:25: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on
>> interface Vlan102.
>> 01:59:25: DHCPD: there is no pool for 10.10.200.120.
>>
>> HQ Switch:-
>> 
>> SiteA-Switch#sh run
>>
>> interface FastEthernet1/0/1
>>  description TRUNK to HQ-RTR
>>  switchport trunk encapsulation dot1q
>>  switchport mode trunk
>>  speed 100
>>  duplex full
>> !
>> interface FastEthernet1/0/2
>>  description HQ PHONE 1- 7960 phone
>>  switchport access vlan 101
>>  switchport mode access
>>  switchport voice vlan 102
>>  spanning-tree portfast
>> !
>> interface FastEthernet1/0/3
>> !
>>  --More-- interface FastEthernet1/0/4
>>  description SERVER port- do not change
>>  switchport access vlan 103
>>  switchport mode access
>>  duplex half
>>  spanning-tree portfast
>> !
>>
>> interface FastEthernet1/0/23
>>  description HQ PHONE 2- 7962 phone
>>  switchport access vlan 101
>>  switchport mode access
>>  switchport voice vlan 102
>>  switchport voice detect cisco-phone
>>  spanning-tree portfast
>> !
>> interface FastEthernet1/0/24
>>  description *** DO NOT CHANGE - THIS IS YOUR L3 CONNECTION TO YOUR
>> VPN!!! ***
>>  switchport access vlan 101
>>  switchport mode access
>>  speed 100
>>  duplex full
>>  no cdp enable
>> !
>> interface GigabitEthernet1/0/1
>> !
>> interface GigabitEthernet1/0/2
>> !
>>  --More-- interface Vlan1
>>  no ip address
>> !
>> interface Vlan101
>>  ip address 10.10.100.3 255.255.255.0
>> !
>> interface Vlan102
>>  ip address 10.10.200.120 255.255.255.0
>> !
>> control-plane
>> !
>> !
>> line con 0
>>  exec-timeout 0 0
>>  --More-- logging synchronous
>> line vty 0 4
>>  exec-timeout 0 0
>>  privilege level 15
>>  logging synchronous
>>  no login
>> line vty 5 15
>>  exec-timeout 0 0
>>  privilege level 15
>>  logging synchronous
>>  no login
>> !
>> end
>> 
>>
>> HQ router:-
>> 
>> interface FastEthernet0/0.101
>>  encapsulation dot1Q 101
>>  ip address 10.10.100.1 255.255.255.0
>> !
>> interface FastEthernet0/0.102
>>  encapsulation dot1Q 102
>>  ip address 10.10.200.3 255.255.255.0
>>  ip helper-address 10.10.210.10
>> !
>> interface FastEthernet0/0.103
>>  encapsulation dot1Q 103
>>  ip address 10.10.210.1 255.255.255.0
>> !
>> interface FastEthernet0/1
>>  no ip address
>>  shutdown
>>  duplex auto
>>  speed auto
>> 
>>
>> ___
>> For more information regarding industry leading CCIE Lab training, please
>> visit www.ipexpert.com
>>
>> Are you a CCNP or CCIE and looking for a job? Check out
>> www.PlatinumPlacement.com
>>
>
>


-- 
Regards,
Anuritha
___
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Re: [OSL | CCIE_Voice] UCM DHCP

2013-06-21 Thread Ovidiu Popa
Hello Anuritha

Do you by any chance have an SVI on vlan 102 ?
If yes have you tried configuring ip helper-address on that SVI ?

Regards,
Ovidiu



On Sat, Jun 22, 2013 at 12:26 AM, anuritha konjety wrote:

> Hello,
>
>I am having trouble with getting phones Ip address when UCM(pub) is
> configured as the DHCP server. Following is partial config from the switch
> & the router. I have made sure -
>
> 1. Dot1q trunk on HQ-RTR interface (on the switch). Make sure that all
> appropriate vlans are allowed on the trunk link and that native VLAN lines
> up (1 is default).
> 2. Ensure VLANs are provisioned correctly, assigned to the right
> interfaces, and active (sh vlan b)
> 3. Double check scope config on CUCM Pub. Check each parameter.
> 4. Made sure helper-address is configured
> 5. disabled CSA service from pub
> 6. restarted DHCP service several times
>
> DHCP Server : 10.10.210.10
> subnet IPV4 address: 10.10.200.0
> primary start addr: 10.10.200.120
> primary end addr : 10.10.200.130
> primary router : 10.10.200.3/255.255.255.0
>
> debug ip dhcp server events:
> SiteA-Switch#
> $
>
> 01:58:00: DHCPD: Reload workspace interface Vlan102 tableid 0.
> 01:58:00: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
> 01:58:00: DHCPD: client's VPN is .
> 01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on interface
> Vlan102.
> 01:58:00: DHCPD: there is no pool for 10.10.200.120.
> SiteA-Switch#$
> 01:58:34: DHCPD: checking for expired leases.
> SiteA-Switch#$
> 01:59:25: DHCPD: Reload workspace interface Vlan102 tableid 0.
> 01:59:25: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
> 01:59:25: DHCPD: client's VPN is .
> 01:59:25: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on interface
> Vlan102.
> 01:59:25: DHCPD: there is no pool for 10.10.200.120.
>
> HQ Switch:-
> 
> SiteA-Switch#sh run
>
> interface FastEthernet1/0/1
>  description TRUNK to HQ-RTR
>  switchport trunk encapsulation dot1q
>  switchport mode trunk
>  speed 100
>  duplex full
> !
> interface FastEthernet1/0/2
>  description HQ PHONE 1- 7960 phone
>  switchport access vlan 101
>  switchport mode access
>  switchport voice vlan 102
>  spanning-tree portfast
> !
> interface FastEthernet1/0/3
> !
>  --More-- interface FastEthernet1/0/4
>  description SERVER port- do not change
>  switchport access vlan 103
>  switchport mode access
>  duplex half
>  spanning-tree portfast
> !
>
> interface FastEthernet1/0/23
>  description HQ PHONE 2- 7962 phone
>  switchport access vlan 101
>  switchport mode access
>  switchport voice vlan 102
>  switchport voice detect cisco-phone
>  spanning-tree portfast
> !
> interface FastEthernet1/0/24
>  description *** DO NOT CHANGE - THIS IS YOUR L3 CONNECTION TO YOUR VPN!!!
> ***
>  switchport access vlan 101
>  switchport mode access
>  speed 100
>  duplex full
>  no cdp enable
> !
> interface GigabitEthernet1/0/1
> !
> interface GigabitEthernet1/0/2
> !
>  --More-- interface Vlan1
>  no ip address
> !
> interface Vlan101
>  ip address 10.10.100.3 255.255.255.0
> !
> interface Vlan102
>  ip address 10.10.200.120 255.255.255.0
> !
> control-plane
> !
> !
> line con 0
>  exec-timeout 0 0
>  --More-- logging synchronous
> line vty 0 4
>  exec-timeout 0 0
>  privilege level 15
>  logging synchronous
>  no login
> line vty 5 15
>  exec-timeout 0 0
>  privilege level 15
>  logging synchronous
>  no login
> !
> end
> 
>
> HQ router:-
> 
> interface FastEthernet0/0.101
>  encapsulation dot1Q 101
>  ip address 10.10.100.1 255.255.255.0
> !
> interface FastEthernet0/0.102
>  encapsulation dot1Q 102
>  ip address 10.10.200.3 255.255.255.0
>  ip helper-address 10.10.210.10
> !
> interface FastEthernet0/0.103
>  encapsulation dot1Q 103
>  ip address 10.10.210.1 255.255.255.0
> !
> interface FastEthernet0/1
>  no ip address
>  shutdown
>  duplex auto
>  speed auto
> 
>
> ___
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
> Are you a CCNP or CCIE and looking for a job? Check out
> www.PlatinumPlacement.com
>
___
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

[OSL | CCIE_Voice] UCM DHCP

2013-06-21 Thread anuritha konjety
Hello,

   I am having trouble with getting phones Ip address when UCM(pub) is
configured as the DHCP server. Following is partial config from the switch
& the router. I have made sure -

1. Dot1q trunk on HQ-RTR interface (on the switch). Make sure that all
appropriate vlans are allowed on the trunk link and that native VLAN lines
up (1 is default).
2. Ensure VLANs are provisioned correctly, assigned to the right
interfaces, and active (sh vlan b)
3. Double check scope config on CUCM Pub. Check each parameter.
4. Made sure helper-address is configured
5. disabled CSA service from pub
6. restarted DHCP service several times

DHCP Server : 10.10.210.10
subnet IPV4 address: 10.10.200.0
primary start addr: 10.10.200.120
primary end addr : 10.10.200.130
primary router : 10.10.200.3/255.255.255.0

debug ip dhcp server events:
SiteA-Switch#
$
   

01:58:00: DHCPD: Reload workspace interface Vlan102 tableid 0.
01:58:00: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
01:58:00: DHCPD: client's VPN is .
01:58:00: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on interface
Vlan102.
01:58:00: DHCPD: there is no pool for 10.10.200.120.
SiteA-Switch#$
01:58:34: DHCPD: checking for expired leases.
SiteA-Switch#$
01:59:25: DHCPD: Reload workspace interface Vlan102 tableid 0.
01:59:25: DHCPD: tableid for 10.10.200.120 on Vlan102 is 0
01:59:25: DHCPD: client's VPN is .
01:59:25: DHCPD: Finding a relay for client 0100.1bd4.c698.6c on interface
Vlan102.
01:59:25: DHCPD: there is no pool for 10.10.200.120.

HQ Switch:-

SiteA-Switch#sh run

interface FastEthernet1/0/1
 description TRUNK to HQ-RTR
 switchport trunk encapsulation dot1q
 switchport mode trunk
 speed 100
 duplex full
!
interface FastEthernet1/0/2
 description HQ PHONE 1- 7960 phone
 switchport access vlan 101
 switchport mode access
 switchport voice vlan 102
 spanning-tree portfast
!
interface FastEthernet1/0/3
!
 --More-- interface FastEthernet1/0/4
 description SERVER port- do not change
 switchport access vlan 103
 switchport mode access
 duplex half
 spanning-tree portfast
!

interface FastEthernet1/0/23
 description HQ PHONE 2- 7962 phone
 switchport access vlan 101
 switchport mode access
 switchport voice vlan 102
 switchport voice detect cisco-phone
 spanning-tree portfast
!
interface FastEthernet1/0/24
 description *** DO NOT CHANGE - THIS IS YOUR L3 CONNECTION TO YOUR VPN!!!
***
 switchport access vlan 101
 switchport mode access
 speed 100
 duplex full
 no cdp enable
!
interface GigabitEthernet1/0/1
!
interface GigabitEthernet1/0/2
!
 --More-- interface Vlan1
 no ip address
!
interface Vlan101
 ip address 10.10.100.3 255.255.255.0
!
interface Vlan102
 ip address 10.10.200.120 255.255.255.0
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 --More--  logging synchronous
line vty 0 4
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 no login
line vty 5 15
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 no login
!
end


HQ router:-

interface FastEthernet0/0.101
 encapsulation dot1Q 101
 ip address 10.10.100.1 255.255.255.0
!
interface FastEthernet0/0.102
 encapsulation dot1Q 102
 ip address 10.10.200.3 255.255.255.0
 ip helper-address 10.10.210.10
!
interface FastEthernet0/0.103
 encapsulation dot1Q 103
 ip address 10.10.210.1 255.255.255.0
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto

___
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com