Release Notes for Cisco 2800 Series Integrated Services Routers with Cisco IOS Release 15.0(1)XA
Available Languages
Table Of Contents
Release Notes for Cisco 2800 Series Integrated Services Routers with Cisco IOS Release 15.0(1)XA
Determining the Software Version
Upgrading to a New Software Release
New Hardware Features in Cisco IOS Release 15.0(1)XA5
New Software Features in Cisco IOS Release 15.0(1)XA5
New Hardware Features in Cisco IOS Release 15.0(1)XA4
New Software Features in Cisco IOS Release 15.0(1)XA4
New Hardware Features in Cisco IOS Release 15.0(1)XA3
New Software Features in Cisco IOS Release 15.0(1)XA3
New Hardware Features in Cisco IOS Release 15.0(1)XA2
New Software Features in Cisco IOS Release 15.0(1)XA2
New Hardware Features in Cisco IOS Release 15.0(1)XA1
New Software Features in Cisco IOS Release 15.0(1)XA1
New Hardware Features in Cisco IOS Release 15.0(1)XA
New Software Features in Cisco IOS Release 15.0(1)XA
Unlocked Meet-me Conference Bridge
Transporting 802.1q Tags over ATM PVCs for ADSL2+
SIP/TLS/TCP Secure Call Signaling and SRTP Media Encryption with Cisco SRST
DOD MLPP PBX1 certification for CME
Call Restriction Regulations for CME sales in India
MLPP Support for Supplementary Services on SCCP Controlled Analog Endpoints
Cisco Unified Communications Manager Express 8.0 Music On Hold Enhancement (MOH)
Cisco Unified Survivable Remote Site Telephony 8.0 Music On Hold Enhancement (MOH)
RFC 4040-Based Clear-Channel Codec Negotiation for SIP Calls
Support for SIP 181 "Call is Being Forwarded" Message
Support for Expires Timer Reset for SIP 183
Support for dynamic payload type interworking for DTMF and codec packets for SIP-to-SIP calls
Open Caveats - Release 15.0(1)XA5
Resolved Caveats - Release 15.0(1)XA5
Open Caveats - Release 15.0(1)XA4
Resolved Caveats - Release 15.0(1)XA4
Open Caveats - Release 15.0(1)XA3
Resolved Caveats - Release 15.0(1)XA3
Open Caveats - Release 15.0(1)XA2
Resolved Caveats - Release 15.0(1)XA2
Open Caveats - Release 15.0(1)XA1
Resolved Caveats - Release 15.0(1)XA1
Open Caveats - Release 15.0(1)XA
Resolved Caveats - Release 15.0(1)XA
Cisco IOS Software Documentation Set
Release Notes for Cisco 2800 Series Integrated Services Routers with Cisco IOS Release 15.0(1)XA
First Released: October 27, 2009Last Revised: December 28, 2010Cisco IOS Release 15.0(1)XA5OL-20857-06 Sixth ReleaseThese release notes describe new features and significant software components for the Cisco 2800 series routers that support the Cisco IOS Release 15.0(1)XA releases. These release notes are updated as needed. Use these release notes with About Cisco IOS Release Notes.
For a list of the software caveats that apply to the Release 15.0(1)XA releases, see the "Caveats" section and the online Caveats for Cisco IOS Release 15.0M document. The caveats document is updated for every 15.0M maintenance release.
Contents
System Requirements
This section describes the system requirements for Release 15.0(1)XA5 and includes the following sections:
•
Determining the Software Version
•
Memory Requirements
Table 1 describes the memory requirements for the Cisco IOS feature sets supported by Cisco IOS Release 15.0(1)XA5 on the Cisco 2800 series routers.
Hardware Supported
Cisco IOS Release 15.0(1)XA5 supports the following Cisco 2800 series routers:
•
•
•
•
For descriptions of existing hardware features and supported modules, see the hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco 2800 series routers, which are available at:
http://www.cisco.com/en/US/products/ps5854/tsd_products_support_series_home.html
Determining the Software Version
To determine the version of Cisco IOS software currently running on your Cisco 2800 series router, see About Cisco IOS Release Notes located at http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.
Upgrading to a New Software Release
For general information about upgrading to a new software release, see About Cisco IOS Release Notes located at
http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.
Feature Set Tables
For information about feature set tables, see About Cisco IOS Release Notes located at http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.
New and Changed Information
This section contains the following information:
•
•
•
•
•
•
•
•
•
•
•
•
New Hardware Features in Cisco IOS Release 15.0(1)XA5
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 15.0(1)XA5
There are no new software features in this release
New Hardware Features in Cisco IOS Release 15.0(1)XA4
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 15.0(1)XA4
There are no new software features in this release
New Hardware Features in Cisco IOS Release 15.0(1)XA3
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 15.0(1)XA3
There are no new software features in this release
New Hardware Features in Cisco IOS Release 15.0(1)XA2
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 15.0(1)XA2
There are no new software features in this release
New Hardware Features in Cisco IOS Release 15.0(1)XA1
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 15.0(1)XA1
There are no new software features in this release.
New Hardware Features in Cisco IOS Release 15.0(1)XA
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 15.0(1)XA
DnD Feature Button
Cisco Unified CME 8.0 adds support for the new DnD feature button. The DnD feature button allows the user to configure a line button with Do not Disturb feature instead of using the DnD softkey. Press the button to enable or disable the DnD feature when the phone is idle. This feature button can also be used as Hunt Log (HLog) button if the hunt-group logout DnD is configured in the phone. When it is used as HLog button, press the button to activate or deactivate the DnD.
Unrestricted Display
Cisco Unified CME 8.0 adds support for Unrestricted Display in ephone. This feature adds unrestricted display option for a phone type in the Cisco Unified CME system. The Unrestricted Display configuration defines a set of attributes that describe the message display option of the ephone.
Unlocked Meet-me Conference Bridge
Unlocked Meet-me conference allows the user to unlock the Meet-me conference bridge. All DN tags with the same number should be configured as unlocked. Unlocking the Meet-me conference bridge can allow unrestricted and uncontrolled access for external callers. This feature is supported only for Meet-me conference.
Transporting 802.1q Tags over ATM PVCs for ADSL2+
This feature allows 802.1q tags to be transported over Asynchronous Transfer Mode (ATM) permanent virtual circuits (PVC) used in ADSL2+ uplinks. This feature offers the following benefits:
•
•
SIP/TLS/TCP Secure Call Signaling and SRTP Media Encryption with Cisco SRST
This feature adds Session Initiation Protocol/Transport Layer Security/Transmission Control Protocol (SIP/TLS/TCP) support for secure call signaling and Secure Real-time Transport Protocol (SRTP) for media encryption to establish a secure, encrypted connection between Cisco Unified IP Phones and a failover device using Cisco Unified Survivable Remote Site Telephony (Cisco SRST).
DOD MLPP PBX1 certification for CME
Adds enhanced Multilevel Priority and Preemption (MLPP) features for Cisco Unified CME including:
•
•
•
•
Call Restriction Regulations for CME sales in India
The logical partitioning class of restriction (LPCOR) feature enables a single directory number on an IP phone or analog phone that is registered to Cisco Unified CME to connect to both PSTN and VoIP calls according to the restrictions specified by TRAI regulations. Cisco Unified CME can support both VoIP and PSTN calls while restricting the mixing of voice traffic between the PSTN and VoIP networks and preventing PSTN calls from connecting to remote locations over an IP trunk.
MLPP Support for Supplementary Services on SCCP Controlled Analog Endpoints
Adds Multilevel Priority and Preemption (MLPP) support for supplementary services, such as Three-Way Conferencing, Call Pickup, and Cancel Call Waiting on analog FXS ports. MLPP service allows validated users to place priority calls, and if necessary, to preempt lower-priority calls. The new Cancel Call Waiting feature allows a phone user to disable Call Waiting service for a call.
Cisco Unified Communications Manager Express 8.0 Music On Hold Enhancement (MOH)
Cisco Unified CME 8.0 and later versions enhances the MOH feature by playing different media streams to PSTN and VoIP callers who are placed on hold. The MOH enhancement allows you to configure up to five additional media streams supplied from multiple media files stored in a router's flash memory and eliminates the need for separate routers for streaming MOH media files.
Cisco Unified CME 8.0 MOH enhancement allows you to create MOH groups and assign ephone extension numbers to these MOH groups to receive different media streams. Callers to the extension numbers configured under the MOH groups can listen to different MOH media streams when they are placed on hold. For more information, see:
http://www.cisco.com/en/US/docs/voice_ip_comm/cucme/admin/configuration/guide/cmemoh.html
Cisco Unified Survivable Remote Site Telephony 8.0 Music On Hold Enhancement (MOH)
Cisco Unified SRST 8.0 and later versions enhance the MOH feature by playing different media streams to PSTN and VoIP G.711 callers who are placed on hold. The MOH enhancement allows you to configure up to five additional media streams supplied from different media files stored in a router's flash memory and eliminates the need of separate routers for streaming multiple MOH media files. For more information, see:
http://www.cisco.com/en/US/docs/voice_ip_comm/cusrst/feature/guide/MOH_srst.html
CME CSTA CTI Protocol Suite
This feature in Cisco Unified CME 8.0 enables call state monitoring and control and allows third party applications to monitor and control the Cisco Unified CME system to enable programmatic control of any SCCP telephony device registered with Cisco Unified CME.
G.SHDSL Auto Pair Detect
The new dsl-group auto command automatically assigns the Central Office (CO) configuration to an ATM dsl-group on the Customer Premise Equipment (CPE) that has either Cisco HWIC-4SHDSL or Cisco HWIC-2SHDSL installed on the router. Automatic configuration is not supported on IMA groups. Automatic configuration is limited to one DSL group and ATM interface. Once a group is automatically configured, no other group can be created. All manually created groups must be deleted before creating an automatic configuration group.
Secure SIP Failover for SRST
This feature enables VoIP calls that failover to Survivable Remote Site Telephony (SRST) devices to provide secure and encrypted transport using the Session Initiation Protocol (SIP). These voice calls originate from IP Phones running the SIP protocol.
RFC 4040-Based Clear-Channel Codec Negotiation for SIP Calls
RFC4040 based clear-channel codec negotiation for SIP calls on both Cisco IOS SIP-TDM gateways and Cisco Unified Border Elements. For details about enabling this feature, see the encap clear-channel standard and voice-class sip encap clear-channel commands in the Cisco IOS Voice Command Reference:
http://www.cisco.com/en/US/docs/ios/voice/command/reference/vr_book.html
Support for SIP 181 "Call is Being Forwarded" Message
Support for SIP 181 Call is Being Forwarded message was added to Cisco IOS SIP TDM gateways and Cisco Unified Border Elements (Cisco UBEs). This feature is enabled by default—to disable this feature for all SIP 181 messages or for SIP 181 message either with or without SDP, see the block and voice-class sip block commands in the Cisco IOS Voice Command Reference: http://www.cisco.com/en/US/docs/ios/voice/command/reference/vr_book.html
On the Cisco UBE, this feature also adds the ability to receive SIP 181 messages on one leg and send out SIP 183 messages on the other leg. For details about enabling this feature on a Cisco UBE, see the map resp-code and voice-class sip map resp-code commands in the Cisco IOS Voice Command Reference:
http://www.cisco.com/en/US/docs/ios/voice/command/reference/vr_book.html
Support for Expires Timer Reset for SIP 183
Support for resetting the Expires timer upon receipt of SIP 183 message so that when the terminating device lacks answer supervision or does not send the required SIP 200 OK message within the timer expiry, you can enable this feature to send periodic SIP 183 messages to reset the Expires timer and preserve the call until final response. This feature can be enabled for SIP 183 messages either with or without SDP. For details about enabling this feature, see the reset timer expires and voice-class sip reset timer expires commands in the Cisco IOS Voice Command Reference: http://www.cisco.com/en/US/docs/ios/voice/command/reference/vr_book.html
Support for Multiple Registrars on SIP Trunks on a Cisco Unified Border Element, on Cisco IOS SIP TDM Gateways, and on Cisco Unified Communications Manager Express
Support for simultaneous registration with multiple registrars for endpoints on a Cisco Unified Border Element, a Cisco IOS SIP TDM gateway, or on Cisco Unified Communications Manager Express. This feature enhances or introduces the credentials, registrar, localhost and voice-class sip localhost commands (see the Cisco IOS Voice Command Reference at http://www.cisco.com/en/US/docs/ios/voice/command/reference/vr_book.html) and adds support for multiple realms, which allows you to configure and enable authentication across different domains (or service providers). For details about this feature, see the Configuring Multiple Registrars on SIP Trunks feature guide: http://www.cisco.com/en/US/docs/ios/voice/sip/configuration/guide/sip_cg-multi-registrars.html
Support for PAI, PPI, and Privacy Headers on the SIP Trunk of Cisco Unified Communications Manager Express
Support for PAI, PPI, and Privacy Headers on the Cisco Unified CME SIP trunk. When enabled, Calling Number, Calling Name, and Privacy information is sent using PAI, PPI, and Privacy headers over the SIP trunk of Cisco Unified CME. This feature also enables interworking between the Remote-Party-ID (RPID) information contained in SIP line-side messages to PAI, PPI, and Privacy header information on the SIP trunk.
Support for Stripping off Progress Indicator from Incoming Q.931 CALL-PROCEEDING Messages on Cisco IOS SIP Gateways, Cisco IOS H.323 Gateways, and Cisco UBEs
Support for stripping off progress indicator (PI) from incoming Q.931 CALL-PROCEEDING message on Cisco IOS SIP and H.323 gateways and on Cisco UBEs. Configuration of this feature determines whether an incoming Q.931 CALL-PROCEEDING message with a PI value results in a SIP 183 message or H.323 Progress message. This behavior allows interworking with third-party SIP and H.323 servers. For details about enabling this feature, see the progress_ind command in the Cisco IOS Voice Command Reference at http://www.cisco.com/en/US/docs/ios/voice/command/reference/vr_book.html
IEEE 802.1ag - D8.1 standard Compliant CFM, Y.1731 multicast LBM / AIS / RDI / LCK, IP SLA for Ethernet
The ITU-Y.1731 Fault Management Functions feature adds to IEEE CFM the ETH-AIS and ETH-RDI functions for fault detection, fault verification, and fault isolation in large metropolitan-area networks (MANs) and WANs. For more information, see:
http://www.cisco.com/en/US/docs/ios/cether/configuration/guide/ce_cfm-ieee_y1731.html
Support for interworking between RSVP and non-RSVP call legs for SIP calls. Support for non-RSVP H.323 call leg to RSVP SIP call leg
The Support for Interworking Between RSVP Capable and RSVP Incapable Networks feature provides precondition-based Resource Reservation Protocol (RSVP) support for basic audio call and supplementary services on Cisco Unified Border Element (UBE). This feature improves the interoperability between RSVP and non-RSVP networks. RSVP functionality added to Cisco UBE helps you to reserve the required bandwidth before making a call.
Support for dynamic payload type interworking for DTMF and codec packets for SIP-to-SIP calls
The Support for Dynamic Payload Type Interworking for DTMF and Codec Packets for SIP-to-SIP Calls feature. This feature allows the Cisco Unified Border Element interwork between different dynamic payload type values across the call legs for the same codec. Also, Cisco UBE supports any payload type value for audio, video, named signaling events (NSEs), and named telephone events (NTEs) in the dynamic payload type range.
Support for MIB to report call volume and call rate related statistics on the Cisco Unified Border Element
Supports CISCO-VOICE-DIAL-CONTROL-MIB objects to obtain call volume and call rate information and CISCO-DSP-MGMT-MIB objects to report transcoding sessions availability information on the Cisco Unified Border Element.
New Features in Release 15.0
For information regarding the features supported in Cisco IOS Release 15.0, see the Release Notes and Feature Guides links at:
http://www.cisco.com/en/US/products/ps10591/tsd_products_support_series_home.html
Limitations and Restrictions
There are no known limitations or restrictions in this release.
Caveats
For general information on caveats and the bug toolkit, see About Cisco IOS Release Notes located at http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.
This section contains the following caveat information:
•
•
•
•
•
•
•
•
•
•
•
•
Open Caveats - Release 15.0(1)XA5
There are no open caveats in this release.
Resolved Caveats - Release 15.0(1)XA5
Note
CSCth03022 Crafted SIP packets may cause device to reload.Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device or trigger memory leaks that may result in system instabilities. Affected devices would need to be configured to process SIP messages for these vulnerabilities to be exploitable.
Cisco has released free software updates that address these vulnerabilities. There are no workarounds for devices that must run SIP; however, mitigations are available to limit exposure to the vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20110928-sip.shtml.
CSCti33534 "no ipv6 address autoconfig" may cause crash after router advert flood.Symptom After launching a flood of random IPv6 router advertisements when an interface is configured with ''ipv6 address autoconf'', removing the IPv6 configuration on the interface with ''no ipv6 address autoconf'' may cause a reload. Other system instabilities are also possible during and after the flood of random IPv6 router advertisements.
Conditions
Workaround
Note
CSCtg64478 IOS-NAT drops SIP INVITE packet.Symptom Router drops valid packets, causing SIP call to fail.
Conditions
There is no workaround.CSCsw64971 NAT-Entry deletion fails in SNAT backup router for H.323 RAS traffic.Symptom NAT-Entry deletion fails in SNAT backup router for H.323 RAS traffic. We can also see crashes on the Standby router if the Active interface is brought up.
Conditions
Workaround
CSCsx49358 Ping fails between the 6CE-6PE over the MPLS cloud.Symptom A Cisco router may face ping failure between provider and customer networks.
Conditions
Workaround
CSCte91259 Dynamic DNS may crash router.Symptom A Cisco router may unexpectedly reload due to a bus error after displaying an "%IDMGR-3-INVALID_ID" error.
Conditions
Workaround
CSCtg41606 RRI configuration drops egress traffic due to incomplete adjacency.Symptom With Reverse Route Injection (RRI) configured with the reverse-route command, if the crypto map is applied to a multi-access interface (for example, ethernet), then egress traffic may fail when the router cannot populate an ARP entry for the crypto peer address.
Conditions
Workaround
CSCtc73759 H323 gatekeeper crashing upon receipt of specific traffic.Symptom The H.323 gatekeeper implementation in Cisco IOS Software is crashing after receiving specific traffic.
Conditions
Workaround
CSCtg41733 Memory Leak on SIP UDP REGISTER Call Paths During Fuzzing.Symptom Certain crafted packets may cause a memory leak in the device in very rare circumstances.
Conditions
Workaround
CSCtb73450 L2TPv3: SCCRQ packets causes tunnel to reset after digest failure.Symptom Start-Control-Connection-Request (SCCRQ) packets may cause tunnel to reset after digest failure.
Conditions
Workaround
CSCtg64478 IOS-NAT drops SIP INVITE packet.Symptom Router drops valid packets, causing SIP call to fail.
Conditions
Workaround
CSCsd34855 VTP update with a VLAN name >100 characters causes buffer overflow.Symptom The VTP feature in certain versions of Cisco IOS software is vulnerable to a locally exploitable buffer overflow condition and potential execution of arbitrary code. If a VTP summary advertisement is received with a Type-Length-Value (TLV) containing a VLAN name greater than 100 characters, the receiving switch will reset with an Unassigned Exception error.
Conditions
Workaround
CSCtf91428 NAT H.323: router crashes in IP Input [in LL_Get ]The Cisco IOS Software Network Address Translation functionality contains three denial of service (DoS) vulnerabilities. The first vulnerability is in the translation of Session Initiation Protocol (SIP) packets, the second vulnerability in the translation of H.323 packets, and the third vulnerability is in the translation of H.225.0 call signaling for H.323 packets.
Cisco has released free software updates that address these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-nat.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010 or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in Cisco Event Response: Semiannual Cisco IOS Software Security
Advisory Bundled Publication at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
CSCtf17624 NAT SIP: Crash at ipnat_clear_sdThe Cisco IOS Software Network Address Translation functionality contains three denial of service (DoS) vulnerabilities. The first vulnerability is in the translation of Session Initiation Protocol (SIP) packets, the second vulnerability in the translation of H.323 packets, and the third vulnerability is in the translation of H.225.0 call signaling for H.323 packets.
Cisco has released free software updates that address these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-nat.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010 or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in Cisco Event Response: Semiannual Cisco IOS Software Security
Advisory Bundled Publication at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
CSCte14603 IGMPv3 DoS VulnerabilityA vulnerability in the Internet Group Management Protocol (IGMP) version 3 implementation of Cisco IOS Software and Cisco IOS XE Software allows a remote unauthenticated attacker to cause a reload of an affected device. Repeated attempts to exploit this vulnerability could result in a sustained denial of service (DoS) condition. Cisco has released free software updates that address this vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-igmp.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security
Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
Open Caveats - Release 15.0(1)XA4
There are no open caveats in this release.
Resolved Caveats - Release 15.0(1)XA4
CSCtd33567The H.323 implementation in Cisco IOS Software contains two vulnerabilities that may be exploited remotely to cause a denial of service (DoS) condition on a device that is running a vulnerable version of Cisco IOS Software.
Cisco has released free software updates that address these vulnerabilities. There are no workarounds to mitigate these vulnerabilities other than disabling H.323 on the vulnerable device.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-h323.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
CSCtd86472The Cisco IOS Software Network Address Translation functionality contains three denial of service (DoS) vulnerabilities. The first vulnerability is in the translation of Session Initiation Protocol (SIP) packets, the second vulnerability in the translation of H.323 packets and the third vulnerability is in the translation of H.225.0 call signaling for H.323 packets.
Cisco has released free software updates that address these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-nat.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
CSCtf72678Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device when SIP operation is enabled.
Cisco has released free software updates that address these vulnerabilities. There are no workarounds for devices that must run SIP; however, mitigations are available to limit exposure to the vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-sip.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
Cisco Unified Communications Manager (CUCM) is affected by the vulnerabilities described in this advisory. Two separate Cisco Security Advisories have been published to disclose the vulnerabilities that affect the Cisco Unified Communications Manager at the following locations:
http://www.cisco.com/warp/public/707/cisco-sa-20090826-cucm.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20100922-cucmsip.shtml
CSCtb44167 Router reloads while testing Eapfast authentication with RadiusAccountng.Symptom A Cisco router may reload when running EAP-FAST authentication with RADIUS Accounting.
Conditions
Workaround
CSCtf57481 FXS port controlled by STCAPP is stuck after a few calls.Symptom No powering ring observed for the new incoming call on STCAPP control analog phone.
Conditions
Workaround
CSCtg04747 Octopoda: support making an outgoing call on a queuing dn.Symptom Dial Via Office (DVO) failed to work using UCX-SI SDK.
Conditions
Workaround
CSCtg36728 CTI makeCall request with prompt option crashes router when locale is enabled.Symptom Router crashes or spurious memory access can be seen.
Conditions
Workaround
Open Caveats - Release 15.0(1)XA3
There are no open caveats in this release.
Resolved Caveats - Release 15.0(1)XA3
CSCtd66433 GW failed to send an UNREGISTER message.Symptom GW failed to send REGISTER message when unconfigured from dial-peer.
Conditions
Workaround
Open Caveats - Release 15.0(1)XA2
There are no open caveats in this release.
Resolved Caveats - Release 15.0(1)XA2
CSCta19962The H.323 implementation in Cisco IOS Software contains two vulnerabilities that may be exploited remotely to cause a denial of service (DoS) condition on a device that is running a vulnerable version of Cisco IOS Software.
Cisco has released free software updates that address these vulnerabilities. There are no workarounds to mitigate these vulnerabilities other than disabling H.323 on the vulnerable device if H.323 is not required.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100324-h323.shtml.
CSCtb93855The H.323 implementation in Cisco IOS Software contains two vulnerabilities that may be exploited remotely to cause a denial of service (DoS) condition on a device that is running a vulnerable version of Cisco IOS Software.
Cisco has released free software updates that address these vulnerabilities. There are no workarounds to mitigate these vulnerabilities other than disabling H.323 on the vulnerable device if H.323 is not required.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100324-h323.shtml
CSCte53732 UC520 ran into rommon mode and locked up the console port access.Symptom A Cisco UC520 crashes with memory corruption and frozen console access.
Conditions
Workaround
CSCtd17417 Router crash when configured as mobile router with IP phone attached.Symptom Router crash when configured as mobile router with IP phone attached.
Conditions
Workaround
CSCte08121 SRST8.0: 7937 with sccp version 17 would not register to SRST.Symptom IP phones running firmware that uses sccp version 17 cannot register to SRST/CME-SRST or can register but will not obtain any lines.
Conditions
Workaround
For 79x1/5/2 phones and 7970s, this is 8.4 firmware.
For 7937 phones, get a load prior to 1.4(1).
CSCte73286 SCCP lines cannot fallback to SRST properly.Symptom The line buttons may be missing after phone falls back to the SRST.
Conditions
Workaround
CSCtf12048 UC560 fan broken detection for environment monitoring.Symptom The IOS messages could be observed.
%ENVM-3-FAN_SLOW: System detected Sluggish Fan Condition.
%SMHM-2-SHUTDOWN: Shutdown service module due to a fan failed condition.Conditions
Workaround
CSCtd66592 860 build fails with undefined reference to 'l2_bmib_add_vlan_entity_entry'.CSCtb66273 EZVPN+DVTI: Ping through EZVPN tunnel fails with Split-tunneling.Symptom EzVPN traffic is getting dropped at the DVTI interface on the server.
Conditions
Workaround
CSCtd78882 Stuck port possible with trunk group with max-retry and unplugged port.Symptom FXO ports can get stuck in offhook state.
Conditions
Workaround
CSCte54658 CISCO-ISDN-MIB shows invalid output on Uc520.Symptom CISCO-ISDN-MIB should be supported on UC520 from the MIB locator tool. Customer is using "demandNbrCallDetails" to monitor the status of Free BRI channels using ISDN MIB.
Conditions
1.3.6.1.4.1.9.9.26.1.1.1.1.3 - Channel ID
Always get the output as 0.
The output is different compared to the value received from the same configuration on 2800 and 3800.Workaround
CSCtd53835 UC500 crashed after configuring SPA525 with SPA500S.Symptom Router crashes.
Conditions
Workaround
CSCte39270 CME does not support TsRemoteHold on sccp v16.CSCte84849 69xx phones display toast message "From XXXX" instead of Caller ID.Symptom 69xx phones display toast message "From : XXXX" when it receives an incoming call for 6 seconds and then it displays the caller ID of the person.
Conditions
Workaround
CSCte65327 Caller ID does not work in Gilera2 image.Symptom The Update method would have two call-info headers in certain call scenarios. This would cause the caller ID information to be "unknown" when the two headers were present.
Conditions
Workaround
CSCtc51573 CME GPickup/Pickup does not work with Voice Hunt-group.Symptom CME group pickup or pickup features do not work properly.
Conditions
Workaround
CSCtd92892 myphoneapp of snr config should not be modified by monitor phone.Symptom A monitor phone can change the monitored dn SNR number via myphoneapp application.
Conditions
Workaround
CSCtb73337 AnyConnect 2.4 does not work with IOS if cert not trusted/name mismatch.Symptom AnyConnect Client version 2.4 does not work with IOS headend when a certificate is used that is not trusted or there is mismatch in the hostname entered in the URL to that to the CN (common name) or SAN (subject alternative name) in the IOS router certificate.
AnyConnect 2.4 fails to connect with IOS headend due certificate verify fail error.
This only pertains to the 2.4 version of AnyConnect and previous versions are not affected.Conditions
•
•
Workaround
•
•
CSCtf07474 TCP over IPsec session is failed after EZVPN session up and disconnected.Symptom TCP sessions fail to establish between two IOS routers over an IPSEC VPN tunnel after an EZVPN client session has been established and torn down to the two routers. Logs show %FW-6-DROP_PKT: Dropping TCP session 192.168.0.0:58553 192.168.255.255:23 due to invalid segment with IP ident 35331 tcpflags 0x5010 seq.no 2978402186 ack 1370657297.
The TCP sessions could be a telnet or H.323 sessions that terminate and originate between the two routers.Conditions
•
•
•
•
Workaround
•
•
CSCtf26271 UC500: 525G2 does not register with CME.Symptom SPA525G2 phone would not register.
Conditions
Workaround
CSCtf40571 Missing line button when sccp version 17 phones fallback to SRST.Symptom No line or speed dial buttons are shown on the fallback skinny phone.
Conditions
Workaround
Open Caveats - Release 15.0(1)XA1
There are no open caveats in this release.
Resolved Caveats - Release 15.0(1)XA1
CSCsv33322 remove_snmp_index_entry seen on first OIR removal in NM-1A-T3/E3.CSCsw32679 IKE SAs between COOP KeyServers are not getting deletedSymptom IKE does not get cleared, even if the GDOI Group is removed from the COOP Key servers.
Conditions
Workaround
CSCsx49309 FTP pauses 80 seconds in respond to "copy /verify ftp: flash:" op prompt.Symptom When using the copy ftp command to update IOS software issued on a router, it takes approximately 80 seconds before the file transfer begins.
Conditions
Workaround
CSCsy54137 Some calls are shown active after WAN link flaps between gateway and CCM.Symptom Some calls are shown as active after a WAN link outage between the gateway and Call Manager.
Conditions
Workaround
CSCta11698 skinny-nat is not doing deep packet inspection after issuing the command clear ip nat trans.CSCta24984 FWP - NULL should not be accepted as a name for class-maps and policy-maps.Symptom NULL is accepted as a name for class-maps and policy-maps. No error message is displayed.
Conditions
Workaround
CSCta61523 Initial code commit for SWI 501 modem support.CSCta65909 Failed to get media source address for a stream in a DO call.Symptom Failed to get media source address for a stream in a DO call.
Conditions
Workaround
CSCta69407 DSP is not told to "turn off" digits with mgcp dtmf-relay nte-gw / nte-ca.Symptom When using mgcp dtmf-relay type nte-gw, a sniffer trace will reveal that digits are sent both in-band (within the audio stream) and out-of-band (dtmf-relay). Because of this, double digits can be seen in Unity and MeetingPlace.
Conditions
Workaround
CSCta79031 Pub key cache for peers is not cleared after cert map change.Symptom If a certificate map is changed or added to the trustpoint, the pub key cache for the peers is not cleared. This makes it possible for a client which was connected in the past to reconnect again even if its certificate was banned by the certificate map.
Workaround
CSCta81752 Keepalive does not get applied, debugs show as feature applied.CSCta84002 Path confirmation failure while making transcoding call.CSCta98556 Clientless WebVPN incorrectly redirected access to web portal.Symptom Incorrect redirection is seen while using IOS WebVPN.
Conditions
Workaround
Further Problem Description: Customer has two server (A, B) protected behind the IOS WebVPN . Some pages on server A automatically does a silent login to server B and gets the information required to generate reports. When using IE8 this login information does not gets properly propagated to the backend server B which results in redirection request to the login page from server B.
CSCtb00695 Default shaper Bc and Be is 25ms on LE platforms.CSCtb10100 Same bridge-group is accepted on main interface & and its lw-vlan.CSCtb11302 Precedence Call waiting tone not generated when caller id is enabled.CSCtb15175 8792 can only receive up to 4.5 Mbps instead of 7 Mbps.CSCtb28877 Crashes when debug tftp packet is enabled.Symptom Crash occurs on router configured as tftp-server when IPV6 addresses are used for tftp copy and tftp packet/event debugs have been enabled on the server router.
Conditions
•
•
Unconfigure debug tftp packets/events.
CSCtb34358 IP tunnel source interfaces are mixed up after reload.Symptom Tunnel sources get mixed up when tunnel interfaces are configured with serial subinterfaces as sources and the router is reloaded.
Conditions
Workaround
CSCtb39686 Caller ID check failed after Call Blast scenario.Symptom Wrong Caller ID is displayed after Call Blast done.
Conditions
Workaround
CSCtb40985 IP SLA memory leak with invalid source address.Symptom The memory occupied by the IP SLAs Sync Pro may gradually increase.
Conditions
Workaround
CSCtb42748 No ringback on Incoming SIP to AA to SNR line with different codecs.Symptom No ringback on Incoming SIP to AA to SNR line with different codecs.
Conditions
•
•
•
•
Workaround
CSCtb43226 12.4 IOS MGCP generates 510 remote description error.Symptom Voice call is rejected, because gateway replies 510 error for MDCX message.
Conditions
Workaround
CSCtb44681 Fix static_route single source diffs between eagle_cnh and mcp_dev.CSCtb46181 Incorrect updation of Winscale options.Symptom Application set window scale factor does not get used by the accepted connection, instead the scale factor set by the global command ip tcp window XXXX is used.
Conditions
Workaround
CSCtb47950 I/O memory depleted after 20 minutes of CME SIP TRUNK calls.Conditions
CSCtb48731 Port MEP remains inactive after interface is no shut from shut.CSCtb48984 Adjust webvpn.html page and add support for iphone and ipod.Symptom SSLVPN Login Page is not properly displayed on mobile devices. Also, there is no support for iPhone and iPod safari browsers.
Conditions
Workaround
CSCtb49885 Caller ID check failed for Call Foward with supp.services disabled.Symptom The called name is not displayed on the caller sccp phone when the call is forwarded to non-sccp endpoint (ie. sip trunk or sip phone ). The called number is displayed correctly.
Workaround
CSCtb51993 NAS got crashed while establishing pppoe session @ tw_timer_stop.Symptom A router crashes upon bringing up PPPoE sessions.
Conditions
Workaround
CSCtb56878 Memory Leak at dom_data_strdup.Symptom When we load an FPM tcdf file on the router, a memory leak is seen. However, this is a one time operation and has minimal impact.
Conditions
Workaround
CSCtb57404 SNR Module sets wrong leg mode for SIP-SIP Call.Symptom When using the UCME Single Number Reach feature, it is not possible to hold/resume a call from the mobile device once the SNR ephone has entered auto-hold state.
Conditions
•
•
•
•
•
Workaround
CSCtb59171 BGP IPv6 is not working with ipbasek9.Symptom IPv6 BGP does not work with ipbasek9.
Conditions
Workaround
CSCtb60300 Router crash @ ipnat_sbc_add_static_cfg.Symptom Router crashes when SBC proxy address is configured if the address is IPADDR_ZERO.
Conditions
Workaround
CSCtb66305 shared-dn ephone unregister affects another ephone BLF subsciption.Symptom cme on c3825-advipservicesk9-mz.124-24.T1.bin.
Conditions
ephone 34 button 1:5 2:4ephone 61 blf-speed-dial 1 ... button 1:5 2:4When ephone 34 unregisters, ephone 61 stops sending presence subscription.
Workaround
CSCtb67831 Typo error "numberic" found in the command forward-to-voicemail.CSCtb70102 Wrong application is invoked by the SRST gateway for calling from stcapp phone.Symptom When SRST and STCAPP are configured and running on the same router, SCCCP-controlled analog phones may be unable to make an outgoing call.
Conditions
Workaround
Further Problem Description: This symptom occurs due to STCAPP automatically adding a station-id parameter under the voice-port command in order to save DN information for registration to SRST.
CSCtb71835 Queue-limit configured in ms is not shown.Symptom Queue-limit configured in ms is not displayed in show policy-map int output.
Conditions
Workaround
CSCtb71889 DNS query response is dropped on a NAT-PT router.Symptom DNS A answers from IPv4 DNS server (which is supposed to be forwarded to IPv6 side as AAAA-answer) is dropped on NAT-PT routers.
Conditions
Workaround
CSCtb73115 Memory chunk leaked at NAT String Chu while configuring ip nat pool.Symptom Chunk memory leaked while configuring the ip nat pool.
Conditions
Workaround
CSCtb73219 Unable to clear the arp sub-interface entry.CSCtb73967 Router crashed while doing udp-echo operation in ip sla.Symptom Using the command default dest-ipaddr for udp-echo, udp-jitter, and tcp-connect causes a device to crash.
Conditions
Workaround
CSCtb74251 On hook dialing did not work on 7911 SCCP phone.Symptom
•
•
•
CSCtb88409 Router crashes when configuring object id under config-event-objlist.Symptom A Cisco router may crash when configuring the object id in config-event-objlist subconfiguration mode.
Conditions
Workaround
CSCtc14760 Router reloads during stress test.CSCtc16399 NIOS watchdog timeout after power cycle MC5727 modem.Symptom NIOS watchdog timer times out.
Conditions
Workaround
CSCtc30869 L2 STP MIB and VlanMem MIB support for 1861 platform.CSCtc52622 shdsl and cellular may overwrite cdb queue entries on fxd.CSCtc52748 queueing-dn cannot be configured as a member of ephone hunt groupCSCtc53062 blf is not blocked if DND is set using CSTA message setDND.Symptom Application sends CSTA setDND message to CME, CME does not update/block the blf monitor sessions.
Conditions
Workaround
CSCtc75277 Call Transfer + Call Forward Scenario not working.Symptom The CME does not process the incoming sip 302 message.
Conditions
Workaround
CSCtc78721 Support Bridge-MIB and VLAN-Membership-MIB for 880&890 platforms.CSCtc86342 IOS GW shows invalid syntax error for INVITE with multiple VIA headers.Symptom Inbound SIP calls on IOS SIP GW / CME fails with 500 Internal Server Error.
Conditions
Workaround
CSCtd07228 CME ephone call flows broken with Abacus SCCP version 4.CSCtd11131 Fix compilation errors for the unix simulator in t_base_1.CSCtd21596 Forbidden Header 'Call-Info' found in ACK.Symptom The ACK to 200 OK packet sent by the CME (configured with firewall) contains `Call-Info' Header, which is a forbidden header field when 15.1(0.2)PI12e is loaded on the CME.
Conditions
Workaround
CSCtd23424 Add specific vendorCon to support trunk dn monitor and m button.Symptom User can not press the button configured as trunk-dn monitor to pick up the parked call. Or user cannot press the button configured as M button to speed-dial.
Conditions
Workaround
CSCtd26113 Unable to configure call-forward system redirecting-expanded.Symptom Not able to configure call-forward system redirecting-expanded.
Conditions
Workaround
CSCtd26844 Cisco 500 phone registration fails when ephone tag is 56 or greater.Symptom After a license upgrade from 48 to 64 user license on a UC520, the Cisco 500 series phone registration fails with the following errors in debug ephone register output:
Error: Device Id 80000 Configured Device Id -1 StationSPCPRegisterTokenReject sent on socket 4Conditions
Workaround
CSCtd42552 When CME fails to respond to "newcall", STCAPP hangs.Symptom When shared line has 2 calls, and these 2 calls disconnect at the same time, the port might hang.
Workaround
CSCtd47693 Add support for SPCPPlatformInfoGet msg handling (requested by UCC.CSCtd53835 UC500 crashed after configuring SPA525 with SPA500S.CSCtd66592 860 build fails with undefined ref. to 'l2_bmib_add_vlan_entity_entry'.Symptom Build failure is happening for 860 platform images.
CSCtd78882 Stuck port possible with trunk group with max-retry and unplugged port.Symptom FXO ports can get stuck in offhook state.
Conditions
Unconfigure max-retry. Under each port, configure "timeouts power-denial 0" so that disconnected ports are moved to offhook state and will not be hunted.
Open Caveats - Release 15.0(1)XA
There are no open caveats in this release.
Resolved Caveats - Release 15.0(1)XA
CSCsj16203 CPU profiling may not be reliable in c800 during nested interrupt.Symptom CPU profiling under interrupts is not reliable.
Conditions
Workaround
CSCso05336 Crash due to corrupted magic value in in-use chunk when accessing irc.Symptom A Cisco 1811 router reloads when trying to connect to irc.freenode.net during the first 36 hours following a reload.
Conditions
Workaround
CSCsr09625 missing voice dsp crash-dump.Symptom The voice dsp crash-dump CLI is missing on all platforms except AS5400.
Conditions
Workaround
CSCsr81161 sip consult xfer results in 1-way audio with supp service refer disabled.Symptom Consult transfer with third party sip endpoints results in one way audio when the third party endpoint has delayed response to resume request which includes change in rtp stream parameters (i.e. port number).
Conditions
Workaround
CSCsv01339 Unable to ping some devices on subnet.CSCsv20058 Duplicate H245-alphanumeric at digit_end on rfc2833 to h245-alpha.Symptom Upon digit_end on the RFC-2833 side, the IPIP GW misinterprets this and sends out h245-alphanumeric, which is duplicate. Typically, the IPIP GW should ignore all the tone packets after the digit_begin is detected until the digit_end.
Conditions
Workaround
CSCsw49855 Ping stops working during speed/duplex testing.Symptom IP connectivity fails for the interface following extended pings from FastEthernet interface. The show interface command will indicate that the output queue is wedged:
Output queue: 40/40 (size/max)No more packets are switched out of the interface until the interface is cleared with the clear interface fast<#> command.
Conditions
Workaround
CSCsx20984 Router reloads with bus error and no stack trace.Symptom Router reloads with a bus error and no tracebacks.
Workaround
CSCsx30643 TDM ERL always reports +6.0 dB for VWIC2 T1/E1 voice-ports using HWECAN.Symptom When querying for low-level DSP statistics for an active voice call the TDM ERL level reported is always identically +6.0 dB and never fluctuates:
Conditions
Workaround
CSCsx49309 FTP pauses 80 seconds in response to copy /verify ftp: flash: op prompt.Symptom When using the copy ftp:// command to update IOS software issued on a router, it is seen that it takes approximately 80 seconds before the file transfer begins.
Conditions
Workaround
CSCsx67255 ISDN call failure with cause 47 after DSP allocation failure on channel.Symptom An outgoing call from an IP phone to PSTN through ISDN PRI fails on a channel due to a DSP allocation failure (not enough DSPs to support the call). Subsequent calls through that same channel continue to fail with "resource unavailable" cause value equal to 47 even after DSP resources have been made available to handle the call.
Conditions
DSP allocation failures on gateway can be checked through the use of the exec command show voice dsp group all. The last line of the show command output includes a counter for "DSP resource allocation failure".
This issue can also be seen in some cases upon bootup. When a gateway is reloaded, system resources will come up with a slightly different timing. If, for example, a PRI interface comes up before the DSP resources have fully initialized, there may be a similar failure.
Workaround
•
•
•
CSCsx75353 High CPU Utilization seen on 2821 after upgrade to 12.4(15)T5.Symptom High CPU usage is observed on a Cisco 2821 router. An increase of almost 10 percent in CPU utilization is observed with every voice call.
Conditions
Workaround
CSCsy05003 Oneway audio with MTP on cube and progress_ind alert enable 8 configured.Symptom CUCM --[h323]-- CUBE --[SIP]-- SIP provider
Outbound calls to the SIP provider have one-way audio. The internal IP phone can hear the remote party, but the remote party cannot hear the internal IP phone.
Conditions
Workaround
CSCsy18996 TNP phones displaying "Acct" instead of "Transfer recall" in 12.4(24)T.Symptom After a transfer recall, phones registered to CME will display "Acct" instead of "Transfer recall".
Conditions
Workaround
CSCsy20149 Voice-port goes to transient unregister under SRST mode.Symptom STCAPP voice-port becomes transiently unregistered for approximately one minute in SRST mode.
Conditions
Workaround
CSCsy24266 SIP overrides diversion header from APP RDN number from OR to LRD.Symptom A call from a night hunt forwarded to BACD dial by an extension to an ephone (call forwarding no answer) to voicemail goes to the night hunt number and not the last redirected number.
Conditions
Workaround
CSCsy31552 ADSL WIC/ATM interface stops forwarding traffic & reports output drops.Symptom A Cisco 1841 router equipped with xDSL WIC will suddenly stop forwarding packets. The packets will appear as output drops on the ATM interface statistics. Under the PVC level, there are no drops. The DSL line is not flapping but the ATM interface(s) report output drops.
Conditions
Workaround
CSCsy32246 Call waiting tone not heard when caller-id is enabled for sip dsapp fxs.Symptom The call-waiting tone will not be generated and the caller ID will not be displayed for the second call to a phone connected to a FXS port.
Conditions
This is seen to occur when the Device Service Application (DSAPP) is enabled on the gateway to provide supplementary features for the phone connected to the FXS port using SIP. Configuring either caller-id enable or caller-id enable type 2 on the FXS voice port will trigger this issue.
Workaround
CSCsy37164 WINKUP minimum timer fails to expire on c3800 platforms on outbound calls.Symptom A c3800 platform may intermittently fail to expire the CAS WINKUP minimum timer. This timer dictates how long a T1 CAS, wink-start endpoint must remain offhook before completing a wink. Failure to expire the timer will cause the c3800 to incorrectly classify a valid wink as invalid, failing outbound calls.
Conditions
Workaround
CSCsy61980 Problem with call list on CME.Symptom Phone A (xxx) calls Phone B (yyy), Phone C (zzz) picks up the call through call pickup. A two way conversation is then established between Phone A (xxx) and Phone C (zzz). Then the call is disconnected.
When Phone A is checked, in Placed Calls, there is "Phone C yyy" instead of "Phone B yyy".
Conditions
Workaround
CSCsy88059 Second call gets dropped when the first call is put on hold.Symptom Calls drop when answering the second call on Octo lines with the `Hold' softkey.
Conditions
Workaround
CSCsz00326 Memory fragmentation on VXML gateway.Symptom Memory fragmentation, no call accepted, no output for show run.
Workaround
CSCsz03260 Unexpected callflow may cause exception on IOS H320 Gateway.Symptom A gateway may take an exception when receiving an inbound H320 call when the call is placed via ISDN overlap sending.
Conditions
Workaround
CSCsz14947 12.4(20)T2 doesn't process SIP "REPLACES" header properly.Symptom 12.4(20)T2 ignores SIP "REPLACES" header in mid-call INVITE from proxy and processes/routes call as if it were a new INVITE.
Conditions
Workaround
CSCsz17030 Failure on 12.4(22)T, video port negotiated as port 0.Symptom A video call for a 3G H.324 call fails to properly negotiate media.
Conditions
/SIP/Info/sipSPIUpdateSrcSdpVariablePartVideo: Unsupported Video m-line: Setting stream 2 portnum to zeroAlso, in the media sent to the endpoint, the video port is set to 0 as the debug state.
Workaround
CSCsz23481 dsp allocation signaling dspid command not available on 2801.Symptom The dsp allocation signaling dspid command under voice-card on 2801 platform is not available.
Conditions
Workaround
CSCsz23528 IO MEM autosizing must take Dovetail increased IOMEM usage into account.Symptom After upgrading to 12.4(24)T images or newer, the amount of free IO MEM reported by show memory command output is much lower (4MB less) than with previous versions. The amount of IO MEM allocated upon boot up of the router has not changed with respect to previous versions.
This change in memory consumption is expected due to the integration of new features.
Conditions
Workaround
router(config)# memory-size io <5-50> percentage of DRAM to use for I/O memory: 5, 10, 15, 20, 25, 30, 40, 50For most configurations, 5% should be enough.
CSCsz27002 OnHookMessage is not handled with the specified line and ref.Symptom Call is terminated after aborting the transfer attempt.
Conditions
Workaround
CSCsz30353 Interrupt error occurred when IPSEC connection is up.Symptom
%GT64010-3-DMA: Interrupt errorobserved when IPSEC connection is up on DMVPN spoke.Conditions
Workaround
CSCsz34920 NME-502 causing router to reboot.Symptom Router continuously reboots.
Conditions
Workaround
CSCsz35376 NM-2W VWIC2 reports multiple master clocks driving NM-2W PLL.Symptom The command show controllers t1 on a 3845/2xNM-2W/4 x VWIC2-2MFT-T1/E1 combo may report clock sources driving the NM-2W's PLL are different from the clock sources being reported from the NM-2W FPGA LCS register.
Conditions
Workaround
CSCsz45855 Cisco Unified Border Element not responding to reINVITES received while call transfer is in progress.Symptom Cisco Unified Border Element ignores reINVITEs from Cisco Customer Voice Portal (CVP).
Conditions
Workaround
CSCsz45898 SIP Cisco Unified Border Element does not forward 200ok for session refresh.Symptom SIP Provider -[sip]- CUBE -[sip]- CUCM
CiscoUnified Border Element does not respond to the second reINVITE to refresh the session causing the session refresher to timeout and drop the call.
Conditions
Workaround
CSCsz51722 SIP profile rules are not getting applied on OOD OPTIONS message.Symptom SIP profile rules are not getting applied on OOD OPTIONS message irrespective of SIP profile being applied globally or at dial-peer level.
Conditions
Workaround
CSCsz52576 vlan.dat file lost after second power cycle - VTP Domain Name disappears.Symptom The vlan.dat file gets deleted after the second reload of the router, and the VLAN definition and names are lost (not the interfaces and IP addresses). It has been observed that when the vlan.dat is lost, in sh vtp status, the VTP Domain Name is blank (and was properly configured before).
Conditions
Workaround
Further Problem Description: When a customer is running an image that does not store the VTP and VLAN information in the start-up configuration or the normal output of show running-config, the vlan.dat file gets overridden to the default vlan.dat approximately 2 minutes after reboot. The current VLANs and VTP information remains operational until the router is rebooted.
A reboot causes the VLANs and VTP information to disappear because the start-up configuration does not contain any VLAN or VTP information, nor does the vlan.dat file in flash.
The operating VTP information appears in the output of show running-config all (which shows non-default and default values), indicating that the router considers the VTP information to be at default values even when there is a VTP domain name configured. This allows the VLANs and VTP to remain operational until the router is rebooted.
CSCsz54468 Crashinfo caused by MRCP CLI command, the version is MRCPv2.Symptom Crashinfo on VXML Gateway.
Conditions
Workaround
CSCsz55969 HWIC-1DSU-T1 module does not show the 15 min performance statistics.Symptom HWIC-1DSU-T1 does not show the 15 min performance statistics.
Conditions
Workaround
CSCsz65335 RTSP not releasing socket when socket connect attempt fails.Symptom VXML gateway is unable to open an RTSP connection to media server after media server is taken down and then brought back up.
Conditions
Workaround
CSCsz72535 Memory leak during IZCT testing - mem leak in gk_circuit_info_do_in_acf().Symptom While conducting a stress test with 13500 endpoint and calls between 1000 to 2000 during 17 hours, the test memory utilization was growing to 24%. After the test, the memory fallback is 20%, it does not revert to 4%.
Workaround
CSCsz74629 Delay in propagation of interface link down state.Symptom There is a delay in the propagation of interface link down state. Link failure is detected with a huge delay once the other end of the link gets disconnected.
Conditions
Workaround
CSCsz84392 UC500 does not report FRU information for certain VIC modules.Symptom When certain VIC modules are installed in a UC500, the UC500 will not correctly report the Product (FRU) Number in the show diag output. If the UC500 is being managed using the command line, this problem is cosmetic in nature, but if it is being managed by CCA, then the VIC module will not be detected.
Conditions
Workaround
CSCsz88671 Onhook GPickup * doesn't work.Symptom If GPickup and `*' is pressed when the phone is on hook, the GPickup won't pickup the ringing call from the pickup-group to which the seized DN belongs. The seized DN depends on how the auto-line is configured on the phone.
Conditions
Workaround
CSCsz92704 Voice GWs not supporting DSPfarm services should provide warning message.Symptom IOS Voice GateWay (VGW) platform families like the IAD2430, VG224, VG202, and VG204 are fixed form-factor VGWs which have C5510 DSPs soldered onto the mainboard. As such they are not expandable to install extra DSP resources and are meant primarily as TDM-IP devices. Nonetheless in most IOS releases it is possible to configure dsp services dspfarm under the voice-card 0 CLI in the running-config as well as to set dspfarm profile N <conference|transcode> even though transcoding and conferencing services are not supported on these platforms. There aren't enough DSPs available to make these DSP services viable in addition to accommodating regular TDM-IP VoIP calls. Attempts at sustaining a conference or transcoding call fail, users get confused and open up TAC Service Requests.
Conditions
Workaround
CSCsz96106 Unable to configure ds1 option on snmp-server host - Ambiguous command.Symptom Unable to configure ds1 option on snmp-server host command, ambiguous command error.
Example:
Router(config)#snmp-server host 10.10.10.10 tests ds1 % Ambiguous command: "snmp-server host 10.10.10.10 tests ds1"Conditions
Workaround
CSCta02224 Calls on FXO port disconnect after hold and resumed via line button.Symptom A call is placed on hold from an IP phone. If the user resumes the call by lifting the handset, and then pressing the line button, the call will disconnect within 60 seconds. The precise time that it takes for the call to disconnect may vary (5-60 seconds).
Call comes in via FXO port, -User answers by lifting handset -User press `hold' button and places handset onhook -User lifts handset, then press the line button -Call drops after a few seconds.
Conditions
Workaround
CSCta07241 1841 and 2801 do not print memory dumps to crashinfo.Symptom Crashinfo context is missing useful troubleshooting information.
Conditions
Workaround
CSCta07484 Crash on a router due to array index out of boundary.Symptom A crash may occur on a CME when doing a web query on an ephone.
Conditions
Workaround
CSCta11416 H320 one-way video when H.239 enabled on endpoint.Symptom Video endpoint -[h323]- H320 GW -[ISDN]- Video Endpoint
A call through a H.320 gateway results in two-way audio and one-way video.
Conditions
Workaround
CSCta14536 Router crash pointing to SYS-6-STACKLOW on IPIPGW.Symptom A Cisco IOS VoIP gateway configured for IPIPGW (CUBE) functionality may crash.
Conditions
This has been found to occur in some scenarios where a single voip call loops (meaning the call is from the IPIPGW back to the same IPIPGW) through the IPIPGW.
When this occurs, the following error message may be noticed:
%SYS-6-STACKLOW: Stack for process IP Input running low, 0/12000Workaround
The other possible workaround is to introduce another termination point in the RTP packet flow beside the IPIPGW. For example, if interworking with Cisco Unified Communications Manager (Callmanager) a MTP resource may be used to prevent this loop as long as the MTP resource is not the CUBE gateway.
CSCta16495 IOS should warn if no DSP resources exist for voice-port at bootup.Symptom When the router boots up, voice ports that require DSPs like FXO and FXS cards do not show up in the running configuration. The card shows up in show diag, show inventory, and show version but the "voice-port 0/0/0" does not show up in the configuration.
Conditions
This indicates that analog voice ports did not have enough DSPs to initialize. show voice dsp group all should be used to validate there are enough DSPs. The DSP calculator (http://www.cisco.com/cgi-bin/Support/DSP/cisco_prodsel.pl) should be used to ensure the router has sufficient PVDM modules.
Workaround
CSCta24037 CME crashed for BACD incoming call while transferring to MOC over SIP trunk.Symptom A Cisco router may reload due to a bus error and show the following messages:
%ALIGN-1-FATAL: Illegal access to a low address 10:09:03 PDT Tue Sep 1 2009 addr=0x0, pc=0x4159DB10z , ra=0xFFFFB4DFz , sp=0x4F059900%ALIGN-1-FATAL: Illegal access to a low address 10:09:03 PDT Tue Sep 1 2009 addr=0x0, pc=0x4159DB10z , ra=0xFFFFB4DFz , sp=0x4F059900TLB (store) exception, CPU signal 10, PC = 0x415A2630Conditions
Workaround
CSCta31622 IOS crashes on CPU hog when mini-logger is enabled.Symptom Gateway automatically reloads when minilogger is enabled and DSP crash occurs.
Workaround
CSCta34276 Should allow fixed-no-timestamps mode for clear channel in voip.Symptom While the CLI is configured for H.323 fixed playout mode without timestamps, the DSP is configured for fixed playout mode with timestamps.
Conditions
Workaround
CSCta40055 Placed calls directory on CUCME shows local user name if overlapping extensions exist.Symptom When using overlapping dial-plans between 2 CUCME sites, the "Placed Calls" directory of the originating phone will display the correct called number, but the incorrect called name. CUCME correlates the called number with the local username, even though a unique prefix was prepended, and dialed, to the main extension.
Workaround
CSCta40916 TOH played for incoming H323 call before media negotiation occurs.Symptom CME: IP phone when answered hears hold tone before getting proper media from the far end. Sometimes the call stays up; other times it drops with cause temp failure.
Conditions
Workaround
Further Problem Description: Issue appears to be more visible in cause of slow WAN links (ex: Satellite links)
CSCta54469 During consult transfer, if call on hold disconnects the second leg drops.Symptom During consult transfer, if call on hold disconnects before user can dial the consult leg, the consult leg will drop. The disconnect times vary from 60-90 seconds
Conditions
Debugs show the CME forcing the DN back into an onhook state.
Workaround
CSCta63555 CME crashes after submitting SNR number change menu from EM phone.Symptom A router crashes if running with Cisco IOS Release 12.4(24)T or later.
Conditions
Workaround
CSCta69407 DSP isn't told to "turn off" digits with mgcp dtmf-relay nte-gw / nte-ca.Symptom When using mgcp dtmf-relay type nte-gw, a sniffer trace will reveal that digits are sent both in-band (within the audio stream) and out-of-band (dtmf-relay). Because of this, double digits can be seen in Unity and MeetingPlace.
Conditions
Workaround
CSCta98556 Clientless webvpn incorrectly redirected access to web portal.Symptom Incorrect redirection is seen while using IOS WebVPN.
Conditions
Workaround
Further Problem Description: Customer has two servers (A,B) protected behind the IOS WebVPN. Some pages on server A automatically does a silent login to server B and gets the information required to generate reports. When using IE8 this login information does not get properly propagated to the backend server B which results in redirection request to the login page from server B.
CSCtb42748 No Ringback on Incoming SIP to AA to SNR line with different codecs.Symptom No Ringback on Incoming SIP to AA to SNR line with different codecs.
Conditions
•
•
•
•
Workaround
CSCtb43226 12.4 IOS MGCP generates 510 remote description error.Symptom Voice call is rejected, because gateway replies 510 error for MDCX message.
Conditions
Workaround
CSCtb66305 Shared-dn ephone unregister affects another ephone BLF subscription.Symptom cme on c3825-advipservicesk9-mz.124-24.T1.bin
one ephone UNREGISTER_ABNORMAL, the other ephone with shared DN will stop sending BLF presence subscription.
Example:
ephone 34 button 1:5 2:4ephone 61 blf-speed-dial 1 ... button 1:5 2:4when ephone 34 unregisters, ephone 61 stops sending presence subscription.
Additional References
Use this release note with the documents and websites in this release note and the documents listed in the following sections:
Release-Specific Documents
The following documents are specific to Release 15.0 and apply to Release 15.0(1)XA5:
•
Platform-Specific Documents
Hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco 2800 series routers are available at:
http://www.cisco.com/en/US/products/ps5854/tsd_products_support_series_home.html
Cisco IOS Software Documentation Set
The Cisco IOS software documentation set consists of the Cisco IOS configuration guides, Cisco IOS command references, and other supporting documents.
Documentation Modules
Each module in the Cisco IOS documentation set consists of one or more configuration guides and one or more corresponding command references. Chapters in a configuration guide describe protocols, configuration tasks, and Cisco IOS software functionality, and contain comprehensive configuration examples. Chapters in a command reference provide complete command syntax information. Use each configuration guide with its corresponding command reference. Cisco IOS Software Documentation is available in html or pdf form.
Select your release and click the command references, configuration guides, or any other Cisco IOS documentation you need.
Notices
See the "Notices" section in About Cisco IOS Release Notes located at
http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.
Use this document in conjunction with the documents listed in the "Additional References" section.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
© 2009-2010 Cisco Systems, Inc. All rights reserved.
FeedbackContact Cisco
- Open a Support Case
- (Requires a Cisco Service Contract)