First Published: August 27, 2020

Last Updated: June 28, 2022

Introduction

This document describes the new features, system requirements, licensing information, and caveats for Cisco Unified SIP Proxy Release 10.2.x. Use this document in conjunction with the caveats listed in Caveats.

Cisco Unified SIP Proxy is a high-performance, highly available Session Initiation Protocol (SIP) server for centralized routing and SIP signaling normalization. By forwarding requests to call-control domains, Cisco Unified SIP Proxy provides the means for routing sessions within enterprise and service provider networks. Cisco Unified SIP Proxy provides multiple features, including SIP trunk aggregation, name resolution, routing, load balancing, scalability, and High Availability.

Cisco Unified SIP Proxy 10.2.x is delivered as an Open Virtual Appliance (OVA) and can be installed as a virtual machine on VMware ESXi platform. For more information on virtual machine requirements to install Cisco Unified SIP Proxy Release 10.2.x, see Virtual Machine Requirements for Cisco Unified SIP Proxy 10.2 Cisco Unified SIP Proxy Release 10.2.x supports CISCO-USP-MIB through SNMP.

System Requirements

Virtual Machine Requirements for Cisco Unified SIP Proxy 10.2.x

Cisco Unified SIP Proxy Release 10.2.x software is packaged as an OVA. Refer to Table 1 of VMware ESXi with CUSP release. Table 2 provides the information on hardware recommendation for virtualized Cisco Unified SIP Proxy.


Note

Since VMware has declared end of general support for VMware ESXi version 6.0 and below, we recommend vCUSP 10.2.x users to migrate to ESXi version 6.5 or above.

Table 1. Compatibility Matrix
CUSP Release VMware ESXI Release
10.2.0 5.5 and above
10.2.1 6.5 and above
10.2.2 6.5 and above

For more information about deployment and configuration, see Installation Guide for Cisco Unified SIP Proxy Release 10.2.

Table 2. Virtual Machine Requirements for UCS Platform

CPS

60 CPS

100 CPS

200 CPS

300 CPS

400 CPS

vCPU

1

2

4

4

4

RAM

6 GB

6 GB

6 GB

6 GB

6 GB

Disk

80 GB

80 GB

80 GB

80 GB

80 GB

Note

CPU speed is greater than or equal to 2.99 GHz.
Table 3. Virtual Machine Requirements for Low Speed Cisco UCS and Cisco UCS (E) Platforms

CPS

60 CPS

100 CPS

200 CPS

300 CPS

400 CPS

vCPU

1

2

4

4

4

RAM

6 GB

6 GB

6 GB

6 GB

6 GB

Disk

80 GB

80 GB

80 GB

80 GB

80 GB

Note

  • CPU speed is greater than or equal to 2.99 GHz.

  • Changing the default log file size impacts the performance of Cisco Unified SIP Proxy.

  • Over subscription of hardware by virtual machines running on hypervisor is not supported.

Determining the Software Version

To determine the software version and the license used, perform the following steps:

Procedure

Step 1

Enter the following command to display the Cisco Unified SIP Proxy software version:

showsoftware versions
Step 2

Enter the following command to display the Cisco Unified SIP Proxy software license:

show license smart summary

File Packages for Cisco Unified SIP Proxy Release 10.2.x

Release 10.2

The following package is available for Cisco Unified SIP Proxy Release 10.2.x:

  • cusp-k9.vmw.10.2.0.ova

Release 10.2.1

The following package is available for Cisco Unified SIP Proxy Release 10.2.1:

  • cusp-k9.vmw.10.2.1.ova

Release 10.2.1_v1

The following patch update is available for Cisco Unified SIP Proxy Release 10.2.1_v1:

  • vCUSP_10.2.1_v1.cop.sha512


Note

Ensure to follow the installation steps from the README file that is available with the vCUSP_10.2.1_v1.cop.sha512 patch.

Release 10.2.1_v2

The following patch includes updates for the Log4j component (version 2.16) in Cisco Unified SIP Proxy Release 10.2.1_v2:

  • vCUSP_10.2.1_v2.cop.sha512


Note

Ensure to follow the installation steps from the README file that is available with the vCUSP_10.2.1_v2.cop.sha512 patch.

Release 10.2.1_v3

The following patch includes updates for the Quovadis certificate decommission in Cisco Unified SIP Proxy Release 10.2.1_v3:

  • vCUSP_10.2.1_v3.cop.sha512


Note

  • Each successive patch includes all of the updates from previous patches for this release.

  • Ensure to follow the installation steps from the README file that is available with the vCUSP_10.2.1_v3.cop.sha512 patch.

Release 10.2.2

The following package is available for Cisco Unified SIP Proxy Release 10.2.2:

  • cusp-k9.vmw.10.2.2.ova

License Information

Cisco Smart Software License

Cisco Smart Software Licensing is a standardized licensing platform that facilitates you to deploy and manage Cisco software licenses easily and quickly. Cisco Smart Software Licensing establishes a pool of software licenses that can be used across your network in a flexible and automated manner. It also provides visibility to your purchased and deployed licenses in your network. Cisco Smart Software Licensing removes the need for Product Activation Keys (PAKs) and reduces your license activation and registration time.

For more information on configuring smart licensing using GUI and CLI, see GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2 and CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2.

New Features and Enhancements

Release 10.2

The following features and enhancements are introduced in Cisco Unified SIP Proxy Release 10.2.x:

  • Patch Upgrade—You can install a patch file on an existing major release version of Cisco Unified SIP Proxy starting with Cisco Unified SIP Proxy Release 10.2.x. This helps you upgrade to a newer patch version of the Cisco Unified SIP Proxy within the same major release version without any modifications to your existing virtual machine. For example, you can upgrade from Cisco Unified SIP Proxy Release 10.2.x to Cisco Unified SIP Proxy Release 10.2.1_v1 or Cisco Unified SIP Proxy Release 10.2.1_v1 to Cisco Unified SIP Proxy Release 10.2.1_v2.

    For detailed information on patch upgrade, see Installation Guide for Cisco Unified SIP Proxy Release 10.2. For details on installing patch using CLI, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2. For details on installing patch using GUI, see GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2.

  • Updates to minimum password length and password policy—Passwords should be at least 8 to 64 alphanumeric characters in length. However, there is no limit on the maximum length of the password. The administrator has the privileges to provision a user with password length that is higher than the minimum length. For example, a user can have password of length 65 alphanumeric characters.

  • SFTP File Transfer— The Cisco Unified SIP Proxy now uses Secure File Transfer Protocol (SFTP) for transferring device configuration and templates to and from external networks. Functions such as patch upgrade, back up and restore, upload and copy of system configuration files and logs between CUSP server and external servers are performed only through secured FTP. Please note that FTP is deprecated from release 10.2.x.

New and Modified CLI Commands

New and Modified CLI Commands in Cisco Unified SIP Proxy Release 10.2

The following new commands are introduced in Cisco Unified SIP Proxy Release 10.2:

  • software download url<url> username<username> password<password>

  • software upgrade

For more details on these commands, see the Module Commands for Cisco Unified SIP Proxy section of the CLI Command Reference for Cisco Unified SIP Proxy Release 10.2.

New CLI Commands in Cisco Unified SIP Proxy Release 10.2.2 release

The following new commands are introduced in Cisco Unified SIP Proxy Release 10.2.2 and are aplicable only for 10.2.2 version and above:

  • show cpu-usage history[60-minutes | 60-seconds | 72-hours]

  • show cps history[60-minutes | 72-hours]

  • show memory-usage history[60-minutes | 60-seconds | 72-hours]

  • show 5-minutes cps-history72-hours

  • show disk-usage

Limitations and Restrictions

Cisco Unified SIP Proxy Release 10.2 has the following restrictions:

  • Changing the default log file size impacts the performance of Cisco Unified SIP Proxy.

  • High availability of Cisco Unified SIP Proxy virtual machine on both Cisco UCS and Cisco UCS-E platform is not supported.

  • Cisco Unified SIP Proxy Release 10.2 does not support installation of VMware Tools or any 3rd party tools in a Linux environment.

  • Configuring Fast Ethernet 02 Interface is not supported.

  • From Cisco Unified SIP Proxy Release 10.0 onwards, the directory structure presented to the FTP users is changed. As a result, importing route table from an XML file will not work. We recommend users to utilize the Add Route function in the vCUSP GUI for this purpose.

Caveates

Caveats describe unexpected behavior in Cisco Unified SIP Proxy Release 10.2.x. To see the caveats associated with Cisco Unified SIP Proxy Release 10.2.x, use the Bug Search Tool at:https://tools.cisco.com/bugsearch/search.

Caveats Resolved in Release 10.2

The following issues were resolved in Cisco Unified SIP Proxy Release 10.2:

Caveat Description
CSCvt27743 Evaluation of unified-sip-proxy for Apache Tomcat Ghostcat vulnerability
CSCvr40548 CIAM Alerts on BIND component
CSCvs28900 Super thread crash due to memory leak caused by DNS Java
CSCvs48121 User cannot SSH into CUSP after the user is assigned for FTP access and removed from same
CSCvs54756 Timezone is not updated on changing Country in Time Zone Settings GUI page
CSCvs79888 Changing the CUSP to LITE mode for CUSP 10.0 is not available
CSCvs88460 CUSP 10.1 login not working via RADIUS
CSCvt45242 CUSP 10.0 and 10.1 SIP logs show GMT time zone instead of local time zone synched from NTP server
CSCvt76985 Missing Trace Log File header in 10.x version
CSCvu40336 Multiple Vulnerabilities in bind
CSCvu47993 vCUSP 10.1: Post reload ping/SSH/GUI stop working until CLI is accessed through ESXi console
CSCvs65917 Restore operation does not work when only 1 entry is present in the table
CSCvs77007 Domain Name Config in Setup Wizard not taking effect
CSCvs78604 Cannot clear the trace log file from the CUSP GUI interface
CSCvs78774 Enable Tracing triggers when you clear tracelogs from CLI
CSCvi81740 vCUSP JConsole access
CSCvq02490 vCUSP should support SFTP for all file transfers along with backup and restore
CSCvt53483 Enable kdump configuration in vCUSP 10.1
CSCvq48163 Checkboxes in CUSP UI not functioning correctly on Firefox 63.0.3 and newer versions

The following are the open caveats for Cisco Unified SIP Proxy Release 10.2:

Caveat Description
CSCvu13653 Multiple vulnerabilities in OpenLDAP
CSCvv03282 Getting bad request while clearing 100 calls from the failed call search list
CSCvv23379 Guest OS and ESXi compatibility are showing older version for CUSP 10.2
CSCvv23410 CUSP online help should be updated with the correct steps for configuring the backup parameters

Caveats Resolved in Release 10.2.1

The following issues were resolved in Cisco Unified SIP Proxy Release 10.2.1:

Caveat Description
CSCvu13653 Multiple vulnerabilities in OpenLDAP
CSCvv03282 Getting bad request while clearing 100 calls from the failed call search list
CSCvv23379 Guest OS and ESXi compatibility are showing older version for CUSP 10.2
CSCvv23410 CUSP online help should be updated with the correct steps for configuring the backup parameters
CSCvv87871 CUSP 10.2 unable to subscribe users as member to non-default (new) groups

Caveats Resolved in Release 10.2.1_v1

The following issues were resolved in Cisco Unified SIP Proxy Release 10.2.1_v1:

Caveat Description
CSCvx70719 Restore on CUSP 10.2.1 is failing
CSCvw86510 License Disable after Network Connectivity failure
CSCvx61008 CUSP 10.2 restricting Certificate validity between 2-5 years
CSCvx72402 User is logged out automatically upon a configuration change in the Pre-Normalization section
CSCvx72443 CUSP: Pages become inaccessible with 500 Internal Sever Error after changing Inactivity Timer
CSCvy58640 Terminal Length command no longer available on vCUSP V10
CSCvs47162 Tomcat and messages logs rotation issues in vCUSP
CSCvw79158 No alert is shown to user/administrator, when an incorrect path is selected for upgrade or patch

Caveats Resolved in Release 10.2.1_v2

In addition to the caveats resolved in Cisco Unified SIP Proxy 10.2.1_v1, the following issue was resolved in Cisco Unified SIP Proxy Release 10.2.1_v2:

Issue Description

Log4jRCE(Log4Shell) Vulnerability

 Evaluation of Cisco Unified SIP Proxy for Log4jRCE(Log4Shell) Vulnerability

Caveats Resolved in Release 10.2.1_v3

The following issue was resolved in Cisco Unified SIP Proxy Release 10.2.1_v3:

Issue Description

FN72315

 QuoVadis Root Certificate Decommission on Cisco Unified SIP Proxy release

Caveats Resolved in Release 10.2.2

The following issues were resolved in Cisco Unified SIP Proxy Release 10.2.2:

Issue Description

CSCwa39323

OVA File only allocates 4GB of RAM instead of 6 GB

CSCwb39228

CUSP - Apache Tomcat NIO+OpenSSL vulnerability CVE-2021-41079 in tomcat 8.5.56

CSCwb28821

In BIND 9.8.5 - > 9.8.8, 9.9.3 - > 9.11.29, 9.12.0 - > 9.16.13, and above versions

CSCwb67440

After restore from backup install user admin on newly created CUSP will become hidden

CSCwb76531

Cisco Unified SIP Proxy RMI Registry Bypass

CSCwa18667

Issue with cusp webpage after configuring time policy

CSCwb06998

Patch install failing: vCUSP_10.2.1_v2

CSCvt77007

vCUSP10.x: Make Tech Support from GUI provide same information as "show tech-support" from CLI

CSCvv42008

Accessing Pre or Post Normalization in CUSP GUI gives 404 Not Found or refused to connect

CSCvy96653

The pre existing log entries are being flushed out , when patch installation is triggered from CLI

CSCvy99857

Patch installation with version 10 on a 10.2.1 vCUSP from CLI is getting failed

Migration to Cisco Unified SIP Proxy 10.2.x


Note

Data and configuration from an earlier release must be restored from an SFTP server using the absolute path to the backup files. For more details on how to configure the backup server, see Backup and Restore Data section of the CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2.

Migration from Cisco Unified SIP Proxy 8.x

You can migrate from an existing Cisco Unified SIP Proxy 8.x releases to Cisco Unified SIP Proxy Release 10.2. However, the following are the limitations during the migration:

  • Cisco Unified SIP Proxy Release 10.2 cannot be installed on SRE Module. You require VMWare ESXi platform to install Cisco Unified SIP Proxy Release 10.2.x.

  • Existing Cisco Unified SIP Proxy 8.x SWIFT licenses cannot be migrated to Cisco Unified SIP Proxy 10.2.x. Contact your Cisco partner or reseller to enquire about the purchase of current licensing.

  • The backup configuration files from Cisco Unified SIP Proxy 8.x release do not have the network-related configuration as the Cisco SRE module gets the relevant information through RBCP protocol from the host router when it powers up. Cisco Unified SIP Proxy 10.2.x does not support RBCP communication. So, if a backup configuration from Cisco Unified SIP Proxy 8.5.x release is restored in Cisco Unified SIP Proxy 10.2.x, you must manually enter and configure the IP address, subnet mask, and default gateway details during the reload as follows:

    • Ensure that you have console access to the VM of virtual Cisco Unified SIP Proxy 10.2.x, while you are restoring the configuration of 8.x on 10.2.x.

    • After the restore is completed, reload the module as per the instructions on the screen.

    • Immediately after the reboot is completed, access the console with your username and password.

    • Configure the IP address, subnet mask, and default gateway as follows:

      cusp#configure terminal
Enter configuration command, one per line. End with CNTL/Z.
cusp(config)#interface FastEthernet 0
cusp(config-interface)#ip address 10.65.125.187 255.255.255.128
cusp(config-interface)#end interface
cusp(config)#ip default-gateway 10.65.125.129
SYSTEM ONLINE
cusp(config)#exit
cusp#wr mem

  • After the Cisco Unified SIP Proxy is online, re-associate the users to groups with password reset and test remote access using SSH. 

    cusp#configure terminal
cusp#username cisco group Administrators
cusp#username cisco password cisco
cusp#wr mem

  • Cisco Unified SIP Proxy 8.x release configuration has multiple sub-interfaces. The sub-interface format in Cisco Unified SIP Proxy Release 10.2.x is different from that in Cisco Unified SIP Proxy Release 8.x. You must configure these interfaces manually after the reload is complete.

  • Listen points are not restored as it requires the IP address of the virtual Cisco Unified SIP Proxy. So, you must manually configure the listen points after restoring the back up from the Cisco Unified SIP Proxy 8.x release.

  • SIP Ping configuration is not restored as it requires the IP address of the virtual Cisco Unified SIP Proxy. So, you must manually configure SIP Ping configuration on Cisco Unified SIP Proxy 10.2.x release after restoring the backup from the Cisco Unified SIP Proxy 8.x release.

Following are the steps to migrate from any of the existing Cisco Unified SIP Proxy Releases to Cisco Unified SIP Proxy Release 10.2.x:

Procedure

Step 1

Take a backup of the existing Cisco Unified SIP Proxy 8.x configuration. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy CLI Release 8.5 or GUI Administration Guide for Cisco Unified SIP Proxy Release 8.5.

Step 2

Deploy the Cisco Unified SIP Proxy Release 10.2.x OVA on a virtual machine. For more information, see Cisco Unified SIP Proxy 10.2 Installation Guide.

Step 3

Configure the Smart licenses. For more information, see GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2 and CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2.

Step 4

Restore the configuration backup of Cisco Unified SIP Proxy 8.x in Cisco Unified SIP Proxy 10.2.x. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2 and GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2.

Note 

Smart licensing details are reset if smart licensing is configured before restore of configuration. It is always recommended to restore the configuration before enabling smart licensing.

Note 

When you migrate from Cisco Unified SIP Proxy Release 8.x to Cisco Unified SIP Proxy Release 10.2.x, if there are no Sub-Interfaces or VLANs defined on the Virtual Machine, remove the VLAN 0 tag from packets at the ESXi switch side or network side. If not, packets with VLAN 0 tag are dropped.

Migration from Cisco Unified SIP Proxy 9.x

You can upgrade from the existing Cisco Unified SIP Proxy 9.x releases to Cisco Unified SIP Proxy Release 10.2.x. Following are the steps to migrate from any of the existing Cisco Unified SIP Proxy Releases to Cisco Unified SIP Proxy Release 10.2.x:

Procedure

Step 1

Copy the running configuration to the startup configuration. For more information, see “Maintaining the Cisco Unified SIP Proxy System” chapter in CLI Configuration Guide for Cisco Unified SIP Proxy Release 9.x.

Step 2

Unregister CUSP 9.x from CSSM if you are using Smart Licensing.
Step 3

Take a backup of the existing Cisco Unified SIP Proxy 9.x configuration. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 9.x CLI Configuration Guide for Cisco Unified SIP Proxy Release 9.x and GUI Administration Guide for Cisco Unified SIP Proxy Release 9.x.

Step 4

Deploy the Cisco Unified SIP Proxy Release 10.2 OVA on the virtual machine. For more information, see Cisco Unified SIP Proxy 10.2 Installation Guide for more information.

Step 5

Configure the Smart licenses. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 9.x and GUI Administration Guide for Cisco Unified SIP Proxy Release 9.x.

Step 6

Restore the configuration backup of Cisco Unified SIP Proxy 9.x in Cisco Unified SIP Proxy 10.2. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 9.x and GUI Administration Guide for Cisco Unified SIP Proxy Release 9.x.

Step 7

Reregister to CSSM.

Migration from Cisco Unified SIP Proxy 10.x

You can upgrade from the existing Cisco Unified SIP Proxy 10.x releases to Cisco Unified SIP Proxy Release 10.2.x. Following are the steps to migrate from any of the existing Cisco Unified SIP Proxy Releases to Cisco Unified SIP Proxy Release 10.2.x:

Procedure

Step 1

Copy the running configuration to the startup configuration. For more information, see “Maintaining the Cisco Unified SIP Proxy System” chapter in CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.x.

Step 2

Unregister CUSP 10.x from CSSM if you are using Smart Licensing.
Step 3

Take a backup of the existing Cisco Unified SIP Proxy 10.x configuration. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.x and GUI Administration Guide for Cisco Unified SIP Proxy Release 10.x.
Step 4

Deploy the Cisco Unified SIP Proxy Release 10.2 OVA on the virtual machine. For more information, see Cisco Unified SIP Proxy 10.2 Installation Guide for more information.

Step 5

Configure the Smart licenses. For more information, see GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2 and CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2.

Step 6

Restore the configuration backup of Cisco Unified SIP Proxy 10.x.x in Cisco Unified SIP Proxy 10.2.x. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2 and GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2.
Step 7

Reregister to CSSM.

Related Documentation

The below table lists the documentation available for Cisco Unified SIP Proxy Release 10.2.x:

Table 4. Related Documentation
Document Description
Installation Guide for Cisco Unified SIP Proxy Release 10.2.x

Describes how to install the Cisco Unified SIP Proxy software, including licenses. Also includes information about moving from Release 1.x to Release 10.2.x.

http://www.cisco.com/en/US/products/ps10475/prod_installation_guides_list.html
CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2.x

Contains administrator information, such as maintenance and troubleshooting, for tasks that are performed from the CLI.

http://www.cisco.com/en/US/products/ps10475/products_installation_and_configuration_guides_list.html
CLI Command Reference for Cisco Unified SIP Proxy Release 10.2.x

Contains descriptions of all the Cisco Unified SIP Proxy Release 10.2.x-specific CLI commands.

http://www.cisco.com/en/US/products/ps10475/prod_command_reference_list.html
GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2.x

Contains administrator information, such as maintenance and troubleshooting, for tasks that are performed from the GUI. Includes online help.

http://www.cisco.com/en/US/products/ps10475/products_installation_and_configuration_guides_list.html
Commercial Open Source Information for Cisco Unified SIP Proxy Release 10.2.x

Lists all the open source software used in this project.

https://www.cisco.com/c/en/us/about/legal/open-source-documentation-responsive.html