Unable to update phone setting after CUCM 12

When you try to edit a phone after you upgrade to CUCM 12 you get an error of 
"Update failed. SSH Password is not valid. SSH Password is an encrypted value containing up to 288 hexadecimal characters (0-9 and A-F)"

You have to run the following command on CLI in irder to clear any password set
run sql update device set sshpassword = '' where name = "SEP1234AAAABBBB"

 

Cisco FMC FTD user to IP mapping troubleshooting

To check whether user to IP mapping works correctly, SSH to FMC and FTD and run the following commands in order to check if the entries are there

expert
user_map_query.pl -i 10.10.10.10 (to check for IP to user mapping)
user_map_query.pl -u bob (to check user to IP mapping)
If results display "For policy = 1" then this is set to propagate to FTD


Another approach
expert
u2dump /var/sf/user_enforcement/user_ip_map.* > /var/tmp/user-ip-map.dump
vi /var/tmp/user-ip-map.dump 


Credit for some of the above goes to dependencyhell.net blog.

Anyconnect DNS issues on VPN

If you 're facing troubles with clients connecting to VPN and can't resolve DNS please check the following

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuz27826/?rfs=qvred

In short
Anyconnect creates a static route on the client for the DHCP server. if your DHCP server also servers as DNS etc. this breaks the DNS resolution for your client.
Apply the following as workaround

group-policy DfltGrpPolicy attributes
  webvpn
     anyconnect-custom-attr no-dhcp-server-route
     anyconnect-custom-data no-dhcp-server-route no-dhcp-server-route true

group-policy <XXX> attributes 
  anyconnect-custom no-dhcp-server-route value no-dhcp-server-route

Google NTP service

Google's started a public network time protocol (NTP) servers.
You'll find the servers at time.google.com – 216.239.35.0

More info here: https://developers.google.com/time/

Cisco ISE check Profiler Feed logs and Updates

Hi all,

In order to check your profiler logs and check the upgrade progress use the following command in CLI

sh logging application profiler.log tail

Jabber move to mobile

Hi, this is a sort guide on how to setup move to mobile.
This feature is available only for Android and iOS Jabber, not for Windows etc.

First create a Mobility Profile, Call Routing -> Mobility -> Mobility Profile.

This is a global setting.



Go to end user and assign mobility for the user needed

Then go to device configuration and make sure for the following

1. Assign a softkey template that has Mobility key assigned on "On Hook" and "Connected", Create on if needed.
2. Assign the English United States on User Locale (Required as stated)
3. Assign an Owner ID and Mobility user ID
4. Assign a CSS that allows you to reach the mobile number on "Rerouting Calling Search Space"
5. On "Transfer to Mobile Network" select "Use Mobility softkey (user Receives Call)"
6. On "Dial via Office" select Enable
7. On "Associated Mobility Identity" create a new mobility as follows

Apply configuration and logoff - login from mobile jabber and test.

Cisco reference
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/11_6/cjab_b_feature-configuration-for-cisco-jabber/cjab_b_feature-configuration-for-cisco-jabber_chapter_0100.html#CJAB_TK_S6472988_00

CiscoAP1832i U boot recovery

Enter the U boot environment bit hitting ESC during boot.

use printenv and setenv (set doesn't accept  =) commands to boot from TFTP. (Usually change IP address of AP and TFTP, filename to boot part.bin from convert lightweight to autonomous)
then use: bootipq tftp