Routing Rules API Questions

RE: need help with rules for dns servers

2013-04-29T20:48:01Z

I think you are posting to the wrong spot. This is a forum for the Unified Routing Rules Interface on Unified Communications Manager. Sorry.

need help with rules for dns servers

2013-04-29T19:58:42Z

we have some caching dns servers behind our firewall and last week dyn.net changed theor dns servers and stopped allowing dns lookups on prt 53 and now require us to use ports 1028 or higher. We run isc bind on windows for our dns servers and they told me to uncomment this line which I did in my named.conf file: query-source address * port 53; now I have to change the rules in the cisco 3600 router that filters all inbound and outbound traffic. can someone tell me what I need to change in order to alloq ports 1028 and high to do the dns queries? here's what I have now. Allow return UDP DNS traffic to the DNS Servers. permit udp any eq 53 host xx.36.241.201 eq 53 permit udp any eq 53 host xx.36.241.202 eq 53 permit udp any eq 53 host xx.36.241.203 eq 53 permit udp any eq 53 host xx.36.241.204 eq 53 permit udp any eq 53 host xx.36.241.205 eq 53 permit udp any eq 53 host xx.36.241.206 eq 53 thanks in advance.

RE: CURRI - throttling?

2013-03-12T14:40:03Z

There is no outbound throttling of requests to the policy server. You should plan for an overall reduction in the BHCA of your cluster if you route a majority of your calls through an ECCP. Make sure you enable features like load-balancing of requests and use multiple policy servers. Also, try to keep the policy servers in proximity to the cluster to reduce the request response times. Mark

RE: Cannot get XACML to parse using PHP

2013-03-04T22:37:16Z

The only difference I see in the responses is this "HEAD /speeddial/ecp.php HTTP/1.1". Guessing that this might just be remanent of your pasting. Are you running Version 8.6 of CUCM? There is a defect (fixed in 9.0 and later) that impacts the changing of the application URL in the ECP profile. It will work when you first configure it, but when you change the URL of the profile, it doesn't get reloaded properly and your application will fail. You can work around it by restarting the CUCM service. You can also try having two profiles (one for the Python and another for the PHP) and switching between them. There shouldn't be anything inherent in PHP that stops you. Mark

Cannot get XACML to parse using PHP

2013-03-04T18:54:21Z

I am unable to get PHP to work with XAXML/ECP profiles. I read a previous post from Stefan and tried to correct my issues using the info in that post but was not successful. I am able to get the python app to work. Would strongly prefer to use PHP. I simply copied the python message and substitude some hard coded values. //******************** $response = 'Permit<cixml ver="1.0"><continue><modify callingnumber="3688" callednumber="3689"/></continue> </cixml>'; echo $response; //************************* Here is the wireshark capture of the request/response between my Apache server and the CUCM POST POST /speeddial/ecp.php HTTP/1.1 Host: *****:8090 Accept: */* Content-type: text/xml; charset=ISO-8859-1 methodName: isRoleAccessAllowed User-Agent: CiscoUCM-HttpClient/1.0 Connection:Keep-Alive Content-Length: 1682 CISCO:UC:UCMPolicy 3654 **63654 3654 6000 CISCO:UC:VoiceOrVideoCall any translationpattern HTTP/1.1 200 OK Date: Mon, 04 Mar 2013 18:50:56 GMT Server: Apache Content-Length: 525 Content-type: text/xml; charset="utf-8" Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Permit<cixml ver="1.0"><continue><modify callingnumber="3688" callednumber="3689"/></continue> </cixml>HEAD /speeddial/ecp.php HTTP/1.1 //********* Here is a wireshark for my Python server POST /ecp.py HTTP/1.1 Host: *******:8080 Accept: */* Content-type: text/xml; charset=ISO-8859-1 methodName: isRoleAccessAllowed User-Agent: CiscoUCM-HttpClient/1.0 Connection:Keep-Alive Content-Length: 1682 CISCO:UC:UCMPolicy 3654 **53654 3654 6000 CISCO:UC:VoiceOrVideoCall any translationpattern HTTP/1.0 200 OK Server: BaseHTTP/0.3 Python/2.7.3 Date: Mon, 04 Mar 2013 18:52:17 GMT Content-type: text/xml; charset="utf-8" Content-Length: 529 Connection: Keep-Alive Keep-Alive: timeout = 20000 max = 100 Permit<cixml ver="1.0"><continue><modify callingnumber="3688" callednumber="3689"/></continue> </cixml>

RE: Possible Format Problem

2013-02-27T13:03:31Z

Hi Yaohua, Yes, it can be tricky to get that right so they you don't create the loop. Try keeping the TP in a partition that is separate from the phones. That makes it a bit easier to manage. Mark

RE: Possible Format Problem

2013-02-27T01:47:53Z

Hi Mark; i have found the reason. because of the translation pattern is same to the route pattern, the continue call becomes a loop call. the cucm always send xml http request to my external call server. when using the simply continue call that does not modiy the callednumber, you must pay attention to the css and partition of translation pattern and route pattern. tks

RE: Possible Format Problem

2013-02-25T17:06:09Z

Yaohua. What version of CUCM are you running, and what called number element are you adding? Just trying to identify if there is some problem here that needs to be addressed. Can you post the non-working and the working responses you are returning to CUCM? Thanks, Mark

RE: CUCM recieve the http response,but not work

2013-02-25T17:03:37Z

Yaohua, The CIXML looks fine. Can you post the entire response? Mark

RE: Possible Format Problem

2013-02-25T02:31:15Z

Hi Mark， My resonpse xml format is same as you.but the cm is not working and refusing continue call. But after i add element that is a callednumber, the cm work as i expect. why

RE: CUCM recieve the http response,but not work

2013-02-22T09:00:51Z

Hi Mark; i want the call routes simply normally continue. according to the xml developer guide, the cixml is below: <cixml version="1.0"><continue></continue></cixml> but the cucm can't work correctly. the call fails. help me check the cixml formt.

RE: CUCM recieve the http response,but not work

2013-01-24T19:09:03Z

Yes, it is an annoying bug. It is fixed in 9.0. The good news is that it only happens if you make changes to an inservice profile; Running services aren't impacted. Mark

RE: CURRI - Traceback

2013-01-24T19:05:33Z

Clay, There is a defect in 8.6 that if you change the ECC Profile of a working connection, it will fail to pick up the change correctly from the DB, and subsequent responses from the routing server will be ignored. Try restarting the CallManager Service (you don't have to reboot the entire server), and see if that will get your responses to work again.

RE: CUCM recieve the http response,but not work

2013-01-24T02:47:39Z

Thanks gery and mark. I hit a bug at CUCM 8.6.2-20000-2. the bug ID is [color=windowtext][url=https://cdetsng.cisco.com/webui/#view=CSCtx40767]CSCtx40767[/url]. the workaround is reset CM service every time when making change to ECC profile.[/color]

RE: CURRI - Traceback

2013-01-23T23:07:50Z

[quote=Mark Stover]I just tried this on 12.10, and it seems to run okay for me. Can you double-check that you have a clean python install? It looks like issues in Python library; have you installed any custom Python libraries? Mark[/quote] Hi Mark, You were right, I tried on ubuntu 12.10 and all errors messages stopped, but now I have a different issue: The ECC profile is configured to block call on failures. When I place a call to a DN that is expected to be forwarded, the CUCM gets response "Permit", and the call is blocked. When I place another call to a DN that is expected to be blocked, the CUCM gets "DENY", and the call is blocked too. But when I change ECC profile to forward calls on failures, the two previous calls are forwarded, It seems that is something wrong on CUCM or the response messages are in wrong format.

RE: CURRI - Traceback

2013-01-23T14:01:21Z

Hi, Mark. Thanks for your help. I'm using the python that comes with ubuntu 12.04, made no installation.

RE: CURRI - Traceback

2013-01-23T13:31:56Z

I just tried this on 12.10, and it seems to run okay for me. Can you double-check that you have a clean python install? It looks like issues in Python library; have you installed any custom Python libraries? Mark

CURRI - Traceback

2013-01-21T00:17:20Z

Hi all, I'm trying to run sampplePolicyApp, on Ubunto 12.04, and I realized when CUCM send "HttpConnection - processRetry count=912, threadId=14825/11893648 ACTIVE/REQ URL http://5.45.200.17:8080/samplePolicyApp|*^*^*" I got on Ubuntu server these two messages, that goes attached. The CUCM's version is 8.6.2.22900-9. so, when I place a call that suppose to be forwarded, due to these errors, I got: HttpHandler - wait_RoutingReq no connection available/in service or handler not in active, send back routing rej |1,100,13,807.724^5.45.200.8^SEP0012D9BB2950 I only changed the DNs on original code, from 1000 to 203, due to my lab enviroment. thanks in advance.

RE: CUCM recieve the http response,but not work

2013-01-18T14:02:30Z

Does the TP that triggers the ECC have a CSS that allows you to reach the number you're attempting to Divert to?

RE: CUCM recieve the http response,but not work

2013-01-18T07:51:01Z

Hi Gery thanks for your answer as first. i have change the cixml fomat as your suggestion. the response message is below: Permit <cixml version="1.0"> <divert> <destination> 81130110 </destination> </divert> </cixml> i use RTMT to confirm that cucm recieved the response, but cucm does't divert the call what i expect and reject the call as i configure. [color=#ff0000]|HttpHandler - processHttpRes response from url (http://10.20.4.170:8080/eri), directive (1), routing result code (0x1), Tid (16777228)|0,0,0,0.0^*^*[/color] [color=#ff0000]above is SDI Log[/color] so i don't know how to fix the issue. please