Release Notes for the Cisco 3700 Series Integrated Services Routers for Cisco IOS Release 12.4(4)XC
Available Languages
Table Of Contents
Release Notes for Cisco 3700 Series Integrated Services Routers with Cisco IOS Release 12.4(4)XC
Determining the Software Version
Upgrading to a New Software Release
New Software Features in Release 12.4(4)XC4
Cisco Unified CME 4.0(4) Extension Assigner
New Software Features in Release 12.4(4)XC1
New Hardware Features in Release 12.4(4)XC
New Software Features in Release 12.4(4)XC
Call Detail Records (CDR) Feature Correlation ID for Supplementary Features
Cisco Unified CallManager Express 4.0
Cisco Unified Survivable Remote Site Telephony 4.0
Customizable PSTN Tones and H.323 Call-Disconnect Cause Codes
H.323 VoIP Call Preservation Enhancements for WAN Link Failures
Single Port G.SHDSL WAN Interface Card (WIC-1SHDSL-V3)
Video Support for SCCP-Based Endpoints
Resolved Caveats - Cisco IOS Release 12.4(4)XC7
Resolved Caveats - Cisco IOS Release 12.4(4)XC6
Open Caveats - Cisco IOS Release 12.4(4)XC6
There are no known open caveats in this release
Resolved Caveats - Cisco IOS Release 12.4(4)XC5
Resolved Caveats - Cisco IOS Release 12.4(4)XC4
Resolved Caveats - Cisco IOS Release 12.4(4)XC3
Resolved Caveats - Cisco IOS Release 12.4(4)XC2
Open Caveats - Cisco IOS Release 12.4(4)XC2
Resolved Caveats - Cisco IOS Release 12.4(4)XC1
Open Caveats - Cisco IOS Release 12.4(4)XC1
Resolved Caveats - Cisco IOS Release 12.4(4)XC
Open Caveats - Cisco IOS Release 12.4(4)XC
Caveat Updates and Special Notices
Cisco IOS Software Documentation Set
Release 12.4 Documentation Set
Obtaining Documentation, Obtaining Support, and Service Guidelines
Open Source License Acknowledgements
Release Notes for Cisco 3700 Series Integrated Services Routers with Cisco IOS Release 12.4(4)XC
June 09, 2008Cisco IOS Release 12.4(4)XC6OL-9579-01 BO Sixth ReleaseLast Revised: September 24, 2008These release notes describe new features and significant software components for the Cisco 3700 series routers that support the Cisco IOS Release 12.4(4)XC releases. These release notes are updated as needed to describe new memory requirements, new features, new hardware support, software platform deferrals, microcode or modem code changes, related document changes, and any other important changes. Use these release notes with the Cross-Platform Release Notes for Cisco IOS Release 12.4T located on Cisco.com.
For a list of the software caveats that apply to Release 12.4(4)XC, see the "Caveats" section and Caveats for Cisco IOS Release 12.4(4)T. The online caveats document is updated for every maintenance release and is located on Cisco.com.
Contents
•
Obtaining Documentation, Obtaining Support, and Service Guidelines
•
System Requirements
This section describes the system requirements for Release 12.4(4)XC and includes the following sections:
•
•
Memory Requirements
Table 1 describes the memory requirements for the Cisco IOS feature sets supported by Cisco IOS Release 12.4(4)XC on the Cisco 3700 series routers.
Hardware Supported
Cisco IOS Release 12.4(4)XC supports the following Cisco 3700 series routers:
•
•
For descriptions of existing hardware features and supported modules, see the hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco 3700 series routers, which are available on Cisco.com at the following location:
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/3700/index.htm
Determining the Software Version
To determine which version of Cisco IOS software is currently running on your Cisco 3700 series router, log in to the router and enter the show version privileged EXEC command. The following sample output from the show version command indicates the version number.
Router> show versionCisco Internetwork Operating System SoftwareIOS (tm) C3700 Software (C3700-Y7-MZ), Version 12.4(11)XJ, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)Synched to technology version 12.4(4)TUpgrading to a New Software Release
For general information about upgrading to a new software release, refer to the Software Installation and Upgrade Procedures located at http://www.cisco.com/warp/public/130/upgrade_index.shtml.
Feature Set Tables
The Cisco IOS software is packaged in feature sets consisting of software images, depending on the platform. Each feature set contains a specific set of Cisco IOS features. Release 12.4(4)XC supports the same feature sets as Releases 12.4 and 12.4(4)T, but Release 12.4(4)XC includes new features supported by the Cisco 3700 series routers.
Caution
Table 3 lists the feature and feature sets supported in Cisco IOS Release 12.4(4)XC.
The tables use the following conventions:
•
•
•
Note
Table 3 Cisco IOS Release 12.4(4)XC Feature List for Cisco 3700 Routers
Call Detail Records (CDR) Feature Correlation ID for Supplementary Features
12.4(4)XC
See Table 1 for image names.
Customizable PSTN Tones and H.323 Call-Disconnect Cause Codes
H.323 VoIP Call Preservation Enhancements for WAN Link Failures
New and Changed Information
This section contains the following information:
•
•
•
•
Updated Naming Conventions
The following product names have been changed in Cisco IOS Release 12.4(4)XC:
•
•
New Software Features in Release 12.4(4)XC4
The following new feature is supported on the Cisco 3700 series router in Cisco IOS Release 12.4(4)XC4:
•
Cisco Unified CME 4.0(4) Extension Assigner
The Cisco Unified CallManager Express (CME) feature enables installation technicians to assign extension numbers to Cisco Unified CME phones without accessing the server. For more information, see the following URL: http://www.cisco.com/univercd/cc/td/doc/product/voice/its/cme40/cme403/extasgnr.htm
New Software Features in Release 12.4(4)XC1
New features are available for Cisco Unified CallManager Express (Cisco Unified CME), including the following:
•
•
•
For more information, see the "Cisco Unified CallManager Express 4.0" section and the Cisco Unified CallManager Express 4.0.1 New Features document at the following URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124newft/124limit/124x/124xc4/cme401tk.htm
New Hardware Features in Release 12.4(4)XC
There are no new hardware features in this release.
New Software Features in Release 12.4(4)XC
The following features are new in Cisco IOS Release 12.4(4)XC:
•
•
•
•
•
•
•
Call Detail Records (CDR) Feature Correlation ID for Supplementary Features
This feature captures additional information in CDRs for voice calls that are transferred or forwarded on phones controlled by Cisco Unified CallManager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST). It includes a unique correlation ID that identifies a given call feature across all legs in a call. CDR information can be output in RADIUS VSAs or system log (syslog) messages. For more information about this feature, go to the following URL:
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/vapp_dev/vsaig3.htm
Cisco Unified CallManager Express 4.0
Cisco Unified CallManager Express 4.0 (Cisco Unified CME 4.0) delivers a number of next-generation telephony features that expand system capabilities and provide key productivity enhancements.
With this release, the product name has been changed to Cisco Unified CallManager Express to underscore its position as a member of the Cisco Unified Communications family of products.
New features and expanded capabilities are introduced in the following areas:
•
•
•
•
•
•
–
–
–
–
–
•
•
•
•
•
•
For details about new features, see the "Feature History" chapter of the Cisco Unified CallManager Express System Administrator Guide at the following URL:
http://www.cisco.com/en/US/products/sw/voicesw/ps4625/products_configuration_guide_book09186a00805f262e.htmlFor links to all Cisco Unified CallManager Express documents, see the documentation roadmap at the following URL:
http://www.cisco.com/en/US/products/sw/voicesw/ps4625/products_documentation_roadmap09186a0080189132.htmlCisco Unified Survivable Remote Site Telephony 4.0
Cisco Unified Survivable Remote Site Telephony (SRST) 4.0 adds these features to the Cisco 3700 series routers in Cisco IOS Release 12.4(4)XC:
•
–
–
–
–
–
•
•
•
•
For more information about these features, go to http://www.cisco.com/en/US/products/sw/voicesw/ps2169/products_configuration_guide_chapter09186a00805fccb7.html.
Customizable PSTN Tones and H.323 Call-Disconnect Cause Codes
The Customizable PSTN Tones and H.323 Call-Disconnect Cause Codes featurette enables you to customize PSTN tones and H.323 call-disconnect cause codes for certain disconnect scenarios. Specifically, you can customize the following:
•
•
In addition, you can specify the mechanism for detecting media inactivity (silence) on a voice call: Real-Time Transport Protocol (RTP), RTP Control Protocol (RTCP), or both.
H.323 VoIP Call Preservation Enhancements for WAN Link Failures
Changes made to the Cisco IOS H.323 voice gateway and Cisco Unified CallManager in support of this feature make it possible to preserve calls when the WAN link flaps, resulting in a temporary TCP connection loss between the Cisco Unified CallManager and an IP phone or Cisco IOS H.323 voice gateway located in a remote site or branch office location.
Integrated Services
This feature allows data PRI services (dial-in, dial-on-demand routing [DDR], and DDR backup) to occur on top of voice-enabled PRI interfaces, and adds multilevel precedence and preemption (MLPP) capability for DDR calls over the active voice call when no idle channel is available during the DDR call setup.
•
•
For more information about the Integrated Services feature, see the Integrating Data and Voice Services for ISDN PRI Interfaces on Multiservice Access Routers document at the following URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124newft/124limit/124x/124xc4/intserv.htm
Single Port G.SHDSL WAN Interface Card (WIC-1SHDSL-V3)
A single port multi line G.SHDSL WAN interface card (WIC), or WIC-1SHDSL-V3, provides Multirate Symmetrical High-Speed Digital Subscriber Line (G.SHDSL) feature support for Two-Wire Mode and Four-Wire Mode for SHDSL on the Cisco 1700 series, Cisco 1800 series, Cisco 26xxXM, Cisco 2691, Cisco 2800, Cisco 3700 series, and Cisco 3800 series modular access routers. The WIC-1SHDSL-V3 incorporates the latest firmware and the latest circuitry. For more information about this feature, go to the following URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124newft/124t/124t_7/gt4wire.htm
Video Support for SCCP-Based Endpoints
The Video Support for SCCP-Based Endpoints feature adds video support for Cisco Unified CallManager Express to maintain close feature parity with Cisco Unified CallManager. This feature allows you to pass a video stream with a voice call between video-capable SCCP endpoints and between SCCP and H.323 endpoints. Through the Cisco Unified CME router, the video-capable endpoints can communicate with each other locally to a remote H.323 endpoint through a gateway or through an H.323 network.
For information about video support in Cisco Unified CallManager Express, see the "Video Support for SCCP-Based Endpoints" chapter in the Cisco CallManager Express System Administrator Guide at the following URL:
http://www.cisco.com/en/US/products/sw/voicesw/ps4625/products_administration_guide_chapter09186a00805f28fb.htmlLimitations and Restrictions
There are no known limitations or restrictions.
Caveats
Caveats describe unexpected behavior or defects in the Cisco IOS software releases. Severity 1 caveats are the most serious caveats, severity 2 caveats are less serious, and severity 3 caveats are the least serious of these three severity levels.
Caveats in Cisco IOS Release 12.4(4)T are also in Cisco IOS Release 12.4(11)XJ. For information on caveats in Cisco IOS Release 12.4(4)T, refer to the Caveats for Cisco IOS Release 12.4(4)T document. This document lists severity 1 and 2 caveats; the documents are located on Cisco.com.
Note
This section contains the following caveat information:
•
•
•
•
•
•
•
•
•
•
•
•
Resolved Caveats - Cisco IOS Release 12.4(4)XC7
CSCec12299Devices running Cisco IOS versions 12.0S, 12.2, 12.3 or 12.4 and configured for Multiprotocol Label Switching (MPLS) Virtual Private Networks (VPNs) or VPN Routing and Forwarding Lite (VRF Lite) and using Border Gateway Protocol (BGP) between Customer Edge (CE) and Provider Edge (PE) devices may permit information to propagate between VPNs.
Workarounds are available to help mitigate this vulnerability.
This issue is triggered by a logic error when processing extended communities on the PE device.
This issue cannot be deterministically exploited by an attacker.
Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-vpn.shtml.
CSCse56501A device running Cisco IOS software that has Internet Protocol version 6 (IPv6) enabled may be subject to a denial of service (DoS) attack. For the device to be affected by this vulnerability the device also has to have certain Internet Protocol version 4 (IPv4) User Datagram Protocol (UDP) services enabled. To exploit this vulnerability an offending IPv6 packet must be targeted to the device. Packets that are routed throughout the router can not trigger this vulnerability. Successful exploitation will prevent the interface from receiving any additional traffic. The only exception is Resource Reservation Protocol (RSVP) service, which if exploited, will cause the device to crash. Only the interface on which the vulnerability was exploited will be affected.
Cisco is providing fixed software to address this issue. There are workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-IPv4IPv6.shtml.
CSCsi01470A vulnerability in the Cisco implementation of Multicast Virtual Private Network (MVPN) is subject to exploitation that can allow a malicious user to create extra multicast states on the core routers or receive multicast traffic from other Multiprotocol Label Switching (MPLS) based Virtual Private Networks (VPN) by sending specially crafted messages.
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml.
Resolved Caveats - Cisco IOS Release 12.4(4)XC6
CSCsb40304Cisco IOS device may crash while processing malformed Secure Sockets Layer (SSL) packets. In order to trigger these vulnerabilities, a malicious client must send malformed packets during the SSL protocol exchange with the vulnerable device.
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
Cisco IOS is affected by the following vulnerabilities:
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. There are workarounds available to mitigate the effects of these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-SSL.shtml.
Note
A combined software table for Cisco IOS is available to aid customers in choosing a software releases that fixes all security vulnerabilities published as of May 22, 2007. This software table is available at the following link: http://www.cisco.com/warp/public/707/cisco-sa-20070522-cry-bundle.shtml.
CSCsd85587A vulnerability has been discovered in a third party cryptographic library which is used by a number of Cisco products. This vulnerability may be triggered when a malformed Abstract Syntax Notation One (ASN.1) object is parsed. Due to the nature of the vulnerability it may be possible, in some cases, to trigger this vulnerability without a valid certificate or valid application-layer credentials (such as a valid username or password).
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
The vulnerable cryptographic library is used in the following Cisco products:
–
–
–
–
–
This vulnerability is also being tracked by CERT/CC as VU#754281.
Cisco has made free software available to address this vulnerability for affected customers. There are no workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-crypto.shtml.
Note
CSCsd92405Cisco IOS device may crash while processing malformed Secure Sockets Layer (SSL) packets. In order to trigger these vulnerabilities, a malicious client must send malformed packets during the SSL protocol exchange with the vulnerable device.
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
Cisco IOS is affected by the following vulnerabilities:
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. There are workarounds available to mitigate the effects of these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-SSL.shtml.
Note
A combined software table for Cisco IOS is available to aid customers in choosing a software releases that fixes all security vulnerabilities published as of May 22, 2007. This software table is available at the following link: http://www.cisco.com/warp/public/707/cisco-sa-20070522-cry-bundle.shtml
CSCek48162: TDM cross connects before last call disconnect and assertionsSymptom : Under heavy stress few tdm assertion failures are seen
Conditions
Workaround: There is no workaround
CSCek51075: Assertion failures at tdm_local_endpoints_connect CSCek61570 Trunk dn stuck in seize/seize state and does not recover.Symptom : Few assertions may be seen during bootup and for the first set of calls. This does not have any effect on the system.
Conditions
Workaround
CSCsb25337:Unnecessary tcp ports opened in default router config Cisco devices running IOS that support voice and are not configured for Session Initiated Protocol (SIP), are vulnerable to a crash. However, these devices are isolated to traffic destined to User Datagram Protocol (UDP) 5060. Devices which are properly configured for SIP processing are not vulnerable to this issue.Workaround
CSCsc72722: CBAC-firewall resets TCP idle timer upon receiving invalid TCP packetsSymptom : TCP connections that are opened through a Cisco IOS Firewall (CBAC) may not timeout.
Conditions
Workaround
CSCsd91454: One way voice traffic due to incorrect IPHC(UDP) Di0: CS 1 IPCRCSymptom : Voice traffic is dropped in one direction due to IPHC IPCRC error.
Conditions
Workaround
CSCsd92405: Router crashes on receipt of repeated SSL connection with malformed finished messageSymptom : A router crashes when receiving multiple malformed TLS and/or SSL3 finished messages. A valid user name and password are not required for the crash to occur.
Conditions
Workaround
CSCse58397: ISDN BRI Dialer Interface is always in up stateSymptom : ISDN B channels are in UP state
Conditions
Workaround
CSCsf28515: Crashes at mars_default_port_dsp_connectSymptom : Router crashes at mars_default_port_dsp_connect after call passes through the digital voice-port.
Workaround
CSCsf28711: 5850 reloads unexpectedly on making a single call CSCsf28840 crash due to configured peer type control vectorSymptom : Active eRSC reloads with traceback when first (PRI/SS7)call is made.
Conditions
Workaround
CSCsg16908: IOS FTP Server DeprecationCSCsg46546: Erroneous alerting during pickup with CSCek58324. Call focus is wrong after picking up a trunk dnSymptom : After an attempt to pick up an onhold trunk dn, the call display on the ephone which puts this DN to onhold is messed up. The call can not be picked up successfully by other phone and it becomes the focus one on the phone. The connected trunk dn can not be displayed and other incoming call can not be put on hold.
Conditions
Workaround
CSCsg47834: NACK is observed for Open Voice Channel commandSymptom : NACK message may be received from 5510 DSP in response to Open Voice Channel command sent by the IOS.
Conditions
Workaround
2) Make sure that the Trans coding and Voice Termination are on different DSP(s). This can be performed by configuring the maximum number of trans coding sessions to a value such that it would require a multiple of 240 DSP credits. Example 1:
In the following configuration each trans coding session (complexity=high) will require 40 DSP credits. In order to use a multiple of 240 credits, we need to set the maximum trans coding sessions to 6 (6 * 40 = 240) or any multiple of 6.dspfarm profile 1 trans codecodec g711ulawcodec g729r8associate application SCCPRouter(conf-t)#dspfarm profile 1 transcodeRouter(config-dspfarm-profile)#maximum sessions 6Example 2:
In the following configuration each transcoding session (complexity=medium) will require 30 DSP credits. In order to use a multiple of 240 credits, we need to set the maximum trans coding sessions to 8 (8 * 30 = 240) or any multiple of 8.dspfarm profile 2 trans codecodec g711ulawcodec g711alawcodec g729ar8codec g729abr8associate application SCCPRouter(conf-t)#dspfarm profile 2 transcodeRouter(config-dspfarm-profile)#maximum sessions 8Use "show voice dsp group all" command to verify DSP resource allocation.
Note
CSCsg59037 851/871 cannot upgrade rommon from IOSSymptom : Cisco 851 and 871 routers have no way to remotely upgrade the ROMMON firmware image.
Conditions
Workaround
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124tcr/tcf_r/cf_13ht.htm#wp1032550
CSCsg66096 Privacy ON: call onhold can be intercepted by directed pickup operationCSCsg66846 TNP phones opening new call when selecting shared transferring lineCSCsg68199 Trunk DN offhook is not propagated to a phone already in dial out modeSymptom : Two IP Phones A and B are registered with Cisco CallManager Express; these phones share two trunk DNs 1 & 2. If Phone-A goes offhook on DN-1 and Phone-B immediately goes offhook on DN-2. This condition should show the DN-2 button on Phone-A as busy which is not happening.
Conditions
Workaround
CSCsg68711 Incoming call in background does not ring after transfer commitSymptom Phone does not ring for the second incoming call after committing transfer at alert for the first call.
Conditions
Workaround
CSCsg70221 DTMF through the hairpin of a trunk DN does not workSymptom DTMF tones are being suppressed to prevent duplicate DTMF tones from being extended to an SCCP controlled VG224 port. This problem is a direct result of a fix implemented for correct CSCsf98754. The lack of DTMF prevents IVR devices from working correctly.
Conditions
Workaround
CSCsg70355 New default day light savings summer-time rules from Energy Policy Act of 2005 may cause Cisco IOS to generate timestamps that are off by one hourSymptom Starting in the calendar year 2007, daylight savings summer-time rules may cause Cisco IOS to generate timestamps (such as in syslog messages) that are off by one hour.
Conditions
Workaround
clock summer-time PDT
recurring 2 Sun Mar 2:00 1 Sun Nov 2:00 (This example is for the US/Pacific time zone.)
CSCsg75035 Async Interface not showing up in the IfIndex from a remote NMS machineSymptom The interface is indexed on the router but the snmpwalk/snmpget keywords do not seem to return the value when the sh snmp mib ifmib ifindex command is used.
Conditions
Workaround
Open Caveats - Cisco IOS Release 12.4(4)XC6
There are no known open caveats in this release
Resolved Caveats - Cisco IOS Release 12.4(4)XC5
CSCse56800Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS that can be exploited remotely to trigger a memory leak or to cause a reload of the Cisco IOS device.
Cisco has released free software updates that address these vulnerabilities. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities addressed in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself, if administrators do not require the Cisco IOS device to provide voice over IP services.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-sip.shtml.
CSCsf04754Multiple Cisco products contain either of two authentication vulnerabilities in the Simple Network Management Protocol version 3 (SNMPv3) feature. These vulnerabilities can be exploited when processing a malformed SNMPv3 message. These vulnerabilities could allow the disclosure of network information or may enable an attacker to perform configuration changes to vulnerable devices. The SNMP server is an optional service that is disabled by default. Only SNMPv3 is impacted by these vulnerabilities. Workarounds are available for mitigating the impact of the vulnerabilities described in this document.
The United States Computer Emergency Response Team (US-CERT) has assigned Vulnerability Note VU#878044 to these vulnerabilities.
Common Vulnerabilities and Exposures (CVE) identifier CVE-2008-0960 has been assigned to these vulnerabilities.
This advisory will be posted at: http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml
CSCek26492Symptom A router may crash if it receives a packet with a specific crafted IP option as detailed in Cisco Security Advisory: Crafted IP Option Vulnerability:
http://www.cisco.com/warp/public/707/cisco-sa-20070124-crafted-ip-option.shtml
Conditions
Workaround
http://www.cisco.com/warp/public/707/cisco-sa-20070124-crafted-ip-option.shtml
CSCsd40334 Processing a specially crafted IPv6 Type 0 Routing header can crash a device running Cisco IOS software. This vulnerability does not affect IPv6 Type 2 Routing header which is used in mobile IPv6. IPv6 is not enabled by default in Cisco IOS.Workaround
CSCsd58381 Processing a specially crafted IPv6 Type 0 Routing header can crash a device running Cisco IOS software. This vulnerability does not affect IPv6 Type 2 Routing header which is used in mobile IPv6. IPv6 is not enabled by default in Cisco IOS.Workaround
CSCek56688 Change after-hours login timer to 1 minSymptom The minimum after-hours login timer is 5 minutes. It is too long. Customer wants to be able to deactivate the login in 1 min.
Conditions
Workaround
CSCek58324 Call focus is wrong after picking up a trunk dnSymptom The call display does not work correctly when attempting to pick up an onhold trunk DN. The call cannot be picked up successfully by any other phone and it becomes the focus one on the single phone. The connected trunk DN cannot be displayed and other incoming calls cannot be put on hold.
Conditions
Workaround
CSCsc74157 Pings fails with using ISDN switch-type primary-qsigSymptom A ping failed when using ISDN switch-type QSIG.
Conditions
Workaround
CSCsd47303 Ephone template for ringing stateSymptom With Cisco CME 4.0, an ephone-template has states for alerting, seized, connected and idle states. The softkey template needs to be defined for the ringing state (of an incoming call).
Workaround
CSCsd48251 Held call on shared line shows From Unknown NumberSymptom After a certain amount of time, some calls that have been received on a shared line and placed on hold will show From Unknown Number.
Workaround
CSCse04642 CME GUI can not change ringtype for sidecar lines when log in as userSymptom When you log in as a user in CME GUI, you cannot change the ringtype for sidecar lines. You can change the lines on the ip phone but not the lines that belong to the sidecar. If a user is logged in the Cisco CME GUI (log in as user) and changes the ringtype via GUI for the sidecar line and then hits save, the action will save successfully but when you go to the line again the previous ringtype still shows.
Conditions
Workaround
CSCse05642 I/O memory corruption crash on AS5850Symptom A redzone violation causes a Cisco AS5850 to crash.
Conditions
Workaround
CSCse56800 SIP-3-BADPAIR register timer expiry causes slow memory leakSymptom SIP Processes causing slow memory leak when there are no active calls on a Cisco 3725. Specifically, the SIP register timer expiry messages are causing this behavior. Reloading the router does not resolve the issue.
Conditions
007042: Jun 17 15:18:45.024 EDT: %SIP-3-BADPAIR: Unexpected timer 23(SIP_TIMER_REMOVE_TRANSACTION) in state 27 (SIP_STATE_OPTIONS_WAIT) substate 0 (SUBSTATE_NONE)Workaround
CSCse68138 Handle fragmented packets in VOIP RTP LibSymptom Router may reload due to fragmented RTP packets. This is a platform independent problem.
Conditions
Workaround
CSCse71162 Change minimum ephone keepalive timer from 10 to 1 secondSymptom Request to reduce the minimum configurable keepalive timer from 10 to 1 second in CME for SCCP phones.
Workaround
CSCse82300: Getting Undefined Tone when we enter a invalid FACSymptom The CFA feature in the Cisco VG224 is enabled and we are dialing an invalid FAC code via callgen. We expect to get a reorder tone immediately but we are getting only the Undefined_tone.
Workaround
CSCse83674 FXS port cannot be recovered when offhook with howler tone at end of callSymptom Analog FXS port on a Cisco 2800/3800 ISR does not go back to idle if it has been offhook for more than a minute at the end of a call.
Conditions
Workaround
CSCse87446 Extension assigner defaults provision-tags to 0Symptom Extension assigner will chose wrong extension if the provision-tag input is zero.
Workaround
CSCsf02737 Memory Corruption Crash at chunk_free_callerSymptom A Cisco 3825 running Cisco IOS 12.4-9.T crashed. The decoded tracebacks is as follows:
abortcrashdumpchunk_free_callerfree_lite_internal__freefreeskinny_send_msg_internalskinny_server_processr4k_process_dispatchConditions
Workaround
CSCsf07990: CME Dynamic Hunt-Group Login failsSymptom : Ephone-1 has extension 88, which is also added as a monitor line on a 7914. The Ephone-2, which is connected to the 7914 is in DND state. Now when you try to login to a hunt-group on ephone-1, it fails because the ephone with the monitor lines is in DND state.
Aug 14 08:36:07: SkinnyHGJoinByDn: dn(88), join_code(80), join(1)Aug 14 08:36:07: Cannot join 88 to hunt group list with dnd on.Aug 14 08:36:07: ephone-1[13]:SkinnyHGJoinByPhone phone-[7] join 80 failed.Workaround
CSCsf21007: Ephone hunt-group does NOT present calls to monitored DNsSymptom : When an ephone hunt-group is configured with present-call idle-phone, the ephone hunt-group skips over certain members of the hunt group.
Conditions
Workaround
CSCsf21458: SRST Reuses sockets causing phones unregisterSymptom : Registered ephones in SRST mode may unregister and then re register
Conditions
Workaround
CSCsf98754: Inband DTMF should be squelched for calls from POTS to SkinnySymptom : The following scenario is seen:
PSTN === Analog or T1 CAS FXO === CME ------ VG224 ---- Phone or IVRThe analog ports on the Cisco VG224 are SCCP controlled by Cisco CME.
For a call between PSTN and a Cisco VG224 port (or an IP Phone), the DTMF detection is turned ON on the FXO port. Along with this, the DSP channel associated with the FXO port is programmed to pass through the DTMF tone in the RTP path instead of suppressing it.
The above manifests into a double DTMF digit scenario and is very well pronounced when the Cisco VG224 port is connected to an IVR system looking for digits. For the endpoints controlled by Cisco CME via SCCP, the DTMF relay happens through out of band SCCP messages. Since the original DTMF digit coming from PSTN is not suppressed, we see two digits reaching the IVR system - one from the SCCP message from Cisco CME to the Cisco VG224 port and the second one embedded in the RTP path.
Conditions
Phone----FXS=CME----- IP Phone or VG224Make a call from phone on the left to a CME controlled endpoint. Press a digit button on the left phone and hold it for a long time. The user on the CME controlled endpoint on the right can hear: digit beep, silence and continuous digit beep. If the squelching flag was set on the FXS DSP channel, the user would have heard digit beep, silence and back to voice path.
Workaround
CSCsf99737: SRST Locale fail over soft keys still display EnglishSymptom : SRST fails over from Cisco Unified CallManager still displays English languages in softkey regardless of the languages that is configured in Cisco Unified CallManager.
Workaround
Resolved Caveats - Cisco IOS Release 12.4(4)XC4
CSCsc74783Symptom : Intrusion Prevention System (IPS) signatures that require inspection of TCP flows below port 550 may not be triggered on a Cisco IOS IPS device.
Conditions
Workaround
Further Information: On a Cisco IOS router with IPS (Intrusion Prevention System) enabled, all TCP flows should be subject to TCP stateful inspection until the TCP 3-way handshake is complete. This does not work for TCP sessions with a destination port that is less than 550, if it does not match a predefined signature on the router.
CSCek47681: Backplane TDM loss and assertion failuresSymptom : Under heavy stress, time division backplane timeslots may be lost over time.
Conditions
Workaround
CSCse06975: Traceback at pak_copy_contiguous_to_contiguous when testing multicastSymptom : The VoIP LMR multicast does not function properly with E&M on the NM-HD-2V network module.
Workaround
CSCse16973: show controller call-counters displays negative valuesSymptom : The show controller t1 call-counters command displays negative values for the DSO Active counter.
Conditions
Workaround
CSCse18940: Memory depletes when VoAAL2 traffic is passed.Workaround
CSCse27845: One way voice after ringing pickup of transferred at-alert callSymptom : The called party may not be able to hear the caller.
Conditions
Workaround
CSCse47728: Path confirmation failures are observed with VoATMSymptom : Path confirmation failures seen with Voice over ATM traffic.
Conditions
Workaround
CSCse50167: Speed dial line buttons disappear from CME phones after the router reloads.Conditions
Workaround
CSCse56129: Cisco VG224 erroneously triggers hookflash during CME call pickup interactionSymptom : On the Cisco VG224, a voice port registered to CallManager Express running. 12.4(4)XC may falsely detect a hookflash in the call pickup case.
Conditions
Workaround
CSCse56660: Inbound calls to fxo port fail (no audio) when caller-id enabledSymptom : Inbound calls to Foreign Exchange Office (FXO) ports on Cisco IOS VoIP gateways connect, but audio is not present.
Conditions
Jun 20 01:41:15.855: mbrd_e1t1_vic_connect: setup failedJun 20 01:41:15.855: flex_dsprm_tdm_xconn: voice-port(0/0/1), dsp_channel(/0/2/0)Workaround
CSCse59347: CME/SRST IP phone unregister does not down the virtual pots peersSymptom : Using SRST 4.0 with Cisco Unified CallManager Express, calls may fail with a "user busy" signal.
Conditions
Workaround
CSCse69235: 871 XC - S&K interface forwarding results in hung interfaceSymptom : VLAN interfaces on Cisco 870 series routers may cease to function under heavy loads.
Conditions
Workaround
CSCse70333: CFwdAll erroneously reconfigured after disabling night serviceSymptom : CFwdAll incorrectly appears after night service is disabled.
Conditions
Workaround
CSCsc42589: Reset msg to TAPI client when phone reset restart by CME.CSCsc72502: The TAPI client may not show the call lines in ringing or connected state for the controlled ephone.Conditions
Workaround
CSCse06975: Traceback at pak_copy_contiguous_to_contiguous when testing multicastSymptom : VoIP LMR multicast capability does not work on network module NM-HD-2V with E&M.
Workaround
CSCse15025:Intermittent analog/cas voice port lockup or robotic voiceSymptom : An analog or digital CAS port enters a state in which inbound or outbound calls, or both, may no longer function through the port.
Conditions
When this problem occurs, it impacts multiple ports that share the same signaling DSP. The output of the show voice dsp signaling EXEC command shows which DSP is used by a port for signaling. The symptom may occur more often for ports that use DSP 1 on the PVDM2 module for signaling.
Because this issue impacts the signaling channels, it has been seen that calls either will not connect at all through impacted ports or in some cases when multiple simultaneous calls are present on adjacent voice ports/timeslots, the call may connect momentarily before being disconnected.
If a problem occurs only on a single voice port, there is another problem, not this caveat (CSCse15025). PRI/BRI calls are not affected because PRI/BRI does not utilize the DSP for signaling purposes.
When the symptom occurs with either a VIC2-xFXO or EVM DID/FXS module, enter the terminal monitor command followed by the test voice port port- number si-reg-read 39 1 command for one of the affected ports. The output typically should be a single octet value for register 39. When the symptom occurs, information for Registers 40, 41, and 42 is presented and some of the registers show double- octet information. See the example output (2) below.
When the symptom occurs with FXS or analog E&M modules, enter the terminal monitor command followed by the test voice port port- number codec-debug 10 1 command for one of the affected ports. The output typically should be a single octet value for each register. See the example output (4) below.
Workaround
CSCse47338: H245-signal dtmf relay requires signal update to end digitsSymptom : A third party device sends dtmf-relay using a h.245-signal, which includes duration of the digit. The CME gateway sends the digit to CUE, but the digit is not considered done unless another digit is received. This results in %SIP-3-DIGITEND: Missing digit end event messages sages.
Workaround
CSCse60250: Support Localization for the Cisco IP Phone 7906 on Cisco Unified CME.CSCse66125: Call-waiting ring in ephone-dn-template fails to hold configurationSymptom : When trying to configure call-waiting ring on an ephone-dn x, the configuration is accepted, but cannot be seen in the configuration.
CSCse75014: CME/SRST not able to make calls to Unity VMSymptom : With CME/SRST, you are able to make calls to Unity VM.VM port DN is not coming to "Idle" state after restarting Unity.
CSCeh69448: SCCP CME need to clean up tftp binding.CSCek43094: Add TNP compatible Network locale tags to cnf file.CSCsc82351:Device ID for the Goped phone is incorrectSymptom : The device ID for the Goped phone is incorrect.
Workaround
CSCsc85575: Subsequent call following a conf call by TNP Ph results in 1-way audioSymptom : No audio is received from a Cisco 7931 IP phone.
Conditions
Workaround
CSCsc99639: CME unable to make call on 2nd line using line button when 1 line busySymptom : The CME is unable to make call on a second line using line button when line 1is busy
Conditions
Workaround
CSCsd13066: No caller ID displayed for a forwarded call on IP Phone running 7.xSymptom : When release 7.x phoneload is used on a forwarding phone, the forward-to party does not see the forwarded party number on the display.
Workaround
CSCsd73435: The button-layout help CLI is unclear.CSCsd86966: Not able to create CTL file for 7906 phone.CSCsd90419: Cisco IP Phone 7941/61/11 does not support localization in SRSTSymptom : The Cisco 7941/61/11 phones display change to English in SRST mode.
Conditions
Workaround
CSCse05698: CME 12 build in locales support on 7941/61/11.CSCse08865: Enhance CME locale installer to support 7941/61/11/70/71CSCse16210: 7920 locale support enhancement.CSCse29308: CCME extension assigner extraCSCse35293: CCME extension assigner need to update CNF file.CSCse36127: If a Phone is viewed on the GUI the extensions are marked as normal ring even if they are monitored lines. So every time a change is made all lines have to be corrected via the CLI.Workaround
CSCse39419: Some phones XML file does not have correct m_vendorSymptom : Cannot configure the phone through the vendorConfig in the XML file
Further Problem Description:The VendorConfig is missing in the XML file.
Workaround
CSCse41295: MOH debugs flood the console when MOH file is unconfiguredCSCse56023:CME extension assigner clean upCSCse62649: Change CME GUI logo to Cisco Unified CallManager ExpressCSCse65819: Reset needed after extension assignment of 7914 attached phoneResolved Caveats - Cisco IOS Release 12.4(4)XC3
CSCek37177: The Cisco IOS Transmission Control Protocol (TCP) listener in certain versions of Cisco IOS software is vulnerable to a remotely-exploitable memory leak that may lead to a denial of service condition.Symptom This vulnerability only applies to traffic destined to the Cisco IOS device. Traffic transiting the Cisco IOS device will not trigger this vulnerability.
Workaround
CSCek38136: Hissing noise heard before ringback tone begins.Symptom : When you deploy VoIP using PVDM2 / 5510 DSP modules, a hissing sound may be heard before the ringback tone starts on the calling side.
Conditions
Workaround
CSCin96828:On TGW, calls may be reject with the "Duplicate Setup: error message.Symptom : Alternate call retry times out because of no response from the terminating gateway.
Conditions
Workaround
CSCsd13074: Hold-alert shared-and-idle enhancement is needed.CSCse44965:Cisco Unity does not register to CME using the no auto-reg-ephone command.Cisco Unity does not register to CME while using the following command: no auto-reg-ephone
Symptom : Cisco Unity does not register with CME 4.0
Conditions
Workaround
CSCse37580: Router crashes using the @ppc_process_dispatch command.Symptom : A Cisco router crashes while making a call using the command test voice port detector ring-trip.
Workaround
CSCse41306: The sound quality of the Music on Hold feed is poor.Workaround
CSCse23652: 7912 registered to CME 3.3 running Cisco IOS 12.4(3b) is not able to initiate a call when controlled by the TSP client running TSPv.Workaround
CSCse23304: When selecting "Extensions" in the Configuration drop-down menu in the Call Manager Express GUI for CME 4.0, extension type "Park-Slot" is erroneously listed as being of the type "MWI" and extensions of the type "Paging" are erroneously listed as being of the type "MOH." All other extension types are listed correctly.Conditions
Workaround
CSCse20435: Memory runs out and fails the system after extended use.Conditions
Workaround
CSCsd99389: The system reloads when call forwarding is invoked.Conditions
Workaround
CSCsd57413: Unhide the 7906G-related CLI.CSCsd46996: A memory leak occurs while upgrading CAPFWorkaround
CSCek45370: A dialer interface using VWIC-MFT-2T1/E1 may get an ISDN carrier timeout if the terminating gateway does not have dailer-group configured.Workaround
CSCek40644: One channel of a DN may get stuck and incoming and outgoing calls cannot be made.Workaround
CSCsd19564: Button optimization is required for park-recall, pickup-on-hold and pickup-at-alert functions.CSCsd57096: Configuration is prohibited for certain interfaces through the interface range command.Conditions
Workaround
Another option is to remove the subinterfaces from the last interface in the range prior to attempting the configuration through the range command.
CSCse19112: Caller name does not display on all IP phones that have shared lines or overlay lines.Workaround
CSCse35506: Secondary dialtone is not heard after FAC standard is configured on CME 4.0Workaround
CSCse34614: Caller name does not appear on IP phone display.Conditions
Workaround
CSCeg90328: The router crashes when the user tries to convert an sccp phone to an SIP phone.CSCek34261: A Cisco Integrated SONET/SDH router (ISR) may crash during the "gt96k_mbrd_bri_set_bandwidth" function.Conditions
Workaround
CSCse1092: CME is sending "481Call Leg/Transaction Does Not Exist" in response to NOTIFY for the following scenario.Workaround
CSCsd32002: BRI for layer 2 is down for basic-qsig.Workaround
Resolved Caveats - Cisco IOS Release 12.4(4)XC2
CSCsd54232: Qsig Call Forward shows AFW memories leakSymptom : Certain QSIG Call Forward Busy and Call Transfer operations might result in memory leakage.
Workaround
CSCsd78806: Can not add ATA through GUISymptom : While trying to add an ATA through the GUI for Cisco Unified CallManager Express, e an error is received on the page when you try to save the ATA configuration information and its not possible to add the ATA.
Conditions
Workaround
CSCsd35389: Deleted ephone-dn's never unregister with Gatekeeper unless GW reloadedSymptom : Usually CME is automatically registered with a gatekeeper all for the ephone-dn, but when a ephone-dn is deleted it never unregisters with the gatekeeper.
Conditions
Workaround
CSCsd08105: Cisco IP Phone 7960 speaker phone light does not turn off after pressing holdSymptom : When a call is put on hold on a Cisco IP Phone 7960 and the call is on a speaker phone, resuming on another phone does not clear the speakerphone light (release 7.x phoneload).
Workaround
CSCsd71081: CME 4 Crashing & Tracebacks when DND button pressed on 7970 with 7914Symptom : CME 4 Reloads after DND button is pressed.
Conditions
Workaround
CSCsc11833: Intermittent analog or digital CAS port lock up - in/out calls failSymptom : An analog or digital CAS port gets into a state where inbound and/or outbound calls through the port may no longer work.
Conditions
It can take some time for the symptom to occur, but when it does occur, it impacts multiple ports which share the same signaling DSP. To see which DSP a port is using for signaling, check the output of the exec command show voice dsp signaling. It has been observed to occur more often with those ports which use DSP 1 on the PVDM2 module for signaling.
If a problem is noticed only on a single voice port, it would not be this issue. Because PRI/BRI does not utilize the DSP for signaling purposes, it is not impacted by this issue.
When the problem occurs and this is either on a VIC2-xFXO or EVM DID/FXS modules, run test voice port port # si-reg-read 39 1 on one of the impacted ports. You need to run 'terminal monitor' first to see the output. The output typically should be a single octet value for register 39. When the problem happens, information for Registers 40, 41 and 42 is presented as well and some of the registers show double-octet information.
If using FXS or analog E&M modules, use test voice port port # codec-debug 10 1 and compare the output. Again, the normal output will be single octet information for each register. This test only needs to be run on one of the voice ports in this state to confirm if this is the issue being seen.
Workaround
Additional Information: If the problem being seen has been confirmed to be this issue, the software changes associated with this report will mitigate the problem in the majority of cases. It may still be possible to see the problem in some cases and if this is experienced contact Cisco TAC for assistance.
CSCsd71944: No audio on consult transfer to PSTN with live MOH for local usersSymptom : This was a bug in the multicast MoH for local SCCP phones features. Multicast MoH was not stopped for the transferee (if it was an SCCP phone) when the transfer was committed.
To check whether you are experiencing this bug, look for debug output similar to the following after the transfer is committed:
*Mar 20 23:37:04.795: SkinnyUpdateDnState by EFXS_OPEN_VOICE_PATHfor DN 1 chan 1 to state CALL_START*Mar 20 23:37:04.795: ephone-1[3]:UpdateCallState DN 1 chan 1 state 12 calleddn-1 chan 1*Mar 20 23:37:04.795: ephone-1[3]:Binding ephone-1 to DN 1 chan 1 s2s:0*Mar 20 23:37:04.795: SKINNY_CALL_START for DN 1 has call_restart set*Mar 20 23:37:04.795: SKINNY_CALL_START for DN 1 change to CONNECTED*Mar 20 23:37:04.795: ephone-1[3]:Call Start ignored - mediaActive setConditions
Workaround
CSCsd76246: Intercom not muting 7960sSymptom : Cisco IP Phone 7960s are not becoming muting when receiving intercom calls.
Conditions
Workaround
CSCsd85687: Secondary number is not considered while parking to reserved-for slotWorkaround
CSCsc46528: Sub entry polling: no of rows returned inconsistently from speedbird mibSymptom : ccmeEphoneActTable from CISCO-CCME-MIB provides inconsistent Vresults.
Conditions
Workaround
CSCsd91169: Hlog from ringing state allows last agent to logout of b-acdWorkaround
CSCsd27683: Cisco IOS gateway does not make H.245 TCP connection after it gets the addressSymptom : A Cisco IOS H.323 gateway (GW) that is running Cisco IOS Release 12.4 (7) is not initiating the H.245 TCP connection.
Conditions
Workaround
–
–
Further Problem Description: An H.323 GW initiates the FS call to another GW or CCM. In response to this, CCM or terminating GW sends slow start Alert with h245 Addr and PI=1,2,8. The phone at the originating GW expects ringing tone from the terminating GW. It is not ringing now, but the phone at the terminating side is ringing. Now if user did not pick the call (i.e. will not send Connect message), then the call will drop. Caller will never come to know what happened at the other end (there is no ringing tone). Without PI in Alert, it works well.
CSCsc94215: Fix indexing in various tables in CISCO-SRST-MIB & related componentsSymptom : The index may not come out correctly if doing a get next of an item in a table.
Conditions
Workaround
CSCek38822: no-reg doesnt work on SRSTWorkaround
CSCek40136: the no-reg on ephone-dn should not apply to dialplan-patternSymptom : The E164 number cannot be registered if the matched extension in the dialplan-pattern has no-reg configured. The problem started to occur in 12.4(5.11).
Conditions
Workaround
CSCsd96951: Call Pickup fails for 2nd channel on dual line ephone dn if 1st is busySymptom : Call cannot be picked up on 2nd channel of a dual line ephone-dn.
Conditions
Workaround
CSCsd9109: Cisco IP Phone 7936 registration blocked by CLI: no auto-reg-ephoneSymptom : Cisco IP Phone 7936 will not register with CME:
%IPPHONE-6-REG_ALARM:Conditions
Open Caveats - Cisco IOS Release 12.4(4)XC2
There are no known open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(4)XC1
CSCed28266: Software forced crash when adding SIP call headersSymptom : A Cisco gateway may unexpectedly reload because of a software-forced crash when it builds a SIP ACK(nowledgement) or BYE message.
Conditions
Workaround
CSCej73716: Dot1x configurations on L2 and L3 ports should be mutually exclusiveCSCek25126: FXO trunk dn and monitoring enhancement for customerCSCek26750: ogw(h323,slow start)--ipip1(sip)--ipip2(sip)--tgw not workingSymptom : Voice call fails in the following scenario ogw (h323, slow start) -- ipipgw1(sip)---(sip)ipipgw2--tgw(sip)
Conditions
Workaround
CSCek33537: Codec negotiation failed when SIP EP had mix-codec configuredSymptom : SIP EP with different codecs may not able to establish a stable call among them.
Conditions
Workaround
Further Problem Description: A basic call may be established among the SIP EP. But it was not proper setup with correct codec selection. So the subsequent action on the SIP EP, like transfer/forward/conference, etc. may fail.
CSCsb23025: Locale installer does not include CME spec phrasesSymptom : User locale files not available on CME with 7911 phone.
Workaround
CSCsb72082: Memory corruption while ending a callSymptom : A Cisco 3845 acting as a SIP gateway crashes when a call is placed from SIP phone to PBX. PBX is an Avaya s8700.
Conditions
Workaround
CSCsc60509: Memory leak in CCSIP_UDP_SOCKETSymptom : Low memory condition caused by a leak in CCSIP_SPI_UDP process
Conditions
Workaround
CSCsd16947: Spurious memory access traceback seen from 7914 button smashingSymptom : Spurious memory access may be observed on a Cisco Unified CallManager Express under certain conditions when multiple DN buttons configured on an IP phone are pressed repeatedly and randomly.
Conditions
Workaround
CSCsd36869: CME does not put transferred number digits in line focusSymptom : Status line changes to show from xxxx instead of reading transfer xxxx.
Conditions
Workaround
CSCsd36943: CME sends incorrect language code to phoneSymptom : Phone in services mode, displays english text when the user-locale is set to Denmark.
Conditions
telephony-serviceuser-locale DAWorkaround
Further Problem Description: If the user-locale of the phone is set to Denmark, the phone sends in "dk" as the accept language in the HTTP headers for IP Phone services. The CCM sends in "da" correctly.
CSCsd39342: Call hung when 487 is not received after CancelSymptom : Call legs are hung and memory leak in the stack
Conditions
Workaround
CSCsd46569: CME delayed call-waiting ring/beepSymptom : Call-waiting ring or beep does not give initial tone and is delayed 10 seconds.
Conditions
Workaround
CSCsd47013: 2nd call callerid not correct with shared linesSymptom : No call information for the second call is displayed on the shared DN for other phones after the first call is terminated.
Conditions
Workaround
CSCsd54414: Ringing persists after 1st of 2 shared line calls is answered on anotherSymptom : The ephone may continue ringing.
Conditions
Workaround
CSCsd57802: SIP CME: voice register CLI is not available for c2801 adventerpriceSymptom : voice register global command is not accepted.
Conditions
Workaround
CSCsd60182: Wrong DN may be chosen for SetCallState on a shared lineSymptom : For the shared DN, the wrong DN may be chosen for the sccp msg of SetCallState.
Conditions
Workaround
CSCsd67460: 7970/71 has erroneous acct, login and flash softkeysSymptom : On 7970s and 7971s running on CME 4.0, the "Acct", "Login", and "Flash" softkeys are wrongly labeled as "No Park", "Service is", "CallPark".
Workaround
CSCek26630: Real call_id to be provided in COT REQ to TSPSymptom : COT fails for outgoing calls.
Conditions
Workaround
Further Problem Description: Changes made to the platform resulted in this requirement. Unless the real call-id is passed, TSP will not be able to complete the COT and call for outgoing calls. This is because TSP must allocate and use the same DSP for COT and the call for outgoing calls. See also CSCek34759.
Open Caveats - Cisco IOS Release 12.4(4)XC1
There are no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(4)XC
CSCei33312: Fast dial on ephone-dn does not work when ephone trunked to fxo portSymptom : Outbound calls from ip phone to PSTN using personal speed dial fails when the ip phone is configured to be trunked to an fxo port. It appears that digits are sent before the fxo port is seized completely. Inbound calls from PSTN through fxo port onto ip phone work fine.
Conditions
Workaround
CSCek13657: %SYS-2-NULLCHUNK:Traceback seen at bootup with no startupconfigSymptom : Traceback Conditions: Bootup
Workaround
CSCek25124: Auto-line x answer-incoming enhancement for customerCSCek25882: Incorrect KS_NO_HLOG4 mask for seized call stateCSCek27807: feature_Vsa not shown in syslog modeSymptom : The accounting through syslog using gw-accounting syslog does not generate feature-vsa in the output. They are seen on console but not on syslog server.
Conditions
Workaround
Further Problem Description: The problem is a Cisco IOS software bug. The generated log did not use the errmsg. Only error messages are sent to syslog.
CSCei77396: enable ip routing causes error msg %FIB-2-IF_NUMBER_ILLEGAL: AttemptSymptom : FIB-2-IF_NUMBER_ILLEGAL: Attempt to create CEF interface for Loopback0 with illegal if_number: 0
Conditions
Workaround
CSCek31887: QSIG rose_decode_facilityIE problemCSCsc42926: One way Video in Skinny-H323 ConferencingSymptom : Conferencing with CME-Video capable phones results in one-way video, conference initiator's local video screen disappears while remote video screen is still active. The conference participant's local video screen is active while the remote video screen is frozen.
Workaround
CSCsc45472: Cleanup of dnagling ccb when back to IDLECSCsc46027: 1-way voice for call xfer with xfer party in diff gwCSCsc48792: spurious access - traceback seen at sstrncpy --> Active_Facility-->AFWCSCsc48885: spurious access and tracebacks at ConsultRespCompleteCSCsc60999: No Ringback after call is forwarded with CFNASymptom : Call originator no longer hear ringback tone after call forward no answer. B has Call Forward No Answer (CFNA) configured. All ports under 12.4(1), 12.4(2), 12.4(3) or 12.4(4) CME control. 1) A calls B. A gets ringback tone 2) B does not answer. After CFNA timeout, call is forward to C 3) C gets ringing tone. But A on longer gets ringback tone.
Conditions
Workaround
CSCsc84018:bulk-speed-dial config does not appear under show telephony-serviceSymptom : The bulk-speed-dial configuration command does not appear under telephony-service. Even though there is show telephony-service bulk-speed-dial command, it would be good to show the bulk-speed-dial in show telephony-service or at least in show telephony-service all.
Workaround
Conditions
Workaround
CSCsc94466: Traceback at stcapp_handle_call_disconnect_event (dangling ccb present)CSCsd10942: Stuck button light on 7914 after repeated pressingCSCsd11395: Pressing in-use shared dn button on 7970 shows wrong lineSymptom : A 7970 phone shares a line with another device. If the other device causes that line to become in-use, and the 7970 user attempts to select that in-use line, the 7970 will open a new call on other lines instead of doing nothing.
Conditions
Workaround
CSCsd16892: Cisco VG224 power denial click click heard after call park from analog phoneSymptom : Continuos power denial click click is heard under the following condition - analog phone A uner CME control with overlay configured - A calls B and connected - A either blind transfer B to C or park B's call
Conditions
Workaround
CSCsd19496: Missing TsOnHook for ch 2 of hairpin xfer DN has monitor-port-DN LED redCSCsd35474: Router crashed during the capf upgradeSymptom : Router crashed when performing the CAPF upgrade
Workaround
CSCsc35814: Memory leak with QSIG-rose running Qsig call transfer regression post synCSCsd12178: B-ACD: sh ephone-hunt 1 statistics start issueSymptom : CME with B-ACD: When the show ephone-hunt 1 statistics start fri 8 to fri 17 command is entered, the statistics show from Friday 00:00 to 10:00 AM. The display should show from Friday 8:00 AM to 17:00 PM.
Workaround
CSCsd12361: 7960/70/61- Ringer is not stopped after first incoming call is answeredSymptom : The IP phone may continue ringing after answering an incoming call.
Conditions
Workaround
CSCej31527: Qsig BRI ISDN basic call failureSymptom : Basic Qsig calls via BRI interface fail after new code is collapsed.
Conditions
Workaround
Open Caveats - Cisco IOS Release 12.4(4)XC
CSCeh35496: sh isdn active does not show voice calls for IP Communications Voice/Fax Network Module (back-to-back)Symptom : The isdn active command is not able to display the active/voice call.
Workaround
CSCej30662: AudioStream go through CME if Ori EP park the call to 3rd local EPSymptom : A video call has been established between 2 ip phones. If the originating endpoint parks, then pickup the call, the video is dropped and the call becomes an audio only call.
Workaround
CSCek25773: Router crashed when dialer interface come upSymptom : The Cisco 2811 router crashes when a DDR call is established with certain T1/E1 interfaces.
Conditions
Workaround
CSCek26954: Qsig: Calling name not shown in called phone at ALERT and CONNECTEDSymptom : When a remote Ephone call is made to an Ephone in PBX CME, the caller name is not displayed on the PBX phone during the ALERT or CONNECTED states.
Workaround
CSCek28264: Wrong caller id is wrong when transferring a call out of a trunk dnSymptom : Caller id update is not supported when a call on a trunk dn is hairpin transferred out to another destination. The destination party continues to see the transferrer's party rather then the connected party.
Workaround
CSCsc28501: Live only MoH disconnected not fallback to tone-on-holdSymptom : If only live MoH is configured in CME and the music source is disconnected, user hears dead air.
Conditions
Workaround
CSCsb35485:GUI interface cannot add phone if no auto-reg-ephoneSymptom : CME GUI says "no new phone to add" when trying to add a new phone.
Conditions
Workaround
CSCsb67970: CME GUI script errorSymptom : The following message is issued when a new phone is added:
A script on this page is causing IE to run slowly. If it continues to run, your computer may become unresponsive. Do you want to continue?Conditions
Workaround
CSCsc01531: Router crash when placing more calls than available queue lengthSymptom : The router may crash when trying to place more calls in the BACD queue than the configured queue length.
Conditions
Workaround
CSCsc04294: BACD AA script crashes on a call after no moh and configuring moh againSymptom : BACD TCL Script may crash and calls drop.
Conditions
Workaround
CSCsc28450: show ephone summary always says MoH Live feed presentSymptom : The show moh summary command does not update the MoH live feed status. It always says Live MoH Feed present even when the source is disconnected.
Workaround
CSCsc56843: CCME display not shown in internationalized language when transferredSymptom : Ephone 3 calls Ephone 2 and is connected. When you press the transfer button on Ephone 3, the word "transfer" shows in Japanese. When you press the first digit "1" the display is changed to "transfer 1" in English.
Conditions
Workaround
CSCsc74157: Pings fail with using ISDN switch-type primary-qsigSymptom : Ping fails intermittently with the isdn primary-qsig switchtype but it works fine with the isdn primary-5ess switchtype.
Conditions
Workaround
CSCsc85957: Video is not restored on Hold/Resume with G.729 over H323Symptom : Video is not restored after resume when the codec is G.729 and the other leg is H323 and Music on Hold is configured.
Workaround
CSCsd08105:7960 speaker phone light does not turn off after pressing holdSymptom : When a call is put on hold on a 7960 Cisco IP phone and the call was on speaker phone, resuming on another phone does not clear the speakerphone light (release 7.x phoneload).
Workaround
CSCsd11990: Dialer does not bind the call in unidirectional ping with specific ConfigSymptom : Two routers are connected back-to-back; pings work in one direction but fail in the other direction. The SETUP is received, but the call does not bind and instead gives a dialer error message.
Conditions
Workaround
CSCsd13066: No caller ID displayed for a forwarded call on IP Phone running 7.xSymptom : When release 7.x phoneload is used on a forwarding phone, the forward-to party does not see the forwarded party number on the display.
Workaround
CSCsd13098: Port monitor ceases to work correctly after re-config of ds0/voice-portSymptom : When removing and reconfiguring ds0-group that is monitored by a trunk dn port monitor command, the existing trunk monitor logic does not recover the new configuration automatically.
Workaround
CSCsd19564: Button optimization for park-recall, pickup-on-hold & pickup-at-alertSymptom : When a trunk dn call that is transferred out of the phone arrives back on a phone that has the shared trunk dn instance, the call is optimized back to that shared trunk dn instance, freeing the transfer-to line button. This operation is done only when the original trunk dn call is transferred. Further work is needed for other operation such as parking the trunk dn call or picking up the call. While the park and pickup operation on a trunk dn call is legal, button optimization is not possible. When the call arrives back on a phone that has the shared trunk dn instance, this call is not optimized back to that trunk dn instance.
Workaround
CSCsd25454: Onhook redial of an fxo trunked dn/line may occasionally fail.Symptom : Redial while onhook may not always work for a call that needs to be placed over an fxo trunk dn.
Workaround
Caveat Updates and Special Notices
The following information has changed since the initial release of this document:
CSCsd28570Symptom : A vulnerability exists within the Cisco IOS Authentication, Authorization, and Accounting (AAA) command authorization feature, where command authorization checks are not performed on commands executed from the Tool Command Language (TCL) exec shell. This may allow authenticated users to bypass command authorization checks in some configurations resulting in unauthorized privilege escalation.
Conditions
Workaround
Further Problem Description: This particular vulnerability only affected Cisco IOS versions 12.3(4)T trains and onwards. (12.3 Mainline is not affected) Please refer to the Advisories "Software Versions and Fixes" table for the first fixed release of Cisco IOS software.
Additional References
Use these release notes with the documents listed in the following sections:
Release-Specific Documents
The following documents are specific to Release 12.4 and apply to Cisco IOS Release 12.4(11)XJ. They are located on Cisco.com:
•
•
Note
Platform-Specific Documents
Hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco 3700 series routers are available on Cisco.com and the Documentation CD at the following location:
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/3700/index.htm
Cisco Feature Navigator
Cisco Feature Navigator is a web-based tool that enables you to quickly determine which Cisco IOS software images support a particular set of features and which features are supported in a particular Cisco IOS image. Cisco Feature Navigator is available 24 hours a day, 7 days a week.
To access Cisco Feature Navigator, you must have an account on Cisco.com. If you have forgotten or lost your account information, e-mail the Contact Database Administration group at cdbadmin@cisco.com. If you do not have an account on Cisco.com, go to http://www.cisco.com/register and follow the directions to set up an account.
To use Cisco Feature Navigator, you must have a JavaScript-enabled web browser such as Netscape 3.0 or later, or Internet Explorer 4.0 or later. Internet Explorer 4.0 always has JavaScript enabled. To enable JavaScript for Netscape 3.x or Netscape 4.x, follow the instructions provided with the web browser. For JavaScript support and enabling instructions for other browsers, check with the browser vendor.
Cisco Feature Navigator is updated when major Cisco IOS software releases and technology releases occur. You can access Feature Navigator at the following URL:
Cisco IOS Software Documentation Set
The Cisco IOS software documentation set consists of the Cisco IOS configuration guides, Cisco IOS command references, and several other supporting documents that are shipped with your order in electronic form on the Documentation CD-ROM—unless you specifically ordered printed versions.
Documentation Modules
Each module in the Cisco IOS documentation set consists of one or more configuration guides and one or more corresponding command references. Chapters in a configuration guide describe protocols, configuration tasks, and Cisco IOS software functionality, and contain comprehensive configuration examples. Chapters in a command reference provide complete command syntax information. Use each configuration guide with its corresponding command reference.
Release 12.4 Documentation Set
Table 4 describes the contents of the Cisco IOS Release 12.4 software documentation set, which is available in both electronic and printed form.
Note
Note
Obtaining Documentation, Obtaining Support, and Service Guidelines
For information on obtaining documentation, obtaining support, providing documentation feed-back, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Open Source License Acknowledgements
The following notices pertain to this software license.
OpenSSL/Open SSL Project
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
License Issues
The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org.
OpenSSL License:
Copyright © 1998-2007 The OpenSSL Project. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
4.
5.
6.
"This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)".
THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT "AS IS"' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com).
Original SSLeay License:
Copyright © 1995-1998 Eric Young (eay@cryptsoft.com). All rights reserved.
This package is an SSL implementation written by Eric Young (eay@cryptsoft.com).
The implementation was written so as to conform with Netscapes SSL.
This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft.com).
Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
"This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)".
The word `cryptographic' can be left out if the routines from the library being used are not cryptography-related.
4.
THIS SOFTWARE IS PROVIDED BY ERIC YOUNG "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public License].
Use this document in conjunction with the documents listed in the "Additional References" section.
CCVP, the Cisco logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, LightStream, Linksys, MeetingPlace, MGX, Networking Academy, Network Registrar, Packet, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0705R)
© 2007, Cisco Systems, Inc. All rights reserved.
FeedbackContact Cisco
- Open a Support Case
- (Requires a Cisco Service Contract)