Troubleshooting User and Administrator Access in Cisco Unity Connection 10.x

See the following sections for information on problems that can occur when users and administrators access Cisco Unity Connection:

Unity Connection Not Responding to Key Presses

When Cisco Unity Connection is integrated by SCCP to Cisco Unified Communications Manager, Unity Connection may not respond to key presses.

In certain situations, DTMF digits are not recognized when processed through VoIP dial-peer gateways. To avoid this problem, certain gateways must be configured to enable DTMF relay. The DTMF relay feature is available in Cisco IOS software version 12.0(5) and later.

Cisco IOS software-based gateways that use H.245 out-of-band signaling must be configured to enable DTMF relay.

The Catalyst 6000 T1/PRI and FXS gateways enable DTMF relay by default and do not need additional configuration to enable this feature.

To Enable DTMF Relay

Step 1blank.gif On a VoIP dial-peer servicing Unity Connection, use the following command:

dtmf-relay h245-alphanumeric

Step 2blank.gif Create a destination pattern that matches the Cisco Unified CM voicemail port numbers. For example, if the system has voicemail ports 1001 through 1016, enter the dial-peer destination pattern 10xx.

Step 3blank.gif Repeat Step 1 and Step 2 for all remaining VoIP dial-peers servicing Unity Connection.

 

Users Do Not Hear Sign-in Prompt When Calling Unity Connection

When a user calls Unity Connection directly and unexpectedly hears the Opening Greeting or another prompt rather than the sign-in prompt, the problem can be caused by either of the following:

  • The call matched a direct call routing rule other than the Attempt Sign-In rule, and the rule directed the call to a destination other than the Attempt Sign-In conversation.
  • The calling extension is not found in the search scope set by the call routing rule that sent the call to the Attempt Sign-In conversation.

Unity Connection uses the search scope of the call when it reaches the Attempt Sign-In conversation to identify which user is attempting to sign in. If the user extension is in a partition that is not a member of the search space that is assigned as the search scope of the call by the routing rule, Unity Connection routes the call to the Opening Greeting.

To resolve this problem, in Cisco Unity Connection Administration, check the direct call routing rules to determine which rule is processing the call and to check the search scope that is set by the rule. You can also enable the Arbiter micro trace (levels 14, 15, and 16 call routing), the RoutingRules micro trace (level 11 rules creation/deletion/evaluation) and the CDE micro trace (level 4 search space). (For detailed instructions on turning on traces and collecting logs, see the “Diagnostic Traces in Cisco Unity Connection 10.x” chapter.

Users Cannot Access Cisco PCA Pages

Users use the Cisco Personal Communications Assistant (PCA) website to access the Messaging Assistant, and the Personal Call Transfer Rules pages.

When a user cannot access the Cisco PCA pages, consider the following possible causes.

  • The Cisco PCA URL is case-sensitive —Users can access the Cisco PCA at the following URL: http://<Cisco Unity Connection server>/ciscopca. Note, however, that the URL is case-sensitive.
  • The browser or client configuration is not configured properly —When a user cannot access any of the Cisco PCA pages, it may be that the user browser or client workstation is not configured properly. Make sure that the browser and client workstation are configured as specified in the User Workstation Setup Guide for Cisco Unity Connection Release 10.x. The guide is available at http://www.cisco.com/en/US/docs/voice_ip_comm/connection/10x/user_setup/guide/10xcucuwsx.html.
  • Unsupported software is installed on the client workstation —Confirm that the user does not have an unsupported combination of software or an unsupported third-party application installed on the workstation. See the Compatibility Matrix: Cisco Unity Connection and the Software on User Workstations, available at http://www.cisco.com/en/US/docs/voice_ip_comm/connection/compatibility/matrix/cucclientmtx.html.

Additional troubleshooting information and procedures for the Cisco PCA are available in the “Troubleshooting Cisco Personal Communications Assistant (PCA) in Cisco Unity Connection 10.x” chapter.

Also note that the users can access the Web Inbox URL, and link to the Messaging Assistant and Personal Call Transfer Rules pages from there. The Web Inbox URL is http://<Unity Connection server>/inbox.

Security Alert Displayed When Users Access Cisco Personal Communications Assistant Pages

If you use the self-signed certificate generated during installation to provide an SSL Unity Connection to the Cisco PCA, the web browser of the user displays a message to alert the user that the authenticity of the site cannot be verified, and therefore its content cannot be trusted. Similarly, if you use a self-signed SSL certificate to secure IMAP email client access to Unity Connection, some email clients supported for use with Unity Connection display SSL security messages.

Although users can still access Unity Connection despite the alerts, consider one of the following options to manage or eliminate security alerts when users browse to Cisco PCA and/or access their messages from an IMAP email client:

  • Add the SSL certificate to the Trusted Root Store on each user workstation. In this way, you can ensure that users never see the security alert. See the following “To Add the SSL Certificate to the Trusted Root Store on User Workstations” procedure.
  • Tell users to select the “Accept Permanently” (or similar) option when the browser or email client displays the alert and asks them how to proceed. After instructing the browser and/or email client to always accept the certificate, the user does not see the alert again.

To Add the SSL Certificate to the Trusted Root Store on User Workstations

Step 1blank.gif From the OS Administration application on the Unity Connection server, right-click to download the certificate and save it as a file.

Step 2blank.gif Copy the certificate to each user workstation, and then import it using tools in the browser or IMAP client, as applicable.

 

Users Cannot Access Unity Connection Web Tools from Cisco PCA

When users can access the Cisco Personal Communications Assistant (PCA), but cannot access the Messaging Assistant, or the Personal Call Transfer Rules, consider the following possible causes:

  • In order to access the Messaging Assistant, users must be given the proper class of service rights on the Class of Service > Edit Class of Service page or the Class of Service > New Class of Service page in Cisco Unity Connection Administration. The class of service that the user is assigned to must have the “Allow Users to Use the Messaging Assistant” setting enabled.
note.gif

Noteblank.gif Web Inbox has replaced the Messaging Inbox. See the “ Troubleshooting the Web Inbox in Cisco Unity Connection 10.x” chapter for Web Inbox troubleshooting information.

  • In order to access the Personal Call Transfer Rules, users must be given the proper class of service rights on the Class of Service > Edit Class of Service page or the Class of Service > New Class of Service page in Cisco Unity Connection Administration. The class of service that the user is assigned to must have the “Allow Users to Use Personal Call Transfer Rules” setting enabled.

Users Cannot Save Changes on Pages in Cisco PCA

When user browser settings are set to cache temporary Internet pages automatically, users can create a bookmark or favorite to access a Messaging Assistant, or Personal Call Transfer Rules web page. However, the page is read-only. Explain to users that they should bookmark the Cisco PCA home page rather than individual pages. Also note that users should not change their browser settings as a workaround; when the browser is not set to automatically check for newer versions of temporary Internet files, the Media Master control is not displayed correctly.

Administration Accounts Unable to Sign-In to Cisco Unified Serviceability

When the default application administration account is locked, for example, because the password has expired or because of too many unsuccessful sign in attempts, no application administration account is allowed to sign in to Cisco Unified Serviceability. (You specify the account name and password for the default application administration account during installation, and you create and administer additional application administration accounts in Cisco Unity Connection Administration.)

To unlock the account, change the password using the utils cuc reset password CLI command. Changing the password also unlocks the account. (If an account has been hacked, you do not want to unlock it without also changing the password.)