Avaya VPN phone reboot

[michbsd]

Hi,

I have several Avaya VPN phones (5610 and 9650) running latest software, up against an IPO500 v2 (also with latest firmware). I am using a Cisco ASA for the VPN connection.

Everything works, except all my phones reboot after exactly 4 days (on the dot). I have looked through my Cisco config to no avail, and I've looked of the debug from the monitor app - but also in vain.

Anyone here experienced the same thing? Or perhaps, have an idea as to what might cause these reboots?

Many thanks,

Mike

 

[tlpeter]

It is a timer
Youcould reboot them on midnight so nobody will notice the rebooting phones

Homo sapiens non urinat in ventum

honey, i fried the IP Office !!!

Sarcasm, it's only one of the services I offer.

 

[michbsd]

Hi,

Yes, I figured so much. But which timer, and where can I change the settings?

Of course, I could reboot them during the night - but that seems more like a workaround than a solution.

I would like to understand*why* they reboot.

Thanks,

Mike

 

[tlpeter]

I think there is a mismatch with a life time timer.
The phone reboots to reastablish the connection again.

Homo sapiens non urinat in ventum

honey, i fried the IP Office !!!

Sarcasm, it's only one of the services I offer.

 

[michbsd]

Yes, I know.
But do you have any idea which timer, and how I could debug it?

Mike

 

[tlpeter]

Really don't know.
I never work with Cisco.
All I know is that phase oneand phase two have a timer.
What are those timers now ?
HSM uses Cisco routers all the time for this so perhaps he knows.

Homo sapiens non urinat in ventum

honey, i fried the IP Office !!!

Sarcasm, it's only one of the services I offer.

 

[michbsd]

The following has been configured on the ASA:


crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set security-association lifetime seconds 2147482800
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set security-association lifetime kilobytes 2147483647

Mike

 

[hairlessupportmonkey]

turn off all TCP / UDP / H323 timers, under Firewall/Advanced/Global Timeouts.

ACSS - SME

 

[michbsd]

I have everything turned off. Except for:

Connection: 03:00:00
Translation Slot: 06:00:00

None of it matches the 4 day reboot. Actually the phone will reboot exactly after 4 days, even if I am in the middle of a call!!

Mike

 

[michbsd]

I've added the reverse-route to the crypto map - perhaps that will help?

 

[hairlessupportmonkey]

OK - what firmware level is the ASA on?

also, set the timers to 00:00 and tick them - simply un-ticking them will cause them to use their preset default values.

ACSS - SME

 

[michbsd]

OK - will try to set all to 00:00

Cisco Adaptive Security Appliance Software Version 8.2(2)

Thanks