×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

ipmg registration DENIED

ipmg registration DENIED

ipmg registration DENIED

(OP)
hello
SRPT174 STARTUP: IPMG registration denied. Unconfigured IP address [10.11.116.8
].

PING 10.11.116.8 SUCCESSFUL


need help?

RE: ipmg registration DENIED

have you setup the Media Gateway in LD 97 SUPL and is the config added in element manager for that MGC?

RE: ipmg registration DENIED

(OP)
how to check it?

RE: ipmg registration DENIED

ld 97
REQ prt
Type supl
supl x

where x = the Loop and shelf assigned to that gateway.

Also you could in LD 117
stat ipmg <--will show the status of all IPMG
prt ipr <--will show all configured gateway IP Addresses

If you see it configured or you add it in LD 97 that is only the ELAN info to allow registration. The TLAN for the MGC, DSP's, Callserver IP etc. all needs setting up. This is carried out in Element manager access

System\IP Network\Media Gateways

select the MG Loop/Shelf by clicking the MGC link on the right that corresponds with the one you are doing. In there you will see all the prompts for IP/MASK/GW of the MGC/DSP cards and you will set the Callserver address, QOS, Codecs etc.

RE: ipmg registration DENIED

(OP)

>ld 97
SCSYS000
MEM AVAIL: (U/P): 98746033 USED U P: 4810249 96067 TOT: 103652349
DISK SPACE NEEDED: 87 KBYTES
REQ prt
TYPE supl
SUPL x

SUPL SUPT SLOT XPEC0 XPEC1 SHLF ZONE0/1 IPR0/1

000 IPMG ---- -- - - -- - - 0 00002 10.11.216.2
1 ----- ---------------
096 ---- ---- PHANTOM -- - - --- --- - --- ---------------
100 ---- ---- VIRTUAL -- - - --- --- - --- ---------------
104 ---- ---- VIRTUAL -- - - --- --- - --- ---------------
108 ---- ---- VIRTUAL -- - - --- --- - --- ---------------

REQ
ELAN028 The following server failed to register it's pbxLink.
IP <10.11.216.3>, host name <ss>, server type <UNKN>.

SCH0101
REQ prt
TYPE supl
SUPL 10.SCH0600
SUPL 11SCH0600
SUPL SCH0600
SUPL 1-SCH0600
SUPL 1-SCH0600
SUPL ****
OVL000
>ld 117
OAM000

=> stat ipmg
LAST REG LAST REG
IPMG TYPE STATUS DATE TIME UPTIME
000 0 MGC CONF/UNREG NONE NONE NONE

=> prt ipr
IPMG IP Address Zone Type
000 0 10.11.216.2 2 MGC

=>




I don't understand this at all.
can you tell me what is wrong here?

RE: ipmg registration DENIED

Yep, you don't have it configured in Element Manager in the Node Properties and you don't have it built in the the Superloop Config. Just because you can ping it only means that you have it locally configured in the MGC

RE: ipmg registration DENIED

(OP)
can you tell me what to do step by step?

RE: ipmg registration DENIED

the odd thing is the one configured MGC Loop 0 Shelf 0 is down, also is the new one supposed to be in a different subnet, different location etc? The configured one is 10.11.216.2 and the new one is 10.11.116.8

RE: ipmg registration DENIED

(OP)
I just got a new job. I'm trying to figure it out.
the address 10.11.116.8 is listed on all phones

RE: ipmg registration DENIED

What do you mean 10.11.116.8 is listed on all the phones? If you have no experience with this machine it is a whole different animal than anything you have probably ever seen.

RE: ipmg registration DENIED

(OP)
10.11.116.8 is specified in the settings of all ip-phones

RE: ipmg registration DENIED

That would be the Node IP then. Kind of a Psuedo IP address for all IP Telephony Hardware. Doesn't really belong to one device but rather a group of devices.

RE: ipmg registration DENIED

It would explain the difference in subnet as it would be the node address of the sig server for example and on the TLAN so you have 2 subnets ELAN = 10.11.216.xxx and TLAN = 10.11.116.xxx but then that takes you back to the start why is an MGC trying to register with that address.

Might be easier to start from scratch do you know what you have hardware wise some useful commands would be:
LD 22
REQ iss <-- Software Version
REQ tid <-- This is your site ID that all licenses are against from this can check versions, hardware type, applications etc.

LD 117
=> stat ss <-- Status of any signaling servers
=> inv prt cards <-- list of cards in the inventory might help us with what you have
=> stat ucm info <-- this and next command depend on version and if you have a UCM or System Manager earlier releases did not have this
=> stat ucm sys

Access element manager to see details on the Node config and MGC config mentioned earlier.

RE: ipmg registration DENIED

If you only have one MGC then it could be that its just setup incorrectly, and just needs its ELAN setting to 10.11.216.2, for that you would access the MGC card direct and set the ELAN details and Callserver details leave the rest and reboot.

RE: ipmg registration DENIED

(OP)
ld 22
PT2000

REQ iss

VERSION 4021

System type is - Communication Server 1000E/CP PM
CP PM - Pentium M 1.4 GHz

IPMGs Registered: 0
IPMGs Unregistered: 0
IPMGs Configured/unregistered: 1

RELEASE 7
ISSUE 50 Q +
IDLE_SET_DISPLAY NORTEL

IPMG TYPE CSP/SW MSP APP FPGA BOOT DBL1 DBL2

0 0 MGC UNKNOWN

REQ tid

TAPE ID:
LOADED 258838831


REQ ****
OVL000
>ld 117
OAM000

=> stat ss

=> inv prt cards
Card inventory:
25 3 2008 0 34 33, 25 3 2008 0 35 22, 10
XCT-TDS/MF, 124, <Unavailable>
CONF, 125, <Unavailable>
MGC , 000 0, NTDW98AA 4 NNTMC900HY33
MGU, 000 0, NTC314AAE6 05 NNTMC900PECW
MPS1, 000 0, NTC312AAN6
DSPDB , 000 0 11, NTDW78AA R01 NNTMC900N7NC
DSPDB , 000 0 12, <Unavailable>
DSPDB , 000 0 13, <Unavailable>
DSPDB , 000 0 14, <Unavailable>
CP-PM CS 0, 0 0 22, NTDW99ABE5 NNTMC900HRF8
Avaya CPDC SS, 0 0 23, NTDW53AAE60003 NNTMC900N31LCPDC, svodnaya.ss.ru, 192.168
.116.3

=> stat ucm info
The Security Domain IP address is : 10.11.116.9
The Security Domain Fingerprint is: AF:56:EA:23:E1:49:6A:93:74:E0:3B:A5:22:55:39:ED

=> stat ucm sys
Requesting UCM registration status from devices.
Waiting for status updates from each of the elements...
No elements registered with the Call Server




1 have 1 MGC card

I also have a backup of my colleagues from the neighboring branch. Hardware settings are the same except for ip. They have 10.11.221. * And 10.11.121. * I have 10.11.116. * And 10.11.216. *




RE: ipmg registration DENIED

So you have a media Gateway 1010 with a CPPM Callserver running release 7.5, the MGC has a single DSP128 on it. You have a CPDC card which is your sig server.

Register the MGC to the Callserver connect to the MGC Card using Serial cable and follow the link that KCFLHRC mentioned earlier just do the mgcIPClear, diskformat "all", reboot. When the MGC comes back up enter the MGC ELAN IP, MASK, Default GW and Callserver address.

If you are not sure of these in LD 117
=> prt elnk <--will see your Active callserver IP
=> prt mask <--ELAN Mask
=> prt route <--ELAN Default gateway assigned for IP 0.0.0.0
=> prt ipr <--MGC ELAN

RE: ipmg registration DENIED

(OP)
bignose21 I did mgcIPClear, diskformat "all", reboot.
i add cs, elan mask, gateway , mgc elan and reboot.
mgc unreg(

RE: ipmg registration DENIED

So MGC is up now?

that Element Manager in the attachment is that on the sig server runing on the CPDC? what state is the CPDC in (lights on card) can you ping the ELAN/TLAN, Login to the CPDC at CLI can you ping the callserver, you could try running through the config on the sig server by running baseparamsconfig

Other than than what is the security server on IP 10.11.116.9 is it UCM or System Manager? Check the CS1K setup in the deployment section is the Sig Server associated with the Callserver?

RE: ipmg registration DENIED

(OP)
MGC is up now
CPDC - green
CP PM cs - red
10.11.216.3, 10.11.216.2, 10.11.116.9 - ping ok, 10.11.116.8 - ping failed.

Quote (Other than than what is the security server on IP 10.11.116.9 is it UCM or System Manager? Check the CS1K setup in the deployment section is the Sig Server associated with the Callserver?)

where can i check it?


sorry for the stupid questions. this is my first time

RE: ipmg registration DENIED

web browse 10.11.116.9 will see the security server type

For the CPPM it has 2 lights, top one (left as card is horizontal) is hopefully Green as that means online, then the other one (right) is for HA it displays Green=online, Orange=Standby, Red=this is expected as you only have SA (one Callserver).

RE: ipmg registration DENIED

(OP)
do you mean it? 0

RE: ipmg registration DENIED

That is element manager and the 10.11.116.8 is the node address so as mentioned previously that is where your phones go when the signaling server is up. You should login to the command line of 10.11.116.9 SS and run pbxLinkShow (guessing its down) can you ping from there to the Callserver 10.11.216.2?

RE: ipmg registration DENIED

(OP)
yes, ping ok

RE: ipmg registration DENIED

(OP)
command not proccessed because application cs1k.linux.pbx in not active

RE: ipmg registration DENIED

in the security server under software deployment, in servers screen does the sig server look to have Sig Server/EM in deployed state (I think yes), and on drop down choose the CS1000 is the callserver associated with the Sig Server?

RE: ipmg registration DENIED

(OP)
help me please

RE: ipmg registration DENIED

try this.

LD 117

dis sec trans

then reboot the MGC and let it come up fully. sometimes you have to disable secure transfers to get the IP MGC cards to register and get their config from the PBX. sometimes you don't, but it's worth a shot.

Once you are done here.

enl sec trans

this will enable what you disabled.

John Anaya
Amdocs Inc.
ACSS/ACIS - CS1000 Rls 7.5/Call Pilot 5
ACSS/ACIS - SME - IP Office 8.0
APSS/APDS - Avaya UC Services

Public Profile
http://www.linkedin.com/pub/john-anaya/25/1b9/a9b/

RE: ipmg registration DENIED

The picture you last put up is the ISSS settings, the deployment part is the link to the left which says "Software Deployment", once open there is a drop down on the right its usually on servers and you should see your sig server and the applications that are deployed on it (does it look good, apps deployed (usually SS/EM)), also on the drop down is CS1000 which I was mentioning earlier, when you open that you see the callserver and assigned sig server(s).

Looking at the ISSS its enabled but states "new or deleted targets found sync required" you could try the sync and activate there in case that is the issue, or you could disable it and sync/activate to test without ISSS. BTW ISSS is securing the signalling traffic between elements of the PABX, so if for example one of the devices was not holding the correct info nothing would talk to it.

Needless to say the sig server is the issue at the moment as when you stat ss in the callserver in LD 117 you should see the details of that sig server come up.

RE: ipmg registration DENIED

(OP)
janaya , SCH0099 SEC?

RE: ipmg registration DENIED

Commands for secure transfer are:

=> dis transfers secure
=> stat transfers secure
=> enl transfers secure

But I thought you already had a working MGC now so wouldn't be a need for this? To confirm

LD 117
=> stat ipmg <----------------Should see it registered
LD 143
=> upgmg stat <---------------Should see Status Success

RE: ipmg registration DENIED

(OP)
bignose21, hello, thanks for trying to help me.

Quote (Looking at the ISSS its enabled but states "new or deleted targets found sync required" you could try the sync and activate there in case that is the issue, or you could disable it and sync/activate to test without ISSS. BTW ISSS is securing the signalling traffic between elements of the PABX, so if for example one of the devices was not holding the correct info nothing would talk to it.)

I pressed the sync button. It didn’t work.



=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2021.06.15 18:16:56 =~=~=~=~=~=~=~=~=~=~=~=
stat ucmsecurity info
The Security Domain IP address is : 10.11.116.9
The Security Domain Fingerprint is: AF:56:EA:23:E1:49:6A:93:74:E0:3B:A5:22:55:39:ED


=> stat ucmsecurity system
MGC 10.11.216.3 UNREGISTERED

=> stat ipmg
LAST REG LAST REG
IPMG TYPE STATUS DATE TIME UPTIME
000 0 MGC REG 15/06/2021 17:25 0d,0h,9m



=> upgmg stat
SCH0099 UPGMG?

=>

RE: ipmg registration DENIED

(OP)
I would appreciate any advice, thanks

RE: ipmg registration DENIED

LD 143
. upgmg stat

RE: ipmg registration DENIED

also for the MGC LD 117
=> reg ucm device 10.11.216.3

but I prefer in the MGC CLI -
joinSecDomain

RE: ipmg registration DENIED

(OP)

Quote (ld 143

CCBR000
.upgmg
SRPT016 OMM: IP link is DOWN between Call Server and IPMG[0 0)


stat

+-------------------------------------------------+
| IPMG SOFTWARE UPGRADE STATUS |
+-------------------------------------------------+
| Auto Sequential Software Upgrade is Enabled |
+-------------------------------------------------+
| | | |IPMG| NEEDS |
| IPMG | STATUS | LAST UPG TIME |TYPE|UPGRADE|
+-------------------------------------------------+
| 0 0 | SUCCESS| 2021/06/15 17:25:50| MGC| NO |
+-------------------------------------------------+
.
SRPT257 shutDownServerSession: shutting down ssd server session [0] for IPMG [0 0]

ELAN023 vtServerRx: tcp Status = 2, TCP socket error
treat it as a connection loss and send an error message to RUDP.

ELAN014 ELAN 0 host IP=10.11.216.3 is enabled

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems
***
SRPT017 OMM: IP link is UP between Call Server and IPMG[0 0]
*
>
SRPT227 Registration denied for IP[10.11.216.3] IPMG[0 0] Reason[8] OldStatus[1] MainRes
et[0] ExpRegStatus[2]

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

SRPT016 OMM: IP link is DOWN between Call Server and IPMG[0 0]

SEC106 Unable to request security domain membership because SSH transfers are disabled


=> reg ucm device 10.11.216.3

=>
SEC106 Unable to request security domain membership because SSH transfers are disabled
stat ucmsecut
SCH0099 UCMSECUT?

=>

=> stat ucmsecurity system
MGC 10.11.216.3 UNREGISTERED

=>
SRPT226 Registration has been granted for IP[10.11.216.3] IPMG[0 0]

SRPT091 HB: Local side IPL health change from 2 to 0.

SRPT017 OMM: IP link is UP between Call Server and IPMG[0 0]
write: S_errno_EPIPE

XMI002 0 0 1 XMLC
write: S_errno_EPIPE

XMI002 0 0 4 XCOT: EUROPEAN
write: S_errno_EPIPE

XMI002 0 0 3 XCOT: EUROPEAN
write: S_errno_EPIPE]



RE: ipmg registration DENIED

(OP)
going back to mgc command line, when i used the user name, pdt2, then the pdt2 password, i was able to login, but when i used the command, joinSecDomain, it says user login has no sec_admin privileges

admin login password does not match

RE: ipmg registration DENIED

(OP)

Quote (enl transfers secure
Enabling secure transfers.

=>
SEC087 Secure transfers have been enabled.
stat transfers secure
ENABLED

=>
SRPT091 HB: Local side IPL health change from 0 to 2.

ELAN014 ELAN 0 host IP=10.11.216.3 is enabled
reg ucm device 10.11.216.3
IP address of the Primary Security Server [10.11.116.9)

.
User Name (UCM): admin
Password (admin):
Sending messages to 10.11.216.3 to authorizing it to request security domain membership.
Waiting for status updates from the element...

=>
SRPT016 OMM: IP link is DOWN between Call Server and IPMG[0 0]

SRPT257 shutDownServerSession: shutting down ssd server session [0] for IPMG [0 0]

ELAN014 ELAN 0 host IP=10.11.216.3 is enabled

ELAN023 vtServerRx: tcp Status = 2, TCP socket error
treat it as a connection loss and send an error message to RUDP.

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

SRPT017 OMM: IP link is UP between Call Server and IPMG[0 0]

SRPT227 Registration denied for IP[10.11.216.3] IPMG[0 0] Reason[8] OldStatus[1] MainRes
et[0] ExpRegStatus[2]

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems

ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems
stat
ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems
ucmse
ELAN009 ELAN 0 host IP=10.11.216.3 disabled, write to socket
fail due to far end disconnect or Ethernet problems
curity system
MGC 10.11.216.3 UNREGISTERED]

RE: ipmg registration DENIED

(OP)

Quote (=> reg ucm device 10.1
SRPT091 HB: Local side IPL health change from 0 to 2.
1.21
ELAN014 ELAN 0 host IP=10.11.216.3 is enabled
6.3
IP address of the Primary Security Server [10.11.116.9)

.
User Name (UCM): admin
Password (admin):
Sending messages to 10.11.216.3 to authorizing it to request security domain membership.
Waiting for status updates from the element...

=>
SEC116 User ADMIN has been allowed to log in using an emergency account.

SEC102 Element 10.11.216.3 failed to request membership in the security domain, Reason
FAILED: Upload Element Properties file failed!.]

RE: ipmg registration DENIED

(OP)

Quote (oam> joinSecDomain
IP address of the Primary Security Server: 10.11.216.3
Invalid IP address.
IP address of the Primary Security Server: 10.11.116.9
16/06/2021 09:47:40 ELAN0032 A new ELAN host route has been configured (for UCM IP address 10.11.116.9.)
Unable to PING security server (10.11.116.9).
Do you want to proceed anyway? (Y/N)y
oam> 16/06/2021 09:49:05 ELAN0031 An ELAN host route has been removed (for UCM IP address 10.11.116.9.)
16/06/2021 09:49:05 SEC0098 This element has failed to request membership in the security domain)

RE: ipmg registration DENIED

You have been struggling for 3 weeks now. Is it time to pay a channel partner who works with the CS1000 to help you?

RE: ipmg registration DENIED

(OP)
I don't mind, but it's not that simple)

RE: ipmg registration DENIED

I think you have several issues but one is highlighted by:

SEC116 User ADMIN has been allowed to log in using an emergency account.

this is telling you the security server did not respond to the Callserver before a timeout so it used a locally stored copy of the account to authenticate. This and the MGC issues would lead you to an issue with the security server. You need to sort that out first. But like gwebster I am thinking you need help on this because it looks like most of it needs fixing.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close