В начале подробности. Так как потоки Е1 мне отдают по SS7 , пришлось сначлаа поставить конвертер (я использую коммутатор Ibase для конвертации ss7 в pri), далее стоит CISCO 2911 с 4 модулями E1 и сервер HP с биллингом UTM 5 и радиус сервером.
Это мой первый опыт установки подобной системы, поэтому ошибки, которые я мог допустить простите мне.
В общем конфиг циски вот:
Код: Выделить всё
Current configuration : 8917 bytes
!
! Last configuration change at 13:20:57 UTC Thu Jun 13 2013 by cisco
! NVRAM config last updated at 13:20:59 UTC Thu Jun 13 2013 by cisco
! NVRAM config last updated at 13:20:59 UTC Thu Jun 13 2013 by cisco
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname VoIP_azinterra
!
boot-start-marker
boot-end-marker
!
!
card type e1 0 0
card type e1 0 1
logging buffered 51200 warnings
no logging console
enable secret 4 GYmmeN1C4cdPHVcONsej6Km5uVwCFyIucsroBfeW.s6
!
aaa new-model
!
!
aaa authentication login h323 group radius
aaa authorization exec h323 group radius
aaa accounting connection h323 start-stop group radius
!
!
!
!
aaa session-id common
network-clock-participate wic 0
network-clock-participate wic 1
!
no ipv6 cef
ip source-route
ip cef
!
!
!
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool ccp-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
lease 0 2
!
!
no ip domain lookup
ip domain name yourdomain.com
ip name-server 8.8.8.8
multilink bundle-name authenticated
!
!
!
!
isdn switch-type primary-net5
!
!
trunk group 1
!
!
crypto pki trustpoint TP-self-signed-2117038120
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2117038120
revocation-check none
rsakeypair TP-self-signed-2117038120
!
!
voice-card 0
!
!
voice class codec 1
codec preference 1 g729r8
codec preference 2 g711ulaw
codec preference 3 g723r63
!
voice class aaa 2
authentication method h323
authorization method h323
accounting method h323
!
!
!
!
voice translation-rule 10
rule 1 /12......./ // ( у меня номера начинаются с 12 и чтобы логин не определял номер абонента,я написал правило)
!
!
voice translation-profile from
translate calling 10
!
!
!
application
package ru builtin:lang_package
!
service debit tftp://192.168.1.200/netup_debit_card_ivr.2.0.2.tcl
param uid-len 4
paramspace ru index 1
paramspace ru language ru
param pin-len 8
paramspace ru location tftp://192.168.1.200/prompts/
paramspace ru prefix ru
!
license udi pid CISCO2911/K9 sn FCZ170360D8
license boot module c2900 technology-package uck9
hw-module pvdm 0/0
!
!
!
username root password 0 26108800
username cisco password 0 26108800
!
redundancy
!
!
controller E1 0/0/0
framing NO-CRC4
pri-group timeslots 1-31
description from_ats
!
controller E1 0/0/1
framing NO-CRC4
pri-group timeslots 1-31
description from_ats
!
controller E1 0/1/0
framing NO-CRC4
pri-group timeslots 1-31
description from_ats
!
controller E1 0/1/1
framing NO-CRC4
pri-group timeslots 1-31
description from_ats
gw-accounting aaa
acct-template callhistory-detail
!
!
!
!
!
interface Loopback1
no ip address
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
ip address 192.168.1.110 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
!
no ip address
encapsulation hdlc
isdn switch-type primary-net5
isdn timer T310 50000
isdn incoming-voice modem
isdn map address .* plan isdn type unknown
isdn send-alerting
isdn bchan-number-order ascending
isdn sending-complete
isdn outgoing-voice info-transfer-capability 3.1kHz-audio
no fair-queue
no cdp enable
!
interface Serial0/0/1:15
no ip address
encapsulation hdlc
shutdown
isdn switch-type primary-net5
isdn incoming-voice voice
isdn bchan-number-order ascending
isdn sending-complete
no cdp enable
!
interface Serial0/1/0:15
no ip address
encapsulation hdlc
shutdown
isdn switch-type primary-net5
isdn incoming-voice voice
isdn bchan-number-order ascending
isdn sending-complete
no cdp enable
interface Serial0/1/1:15
no ip address
encapsulation hdlc
shutdown
isdn switch-type primary-net5
isdn incoming-voice voice
isdn bchan-number-order ascending
isdn sending-complete
no cdp enable
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip dns server
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip route 192.168.1.0 255.255.255.0 192.168.1.1
!
access-list 1 permit 0.0.0.0
access-list 1 permit 0.0.0.0 255.255.255.0
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 23 permit 10.10.10.0 0.0.0.7
access-list 23 permit 0.0.0.0 255.255.255.0
!
!
radius-server attribute 44 include-in-access-req
no radius-server attribute nas-port
radius-server vsa send accounting
!
radius server h323
address ipv4 192.168.1.200 auth-port 1812 acct-port 1813
key secret
!
!
!
control-plane
!
!
voice-port 0/1/0:15
!
voice-port 0/0/0:15
translation-profile incoming from
cptone RU
!
voice-port 0/0/1:15
!
voice-port 0/1/1:15
!
!
!
mgcp profile default
!
!
dial-peer voice 2 voip
service debit
destination-pattern .T
session target ras
voice-class codec 1
!
dial-peer voice 1 pots
service debit
incoming called-number T
direct-inward-dial
port 0/0/0:15
forward-digits 0
!
!
gateway
timer receive-rtp 1200
!
sip-ua
presence enable
!
!
!
gatekeeper
shutdown
!
!
Далее в UTM я завел карточки разной длинны.
Звоню на свой номер 914 , идет запрос пин кода. ввожу пин код из 12 символов и получаю ответ что звонок не может быть обработан.
в логах радиуса следующее
Код: Выделить всё
?Debug : Jun 13 17:28:16 b713ab70 Transport: sending traffic/dialup session ID 45
?Debug : Jun 13 17:28:16 b713ab70 Transport: session ID 45 witout IPInfo
?Debug : Jun 13 17:28:16 b713ab70 SessionManager: put: session ID 45 timeout scheduled at 2000000000
?Debug : Jun 13 17:28:16 b713ab70 SessionManager: put: session ID 45 from NAS 2 OK
?Debug : Jun 13 17:28:16 b713ab70 AcctQueue: Reply
?Debug : Jun 13 17:28:28 b723bb70 AuthQueue: New request from 192.168.1.110:1645
?Debug : Jun 13 17:28:28 b723bb70 AuthQueue: Login '2392'
?Debug : Jun 13 17:28:28 b723bb70 LoginStorage: Acquire: login '2392' used 1 times
?Debug : Jun 13 17:28:28 b723bb70 AuthQueue: Login info found, slink_id 3
?Debug : Jun 13 17:28:28 b723bb70 AuthQueue: Using PAP authentication method
?Debug : Jun 13 17:28:28 b723bb70 AuthMethodPAP: user password <> vs PAP password <99561729>
ERROR : Jun 13 17:28:28 b723bb70 AuthQueue: PAP authentication failed
?Debug : Jun 13 17:28:28 b723bb70 AcctQueue: lookup: session ID 46 closed
?Debug : Jun 13 17:28:28 b723bb70 SessionManager: put: sessiond ID 46 from NAS 2 is closed
?Debug : Jun 13 17:28:28 b723bb70 LoginStorage: Release: login '2392' used 0 times
?Debug : Jun 13 17:28:28 b723bb70 AuthQueue: Reply
?Debug : Jun 13 17:28:29 b713ab70 AcctQueue: Request from 192.168.1.110:1646
?Debug : Jun 13 17:28:29 b713ab70 SessionManager: get: session ID 45
?Debug : Jun 13 17:28:29 b713ab70 AcctQueue: found session ID 45 for SID 0000050F
Info : Jun 13 17:28:29 b713ab70 AcctQueue: Accouting-Stop for SID 0000050F unknown user '2392' from NAS 192.168.1.110
?Debug : Jun 13 17:28:29 b713ab70 AcctQueue: lookup: session ID 45 closed
?Debug : Jun 13 17:28:29 b713ab70 Transport: session ID 45 without LoginInfo
?Debug : Jun 13 17:28:29 b713ab70 Transport: sending traffic/dialup session ID 45
?Debug : Jun 13 17:28:29 b713ab70 Transport: session ID 45 witout IPInfo
?Debug : Jun 13 17:28:29 b713ab70 SessionManager: put: sessiond ID 45 from NAS 2 is closed
?Debug : Jun 13 17:28:29 b713ab70 AcctQueue: Reply
Помогите найти проблему пожалуйста.