Aruba IAP reset procedure

 1. Connect a terminal, PC, or workstation running a terminal emulation program to the Console port on the IAP. 

#minicom - in mycase

2. Turn on the IAP. An autoboot countdown prompt that allows you to interrupt the normal startup process and access apboot is displayed. 

3. Press Enter key before the timer expires. The IAP goes into the apboot mode. 

4. In the apboot mode, execute the following commands to assign a static IP to the IAP. 

Hit to stop autoboot: 0 

apboot> 

apboot> setenv ipaddr 10.10.10.2

apboot> setenv netmask 255.255.255.0 

apboot> setenv gatewayip 10.10.10.1

apboot> save 

Saving Environment to Flash... 

Un-Protected 1 sectors 

.done 

Erased 1 sectors 

Writing 

5. Use the printenv command to view the configuration. 

apboot> printenv

 

 

Further reference can be found here

Debug Cisco Voice Gateway

 Debugging Cisco Voice 

Debug Ref Doc

I recently came across the following command  “call filter match-list” command,  it’s been available on Cisco IOS Voice Gateways since release 12.3(4)T. and I have to say I found it very very useful so here's how to use it.

If you ever done a debug output from a busy voice gateway, you  would know that it spits out ton's of information constantly but you can use this command to trim down the information to just to the phone calls you are looking for.  

Before you begin to use it create the call filter match-list in global configuration mode. The syntax to get started looks like this:  

CUBE(config)#call filter match-list 1 voice  

Now, you can define one or several criteria to match, including, but not limited to, incoming calling number, outgoing calling number, incoming port, outgoing port and dial peer.  

The filter below would match on outgoing calling number and outgoing voice port

CUBE(config)#call filter match-list 1 voice outgoing calling-number 888XXX outgoing port 0/1/0  

Next enable the filter with the “debug condition match-list 1 {exact-match | partial-match}” command.

I normally start with exact match, and then switch over to partial match if I don’t see the debug output I'm looking for.  

Once the filter is enabled, you can then turn on the debug you want from the debugs that work with the call filter list. This feature supports many of the more common debugs you would use, including debug isdn q931, debug voip ccapi inout, debug ccsip messages, debug vtsp.

Once enabled, all of these normally chatty debugs will be filtered down to the criteria you set up in the call filter list. For example, if the filter above were used as exact match, then only calls with the outgoing calling number 888XXX and matching the outgoing defined voice port would be part of the debug output.  

If you have configured your call filter list and are wondering if you applied it correctly, you can always do a show debug and you should see something like this:  

CUBE#show debug The following ISDN debugs are enabled on all DSLs: debug isdn error is ON. debug isdn q931 is ON. (filter is ON)  

Notice the (filter is ON). Also, if you had partial match as the criteria for your debug call filter list, you would see “debug condition match-list is set to PARTIAL_MATCH” when you entered this command.  

To turn off the filter, just enter the CUBE(config)#no debug condition match-list 1

CUBE(config)#call filter match-list 1 voice 

CUBE(conf-call-filter-mlist)#incoming calling-number 0773XXXXXX

CUBE#debug condition match-list 1 partial-match 

CUBE#debug ccsip calls 

CUBE#ter mon

Once done this you should only see calls from the mobile number above

Jabber Login

Sometimes simply for troubleshooting or testing purposes you may want to logout a user that is logged in to Windows AD device and login as yourself ( the admin). Normally if you reset Cisco Jabber the currently logged in user credentials will be used to create the new session. To disable this you can run the command below and then you can login as yourself.
  
msiexec.exe /i CiscoJabberSetup.msi CLEAR=1 UPN_DISCOVERY_ENABLED=false

CUBE Pcap

CUBE :-
*) Need to take capture from both internal and external interface of the CUBE, to understand the packets/Audio coming in and going out of the CUBE router in both directions.
*) Also enable below debugs in router to track the call.

Debugs/Packet capture in the router:-

- Commands to enable ip traffic packet capture:-

conf t

ip traffic-export profile sniffer1 mode capture
bidirectional
ip traffic-export profile sniffer2 mode capture
bidirectional

interface gig x/x/x           /// External interface
ip traffic-export apply sniffer1

interface gig x/y/z           /// Internal interface
ip traffic-export apply sniffer2

end

- To START/STOP/COPY capture in the router.

traffic-export interface gig x/x/x stop
traffic-export interface gig x/x/x clear

*) Enable below debugs

debug voip ccapi inout
debug ccsip messa
debug ccsip media
debug ccsip error
debug ccsip event
debug voip rtp session name

*) Procedure to collect capture/debug:-

traffic-export interface gig x/x/x stop
traffic-export interface gig x/x/x clear 

traffic-export interface gig x/y/z stop
traffic-export interface gig x/y/z clear

clear log
<confirm>

traffic-export interface gig x/x/x start
traffic-export interface gig x/y/z start

*) Do the test calls, once the test call is done, do the below.

traffic-export interface gig x/x/x stop
traffic-export interface gig x/y/z stop
un all


term len 0
sh log
sh run
sh vers//

traffic-export interface gig x/x/x copy flash:gigxxx.pcap

traffic-export interface gig x/y/z copy flash:gigxyz.pcap


To copy the file over SSH you can use

Pscp.exe -pw C1sco123 admin@10.X.X.X:flash:pcap  "c:\Temp"
Or
Copy Flash:filename.pcap scp://172.X.X.X/



traffic-export interface gig 0/1 stop
traffic-export interface gig 0/1 clear
traffic-export interface gig 0/0.342 stop
traffic-export interface gig 0/0.342 clear 


traffic-export interface gig 0/1 start

traffic-export interface gig 0/0.342 start



traffic-export interface gig 0/0.342 copy flash:gig0.342dialtone.pcap

traffic-export interface gig 0/1 copy flash:gig1dialtone.pcap


traffic-export interface gig 0/1 stop
traffic-export interface gig 0/0.342 stop

Aruba AP debug

show whitelist-db rap | include 74:3a

Cisco ASA debug

Some usefull debug commands for ASA:

packet-tracer input Internet  tcp X.X.X.X http X.X.X.X 6 http
packet-tracer input Internet icmp X.X.X.X 8 0 X.X.X.X detailed

To do a capture:

access-list capin permit ip host 10.10.10.x host 10.10.20.x
access-list capin permit ip host 10.10.20.x host 10.10.10.x
capture in access-list capin interface inside
then initiate the traffic from client to server, and use "show capture capin" to see if you can see the traffic in both directions.


Check IP Route:

show route
show asp table routing

Cisco IP phone remote login to extension mobility via web url

- You created new user device profile
- You know the MAC address of the phone the user will be login on
- How can you log them in without the end user input

Easy just browse to the url below and replace the MAC and the username with the appropriate user ID that has been assigned the UDP.

http://CUCM IP/emapp/EMAppServlet?device=SEPXXXXXXXX&&userid=username&seq=12345


Hope this helps