Cisco UC500 Series Technical Training Manual page 144

19. For this lab, you will need to modify the access-list on the WAN interface to allow access from
the partner site. You can do so by following the CLI below. You first need to a) remove the
access-list from the interface, b) delete the access-list, c) re-add the access-list with your Partner
PoD's IP address, and finally d) reapply the access-list to the WAN interface.
Part a)
UC520(config)#interface FastEthernet0/0
UC520(config-if)#no ip access-group 104 in
UC520(config-if)#end
Part b) and c)
UC520#config t
UC520(config)#no access-list 104
UC520(config)#access-list 104 remark auto generated by SDM firewall
configuration
UC520(config)#access-list 104 remark SDM_ACL Category=1
UC520(config)#access-list 104 deny
UC520(config)#access-list 104 deny
UC520(config)#access-list 104 deny
UC520(config)#access-list 104 permit icmp any host 1.1.100.1 echo-reply
UC520(config)#access-list 104 permit icmp any host 1.1.100.1 time-exceeded
UC520(config)#access-list 104 permit icmp any host 1.1.100.1 unreachable
UC520(config)#access-list 104 permit udp any any eq 5060
UC520(config)#access-list 104 permit udp any eq 5060 any
UC520(config)#access-list 104 permit udp any any range 16384 32767
UC520(config)#access-list 104 permit udp host 63.203.35.55 eq domain any
UC520(config)#access-list 104 deny
UC520(config)#access-list 104 deny
UC520(config)#access-list 104 deny
UC520(config)#access-list 104 deny
UC520(config)#access-list 104 deny
UC520(config)#access-list 104 deny
UC520(config)#access-list 104 permit ip 1.1.100.xx 0.0.0.255 any
UC520(config)#access-list 104 deny
UC520(config)#end
Part d)
UC520#conf t
UC520(config)#interface FastEthernet0/0
UC520(config-if)#ip access-group 104 in
UC520(config-if)#end
Verify Steps:
1. On the IP Phones, make sure the FirstName and the LastName is visible.
2. Call the voicemail access number (401) & Auto Attendant (400) internally and test if calls work.
Make sure the AA transfers the call as configured.
3. Press the 'Messages" key on each phone and enroll the users. Use "789" as a password.
4. Place calls between IP Phones and ensure that calls roll over to VM when not answered.
5. Check that the MWI light turns on when a message is left and check messages.
6. On the EVEN POD, on x201 dial 81201 – this should ring x201 on the ODD POD. Make sure
you can answer the call and talk both ways.
Cisco Unified Communications Technical Training
LAB 8B: UC520 Multi-site Setup
ip 10.1.10.0 0.0.0.3 any
ip 192.168.10.0 0.0.0.255 any
ip 10.1.1.0 0.0.0.255 any
ip 10.0.0.0 0.255.255.255 any
ip 172.16.0.0 0.15.255.255 any
ip 192.168.0.0 0.0.255.255 any
ip 127.0.0.0 0.255.255.255 any
ip host 255.255.255.255 any
ip host 0.0.0.0 any
ip any any
 Partner's IP
Page 144 of 171