Cisco ASA Series Cli Configuration Manual page 1234

Troubleshooting the Phone Proxy
PP: Client outside:192.168.10.5/49355 retransmitting request for Config file
SEP001562106AF3.cnf.xml.sgn
PP: opened 0x17ccde
PP: 192.168.10.5/49355 requesting SEP001562106AF3.cnf.xml.sgn
PP: Client outside:192.168.10.5/49355 retransmitting request for Config file
SEP001562106AF3.cnf.xml.sgn
PP: opened 0x17ccde
PP: 192.168.10.5/49355 requesting SEP001562106AF3.cnf.xml.sgn
PP: Client outside:192.168.10.5/49355 retransmitting request for Config file
SEP001562106AF3.cnf.xml.sgn
PP: opened 0x17ccde
Solution
Step 1
Determine why the Cisco UCM is not responding to the TFTP request by performing the following
troubleshooting actions:
•
•
Step 2
Verify that the ASA is forwarding the TFTP request. Capture the packets on the interface between the
ASA and Cisco UCM. See
IP Phone Does Not Respond After the Security Appliance Sends TFTP Data
Problem
data to the IP phone, the phone might not see the data and the TFTP transaction fails.
The following errors appear in the debug output (debug phone-proxy tftp):
PP: Client outside:68.207.118.9/33606 retransmitting request for CTL file
CTLSEP001DA2B78E91.tlv
PP: opened 0x214b27a
PP: Data Block 1 forwarded from 168.215.146.220/20168 to 68.207.118.9/33606 ingress ifc
outside
PP: 68.207.118.9/33606 requesting CTLSEP001DA2B78E91.tlv
PP: Client outside:68.207.118.9/33606 retransmitting request for CTL file
CTLSEP001DA2B78E91.tlv
PP: 68.207.118.9/33606 requesting CTLSEP001DA2B78E91.tlv
PP: Client outside:68.207.118.9/33606 retransmitting request for CTL file
CTLSEP001DA2B78E91.tlv
Solution
troubleshoot the problem:
Step 1
Verify that the ASA is forwarding the TFTP request by entering the following command to capture the
packets on the interface between the ASA and the IP phone:
hostname# capture out interface outside
See the command reference for more information about using the capture command.
Step 2
If the IP phone is behind a router, the router might be dropping the data. Make sure UDP port forwarding
is enabled on the router.
Cisco ASA Series CLI Configuration Guide
1-36
Perform the following actions to troubleshoot this problem:
Use the Cisco UCM to ping the ASA inside interface when PAT is configured for the outside
interface so that the IP phone IP address is uses NAT for the ASA inside interface IP address.
Use the Cisco UCM to ping the IP phone IP address when NAT and PAT are not configured.
Debugging Information from the Security Appliance, page
When the ASA receives a TFTP request from the IP phone for the CTL file and forwards the
Perform the following actions to determine why the IP phone is not responding and to
Chapter 1 Configuring the Cisco Phone Proxy
1-28.