IP Phone Registration - PBX Info :: Your Free PBX, PABX and Telephone Information Resource

Mike Rixon · 04-29-2008, 04:33 PM

I am trying to find out what notifications you get when IP phone registration activity occurs (CS1000 v5.0). My intention is to watch IP Phone registration activity and produce a notification if the volume of registrations is over a specified limit. If I am using load balancing and one the Signaling Servers drops out what notifications are available. I am going to watch the general heath of the SS but I was thinking if I see some mass registration activity it may point to a problem sooner. I have not found a system message that reports this activity and was wondering if there are any available, or am I limited to looking at registration summaries from the Signaling Server OAM interface?

**Fletch** · 04-30-2008, 05:11 PM

Telephones register to the TPS on the Sig Server, and that unit will generate a trap upon registration. You need to setup the trap destinations in the CS 1000 though. See the NTP on SNMP.

Mike Rixon · 05-06-2008, 05:20 PM

Thanks for the reply Fletch.

I was given the following 3 lines of data that is reporting an IP Phone de-registration as captured from the CLI of the Signaling Server. I was told that this also produced an SNMP trap.

16/04/2008 06:59:12 LOG0004 tRUDPSS: Forwarding for connect Id = 1795989624, error of type = 6 (connection lost).
16/04/2008 06:59:12 LOG0003 tRUDPSS: ITS2008 Terminal connection status: lost IP=47.9.48.41:5000, HWID=180016caf277c86602 (20)
16/04/2008 06:59:12 LOG0006 CSV: Term(1): IP 47.9.48.41 Suspend Connection.

I highlighted what I think should be the system message that would be reported via SNMP trap. Looking at NTP NN43001-712-01.05 I find the following text regarding ITS2008. Note that it does not generate an SNMP trap. If fact none of the ITS events generate traps. It looks like I cannot monitor IP Phone registrations via SNMP trap. I am reading this right?

ITS2008 Terminal connection status: <terminalIP> <ok/lost>.

Action: 1. Alarm may indicate random occurrence that is not service impacting;
note occurrence time and date for further follow-up. If any service-impacting
problems occur at the same time, further analysis is required immediately. 2. If
alarm persists, log into device and capture maintenance report log (if possible)
and send the text to Nortel support staff via email. Follow any steps described
above for the specific alarm.

Severity: Major. Critical to Monitor: No. SNMP trap: No

**Fletch** · 05-06-2008, 05:42 PM

Where did you get that capture?? Those are Nortel IP addresses??

Here is a copy of the 3 traps sent when I rebooted a phone in my lab here.

Code:

Tuesday, May 6, 2008 5:38 PM ITS Notification: "Terminal connection status: ok IP=192.168.13.102:5000, HWID=18001b252f52c36625"  
Tuesday, May 6, 2008 5:38 PM ITS Notification: "192.168.13.102 connecting to node 2000, TN: 096-00-00-04, 0x6040 [Power up, code: 0]"  
Tuesday, May 6, 2008 5:37 PM ITS Notification: "Terminal connection status: lost IP=192.168.13.102:5000, HWID=18001b252f52c36625"

The first is a connection lost, the last 2 are when the phone registers. This is out of my SNMP application I have watching for traps in my lab.

Mike Rixon · 05-07-2008, 05:38 PM

I have been chasing this issue for some time now and I have several guys I know that work for larger service providers that support Nortel CS1000 systems. They did not have an answer and one of them put in a request to Nortel support, hence the Nortel IP addresses in the example. That reply also said that traps were generated but did not name the specific system messages used to report the registration activity.

I see your example and I believe you that traps are generated but I still do not know what message categories are being sent. It looks like an ITS category based on the content of your example but according to the system messages document none of the ITS events generate a trap. I will need to threshold the specific event so that is why I am trying to get the exact system message used. Release 5 uses the common trap MIB and the code I am after should be in OID 1.3.6.1.4.1.562.3.10.10.2.7.

I know this is a bit much to ask but can you do a wireshark capture of the traps and provide the pcap file?

**Fletch** · 05-07-2008, 08:28 PM

This is a 2007 IP phone de-registering and re-registering from my lab. The Trap is from the Sig Server ELAN at 192.168.200.5 to my server.

The 2007 is in my TLAN Subnet 13 at 192.168.13.101. There are 3 traps total to match what I had sent you before. (Not from the same phone though)

Mike Rixon · 05-12-2008, 02:15 PM

Thanks for the pcap file. The three events reported are ITS2008, ITS4011, and ITS5008. I was creating this monitoring solution for CS1000 Release 5.0. The system messages are documented in NN430001-712-01-05 and it states that these events do not generate SNMP traps. After I saw the data capture you sent me I looked at the system messages for CS1000 Release 5.5 and see where all of the ITS messages generate traps where none of the ITS messages generated traps in version 5.0. I assume that your lab CS1000 is running release 5.5? If so then that clears up this issue for me. I will be able to use the SNMP trap messages to support IP Phone registration events only for release 5.5. I can do it for release 5.0 only if I connect to an SDI port. Thanks again….

**Fletch** · 05-13-2008, 09:45 PM

I do run 5.50 in the lab, but those were from my 5.00 system. The NTPs were probably not updated with the correct information. My 4.50 system did not generate these traps.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Avaya 4622 IP Phone "Expired Registration" Message	dr3w	AVAYA	0	05-26-2007 05:45 PM
IP sets and Registration	mark@stjoes	Meridian Systems	3	04-21-2005 09:28 AM
MATWorX IPS 7.0 and Registration	Turk	NEC	2	01-05-2005 02:23 PM
3300 ICP phone registration	switch	Mitel	3	10-24-2004 08:43 PM
Companion Phone Set up / Registration	pbx30	Meridian Systems	2	04-22-2003 11:10 AM

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)