Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - fcutler

Pages: [1] 2 3 ... 5
1
Mitel Software Applications / Re: MBG, NuPoint SSH lockout
« on: January 21, 2016, 02:50:02 PM »
Thanks Navarre, that was it. I looked at the denyhosts file but nothing was there. The IP was in the hosts.blocked file however. Cheers!

2
Mitel Software Applications / MBG, NuPoint SSH lockout
« on: January 21, 2016, 01:05:21 PM »
Does Mitel Standard Linux block an IP address of a host after failed attempts to login via SSH? I know with the NuPoint server if you enter credentials incorrectly a number of times you'll get locked out and have to run /usr/bin/vm/unlocksona to unlock the account. What about the Mitel Border Gateway? If so how can this be reset or removed so a particular host has access again?

I created an account for security scans on the MBG and it is not able to connect from a particular IP address. I can use that account from other hosts so I know it is not a credential issue. Also about a week ago I was unable to SSH to the MBG from my computer for a day or two. I don't recall the PuTTY message when trying to connect, I think it said something like "connection refused". After a couple days however I tried again and was able to log in via SSH.

3
There are only the 2 PRI trunks, I am not aware of an LS trunk so I'm pretty certain they are only going out the PRI's.

I tested for answer supervision and the display did not update until answered for calls to the cell, a magic jack # and local number. When answered the display changed to "PRI".

I was told by our vendor that changing the test COS Public Trunk option to Yes would it would work. I tested that however and it did not. He also was unsure of the repercussions of enabling this option were as am I.

4
I've been scratching my head for a while now.

I checked and no features were active. I used the FAC to set CF NA Ext.& Int. but it still went to the cell phone VM. I double checked in maintenance Cmds and the CF NA was active.

It's strange because I don't recall this being the behavior previously. It seems to have suddenly changed and I have no idea why. Thanks again.

5
"I have to assume that your cell phone is actually ringing.  If the cell phone is out of service it will go to it's voice mail.  There isn't an option there."

Yes, the cell phone is ringing and in service.

"You forward your set on an always condition to the cell. It's going out PRI trunks, correct?  (or SIP?)"

2 PRI trunks using the same COS and both for inbound/outbound.

"Test by clearing your second alt and your 1st alt is "THIS" across the board."

2nd alt cleared and 1st alt set to THIS across the board. This works when calling inbound across the trunks and the set has CF always to the cell turned on. It goes to the set's VM.

"Check the COS of the inbound trunk and the COS of the phone to be sure they're different enough so that you can tell which one is in use. If you testing internally then use a unique COS for the forwarded phone for the testing phase."

Changing the trunk COS (call forwarding no answer timer) affects calls inbound on the trunks with CF always on. However when calling the set internally, from another set, the call goes to the cell's VM. Changing either the test COS the set is in or the trunk COS does not change this.

The test COS call forwarding no answer timer seems to only affect calling the set when call forwarding is off. As soon as CF always is on the trunk COS timer comes into play, but only when calling the sets outside line, not internally. Am I missing another timer somewhere?

Thanks for your help and input, I really appreciate it!

6
I was testing with my extension and there was a 2nd call reroute, also set to the Nupoint pilot number. However the call rerouting timer in system options did not reroute to my VM when changed. I've removed the 2nd call reroute.
I was able to get external calls to my extension (with call forwarding on) to reroute by removing the CF options from my phone, a 5340 btw. I had been using the Superkey so I removed all CF features from there. I found this in the help files:
"The Call Forwarding application on the 5330/5330e and 5340/5340e IP Phones is unaware of call forwarding state changes made by other methods such as Superkey. To avoid confusion, always use the Call Forwarding application to program call forwarding on the 5330/5330e and 5340/5340e IP Phones."
It still doesn't reroute when calling internally. If I call my extension from another extension and my extension is forwarded to my cell it still goes to the cell VM. I tried setting the CFNA on the CF app on the phone but that did not change the behavior. I'm not sure what is controlling this scenario, I thought it would be the trunk COS?

7
The trunks COS had the CFNA timer set to 15. I changed it to 12 and 5 for the heck of it and the call forwarding still went to the cell phone voicemail.

8
Ralph, that is correct.

9
I looked around and there are many posts on call forwarding but I couldn't find this answer. It used to be that when a station had call forwarding always (CFA) set and there was not answer the call would return to the extension's VM, not the destination's. Now however calls are going to the destination VM (cell phone). I've checked the following forms.

System options > call rerouting timer=12
COS call fwd no answer timer=12
COS ringing timer=180
Call rerouting 1st alt.=1200 (Nupoint pilot #)

I created a copy of the IP phone COS and enabled CFA to my cell phone and have been changing timers and testing but it's just not working. I'm hopeing someone can point out what I'm missing or get me in the right direction. Thanks.

10
Mitel Software Applications / Re: MSL service account
« on: December 18, 2015, 04:02:20 PM »
Centene Corp. recently bought our company and they are unfamiliar with Mitel systems. The statement came from a security engineer because they are scanning for everything. Even though it's Mitel Linux they want a thorough vulnerability report on the system. I know it's overboard however it's their protocol. Also I am not really an expert myself with Mitel systems so I am not able to fully or eloquently inform or persuade them of the system's security.

11
Mitel Software Applications / Re: MSL service account
« on: December 18, 2015, 03:08:33 PM »
Navarre, the scanner requires access to the whole filesystem. This is what I'm told by the security team involved. Thanks for the info on what MSL is built on, good to know.

12
Mitel Software Applications / Re: New Admin 3300 Oaisys Issues
« on: December 17, 2015, 06:19:32 PM »
Do you have a PRI that the 3300 connects to? If so does your Oaisys server have a T1 card in it? This setup will record all inbound/outbound calls by connecting directly from the PRI.

Sarond's reply best explains extension to extension call recording and is the reason we decided not invest in internal call recording just for a few extensions.

13
Mitel Software Applications / MSL service account
« on: December 17, 2015, 06:10:28 PM »
If a user is created by root in MSL (Border Gateway, NuPoint ver. 10.0.43) and added to the wheel group will this provide appropriate access as a service account for a security/vulnerability scanner? In this case Nexpose. On that note does anyone know what branch of Linux MSL is built off of?

14
Matthew, thanks for the clarification, I was unsure what markyb73 was referring too. I should have inquired. I sorted alphabetically and found the form and made the change.

15
The 3300 IP change was straightforward we just had to turn off commands that forced the port to be an access point on the Juniper switch core port since the 3300 has a layer 2 switch.

The Nupoint IP change was also straightforward but the ports were out of service initially. I didn't realize in the Line Groups configuration those ports device association to the PBX had the IP address so that needed to be updated.

Oaisys just needed the CTI link updated to the new IP address the the Mitel service restarted.

One issue I'm still dealing with is the 5550 IP console. I've removed the software and reinstalled so I can run the configuration wizard however when it searches for ICPs it thinks there are 2 and defaults to the old IP address. The log viewer also show it trying to connect to that address and I'm wondering where it's pulling that info from.

Pages: [1] 2 3 ... 5