Author Topic: UCM 6102 system malfunction after two days' use  (Read 99 times)

mbrenneman

  • Jr. Member
  • **
  • Posts: 89
    • View Profile
    • Email
UCM 6102 system malfunction after two days' use
« on: January 11, 2017, 08:14:12 AM »
Good morning.

I installed a 6102 on Sunday along with 8 Yealink phones.  Worked great Monday and Tuesday, then on Wednesday (today) it seemed to go haywire. 

Some of the symptoms:

Calls dropping
Inability to answer calls
Those calls that did succeed had crappy audio quality at least on the outbound side
One extension that had previously registered wasn't registering
One VoIP trunk showed up on the status list as "rejected" when the user name/password had not changed
Client reported that all BLF lights were blinking, indicating that the other phones were offline

I rebooted the UCM and the client's router - no change
I called the carrier to determine whether or not they were having network issues, and they are not  (I have 20 other clients with this carrier, and none of them are having trouble.)

Any thoughts?

Mike

lstutesman

  • Beta Club Members
  • Hero Member
  • *
  • Posts: 1592
  • n2v Solutions LLC
    • View Profile
    • Network to Voice Communications
    • Email
Re: UCM 6102 system malfunction after two days' use
« Reply #1 on: January 11, 2017, 08:25:09 AM »
What have you configured in the firewall for forwards and SIP ALG?
Grandstream Certified Reseller

Lucas Stutesman
902 East 2nd Street
Suite 241
Winona MN 55987
www.n2vs.com
Facebook.com/n2vsolutions

lucas.stutesman@n2vsolutions.com
Phone or fax 507-205-4025
ext 203

Feel free to call for remote installations or assistance!

mbrenneman

  • Jr. Member
  • **
  • Posts: 89
    • View Profile
    • Email
Re: UCM 6102 system malfunction after two days' use
« Reply #2 on: January 11, 2017, 08:26:58 AM »
SIP ALG is off.

Ports 5000 - 5100 UDP
10000 - 20000 UDP
8089 UDP & TCP

All forwarding to the UCM

lstutesman

  • Beta Club Members
  • Hero Member
  • *
  • Posts: 1592
  • n2v Solutions LLC
    • View Profile
    • Network to Voice Communications
    • Email
Re: UCM 6102 system malfunction after two days' use
« Reply #3 on: January 11, 2017, 08:49:09 AM »
What firmware is the phone system using?
Grandstream Certified Reseller

Lucas Stutesman
902 East 2nd Street
Suite 241
Winona MN 55987
www.n2vs.com
Facebook.com/n2vsolutions

lucas.stutesman@n2vsolutions.com
Phone or fax 507-205-4025
ext 203

Feel free to call for remote installations or assistance!

mbrenneman

  • Jr. Member
  • **
  • Posts: 89
    • View Profile
    • Email
Re: UCM 6102 system malfunction after two days' use
« Reply #4 on: January 11, 2017, 08:55:30 AM »
1.0.12.19

There are some other weird things going on, which may or may not have been occurring before the meltdown.

When one phone in the initial ring group is answered, on of the other phones keeps on ringing.

On another phone, there is a multi-second delay between picking up the handset and the call connecting to the inbound call.

I've also noticed that when I call inbound to test with my cell phone, answer one of the phones on the initial ring group, then hang up the handset . . . the call does not disconnect on the cell.

Again, these conditions may have existed prior to this morning's meltdown, but I can't be sure.

lstutesman

  • Beta Club Members
  • Hero Member
  • *
  • Posts: 1592
  • n2v Solutions LLC
    • View Profile
    • Network to Voice Communications
    • Email
Re: UCM 6102 system malfunction after two days' use
« Reply #5 on: January 11, 2017, 09:14:19 AM »
Those symptoms make me wonder if your bandwidth is being eaten up by a registration attack or something like it.
With all those ports open it would allow a lot to hit the PBX wihtout restriction.

Check your alert log
Grandstream Certified Reseller

Lucas Stutesman
902 East 2nd Street
Suite 241
Winona MN 55987
www.n2vs.com
Facebook.com/n2vsolutions

lucas.stutesman@n2vsolutions.com
Phone or fax 507-205-4025
ext 203

Feel free to call for remote installations or assistance!

mbrenneman

  • Jr. Member
  • **
  • Posts: 89
    • View Profile
    • Email
Re: UCM 6102 system malfunction after two days' use
« Reply #6 on: January 11, 2017, 09:34:07 AM »
If I were to tighten up those ranges, what might you recommend?

lpneblett

  • Beta Club Members
  • Hero Member
  • *
  • Posts: 841
    • View Profile
    • Email
Re: UCM 6102 system malfunction after two days' use
« Reply #7 on: January 11, 2017, 02:05:06 PM »
If you can still get into the system, look at the resource monitor relative to the CPU. If 100% or cannot get in, then could be an attack. Disconnect the UCM from the Internet and wait a few seconds and then look at CPU and see if you can get in.

Ports -
Assuming you are using standard settings
5060 UDP (SIP)
8089 TCP (Web, if needed)
10000-11000 UDP. You will need to change this in the UCM (RTP/ voice). As each call requires a port in and the UCM can't handle that many, it will only allow you to narrow the gap to 1000 so there is really no need to have 10000 open. 

mbrenneman

  • Jr. Member
  • **
  • Posts: 89
    • View Profile
    • Email
Re: UCM 6102 system malfunction after two days' use
« Reply #8 on: January 11, 2017, 02:35:01 PM »
Turns out the culprit was  faulty switch.  IT guy came out and replaced it and issues cleared up.

Thanks for the advice on the port forwarding.

Mike

mbrenneman

  • Jr. Member
  • **
  • Posts: 89
    • View Profile
    • Email
Re: UCM 6102 system malfunction after two days' use
« Reply #9 on: January 12, 2017, 07:37:58 AM »
Once things calmed down and I had time to look at the event log, I discovered an event earlier in the day yesterday . . . about the time things started to go haywire.

The alert says, "asterisk process crash happened! The system has automatic recovery, Coredump file create time is: 2017-01-11 08:58:18System crashed. System has restored automatically. Crash type is:Here."  Where "here" is a link to a file I can download.

I downloaded the 122Mb file, but there's no extension and I would have no idea what to do with it.

The system appears to be running normally now - is this something about which I should be concerned or take further action?

Mike

exeyesoftware

  • Beta Club Members
  • Sr. Member
  • *
  • Posts: 429
    • View Profile
Re: UCM 6102 system malfunction after two days' use
« Reply #10 on: January 12, 2017, 08:55:59 AM »
Once things calmed down and I had time to look at the event log, I discovered an event earlier in the day yesterday . . . about the time things started to go haywire.

The alert says, "asterisk process crash happened! The system has automatic recovery, Coredump file create time is: 2017-01-11 08:58:18System crashed. System has restored automatically. Crash type is:Here."  Where "here" is a link to a file I can download.

I downloaded the 122Mb file, but there's no extension and I would have no idea what to do with it.

The system appears to be running normally now - is this something about which I should be concerned or take further action?

I've gotten those on both UCMs that I manage, usually shortly after a firmware upgrade.  The UCMs seem to recover fine, and I've ignored the errors.  I don't know if that's wise.

The coredump files are only of use to Grandstream, I think.

I too am looking forward to learning what others' experiences are.

-jimc