Cisco - Gateway to Gatekeeper (H.235) and ... - VOIP Information

Cisco - Gateway to Gatekeeper (H.235) and Gatekeeper to Gatekeeper (IZCT) Security Troubleshooting Guide!--- all endpoints and calls, the gatekeeper will reject the gateway request, sendingan RRJ!--- with securityDenial reason.*Mar 2 13:32:45.525: RAS OUTGOING PDU ::=value RasMessage ::= registrationReject :{requestSeqNum 2protocolIdentifier { 0 0 8 2250 0 3 }rejectReason securityDenial : NULL!--- Gatekeeper rejects the RRQ with security denial reasongatekeeperIdentifier {"gka-1"}}*Mar 2 13:32:45.529: RAS OUTGOING ENCODE BUFFER::= 14 800001060008914A 00038301 00080067 006B0061 002D0031*Mar 2 13:32:45.533:!--- We'll now configure the security password 2222 level all command on the gateway.!--- The configuration of the gateway will appear as follows:!gatewaysecurity password 0356095954 level all!--- The password will be hashed!!--- As soon as you make this change the gateway will send a new GRQ to thegatekeeper.!--- This time you will see the authenticationCapability and algorithmOIDs.*Mar 2 13:33:15.551: RAS INCOMING ENCODE BUFFER::= 02 A00002060008914A 000200AC 100D0FD2 C6088001 3C050401 00204002 00006700 6B0061002D003102 400E0067 00770061 002D0031 00400063 00690073 0063006F 002E0063006F006D 0080CC0C 30020120 0A01082A 864886F7 0D0205*Mar 2 13:33:15.563:*Mar 2 13:33:15.567: RAS INCOMING PDU ::=value RasMessage ::= gatekeeperRequest :{requestSeqNum 3protocolIdentifier { 0 0 8 2250 0 2 }rasAddress ipAddress :{ip 'AC100D0F'Hport 53958}endpointType{gateway{protocol{voice :{http://kbase:8000/paws/servlet/ViewFile/18729/gw_security.xml?convertPaths=1 (12 of 49) [12/2/2003 5:34:20 PM]