Mitel IP Phones On Cisco 800 Routers

On a recent project to deploy Mitel IP Phones to teleworkers on Cisco 857 Router we came up with a couple of issues, here is the solution.

The config we used for the DHCP was (anon-omized):

!

ip dhcp pool phone

host 10.x.x.x 255.255.255.240 ! IP For the phone

client-identifier 0108.000F.4512.34 ! MAC of the phone prefixed with 01 for ethernet

option 128 ip 10.10.x.x ! Mitel 3300 ICP

option 129 ip 10.10.x.x ! Mitel 3300 ICP

option 130 ascii "MITEL IP PHONE"

option 132 hex 0000.0001 ! VLAN

option 133 hex 0000.0001 ! QoS Priority

default-router 10.x.x.x ! Router Address

dns-server 10.x.x.x 10.x.x.x ! Internal DNS Servers

!

This was all ok, other than the option 130 kept erroring. It turns out that it is a bug in the Cisco IOS - CSCta85026. We had to backdate to:

c850-advsecurityk9-mz.124-6.T9.bin

As

c850-advsecurityk9-mz.124-15.T9.bin

c850-advsecurityk9-mz.124-15.T10.bin

c850-advsecurityk9-mz.124-15.T11.bin

All suffered from the same bug. Although I have recently seen suggestions to put the ascii into HEX which does not suffer. I will give it a try and report back.

Mat

Update: Yes the Hex replacement works;

option 130 hex 4d49.5445.4c20.4950.2050.484f.4e45

Mat

SUNRay to Cisco VPN 28F Error

Whilst configuring some SUNRays to connect via a Cisco "Dial VPN" for a customer, I came across an error on the SUNRay during VPN authentication:

PH1 agg I est 28F

Much googling later I found that lots of people were having this issue but no one appeared to have published an answer. Anyway after some debugging it became apparent that the SUNRay needs a specific transform set:

crypto ipsec transform-set {name} esp-aes esp-sha-hmac

It appears to work very well after this, once you remember to change the MTU down to 1450 (in the UK) to accommodate the VPN headers and DSL etc.

Mat

The Start

Well here we go. I have a blog and now I need to start putting stuff on it rather than just thinking about putting stuff on it…