Autoprovision Cisco5xx - Specific Model 504G

hisheeraz

Member
Sep 8, 2020
47
2
8
Sydney, AU
Hi Guys, I need help. Auto Provision is not working.
Manual provision work and no issue making outbound or receiving inbound calls.
Server is hosted in the cloud.

Here is what I have done so for following various threads in this forum.

In Advanced>default settings under provision
Set enabled to true
Set "http_auth_enabled" to true
Set "http_auth_username" username setup
Set "http_auth_password" password is setup

In Accounts>Devices
Add new entry
Enter MAC address of phone
Select a template and saved

In Accounts extensions I have assigned previously added phone/mac to an extension

HTTPS is disabled in Cisco504G

and here is my autoprovision url

Code:
http://this.is.my.domain.com/app/provision/?mac=$MA

When I visit the following url

Code:
http://this.is.my.domain.com/app/provision/CISCO504GMAC.cfg

I get username and password prompt. When I enter un/pw that I created in default settings the cfg file downloads successfully.

I know I am not far off but I have no clue where to go from here. Please help. Thanks.
 
Jan 9, 2018
78
11
8
51
Provided that your provisioning template is valid and that device is configured in FusionPBX, it should work. But the syntax is a bit different for the SPA phones. Here's how I provision SPA devices: Determine the IP address (192.168.0.130 in this example), then browse to:
http://192.168.0.130/admin/resync?[--uid user --pwd password]http://mydomain.com/app/provision/?mac=$MA
Replace the IP address with the phone's address, the user/password with yours, and the correct domain name.

However, you have to URL encode the second half of it, so it actually looks like this:

http://192.168.0.130/admin/resync?%5B--uid%20user%20--pwd%20password%5Dhttp%3A%2F%2Fmydomain.com%2Fapp%2Fprovision%2F%3Fmac%3D%24MA

This makes it super simple to do one-click provisioning on these phones.

If it still doesn't work, check your nginx access and error logs to see if the phone is requesting the config file. If it is requesting the file accurately, then verify that the config file doesn't have errors in it. If it does, then your provisioning template may be bad for that device.

Oh, and make sure you are on current firmware on the phone.
 

DigitalDaz

Administrator
Staff member
Sep 29, 2016
2,599
442
83
So now use ngrep to check port 80 something like:

Code:
ngrep -dany port 80 -W byline

Try and provision the phone and watch ngrep for the requests hitting your box.

The next question is, is this a standard Debian install?
 

hisheeraz

Member
Sep 8, 2020
47
2
8
Sydney, AU
1615973769973.png

no traffic hits while I monitor sngrep. Firewall is completely OFF and Box is open to the internet.

Debian version is
1615973905525.png

When I manually configure the Phone

1615974310083.png

Then I do get a hit on sngrep

1615974325232.png

Following this when I head over to Provision section of the pbx and click on Provision (of the same SPA504G)
1615974698693.png

I do get the following hit on sngrep again
1615974619330.png


Any thoughts please...
 

Attachments

  • 1615974266632.png
    1615974266632.png
    186.7 KB · Views: 1

hisheeraz

Member
Sep 8, 2020
47
2
8
Sydney, AU
In the profile rule I am using this format
1615974860334.png

I have disabled auth_user and password settings in default settings.
1615974974297.png

and I can access the the following url in the web browser without any user/pw and config files opens

 
Jan 9, 2018
78
11
8
51
Check for any activity from that phone in your nginx access.log or error.log. If you are not seeing activity, then the problem is not the provisioning template, but some other issue.

Try the command @DigitalDaz suggested, since that targets http activity. (sngrep targets SIP messages, but in this case we're interested in http.)

Since you can directly access the config file from a browser, try it again in the browser using the format you specified in the Profile Rule:
http://pbx.domain.net.au/app/provision/?mac=CISCO504GMAC
 

hisheeraz

Member
Sep 8, 2020
47
2
8
Sydney, AU

Attachments

  • 1616021752400.png
    1616021752400.png
    4.3 KB · Views: 0
Jan 9, 2018
78
11
8
51
Two things:
  • When you add/update the Profile Rule, are you restarting the phone afterwards or otherwise triggering it to provision itself? The resync command I gave you earlier will both set the Profile Rule AND cause the phone to reach out for provisioning.
  • Earlier, where I advised you to try this:
    Code:
    http://pbx.domain.net.au/app/provision/?mac=$MA
    in your browser, make sure that you replace "$MA" with your actual mac address. That is why you are getting the "invalid mac address" message.
 
  • Like
Reactions: DigitalDaz

hisheeraz

Member
Sep 8, 2020
47
2
8
Sydney, AU
When I add/update profile rile, I donot reboot, Should I?

PBX in the the cloud and I amd testing from home (Internet in between me and pbx)

I missed out on rsync command and cannot find it in the above thread, please share again.

Yes i tried
In the browser 1616023595401.png
and I get the site cannot be reached. Also no activity on ngrep screen
 
Jan 9, 2018
78
11
8
51
Code:
http://192.168.0.130/admin/resync?%5B--uid%20user%20--pwd%20password%5Dhttp%3A%2F%2Fmydomain.com%2Fapp%2Fprovision%2F%3Fmac%3D%24MA
Make sure to replace:
  • IP address with your phone's IP
  • user with your user
  • password with your password
  • domain - make sure you leave in the "%3A%2F%2F" before it.
If you want to try it with no user/pw, use this:
Code:
http://192.168.0.130/admin/resync?http%3A%2F%2Fmydomain.com%2Fapp%2Fprovision%2F%3Fmac%3D%24MA

If you are getting "site cannot be reached" in your browser, then you did something wrong. Double check the domain and possibly your DNS.
 

DigitalDaz

Administrator
Staff member
Sep 29, 2016
2,599
442
83
You could possibly have been banned too by fail2ban if its been getting invalid mac address.
 

hisheeraz

Member
Sep 8, 2020
47
2
8
Sydney, AU
so here is what I am using in Resync Trigger 1 profile

Code:
http://192.168.100.16/admin/resync?http%3A%2F%2FMYDOMAIN.net.au%2Fapp%2Fprovision%2F%3Fmac%3D%24MA

Profile Rule

Code:
http://pbx.domain.net.au/app/provision/?mac=$MA

No Joy, No activity on ngrep
 

hisheeraz

Member
Sep 8, 2020
47
2
8
Sydney, AU
Hi @DigitalDaz @Jonathan Black and all other colegues

Not working with below settings
1616074105912.png

But when I changed to following it works every time. The phone auto provision and goes online no problem. I have reset the phone to factory settings many many time, more than I can remember and applied below settings for auto provision and it worked every time.
1616074118820.png

here is nginx access log

Code:
123.456.789.101 - - [19/Mar/2021:00:00:13 +1100] "GET /app/provision/?mac=SPA504GMAC HTTP/1.1" 200 47141 "-" "Cisco/SPA504G-7.6.2g (SPA504GMAC)(NOTSUREWHATTHISIS)"

Here is the nginx access log after provision line above
Code:
127.0.0.1 - xCVWHEigwGEzF3T8Y2QUTQAZmcc [19/Mar/2021:00:11:29 +1100] "POST /app/xml_cdr/v_xml_cdr_import.php?uuid=a_8f2aca78-ed71-4ff1-add4-272dd233bc1c HTTP/1.1" 200 5 "-" "freeswitch-xml/1.0"
127.0.0.1 - xCVWHEigwGEzF3T8Y2QUTQAZmcc [19/Mar/2021:00:11:47 +1100] "POST /app/xml_cdr/v_xml_cdr_import.php?uuid=a_f3abca7d-c48f-4cd4-af83-9ff30d20dc63 HTTP/1.1" 200 5 "-" "freeswitch-xml/1.0"
46.219.119.65 - - [19/Mar/2021:00:18:54 +1100] "GET / HTTP/1.1" 301 185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
127.0.0.1 - xCVWHEigwGEzF3T8Y2QUTQAZmcc [19/Mar/2021:00:21:25 +1100] "POST /app/xml_cdr/v_xml_cdr_import.php?uuid=a_0308e166-c78d-4848-8c43-c01f28dae55d HTTP/1.1" 200 5 "-" "freeswitch-xml/1.0"

Moving forward, what effect would this have on call duration? Will the call randomly dropout? I have made 2 phone calls to my mobile, one call dropped out at 8 minutes 56 seconds and second call 9 minutes and 27 seconds. Could the above changes be causing this?

Secondly BLF functionality is not working in PBX Device/Provision section. When I press Provision, the BLF key does not get programmed.

Any thoughts?
 

Attachments

  • 1616073265075.png
    1616073265075.png
    69.8 KB · Views: 1
  • 1616073297655.png
    1616073297655.png
    75.7 KB · Views: 1

hisheeraz

Member
Sep 8, 2020
47
2
8
Sydney, AU
Hi,

I have got the BLF working with the following syntex

Code:
fnc=blf+sd+cp;sub=101@$PROXY

and direct external call

Code:
fnc=sd;ext=NUMBER-WITH-AREACODE

1616076646611.png

Now if some one can shed some light please, why the calls are dropping? PLEASE
 
Jan 9, 2018
78
11
8
51
Glad you got the provisioning working! Make sure you re-enable authentication.

I am using 0 in "Resync Periodic". This field is only for if you want the phone to reach out and reprovision automatically every X seconds. In most cases, that's not needed.

But I doubt this is causing the call to drop. That's a different issue and may well be unrelated to provisioning.