Can anyone tell me what seem to be the problem? My customer has an OS7400 PBX. Recently I see MCP Reset - Exception error, and SVM NTWK Error in alarm history. It seem like the PBX rebooted randomly for the past whole week. Here is what in the alarm history.

MNF33 02/21/2020 16:16:11 SVMi Request C1-S11
MNF35 02/21/2020 16:16:45 SVMi Request End C1-S11
MNF36 02/21/2020 16:16:45 SVMi HDD Alarm C1-S11 00%
MJE36 02/21/2020 16:16:49 SVM NTWK Rec C1-S11
MJA04 02/22/2020 07:14:36 MCP Reset Exception
MNF38 02/22/2020 07:14:36 Card Active C1-S01
MNF38 02/22/2020 07:14:36 Card Active C1-S02
MNF38 02/22/2020 07:14:36 Card Active C1-MP
MNF38 02/22/2020 07:14:36 Card Active C1-S04
MNF38 02/22/2020 07:14:36 Card Active C1-S06
MNF38 02/22/2020 07:14:36 Card Active C1-S07
MNF38 02/22/2020 07:14:36 Card Active C1-S11
MJA05 02/22/2020 07:14:36 LCP Restart CABINET:1
MNF44 02/22/2020 07:14:36 SYS LAN LinkUp
MJE10 02/22/2020 07:14:36 SVMi Restart C1-S11
MNF33 02/22/2020 07:14:36 SVMi Request C1-S11
MJE36 02/22/2020 07:14:39 SVM NTWK Rec C1-S11
MJD19 02/22/2020 07:14:41 PRI Restart C1-S01
MJD24 02/22/2020 07:14:43 L2 Connect C1-S01-L1
MNF35 02/22/2020 07:14:58 SVMi Request End C1-S11
MNF36 02/22/2020 07:14:58 SVMi HDD Alarm C1-S11 00%
MJE36 02/22/2020 07:15:00 SVM NTWK Rec C1-S11
MNF22 02/22/2020 07:15:05 DNS NTP OK
MJE20 02/22/2020 07:15:17 OAS Start C1-S06
MJE35 02/22/2020 15:40:59 SVM NTWK Error C1-S11
MJE36 02/22/2020 15:41:26 SVM NTWK Rec C1-S11
MJE10 02/22/2020 15:41:26 SVMi Restart C1-S11
MNF33 02/22/2020 15:41:26 SVMi Request C1-S11
MNF35 02/22/2020 15:41:59 SVMi Request End C1-S11
MNF36 02/22/2020 15:41:59 SVMi HDD Alarm C1-S11 00%
MJE36 02/22/2020 15:42:01 SVM NTWK Rec C1-S11
MJE35 02/22/2020 19:23:15 SVM NTWK Error C1-S11
MJE10 02/22/2020 19:23:36 SVMi Restart C1-S11
MJE36 02/22/2020 19:23:36 SVM NTWK Rec C1-S11
MNF33 02/22/2020 19:23:37 SVMi Request C1-S11
MNF35 02/22/2020 19:24:09 SVMi Request End C1-S11
MNF36 02/22/2020 19:24:09 SVMi HDD Alarm C1-S11 00%
MJE36 02/22/2020 19:24:13 SVM NTWK Rec C1-S11
MJE35 02/23/2020 06:37:02 SVM NTWK Error C1-S11
MJE10 02/23/2020 06:37:31 SVMi Restart C1-S11
MJE36 02/23/2020 06:37:31 SVM NTWK Rec C1-S11
MNF33 02/23/2020 06:37:32 SVMi Request C1-S11
MNF35 02/23/2020 06:38:04 SVMi Request End C1-S11
MNF36 02/23/2020 06:38:04 SVMi HDD Alarm C1-S11 00%
MJE36 02/23/2020 06:38:10 SVM NTWK Rec C1-S11
MJA04 02/23/2020 08:35:50 MCP Reset Exception
MNF38 02/23/2020 08:35:50 Card Active C1-S01
MNF38 02/23/2020 08:35:50 Card Active C1-S02
MNF38 02/23/2020 08:35:50 Card Active C1-MP
MNF38 02/23/2020 08:35:50 Card Active C1-S04
MNF38 02/23/2020 08:35:50 Card Active C1-S06
MNF38 02/23/2020 08:35:50 Card Active C1-S07
MNF38 02/23/2020 08:35:50 Card Active C1-S11
MJA05 02/23/2020 08:35:50 LCP Restart CABINET:1
MNF44 02/23/2020 08:35:50 SYS LAN LinkUp
MJE10 02/23/2020 08:35:50 SVMi Restart C1-S11
MNF33 02/23/2020 08:35:50 SVMi Request C1-S11
MJE36 02/23/2020 08:35:53 SVM NTWK Rec C1-S11
MJD19 02/23/2020 08:35:55 PRI Restart C1-S01
MJD24 02/23/2020 08:35:57 L2 Connect C1-S01-L1
MNF35 02/23/2020 08:36:14 SVMi Request End C1-S11
MNF36 02/23/2020 08:36:14 SVMi HDD Alarm C1-S11 00%
MNF22 02/23/2020 08:36:18 DNS NTP OK
MJE36 02/23/2020 08:36:19 SVM NTWK Rec C1-S11
MJE20 02/23/2020 08:36:30 OAS Start C1-S06
MJE35 02/23/2020 18:45:35 SVM NTWK Error C1-S11
MJE36 02/23/2020 18:46:13 SVM NTWK Rec C1-S11
MJE10 02/23/2020 18:46:13 SVMi Restart C1-S11
MNF33 02/23/2020 18:46:14 SVMi Request C1-S11
MNF35 02/23/2020 18:46:45 SVMi Request End C1-S11
MNF36 02/23/2020 18:46:45 SVMi HDD Alarm C1-S11 00%
MJE36 02/23/2020 18:46:47 SVM NTWK Rec C1-S11

What are the possible causes for the reboot? IP conflict on the SVMI-20i, or database issue on the MP card? Please advise , thank you!

**I actually found some of our other customers also have similar issue on OS7100, and OS7200. Does anyone else have this issue with their customers?

Did some digging around... and found... there was a possibility that some external source was attempting to flood the phone system. Which caused the processor card out of control, and rebooted the PBX.

Yes we've started seeing this recently, restricting the port forwarding on the firewall to known IPs works.

We have a OS7400 that is having the same issue. Which ports is causing this?

If you have any ports allowed and forwarded from the Internet without filtering you will be a target.
If you have SIP trunks open to 5060 you will need to restrict 5060 to ONLY the SIP carriers IP addresses in your firewall
Using the Management Whitelist helps and also turning off Telnet in the processor
In 5.2.10 Protocol Enable disable Telnet and HTTP
A look at 5.2.21 Access information will show SIP attacks

My 5.2.21 is full, how do you clear that log?
I have 3rd party sip stations ,

I had a system that even after restricting the scope of the firewall to just be my office's public IP, still was resetting with the exception. In the end we arranged a remote desktop connection to the site and shut down the firewall. They didn't have any remote connections though.

-B

I believe it is a rolling list, showing the latest only.
With external 3rd party SIP Whittle down to the smallest network possible ie find the IP address in the SIP status and close the firewall to the subnet that you show the Phone coming from.

The Samsung os7000 don't like network problems.

I had a site which had several pc's with dodgy network card drivers which caused them to flood the network with traffic, this caused the system to restart randomly.

Also had another site where the IT guys had network scanning going that kept hitting the system causing it to restart.

Also as others have said with sip ports being open especially on versions before 4.7x can cause issues