System is CS-5200. At least weekly, and almost daily, the system crashes, with no inbound/outbound calls accepted, system admin handset reads "Sys Alarm #112 - Call Technician".
A physical reboot and system OK again, though it appears to be recurring with greater frequency.
Some sections of pertinent log files below. Any assistance is greatly appreciated. Just found this resource online, looking forward to using it in the future.
Thanks!
> ----- START OF RESET LOG -----
>
> 12:51 08-08 MAJOR RESET: Database Restore Complete
> 12:50 08-08 MAJOR RESET: Code Change
> 02:11 08-08 MAJOR RESET: Power-Up
> 12:06 08-07 MAJOR RESET: Power-Up
> 11:50 08-06 MAJOR RESET: Major Reset From Software Watchdog Thread
> 11:38 08-05 MAJOR RESET: Power-Up
> 03:09 08-05 MAJOR RESET: Power-Up
> 16:56 08-04 MAJOR RESET: Power-Up
> 12:38 08-03 MAJOR RESET: Database Restore Complete
> 12:37 08-03 MAJOR RESET: Code Change
> 16:33 07-29 MAJOR RESET: Power-Up
> 09:57 07-27 MAJOR RESET: Power-Up
> 20:31 07-26 MAJOR RESET: Power-Up
> 18:19 07-24 MAJOR RESET: Reset Due to User Requested Reboot
> 07:53 07-15 MAJOR RESET: Reset Due to User Requested Reboot
> 23:17 07-10 MAJOR RESET: Power-Up
> 14:38 07-09 MAJOR RESET: Database Restore Complete
> 14:36 07-09 MAJOR RESET: Code Change
> 14:34 07-09 MAJOR RESET: Power-Up
> 09:29 07-07 MAJOR RESET: Power-Up
> 10:06 07-05 MAJOR RESET: Database Restore Complete
> 10:04 07-05 MAJOR RESET: Code Change
-01:206- 12:52 08-08 M2002 INF HW CP [3.4.0]: On-Line From Loopstart Port
-01:207- 12:52 08-08 M3008 INF EG SS [1.0.0]: Print String Response From PRI Board : T1/E1/PRI application version: 2.1.4
-01:208- 12:52 08-08 M3008 INF EG SS [1.0.0]: Print String Response From PRI Board : T1/E1/PRI application build date/time: Fri Sep 29 2006 12:53:58
-01:209- 12:52 08-08 M8000 SVR HW CP Initial Trouble Condition Detected on PRI Board [1.0.0]
-01:210- 12:52 08-08 M8001 SVR HW CP PRI Board Problem: Receiving Yellow Alarm
-01:211- 12:52 08-08 M5086 WRN HW CP Hourly Threshold For Bipolar Violation Errors Exceeded on PRI Board [1.0.0]
-01:212- 12:52 08-08 M5086 WRN HW CP Hourly Threshold For Out-of-Frame Adjustment Errors Exceeded on PRI Board [1.0.0]
-01:213- 12:52 08-08 M5086 WRN HW CP Daily Threshold For Out-of-Frame Adjustment Errors Exceeded on PRI Board [1.0.0]
-01:214- 12:52 08-08 M8002 SVR HW CP Initial Trouble Condition Cleared on PRI Board [1.0.0]
-01:215- 12:52 08-08 *** PRI Card 1 state changed from Powerup-Wait to Working
Ouch, and sorry for the formatting.
[code]> ----- START OF RESET LOG -----
>
> 12:51 08-08 MAJOR RESET: Database Restore Complete
> 12:50 08-08 MAJOR RESET: Code Change
> 02:11 08-08 MAJOR RESET: Power-Up
> 12:06 08-07 MAJOR RESET: Power-Up
> 11:50 08-06 MAJOR RESET: Major Reset From Software Watchdog Thread
> 11:38 08-05 MAJOR RESET: Power-Up
> 03:09 08-05 MAJOR RESET: Power-Up
> 16:56 08-04 MAJOR RESET: Power-Up
> 12:38 08-03 MAJOR RESET: Database Restore Complete
> 12:37 08-03 MAJOR RESET: Code Change
> 16:33 07-29 MAJOR RESET: Power-Up
> 09:57 07-27 MAJOR RESET: Power-Up
> 20:31 07-26 MAJOR RESET: Power-Up
> 18:19 07-24 MAJOR RESET: Reset Due to User Requested Reboot
> 07:53 07-15 MAJOR RESET: Reset Due to User Requested Reboot
> 23:17 07-10 MAJOR RESET: Power-Up
> 14:38 07-09 MAJOR RESET: Database Restore Complete
> 14:36 07-09 MAJOR RESET: Code Change
> 14:34 07-09 MAJOR RESET: Power-Up
> 09:29 07-07 MAJOR RESET: Power-Up
> 10:06 07-05 MAJOR RESET: Database Restore Complete
> 10:04 07-05 MAJOR RESET: Code Change
-01:206- 12:52 08-08 M2002 INF HW CP [3.4.0]: On-Line From Loopstart Port
-01:207- 12:52 08-08 M3008 INF EG SS [1.0.0]: Print String Response From PRI Board : T1/E1/PRI application version: 2.1.4
-01:208- 12:52 08-08 M3008 INF EG SS [1.0.0]: Print String Response From PRI Board : T1/E1/PRI application build date/time: Fri Sep 29 2006 12:53:58
-01:209- 12:52 08-08 M8000 SVR HW CP Initial Trouble Condition Detected on PRI Board [1.0.0]
-01:210- 12:52 08-08 M8001 SVR HW CP PRI Board Problem: Receiving Yellow Alarm
-01:211- 12:52 08-08 M5086 WRN HW CP Hourly Threshold For Bipolar Violation Errors Exceeded on PRI Board [1.0.0]
-01:212- 12:52 08-08 M5086 WRN HW CP Hourly Threshold For Out-of-Frame Adjustment Errors Exceeded on PRI Board [1.0.0]
-01:213- 12:52 08-08 M5086 WRN HW CP Daily Threshold For Out-of-Frame Adjustment Errors Exceeded on PRI Board [1.0.0]
-01:214- 12:52 08-08 M8002 SVR HW CP Initial Trouble Condition Cleared on PRI Board [1.0.0]
-01:215- 12:52 08-08 *** PRI Card 1 state changed from Powerup-Wait to Working
[/code]
Alarm 112 indicates the system is running low on System Dynamic Memory. Contact your dealer for assistance.
I have contacted our dealer for assistance, though he wants to replace the whole phone system. I'm looking for an outside opinion.
There is only one other authorized dealer in the area, and we had a bad experience with them.
Where are you located, someone from here may be near by.
Your system is exhibiting a known issue with some PM-1 modules. I would recommend swapping it out first and foremost.
Thanks. If I tell my local dealer I want to try replacing the "PM-1 module", he should know what I'm talking about, correct?
Appreciate the guidance guys.
-Jimmy
He/She definitely "should".
Thanks. I have an email in to him.
In the meantime, we have had to reboot the system twice this morning. I checked our gateway/firewall logs and I see numerous attacks. The alarm we receive - 112 - indicates the log needs to be cleared.
Any thoughts? My local service provider here continues to tell me he thinks it's hardware and that these attacks are probably not related, but I think I may need a second opinion.
[img]https://www.newsouthsupply.com/files/attach.png[/img]
Hmmm...
Ours started dong that after we connected to a leased line (for lots of external 'remote' users). We spent a good while with the provider suggesting hardware until they finally got an Intertel Expert to look at it who got us to change our firewall rules.. now it doesn't happen.
We have forwarded to Mitel.
MGCP port 2427
OAI port 4000
Call control 5566 and 5567
Voice 6000-8000 UDP
Your ports may differ - check with your provider.
I cured my problem.
-Smon
That is very similar to the firewall ports we have open, though on the image I sent yesterday, they were hammering 5566 with a syn flood.
Will wait to see if it happens again, and try to confirm that this is indeed the issue.
May need to look into IDP devices to put in front of that router.
Try disabling the SIP UDP Listening Port as well. You will also want to change the port to something other than the default of 5060.
Here is a link to a post that discusses it a little more
https://sundance-communications.com...Re_Inter_Tel_system_shutsdown_#Post65299
I second that; my Mitel BOD was very specific about 5060 - he said never open that on our system!!! Because we do not need it and it is a target for attack by 'free calls on SIP' scroungers.
- Simon