Introduction
This document describes the new features, system requirements, licensing information, and caveats for Cisco Unified SIP Proxy Release 10.2.x. Use this document in conjunction with the caveats listed in Caveats.
Cisco Unified SIP Proxy is a high-performance, highly available Session Initiation Protocol (SIP) server for centralized routing and SIP signaling normalization. By forwarding requests to call-control domains, Cisco Unified SIP Proxy provides the means for routing sessions within enterprise and service provider networks. Cisco Unified SIP Proxy provides multiple features, including SIP trunk aggregation, name resolution, routing, load balancing, scalability, and High Availability.
Cisco Unified SIP Proxy 10.2.x is delivered as an Open Virtual Appliance (OVA) and can be installed as a virtual machine on VMware ESXi platform. For more information on virtual machine requirements to install Cisco Unified SIP Proxy Release 10.2.x, see Virtual Machine Requirements for Cisco Unified SIP Proxy 10.2 Cisco Unified SIP Proxy Release 10.2.x supports CISCO-USP-MIB through SNMP.
System Requirements
Virtual Machine Requirements for Cisco Unified SIP Proxy 10.2.x
Cisco Unified SIP Proxy Release 10.2.x software is packaged as an OVA. Refer to Table 1 of VMware ESXi with CUSP release. Table 2 provides the information on hardware recommendation for virtualized Cisco Unified SIP Proxy.
Note |
Since VMware has declared end of general support for VMware ESXi version 6.0 and below, we recommend vCUSP 10.2.x users to migrate to ESXi version 6.5 or above. |
CUSP Release | VMware ESXI Release |
---|---|
10.2.0 | 5.5 and above |
10.2.1 | 6.5 and above |
10.2.2 | 6.5 and above |
For more information about deployment and configuration, see Installation Guide for Cisco Unified SIP Proxy Release 10.2.
CPS |
60 CPS |
100 CPS |
200 CPS |
300 CPS |
400 CPS |
---|---|---|---|---|---|
vCPU |
1 |
2 |
4 |
4 |
4 |
RAM |
6 GB |
6 GB |
6 GB |
6 GB |
6 GB |
Disk |
80 GB |
80 GB |
80 GB |
80 GB |
80 GB |
Note |
CPU speed is greater than or equal to 2.99 GHz. |
CPS |
60 CPS |
100 CPS |
200 CPS |
300 CPS |
400 CPS |
---|---|---|---|---|---|
vCPU |
1 |
2 |
4 |
4 |
4 |
RAM |
6 GB |
6 GB |
6 GB |
6 GB |
6 GB |
Disk |
80 GB |
80 GB |
80 GB |
80 GB |
80 GB |
Note |
|
Determining the Software Version
To determine the software version and the license used, perform the following steps:
Procedure
Step 1 |
Enter the following command to display the Cisco Unified SIP Proxy software version:
|
Step 2 |
Enter the following command to display the Cisco Unified SIP Proxy software license:
|
File Packages for Cisco Unified SIP Proxy Release 10.2.x
Release 10.2
The following package is available for Cisco Unified SIP Proxy Release 10.2.x:
-
cusp-k9.vmw.10.2.0.ova
Release 10.2.1
The following package is available for Cisco Unified SIP Proxy Release 10.2.1:
-
cusp-k9.vmw.10.2.1.ova
Release 10.2.1_v1
The following patch update is available for Cisco Unified SIP Proxy Release 10.2.1_v1:
-
vCUSP_10.2.1_v1.cop.sha512
Note |
Ensure to follow the installation steps from the README file that is available with the vCUSP_10.2.1_v1.cop.sha512 patch. |
Release 10.2.1_v2
The following patch includes updates for the Log4j component (version 2.16) in Cisco Unified SIP Proxy Release 10.2.1_v2:
-
vCUSP_10.2.1_v2.cop.sha512
Note |
Ensure to follow the installation steps from the README file that is available with the vCUSP_10.2.1_v2.cop.sha512 patch. |
Release 10.2.1_v3
The following patch includes updates for the Quovadis certificate decommission in Cisco Unified SIP Proxy Release 10.2.1_v3:
-
vCUSP_10.2.1_v3.cop.sha512
Note |
|
Release 10.2.2
The following package is available for Cisco Unified SIP Proxy Release 10.2.2:
-
cusp-k9.vmw.10.2.2.ova
License Information
Cisco Smart Software License
Cisco Smart Software Licensing is a standardized licensing platform that facilitates you to deploy and manage Cisco software licenses easily and quickly. Cisco Smart Software Licensing establishes a pool of software licenses that can be used across your network in a flexible and automated manner. It also provides visibility to your purchased and deployed licenses in your network. Cisco Smart Software Licensing removes the need for Product Activation Keys (PAKs) and reduces your license activation and registration time.
For more information on configuring smart licensing using GUI and CLI, see GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2 and CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2.
Open Source Licensing
Some components of the software created for Cisco Unified SIP Proxy Release 10.2.x are provided through open source or commercial licensing. These components and the associated copyright statements can be found at:
https://www.cisco.com/c/en/us/about/legal/open-source-documentation-responsive.html.
New Features and Enhancements
Release 10.2
The following features and enhancements are introduced in Cisco Unified SIP Proxy Release 10.2.x:
-
Patch Upgrade—You can install a patch file on an existing major release version of Cisco Unified SIP Proxy starting with Cisco Unified SIP Proxy Release 10.2.x. This helps you upgrade to a newer patch version of the Cisco Unified SIP Proxy within the same major release version without any modifications to your existing virtual machine. For example, you can upgrade from Cisco Unified SIP Proxy Release 10.2.x to Cisco Unified SIP Proxy Release 10.2.1_v1 or Cisco Unified SIP Proxy Release 10.2.1_v1 to Cisco Unified SIP Proxy Release 10.2.1_v2.
For detailed information on patch upgrade, see Installation Guide for Cisco Unified SIP Proxy Release 10.2. For details on installing patch using CLI, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2. For details on installing patch using GUI, see GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2.
-
Updates to minimum password length and password policy—Passwords should be at least 8 to 64 alphanumeric characters in length. However, there is no limit on the maximum length of the password. The administrator has the privileges to provision a user with password length that is higher than the minimum length. For example, a user can have password of length 65 alphanumeric characters.
-
SFTP File Transfer— The Cisco Unified SIP Proxy now uses Secure File Transfer Protocol (SFTP) for transferring device configuration and templates to and from external networks. Functions such as patch upgrade, back up and restore, upload and copy of system configuration files and logs between CUSP server and external servers are performed only through secured FTP. Please note that FTP is deprecated from release 10.2.x.
New and Modified CLI Commands
New and Modified CLI Commands in Cisco Unified SIP Proxy Release 10.2
The following new commands are introduced in Cisco Unified SIP Proxy Release 10.2:
-
software download url<url> username<username> password<password>
-
software upgrade
For more details on these commands, see the Module Commands for Cisco Unified SIP Proxy section of the CLI Command Reference for Cisco Unified SIP Proxy Release 10.2.
New CLI Commands in Cisco Unified SIP Proxy Release 10.2.2 release
The following new commands are introduced in Cisco Unified SIP Proxy Release 10.2.2 and are aplicable only for 10.2.2 version and above:
-
show cpu-usage history[60-minutes | 60-seconds | 72-hours]
-
show cps history[60-minutes | 72-hours]
-
show memory-usage history[60-minutes | 60-seconds | 72-hours]
-
show 5-minutes cps-history72-hours
-
show disk-usage
Limitations and Restrictions
Cisco Unified SIP Proxy Release 10.2 has the following restrictions:
-
Changing the default log file size impacts the performance of Cisco Unified SIP Proxy.
-
High availability of Cisco Unified SIP Proxy virtual machine on both Cisco UCS and Cisco UCS-E platform is not supported.
-
Cisco Unified SIP Proxy Release 10.2 does not support installation of VMware Tools or any 3rd party tools in a Linux environment.
-
Configuring Fast Ethernet 02 Interface is not supported.
-
From Cisco Unified SIP Proxy Release 10.0 onwards, the directory structure presented to the FTP users is changed. As a result, importing route table from an XML file will not work. We recommend users to utilize the Add Route function in the vCUSP GUI for this purpose.
Caveates
Caveats describe unexpected behavior in Cisco Unified SIP Proxy Release 10.2.x. To see the caveats associated with Cisco Unified SIP Proxy Release 10.2.x, use the Bug Search Tool at:https://tools.cisco.com/bugsearch/search.
Caveats Resolved in Release 10.2
The following issues were resolved in Cisco Unified SIP Proxy Release 10.2:
Caveat | Description |
---|---|
CSCvt27743 | Evaluation of unified-sip-proxy for Apache Tomcat Ghostcat vulnerability |
CSCvr40548 | CIAM Alerts on BIND component |
CSCvs28900 | Super thread crash due to memory leak caused by DNS Java |
CSCvs48121 | User cannot SSH into CUSP after the user is assigned for FTP access and removed from same |
CSCvs54756 | Timezone is not updated on changing Country in Time Zone Settings GUI page |
CSCvs79888 | Changing the CUSP to LITE mode for CUSP 10.0 is not available |
CSCvs88460 | CUSP 10.1 login not working via RADIUS |
CSCvt45242 | CUSP 10.0 and 10.1 SIP logs show GMT time zone instead of local time zone synched from NTP server |
CSCvt76985 | Missing Trace Log File header in 10.x version |
CSCvu40336 | Multiple Vulnerabilities in bind |
CSCvu47993 | vCUSP 10.1: Post reload ping/SSH/GUI stop working until CLI is accessed through ESXi console |
CSCvs65917 | Restore operation does not work when only 1 entry is present in the table |
CSCvs77007 | Domain Name Config in Setup Wizard not taking effect |
CSCvs78604 | Cannot clear the trace log file from the CUSP GUI interface |
CSCvs78774 | Enable Tracing triggers when you clear tracelogs from CLI |
CSCvi81740 | vCUSP JConsole access |
CSCvq02490 | vCUSP should support SFTP for all file transfers along with backup and restore |
CSCvt53483 | Enable kdump configuration in vCUSP 10.1 |
CSCvq48163 | Checkboxes in CUSP UI not functioning correctly on Firefox 63.0.3 and newer versions |
The following are the open caveats for Cisco Unified SIP Proxy Release 10.2:
Caveat | Description |
CSCvu13653 | Multiple vulnerabilities in OpenLDAP |
CSCvv03282 | Getting bad request while clearing 100 calls from the failed call search list |
CSCvv23379 | Guest OS and ESXi compatibility are showing older version for CUSP 10.2 |
CSCvv23410 | CUSP online help should be updated with the correct steps for configuring the backup parameters |
Caveats Resolved in Release 10.2.1
The following issues were resolved in Cisco Unified SIP Proxy Release 10.2.1:
Caveat | Description |
---|---|
CSCvu13653 | Multiple vulnerabilities in OpenLDAP |
CSCvv03282 | Getting bad request while clearing 100 calls from the failed call search list |
CSCvv23379 | Guest OS and ESXi compatibility are showing older version for CUSP 10.2 |
CSCvv23410 | CUSP online help should be updated with the correct steps for configuring the backup parameters |
CSCvv87871 | CUSP 10.2 unable to subscribe users as member to non-default (new) groups |
Caveats Resolved in Release 10.2.1_v1
The following issues were resolved in Cisco Unified SIP Proxy Release 10.2.1_v1:
Caveat | Description |
---|---|
CSCvx70719 | Restore on CUSP 10.2.1 is failing |
CSCvw86510 | License Disable after Network Connectivity failure |
CSCvx61008 | CUSP 10.2 restricting Certificate validity between 2-5 years |
CSCvx72402 | User is logged out automatically upon a configuration change in the Pre-Normalization section |
CSCvx72443 | CUSP: Pages become inaccessible with 500 Internal Sever Error after changing Inactivity Timer |
CSCvy58640 | Terminal Length command no longer available on vCUSP V10 |
CSCvs47162 | Tomcat and messages logs rotation issues in vCUSP |
CSCvw79158 | No alert is shown to user/administrator, when an incorrect path is selected for upgrade or patch |
Caveats Resolved in Release 10.2.1_v2
In addition to the caveats resolved in Cisco Unified SIP Proxy 10.2.1_v1, the following issue was resolved in Cisco Unified SIP Proxy Release 10.2.1_v2:
Issue | Description |
---|---|
Evaluation of Cisco Unified SIP Proxy for Log4jRCE(Log4Shell) Vulnerability |
Caveats Resolved in Release 10.2.1_v3
The following issue was resolved in Cisco Unified SIP Proxy Release 10.2.1_v3:
Issue | Description |
---|---|
QuoVadis Root Certificate Decommission on Cisco Unified SIP Proxy release |
Caveats Resolved in Release 10.2.2
The following issues were resolved in Cisco Unified SIP Proxy Release 10.2.2:
Issue | Description |
---|---|
CSCwa39323 |
OVA File only allocates 4GB of RAM instead of 6 GB |
CSCwb39228 |
CUSP - Apache Tomcat NIO+OpenSSL vulnerability CVE-2021-41079 in tomcat 8.5.56 |
CSCwb28821 |
In BIND 9.8.5 - > 9.8.8, 9.9.3 - > 9.11.29, 9.12.0 - > 9.16.13, and above versions |
CSCwb67440 |
After restore from backup install user admin on newly created CUSP will become hidden |
CSCwb76531 |
Cisco Unified SIP Proxy RMI Registry Bypass |
CSCwa18667 |
Issue with cusp webpage after configuring time policy |
CSCwb06998 |
Patch install failing: vCUSP_10.2.1_v2 |
CSCvt77007 |
vCUSP10.x: Make Tech Support from GUI provide same information as "show tech-support" from CLI |
CSCvv42008 |
Accessing Pre or Post Normalization in CUSP GUI gives 404 Not Found or refused to connect |
CSCvy96653 |
The pre existing log entries are being flushed out , when patch installation is triggered from CLI |
CSCvy99857 |
Patch installation with version 10 on a 10.2.1 vCUSP from CLI is getting failed |
Migration to Cisco Unified SIP Proxy 10.2.x
Note |
Data and configuration from an earlier release must be restored from an SFTP server using the absolute path to the backup files. For more details on how to configure the backup server, see Backup and Restore Data section of the CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2. |
Migration from Cisco Unified SIP Proxy 8.x
You can migrate from an existing Cisco Unified SIP Proxy 8.x releases to Cisco Unified SIP Proxy Release 10.2. However, the following are the limitations during the migration:
-
Cisco Unified SIP Proxy Release 10.2 cannot be installed on SRE Module. You require VMWare ESXi platform to install Cisco Unified SIP Proxy Release 10.2.x.
-
Existing Cisco Unified SIP Proxy 8.x SWIFT licenses cannot be migrated to Cisco Unified SIP Proxy 10.2.x. Contact your Cisco partner or reseller to enquire about the purchase of current licensing.
-
The backup configuration files from Cisco Unified SIP Proxy 8.x release do not have the network-related configuration as the Cisco SRE module gets the relevant information through RBCP protocol from the host router when it powers up. Cisco Unified SIP Proxy 10.2.x does not support RBCP communication. So, if a backup configuration from Cisco Unified SIP Proxy 8.5.x release is restored in Cisco Unified SIP Proxy 10.2.x, you must manually enter and configure the IP address, subnet mask, and default gateway details during the reload as follows:
-
Ensure that you have console access to the VM of virtual Cisco Unified SIP Proxy 10.2.x, while you are restoring the configuration of 8.x on 10.2.x.
-
After the restore is completed, reload the module as per the instructions on the screen.
-
Immediately after the reboot is completed, access the console with your username and password.
-
Configure the IP address, subnet mask, and default gateway as follows:
cusp#configure terminal Enter configuration command, one per line. End with CNTL/Z. cusp(config)#interface FastEthernet 0 cusp(config-interface)#ip address 10.65.125.187 255.255.255.128 cusp(config-interface)#end interface cusp(config)#ip default-gateway 10.65.125.129 SYSTEM ONLINE cusp(config)#exit cusp#wr mem
-
-
After the Cisco Unified SIP Proxy is online, re-associate the users to groups with password reset and test remote access using SSH.
cusp#configure terminal cusp#username cisco group Administrators cusp#username cisco password cisco cusp#wr mem
-
Cisco Unified SIP Proxy 8.x release configuration has multiple sub-interfaces. The sub-interface format in Cisco Unified SIP Proxy Release 10.2.x is different from that in Cisco Unified SIP Proxy Release 8.x. You must configure these interfaces manually after the reload is complete.
-
Listen points are not restored as it requires the IP address of the virtual Cisco Unified SIP Proxy. So, you must manually configure the listen points after restoring the back up from the Cisco Unified SIP Proxy 8.x release.
-
SIP Ping configuration is not restored as it requires the IP address of the virtual Cisco Unified SIP Proxy. So, you must manually configure SIP Ping configuration on Cisco Unified SIP Proxy 10.2.x release after restoring the backup from the Cisco Unified SIP Proxy 8.x release.
Following are the steps to migrate from any of the existing Cisco Unified SIP Proxy Releases to Cisco Unified SIP Proxy Release 10.2.x:
Procedure
Step 1 |
Take a backup of the existing Cisco Unified SIP Proxy 8.x configuration. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy CLI Release 8.5 or GUI Administration Guide for Cisco Unified SIP Proxy Release 8.5. |
||||
Step 2 |
Deploy the Cisco Unified SIP Proxy Release 10.2.x OVA on a virtual machine. For more information, see Cisco Unified SIP Proxy 10.2 Installation Guide. |
||||
Step 3 |
Configure the Smart licenses. For more information, see GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2 and CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2. |
||||
Step 4 |
Restore the configuration backup of Cisco Unified SIP Proxy 8.x in Cisco Unified SIP Proxy 10.2.x. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2 and GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2.
|
Migration from Cisco Unified SIP Proxy 9.x
You can upgrade from the existing Cisco Unified SIP Proxy 9.x releases to Cisco Unified SIP Proxy Release 10.2.x. Following are the steps to migrate from any of the existing Cisco Unified SIP Proxy Releases to Cisco Unified SIP Proxy Release 10.2.x:
Procedure
Step 1 |
Copy the running configuration to the startup configuration. For more information, see “Maintaining the Cisco Unified SIP Proxy System” chapter in CLI Configuration Guide for Cisco Unified SIP Proxy Release 9.x. |
Step 2 |
Unregister CUSP 9.x from CSSM if you are using Smart Licensing. |
Step 3 |
Take a backup of the existing Cisco Unified SIP Proxy 9.x configuration. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 9.x CLI Configuration Guide for Cisco Unified SIP Proxy Release 9.x and GUI Administration Guide for Cisco Unified SIP Proxy Release 9.x. |
Step 4 |
Deploy the Cisco Unified SIP Proxy Release 10.2 OVA on the virtual machine. For more information, see Cisco Unified SIP Proxy 10.2 Installation Guide for more information. |
Step 5 |
Configure the Smart licenses. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 9.x and GUI Administration Guide for Cisco Unified SIP Proxy Release 9.x. |
Step 6 |
Restore the configuration backup of Cisco Unified SIP Proxy 9.x in Cisco Unified SIP Proxy 10.2. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 9.x and GUI Administration Guide for Cisco Unified SIP Proxy Release 9.x. |
Step 7 |
Reregister to CSSM. |
Migration from Cisco Unified SIP Proxy 10.x
You can upgrade from the existing Cisco Unified SIP Proxy 10.x releases to Cisco Unified SIP Proxy Release 10.2.x. Following are the steps to migrate from any of the existing Cisco Unified SIP Proxy Releases to Cisco Unified SIP Proxy Release 10.2.x:
Procedure
Step 1 |
Copy the running configuration to the startup configuration. For more information, see “Maintaining the Cisco Unified SIP Proxy System” chapter in CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.x. |
Step 2 |
Unregister CUSP 10.x from CSSM if you are using Smart Licensing. |
Step 3 |
Take a backup of the existing Cisco Unified SIP Proxy 10.x configuration. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.x and GUI Administration Guide for Cisco Unified SIP Proxy Release 10.x. |
Step 4 |
Deploy the Cisco Unified SIP Proxy Release 10.2 OVA on the virtual machine. For more information, see Cisco Unified SIP Proxy 10.2 Installation Guide for more information. |
Step 5 |
Configure the Smart licenses. For more information, see GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2 and CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2. |
Step 6 |
Restore the configuration backup of Cisco Unified SIP Proxy 10.x.x in Cisco Unified SIP Proxy 10.2.x. For more information, see CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2 and GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2. |
Step 7 |
Reregister to CSSM. |
Related Documentation
The below table lists the documentation available for Cisco Unified SIP Proxy Release 10.2.x:
Document | Description |
---|---|
Installation Guide for Cisco Unified SIP Proxy Release 10.2.x |
Describes how to install the Cisco Unified SIP Proxy software, including licenses. Also includes information about moving from Release 1.x to Release 10.2.x. http://www.cisco.com/en/US/products/ps10475/prod_installation_guides_list.html |
CLI Configuration Guide for Cisco Unified SIP Proxy Release 10.2.x |
Contains administrator information, such as maintenance and troubleshooting, for tasks that are performed from the CLI. http://www.cisco.com/en/US/products/ps10475/products_installation_and_configuration_guides_list.html |
CLI Command Reference for Cisco Unified SIP Proxy Release 10.2.x |
Contains descriptions of all the Cisco Unified SIP Proxy Release 10.2.x-specific CLI commands. http://www.cisco.com/en/US/products/ps10475/prod_command_reference_list.html |
GUI Administration Guide for Cisco Unified SIP Proxy Release 10.2.x |
Contains administrator information, such as maintenance and troubleshooting, for tasks that are performed from the GUI. Includes online help. http://www.cisco.com/en/US/products/ps10475/products_installation_and_configuration_guides_list.html |
Commercial Open Source Information for Cisco Unified SIP Proxy Release 10.2.x |
Lists all the open source software used in this project. https://www.cisco.com/c/en/us/about/legal/open-source-documentation-responsive.html |