Hey everyone,

I've been working with Cisco CUCM for a while, and one thing that's regularly frustrated me is how long it can take to retrieve and search historical Call Detail Records (CDRs).

A simple request to investigate calls involving a particular number can sometimes turn into hours of working through CAR or manually retrieving CDR files.

I know there are already commercial products and other solutions available, so I'm certainly not claiming to have reinvented the wheel!

I just wanted something relatively lightweight and straightforward that solved the problem without introducing another complicated system.

So I've been developing an application called Call Records.

It currently supports:

• Receiving CDR files directly from CUCM via SFTP
• Importing existing CDR files
• Maintaining a searchable history of call records
• Searching by phone number and date range
• Exporting results for further investigation

It's been working in my environment, but I'd really like to see how it performs in other CUCM deployments.

I'm looking for engineers willing to give it a try and provide some feedback.

Whether that's bugs, compatibility issues, suggestions for additional functionality, or just things about the interface that could be improved, I'd genuinely appreciate hearing about it.

I'm not expecting it to replace the established reporting platforms. It's just a tool I originally built to make my own job easier, and I figured other engineers might find it useful too.

GitHub: https://github.com/Huddo58/cdr-search-tool

Cheers!

Hi,

I have recently been shortlisted for the Software Engineer(0-2years),India interview process and wanted to understand what to expect and it was mentioned all rounds going to happen on the same day based on previous round feedback.

YOE - 1.8 years

How many interview rounds were there?

What was the format of each round?

Anything from system design - LLD/HLD?

DSA, OS,CN --?

If you've gone through this process recently, I'd really appreciate it if you could share your experience.

Anyone ever get it for free?

Anyway I can shmooz my account manager for access?

I've just got an email that I passed a certification and received a CISCO ID number.
The thing is I did not have a CISCO account, so I created one, but now when I go to Cert Status & Download PDF, I don't have an option to paste that CISCO ID number.

I read that I should open a case, but I can't do that either, it says I need to have an active subscription.

Is there any other way to do this?

We have been slow on the postings for each wave of AI vulnerability findings. The latest is below and the list of devices being evaluated is too many, just move your eyes to the link. No confirmed yet but that does not mean they are not the affected.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq

The results will post to that page, TAC has no additional information. Please do not open Sev1 or 2 cases to ask about it.

Cisco Advance Notification for Publication of October 21, 2026, Security Advisories

• Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
• Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability
• Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities
• Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability
• Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
• Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability
• Multiple Cisco Products Snort 3 Denial of Service Vulnerability
• Cisco Expressway Series Remote Code Execution Vulnerability
• Cisco Expressway Series Security Hardening Release: October 2026
• Cisco Expressway Series Information Disclosure Vulnerability
• Cisco Unified Communications Products Security Hardening Release: October 2026
• Cisco Unified Communications Manager Improper Access Control Vulnerability
• Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability
• Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability

Jesus Illescas, Developer Advocate at Cisco, invited Frank Brockners (Distinguished Engineer, Outshift by Cisco) and Suresh Krishnan (Cisco Global Technology Standards Organization, Internet Architecture Board) to recap the session they presented at Cisco Live on agentic AI standards. The protocol landscape right now is genuinely messy: formal standards bodies, open source efforts, and de facto standards all evolving in parallel.

They walk through MCP, A2A, agent discovery and interoperability, identity and trust, and a "standards layer cake" model that helps map out which piece goes where. Frank and Suresh are also giving an updated version of this session at Cisco Live EMEA in London.

Watch: https://cs.co/61699BHptWf

#CiscoDevNet #AgenticAI #AIStandards

I've been working with Cisco Catalyst switches, ISE, Catalyst Center, and CUCM, and one thing I've learned is that troubleshooting problems teaches you things that certifications and labs don't always cover.

I'm curious to hear from engineers who've dealt with particularly difficult issues in production environments.

Whether it involved routing, switching, VLANs, 802.1X, authentication, wireless, or something completely unexpected, what was the problem, and how di you eventually identify the root cause?

I'm especially interested in those situations where everything looked correctly configured, but something still wasn't working.

Would love to hear some real-world troubleshooting stories and lessons learned.

Hello,

We have an ISE two-node deployment.

Upgraded from 3.3 patch 12 to 3.4 patch 7.

After trying to login to check the running services. I'm unable to login via CLi to the secondary.

Access is denied.

CLI and GUI access is good on the PAN.

GUI is accessible on secondary.

CLI and GUI credentials are the same.

Has anyone encountered this issue before? How did you resolve it? Thanks.

Hello,

We have the following requirement:

• The agent must not use Jabber to make a call.
• The agent must place calls exclusively through Finesse.

We tried modifying the jabber-config-xml configuration file with: <Telephony_Enabled>false</Telephony_Enabled>

It works, but after a while, we can no longer connect to Jabber. Do you know how we can resolve this issue?

I have long commutes and I was wondering this can be done like listening to a podcast.

If not, are you guys aware of a an equivalent course that's audio only?

I'm looking for someone who has previously fixed a full storage AP via TAC and still has the cert chain data that TAC sent them.

Will pay for your lunch today. DM me.

Anyone else running into this? A few of our remote users show Umbrella as "Not Required" at home, which means no protection. Every one of them is on an ISP-provided Calix GigaSpire (EXOS). Backoff is disabled.

I dug into it, and the router's DNS just hangs on any lookup for a nonexistent name instead of returning NXDOMAIN. DART shows the agent's network probe deciding the router's DNS servers are "dummy addresses," so it fails open. Umbrella itself is reachable fine. If I set static DNS on the NIC and restart the agent, it goes right back to Protected.

TAC told me to turn off DNS hijacking on the router. These are ISP-managed and I can't find any setting like that, and I'm not logging into everyone's home router anyway.

Has anyone found a fix on the client side? A setting to turn off that probe, or did Cisco ever call it a bug? Right now I'm testing a script that pins Umbrella DNS only on networks where this happens, but I'd rather not have to.

I’m Elwin, I run PingMyNetwork with two friends. We make CCNA/CCNP training.

We opened the beta of our sandbox. You build a topology, configure the devices with the IOS CLI, export the config. Runs in the browser, nothing to install, no signup to test it.

You work on real gear, we don’t anymore. So if a command doesn’t behave like real IOS, if an output looks wrong, if something is missing, tell me. I’d rather hear it from you than from a student.

https://pingmynetwork.com/sandbox

There’s also a challenge until October 28, accepted labs go in a draw for 3 Cisco exam vouchers. Not why I’m posting, but it’s there.

Just curious, why email security of cisco has 2? Secure email cloud gateway and email threat defense. In their site, only etd i can see for tdm and bdm. Does they pushing ETD this year?

We are in the US. We are starting to deploy Secure Access. Most of the time the IP origIn is in India and causes problems with some websites. We can add them to Traffic Steering to clear the issue, but we shouldn't have to.

Is there an area that can limit IP source to a specific region?

EDIT - Cisco employee fixed for us. Backend issue.

I look after three sites on my own, each in a different time zone, and I just found out how inconsistent my logging timestamps are. Some devices log in local time, some in UTC, and one router had a clock that drifted for months before I finally fixed NTP on it. So every log line needs a second look before I trust the time on it.

Last week we had a twenty minute outage. Before I could even see what happened first, I had to build a spreadsheet just to convert the timestamps. By the time the order made sense the useful part of the day was gone. Do you force everything to UTC on the device, or leave it local and sort it out wherever the logs end up? And if you moved everything over, what did that cost you in practice? I suspect it’s more work than it sounds.

Looking for a Cisco-related job? Studying for a certification? Preparing for an interview? This thread is the place for all career-focused discussions.

Appropriate topics include:

• Job openings
• Recruiting and hiring
• Resume reviews
• Interview preparation
• Career advice
• Salary discussions
• Certification paths (CCNA, CCNP, CCIE, etc.)
• Career transitions into networking

To keep the subreddit focused on technical Cisco discussions, standalone posts related primarily to jobs, recruiting, resumes, interviews, or career advice may be removed and redirected here.

Hello,

I am facing a RADIUS authentication issue between a Juniper QFX and Cisco ISE.

When I try to SSH into the switch, authentication fails. A packet capture (monitor traffic) clearly shows that the QFX sends the Access-Request and receives an Access-Accept back from ISE. Despite receiving the Accept packet, the switch ignores it and logs No valid RADIUS responses received.

QFX Configuration:

set system authentication-order [ radius password ]
set system radius-server 10.x.x.x secret xxx
set system radius-server 10.x.x.x source-address 10.y.y.y
set system login user remote class super-user

I am sending the following VSA in the response. I suspect the data type or format might be causing Junos to drop the packet:

• Attribute: Juniper-Local-User-Name
• Value: remote

QFX Logs:

Oct 15 17:27:55 QFX sshd: PAM_RADIUS_SEND_REQ_FAIL: Sending radius request failed with error (No valid RADIUS responses received).
Oct 15 17:27:55 QFX sshd[93694]: error: PAM: authentication error for userName from 10.z.z.z
Oct 15 17:27:55 QFX sshd: SSHD_LOGIN_FAILED: Login failed for user 'userName' from host '10.z.z.z'
Oct 15 17:28:00 QFX sshd[93694]: Disconnected from authenticating user userName 10.z.z.z port 1835 [preauth]

Any help is appreciated.

Planning an upgrade from FMC 7.2.5 to 7.2.12 for a small deployment (6 FTD HA pairs). I've read the Cisco upgrade guide and the release notes, but I wanted to check with the community before I commit to a maintenance window.

A few specific things I'm trying to nail down:

1. Direct upgrade path: Is 7.2.5 → 7.2.12 a supported direct jump, or does Cisco require any intermediate steps? The upgrade matrix isn't always crystal clear on maintenance-to-maintenance hops.

2. Readiness check surprises: Did anyone hit readiness check failures that weren't obvious from the docs? I'm mainly worried about disk space and NTP drift, but curious if there were other blockers.

3. HA FMC specifics: If you run FMC in HA, did the "pause sync / upgrade standby first / expect split-brain" process go smoothly, or did you run into issues when re-syncing afterward?

4. Post-upgrade weirdness: Any cosmetic bugs, policy deployment issues, or smart licensing problems that showed up after the reboot? I saw some chatter about object search being broken in certain 7.4 builds, wasn't sure if 7.2.12 had anything similar.

5. Timing: Roughly how long did the actual FMC upgrade take from start to login screen? Trying to size my outage window.

Not looking for a full walkthrough (I have the Cisco guide bookmarked), just want to hear from anyone who's actually done this specific hop. If you ran into a TAC case or a workaround, that's especially useful.

Thanks in advance.

Hi everyone,

I'm trying to recover a Cisco ISR 1111-4P router stuck in a boot loop (Last reset cause: LocalSoft).

System Details:

- Hardware: Cisco ISR C1111-4P (4GB RAM)

- ROMmon Version: System Bootstrap, Version 16.9(1r)

- Target IOS-XE Image: c1100-universalk9.17.09.04a.SPA.bin (loaded via usb0:)

What I've tried so far:

1. Set boot variable and config register:

   BOOT=usb0:c1100-universalk9.17.09.04a.SPA.bin

   confreg 0x2102

2. Booted directly from USB using: boot usb0:c1100-universalk9.17.09.04a.SPA.bin

Behavior (as shown in attached images):

- The image decompress/loads from usb0: completely.

- SHA-1 hash calculation and validation PASSES.

- RSA Signed RELEASE Image Signature Verification is SUCCESSFUL ("Image validated / Rom image verified correctly").

- Immediately after validation, the router reboots itself back into ROMmon instead of unpacking the IOS-XE kernel.

Is this issue caused by an outdated ROMmon 16.9(1r) failing to process the 17.09.04a package header structure, or am I looking at a permanent hardware failure (NAND/RAM corruption)?

Any help or confirmation on whether this unit is dead/recoverable would be greatly appreciated!

Has anyone here worked with Cisco 7925G wireless VoIP phones and older Cisco Aironet APs?

I recently joined a company that uses wireless VoIP phones throughout its warehouse. They’ve had call-quality issues for quite some time, predating my arrival.

After reviewing the configuration, I found several potential problems:

• No proper QoS configuration on the APs.
• No QoS on the trunk links between the APs and switches.
• An older wireless infrastructure that the company isn't planning to replace immediately.

I've convinced management to budget for new switches and APs, and possibly new phones, but I need to keep the existing phones working reliably until the upgrades happen.

Current equipment:

• Phones: Cisco 7925G
• APs: Cisco AIR-CAP2702E-A-K9

The main issue is intermittent poor call quality, which seems to happen more frequently in the evenings.

I've configured QoS on the trunk links and added the following configuration to the APs:

class-map match-all Voice
 match ip dscp ef
class-map match-all CallControl
 match ip dscp cs3
!
policy-map voip
 class Voice
  set cos 6
 class CallControl
  set cos 4
!
!
interface dot11radio0
 service-policy input voip
 service-policy output voip
!
interface dot11radio1
 service-policy input voip
 service-policy output voip
!
end

When I check the policy-map configuration, the Voice and CallControl classes appear to be configured correctly.

However, one thing that caught my attention is the output of show dot11 qos:

QOS Trust: Disabled
QOS Stats: Disabled

I'm not sure whether this is expected on this AP model or whether I'm missing an important configuration step.

My questions:

1. Does QOS Trust: Disabled indicate that the AP isn't trusting or prioritizing the voice traffic as intended?
2. Is there additional QoS configuration required on the AP radios or WLANs for the 7925G phones?
3. What would you check next to improve call quality without replacing the existing hardware?

I'm looking for practical troubleshooting advice from anyone who's worked with this equipment. I'd appreciate specific commands or configuration examples, especially if you've dealt with these phones in a warehouse environment.

Thanks!

Hi
we are a Hyper V site, running Azure Local. ive got 2 clusters and have built 2 WLC VMs, following the documentation from Cisco about 3 nics, and labelling them trunking etc etc. upon a fresh build of the WLCs we seem to be happy. However when VMs migrate from one host to another within the cluster (as they will do for either performance reasons, or if you are taking a host down to perform maintenance on it), the HA seems to break. and the only way weve been able to get back is to tear down the WLCs and build them again.

currently, ive got one VM that only has 2 nics, its lost its HA one, and my other VM has somehow managed to change the naming of the nics that it has, so whilst they are still eth1, eth2 and eth3 at the hyper-visor level, they are 4 5 and 6.

does anyone have any ideas as to what might be happening. ive got a case logged with TAC, but we seem to be going round in circles a bit at the moment, and looking like i may need to build the WLCs again from scratch..... so figured id throw out to a wider audience.

Dear everyone,

I have issue with nexus switch 93180yc-fx3 high speed 100%, it running firmware NX OS with 10.6.2F version.

Anyone have issue same to me, and how to fix this issue?

Thank you so much.