topic Hi Mike - in Jabber Guest 10 in Collaboration Applications

No video/audio with Jabber guest

Mike Assel — Sun, 17 Mar 2019 23:23:25 GMT

I'm able to connect calls but I get no audio or video in either direction. According to the install guide "Cisco Jabber Guest media does not go through the traversal link between Cisco Expressway-E and Cisco Expressway-C" and "Inbound firewall rules are required to allow media to flow from the Cisco Expressway-E to Cisco Expressway-C."

Does this mean that I need to open up my firewall to that large range of ports to allow the RTP traffic from the Expressway Edge to get to the Expressway C? Is it not possible to create a travesal zone for the jabber guest media to use? Thanks, Mike

Hello Should be a firewall

islam.kamal — Tue, 12 Aug 2014 07:19:08 GMT

Hello

Should be a firewall between both of them and open the required ports, expressway-c and expressway-e.

Kind;y check the below link:-

http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X8-1/Mobile-Remote-Access-via-Expressway-Deployment-Guide-X8-1-1.pdf

Thanks

please rate all useful information

Islam.kamal, I'm not doing

Mike Assel — Thu, 14 Aug 2014 13:45:30 GMT

Islam.kamal, I'm not doing MRA here, just jabber guest. Totally different.

Anyone?

Mike Assel — Thu, 14 Aug 2014 13:46:20 GMT

Anyone?

Hello,The media will flow

mbegeman — Fri, 15 Aug 2014 14:21:30 GMT

Hello,
The media will flow differently depending on which configuration you have deployed. For single NIC Expressway-E, the media flows over a range of ports between E and C. For dual NIC Expressway-E, the media will flow via the traversal zone.
The ports for both are outlined in the install guide, under "Ports and Protocols".

Which have you deployed? Do you have NAT or PAT? Where is your firewall deployed?

-mike

I have a single NIC no NAT.

Mike Assel — Fri, 15 Aug 2014 14:45:11 GMT

I have a single NIC no NAT. Why can't Jabber guest use a traversal zone in this scenario just like other telepresence calls? This is what I don't understand.

when deployed in single NIC,

mbegeman — Fri, 15 Aug 2014 17:21:29 GMT

when deployed in single NIC, the JG server sends the signaling to the C. In that case, the E is used as a TURN server only; propogate the media. It's not part of the signaling, so doesn't have a way to know to use the traversal zone.

In the dual NIC deployment, JG server sends the signaling to the E, which forwards it to the C via the traversal zone. In that case, the E can and does use the traversal zone for the media.

-mike

That's great if your

Mike Assel — Fri, 15 Aug 2014 17:32:23 GMT

That's great if your Expressway has a dual NIC, but mine doesn't. If JG can't use a traversal zone for media on an Expressway with a single NIC then that is a serious limitiation. I've heard that this is not an issue with JG 10.2. Do you know if that's accurate? Thanks, Mike

Hi Mike - in Jabber Guest 10

mrmccann — Mon, 18 Aug 2014 17:50:25 GMT

Hi Mike - in Jabber Guest 10.0(2), you cannot use the traversal zone for media in the single NIC case. However, we will look to qualify this in the next release. Thanks for your feedback.

Mike

OK, thanks for the

Mike Assel — Mon, 18 Aug 2014 17:54:55 GMT

OK, thanks for the confirmation.

OK, thanks for the

Mike Assel — Mon, 18 Aug 2014 17:55:58 GMT

OK, thanks for the confirmation.

Mike, I have opened up all

Mike Assel — Thu, 21 Aug 2014 16:53:15 GMT

Mike, I have opened up all ports in my firewall to the Expressway Core, but I still get no video either way. I did a packet capture on the Core and Edge. The Edge show the sending of lots of UDP packets to the private IP address of the Core, while the Core shows no receipt of UDP packets from the Edge.

Any idea what is going on? Thanks, Mike

Hi,sorry for delay, I was

mbegeman — Wed, 27 Aug 2014 15:41:30 GMT

Hi,

sorry for delay, I was away for a few days. Are you still having a problem? The media should flow like so

JG client->TURN encapsulated media->Edge->Core->phone

Should the Edge be able to reach the private IP:port that you're seeing from your sniffer trace? Are you doing PAT or NAT between Edge and Core?

-mike

No problem. Edge sits on the

Mike Assel — Wed, 27 Aug 2014 15:55:57 GMT

No problem. Edge sits on the internet, single NIC no NAT. Core has a 1to1 NAT to a public IP. Firewall has all ports opened inbound between Edge and Core. For some reason the sniffer trace shows the Edge sending packets to the private IP of the Core.

I may have bigger issues though. If I try to make a Jabber Guest call from my internal network, I experience the same no video symptoms, plus the Jabber Guest client is sending the traffic to the Edge, while the phone is sending traffic to the core. I would expect that the two internal devices would exchange media directly since they are both internal. Is that not the case?

JG client will always send

mbegeman — Wed, 27 Aug 2014 18:41:27 GMT

JG client will always send the media to the Edge. As part of the call buildup, the JG client receives the Core's IP address (the one the JG server is communicating with) and tells the Edge to relay media there. It sounds like your Edge server cannot communicate with that IP since it's private?
With NAT/PAT between the Edge and Core, we ask that customers use the dual NIC Edge configuration. If you can't do that, you could try pointing the JG server at the Edge for call control (SIP). Doing this would allow use of the traversal zone for the media. While that isn't officially supported, I think it should work.
This requires 5061 open in both directions for the SIP traffic and the JG server would need the Edge cert.

-mike

Hmmm... is that bit about

Mike Assel — Wed, 27 Aug 2014 19:39:33 GMT

Hmmm... is that bit about using Dual NIC on the edge when there is a NAT/PAT between Edge and Core in the deployment guide?

Mike, I tried your suggestion

Mike Assel — Wed, 27 Aug 2014 20:43:25 GMT

Mike, I tried your suggestion and it's almost working. I now get one way audio/video to the Jabber Guest client, but no video from Jabber Guest. I took a packet capture on the exp-core and the C20 that I'm calling and I do see UDP packets being received. Also, when I look at the call stats on the C20 it is showing call stats for video, but the numbers are odd, especially the resolution. To me it seems like the media is making it through but the call isn't being set up correctly.

Sorry, what I meant was I

Mike Assel — Wed, 27 Aug 2014 21:21:58 GMT

Sorry, what I meant was I followed your suggestion to use the Edge for call control for Jabber Guest.

No it isn't, but it should be

mbegeman — Thu, 28 Aug 2014 14:26:08 GMT

No it isn't, but it should be! Will work to get that updated. Thanks.

Thanks Mike. Did you see my

Mike Assel — Thu, 28 Aug 2014 14:33:02 GMT

Thanks Mike. Did you see my note about one way video?