08-27-2015 01:28 PM - edited 03-17-2019 05:28 PM
Hey community ...
I'm frustrated :( ...
... what's the problem? ... setting up a simple MRA environment with CUCM 11, Expressway 8.6 and Jabber for Windows 11 ...
The login from the windows client is fine ... but afterwards the phone service is not working.
I have no idea where the mistake could be ...
please help me :)
... in attend there is the Jabber-log ...
thanks in advance!
Solved! Go to Solution.
11-10-2015 01:49 PM
Hello Tom,
Going through the posted log files I can see several points here that would be a good idea to mitigate:
So Back to the problem,
The Client still is able to reach the UCM, HTTPS connection is somehow challenging here however, the SIP Registeration is failing.
I am seeing SX10 Registeration with MAC address and also Jabber with CSFSX10AT device name. Username is sx10at i believe?.
I see apparently a SIP registeration is failing here with "Forbidden 403" Registeration reply relayed by the Expressway-E. :
ipio-recv<--- SIP/2.0 403 Forbidden
Via: SIP/2.0/TLS 172.19.30.106:55592;branch=z9hG4bK000014ed;received=212.241.65.35;rport=55592
Call-ID: 40618691-e9450012-000068cb-0000197c@172.19.30.106
CSeq: 184 REGISTER
From: <sip:501@cucm01.meinhart.local>;tag=40618691e945001300002b53-0000789e
To: <sip:501@cucm01.meinhart.local>;tag=1c6246c1f9dae786
Server: TANDBERG/4131 (X8.6)
Content-Length: 0
2015-08-27 21:56:43,100 DEBUG [0x0000234c] [p\sipcc\core\sipstack\ccsip_debug.c(326)] [csf.sip-call-control] [platform_print_sip_msg] - ::End-Of-Sip-Message::
so I wonder:
- Do you have SIP Digest Authentication enabled on the SIP Secure profile? if yes, please uncheck it? I see Digest authentication trial as well. Local Domain is used as well
- If not, can you assure username/password correct
- Valid question, can you register the client internally on Local LAN without MRA?
- Do you have the End-user assoicated with the Jabber device?
- Do you have CUCM added to the Expressway-C allow list with Device security profile?
- is the CUCM in secure mode or non-secure mode
Action:
- Check the above questions
- Try to sign the certification of Expressway-E with Public CA and SAN added as well
Tell me what are you thoughts,
Abdel-moniem E. REZK
http://ucjournal.net
Rate if it is helpful
t
09-04-2015 02:12 PM
i have the same setup. and it works fine with me.
is it working locally ??
what are your inside and outside domain names?
are DNS records pointing to right servers ?
10-20-2015 12:08 AM
10-20-2015 02:26 PM
I dont know why its not working for you. its working fine with me.
may be you need to configure your jabber-config file more appropriate.
can you provide me a readonly access to your VCS-E .so i can troubleshoot your issue.
with one dummy account for jabber as well.
10-20-2015 02:36 PM
i reviews your configs.
you have added WEBEX& CUCM domain in excluded domains under your jabber-config file.
<servicediscoveryexcludedservices>WEBEX,CUCM</servicediscoveryexcludedservices>
Remove CUCM and try your configs.
HTH,
AMMAR
11-10-2015 07:07 AM
Hey Ammar,
thanks for your reply ... i changed my config file ...
now the error message on my MRA-Device is "failed to get device configuration" ...
... do you have any idea?
Big THANKS again for your reply :)
best regards, Thomas
11-10-2015 01:49 PM
Hello Tom,
Going through the posted log files I can see several points here that would be a good idea to mitigate:
So Back to the problem,
The Client still is able to reach the UCM, HTTPS connection is somehow challenging here however, the SIP Registeration is failing.
I am seeing SX10 Registeration with MAC address and also Jabber with CSFSX10AT device name. Username is sx10at i believe?.
I see apparently a SIP registeration is failing here with "Forbidden 403" Registeration reply relayed by the Expressway-E. :
ipio-recv<--- SIP/2.0 403 Forbidden
Via: SIP/2.0/TLS 172.19.30.106:55592;branch=z9hG4bK000014ed;received=212.241.65.35;rport=55592
Call-ID: 40618691-e9450012-000068cb-0000197c@172.19.30.106
CSeq: 184 REGISTER
From: <sip:501@cucm01.meinhart.local>;tag=40618691e945001300002b53-0000789e
To: <sip:501@cucm01.meinhart.local>;tag=1c6246c1f9dae786
Server: TANDBERG/4131 (X8.6)
Content-Length: 0
2015-08-27 21:56:43,100 DEBUG [0x0000234c] [p\sipcc\core\sipstack\ccsip_debug.c(326)] [csf.sip-call-control] [platform_print_sip_msg] - ::End-Of-Sip-Message::
so I wonder:
- Do you have SIP Digest Authentication enabled on the SIP Secure profile? if yes, please uncheck it? I see Digest authentication trial as well. Local Domain is used as well
- If not, can you assure username/password correct
- Valid question, can you register the client internally on Local LAN without MRA?
- Do you have the End-user assoicated with the Jabber device?
- Do you have CUCM added to the Expressway-C allow list with Device security profile?
- is the CUCM in secure mode or non-secure mode
Action:
- Check the above questions
- Try to sign the certification of Expressway-E with Public CA and SAN added as well
Tell me what are you thoughts,
Abdel-moniem E. REZK
http://ucjournal.net
Rate if it is helpful
t
11-10-2015 01:57 PM
Hello
As An addition,
Please ensure that both internal and external domain are added to Expressway-C setup.
thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide