Jabber 14 Phone Services Not working outside of the domain and Android

[centrino1]

Dear All,

@Jaime Valencia 

Thank you very much for taking the time to ready my post.

I have configured CUCM V14 , Unity Connection V14 , IMP V14  and AD 2019 for the LDAP.

All DNS A records and SRV Records were configured correctly.

All configurations and integrations has been done successfully also I am able to login to Jabber within the domain successfully and I get Phone Services , Voicemail and Instant Messaging. also CUCM and Directory Discovery is done properly within the domain.

My problems here when I login to Jabber from Windows outside of the domain and also Jabber on Android too.

I have googled the issue and read articles and admin guide about UDS/EDI/BDI . but there is no detailed configuration for EDI and BDI and I am not good with the XML files.

I have attached the logs and configuration from Jabber Android and the problems is the same for Jabber for Windows too. I tried to add some parameters from the UC Service profile but still didn't work.

All my cluster is V14 please help me to get the Phone Services working for Jabber Android and Jabber Windows outside of the domain. I appreciate all your great efforts.

I meant by that Normal workstations that are not joined to the domain but have the DNS Server (DC Controller) as the primary DNS server in the IP configuration and yes also the VPN users that has jabber.

Yes , I do have Anyconnect IOS vpn configured in place with a full internet tunnel and has the DNS server (DC controller) as the DNS Server also. I don't have a problem in the services discovery using SRV records but Phone services are not up despite I can ping to the CUCM Publisher IP. and I tested to ping from CUCM Publisher to the clients too works. I know its some parameters needed to be added for the jabber-config.xml in relation to BDI/EDI

I have attached my jabber-config and all logs 

[b.winter]

But who says, that it isn't a network / FW issue? Just because you can ping both ways, doesn't mean e.g. SIP is going through the FW. Have you already checked that?

[Ammar Saood]

Agreed.

It could be SIP ALG or FW issue. Make sure you can reach port 8443 on CUCM & IMP, and you have opened the desired ports.

It could also be NAC issue that doesn't let un-trusted devices to use network services.

[centrino1]

I don't have any firewall installed at all. Just 2951 router and I configured any connect vpn on it and the HP server that has all the cluster is behind the 2951 router. Yes , I checked and I can confirm 100% no network connectivity issues.

I have confirmed already Jabber is fully working if the machine joined the domain but for machines not joining the domain or android (I dont get a phone service).

All DNS A and SRV records are in place. I am able to login and get IM and Voicemail working just phone services and its all in relation to the parameters. I already researched it and it seem this is for CUCM 12.7+ not before.

Cisco didn't explain in detail the best configuration for that. All the Jabber guides are made pre 12.7+ 

[Ammar Saood]

why do you say that . a little research got me these documents which are for v14.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/14_0/cjab_b_deploy-jabber-on-premises-14_0.html

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/14_0/cjab_book_parameters-reference-guide-for-cisco-jabber-14_0.html

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/14_0/cjab_b_planning-guide-cisco-jabber-14_0.html

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/14_0/cjab_b_feature-configuration-cisco-jabber-14_0.html