Mobile Remote Access-Deployment through Single Domain

[shinas]

Hi,

We are planning to implement mobile remote access in single domain. We have public Domain called for example abc.com and we have one sub-domain to it called ae.abc.com. So we will be using ae.abc.com as our external and internal domain. I have implemented before by using multiple domain ( seprate internal and external domain). But I am not sure whether MRA supports single domain scenario.

If it supports, what and how many certificates need to be generated (if are using local CA)? And In case if we are purchasing public CA generated certificate (like godaddy) how many and what type of certificates are needed?

Regards,

Shinas

[Jaime Valencia · Accepted solution]

You need a split horizon DNS for that to work, if Jabber detects the _cisco-uds or _cuplogin SRV records, it will never use MRA and just fail to login.

As for your other questions, have you reviewed the MRA documentation and the certificate creation docs?