Expressway Certification

[Juraj Papic]

We have expressway E and C, with only one(1) interface, we added the certificates with no issue, but we are getting the error in the traversal zone RMA , "filed to connect to xxxx:7002 TLS Failed.

The reverse DNS are working with no problem.

Thanks. 

[Roger Kallberg]

Please share the traversal zone configuration from both E and C, plus certificate information in clear text for a minimum of the SAN list.

[Ayodeji Okanlawon]

Expressway deployment with a single interface is usually problematic. For it to work you need..

1. Nat reflection configured on firewall

2. Point expresswayc to the public IP address of your expressway E. Ie the FQDN on expresswayc must resolve to the Public Natted address of expressway E.

3. Since you are using port 7002 ensure it is configured on both sides. This is not the default sip port for the traversal zone...