Expressway-E, CUCM 10.5 Telephony Services not work

[Sergey Ptushkin]

Hello, i need help.

We do have a CUCM unrestricted version installed v 10.5

 unrestricted version not support "security profile" with TLS.

 In the manual "Deployment MRA Guide Expresswway 8.5" stated that "Security profile" must be.

My jabber client can't connect to CUCM across Expressway-E, telephony service - not work. But IM&P work fine. See. cucm.png 

Is it compatible with Expressway-E and Expressway-C ? or should we reinstall the CUCM with restricted version?

I coudln't find the info.

Without TLS security will not work?

May be i can used as a non-secure connection , without TLS security profile, only TCP or UDP ?

How to set up non-TLS connection TCP or UDP to CUCM without "TLS security profile" across Expressway-E ?

[Jaime Valencia]

Not sure why my previous reply, and yours, were deleted, as I mentioned, that is only applicable for mixed mode security environments, if you're not going to be doing that, you do NOT require the security profiles.

[Sergey Ptushkin]

I have this log in my Expressway-E and C.

But my cert - is correct.

tvcs: UTCTime="2015-09-29 13:13:19,538" Module="network.sip" Level="INFO": Action="Sent" Local-ip="192.168.1.187" Local-port="25048" Dst-ip="192.168.1.188" Dst-port="7001" Detail="Sending Response Code=437, Method=SERVICE, CSeq=16129, To=sip:serviceserver@cucm-rpn-pub, Call-ID=185613babaefba3b@127.0.0.1, From-Tag=20844c57f7336d7b, To-Tag=01fd1ce9d1894495, Msg-Hash=17366240198406948782"

2015-09-29T20:13:19+07:00 tvcs: UTCTime="2015-09-29 13:13:19,537" Module="network.sip" Level="DEBUG": Action="Received" Local-ip="127.0.0.1" Local-port="25047" Src-ip="127.0.0.1" Src-port="22210" Msg-Hash="16936142004695641953" 

SIPMSG:

|SIP/2.0 437 Unsupported Certificate

Via: SIP/2.0/TCP 127.0.0.1:5060;egress-zone=DefaultZone;branch=z9hG4bK6fb27b5c454d5ff2f13b08ad646bb70d11331.52fb4c35fcb849edb81b5447421da39c;proxy-call-id=3f011d98-6258-44ed-b874-72da9dc5e3f9;received=127.0.0.1;rport=25047

Via: SIP/2.0/TLS 192.168.1.188:7001;egress-zone=traversal;branch=z9hG4bKb8e88d8bbf7714968e21c917121d278338.e1e4128605b3e9c78d0e1dba696a816e;proxy-call-id=61f815e0-ed3e-423b-bc73-8f0aef1acea9;received=192.168.1.188;rport=7001;ingress-zone=traversal;ingress-zone-id=4

Via: SIP/2.0/TCP 127.0.0.1:5060;branch=z9hG4bK33bbc014b902a7590f5db286fea7c42237;received=127.0.0.1;rport=25001;ingress-zone=DefaultZone

Call-ID: 185613babaefba3b@127.0.0.1

CSeq: 16129 SERVICE

From: <sip:serviceproxy@cucm-rpn-pub>;tag=20844c57f7336d7b

To: <sip:serviceserver@cucm-rpn-pub>;tag=01fd1ce9d1894495

Server: TANDBERG/4130 (X8.5.1)

Content-Length: 0