Jabber MRA can't communicate with the server

[mohamed907]

Hello all,

i deployed expressway MRA and configured internal record and external record with required srv records and verified successfully  ,also i verified the external connection through cisco collaboration solution analyzer and found the required ports are open 8443,5222 and 5061 .i created jabber xml file for voice service domain pointed to external domain and i can login jabber internally fine but when i try to login from outside it shows  "can't communicate with the server". when i checked the firewall i found there is no hit came from my jabber when i try to login from outside. anyone can tell me the reason??

[Vinod16]

Hope you have make external entry in External DNS ...

Service	SRV query	FQDN	Priority	Weight	IP	Protocol	Port
Mobile Remote Access	_collab-edge._tls.domain	exp-e.domain	10	10	Public IP of EXP E	TCP	8443

[mohamed907]

yes,  i verified it 

[Vinod16]

Please verify your internal entry as well ..


Internal Network – Verification :
Login to the Windows Machine where you Jabber is installed within the network
Go to Start > Run > Type CMD and hit enter
Type nslookup and hit Enter
Type set type=srv and hit enter
Type _cisco-uds._tcp.yourdomain.com and hit enter
This should give you the IP Address pointing to your CUCM
Type set type=srv and hit enter
Type _cuplogin._tcp.yourdomain.com and hit enter
This should give you the IP Address pointing to your CUPS

External Network – Verification
Login to Windows Machine where your Jabber is installed outside the network
Go to Start > Run > Type CMD and hit enter
Type nslookup and hit Enter
Type set type=srv and hit enter
Type _collab-edge._tls.yourdomain.com and hit enter
This should give you the IP Address pointing to your Expressway E.

Make sure that the CUCM, CUPS and Expressway C is not reachable from outside network.

[mohamed907]

Thanks for yourreply,

i verified above all and is fine, like i said i configured voice service domain pointing to external domain as the customer want to use the internal domain as a service domain when login in jabber ,my problem is from login outside there is no hit came to firewall  when i try to login from jabber .the zone between two expressway is up also all required ports are open but still not working 

[Anurag Srivastava1]

Hello,

Please see the below link and verify your config-

https://www.cisco.com/c/en/us/support/docs/unified-communications/expressway-series/117811-configure-vcs-00.html

If it is same and still having issues please take pcap and jabber log files from the client laptop and see where its trying to reach? As you said there is no hit on edge server so probably you need to see in jabber logs whether it is able to resolve the _collab-edge and what happens after that.

Further, you can also take diagnostics on both VCS-C and E in case you are seeing in pacp that its going to edge server.

Thanks.

Please rate if it is helpful.....

[mohamed907]

hello anurag,

i saw from the jabber logs that when the jabber look up at collab edge service it looks for it using the internal domain "_collab-edge._tls.internal.domain" which is false as it should use the external domain , so how can i make it search using the external domain. i configured the voice service domain in the xml file pointing to the external domain. what should i do ??

[Vinod16]

is your internal and external domain both are different ?

[mohamed907]

yes, and i login from outside using internal domain

[Vinod16]

Refer this Doc might be this is helpful for you..
https://www.cisco.com/c/en/us/support/docs/unified-communications/expressway-series/117811-configure-vcs-00.html

OR

You have to build 1 DNS server which is kept in your DMZ who can convert External domain into internal Domain .

[mohamed907]

i reviewed the link up and still jabber looking for the collab edge using the internal domain not external one

[Vinod16]

Hello,

Can you share me couple of things :
1. Im address of user ( login imp >>administration >>topology >>imp ser >> user im address)
2. Internal domaion
3.external domain
4.email id which you ENTERINGg while login into jabber through MRA.

[Anurag Srivastava1]

Hello,

It seems some issue with jabber config file?

Did you tried login internally first for this user? because then only it will be able to download its config file and then you can try from internet.

Please note "VoiceServicesDomain" is case sensitive and you have put this exactly same.

This problem is explained in the above link.

If still you are not able to fix this please open a TAC case to work with IM&P team to check if jabber config file is proper or not.

Thanks.

Please rate if it is helpful.....