08-10-2020 01:29 AM - edited 08-10-2020 01:29 AM
Hi,
I have been trying to deploy Expressway 12.6 MRA to allow jabber to use without VPN on lab but i've been getting some issues on the testing.
Was wondering if anyone could provide some inputs and suggestion if i've missed anything ?
I've configured all the DNS on both local and public and tested , works fine.
For Expressway-E i've been seeing various docs which mentions to configure the public domain for E but some mentions use local domain.
Local Domain - abc.local
A Record and SRV
Public Domain - abc.com
A Record & SRV
exp-e.abc.com | [Public IP] |
_sips._tcp.abc.com | 10 10 5061 exp-e.abc.com |
_collab-edge._tls.abc.com | 10 10 8443 exp-e.abc.com |
Expressway-E
Domain
Expressway-C
The issue is if i use public domain (abc.com) on E:
The issue is if i use local domain (abc.local) on E:
The Exp C is configured with local domain (abc.local)
I've update the jabber-config-user.xml file with update VoiceServicesDomain to public domain (abc.com) and when testing its and getting "cannot communicate with the server" and the diagnostics shows
Domain Controller - The Specified domain either does not exist or could not be contacted."
Many Thanks
09-02-2020 02:27 AM
hi
1. Do you have public signed certificate for expressway-e?
2. are you using 2 nic deployment or single nic deployment in Expressway-E?
3. do you have abc.com DNS zone inside your dns server?
if you can answer above queries i can help you.
09-02-2020 11:24 AM - edited 09-02-2020 11:24 AM
Local Domain - abc.local
A Record and SRV
The Expressway E configuration should be dual nic. create A subzone in internal DNS for abc.com and create A record in this zone for expresswayE.abc.com pointing to expressway internal nic IP address. upload expressway E public signed certificate on E with Root CA. upload the Public root CA on Expressway C. Upload the internal Root CA(which signed Expressway C) on expressway E.
note:- when generating CSR from Expressway E make sure that u select/enter the DNS/Collab edge option and mentioned ur public domain.
Expressway E san should have the public domain name.
09-02-2020 10:41 PM
ON expressway E, External Domain name should be mentioned in the unified CM registration domain as DNS or COllab Edge when generating the CSR. so you need to purchase SAN or multi domain certificate from public CA.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide