EX90 Endpoint Not Registering through Collaboration edge

[Siva chinap]

Dear All,

I am facing issue in registering EX90 endpoint through collaboration edge. Ex90 is unable to register from outside. The status shows un regiter in touch panel . But when i make a outgoing calls its working . I am unable to identify the issue.

I didnt uploaded the security ceritifcate in the endpoint and CUCM is non secure mode.

Below are the confgiuration :

1. In the TC-based endpoint, select Configuration > Network a
   1. Domain Name:tp.local
   2. Server Address:expe.tp.local
2. In the TC-based endpoint, select Configuration > Provisioning a
   1. LoginName - as defined in CUCM-->(Owner user id and password)
   2. Mode - Edge
   3. Password - as defined in CUCM--->-->(Owner user id and password)
      External Manager
   4. Address - expe.tp.local
   5. Domain - tp.local

Ex90 endpoint configuration:

[Jaime Valencia]

If your CUCM is NOT in mixed mode, why are you using a profile that asks for TLS for the device as if it was in secure mode???

And MRA depends on you having the _collab-edge SRV in the public DNS for it to be found, I don't believe anyone will register a .local domain in a public DNS, for you to get the SRV.

[Alok Jaiswal]

Have you read about it here.

https://www.cisco.com/c/en/us/support/docs/unified-communications/expressway/118696-config-cucm-00.html

You only use secure profile if you have the CUCM in mixed mode and you want to use encrypted profile. Also make sure that Exp-C certificate must have the secure profile name added as SAN entry and the Exp-E certificate must contain the "collab-edge.domain" entry.

Also as pointed by Jaime, "tp.local" the domain must be externally resolvable. Endpoint registration over MRA is not same as Jabber, in Jabber you can use a workaround as "voice service domain". However it will not work for endpoint registration.

Regards,

Alok

[Siva chinap · Accepted solution]

I registered the endpoint after uploading the certificate.

Below is summary of configuration:

###  We uploaded  the internal root CA to the EX 90 endpoint to validate its server.

### Since our cluster is non secure mode created a Phone Security profile TCP+UDP

1)I need to  know what protocol need to use external manager http or https?