I m not able to login via Jabber from outside using MRA , exp-c and exp-e , getting cannot open the page , try again

[Ibrahim Jamil]

Hi Guys

pls find attachment

I m not able to login via Jabber from outside using MRA , exp-c and exp-e , getting cannot open the page , try again

so far , CUCM to EXP-C has tls connection

the MRA zone in active between EXP-C and EXP-E

the outside jabber user has the below nslookup:

> set type=srv
> _collab-edge._tls.abc.com
Server:  <Public DNS>
Address:  A.B.C.D

_collab-edge._tls.abc.com     SRV service location:
          priority       = 1
          weight         = 1
          port           = 8443
          svr hostname   = EXP-E.abc.com
>

getting the below logs in exp-e:  , 192.168.64.40 is exp-c

2018-12-29T08:44:48.037+03:00    sshdpfwd[12212]: Event="sshd" Module="openssh" Level="INFO" Detail="Disconnected from 192.168.64.40 port 32714" UTCTime="2018-12-29 05:44:48"
2018-12-29T08:44:48.037+03:00    sshdpfwd[12212]: Event="sshd" Module="openssh" Level="INFO" Detail="Received disconnect from 192.168.64.40 port 32714:11: disconnected by user" UTCTime="2018-12-29 05:44:48"
2018-12-29T08:44:47.899+03:00    sshdpfwd[12210]: Event="sshd" Module="openssh" Level="INFO" Detail="User child is on pid 12212" UTCTime="2018-12-29 05:44:47"
2018-12-29T08:44:47.898+03:00    sshdpfwd[12210]: Event="sshd" Module="openssh" Level="INFO" Detail="Accepted publickey for _pfwd from 192.168.64.40 port 32714 ssh2: RSA+cert SHA256:7/oY3dr9BmdGfUvK5smTMwuZ8CEdYw5Y4OZsxtwr3Q8" UTCTime="2018-12-29 05:44:47"
2018-12-29T08:44:47.898+03:00    sshdpfwd[12210]: Event="sshd" Module="openssh" Level="INFO" Detail="Authorized by X509(rsa) : OU=Temporary Certificate aaab84c0-f7b6-42ef-bc40-94c7fa9f3418,O=Temporary Certificate aaab84c0-f7b6-42ef-bc40-94c7fa9f3418,CN=EXP-C.abc.com" UTCTime="2018-12-29 05:44:47"

thanks all

[George Sotiropoulos]

As a start, have you checked the logs/results from the following Cisco "Collaboration Solutions Analyzer":

https://cway.cisco.com/csa/

G

[Ibrahim Jamil]

Hi Bro

Attached all in the Thread

thanks

[UC-Eng-aaS]

You need to look at the sip logs of your exp-e/c. The log you posted is useless.
Find at the link below more info on how to collect the right logs from your expressways.
https://www.cisco.com/c/en/us/support/docs/unified-communications/expressway/213360-collect-expressway-vcs-diagnostic-log-fo.html

[Ibrahim Jamil]

Hi UC-Eng

Helpful reply

thanks