Generating CSR on Expressway Edge for MRA

[VCsupport17]

Hi Community,

We are deploying mobile and remote access via Expressway.

Here is how the system deployed:

I would like to ask help on what are the needed parameters to put on the Alternative name section when generating CSR for Expressway Edge for mobile and remote access based on the domains and host names of the CUCM, IM&P and Expressway Core.

Internal domain = internal.com

External domain = company.com

The Jabber clients can login and registered internally with their sip address format user@imp1.internal.com.

SX80 endpoints are registered on the CUCM in the sip address format 9xxx@1.2.3.4 where 1.2.3.4 is the IP address of the CUCM publisher (ucm-pub.internal.com)

Thank you for your help in advance.

[Jaime Valencia]

Configure all the domains you'll use for MRA and integrate your CUCM/IM&P in your EXP-C and all of those will be populated automatically.

If you're going to use a different internal and external domain, both of them need to be listed.

[VCsupport17]

Hi Jaime,

Thank you for your reply.

In our case, Jabber users on the internal are registering with SIP address format user@imp1.internal.com where imp1.internal.com is the host name of the IM and Presence server.

So on the Expressway Edge CSR under Unified CM registration domains, should i also include imp1.internal.com on the list of the domains? Or just internal.com which is our only internal domain for UC infrastructure and company.com which is our external domain?

regards,

Sy

[Jaime Valencia]

You should know how your JIDs look like, all you need to use, is the RHS.

Go to the presence topology, click on your server -> users, and see the IM address column, that is what you need to configure as the domain(s).

[VCsupport17]

Hi Jaime,

Sorry but what is RHS?

Thank you.

[Jaime Valencia]

Right Hand Side

[VCsupport17]

Hi Jaime,

We changed our topology for Expressway Edge from single NIC to dual NIC.

In our case LAN 1 will be the external and LAN 2 is internal.

Core ------------FW1----[LAN2]---Edge---[LAN1:NAT]------FW2-------Internet

Do we need to create A record for Edge LAN2 and as peer address on traversal zone on Core?

Thanks.