Solved: Problems with MRA configuration

TommasoLovergine16261 · ‎01-21-2021

Hi everyone, in my company we are now deploying MRA, but I have some problems configuring the two expressway. In particular i get what you see in the attachments.

Can anyone help? Zones, search rules and domains are properly configured i guess.

Thanks a lot.

Nithin Eluvathingal · ‎01-24-2021

I would prefer going with dual NIC.

Example configuration

Expressway C

NIC IP 192.168.10.10 >> VOIP VLAN

Internal DNS Records

A record(Forward and reverse Lookup) expresswayc.internal.domain.it 192.168.10.10

Certificate
- Generate CSR, sign the certificate using Internal CA of domain internal.domain.it.
- Upload CA root to trust
- upload the Server certificate.

CUCM

CUCM IP : 192.168.10.9

Certificate

Generate CSR, sign the certificate using Internal CA of domain internal.domain.it.
Upload CA root certificate to trust
upload the Server server certificate.

Internal DNS Records

A record(Forward and reverse Lookup) cucm.internal.domain.it 192.168.10.9
srv

_cisco-uds._tcp.internal.domain.it SRV service location:
priority = 6
weight = 30
port = 8443
svr hostname =cucm.internal.domain.it

Do the same with other nodes.

Expressway E

NIC 1 IP 192.168.10.10 >> VOIP VLAN

NIC 2 IP 192.168.20.10 >>DMZ IP

Public IP 45.45.45.26

Internal DNS

Create subzone domain.it
A record(Forward and reverse Lookup) in domain.it. expresswayE.domain.it 192.168.20.10

Certificate
- Generate CSR, sign the certificate using public CA (what ever your provider)
- while generating CSR DNS filed should have entry domain.it
- Upload public CA root to Expressway C and E trust
- Upload root CA of internal.domain.it to trust
- upload the Server server certificate.

Public DNS Records

A record(Forward and reverse Lookup) expresswayE.domain.it <<YOUR PUBLIC IP>>
SRV _collabedge._tls.domain.it pointing to above IP/Hostname

when configure dual NIC, use your network design. and the above is just an example configuration.

View solution in original post

Nithin Eluvathingal · ‎01-21-2021

whats the status of the Zone between E and C is it active ?

TommasoLovergine16261 · ‎01-21-2021

First of all thanks for the fast reply. In the attachments the zone status.

Nithin Eluvathingal · ‎01-21-2021

The state is in Warning, can you check why it shows warning. its should show active.

TommasoLovergine16261 · ‎01-21-2021

The problem is exactly the one you mentioned. The status should be active, but instead it shows warning with reason "Systems unreachable" and I don't know why.

Nithin Eluvathingal · ‎01-21-2021

Is it a single NIC or dual NIC.

Looks like you have issue with SIP reachability . you need to check your configuration.

Scott Leport · ‎01-21-2021

Hi there,

This document will have you covered. Have a look at the "Install MRA" section:

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X12-5/exwy_b_mra-expressway-deployment-guide.html

TommasoLovergine16261 · ‎01-22-2021

Thanks a lot, I'll take a look.

Shalid Kurunnan Chalil · ‎01-21-2021

Can you also check or share the screenshot from Configuration >> Unified Communication >> Unified CM.

select the call manager and perform and refresh and see if it doesnt give any error?

Regards,

TommasoLovergine16261 · ‎01-22-2021

Yes for sure, thanks a lot. As you can see.. there is a problem on exp-e proxy forwarding.

Roger Kallberg · ‎01-22-2021

The error message says that there is no Unified Communication traversal zone between the E and C. Correct that and check again.

TommasoLovergine16261 · ‎01-22-2021

yes I read it, but still... zones are configured. You can check the screenshot I already uploaded for more details.

Roger Kallberg · ‎01-22-2021

The screen shots show a zone, but not that it’s a Unified Communication traversal zone. Please provide a screenshot of the entire configuration of the zone on both C and E.

TommasoLovergine16261 · ‎01-22-2021

Just a question.. on the version X12.5 the zones between exp-c and exp-e must be a Unified Communication traversal or Traversal Client - Traversal Server?

Roger Kallberg · ‎01-22-2021

From what I know for MRA it always have to be the Unified Communication traversal specific type of zone.