Register MX200 via Expressway E

[christianbernal]

Good day!!

One question I have one CUCM version 10.5 with expressway C and E Version: X8.7.2, I try configure this guide

http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X8-5/Mobile-Remote-Access-via-Expressway-Deployment-Guide-X8-5.pdf  for register endpoints via internet.

I try register my endpoint MX200, but in the guide not specific username and password, I need set username to MX200 in CUCM ??

external manager is the public ip address to expressway E ??

Exists the other guide to check ??

Thank You!!!

[Jaime Valencia]

The only guide you need is the MRA guide, it covers Jabber and endpoints, config-wise, if you have it working for Jabber, and you meet the certificate requirements, any other endpoint should be able to login.

You'll have to use your user@domain login, just as with Jabber for the device.

Yes, assuming you want for some reason change what you have in your collab-edge SRV, you'll have to point to the right FQDN/IP for MRA registration.

[christianbernal]

In the expressway C and E show the next error is important ??

I have already set the domains configuration ..

[Jaime Valencia]

Yeah, it means basically nothing related to MRA will work as the configuration is either lacking, or is wrong. Follow the MRA guides to configure this.

[Paulo Ferreira]

Hello,

I'm trying to configure the same.
It's mandatory to have the services collab-edge and sips on public domain even we dont want to login automaticaly but inserting just the IP of ExpE?

Thanks in advance.

[Slavik Bialik]

Your current problem has nothing to do with the SRV records. You must first need to solve the issue with the UC traversal zone, that stating it has no connection.

Check:

1. Both Expressway's are using signed certificates.
2. In both Expressway's, in the trusted certificate, you uploaded the relevant trust CA. If for example you signed Expressway-E with a public CA, so you must upload the trust chain certificates of the public CA in Expressway-E, otherwise Expressway-C won't be able to communicate via TLS with Expressway-E as there's no trust.
3. Check that all the relevant ports are not being blocked in the Firewall.
4. Check your configurations again using the configuration guide of MRA.

But regarding your question about the SRV records.

I, personally, never saw the last field you have in MX300/800 devices when trying to register them via Expressway, I'm guessing it is firmware based, so I'm not 100% sure. BUT, I would suggest you to configure it anyway ("_collab-edge._tls.domain.com"), it has nothing to do with automatic login, it just helps you to discover the service without entering IP's and such. About the "sips", if you're also enabling Business-to-Business calling, you must configure it, because if you want someone to call you, they should call: user@domain.com, it'll take the "domain.com" and will search for SRV of "sip" or "sips", and it'll resolve it to the Expressway-E IP address and will be routed to there.