When you re-generate Cisco CUCM tomcat certificate, you may get this error on finesse.
1- Download tomcat.pem from CUCM publisher and uploaded the new CUCM tomcat certificates on the UCCX nodes as tomcat trust
2- Reload the UCCX
Tech Tips
When you re-generate Cisco CUCM tomcat certificate, you may get this error on finesse.
1- Download tomcat.pem from CUCM publisher and uploaded the new CUCM tomcat certificates on the UCCX nodes as tomcat trust
2- Reload the UCCX
Mobile and Remote access System Configuration
Expressway MRA use for registering your remote endpoints registering with CUCM without using VPN
Few Points
* If your are deploying over WAN, minimum recommended latency is 80ms
* Remote devices will be communicating with Edge initially using the Public IP, E Usually deploy in DMZ. C takes care of LAN side communication towards CUCM
* There will be two interface for Edge. Internal and External.
* Remote devices will be registered over Core, on CUCM you could find the registered device IP as C
* If you have redundancy, Then both C act as Active - Active
---------------------DNS Records-----------------
1 - Create PTR DNS Record for each Xpressway C host
2 - Create Expressway Cluster DNS for Cluster C
3 - Create PTR DNS Record for each Xpressway E host
4 - Create Expressway Cluster DNS for Cluster E
5 - Create SRV Records
create 2 Recors for Expressway E [ port number 8443]
service : _collab-edge
Protocol: _tls
---------------------Installation MRA with Expressway-----------------
** Install Both E and C. Following are the basic config
1- Add your NTP server on C and Expressway
2- Change your root CLI password
Default User Name - root Default Password TANDBERG
command to change password 'passwd'
3- Add Options key on Both C and E. Once you add Expressway series key system will show as whether its Core or Edge
4- Add DNS server IP'series
5- Configure Clustering on C and E
->enter the Cluster Name and then add the peer 1 and 2 host name/IP address
->Reboot both E and C. Once it rebooted check your clustering is Active
6- Configure Unified Communication
-> Go to Configuration-> Unified Communications -> Choose Mobile and remote access
7- Configure Domain > Add your Domain
8- Add a link between C and CUCM
configuration -> Unified Communications -> Unified CM Servers -> Enter FQDN or IP or Pub
enter AXL details. Once its added CM cluster will be auto added
9- Add CA Certificate and Root Certificates
On C go to Maintenance -> Security Certificates-> Trusted CA Certificates -> Browse and add rootCA certificate
We had migrated all the DID's to SIP provider, however the Toll free numbers we had from Different Provider. All agents phone masked with TFN, But Since TFN from different provider SIP ITSP rejected the outbound calls agent make. To pass the TFN we need to add a Diversion header so that it will be authenticated from ITST and then call will be routed
request INVITE sip-header From modify "(.*sip:Your TFN @.*)" "\1\x0D\x0ADiversion: <sip:DID from ITSP@CUEB IP Address>"
Below Diversion header also work
request INVITE sip-header Diversion add "Diversion: <sip:DID@CUEB IP Address>"