Remote-access Guide

cisco dx80 mobile and remote access

by Gladyce Kutch Published 2 years ago Updated 1 year ago
image

What is the Cisco mobile and remote access feature?

The Cisco Mobile and Remote Access (MRA) feature is a “client edge” solution that allows external software and hardware clients to register to enterprise Cisco Unified Communication (UC) solutions without requiring a VPN. Like most things, there are a lot of moving parts working together to create a relatively seamless user experience.

What is MRA (Cisco mobile and remote access)?

Enjoy. The Cisco Mobile and Remote Access (MRA) feature is a “client edge” solution that allows external software and hardware clients to register to enterprise Cisco Unified Communication (UC) solutions without requiring a VPN. Like most things, there are a lot of moving parts working together to create a relatively seamless user experience.

How do I verify the identity of the Cisco Expressway-E Device?

Ensure that the provisioning mode is set to Cisco UCM via Expressway . These devices must verify the identity of the Expressway-E they are connecting to by validating its server certificate.

What are the different types of Cisco IP phones?

Cisco IP Phone 8800 Series except Cisco Wireless IP Phone 8821 and 8821-EX and Cisco Unified IP Conference Phone 8831 Cisco TelePresence endpoints: SX Series, EX Series, MX Series, Profile Series, C Series

image

What is Cisco Mobile Remote Access?

The Cisco Mobile and Remote Access (MRA) feature is a “client edge” solution that allows external software and hardware clients to register to enterprise Cisco Unified Communication (UC) solutions without requiring a VPN.

Can I use a DX80 as a monitor?

Connect your computer to the DX80 to use it as an external monitor, and to enable content sharing. 1. Connect the HDMI-USB bundle (C) to the USB Type B 3 and the HDMI 4 connectors on the DX80. You can tilt the camera to adjust the camera angle, and to activate the document camera feature.

Is Cisco DX80 a computer?

While the DX80 is a full Cisco IP phone, it's also like a giant Android device in that it supports any app designed for that platform. Installation of collaboration apps, such as Jabber and WebEx, went smoothly.

What is the purpose of mobile and remote access MRA in the Cisco UCM architecture?

The Mobile and Remote Access solution (MRA) supports a hybrid on-premises and cloud-based service model. This provides a consistent experience inside and outside the enterprise. MRA provides a secure connection for Jabber application traffic without having to connect to the corporate network over a VPN.

How do I connect my DX80 to Wi-Fi?

Device Wireless and VPN Setup On the DX70/80 device, press Settings, and then enable Wi-Fi on the device. After turning on Wi-Fi, it shows all available wireless networks. Choose your network and connect to it. Once you are connected to Wi-Fi, press Settings > More > VPN.

How do I register my DX80 to Webex?

When you convert an Android-based DX70 or DX80 to CE, you go through the following steps:Prepare the Cisco UCM.Install the first CE software image.Check that the DX device upgrades.Register the DX device anew in Cisco UCM. ... Run the set up wizard on the DX.

What does a DX80 do?

The Cisco DX80 is an all-in-one platform for video and audio conferencing,collaboration. It provides native support for Full HD 1080p30 on a 23" LCD touchscreen and wideband audio for high-quality communications.

How do I connect zoom to Cisco Telepresence?

How to associate the Zoom Connector with your networkFrom your browser, sign into Zoom, and click Cisco/Polycom Rooms. ... Click the API Connectors tab, then click Add API Connector.Enter the network information in the popup dialog. ... Click Save.

How much does a DX80 weigh?

15.62 poundsProduct informationManufacturer‎CISCO SYSTEMS - ENTERPRISEBrand‎CiscoItem Weight‎15.62 poundsProduct Dimensions‎22.24 x 3.5 x 20.16 inchesItem model number‎6774G954 more rows

What are MRA phones?

Basically, MRA (Cisco Unified Communications Mobile and Remote Access) allows endpoints such as Cisco Jabber to have their registration, call control, provisioning, messaging and presence services provided by CUCM when the endpoint is outside the enterprise network.

How do you set up an MRA?

0) - MRA Configuration [Cisco Expressway Series] - Cisco....ProcedureOn the Expressway-C, go to Configuration > Unified Communications > Configuration.Set Unified Communications mode to Mobile and Remote Access.Click Save.Repeat this procedure on Expressway-E.

What is Cisco expressway used for?

Cisco Expressway is a powerful gateway solution specifically designed for comprehensive collaboration services provided through Cisco Unified Communications Manager, Cisco Business Edition, or Cisco Hosted Collaboration Solution (HCS).

Which is a feature of the Cisco DX Series?

The Cisco DX Series features security at multiple levels of the network infrastructure. Endpoints are secured with secure boot, credential storage, image authentication and encryption, and encrypted file system. Cisco Unified Communications Manager provides security inside and outside of the enterprise.

How do I factory reset my dx80?

Hold volume up during boot until mute led is lit (red), then press mute button (the button above the volume up Button).Alt boot: Hold volume down during boot until mute led is lit (red), then press mute button.

How do I mute my dx80?

Press the Microphone mute button on the right side of the system. To unmute a call, press again. Turn the camera shutter counter-clockwise.

How does Jabber verify the identity of Expressway-E?

Jabber clients verify the identity of the Expressway-E they are connecting to by validating its server certificate. To do this, they must have the certificate authority that was used to sign the Expressway-E's server certificate in their list of trusted CAs.

Do you need CAPF to configure mutual TLS?

If you do want to configure mutual TLS, you cannot use CAPF enrolment to provision the client certificates. Instead, manually apply the certificates to the devices. The client certificates must be signed by an authority that is trusted by the Expressway-E.

Can you modify the root CA on Cisco phone?

Trust list: You cannot modify the root CA trust list on Cisco IP Phone 7800 Series and Cisco IP Phone 8800 Series devices. Make sure that the Expressway-E's server certificate is signed by one of the CAs that the devices trust, and that the CA is trusted by the Expressway-C and the Expressway-E.

What is the maximum bit rate for video calls on Cisco Unified Communications Manager?

The Maximum Session Bit Rate for Video Calls on the default region on Cisco Unified Communications Manager is 384 kbps by default . The Default call bandwidth on Expressway-C is also 384 kbps by default. These settings may be too low to deliver the expected video quality for MRA-connected devices.

What domain must the calls be routed to?

The domain to which the calls are routed must match with the MRA domain to which the endpoints were registered. For example, if endpoints are registered with the domain exp.example.com, the calls must be routed to this domain, and it must not be routed to the domain cluster1.exp.example.com .

How does Jabber verify the identity of Expressway-E?

Jabber clients verify the identity of the Expressway-E they are connecting to by validating its server certificate. To do this, they must have the certificate authority that was used to sign the Expressway-E's server certificate in their list of trusted CAs.

What happens if one Expressway node fails?

Currently, if one Expressway node in a clustered deployment fails or loses network connectivity for any reason (including if the Unified CM restarts or fails), all active calls going through the affected node will fail. The calls are not handed over to another cluster peer. Bug ID CSCtr39974 refers. This is not an MRA-specific issue and applies to all call types.

What is a single domain?

A single domain means that you have a common domain ( example.com) with separate internal and external DNS servers. This allows DNS names to be resolved differently by clients on different networks depending on DNS configuration, and aligns with basic Jabber service discovery requirements.

Does Jabber use Expressway C?

Deployments that require Jabber clients to always connect over MRA also benefit from the X12.5 update that no longer requires the Expressway-C to resolve the _cisco-uds DNS SRV record. So administrators only need to configure the _collab-edge DNS SRV record, and Jabber clients using service discovery will only have the option of connecting over MRA.

Does Cisco Expressway support SRV?

From X12.5, the Cisco Expressway Series supports the case where MRA clients use an external domain to lookup the _collab-edge SRV record, and the _cisco-uds SRV record for that same external domain cannot be resolved by the Expressway-C. This is typically the case when split DNS is not available for the external domain. And prior to X12.5 this required a pinpoint subdomain or some other DNS workaround on the Expressway-C, to satisfy the client requirements for resolving the _cisco-uds record.

What is device name in UDS?

The “devicename” is the name as provided in the UDS device list query in the previous step. A successful response will provide XML content that provides a complete device configuration file.

What is MRA in Cisco?

The Cisco Mobile and Remote Access (MRA) feature is a “client edge” solution that allows external software and hardware clients to register to enterprise Cisco Unified Communication (UC) solutions without requiring a VPN. Like most things, there are a lot of moving parts working together to create a relatively seamless user experience. And, like most things, the first time you deploy MRA there are a few “gotchas” that can eat up a significant amount of troubleshooting time.

What to do if Jabber is not able to complete service provisioning?

You should check to see if your browser prompts you with certificate errors or warnings. If there are cert errors then your Jabber client may not be able to complete the service provisioning phase. You should check the certificate on the Edge appliance and verify it is signed by a CA that is in the local client trust store.

Can OpenSSL convert to base64?

Let’s start with the base64 conversion process. On a Mac OSX system, you can use openssl to generate the base64 string. For example:

Can you use telnet to test SIP?

We are now done with the funky base64 strings (yay!). To test basic XMPP and SIP connectivity we are going to dumb things down a bit. We can use telnet from a command prompt to verify connectivity to the appropriate ports.

Does Edge use API calls?

This troubleshooting step is a little more involved. The web-based API on the Edge appliance uses API calls comprised of Base64 values. Therefore, you need a way to generate Base64 values (such as openssl). The API calls also are built using specific application hostnames in your environment. So, you will need to have that information handy.

How to sign on to Cisco?

Open a web browser and navigate to https://internet.cisco.com. Sign On with your Cisco corporate ID and password.

Is Cisco blocking MRA ports?

Cisco Employees – Cisco IT is blocking various media ports on the corporate firewall. Please make sure you are utilizing a public connection when registering devices over MRA whether wireless or wired.

What is MRA in Cisco?

The Cisco Mobile and Remote Access (MRA) feature is a "client edge" solution that allows external software and hardware clients to register to enterprise Cisco Unified Communication (UC) solutions without requiring a VPN. Like most things, there are a lot of moving parts working together to create a relatively seamless user experience. And, like most things, the first time you deploy MRA there are a few "gotchas" that can eat up a significant amount of troubleshooting time.

What is a service domain in Jabber?

The service domain is derived from the Jabber ID (JID) assigned to the end user. For example, if my JID is bill@company.com then the service domain is company.com. The service domain is usually specified by the user the first time they attempt to log into Jabber. Though, the service domain can also be administratively assigned in the jabber-config.xml file.

Can OpenSSL generate base64?

Let's start with the base64 conversion process. On a Mac OSX system, you can use openssl to generate the base64 string. For example:

Can you use telnet to test SIP?

We are now done with the funky base64 strings (yay!). To test basic XMPP and SIP connectivity we are going to dumb things down a bit. We can use telnet from a command prompt to verify connectivity to the appropriate ports.

Does Edge use API calls?

This troubleshooting step is a little more involved. The web-based API on the Edge appliance uses API calls comprised of Base64 values. Therefore, you need a way to generate Base64 values (such as openssl). The API calls also are built using specific application hostnames in your environment. So, you will need to have that information handy.

image
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 1 2 3 4 5 6 7 8 9