What is the latest release of the Cisco Expressway deployment guide?
Mobile and Remote Access via Cisco Expressway Deployment Guide (X8.10) Mobile and Remote Access Through Cisco Expressway Deployment Guide First Published: April 2014 Last Updated: September 2018 Cisco Expressway X8.10 CiscoSystems,Inc. www.cisco.com
What are the Cisco Unified Communications Manager configuration requirements for mobile?
The following Cisco Unified Communications Manager configuration requirements exist for deploying Mobile and Remote Access: IP addressing —Unified CM must be using IPv4 addressing as Expressway does not support IPv6. Cisco AXL Web Service —This service must be running on the publisher node.
What is unified communications mobile and remote access?
Mobile and Remote Access Overview Cisco Unified Communications Mobile and Remote Access is a core part of the Cisco Collaboration Edge Architecture.
How do I deploy MRA clients to Cisco Expressway?
Defined in the Expressway "Guest account client URI" setting on the Expressway > Configuration > Unified Communications > Cisco Meeting Server page. Cisco Expressway supports Mobile and Remote Access with multiple external domains. With this deployment, you will have more than one external domain where your MRA clients may reside.
What is a mobile and remote access solution?
The mobile and remote access solution supports a hybrid on-premises and cloud-based service model, providing a consistent experience inside and outside the enterprise. It provides a secure connection for Jabber application traffic without having to connect to the corporate network over a VPN. It is a device and operating system agnostic solution for Cisco Jabber clients on Windows, Mac, iOS and Android platforms.
What is Cisco Unified Communications?
Cisco Unified Communications mobile and remote access is a core part of the Cisco Collaboration Edge Architecture. It allows endpoints such as Cisco Jabber to have their registration, call control, provisioning, messaging and presence services provided by Cisco Unified Communications Manager (Unified CM) when the endpoint is not within the enterprise network. The Expressway provides secure firewall traversal and line-side support for Unified CM registrations.
How does Jabber verify the identity of Expressway E?
Jabber clients must verify the identity of the Expressway-E they are connecting to by validating its server certificate. To do this, they must have the certificate authority that was used to sign the Expressway-E's server certificate in their list of trusted CAs.
What version of Mac is Cisco Jabber?
n Cisco Jabber for Mac 9.6 or later
Why does a high volume of calls trigger denial of service thresholds on unified CM?
This is because all the calls arriving at Unified CM are from the same Expressway-C (cluster).
Does Expressway-C support VPN?
VPN links, between the Expressway-C and the Unified CM services / clusters, are not supported. "Mixed" traversal connections are not supported. That is, we do not support traversal zones, or Unified Communications traversal zones, between Cisco VCS and Cisco Expressway even though it is possible to configure these zones. Explicitly, we do not support VCS Control traversal to Expressway-E, nor do we support Expressway- C traversal to VCS Expressway.
Does Expressway E always respond to SSO requests?
The Expressway-E always responds true to /get_edge_sso requests. It does not make the inwards request to the user's home Unified CM, and thus cannot know whether SSO is really available there.
What is the maximum bit rate for video calls on Cisco Unified Communications Manager?
The Maximum Session Bit Rate for Video Calls on the default region on Cisco Unified Communications Manager is 384 kbps by default . The Default call bandwidth on Expressway-C is also 384 kbps by default. These settings may be too low to deliver the expected video quality for MRA-connected devices.
What domain must the calls be routed to?
The domain to which the calls are routed must match with the MRA domain to which the endpoints were registered. For example, if endpoints are registered with the domain exp.example.com, the calls must be routed to this domain, and it must not be routed to the domain cluster1.exp.example.com .
How does Jabber verify the identity of Expressway-E?
Jabber clients verify the identity of the Expressway-E they are connecting to by validating its server certificate. To do this, they must have the certificate authority that was used to sign the Expressway-E's server certificate in their list of trusted CAs.
What happens if one Expressway node fails?
Currently, if one Expressway node in a clustered deployment fails or loses network connectivity for any reason (including if the Unified CM restarts or fails), all active calls going through the affected node will fail. The calls are not handed over to another cluster peer. Bug ID CSCtr39974 refers. This is not an MRA-specific issue and applies to all call types.
Does Jabber use Expressway C?
Deployments that require Jabber clients to always connect over MRA also benefit from the X12.5 update that no longer requires the Expressway-C to resolve the _cisco-uds DNS SRV record. So administrators only need to configure the _collab-edge DNS SRV record, and Jabber clients using service discovery will only have the option of connecting over MRA.
Does Cisco Expressway support SRV?
From X12.5, the Cisco Expressway Series supports the case where MRA clients use an external domain to lookup the _collab-edge SRV record, and the _cisco-uds SRV record for that same external domain cannot be resolved by the Expressway-C. This is typically the case when split DNS is not available for the external domain. And prior to X12.5 this required a pinpoint subdomain or some other DNS workaround on the Expressway-C, to satisfy the client requirements for resolving the _cisco-uds record.
Can you use CMS and MRA on the same Expressway?
If you use both the CMS Web Proxy service and MRA on the same Expressway, the following configuration items must be assigned different values per service. If you try to use the same value, the service that was configured first will work, but the other one will fail:
