Remote-access Guide

unified communications mobile and remote access via cisco expressway

by Mr. Orrin Shields II Published 2 years ago Updated 1 year ago
image

What is Cisco Unified Communications Manager Expressway?

It allows endpoints such as Cisco Jabber to have their registration, call control, provisioning, messaging and presence services provided by Cisco Unified Communications Manager ( Unified CM) when the endpoint is outside the enterprise network. The Expressway provides secure firewall traversal and line-side support for Unified CM registrations.

What kind of devices can register to the expressway-C?

Figure 1. Unified Communications: Mobile and Remote Access Third-party SIP or H.323 devices can register to the Expressway-C and, if necessary, interoperate with Unified CM -registered devices over a SIP trunk. Figure 2. Typical Call Flow - Signalling and Media Paths

How do I configure ununified cm and IM and presence service?

Unified CM and IM and Presence Service are configured as specified in the configuration and management guides for your version, at Cisco Unified Communications Manager Configuration Guides .

Is the expressway-C encrypted?

All media is encrypted between the Expressway-C and the mobile endpoint. Any MRA solution requires Expressway and Unified CM, with MRA-compatible soft clients and/or fixed endpoints.

image

What is Cisco expressway used for?

Cisco Expressway is a powerful gateway solution specifically designed for comprehensive collaboration services provided through Cisco Unified Communications Manager, Cisco Business Edition, or Cisco Hosted Collaboration Solution (HCS).

What is the purpose of mobile and remote access MRA in the Cisco UCM architecture?

The Mobile and Remote Access solution (MRA) supports a hybrid on-premises and cloud-based service model. This provides a consistent experience inside and outside the enterprise. MRA provides a secure connection for Jabber application traffic without having to connect to the corporate network over a VPN.

How do I access Cisco Expressway?

Open a browser window and in the address line type one of the following: • IP address of the Cisco Expressway (for example, https://10.0.0.1). Enter the address as HTTPS. FQDN of the Cisco Expressway (for example, https://mydomain.example.com).

What is an MRA phone?

It is a device and operating system agnostic solution for Cisco Jabber clients on Windows, Mac, iOS and Android platforms. MRA allows Jabber clients that are outside the enterprise to do the following: Use Instant Messaging and Presence services. Make voice and video calls.

How do you set up an MRA?

0:586:47Expressway MRA Basic Configuration - YouTubeYouTubeStart of suggested clipEnd of suggested clipAlso make sure that authorized by user credential is set to on scroll. Down and hit save. Now thatMoreAlso make sure that authorized by user credential is set to on scroll. Down and hit save. Now that MRA is enabled the domains can be set up for MRA. Let's go back to configuration. Domains.

What is the difference between Cisco Expressway C and E?

Differences between VCS C and VCS E Tandberg's legacy devices typically used VCS Control, or VCS C, within the organization and VCS Expressway, or VCS E, was used between firewalls. To put it more simply, VCS C was used internally within the organization while VCS E was utilized externally.

What is VCS Expressway?

The VCS Expressway is a SIP Registrar & Proxy and H. 323 Gatekeeper for devices which are located outside the internal network (for example, home users and mobile worker registering across the internet and 3rd party businesses making calls to, or receiving calls from this network).

Is Expressway secure?

Secure communication is possible with Expressway because it uses two servers. The core server, known as Expressway-C, sits inside and acts as a firewall traversal client. The second server, Expressway-E server, is on the edge of your network and is the only point of access to the public Internet.

What is Cisco Expressway edge?

Cisco Expressway-Edge is another name for VCS-Expressway. Same exact software. Expressway-Edge is a VCS-Expressway that is deployed as a Mobile and Remote Access proxy only.

How do I upgrade my Cisco Expressway?

1:544:49How to Upgrade an Expressway Cluster - YouTubeYouTubeStart of suggested clipEnd of suggested clipSeries section you can go to download software to get the upgrade the upgrade file is going to beMoreSeries section you can go to download software to get the upgrade the upgrade file is going to be the dot tar. Gz. File. It's the same file for both the C and the E. Now go to the expressway.

What is the difference between a highway and an expressway?

An expressway is a limited-access highway for a high-speed and high volume of traffic without any signal, intersection, or property access. Whereas, the highway is a main public roadway for a higher volume of traffic with traffic signals, intersections, and property access.

What is VCS Cisco?

The Cisco Video Communication Server (VCS) provides the most advanced telepresence and video conferencing call control in the industry. Flexible and extensible for video conferencing applications, it enables any-to-any interoperability between all standards-compliant SIP and H. 323 devices.

What is Cisco Unified Communications?

Cisco Unified Communications mobile and remote access is a core part of the Cisco Collaboration Edge Architecture. It allows endpoints such as Cisco Jabber to have their registration, call control, provisioning, messaging and presence services provided by Cisco Unified Communications Manager (Unified CM) when the endpoint is not within the enterprise network. The Expressway provides secure firewall traversal and line-side support for Unified CM registrations.

What is Expressway C?

Expressway-C automatically generates non-configurable neighbor zones between itself and each discovered Unified CM node. A TCP zone is always created, and a TLS zone is created also if the Unified CM node is configured with a Cluster Security Mode (System > Enterprise Parameters > Security Parameters) of 1 (Mixed) (so that it can support devices provisioned with secure profiles). The TLS zone is configured with its TLS verify mode set to On if the Unified CM discovery had TLS verify mode enabled. This means that the Expressway-C will verify the CallManager certificate for subsequent SIP communications. Each zone is created with a name in the format 'CEtcp-<node name>' or 'CEtls-<node name>'.

How does Jabber verify the identity of Expressway E?

Jabber clients must verify the identity of the Expressway-E they are connecting to by validating its server certificate. To do this, they must have the certificate authority that was used to sign the Expressway-E's server certificate in their list of trusted CAs.

What is a mobile and remote access solution?

The mobile and remote access solution supports a hybrid on-premises and cloud-based service model, providing a consistent experience inside and outside the enterprise. It provides a secure connection for Jabber application traffic without having to connect to the corporate network over a VPN. It is a device and operating system agnostic solution for Cisco Jabber clients on Windows, Mac, iOS and Android platforms.

Why does a high volume of calls trigger denial of service thresholds on unified CM?

This is because all the calls arriving at Unified CM are from the same Expressway-C (cluster).

Does Expressway E always respond to SSO requests?

The Expressway-E always responds true to /get_edge_sso requests. It does not make the inwards request to the user's home Unified CM, and thus cannot know whether SSO is really available there.

Where are unified CM nodes located?

Unified CM nodes and Expressway peers can be located in different domains. For example, your Unified CM nodes may be in the enterprise.com domain and your Expressway system may be in the edge.com

image
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 1 2 3 4 5 6 7 8 9