VCS Expressway cannot connect

Similar Questions

• VCS Expressway outside to endpoints internal call

  I have a new implementation where internal control 1 to VCS in LAN and VCS Expressway in DMZ 1.

  VCS Expressway has an IP public address/NAT.

  Currently, we have a group of VC endpoint, each endpoint has a public IP/NAT to the local network, to allow internet to make H.323 call directly by public IP address of the composition of the endpoint.

  My question is, after having implemented VCS Expressway in DMZ, how do the numbering plan at each endpoint internal VCS Highway outside call? Do I still need to give to each endpoint an ip/NAT publich.

  Thank you very much.

  A much simpler and in my opinion, more elegant and more scalable solution would be not to use IP addresses for calls, but to allocate and register outcomes with E.164 alias. That way you all you need is the internal IP address.

  So the outer ends may, in this case, call your settings using the [email protected] / * / or [email protected] / * /-E_IP_address.

  Internal assessment criteria can call each other using alias only for as long you have the rules of research in place, and cannot therefore have the external ends you will allow to record with you VCS-E for one reason or another.

  If you have the outcomes of Polycom external with the old version of the software that does not support Annex O URI component, then it's very simple to include a transformation of prior research on the VCS-E which will allow these settings call using owners 'numbering URI "; VCS-E_IP_address ##Alias - and if you, on the odd occasion, a final point which cannot use anything other than IP addresses, you can configure the alias of relief on the VCS-E to point to a specific or a standard automatic on a MCU, purpose etc.

  A dial plan using as above will also allow you to use DHCP addresses, the alias remains static, and that's what counts, addresses much simpler to give to people. e.g. 123456 is much easier to remember than 202.138.98.23 etc, not to mention the IPv6 addresses, and because you save your settings with domain name, and then customers SIP will also be able to connect very easily.

  /Jens

• Highway-C and highway-E and VCS Expressway

  Hello

  I'm confused by these three

  I know that expressway-E is used with Express-C track

  Their function is like VCS Expressway? or am I wrong?

  Please help to know when to use each one?

  Also why use us next to the firewall? What is the average of the crossing of firewall?

  Also, when I connect external with Jabber, is there any type of registration with each of them? I see a number taken in charge of registeration of 2500 and 5000 in the VCS Expressway data sheet

  Thank you

  Haitham

  Hi Haitham,

  In general, a point of endpoints/client must register for a 'device' so that it can be used as part of a company dial plan. This 'device' could be CUCM or a VCS and will determine if an endpoint/client is used to connect, or how the calls and form, it can be done.

  If the endpoint does NOT have one of these devices (CUCM or VCS), it could still be used (for example, a videoconferencing device stand alone), it's just that we do not see within the company structure of appeal. It may not appear in the directories, it cannot give priority to call outside, etc etc. The Jabber client has to register with CUCM either a VCS to make it work at all.

  If you use CUCM with a VCS-E, endpoints will record to CUCM. If the endpoints are internal to the company, they apply directly to the CUCM and if are external, then they will be connect via VCS-E and the recording will be dug through CUCM, so still save with CUCM.

  VCS-C/e with environment of TMS, endpoints will record VCS - c when internal and again use the VCS-E for tunnel applications from external device to the VCS - C. Depending on how you want to deploy these devices, external devices/clients could actually register directly with VCS-E, but I'm getting ahead of things. Jabber in this environment use of TMS to provide authentication of the user, even if the actual recording takes place on the VCS.

  Does that help?

  Chris

• Control of VCS and VCS expressway design

  I have a problem with the design of control and track Express VCS. Now, here's two VCS control and a highway. As you know, put on the Internet Highway and a control on my seat. At the same time, I want to put the other control on the management of my company which is in another city. Can it work correctly? How dose it work?

  You must create two zones on VCS Expressway crossing server and a customer journey area by control VCS.

  In other words, you should have a link path by VCS - C connection VCS-E separately.

  Please be sure to set different H.323/SIP port on each VCS - C.

  For example:

  VCS - C1 (Headquarters): area of traversal client pointing to VCS-E 6001 as port H323 and SIP traversal port 7001.

  VCS - C2 (branch): area of traversal client pointing to VCS - E with 6002 as port H323 and SIP traversal port 7002.

  VCS-E: a traversal server zone list for VCS - C1 (6001 as port H323 and SIP traversal port 7001) and other traversal server list for VCS - C2 (6002 as port H323 and SIP traversal port 7002)

• Jabber client - encryption of VCS Expressway with MRA

  Hi all

  I'm working on the implementation of MRA for a video solution existing. Version CUCM is 9.1.2 (no IM & P server), vcs - c and vcs-e 8.2.2.  Client Jabber is 11.5.x

  I finished most of the introduction and I am able to call internally and externally through MRA.

  I still have a few things to tweak.  One is the encryption of video calling once jabber connects from outside.  From my understanding, the thigh jabber call end point and VCS Expressway uses TLS. But when I run wireshark on the PC with Jabber client, I don't see the RTP stream as being encrypted.

  CUCM my jabber device does not use a secure profile.  Is it ok or not?

  Please let me know if more are needed.  Thank you

  You can confirm the call is encrypted from the client of jabber MRA by doing as follows (I used 11.5 jabber client, if you are using an older client, I can't guarantee this method):

  1. make a call from the client jabber ARM, once the call is configured and media is established, you can end the call.
  2. create a jabber client problem report (help > report a problem...)
  3. Enter the required details and save the .zip file.
  4 extract the file "jabber.log" from the .zip file. Since this file (at least since the version of client jabber 11.5) has the SIP messaging included in this document, you can use TranslatorX to view the file (you can also use a text editor if you wish).
  5 generate a diagram of the log file.

  translatorx - 01.png

  

  6. in the diagram of the scale, you should be able to locate the origin of the call. Search for an invitation, in my case a "RE-INVITE" and select it. A pop-up window will appear with the details of the SIP message.

  translatorx - 02.png

  

  7. read the content of the message prompt of the SIP protocol (focusing on the SDP - the component of negotiating media). I won't go into detail about how to read SIP messages (there's a good article here, it is not for jabber specifically, but the same concepts apply).

  translatorx - 03.png

  

  8. close the prompt message and open the message 'OK w/SDP' to examine the response of the VCS-E. The SDP response, we can confirm that the encryption settings have been accepted for the media (media will be encrypted).

  translatorx - 04.png

  

  For re - apply point Jamie, unless you run CUCM in mixed mode and using security profiles, signalling/media encryption stops on the thigh of CUCM/endpoint and the VCS - C respectively. See the diagram below for reference (mixed mode not implemented).

  MRA-media - flow.png

  

  You need not applied to the device of CSF security profiles to obtain the encryption between the client of jabber MRA and the VCS-E. If you can decode signaling and media packets in Wireshark your jabber client, you probably will not connect via ARM (ARM is always encrypted).

  Please let us know if that helps.

  -Jon

• VCS Expressway & movi 4.2 configuration

  Hi all

  I created movi account manually in the TMS and it work perfectly with VCS - control.

  However, it cannot register for VCS expressway. Is it mandatory to have a name authority pointer record in DNS?

  For example, configure us abc.com as the domain name SIP Highway VCS, is mandatory to fix abc.com as public highway VCS by DNS server IP address?

  Thank you

  Ben

  That is to say you do not originate in the AMZ comes directly to the public IP address of the VCSE

  If that's the case at least, you should see registration tent if nothing can be seen then you need to look at the firewall

  is he ASA? try tp packets capture and see why you arew not hitting the VCSE using SIP

  as it could be firewall issue!

  HTH

• VCS expressway firewall rules

  Hello

  I just need your confirmation on the following configuration.

  VCSC - FW - Internet

  |

  |

  VCSE

  We use the double option with NAT Nic key.

  VCS expressway wil be connected with 1 single interface LAN for FW.  It will be a private ip address.  Firewall will be Natting the private ip address of VCSE to a public ip address.

  When updating the FW in ruling according to the following link:

  http://www.Cisco.com/en/us/docs/Telepresence/infrastructure/VCs/config_guide/Cisco_VCS_Basic_Configuration_Cisco_VCS_Control_with_Cisco_VCS_Expressway_Deployment_Guide_X7-1.PDF

  Appendix 3 - Page 55-58

  What address VCS expressway ip do you need to use FW rules?  a private or public?

  Thanks in advance.

  Ahmed

  Hi, Ahmed.

  If you use the VCS-E with the option of dual interface for NAT with all of a communication interface,

  the internet and your internal network must go to the _public_ ip address, not the private sector

  one. If it's not only on the firewall, but also the destination of the area on the VCS - C.

  Regards to your firewall, that depends on what must have configured your firewall.

  Some firewalls (or at least admins/users) seem to have problems getting the vcs - e accessible from inside on the

  external ip address. If there is a problem, you must use the secondary interface of the vcs and set a new

  DMZ.

  Please remember useful frequency responses and identify useful or correct answers.

• Jabber VCS Expressway - DNS resolution internal Highway itself

  Much of community support.

  I am currently configuration solution VCS Expressway (Highway E both Expressway C servers). Due to some restrictions of firewall that I need to resolve the fqdn Expressway C directly from the highway E server which means that I need to Hwy E resolve C Expressway fqdn withoout using the DNS server. I was wondering if there is a way to edit the VCS Expressway hosts file (if such a thing exists in the VCS) as anyone can do in the operating systems such as linux. I make this question because I took a capture .pcap of VCS and there saw the DNS query process but option number one was 127.0.0.1, which is the highway itself. Perhaps this connection attempt is just the highway to research in its DNS cache, but I'm not sure.

  Best regards

  Roberto Lopez.

  Ah, this is the reason why I asked. You don't need DNS for it.

  The way it will work is when the Traversal (in your case Expressway-C) client tries to connect to the server of course (in your case Expressway-E), the Traversal server will look at the common name on the cert that was produced by the customer of the crossing. He sees if the highway E would be there with what is specified when you configure the zone crossing on the highway e.

  Basically, DNS is not necessary. You just need to make sure that the domain Highway C FULL name is what is specified in the "TLS check name of the topic." Also make sure that if the certificates are signed by a CA, root/intermediate certificates must be downloaded to the two C/E Expressway. also, make sure you put the FULL name of the motorway E in the crossing area on the fast track C, and not the IP address.

  HTH

• My 5s iphone suddenly showed no service, then I made an attempt to update to ios and itunes connected, now iphone is not enable and display cannot connect to the server and in itunes it shows unable to check your device.please help me

  My 5s iphone suddenly showed no service, then I made an attempt to update to ios and itunes connected, now iphone is not enable and display cannot connect to the server and in itunes it shows unable to check your device.please help me

  Assuming that you have a valid SIM card in the phone, it is more often symptomatic of a phone that has been hacked or jailbroken to unlock.

  Where do you have the phone first?

• Cannot connect to apple tv for Mac OS Sierra

  Hello

  I upgraded my Macbook Pro (Mid 2012 retina) to Sierra de MacOS. When I am trying to connect to apple tv by clicking on the AirPlay icon and click on my Apple TV it asks me to insert a password! Apple TV displays an access code and I use it but it gives me this error:

  Cannot connect to 'Apple TV'

  I upgraded my Apple TV to the last tvOS (10.0). And it gives me the same error.

  I tried to turn on the access code and password on Apple TV AirPlay adjustment but same error. Off, same error.

  Help, please.

  Thank you

  Hooman

  Did you get anywhere with this? I have the same problem.

• Cannot connect to more than one mail account after the upgrade to Sierra

  I have several provided ISP e-mail accounts that work successfully for a long time on elCapitan.  After the upgrade to Sierra this afternoon cannot connect all accounts and I asks me to enter the password.  Why isn't Sierra pick up the passwords of my trousseau?

  Oddly enough, my Hotmail account seems to be ok.

  How can I fix this without having to re - enter all passwords?

  As a result of the foregoing, I found that my connection Keyring contains entries for all of my email accounts.  However, these dates are back in July 2011.

  After an episode of lost or stolen iphone, I had to update all of my passwords by e-mail in February this year (2016).

  Search in my keychain, I found dated entries for my email accounts in iCloud Keychain section.  I don't think that I never activated iCloud for my email.

  How the entires of e-mail account eventually sub iCloud and why the old entries from email account not updated?

• Cannot connect my cell phone to my computer via bluetooth

  Cannot connect my cell phone to my computer via bluetooth

  Cell phones are not supposed to be connected via Bluetooth to a computer.

• Cannot connect to iTunes Store on new iPad Air

  Try buying an iBook.  Keep being told that I can't connect to iTunes store with my new iPad Air.  In addition, my security questions are not accepted. Advice?

  The steps detailed here to try to see if they help you:

  If you cannot connect to the iTunes Store - Apple Support

• Cannot connect iphone 5 itunes store

  Just the last OS installed yesterday evening. Now cannot connect to itunes store. Thin WiFi, date time very well, everything else works fine... not a subscriber of apple's music

  I get the link in the app store for 'visit the itunes store', but nothing happens...

  Thanks for your help!

  Have you tried opening all the app Store iTunes, versus trying to get them through the App Store? I also try to find the link you describe and do not know where you see it. Can you please describe what you see and where you see it a little more clear?

• iPhone cannot connect to the server to iCloud

  Hello!

  My son IPhone cannot connect to the server iCloud. App Store is not available. In the iTunes and App Store from the settings app, I can't log in. IPhone resetting is not possible. Restore from iTunes on Mac is not possible, because find my iPhone is active on the iPhone, and it cannot be turned off, because in the pane of the application of the iCloud settings can't do anything until I have to accept the new terms and conditions, which cannot be made.

  WiFi on the phone works great with Safari, Mail, but cannot get new e-mail messages. The weather application does not connect.

  His iPad that is connected to the same iCloud account has no problem and there is no problem to connect to his account on iCloud.com.

  I tried to restart and reset hard iPhone and updated to 9.3.4 via iTunes on Mac (which went without pain, but doesn't change anything).

  Any help much appreciated!

  Does anyone have advice at all...? Aside from throwing the thing?