Re: [cisco-voip] Expressway registration w/ 2 nodes

[Lelio Fulgenzi]

Ok. Doing some more reading. It sounds like both nodes are active. It’s when 
one fails that the node limit comes into play.

Does this sound about right?

“The maximum video call capacity per node is 150 sessions. In a two-node 
cluster in a non-resilient deployment, the video call cluster capacity is 300, 
but it would be reduced by half if one node fails. In order to provide 
resiliency and maintain the cluster capacity if one of the two nodes fails, the 
recommended high-available two-node cluster capacity is limited to 150 video 
sessions. During normal operations, video calls are load-balanced across the 
cluster; and with business-to-business communications, rich media session 
licenses are shared across the cluster. If one node fails, the remaining node 
is licensed to handle all 150 cluster video sessions because of license 
sharing. Because the node capacity is also 150 video sessions, the remaining 
node can then handle all 150 video sessions, and therefore the cluster capacity 
is maintained.”

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 15, 2019, at 11:01 PM, Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:


Does expressway enforce the N+1 limits in a two node system?

If I have two medium nodes in each C and E cluster, does the 2501st 
registration get rejected?

Just knowing whether I should plan sooner or later to add a third node to the 
clusters.

I’m pretty sure we’ll be ok. But we’re going strong with Jabber in the new year 
and I’m worried about all the mobile devices that will be registering.

We’re still on 11, so no off-Prem service definition. Not sure we’d block that 
anyways.




-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[cisco-voip] Expressway registration w/ 2 nodes

[Lelio Fulgenzi]

Does expressway enforce the N+1 limits in a two node system?

If I have two medium nodes in each C and E cluster, does the 2501st 
registration get rejected?

Just knowing whether I should plan sooner or later to add a third node to the 
clusters.

I’m pretty sure we’ll be ok. But we’re going strong with Jabber in the new year 
and I’m worried about all the mobile devices that will be registering.

We’re still on 11, so no off-Prem service definition. Not sure we’d block that 
anyways.




-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Webex: feedback issues in rooms with mice and speakers

[Lelio Fulgenzi]

Ok. Thx. I’m going to see what we need to make this work.

Even, if only at first, it’s a series of muting mics to hear a remote 
participant’s question.

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

On Nov 15, 2019, at 8:27 PM, Charles Goldsmith 
mailto:w...@woka.us>> wrote:

Not that I've seen.  Have had too many people join a meeting from their laptop 
in a room with a video unit and room mics and we get feedback.

On Fri, Nov 15, 2019 at 7:06 PM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:

I may have asked this before, but my searching isn’t working.

If I set up Webex in a room and pipe the audio from a mic into our Webex 
session, and then pipe the audio from the PC into the room, does Webex have 
“magic” to prevent feedback? Both for us in the room, but also remote 
participants?

What if I step it up and feed the mic into the room system as well?

It’s two things we’ve not done yet that people have been asking.

I’ve been told by our A/V tech support that it really needs a sound processing 
system.

Thoughts?

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Webex: feedback issues in rooms with mice and speakers

[Charles Goldsmith]

Not that I've seen.  Have had too many people join a meeting from their
laptop in a room with a video unit and room mics and we get feedback.

On Fri, Nov 15, 2019 at 7:06 PM Lelio Fulgenzi  wrote:

>
> I may have asked this before, but my searching isn’t working.
>
> If I set up Webex in a room and pipe the audio from a mic into our Webex
> session, and then pipe the audio from the PC into the room, does Webex have
> “magic” to prevent feedback? Both for us in the room, but also remote
> participants?
>
> What if I step it up and feed the mic into the room system as well?
>
> It’s two things we’ve not done yet that people have been asking.
>
> I’ve been told by our A/V tech support that it really needs a sound
> processing system.
>
> Thoughts?
>
> *-sent from mobile device-*
>
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 <519-824-4120;56354> | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5

[Erick Bergquist]

I’ve done 2 8.11.x to 12.5.5 fine (clustered setup, 4). There is a bug with
clustering to watch out for but I did not encounter it. The 12.5 Cisco
download page has a note and link about this.

Currently working on jabberd process high memory consumption issue on one
node that has been present since 8.11.x which 12.5 had memory leak fix for
but still an issue. Slow memory increase over time just on one of the edge
nodes.

Going to look over 12.5.6 release notes now

Erick



On Fri, Nov 15, 2019 at 3:28 PM Matt Jacobson 
wrote:

> If that is the case, then I would double check that it is supported. In
> the release notes there is a chart for supported platforms based on
> serial numbers. If it is a legacy Tandberg box, then I suspect 12.x may not
> work out for you.
>
> On Fri, Nov 15, 2019 at 14:30 Jonathan Charles  wrote:
>
>> This is a legacy Tandberg VCS for video only... no MRA, no remote
>> phones... just inbound and outbound sip video...
>>
>>
>> Jonathan
>>
>> On Fri, Nov 15, 2019 at 12:44 PM Pawlowski, Adam 
>> wrote:
>>
>>> We’re at 12.5.3 and probably moving to 12.5.5/12.5.6 somewhere in the
>>> Holiday timeframe when everything quiets down a bit.
>>>
>>>
>>>
>>> There hasn’t been really any significant issue upgrading from 8 -> 12,
>>> but there have been a couple of bugs that largely are all resolved by
>>> deleting and rebuilding whatever the thing is that is misbehaving.
>>>
>>>
>>>
>>> The requirement for the _*cup*_login and _cisco-uds SRVs went away
>>> though it still endlessly logs a warning about not finding them, but it
>>> will work.
>>>
>>>
>>>
>>> You do also gain the ability to play with the openssl cipher strings but
>>> in my limited experience trying to change those to bump them up a notch, it
>>> ends up breaking XMPP or something.
>>>
>>>
>>>
>>> Adam
>>>
>>>
>>>
>>> *From:* cisco-voip  *On Behalf Of 
>>> *Jonathan
>>> Charles
>>> *Sent:* Friday, November 15, 2019 11:59 AM
>>> *To:* Ryan Huff 
>>> *Cc:* cisco-voip@puck.nether.net
>>> *Subject:* Re: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5
>>>
>>>
>>>
>>> Thanks, the latest is 12.5.6, released last week, I am avoiding it like
>>> the plague...and the bug fix doesn't apply to us.
>>>
>>>
>>>
>>> I am going with 12.5.5 (released in August).
>>>
>>>
>>>
>>> I already have release keys (Cisco AM sent them over)...
>>>
>>>
>>>
>>> Hybrid services are on a separate VCS-C that is already 12.5.
>>>
>>>
>>>
>>> My plan is to get new certs if we have any issues
>>>
>>>
>>>
>>>
>>> Thanks!
>>>
>>>
>>>
>>>
>>>
>>> Jonathan
>>>
>>>
>>>
>>> On Fri, Nov 15, 2019 at 10:46 AM Ryan Huff  wrote:
>>>
>>> A couple of thoughts for you...
>>>
>>>
>>>
>>>- Get the software release key for 12.x now (you'll be asked to
>>>enter it during the upgrade in the GUI). You'll need to work with TAC > 
>>> GLO
>>>for this if (and I assume this would be your case) the existing 8.7 
>>> serial
>>>is active in Cisco's licensing system. The caveat to trying to do this 
>>> with
>>>Cisco's self-service license re-host tool is that while the 8.7 serial is
>>>active, it won't allow you to assign the new 12.x software release PAK to
>>>the serial because the serial is already assigned to another software
>>>release key.
>>>
>>>
>>>- Take a backup first, your only roll back option is to re-install
>>>   8.7 and restore the backup.
>>>
>>>
>>>- Your VMware Hypervisor needs to be 6.0/5/7.
>>>
>>>
>>>- If you have Hybrid Services configured, make sure the management
>>>connector is up to date first.
>>>
>>>
>>>- SSL Certificate validation changed a bit in 8.8+
>>>
>>>
>>>- Verify proper forward / reverse DNS for all the relevant touch
>>>   points
>>>   - Make sure the Expressway certificate trust is up-to-date with
>>>   all the current CUCM,CUC,IMP identity certificates (self-signed) or CA
>>>   certificates (public CA signed certificates).
>>>   - no duplicate certificates in the Expressway trusts
>>>
>>> Beyond that, just pay attention to the caveats list in the upgrade doc
>>> for your version of 12.5.x (12.5.4 is the latest I think).
>>>
>>>
>>>
>>> Thanks,
>>>
>>>
>>>
>>> Ryan
>>>
>>>
>>> --
>>>
>>> *From:* cisco-voip  on behalf of
>>> Jonathan Charles 
>>> *Sent:* Friday, November 15, 2019 10:57 AM
>>> *To:* cisco-voip@puck.nether.net 
>>> *Subject:* [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5
>>>
>>>
>>>
>>> Can we just upgrade directly or do we need to go to an intermediary
>>> version first?
>>>
>>>
>>>
>>> Also, any gotchas besides new certificates?
>>>
>>>
>>>
>>>
>>>
>>> Jonathan
>>>
>>> ___
>> cisco-voip mailing list
>> cisco-voip@puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
___

[cisco-voip] Webex: feedback issues in rooms with mice and speakers

[Lelio Fulgenzi]

I may have asked this before, but my searching isn’t working.

If I set up Webex in a room and pipe the audio from a mic into our Webex 
session, and then pipe the audio from the PC into the room, does Webex have 
“magic” to prevent feedback? Both for us in the room, but also remote 
participants?

What if I step it up and feed the mic into the room system as well?

It’s two things we’ve not done yet that people have been asking.

I’ve been told by our A/V tech support that it really needs a sound processing 
system.

Thoughts?

-sent from mobile device-

Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 
2W1
519-824-4120 Ext. 56354 | 
le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5

[Matt Jacobson]

If that is the case, then I would double check that it is supported. In the
release notes there is a chart for supported platforms based on
serial numbers. If it is a legacy Tandberg box, then I suspect 12.x may not
work out for you.

On Fri, Nov 15, 2019 at 14:30 Jonathan Charles  wrote:

> This is a legacy Tandberg VCS for video only... no MRA, no remote
> phones... just inbound and outbound sip video...
>
>
> Jonathan
>
> On Fri, Nov 15, 2019 at 12:44 PM Pawlowski, Adam 
> wrote:
>
>> We’re at 12.5.3 and probably moving to 12.5.5/12.5.6 somewhere in the
>> Holiday timeframe when everything quiets down a bit.
>>
>>
>>
>> There hasn’t been really any significant issue upgrading from 8 -> 12,
>> but there have been a couple of bugs that largely are all resolved by
>> deleting and rebuilding whatever the thing is that is misbehaving.
>>
>>
>>
>> The requirement for the _*cup*_login and _cisco-uds SRVs went away
>> though it still endlessly logs a warning about not finding them, but it
>> will work.
>>
>>
>>
>> You do also gain the ability to play with the openssl cipher strings but
>> in my limited experience trying to change those to bump them up a notch, it
>> ends up breaking XMPP or something.
>>
>>
>>
>> Adam
>>
>>
>>
>> *From:* cisco-voip  *On Behalf Of 
>> *Jonathan
>> Charles
>> *Sent:* Friday, November 15, 2019 11:59 AM
>> *To:* Ryan Huff 
>> *Cc:* cisco-voip@puck.nether.net
>> *Subject:* Re: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5
>>
>>
>>
>> Thanks, the latest is 12.5.6, released last week, I am avoiding it like
>> the plague...and the bug fix doesn't apply to us.
>>
>>
>>
>> I am going with 12.5.5 (released in August).
>>
>>
>>
>> I already have release keys (Cisco AM sent them over)...
>>
>>
>>
>> Hybrid services are on a separate VCS-C that is already 12.5.
>>
>>
>>
>> My plan is to get new certs if we have any issues
>>
>>
>>
>>
>> Thanks!
>>
>>
>>
>>
>>
>> Jonathan
>>
>>
>>
>> On Fri, Nov 15, 2019 at 10:46 AM Ryan Huff  wrote:
>>
>> A couple of thoughts for you...
>>
>>
>>
>>- Get the software release key for 12.x now (you'll be asked to enter
>>it during the upgrade in the GUI). You'll need to work with TAC > GLO for
>>this if (and I assume this would be your case) the existing 8.7 serial is
>>active in Cisco's licensing system. The caveat to trying to do this with
>>Cisco's self-service license re-host tool is that while the 8.7 serial is
>>active, it won't allow you to assign the new 12.x software release PAK to
>>the serial because the serial is already assigned to another software
>>release key.
>>
>>
>>- Take a backup first, your only roll back option is to re-install
>>   8.7 and restore the backup.
>>
>>
>>- Your VMware Hypervisor needs to be 6.0/5/7.
>>
>>
>>- If you have Hybrid Services configured, make sure the management
>>connector is up to date first.
>>
>>
>>- SSL Certificate validation changed a bit in 8.8+
>>
>>
>>- Verify proper forward / reverse DNS for all the relevant touch
>>   points
>>   - Make sure the Expressway certificate trust is up-to-date with
>>   all the current CUCM,CUC,IMP identity certificates (self-signed) or CA
>>   certificates (public CA signed certificates).
>>   - no duplicate certificates in the Expressway trusts
>>
>> Beyond that, just pay attention to the caveats list in the upgrade doc
>> for your version of 12.5.x (12.5.4 is the latest I think).
>>
>>
>>
>> Thanks,
>>
>>
>>
>> Ryan
>>
>>
>> --
>>
>> *From:* cisco-voip  on behalf of
>> Jonathan Charles 
>> *Sent:* Friday, November 15, 2019 10:57 AM
>> *To:* cisco-voip@puck.nether.net 
>> *Subject:* [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5
>>
>>
>>
>> Can we just upgrade directly or do we need to go to an intermediary
>> version first?
>>
>>
>>
>> Also, any gotchas besides new certificates?
>>
>>
>>
>>
>>
>> Jonathan
>>
>> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] UCCX Callback Script

[Anthony Holloway]

Bump.

On Thu, Nov 14, 2019 at 10:12 AM Anthony Holloway <
avholloway+cisco-v...@gmail.com> wrote:

> Tanner, I ran a test and actually, anything inside the Do step will block
> events.
>
> As a test, I used this Do step:
>
> Do {
> int i = 0;
> do {
> i++;
> } while (i <= 1);
> }
>
> And then hang up the a call during the do step, and see that nothing
> happens; no interrupt.  However, the label we ask the script to goto on CIE
> is then the label which is executed next.  This seems obvious when you
> consider that there isn't a toggle-able option for interrupt handling on
> the Do step.
>
> But back to your method of handling callbacks, because I find it so
> interesting.
>
> I found that if in script 2, if the Agent just hangs up, you cannot
> re-queue the call, because CL2 is now dead.  And in order to generate a new
> active Contact Leg, you'd need to re-do the place call step, which means
> you would need to signal something back to script 1.
>
> Signaling between two running scripts is non-trivial and requires polling,
> since Cisco hasn't implemented promises yet.  ;)
>
> On Mon, Nov 11, 2019 at 2:13 PM Anthony Holloway <
> avholloway+cisco-v...@gmail.com> wrote:
>
>> Tanner, That was tongue in cheek my man.  I was really looking forward to
>> having more of a conversation with you about the thread locking solution,
>> and balancing the pros and the cons with it.
>>
>> Also, I'm still confused how you are doing your solution, pertaining
>> specifically to keeping script 1 alive, as I have found that it needs to
>> remain alive, else you lose Leg 1's Contact (likely due to it being Garbage
>> Collected).
>>
>>
>>
>> On Fri, Nov 8, 2019 at 11:43 AM Anthony Holloway <
>> avholloway+cisco-v...@gmail.com> wrote:
>>
>>> [image: image.png]
>>>
>>> On Wed, Nov 6, 2019 at 6:18 PM Anthony Holloway <
>>> avholloway+cisco-v...@gmail.com> wrote:
>>>
 To your last point about CIE: it doesn't work for me anyway, and I'm
 not trying to have the script do anything else, so threadlocking doesn't
 sound all that bad.  Unless of course you're trying to tell me that it's
 not just the thread my script is running within, but the entire CCX Engine
 as a thread, then yeah, that's pretty terrible.  Though, I just did a test,
 where I thread slept for 100 seconds in script A, and during that time,
 called into script B, and made sure everything worked fine while the
 threadlocking should have been taking place.  So, I would say it's not the
 CCX Engine as a whole, and likely each script is executed in its own
 thread.  This should be acceptable in this one use case.

 It's still a mystery to me how you're handling script 1.

 It kind of sounds like you are doing a 999s delay loop, but are you
 checking for the contact to be active still with the Get Contact Info
 step?  So, essentially the same thing I was doing, but with script steps
 instead (and less frequently)?  If so, then your script 1 stays active for
 ~15 minutes, worst case scenario, after the callback has been completed,
 correct?

 E.g.,

 CL1 = Place Call ()
 Successful
 LABEL0:
 Delay 999s
 is_active = Get Contact Info (CL1)
 If (is_active)
 True
 Goto LABEL0
 End

 On Wed, Nov 6, 2019 at 5:55 PM Tanner Ezell 
 wrote:

> I place an exception handler for contact inactive, checking for the
> callback contact via get Contact Info step to make sure the caller hanging
> up didn't catch the exception.
>
> From there I have programmed in resiliency for the callback to be hung
> up by the agent, but beyond that there is a Delay 999s loop. You'll never
> hit the limit as you've discovered.
>
> Would not recommend Thread.sleep inside your code as it will thread
> lock the task and may interfere; for example, it may prevent the CIE to be
> caught properly in that script. Use Delay step, it's thread safe and is
> built in a way that allows exceptions to be handled.
>
> On Wed, Nov 6, 2019 at 4:46 PM Anthony Holloway <
> avholloway+cisco-v...@gmail.com> wrote:
>
>> Ok, so I solved the looping thing by...well...looping.  :/
>>
>> So, loops themselves are not the problem, rather it's the finite
>> script steps we can execute which are the problem...err...challenge.
>>
>> Since the CIE doesn't get thrown in script 1 properly (bug?), I used
>> a Do step in the success branch of the Place Call step to wait for the
>> active state of CL1 to change.  Like so:
>>
>> Do {
>> do {
>> java.lang.Thread.sleep(1000);
>> } while (contact_leg_1.isActive());
>> }
>>
>> CL1 only becomes inactive once the Agent acknowledges the callback
>> and the call redirect is successful.  Therefore, I get all the benefits 
>> 

Re: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5

[Jonathan Charles]

This is a legacy Tandberg VCS for video only... no MRA, no remote phones...
just inbound and outbound sip video...


Jonathan

On Fri, Nov 15, 2019 at 12:44 PM Pawlowski, Adam  wrote:

> We’re at 12.5.3 and probably moving to 12.5.5/12.5.6 somewhere in the
> Holiday timeframe when everything quiets down a bit.
>
>
>
> There hasn’t been really any significant issue upgrading from 8 -> 12, but
> there have been a couple of bugs that largely are all resolved by deleting
> and rebuilding whatever the thing is that is misbehaving.
>
>
>
> The requirement for the _*cup*_login and _cisco-uds SRVs went away though
> it still endlessly logs a warning about not finding them, but it will work.
>
>
>
> You do also gain the ability to play with the openssl cipher strings but
> in my limited experience trying to change those to bump them up a notch, it
> ends up breaking XMPP or something.
>
>
>
> Adam
>
>
>
> *From:* cisco-voip  *On Behalf Of 
> *Jonathan
> Charles
> *Sent:* Friday, November 15, 2019 11:59 AM
> *To:* Ryan Huff 
> *Cc:* cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5
>
>
>
> Thanks, the latest is 12.5.6, released last week, I am avoiding it like
> the plague...and the bug fix doesn't apply to us.
>
>
>
> I am going with 12.5.5 (released in August).
>
>
>
> I already have release keys (Cisco AM sent them over)...
>
>
>
> Hybrid services are on a separate VCS-C that is already 12.5.
>
>
>
> My plan is to get new certs if we have any issues
>
>
>
>
> Thanks!
>
>
>
>
>
> Jonathan
>
>
>
> On Fri, Nov 15, 2019 at 10:46 AM Ryan Huff  wrote:
>
> A couple of thoughts for you...
>
>
>
>- Get the software release key for 12.x now (you'll be asked to enter
>it during the upgrade in the GUI). You'll need to work with TAC > GLO for
>this if (and I assume this would be your case) the existing 8.7 serial is
>active in Cisco's licensing system. The caveat to trying to do this with
>Cisco's self-service license re-host tool is that while the 8.7 serial is
>active, it won't allow you to assign the new 12.x software release PAK to
>the serial because the serial is already assigned to another software
>release key.
>
>
>- Take a backup first, your only roll back option is to re-install 8.7
>   and restore the backup.
>
>
>- Your VMware Hypervisor needs to be 6.0/5/7.
>
>
>- If you have Hybrid Services configured, make sure the management
>connector is up to date first.
>
>
>- SSL Certificate validation changed a bit in 8.8+
>
>
>- Verify proper forward / reverse DNS for all the relevant touch points
>   - Make sure the Expressway certificate trust is up-to-date with all
>   the current CUCM,CUC,IMP identity certificates (self-signed) or CA
>   certificates (public CA signed certificates).
>   - no duplicate certificates in the Expressway trusts
>
> Beyond that, just pay attention to the caveats list in the upgrade doc for
> your version of 12.5.x (12.5.4 is the latest I think).
>
>
>
> Thanks,
>
>
>
> Ryan
>
>
> --
>
> *From:* cisco-voip  on behalf of
> Jonathan Charles 
> *Sent:* Friday, November 15, 2019 10:57 AM
> *To:* cisco-voip@puck.nether.net 
> *Subject:* [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5
>
>
>
> Can we just upgrade directly or do we need to go to an intermediary
> version first?
>
>
>
> Also, any gotchas besides new certificates?
>
>
>
>
>
> Jonathan
>
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5

[Pawlowski, Adam]

We’re at 12.5.3 and probably moving to 12.5.5/12.5.6 somewhere in the Holiday 
timeframe when everything quiets down a bit.

There hasn’t been really any significant issue upgrading from 8 -> 12, but 
there have been a couple of bugs that largely are all resolved by deleting and 
rebuilding whatever the thing is that is misbehaving.

The requirement for the _cup_login and _cisco-uds SRVs went away though it 
still endlessly logs a warning about not finding them, but it will work.

You do also gain the ability to play with the openssl cipher strings but in my 
limited experience trying to change those to bump them up a notch, it ends up 
breaking XMPP or something.

Adam

From: cisco-voip  On Behalf Of Jonathan 
Charles
Sent: Friday, November 15, 2019 11:59 AM
To: Ryan Huff 
Cc: cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5

Thanks, the latest is 12.5.6, released last week, I am avoiding it like the 
plague...and the bug fix doesn't apply to us.

I am going with 12.5.5 (released in August).

I already have release keys (Cisco AM sent them over)...

Hybrid services are on a separate VCS-C that is already 12.5.

My plan is to get new certs if we have any issues


Thanks!


Jonathan

On Fri, Nov 15, 2019 at 10:46 AM Ryan Huff 
mailto:ryanh...@outlook.com>> wrote:
A couple of thoughts for you...


  *   Get the software release key for 12.x now (you'll be asked to enter it 
during the upgrade in the GUI). You'll need to work with TAC > GLO for this if 
(and I assume this would be your case) the existing 8.7 serial is active in 
Cisco's licensing system. The caveat to trying to do this with Cisco's 
self-service license re-host tool is that while the 8.7 serial is active, it 
won't allow you to assign the new 12.x software release PAK to the serial 
because the serial is already assigned to another software release key.

 *   Take a backup first, your only roll back option is to re-install 8.7 
and restore the backup.

  *   Your VMware Hypervisor needs to be 6.0/5/7.

  *   If you have Hybrid Services configured, make sure the management 
connector is up to date first.

  *   SSL Certificate validation changed a bit in 8.8+

 *   Verify proper forward / reverse DNS for all the relevant touch points
 *   Make sure the Expressway certificate trust is up-to-date with all the 
current CUCM,CUC,IMP identity certificates (self-signed) or CA certificates 
(public CA signed certificates).
 *   no duplicate certificates in the Expressway trusts
Beyond that, just pay attention to the caveats list in the upgrade doc for your 
version of 12.5.x (12.5.4 is the latest I think).

Thanks,

Ryan


From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
on behalf of Jonathan Charles mailto:jonv...@gmail.com>>
Sent: Friday, November 15, 2019 10:57 AM
To: cisco-voip@puck.nether.net 
mailto:cisco-voip@puck.nether.net>>
Subject: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5

Can we just upgrade directly or do we need to go to an intermediary version 
first?

Also, any gotchas besides new certificates?


Jonathan
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Webex Directory Connector Welcome Emails

[Jonathan Charles]

 No SSO... they have it sort of in place... but it isn't close to being
ready.


jonathan

On Fri, Nov 15, 2019 at 11:13 AM Lelio Fulgenzi  wrote:

> You mean, no SSO enabled?
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
>
>
> *From:* Jonathan Charles 
> *Sent:* Friday, November 15, 2019 12:00 PM
> *To:* Lelio Fulgenzi 
> *Cc:* Matthew Loraditch ;
> cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] Webex Directory Connector Welcome Emails
>
>
>
> The alternative was sending thousands of emails to users who would never,
> ever, use Webex... (lots of drivers and warehouse people...)
>
>
>
>
>
> Jonathan
>
>
>
> On Fri, Nov 15, 2019 at 10:42 AM Lelio Fulgenzi  wrote:
>
> If you’re going to add to the group manually, then you’re good to go!
>
>
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
>
>
> *From:* Jonathan Charles 
> *Sent:* Friday, November 15, 2019 10:56 AM
> *To:* Lelio Fulgenzi 
> *Cc:* Matthew Loraditch ;
> cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] Webex Directory Connector Welcome Emails
>
>
>
> We are going to go ahead and create a Webex group and throw the users in
> there... that way we can control who gets added.
>
>
>
> Thanks!
>
>
>
>
>
>
>
> Jonathan
>
>
>
> On Tue, Nov 12, 2019 at 4:41 PM Lelio Fulgenzi  wrote:
>
> When you build your filter, you might want to add a couple of things. This
> is based on feedback and experience…
>
>
>
> The first, is an AND with (mail=*), this way, if they don’t have an email
> address, they don’t get created.
>
> Also, AND with (!(memberOf=cn=)), this way, for whatever
> reason, you can add someone to the bypass list and avoid errors.
>
>
>
> My groups are created by machines. I can’t modify them. So, if someone out
> there has an issue, I add them to the bypass list and resolve later and cut
> down on email alerts.
>
>
>
> Example, for some reason, people have used our corporate email address to
> get a webex account from another organization who has also enabled AD
> integration. Go figure.
>
>
>
> ¯\_(ツ)_/¯
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
>
>
> *From:* Jonathan Charles 
> *Sent:* Tuesday, November 12, 2019 4:59 PM
> *To:* Lelio Fulgenzi 
> *Cc:* Matthew Loraditch ;
> cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] Webex Directory Connector Welcome Emails
>
>
>
> Thanks, I think we are going to assign the users to an AD group...
>
>
>
>
>
> Jonathan
>
>
>
> On Mon, Nov 11, 2019 at 12:57 PM Lelio Fulgenzi  wrote:
>
> Confirming this. You can also build your AD/LDAP filter accordingly in
> your directory connector application. However, this is a one shot deal. The
> license template on AD group helps you send them to the right license pool.
>
>
>
> Feel free to reach out if you want a 1:1 chat about this.
>
>
>
> *P.S. From feedback as well as observation, you’re looking at about 1hr
> per 10,000 records.*
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
>
>
> *From:* cisco-voip  *On Behalf Of *Matthew
> Loraditch
> *Sent:* Monday, November 11, 2019 1:37 PM
> *To:* Jonathan Charles ; cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] Webex Directory Connector Welcome Emails
>
>
>
> You must enable sso. You can sync licenses based on ad groups now if that
> helps your license issue.
>
>
>
>
>
> Get Outlook for iOS 
>
>
>
> *Matthew Loraditch**​*
>
> *Sr. Network Engineer*
>
> p: *443.541.1518* <443.541.1518>
>
> w: *www.heliontechnologies.com* 
>
>  |
>
> e: *mloradi...@heliontechnologies.com* 
>
> [image: Helion Technologies] 

Re: [cisco-voip] Webex Directory Connector Welcome Emails

[Lelio Fulgenzi]

You mean, no SSO enabled?

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

From: Jonathan Charles 
Sent: Friday, November 15, 2019 12:00 PM
To: Lelio Fulgenzi 
Cc: Matthew Loraditch ; 
cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Webex Directory Connector Welcome Emails

The alternative was sending thousands of emails to users who would never, ever, 
use Webex... (lots of drivers and warehouse people...)


Jonathan

On Fri, Nov 15, 2019 at 10:42 AM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:
If you’re going to add to the group manually, then you’re good to go!


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

From: Jonathan Charles mailto:jonv...@gmail.com>>
Sent: Friday, November 15, 2019 10:56 AM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>>; 
cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Webex Directory Connector Welcome Emails

We are going to go ahead and create a Webex group and throw the users in 
there... that way we can control who gets added.

Thanks!



Jonathan

On Tue, Nov 12, 2019 at 4:41 PM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:
When you build your filter, you might want to add a couple of things. This is 
based on feedback and experience…

The first, is an AND with (mail=*), this way, if they don’t have an email 
address, they don’t get created.
Also, AND with (!(memberOf=cn=)), this way, for whatever 
reason, you can add someone to the bypass list and avoid errors.

My groups are created by machines. I can’t modify them. So, if someone out 
there has an issue, I add them to the bypass list and resolve later and cut 
down on email alerts.

Example, for some reason, people have used our corporate email address to get a 
webex account from another organization who has also enabled AD integration. Go 
figure.

¯\_(ツ)_/¯

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

From: Jonathan Charles mailto:jonv...@gmail.com>>
Sent: Tuesday, November 12, 2019 4:59 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>>; 
cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Webex Directory Connector Welcome Emails

Thanks, I think we are going to assign the users to an AD group...


Jonathan

On Mon, Nov 11, 2019 at 12:57 PM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:
Confirming this. You can also build your AD/LDAP filter accordingly in your 
directory connector application. However, this is a one shot deal. The license 
template on AD group helps you send them to the right license pool.

Feel free to reach out if you want a 1:1 chat about this.

P.S. From feedback as well as observation, you’re looking at about 1hr per 
10,000 records.

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Matthew Loraditch
Sent: Monday, November 11, 2019 1:37 PM
To: Jonathan Charles mailto:jonv...@gmail.com>>; 
cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Webex Directory Connector Welcome Emails

You must enable sso. You can sync licenses based on ad groups now if that helps 
your license issue.


Get Outlook for iOS

Matthew Loraditch​
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com
 |
e: mloradi...@heliontechnologies.com
[Helion Te

Re: [cisco-voip] Webex Directory Connector Welcome Emails

[Jonathan Charles]

The alternative was sending thousands of emails to users who would never,
ever, use Webex... (lots of drivers and warehouse people...)


Jonathan

On Fri, Nov 15, 2019 at 10:42 AM Lelio Fulgenzi  wrote:

> If you’re going to add to the group manually, then you’re good to go!
>
>
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
>
>
> *From:* Jonathan Charles 
> *Sent:* Friday, November 15, 2019 10:56 AM
> *To:* Lelio Fulgenzi 
> *Cc:* Matthew Loraditch ;
> cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] Webex Directory Connector Welcome Emails
>
>
>
> We are going to go ahead and create a Webex group and throw the users in
> there... that way we can control who gets added.
>
>
>
> Thanks!
>
>
>
>
>
>
>
> Jonathan
>
>
>
> On Tue, Nov 12, 2019 at 4:41 PM Lelio Fulgenzi  wrote:
>
> When you build your filter, you might want to add a couple of things. This
> is based on feedback and experience…
>
>
>
> The first, is an AND with (mail=*), this way, if they don’t have an email
> address, they don’t get created.
>
> Also, AND with (!(memberOf=cn=)), this way, for whatever
> reason, you can add someone to the bypass list and avoid errors.
>
>
>
> My groups are created by machines. I can’t modify them. So, if someone out
> there has an issue, I add them to the bypass list and resolve later and cut
> down on email alerts.
>
>
>
> Example, for some reason, people have used our corporate email address to
> get a webex account from another organization who has also enabled AD
> integration. Go figure.
>
>
>
> ¯\_(ツ)_/¯
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
>
>
> *From:* Jonathan Charles 
> *Sent:* Tuesday, November 12, 2019 4:59 PM
> *To:* Lelio Fulgenzi 
> *Cc:* Matthew Loraditch ;
> cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] Webex Directory Connector Welcome Emails
>
>
>
> Thanks, I think we are going to assign the users to an AD group...
>
>
>
>
>
> Jonathan
>
>
>
> On Mon, Nov 11, 2019 at 12:57 PM Lelio Fulgenzi  wrote:
>
> Confirming this. You can also build your AD/LDAP filter accordingly in
> your directory connector application. However, this is a one shot deal. The
> license template on AD group helps you send them to the right license pool.
>
>
>
> Feel free to reach out if you want a 1:1 chat about this.
>
>
>
> *P.S. From feedback as well as observation, you’re looking at about 1hr
> per 10,000 records.*
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
>
>
> *From:* cisco-voip  *On Behalf Of *Matthew
> Loraditch
> *Sent:* Monday, November 11, 2019 1:37 PM
> *To:* Jonathan Charles ; cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] Webex Directory Connector Welcome Emails
>
>
>
> You must enable sso. You can sync licenses based on ad groups now if that
> helps your license issue.
>
>
>
>
>
> Get Outlook for iOS 
>
>
>
> *Matthew Loraditch**​*
>
> *Sr. Network Engineer*
>
> p: *443.541.1518* <443.541.1518>
>
> w: *www.heliontechnologies.com* 
>
>  |
>
> e: *mloradi...@heliontechnologies.com* 
>
> [image: Helion Technologies] 
>
> [image: Facebook] 
>
> [image: Twitter] 
>
> [image: LinkedIn] 
> --
>
> *From:* cisco-voip  on behalf of
> Jonathan Charles 
> *Sent:* Monday, November 11, 2019 1:34:18 PM
> *To:* cisco-voip@puck.nether.net 
> *Subject:* Re: [cisco-voip] Webex Directory Connector Welcome Emails
>
>
>
> Also, we have not yet enabled SSO, so unchecking the welcome email is not
> an option
>
>
>
>
>
> Jonathan
>
>
>
> On Mon, Nov 11, 2019 at 12:33 PM Jonathan Charles 
> wrote:
>
> Have  a customer with 20K+ users, want to enable directory
> synchronization, but am concerned it is going to send 20K emails to 15K
> users who will not be using Webex.
>
>
>
> How do I avoid th

Re: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5

[Jonathan Charles]

Thanks, the latest is 12.5.6, released last week, I am avoiding it like the
plague...and the bug fix doesn't apply to us.

I am going with 12.5.5 (released in August).

I already have release keys (Cisco AM sent them over)...

Hybrid services are on a separate VCS-C that is already 12.5.

My plan is to get new certs if we have any issues


Thanks!


Jonathan

On Fri, Nov 15, 2019 at 10:46 AM Ryan Huff  wrote:

> A couple of thoughts for you...
>
>
>- Get the software release key for 12.x now (you'll be asked to enter
>it during the upgrade in the GUI). You'll need to work with TAC > GLO for
>this if (and I assume this would be your case) the existing 8.7 serial is
>active in Cisco's licensing system. The caveat to trying to do this with
>Cisco's self-service license re-host tool is that while the 8.7 serial is
>active, it won't allow you to assign the new 12.x software release PAK to
>the serial because the serial is already assigned to another software
>release key.
>
>
>- Take a backup first, your only roll back option is to re-install 8.7
>   and restore the backup.
>
>
>- Your VMware Hypervisor needs to be 6.0/5/7.
>
>
>- If you have Hybrid Services configured, make sure the management
>connector is up to date first.
>
>
>- SSL Certificate validation changed a bit in 8.8+
>   - Verify proper forward / reverse DNS for all the relevant touch
>   points
>   - Make sure the Expressway certificate trust is up-to-date with all
>   the current CUCM,CUC,IMP identity certificates (self-signed) or CA
>   certificates (public CA signed certificates).
>   - no duplicate certificates in the Expressway trusts
>
> Beyond that, just pay attention to the caveats list in the upgrade doc for
> your version of 12.5.x (12.5.4 is the latest I think).
>
> Thanks,
>
> Ryan
>
> --
> *From:* cisco-voip  on behalf of
> Jonathan Charles 
> *Sent:* Friday, November 15, 2019 10:57 AM
> *To:* cisco-voip@puck.nether.net 
> *Subject:* [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5
>
> Can we just upgrade directly or do we need to go to an intermediary
> version first?
>
> Also, any gotchas besides new certificates?
>
>
> Jonathan
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5

[Ryan Huff]

A couple of thoughts for you...


  *   Get the software release key for 12.x now (you'll be asked to enter it 
during the upgrade in the GUI). You'll need to work with TAC > GLO for this if 
(and I assume this would be your case) the existing 8.7 serial is active in 
Cisco's licensing system. The caveat to trying to do this with Cisco's 
self-service license re-host tool is that while the 8.7 serial is active, it 
won't allow you to assign the new 12.x software release PAK to the serial 
because the serial is already assigned to another software release key.

 *   Take a backup first, your only roll back option is to re-install 8.7 
and restore the backup.

  *   Your VMware Hypervisor needs to be 6.0/5/7.

  *   If you have Hybrid Services configured, make sure the management 
connector is up to date first.

  *   SSL Certificate validation changed a bit in 8.8+
 *   Verify proper forward / reverse DNS for all the relevant touch points
 *   Make sure the Expressway certificate trust is up-to-date with all the 
current CUCM,CUC,IMP identity certificates (self-signed) or CA certificates 
(public CA signed certificates).
 *   no duplicate certificates in the Expressway trusts

Beyond that, just pay attention to the caveats list in the upgrade doc for your 
version of 12.5.x (12.5.4 is the latest I think).

Thanks,

Ryan


From: cisco-voip  on behalf of Jonathan 
Charles 
Sent: Friday, November 15, 2019 10:57 AM
To: cisco-voip@puck.nether.net 
Subject: [cisco-voip] VCS Expressway upgrade, 8.7 to 12.5

Can we just upgrade directly or do we need to go to an intermediary version 
first?

Also, any gotchas besides new certificates?


Jonathan
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Webex Directory Connector Welcome Emails

[Lelio Fulgenzi]

If you’re going to add to the group manually, then you’re good to go!


---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

From: Jonathan Charles 
Sent: Friday, November 15, 2019 10:56 AM
To: Lelio Fulgenzi 
Cc: Matthew Loraditch ; 
cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Webex Directory Connector Welcome Emails

We are going to go ahead and create a Webex group and throw the users in 
there... that way we can control who gets added.

Thanks!



Jonathan

On Tue, Nov 12, 2019 at 4:41 PM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:
When you build your filter, you might want to add a couple of things. This is 
based on feedback and experience…

The first, is an AND with (mail=*), this way, if they don’t have an email 
address, they don’t get created.
Also, AND with (!(memberOf=cn=)), this way, for whatever 
reason, you can add someone to the bypass list and avoid errors.

My groups are created by machines. I can’t modify them. So, if someone out 
there has an issue, I add them to the bypass list and resolve later and cut 
down on email alerts.

Example, for some reason, people have used our corporate email address to get a 
webex account from another organization who has also enabled AD integration. Go 
figure.

¯\_(ツ)_/¯

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

From: Jonathan Charles mailto:jonv...@gmail.com>>
Sent: Tuesday, November 12, 2019 4:59 PM
To: Lelio Fulgenzi mailto:le...@uoguelph.ca>>
Cc: Matthew Loraditch 
mailto:mloradi...@heliontechnologies.com>>; 
cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Webex Directory Connector Welcome Emails

Thanks, I think we are going to assign the users to an AD group...


Jonathan

On Mon, Nov 11, 2019 at 12:57 PM Lelio Fulgenzi 
mailto:le...@uoguelph.ca>> wrote:
Confirming this. You can also build your AD/LDAP filter accordingly in your 
directory connector application. However, this is a one shot deal. The license 
template on AD group helps you send them to the right license pool.

Feel free to reach out if you want a 1:1 chat about this.

P.S. From feedback as well as observation, you’re looking at about 1hr per 
10,000 records.

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | le...@uoguelph.ca

www.uoguelph.ca/ccs | @UofGCCS on Instagram, 
Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
On Behalf Of Matthew Loraditch
Sent: Monday, November 11, 2019 1:37 PM
To: Jonathan Charles mailto:jonv...@gmail.com>>; 
cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Webex Directory Connector Welcome Emails

You must enable sso. You can sync licenses based on ad groups now if that helps 
your license issue.


Get Outlook for iOS

Matthew Loraditch​
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com
 |
e: mloradi...@heliontechnologies.com
[Helion Technologies]
[Facebook]
[Twitter]
[LinkedIn]

From: cisco-voip 
mailto:cisco-voip-boun...@puck.nether.net>> 
on behalf of Jonathan Charles mailto:jonv...@gmail.com>>
Sent: Monday, November 11, 2019 1:34:18 PM
To: cisco-voip@puck.nether.net 
mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] Webex Directory Connector Welcome Emails

Also, we have not yet enabled SSO, so unchecking the welcome email is not an 
option


Jonathan

On Mon, Nov 11, 2019 at 12:33 PM Jonathan Charles 
mailto:jonv...@gmail.com>> wrote:
Have  a customer with 20K+ users, want to enable directory synchronization, but 
am concerned it is going to send 20K emails to 15K users who will not be using 
Webex.

How do I avoid this?

Also, if all of them are licensed via template, how do we ensure u

[cisco-voip] VCS Expressway upgrade, 8.7 to 12.5

[Jonathan Charles]

Can we just upgrade directly or do we need to go to an intermediary version
first?

Also, any gotchas besides new certificates?


Jonathan
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Webex Directory Connector Welcome Emails

[Jonathan Charles]

We are going to go ahead and create a Webex group and throw the users in
there... that way we can control who gets added.

Thanks!



Jonathan

On Tue, Nov 12, 2019 at 4:41 PM Lelio Fulgenzi  wrote:

> When you build your filter, you might want to add a couple of things. This
> is based on feedback and experience…
>
>
>
> The first, is an AND with (mail=*), this way, if they don’t have an email
> address, they don’t get created.
>
> Also, AND with (!(memberOf=cn=)), this way, for whatever
> reason, you can add someone to the bypass list and avoid errors.
>
>
>
> My groups are created by machines. I can’t modify them. So, if someone out
> there has an issue, I add them to the bypass list and resolve later and cut
> down on email alerts.
>
>
>
> Example, for some reason, people have used our corporate email address to
> get a webex account from another organization who has also enabled AD
> integration. Go figure.
>
>
>
> ¯\_(ツ)_/¯
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
>
>
> *From:* Jonathan Charles 
> *Sent:* Tuesday, November 12, 2019 4:59 PM
> *To:* Lelio Fulgenzi 
> *Cc:* Matthew Loraditch ;
> cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] Webex Directory Connector Welcome Emails
>
>
>
> Thanks, I think we are going to assign the users to an AD group...
>
>
>
>
>
> Jonathan
>
>
>
> On Mon, Nov 11, 2019 at 12:57 PM Lelio Fulgenzi  wrote:
>
> Confirming this. You can also build your AD/LDAP filter accordingly in
> your directory connector application. However, this is a one shot deal. The
> license template on AD group helps you send them to the right license pool.
>
>
>
> Feel free to reach out if you want a 1:1 chat about this.
>
>
>
> *P.S. From feedback as well as observation, you’re looking at about 1hr
> per 10,000 records.*
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 | le...@uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
>
>
> *From:* cisco-voip  *On Behalf Of *Matthew
> Loraditch
> *Sent:* Monday, November 11, 2019 1:37 PM
> *To:* Jonathan Charles ; cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] Webex Directory Connector Welcome Emails
>
>
>
> You must enable sso. You can sync licenses based on ad groups now if that
> helps your license issue.
>
>
>
>
>
> Get Outlook for iOS 
>
>
>
> *Matthew Loraditch**​*
>
> *Sr. Network Engineer*
>
> p: *443.541.1518* <443.541.1518>
>
> w: *www.heliontechnologies.com* 
>
>  |
>
> e: *mloradi...@heliontechnologies.com* 
>
> [image: Helion Technologies] 
>
> [image: Facebook] 
>
> [image: Twitter] 
>
> [image: LinkedIn] 
> --
>
> *From:* cisco-voip  on behalf of
> Jonathan Charles 
> *Sent:* Monday, November 11, 2019 1:34:18 PM
> *To:* cisco-voip@puck.nether.net 
> *Subject:* Re: [cisco-voip] Webex Directory Connector Welcome Emails
>
>
>
> Also, we have not yet enabled SSO, so unchecking the welcome email is not
> an option
>
>
>
>
>
> Jonathan
>
>
>
> On Mon, Nov 11, 2019 at 12:33 PM Jonathan Charles 
> wrote:
>
> Have  a customer with 20K+ users, want to enable directory
> synchronization, but am concerned it is going to send 20K emails to 15K
> users who will not be using Webex.
>
>
>
> How do I avoid this?
>
>
>
> Also, if all of them are licensed via template, how do we ensure users who
> never log in will not use a license?
>
>
>
>
>
> Jonathan
>
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip