Re: [cisco-voip] Nortel 81C / CS1000 SIP Trunk to CUCM 10.5.2

I was going to mention the FQDN issue as I ran into it last month. Also, we had a scenario where the Nortel was sending SRTP keys in the SDP and it would cause issues, though I believe the symptom there was one way audio and not a complete failure. The fix for that was to disable SRTP in the COS

[cisco-voip] Phones rebooted whilst in SRST

Hi All We have an issue where phones (7821) that have registered in SRST and then been rebooted will not re register in SRST untill roughly 20 mins has past. After the phone has rebooted is does then not contain any servers in its Active / Standby server list so the phone will never know where t

[cisco-voip] Digicert Wildcard certificates

Hi All, I'm resurrecting an old thread from the deep, where Nate suggested using DigiCert wildcard certificates for UC infrastructure. I'm trying to use some of these for a Expressway MRA implementation, and am struggling with the TLS-verification between the Expressway-E and Expressway-C. There

[cisco-voip] External Call from Movi Client to Conductor fails after 5 sec

Hi all, I am facing a problem with an external call from a movi client (movi is registered to some external video system) which disconnects after about 5-7 sec. Setup: External Movi Client -à Expressway-E-àExpressway-C -à CUCM Cluster -à Conductor -à vTP Server In the CUCM Traces I

Re: [cisco-voip] Digicert Wildcard certificates

Did you put all of your SANs in the digicert page? I have this working on all of my expressway installs. Sent from my iPhone +1 801 718 2308 > On Jul 15, 2015, at 7:35 AM, Ian Anderson wrote: > > Hi All, > > I'm resurrecting an old thread from the deep, where Nate suggested using > DigiCert

Re: [cisco-voip] External Call from Movi Client to Conductor fails after 5 sec

Sounds like a codec issue. Are both sides negotiating the same codec? Thanks, Ryan Original Message From: Robert Schuknecht Sent: Wednesday, July 15, 2015 09:37 AM To: cisco-voip@puck.nether.net Subject: [cisco-voip] External Call from Movi Client to Conductor fails after 5 s

Re: [cisco-voip] Digicert Wildcard certificates

On 15 July 2015 at 15:02, NateCCIE wrote: > Did you put all of your SANs in the digicert page? > > I have this working on all of my expressway installs. > > Hi Nate, Thanks for the quick response, just for preservation in the archives for future posterity and confirmation that digicert seems fin

[cisco-voip] ELM/PLM Licensing alerts - CUCM license RTMT alerts

Has anyone seen the Call Manager RTMT alert for CiscoGraceTimeLeft, CiscoNoProvisionTimeout, CiscoSystemInDemo, or CiscoSystemInOverage occur? The RTMT alerts are all enabled (default) but I've seen multiple call manager 9.x and 10.x go over the licenses in ELM/PLM and get out of compliance by a f

Re: [cisco-voip] Digicert Wildcard certificates

I’ve found the hardest thing to find a cert providers that likes putting the domain as a san such as DNS=mycollab.com. Has anyone found any providers that are kosher with that? From one of the Cisco Live sessions, I was told this is needed for service discovery to function properly. Dennis Heim

Re: [cisco-voip] Digicert Wildcard certificates

Digicert lets you put your domain and subdomains of any level as SANs. It’s great! They even generated a duplicate certificate for me with a different root CA that was supported with WebEx enabled Telepresence. We use their wildcard certificates on all of our UC servers. From: cisco-voip [mailt

Re: [cisco-voip] Digicert Wildcard certificates

I'm a little confused here. According to this article: http://www.cisco.com/c/en/us/support/docs/voice-unified-communications/unified-communications-manager-callmanager/115957-high-level-view-ca-00.html#wildcard, and this defect ID: https://tools.cisco.com/bugsearch/bug/CSCta14114/, wild card cert

Re: [cisco-voip] Digicert Wildcard certificates

Good point. I spoke too soon: we use wildcard certificates on VCS-E and WebEx Meeting Server only. IIRC VCS officially doesn’t support wildcard certificates either but everything seems to work provided the hostnames are configured as SANs. CUCM might be the same with the multi-server certificate

Re: [cisco-voip] Digicert Wildcard certificates

If you have not seen the Cisco Live session on collab security I would definitely recommend it. It had some good discussion on certificates. Based on that Wildcard certs will never be supported on CUCM and the like and are frowned upon within the security community. Dennis Heim | Emerging Techn

[cisco-voip] Cisco IM&P user count - total user count or configured user count?

I'm reading through the IM&P v9 documents and it's referring to user count maximums and thresholds. I'm wondering how these apply. Our CallManager v9 setup is LDAP synchronized to our enterprise AD with about 70,000 users being brought into the directory. Not all of these users will be IM&P

Re: [cisco-voip] Digicert Wildcard certificates

To Dennis' point you don't have to put DNS=mycollab.com in the SAN. There is an alternative to use DNS=collab-edge.mycollab.com http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X8-5/Mobile-Remote-Access-via-Expressway-Deployment-Guide-X8-5.pdf [image: Inline image

Re: [cisco-voip] Digicert Wildcard certificates

Most of the time wildcard certs mean you have a CSR and a private key generated by something, and then you upload the private key and the public key to lots of servers. The application would need to be able to upload a private key and not require its own CSR. Cucm, unity cxn, uccx, do not sup