WEBVTT 00:00:00.000 --> 00:00:03.472 align:middle line:90% 00:00:03.472 --> 00:00:06.944 align:middle line:90% [AUDIO LOGO] 00:00:06.944 --> 00:00:09.930 align:middle line:90% 00:00:09.930 --> 00:00:12.000 align:middle line:90% Hello, and welcome to INE. 00:00:12.000 --> 00:00:14.760 align:middle line:84% Today, in this video, we will look at section 5, Expressway, 00:00:14.760 --> 00:00:16.860 align:middle line:90% basically task 5.2. 00:00:16.860 --> 00:00:19.020 align:middle line:84% Now, here, in this task, it says we 00:00:19.020 --> 00:00:23.910 align:middle line:84% need to configure MRA to allow users to log in remotely. 00:00:23.910 --> 00:00:27.120 align:middle line:84% Use the following information for MRA configuration. 00:00:27.120 --> 00:00:29.370 align:middle line:84% Domain name given to us is ine.com. 00:00:29.370 --> 00:00:33.330 align:middle line:84% So basically, expressways are going to service ine.com. 00:00:33.330 --> 00:00:37.230 align:middle line:84% The HQ call manager and Expressway Core must use TLS. 00:00:37.230 --> 00:00:39.810 align:middle line:84% The IM&P and HQ and Expressway Core 00:00:39.810 --> 00:00:43.170 align:middle line:84% must, again, use TLS to identify each other. 00:00:43.170 --> 00:00:47.730 align:middle line:84% Unity Connection and Expressway Core do not need to use TLS. 00:00:47.730 --> 00:00:51.210 align:middle line:84% The public DNS server is the external DNS machine, 00:00:51.210 --> 00:00:55.050 align:middle line:90% whose IP address is 192.168.3.9. 00:00:55.050 --> 00:00:58.110 align:middle line:84% Do not make any configuration changes on the firewall. 00:00:58.110 --> 00:01:02.040 align:middle line:84% Your task is complete when the HQ user, Tony Stark, 00:01:02.040 --> 00:01:05.310 align:middle line:84% can log in to Jabber from the Candidate PC located 00:01:05.310 --> 00:01:06.780 align:middle line:90% on the internet. 00:01:06.780 --> 00:01:13.230 align:middle line:84% Ensure PSTN can dial 14082022003 from line 1 00:01:13.230 --> 00:01:17.520 align:middle line:84% and Tony Stark can answer the call from the Candidate PC. 00:01:17.520 --> 00:01:20.622 align:middle line:90% Ensure presence status works. 00:01:20.622 --> 00:01:22.080 align:middle line:84% So let's quickly go and build this. 00:01:22.080 --> 00:01:24.090 align:middle line:84% Now, if you remember from the earlier video when 00:01:24.090 --> 00:01:30.720 align:middle line:84% we had done task 5.1, we had configured the signed certs 00:01:30.720 --> 00:01:33.420 align:middle line:84% for the HQ call manager and for IM&P, 00:01:33.420 --> 00:01:37.020 align:middle line:84% which means we can do TLS between HQ call 00:01:37.020 --> 00:01:40.590 align:middle line:84% manager and Expressway Core and between IM&P and Expressway 00:01:40.590 --> 00:01:41.160 align:middle line:90% Core. 00:01:41.160 --> 00:01:44.100 align:middle line:84% We did not sign the certificate for Unity Connection, which 00:01:44.100 --> 00:01:46.080 align:middle line:84% means we would do it without TLS, just 00:01:46.080 --> 00:01:47.920 align:middle line:90% as the question states. 00:01:47.920 --> 00:01:49.753 align:middle line:84% So let's quickly go and build this. 00:01:49.753 --> 00:01:51.420 align:middle line:84% So the first thing, what I'm going to do 00:01:51.420 --> 00:01:55.080 align:middle line:84% is on Expressway-C, the first thing 00:01:55.080 --> 00:01:56.910 align:middle line:84% that I would do is go to Configuration 00:01:56.910 --> 00:01:58.990 align:middle line:90% and enable the SIP protocols. 00:01:58.990 --> 00:02:01.260 align:middle line:84% So three protocols we need to basically enable. 00:02:01.260 --> 00:02:05.470 align:middle line:84% One is the SIP mode, TCP mode, and UDP mode. 00:02:05.470 --> 00:02:08.400 align:middle line:90% So let's go and enable that. 00:02:08.400 --> 00:02:12.470 align:middle line:84% So let's do this on both Expressway-C and Expressway 00:02:12.470 --> 00:02:13.220 align:middle line:90% Edge. 00:02:13.220 --> 00:02:16.820 align:middle line:84% So enable your SIP mode, UDP mode, and TCP mode. 00:02:16.820 --> 00:02:18.230 align:middle line:90% And let's Save. 00:02:18.230 --> 00:02:21.140 align:middle line:84% Once we save, it should show up as active. 00:02:21.140 --> 00:02:23.915 align:middle line:84% If you actually scroll down, you would see 00:02:23.915 --> 00:02:25.880 align:middle line:90% it should show up as active. 00:02:25.880 --> 00:02:29.650 align:middle line:84% Let's, in fact, go and refresh the screen 00:02:29.650 --> 00:02:34.550 align:middle line:84% and see if it shows up as active. 00:02:34.550 --> 00:02:35.790 align:middle line:90% Let's scroll down. 00:02:35.790 --> 00:02:37.280 align:middle line:90% It does show up as active. 00:02:37.280 --> 00:02:39.980 align:middle line:84% Same thing we would do on Expressway Edge. 00:02:39.980 --> 00:02:42.410 align:middle line:84% The first thing is go to Protocols, go to SIP, 00:02:42.410 --> 00:02:47.420 align:middle line:84% and turn on these three modes, which is the SIP mode, the UDP 00:02:47.420 --> 00:02:49.880 align:middle line:90% mode, and the TCP mode. 00:02:49.880 --> 00:02:51.920 align:middle line:84% These three things we would turn on. 00:02:51.920 --> 00:02:54.920 align:middle line:84% And when we save this on Expressway Edge, 00:02:54.920 --> 00:02:57.350 align:middle line:84% you would see it active for both your NIC cards. 00:02:57.350 --> 00:02:59.760 align:middle line:84% Because we have a dual NIC implementation, 00:02:59.760 --> 00:03:02.270 align:middle line:84% we have a LAN-side interface, and we 00:03:02.270 --> 00:03:03.740 align:middle line:90% have a WAN-side interface. 00:03:03.740 --> 00:03:05.820 align:middle line:84% Both of them should show up as active. 00:03:05.820 --> 00:03:08.660 align:middle line:84% So, again, if I go and refresh this screen, 00:03:08.660 --> 00:03:11.540 align:middle line:84% we should see it as active on both 00:03:11.540 --> 00:03:15.140 align:middle line:84% your LAN 1 and LAN 2 for all three modes, which 00:03:15.140 --> 00:03:17.700 align:middle line:90% we can see right now. 00:03:17.700 --> 00:03:20.150 align:middle line:84% Now, once we've done this, the next thing that we do 00:03:20.150 --> 00:03:24.530 align:middle line:84% is configure a traversal zone between Expressway-C 00:03:24.530 --> 00:03:26.060 align:middle line:90% and Expressway Edge. 00:03:26.060 --> 00:03:29.760 align:middle line:84% Now, the traversal zone would be of type unified communication. 00:03:29.760 --> 00:03:31.050 align:middle line:90% So let's go and build that. 00:03:31.050 --> 00:03:33.470 align:middle line:84% However, before we build the traversal zone 00:03:33.470 --> 00:03:36.440 align:middle line:84% on the Expressway-C, just on Expressway-C, 00:03:36.440 --> 00:03:39.140 align:middle line:84% we don't have to do this on Expressway Edge, 00:03:39.140 --> 00:03:42.500 align:middle line:84% only on Expressway-C, we would first configure the domain. 00:03:42.500 --> 00:03:45.990 align:middle line:90% Which domain are we servicing? 00:03:45.990 --> 00:03:48.420 align:middle line:84% So we would be servicing ine.com. 00:03:48.420 --> 00:03:51.030 align:middle line:84% So let's go and enable that, ine.com. 00:03:51.030 --> 00:03:54.210 align:middle line:84% And what kind of registrations would happen here? 00:03:54.210 --> 00:03:55.950 align:middle line:84% We are not doing any SIP registration, 00:03:55.950 --> 00:03:57.510 align:middle line:90% so we can turn that off. 00:03:57.510 --> 00:03:59.340 align:middle line:84% We do have a call manager who's going 00:03:59.340 --> 00:04:03.210 align:middle line:84% to be connecting to Expressway Core, so we would turn that on. 00:04:03.210 --> 00:04:07.240 align:middle line:84% We have an IM&P, so we would turn that on as well. 00:04:07.240 --> 00:04:10.050 align:middle line:84% And we are not doing XMPP federation, 00:04:10.050 --> 00:04:12.090 align:middle line:90% so that's going to remain off. 00:04:12.090 --> 00:04:15.040 align:middle line:90% Let's go and create this domain. 00:04:15.040 --> 00:04:17.430 align:middle line:84% Now we can go and create the zone. 00:04:17.430 --> 00:04:20.040 align:middle line:84% Now, when you create the zone, the Expressway-C 00:04:20.040 --> 00:04:22.830 align:middle line:84% is going to make a connection-- a traversal connection 00:04:22.830 --> 00:04:24.540 align:middle line:90% with Expressway Edge. 00:04:24.540 --> 00:04:28.030 align:middle line:84% So to make that connection, it requires a username password. 00:04:28.030 --> 00:04:30.730 align:middle line:84% So the first thing we do before we create the zone, 00:04:30.730 --> 00:04:33.000 align:middle line:84% we would go to Configuration on Expressway Edge 00:04:33.000 --> 00:04:36.120 align:middle line:84% and create an account, which Expressway-C 00:04:36.120 --> 00:04:37.570 align:middle line:90% can use to connect. 00:04:37.570 --> 00:04:40.380 align:middle line:84% So go to Authentication, Local Database, 00:04:40.380 --> 00:04:43.500 align:middle line:84% and create an account on Expressway Edge. 00:04:43.500 --> 00:04:44.640 align:middle line:90% This could be any name. 00:04:44.640 --> 00:04:48.492 align:middle line:84% Let's say we give the name Cisco and password as Cisco. 00:04:48.492 --> 00:04:49.950 align:middle line:84% Again, the question does not really 00:04:49.950 --> 00:04:52.180 align:middle line:84% mention anything, what username we should use. 00:04:52.180 --> 00:04:53.970 align:middle line:90% So we can just create anything. 00:04:53.970 --> 00:04:56.620 align:middle line:90% Let's create this credential. 00:04:56.620 --> 00:04:58.730 align:middle line:84% And now we will go and create the zone. 00:04:58.730 --> 00:05:04.600 align:middle line:84% So on Expressway-E, we would go to Zones and click on Zones 00:05:04.600 --> 00:05:08.000 align:middle line:90% and click on Add New Zone. 00:05:08.000 --> 00:05:09.370 align:middle line:90% Now give a name to the zone. 00:05:09.370 --> 00:05:11.080 align:middle line:90% Let's name this as MRA. 00:05:11.080 --> 00:05:16.120 align:middle line:84% And the type has to be unified communication traversal. 00:05:16.120 --> 00:05:20.210 align:middle line:84% Here, which username is Expressway-C going to be using? 00:05:20.210 --> 00:05:23.110 align:middle line:84% So if you remember, earlier on Expressway Edge, 00:05:23.110 --> 00:05:25.600 align:middle line:84% we created a user account called Cisco. 00:05:25.600 --> 00:05:28.840 align:middle line:84% So that's the username that Expressway-C 00:05:28.840 --> 00:05:31.660 align:middle line:84% is going to be using to create that traversal zone 00:05:31.660 --> 00:05:35.110 align:middle line:84% to basically authenticate that traversal zone. 00:05:35.110 --> 00:05:37.610 align:middle line:84% And make a note of this port number. 00:05:37.610 --> 00:05:40.470 align:middle line:84% So since Expressway Edge is using 7001, 00:05:40.470 --> 00:05:42.220 align:middle line:84% we need to make a note of this port number 00:05:42.220 --> 00:05:44.137 align:middle line:84% because that's the same port that Expressway-C 00:05:44.137 --> 00:05:45.580 align:middle line:90% would use to connect. 00:05:45.580 --> 00:05:49.000 align:middle line:84% And what TLS verify subject name we should give? 00:05:49.000 --> 00:05:52.780 align:middle line:84% Now, if you remember from the earlier video, on Expressway-C, 00:05:52.780 --> 00:05:57.970 align:middle line:84% we only had one subject name, which was the system hostname. 00:05:57.970 --> 00:06:00.700 align:middle line:84% The system hostname of Expressway-C was 00:06:00.700 --> 00:06:03.778 align:middle line:90% hq-expresswayc.ine.com. 00:06:03.778 --> 00:06:06.070 align:middle line:84% Now, if you don't remember this, you can always go back 00:06:06.070 --> 00:06:10.345 align:middle line:84% to your internal DNS machine and check the A record that 00:06:10.345 --> 00:06:13.330 align:middle line:84% what's the FQDN for Expressway-C. So, here, 00:06:13.330 --> 00:06:15.100 align:middle line:84% we would give Expressway-C's FQDN, 00:06:15.100 --> 00:06:16.930 align:middle line:84% which is there in his certificate, 00:06:16.930 --> 00:06:18.745 align:middle line:90% so hq-expresswayc.ine.com. 00:06:18.745 --> 00:06:22.780 align:middle line:90% 00:06:22.780 --> 00:06:23.618 align:middle line:90% And that's it. 00:06:23.618 --> 00:06:24.410 align:middle line:90% That's all we need. 00:06:24.410 --> 00:06:25.850 align:middle line:90% Let's save this. 00:06:25.850 --> 00:06:28.000 align:middle line:84% So scroll down and create the zone. 00:06:28.000 --> 00:06:32.170 align:middle line:84% So the zone is created on Expressway Edge right now. 00:06:32.170 --> 00:06:34.870 align:middle line:84% So if you remember, we didn't configure domains 00:06:34.870 --> 00:06:36.145 align:middle line:90% on Expressway Edge. 00:06:36.145 --> 00:06:38.770 align:middle line:84% We configured domain on Expressway-C. 00:06:38.770 --> 00:06:40.570 align:middle line:84% On Expressway Edge, we configured 00:06:40.570 --> 00:06:43.180 align:middle line:84% authentication local database, where we created 00:06:43.180 --> 00:06:44.800 align:middle line:90% an account called Cisco. 00:06:44.800 --> 00:06:48.640 align:middle line:84% And then we created a zone on Expressway Edge pointing 00:06:48.640 --> 00:06:52.040 align:middle line:84% towards Expressway-C. Now, Expressway Edge is done. 00:06:52.040 --> 00:06:54.400 align:middle line:90% Now we go back to Expressway-C. 00:06:54.400 --> 00:06:57.490 align:middle line:84% And here, I don't need to go to Authentication 00:06:57.490 --> 00:07:00.580 align:middle line:84% because the account was created on Expressway Edge. 00:07:00.580 --> 00:07:06.360 align:middle line:84% All I do is go to Zones and create a zone here as well. 00:07:06.360 --> 00:07:08.640 align:middle line:84% The zone has to be done on both sides. 00:07:08.640 --> 00:07:11.010 align:middle line:84% Because if I look at Expressway Edge right now 00:07:11.010 --> 00:07:13.052 align:middle line:84% and look at my traversal zone, it's 00:07:13.052 --> 00:07:14.760 align:middle line:84% saying, "no active connection" because it 00:07:14.760 --> 00:07:16.480 align:middle line:90% has to be done on both sides. 00:07:16.480 --> 00:07:20.670 align:middle line:84% So going back to Expressway-C, let's create the zone MRA. 00:07:20.670 --> 00:07:23.790 align:middle line:84% And, again, the type has to be unified communication 00:07:23.790 --> 00:07:25.260 align:middle line:90% traversal. 00:07:25.260 --> 00:07:27.420 align:middle line:84% And then which user account would I be using 00:07:27.420 --> 00:07:29.440 align:middle line:90% to connect to Expressway Edge? 00:07:29.440 --> 00:07:32.440 align:middle line:84% Now, if you remember, we created a user account called Cisco. 00:07:32.440 --> 00:07:35.550 align:middle line:84% So let's give that username, Cisco; password, Cisco. 00:07:35.550 --> 00:07:39.240 align:middle line:84% The port number should be the same, which was 7001. 00:07:39.240 --> 00:07:41.960 align:middle line:90% Then let's scroll down. 00:07:41.960 --> 00:07:44.330 align:middle line:84% And at the peer 1 address, we would 00:07:44.330 --> 00:07:50.580 align:middle line:84% give Expressway Edge's subject a verified name or subject name. 00:07:50.580 --> 00:07:55.970 align:middle line:84% So now Expressway Edge has two FQDNs. 00:07:55.970 --> 00:08:00.860 align:middle line:84% One is coedge.ine.com, which results to the WAN IP 00:08:00.860 --> 00:08:02.630 align:middle line:90% address of Expressway Edge. 00:08:02.630 --> 00:08:06.590 align:middle line:84% And then we have hq-expresswaye.ine.com, 00:08:06.590 --> 00:08:08.720 align:middle line:84% which results to the LAN IP address. 00:08:08.720 --> 00:08:11.780 align:middle line:84% Expressway-C will connect to the LAN IP 00:08:11.780 --> 00:08:13.430 align:middle line:90% address of Expressway Edge. 00:08:13.430 --> 00:08:15.530 align:middle line:84% So we should give the LAN IP address 00:08:15.530 --> 00:08:19.970 align:middle line:90% FQDN, so expresswaye.ine.com. 00:08:19.970 --> 00:08:21.290 align:middle line:90% That's all we need to do. 00:08:21.290 --> 00:08:22.670 align:middle line:90% And say, Create Zone. 00:08:22.670 --> 00:08:24.500 align:middle line:84% Once I create this zone, you would 00:08:24.500 --> 00:08:27.200 align:middle line:84% see that the traversal zone becomes active. 00:08:27.200 --> 00:08:28.470 align:middle line:90% It's right now checking. 00:08:28.470 --> 00:08:31.330 align:middle line:90% Let's refresh the screen. 00:08:31.330 --> 00:08:36.200 align:middle line:84% So it is now active, which you can see here that it is active. 00:08:36.200 --> 00:08:37.240 align:middle line:90% That's the first step. 00:08:37.240 --> 00:08:40.090 align:middle line:84% We need to get our traversal zone up and running 00:08:40.090 --> 00:08:41.049 align:middle line:90% and become active. 00:08:41.049 --> 00:08:43.309 align:middle line:84% Only then we can move to the next step. 00:08:43.309 --> 00:08:46.180 align:middle line:84% So now my connection between Expressway-C and Expressway-E 00:08:46.180 --> 00:08:47.350 align:middle line:90% is done. 00:08:47.350 --> 00:08:49.780 align:middle line:84% It is verifying each other using TLS. 00:08:49.780 --> 00:08:52.930 align:middle line:84% TLS is mandatory between Expressway-C and Expressway 00:08:52.930 --> 00:08:53.740 align:middle line:90% Edge. 00:08:53.740 --> 00:08:54.920 align:middle line:90% It is mandatory. 00:08:54.920 --> 00:08:56.650 align:middle line:90% You cannot do it without TLS. 00:08:56.650 --> 00:09:00.620 align:middle line:84% And if you remember in task 5.1 in the earlier task, 00:09:00.620 --> 00:09:04.690 align:middle line:84% we had done the certificate signing for both Expressway-C 00:09:04.690 --> 00:09:06.220 align:middle line:90% and Expressway Edge. 00:09:06.220 --> 00:09:08.920 align:middle line:84% Expressway-C had only one subject name 00:09:08.920 --> 00:09:12.490 align:middle line:84% in his certificate, which was expresswayc.ine.com. 00:09:12.490 --> 00:09:17.330 align:middle line:84% And Expressway Edge had three subject names. 00:09:17.330 --> 00:09:21.550 align:middle line:84% One was the coedge.ine.com, which was the WAN side FQDN. 00:09:21.550 --> 00:09:24.790 align:middle line:84% And then we had the hq-expresswaye.ine.com, 00:09:24.790 --> 00:09:26.300 align:middle line:90% which was the LAN side FQDN. 00:09:26.300 --> 00:09:28.630 align:middle line:84% And then we had the domain ine.com, 00:09:28.630 --> 00:09:30.860 align:middle line:84% which we had done in the earlier video. 00:09:30.860 --> 00:09:34.150 align:middle line:84% So now my traversal zone between Expressway-C and Expressway 00:09:34.150 --> 00:09:35.620 align:middle line:90% Edge is up and running. 00:09:35.620 --> 00:09:38.260 align:middle line:84% Next thing I do on Expressway-C is 00:09:38.260 --> 00:09:42.980 align:middle line:84% connect all my call manager, my IM&P, and my Unity Connection. 00:09:42.980 --> 00:09:44.800 align:middle line:90% So go to Unified Communication. 00:09:44.800 --> 00:09:46.510 align:middle line:84% I don't need to go to Configuration 00:09:46.510 --> 00:09:49.450 align:middle line:84% because, if you remember in the earlier video, 00:09:49.450 --> 00:09:52.750 align:middle line:84% to get the cert signed, we had to enable MRA. 00:09:52.750 --> 00:09:58.420 align:middle line:84% So we had enabled MRA earlier on Expressway-C and Expressway 00:09:58.420 --> 00:10:00.447 align:middle line:84% Edge, so which we-- if you remember, 00:10:00.447 --> 00:10:02.030 align:middle line:84% we had done that in the earlier video. 00:10:02.030 --> 00:10:03.830 align:middle line:84% So I don't have to do that anymore. 00:10:03.830 --> 00:10:06.280 align:middle line:84% All I have to do is go to Unified Communication, 00:10:06.280 --> 00:10:07.810 align:middle line:90% go to CM Servers-- 00:10:07.810 --> 00:10:09.280 align:middle line:90% Unified CM Servers. 00:10:09.280 --> 00:10:12.010 align:middle line:90% And here, I would click on Add. 00:10:12.010 --> 00:10:15.160 align:middle line:90% So what is the subject name of-- 00:10:15.160 --> 00:10:17.980 align:middle line:84% your fully qualified domain name of your call manager? 00:10:17.980 --> 00:10:20.140 align:middle line:84% So if you remember in the earlier video, again, 00:10:20.140 --> 00:10:24.930 align:middle line:84% when we had done the certs, the FQDN of your call manager was 00:10:24.930 --> 00:10:27.520 align:middle line:90% hq-cucm.ine.com. 00:10:27.520 --> 00:10:30.770 align:middle line:84% This is based on the A record on the internal DNS server. 00:10:30.770 --> 00:10:34.870 align:middle line:84% So let's give that, hq-cucm.ine.com. 00:10:34.870 --> 00:10:39.980 align:middle line:84% And username is going to be administrator. 00:10:39.980 --> 00:10:42.648 align:middle line:84% Now, I didn't really create any AXL user on call manager. 00:10:42.648 --> 00:10:44.440 align:middle line:84% So I'm going to use the main account, which 00:10:44.440 --> 00:10:45.880 align:middle line:90% is the administrator account. 00:10:45.880 --> 00:10:49.360 align:middle line:90% C1sc0123! 00:10:49.360 --> 00:10:50.380 align:middle line:90% Are we doing TLS? 00:10:50.380 --> 00:10:50.950 align:middle line:90% Yes. 00:10:50.950 --> 00:10:52.408 align:middle line:84% Because the question states that we 00:10:52.408 --> 00:10:55.210 align:middle line:84% must use TLS for the connection between the call 00:10:55.210 --> 00:10:58.480 align:middle line:84% manager and Expressway-C. So I am using TLS. 00:10:58.480 --> 00:11:00.740 align:middle line:90% And let's click on Add Address. 00:11:00.740 --> 00:11:02.920 align:middle line:84% So this should connect to my call manager 00:11:02.920 --> 00:11:05.980 align:middle line:84% and create a traversal zone between-- 00:11:05.980 --> 00:11:08.920 align:middle line:84% basically, a connection between my call manager 00:11:08.920 --> 00:11:11.260 align:middle line:90% and my Expressway-C. 00:11:11.260 --> 00:11:15.580 align:middle line:84% If I go back to Configuration, Zones, and click on Zones, 00:11:15.580 --> 00:11:18.100 align:middle line:84% you would see a new zone was created. 00:11:18.100 --> 00:11:19.880 align:middle line:90% And the type is Neighbor-- 00:11:19.880 --> 00:11:20.860 align:middle line:90% Neighbor type. 00:11:20.860 --> 00:11:24.560 align:middle line:84% And I cannot really modify anything in this. 00:11:24.560 --> 00:11:26.380 align:middle line:84% So once you create this connection, 00:11:26.380 --> 00:11:28.370 align:middle line:84% you would not be able to modify anything. 00:11:28.370 --> 00:11:30.380 align:middle line:90% It just comes automatically. 00:11:30.380 --> 00:11:32.120 align:middle line:84% So now my call manager is connected. 00:11:32.120 --> 00:11:34.300 align:middle line:84% Let's go back to Unified Communication and connect 00:11:34.300 --> 00:11:39.340 align:middle line:84% my IM&P. So IM&P's FQDN, again, as per the A record 00:11:39.340 --> 00:11:44.470 align:middle line:84% on the internal DNS server is hq-imp.ine.com. 00:11:44.470 --> 00:11:47.110 align:middle line:84% Username, again, is administrator. 00:11:47.110 --> 00:11:51.370 align:middle line:90% Password is C1sc0123! 00:11:51.370 --> 00:11:52.540 align:middle line:90% Are we using TLS? 00:11:52.540 --> 00:11:56.140 align:middle line:90% Yes, we are using TLS. 00:11:56.140 --> 00:11:57.850 align:middle line:90% So let's click on Add Address. 00:11:57.850 --> 00:12:01.270 align:middle line:84% It should add my IM&P, which it has. 00:12:01.270 --> 00:12:02.770 align:middle line:90% It right now shows as inactive. 00:12:02.770 --> 00:12:05.450 align:middle line:84% But if you refresh our screen, it should become active. 00:12:05.450 --> 00:12:08.380 align:middle line:84% So if you look at my call manager, 00:12:08.380 --> 00:12:09.610 align:middle line:90% call manager is active. 00:12:09.610 --> 00:12:13.630 align:middle line:84% If I look at my IM&P, IM&P is also active now. 00:12:13.630 --> 00:12:16.600 align:middle line:84% Last step is to add my Unity Connection. 00:12:16.600 --> 00:12:18.910 align:middle line:84% Unity Connection was not using TLS. 00:12:18.910 --> 00:12:21.850 align:middle line:84% So we will disable TLS for Unity Connection 00:12:21.850 --> 00:12:24.850 align:middle line:84% because we never specified or provided a certificate 00:12:24.850 --> 00:12:25.810 align:middle line:90% to Unity Connection. 00:12:25.810 --> 00:12:28.180 align:middle line:84% So we have to use it without TLS. 00:12:28.180 --> 00:12:31.180 align:middle line:84% So as per the A record in the internal DNS server, 00:12:31.180 --> 00:12:35.290 align:middle line:90% the FQDN is hq-cuc.ine.com. 00:12:35.290 --> 00:12:37.840 align:middle line:90% Username would be administrator. 00:12:37.840 --> 00:12:41.800 align:middle line:90% Password is C1sc0123! 00:12:41.800 --> 00:12:44.480 align:middle line:90% And TLS would be Off. 00:12:44.480 --> 00:12:47.050 align:middle line:90% So let's click on Add Address. 00:12:47.050 --> 00:12:49.210 align:middle line:84% Again, it should add my Unity Connection. 00:12:49.210 --> 00:12:52.870 align:middle line:84% And once this is done, our Expressway-C and Expressway 00:12:52.870 --> 00:12:55.270 align:middle line:90% Edge, they both are configured. 00:12:55.270 --> 00:12:57.970 align:middle line:84% And the only thing we need to do is now 00:12:57.970 --> 00:13:00.280 align:middle line:84% go to my external DNS server, which 00:13:00.280 --> 00:13:02.560 align:middle line:90% the Candidate PC is using. 00:13:02.560 --> 00:13:07.840 align:middle line:84% I need to go there and create an A record that maps the WAN side 00:13:07.840 --> 00:13:12.310 align:middle line:84% FQDN of the Expressway Edge to his WAN IP address, 00:13:12.310 --> 00:13:17.560 align:middle line:84% and then create an SRV record for _collab-edge. 00:13:17.560 --> 00:13:20.320 align:middle line:90% Let's go and do that. 00:13:20.320 --> 00:13:23.850 align:middle line:84% So it's still trying to locate my Unity Connection. 00:13:23.850 --> 00:13:29.320 align:middle line:90% 00:13:29.320 --> 00:13:33.190 align:middle line:84% Let's check if my Unity Connection has booted up. 00:13:33.190 --> 00:13:34.880 align:middle line:84% Let's go back to Unity Connection. 00:13:34.880 --> 00:13:43.010 align:middle line:90% 00:13:43.010 --> 00:13:43.925 align:middle line:90% Let's log in. 00:13:43.925 --> 00:13:55.270 align:middle line:90% 00:13:55.270 --> 00:13:57.150 align:middle line:84% So while this is happening, what we can do 00:13:57.150 --> 00:14:01.220 align:middle line:84% is go to our external DNS, which is the Candidate PC. 00:14:01.220 --> 00:14:02.620 align:middle line:90% It's here on the internet. 00:14:02.620 --> 00:14:05.740 align:middle line:84% It is using this external DNS, which is as per the question. 00:14:05.740 --> 00:14:07.380 align:middle line:90% So go on your external DNS. 00:14:07.380 --> 00:14:11.270 align:middle line:84% And let's first create an A record. 00:14:11.270 --> 00:14:16.650 align:middle line:84% So let's close this, go to my DNS. 00:14:16.650 --> 00:14:20.520 align:middle line:90% 00:14:20.520 --> 00:14:26.180 align:middle line:84% And let's go to Forward Lookup Zones, 00:14:26.180 --> 00:14:30.500 align:middle line:84% go to INE, right-click, create an A record, which 00:14:30.500 --> 00:14:34.790 align:middle line:84% would say coedge.ine.com, which results 00:14:34.790 --> 00:14:37.580 align:middle line:84% to WAN-side IP address of Expressway Edge, which 00:14:37.580 --> 00:14:42.220 align:middle line:90% is 157.26.1.21. 00:14:42.220 --> 00:14:43.220 align:middle line:90% Create a pointer record. 00:14:43.220 --> 00:14:45.960 align:middle line:90% 00:14:45.960 --> 00:14:48.420 align:middle line:90% Next, we click on-- 00:14:48.420 --> 00:14:52.500 align:middle line:84% right-click on ine.com, go to Other New Records, 00:14:52.500 --> 00:14:55.530 align:middle line:90% scroll down to SRV. 00:14:55.530 --> 00:14:58.875 align:middle line:84% And here, we would create the _collab-edge. 00:14:58.875 --> 00:15:02.460 align:middle line:90% 00:15:02.460 --> 00:15:05.490 align:middle line:90% And this would be _tls. 00:15:05.490 --> 00:15:08.100 align:middle line:90% And port would be 8443. 00:15:08.100 --> 00:15:12.090 align:middle line:84% And this results to the WAN-side FQDN of Expressway Edge, which 00:15:12.090 --> 00:15:15.120 align:middle line:90% is coedge.ine.com. 00:15:15.120 --> 00:15:18.840 align:middle line:90% Let's do OK, Done. 00:15:18.840 --> 00:15:22.490 align:middle line:90% And let's close this. 00:15:22.490 --> 00:15:26.090 align:middle line:84% Let's go back to Jabber 1 and check 00:15:26.090 --> 00:15:29.030 align:middle line:90% if the connection is completed. 00:15:29.030 --> 00:15:32.100 align:middle line:84% It seems that my Unity Connection is still booting up. 00:15:32.100 --> 00:15:33.980 align:middle line:90% So let's give it some time. 00:15:33.980 --> 00:15:38.630 align:middle line:84% In the meanwhile, what we can do is we could go to Candidate PC 00:15:38.630 --> 00:15:43.340 align:middle line:90% and try and log in. 00:15:43.340 --> 00:15:44.930 align:middle line:84% I should be able to make all calls. 00:15:44.930 --> 00:15:47.270 align:middle line:84% My Unity Connection would not work as of right now 00:15:47.270 --> 00:15:48.980 align:middle line:90% because it's still not added. 00:15:48.980 --> 00:15:51.210 align:middle line:84% Maybe my Unity Connection is still booting up. 00:15:51.210 --> 00:15:53.967 align:middle line:84% But what we can do is log into Jabber from outside. 00:15:53.967 --> 00:15:55.550 align:middle line:84% However, the first thing we have to do 00:15:55.550 --> 00:15:58.370 align:middle line:84% is make sure that the user, Tony Stark, 00:15:58.370 --> 00:16:01.190 align:middle line:84% is logged off from Jabber 1 machine. 00:16:01.190 --> 00:16:03.800 align:middle line:84% Jabber 1 machine is the internal machine, 00:16:03.800 --> 00:16:04.940 align:middle line:90% which you can see here. 00:16:04.940 --> 00:16:08.030 align:middle line:84% Right now, Tony Stark is logged in in Jabber 1 00:16:08.030 --> 00:16:09.110 align:middle line:90% from the internal PC. 00:16:09.110 --> 00:16:11.860 align:middle line:84% So make sure you log off from there. 00:16:11.860 --> 00:16:13.660 align:middle line:90% Let's sign out. 00:16:13.660 --> 00:16:16.375 align:middle line:84% And let's go to our Candidate PC. 00:16:16.375 --> 00:16:22.210 align:middle line:90% 00:16:22.210 --> 00:16:24.393 align:middle line:90% Let's check if it is added. 00:16:24.393 --> 00:16:25.810 align:middle line:84% It says that it's still not added. 00:16:25.810 --> 00:16:26.810 align:middle line:90% It's taking a long time. 00:16:26.810 --> 00:16:31.360 align:middle line:90% Let's try again, C1sc0123! 00:16:31.360 --> 00:16:33.070 align:middle line:90% TLS is off. 00:16:33.070 --> 00:16:33.895 align:middle line:90% Add Address. 00:16:33.895 --> 00:16:44.530 align:middle line:90% 00:16:44.530 --> 00:16:47.070 align:middle line:84% So it's going to take some time, I think, 00:16:47.070 --> 00:16:50.830 align:middle line:84% because I just booted up my Unity Connection. 00:16:50.830 --> 00:16:54.740 align:middle line:84% So let's go back to Candidate PC and click on Jabber. 00:16:54.740 --> 00:17:10.260 align:middle line:90% 00:17:10.260 --> 00:17:13.710 align:middle line:84% Here, my username would be tony-stark@ine.com. 00:17:13.710 --> 00:17:16.920 align:middle line:90% 00:17:16.920 --> 00:17:20.220 align:middle line:84% I don't need to go to Advanced Settings because I'm going 00:17:20.220 --> 00:17:25.079 align:middle line:84% to use-- it's going to try and find the _collab-edge SRV 00:17:25.079 --> 00:17:27.060 align:middle line:84% lookup, and which points to Expressway-E. 00:17:27.060 --> 00:17:29.700 align:middle line:84% Using the traversal zone, it goes to Expressway-C. 00:17:29.700 --> 00:17:33.450 align:middle line:84% Expressway-C has the connection to the call manager. 00:17:33.450 --> 00:17:35.790 align:middle line:84% So he is going to proxy the connection. 00:17:35.790 --> 00:17:40.020 align:middle line:84% And I should be able to log into Jabber. 00:17:40.020 --> 00:17:44.475 align:middle line:84% Let's go back here to Jabber 1 and see if it has booted up. 00:17:44.475 --> 00:17:46.000 align:middle line:90% It still hasn't booted up. 00:17:46.000 --> 00:17:47.880 align:middle line:90% But let's go and test this. 00:17:47.880 --> 00:17:50.130 align:middle line:90% Let's click on Continue, Accept. 00:17:50.130 --> 00:18:02.520 align:middle line:90% 00:18:02.520 --> 00:18:05.790 align:middle line:84% We can do a Control-Shift-D just to see what's 00:18:05.790 --> 00:18:07.080 align:middle line:90% happening behind the scenes. 00:18:07.080 --> 00:18:10.925 align:middle line:90% 00:18:10.925 --> 00:18:13.150 align:middle line:84% It should ask me-- it should basically prompt me 00:18:13.150 --> 00:18:14.360 align:middle line:90% for a username password. 00:18:14.360 --> 00:18:18.910 align:middle line:84% So C1sc0123!, where C was uppercase. 00:18:18.910 --> 00:18:22.920 align:middle line:90% And let's click on Sign In. 00:18:22.920 --> 00:18:26.430 align:middle line:84% So once I click on Sign In, I should be able to log in. 00:18:26.430 --> 00:18:44.210 align:middle line:90% 00:18:44.210 --> 00:18:48.780 align:middle line:84% It says, "Cannot communicate with the server." 00:18:48.780 --> 00:18:50.045 align:middle line:90% Let's try signing in again. 00:18:50.045 --> 00:18:54.810 align:middle line:90% 00:18:54.810 --> 00:18:57.270 align:middle line:84% Sometimes you may find this error, where it says, 00:18:57.270 --> 00:18:59.250 align:middle line:90% cannot communicate. 00:18:59.250 --> 00:19:02.980 align:middle line:84% Again, this could be because of resources. 00:19:02.980 --> 00:19:04.920 align:middle line:84% So just try it a couple of times. 00:19:04.920 --> 00:19:07.110 align:middle line:90% And it should sign in. 00:19:07.110 --> 00:19:10.300 align:middle line:84% Again, it is only because of virtualized environment. 00:19:10.300 --> 00:19:13.450 align:middle line:84% And because of less resources, it takes a bit of time. 00:19:13.450 --> 00:19:19.230 align:middle line:84% So what I would suggest is maybe reset it and try it out again, 00:19:19.230 --> 00:19:20.480 align:middle line:90% tony-stark@ine.com. 00:19:20.480 --> 00:19:26.410 align:middle line:90% 00:19:26.410 --> 00:19:30.070 align:middle line:84% And, in fact, if you go to Jabber-- 00:19:30.070 --> 00:19:33.190 align:middle line:84% let's say, if you go back to your Expressway Edge 00:19:33.190 --> 00:19:36.610 align:middle line:84% and go to Maintenance, go to Logging, 00:19:36.610 --> 00:19:45.270 align:middle line:84% and scroll down to Event Logs, you would see it says that-- 00:19:45.270 --> 00:19:47.280 align:middle line:84% let's see what information we have. 00:19:47.280 --> 00:19:49.710 align:middle line:84% Let's, in fact, check on Expressway-C also, the logs. 00:19:49.710 --> 00:19:52.680 align:middle line:84% We should see that Tony Stark was successfully logged in, 00:19:52.680 --> 00:19:55.350 align:middle line:84% or he was successfully allowed to log in. 00:19:55.350 --> 00:19:58.584 align:middle line:90% C1sc0123! 00:19:58.584 --> 00:20:01.810 align:middle line:90% Sign In. 00:20:01.810 --> 00:20:03.710 align:middle line:90% Go back to Jabber 1. 00:20:03.710 --> 00:20:08.400 align:middle line:84% Let's go to Maintenance on Expressway-C 00:20:08.400 --> 00:20:12.860 align:middle line:90% and scroll down to Event Logs. 00:20:12.860 --> 00:20:18.210 align:middle line:84% And let's see what do we get here? 00:20:18.210 --> 00:20:19.335 align:middle line:90% What do we see here? 00:20:19.335 --> 00:20:29.750 align:middle line:90% 00:20:29.750 --> 00:20:31.520 align:middle line:90% It says, "Certificate is valid." 00:20:31.520 --> 00:20:34.560 align:middle line:90% Let's reset this. 00:20:34.560 --> 00:20:36.720 align:middle line:84% And see, "Authenticated user successfully" 00:20:36.720 --> 00:20:39.840 align:middle line:84% for Tony Stark, which means that my configuration is OK. 00:20:39.840 --> 00:20:41.580 align:middle line:90% Everything is OK. 00:20:41.580 --> 00:20:43.350 align:middle line:90% Let's go back to Candidate PC. 00:20:43.350 --> 00:20:45.030 align:middle line:90% I still can't communicate. 00:20:45.030 --> 00:20:47.370 align:middle line:90% Let's try it one more time. 00:20:47.370 --> 00:20:50.330 align:middle line:90% 00:20:50.330 --> 00:20:55.550 align:middle line:84% I see that the Discovery Outcome IM&P is not being discovered. 00:20:55.550 --> 00:20:56.225 align:middle line:90% Let's wait. 00:20:56.225 --> 00:21:03.105 align:middle line:90% 00:21:03.105 --> 00:21:06.730 align:middle line:84% It looks like my Unity Connection has booted up. 00:21:06.730 --> 00:21:11.490 align:middle line:84% So let's go and try and add Unity Connection 00:21:11.490 --> 00:21:16.460 align:middle line:84% to Expressway-C. So let's click on Add. 00:21:16.460 --> 00:21:18.080 align:middle line:84% That's going to be hq-cuc.ine.com. 00:21:18.080 --> 00:21:21.140 align:middle line:90% 00:21:21.140 --> 00:21:24.440 align:middle line:90% Username was administrator. 00:21:24.440 --> 00:21:28.244 align:middle line:90% Password was C1sc0123! 00:21:28.244 --> 00:21:34.160 align:middle line:84% And let's turn Off TLS because we're not using TLS. 00:21:34.160 --> 00:21:37.220 align:middle line:90% And Add. 00:21:37.220 --> 00:21:41.510 align:middle line:84% So it should add the Unity Connection to my connection. 00:21:41.510 --> 00:21:43.970 align:middle line:84% And then we should have the call manager. 00:21:43.970 --> 00:21:47.210 align:middle line:84% We should have the IM&P. And we should have Unity Connection. 00:21:47.210 --> 00:21:58.870 align:middle line:90% 00:21:58.870 --> 00:22:00.370 align:middle line:90% So it takes a bit of time. 00:22:00.370 --> 00:22:06.520 align:middle line:84% But give it a good 30 seconds for it to add it. 00:22:06.520 --> 00:22:11.020 align:middle line:90% 00:22:11.020 --> 00:22:14.950 align:middle line:84% In the meanwhile, what we can do is go to our call manager 00:22:14.950 --> 00:22:18.430 align:middle line:84% and publish the SIP trunk because the question states 00:22:18.430 --> 00:22:22.180 align:middle line:84% that we need to ensure that presence status works. 00:22:22.180 --> 00:22:26.590 align:middle line:84% Presence status is only going to work if your SIP trunk to IM&P 00:22:26.590 --> 00:22:28.570 align:middle line:84% is published by the call manager. 00:22:28.570 --> 00:22:32.230 align:middle line:84% Now, IM&P has been preconfigured for you, except for the SIP 00:22:32.230 --> 00:22:33.730 align:middle line:90% trunk, which is not published. 00:22:33.730 --> 00:22:39.330 align:middle line:84% So what we should do is go to our call manager 00:22:39.330 --> 00:22:44.630 align:middle line:84% and log in and go to Service Parameters. 00:22:44.630 --> 00:22:47.945 align:middle line:84% And under Service Parameters, we would publish our SIP trunk. 00:22:47.945 --> 00:22:55.410 align:middle line:90% 00:22:55.410 --> 00:22:59.160 align:middle line:90% Let's give it a few seconds. 00:22:59.160 --> 00:23:05.110 align:middle line:84% Go to System, Service Parameters. 00:23:05.110 --> 00:23:06.475 align:middle line:90% Choose your call manager. 00:23:06.475 --> 00:23:09.270 align:middle line:90% 00:23:09.270 --> 00:23:13.240 align:middle line:84% Service type is going to be, again, call manager. 00:23:13.240 --> 00:23:17.010 align:middle line:90% And then search for presence. 00:23:17.010 --> 00:23:22.260 align:middle line:84% So let's do a Control-F and search for presence and hit 00:23:22.260 --> 00:23:23.430 align:middle line:90% Enter. 00:23:23.430 --> 00:23:24.630 align:middle line:90% Hit Enter again. 00:23:24.630 --> 00:23:27.930 align:middle line:84% And you would see "IM and Presence Publish Trunk." 00:23:27.930 --> 00:23:29.340 align:middle line:90% It is right now blank. 00:23:29.340 --> 00:23:32.910 align:middle line:84% We have to select the SIP trunk, which is going to your IM&P. 00:23:32.910 --> 00:23:36.810 align:middle line:84% That is the SIP trunk to IM&P. It has published this trunk. 00:23:36.810 --> 00:23:39.960 align:middle line:84% So once this trunk is published, all presence status 00:23:39.960 --> 00:23:45.310 align:middle line:84% is going to be sent across to whichever Jabber is logging in. 00:23:45.310 --> 00:23:46.630 align:middle line:90% So with this, we've done that. 00:23:46.630 --> 00:23:49.950 align:middle line:84% Let's go back to Expressway-C and see if that Unity 00:23:49.950 --> 00:23:52.005 align:middle line:90% Connection has been located. 00:23:52.005 --> 00:23:55.320 align:middle line:90% 00:23:55.320 --> 00:23:56.880 align:middle line:90% Still doing something. 00:23:56.880 --> 00:24:00.960 align:middle line:84% In the meanwhile, we can go back to Candidate PC. 00:24:00.960 --> 00:24:06.180 align:middle line:84% And let's try and log in just to see if we are able to log in 00:24:06.180 --> 00:24:09.900 align:middle line:90% and make the calls. 00:24:09.900 --> 00:24:11.340 align:middle line:90% Let's cancel this. 00:24:11.340 --> 00:24:12.525 align:middle line:90% Let's log off. 00:24:12.525 --> 00:24:19.710 align:middle line:90% 00:24:19.710 --> 00:24:21.190 align:middle line:90% And let's relog in. 00:24:21.190 --> 00:24:29.980 align:middle line:90% 00:24:29.980 --> 00:24:34.250 align:middle line:84% So I was able to log in successfully. 00:24:34.250 --> 00:24:38.200 align:middle line:84% And if you see here, I see my presence status "Available." 00:24:38.200 --> 00:24:41.410 align:middle line:84% My phone services should also connect. 00:24:41.410 --> 00:24:43.300 align:middle line:84% Let's go back and refresh this just 00:24:43.300 --> 00:24:47.030 align:middle line:90% to see if it was able to detect. 00:24:47.030 --> 00:24:53.890 align:middle line:84% So I see that the IM&P was not able to be detected. 00:24:53.890 --> 00:24:55.990 align:middle line:90% Let's wait. 00:24:55.990 --> 00:24:58.070 align:middle line:90% Phone services are connected. 00:24:58.070 --> 00:25:03.290 align:middle line:84% Let's try making a call to, let's say, voicemail, 2220. 00:25:03.290 --> 00:25:07.100 align:middle line:84% My outbound calls to voicemail should work, which it does, 00:25:07.100 --> 00:25:08.270 align:middle line:90% which you can see here. 00:25:08.270 --> 00:25:10.460 align:middle line:84% If I do a Control-Shift-S, you would 00:25:10.460 --> 00:25:15.200 align:middle line:84% see that I have a G711 call to my Unity Connection. 00:25:15.200 --> 00:25:16.410 align:middle line:90% So that's working. 00:25:16.410 --> 00:25:21.770 align:middle line:84% Let's go to my PSTN and make an inbound call 00:25:21.770 --> 00:25:25.490 align:middle line:90% by dialing 14082022003. 00:25:25.490 --> 00:25:28.710 align:middle line:84% And Tony Stark should be able to answer that call. 00:25:28.710 --> 00:25:36.820 align:middle line:84% So let's go back here and go to my PSTN. 00:25:36.820 --> 00:25:42.230 align:middle line:84% Let's dial from line 1, 14082022003. 00:25:42.230 --> 00:25:47.300 align:middle line:84% So this call should ring on Tony Stark, which is 00:25:47.300 --> 00:25:49.040 align:middle line:90% on the outside, which he can. 00:25:49.040 --> 00:25:53.090 align:middle line:84% And he should be able to answer the call. 00:25:53.090 --> 00:25:55.360 align:middle line:84% So I have video calls working now. 00:25:55.360 --> 00:25:58.810 align:middle line:84% And I have completed the task requirements. 00:25:58.810 --> 00:26:01.040 align:middle line:84% The only thing left is the Unity Connection side. 00:26:01.040 --> 00:26:02.350 align:middle line:90% It says, "Lookup expired." 00:26:02.350 --> 00:26:07.000 align:middle line:90% Let's try again, C1sc0123! 00:26:07.000 --> 00:26:07.880 align:middle line:90% Add Address. 00:26:07.880 --> 00:26:11.600 align:middle line:90% 00:26:11.600 --> 00:26:16.880 align:middle line:84% It should not take more than 10 seconds to add it. 00:26:16.880 --> 00:26:22.060 align:middle line:90% 00:26:22.060 --> 00:26:25.930 align:middle line:84% So if you look at-- from a call configuration perspective, 00:26:25.930 --> 00:26:27.120 align:middle line:90% it's pretty straightforward. 00:26:27.120 --> 00:26:32.310 align:middle line:84% Ensure you have the collab-edge SRV record on the external DNS 00:26:32.310 --> 00:26:35.130 align:middle line:84% server because your Jabber machine on the outside 00:26:35.130 --> 00:26:36.600 align:middle line:90% is going to query that. 00:26:36.600 --> 00:26:40.500 align:middle line:84% And using the traversal MRA traversal zone, 00:26:40.500 --> 00:26:42.180 align:middle line:84% it should connect to Expressway-C. 00:26:42.180 --> 00:26:45.060 align:middle line:84% Expressway-C is going to proxy that to the call manager. 00:26:45.060 --> 00:26:48.090 align:middle line:84% And you should be able to log in. 00:26:48.090 --> 00:26:49.590 align:middle line:84% My voicemail services are not going 00:26:49.590 --> 00:26:52.140 align:middle line:84% to be running right now because of the Unity Connection 00:26:52.140 --> 00:26:53.235 align:middle line:90% not being added. 00:26:53.235 --> 00:26:55.800 align:middle line:90% 00:26:55.800 --> 00:26:58.050 align:middle line:84% Again, this could be a DNS issue. 00:26:58.050 --> 00:27:00.870 align:middle line:84% I believe my DNS is configured correctly. 00:27:00.870 --> 00:27:03.570 align:middle line:90% But let's go back to-- 00:27:03.570 --> 00:27:05.340 align:middle line:90% let's close this. 00:27:05.340 --> 00:27:07.740 align:middle line:90% Tony Stark is working. 00:27:07.740 --> 00:27:09.250 align:middle line:90% Let's close this. 00:27:09.250 --> 00:27:16.670 align:middle line:84% Let's close this and go back to Service Parameters, 00:27:16.670 --> 00:27:18.860 align:middle line:90% or, in fact, my call manager. 00:27:18.860 --> 00:27:19.790 align:middle line:90% Let's go to Phones. 00:27:19.790 --> 00:27:24.940 align:middle line:90% 00:27:24.940 --> 00:27:27.220 align:middle line:84% As you can see, my Tony Stark is registered. 00:27:27.220 --> 00:27:28.790 align:middle line:90% And look at the proxy address. 00:27:28.790 --> 00:27:31.233 align:middle line:84% So the IP address that you see here, 00:27:31.233 --> 00:27:32.650 align:middle line:84% from a call manager's perspective, 00:27:32.650 --> 00:27:37.570 align:middle line:84% it is your Expressway-C, whose IP address is being seen here. 00:27:37.570 --> 00:27:41.260 align:middle line:84% Basically, your Expressway-C is doing a proxy. 00:27:41.260 --> 00:27:44.290 align:middle line:84% Let's go back and check why is Unity Connection taking 00:27:44.290 --> 00:27:46.270 align:middle line:90% so long. 00:27:46.270 --> 00:27:48.430 align:middle line:84% Let's go and access Unity Connection. 00:27:48.430 --> 00:27:55.070 align:middle line:90% 00:27:55.070 --> 00:28:00.680 align:middle line:84% Maybe what we can do is we can restart our Expressway-C. Maybe 00:28:00.680 --> 00:28:01.880 align:middle line:90% I can reboot that. 00:28:01.880 --> 00:28:05.990 align:middle line:84% I don't really want to reboot my Unity Connection because that's 00:28:05.990 --> 00:28:09.720 align:middle line:84% going to take, like, 10, 15 minutes for it to come back up. 00:28:09.720 --> 00:28:14.600 align:middle line:84% But what I can do is go back to my Expressway-C. Let's 00:28:14.600 --> 00:28:16.160 align:middle line:90% try putting the IP address. 00:28:16.160 --> 00:28:18.500 align:middle line:84% Since we're not doing really TLS, 00:28:18.500 --> 00:28:21.530 align:middle line:84% we can put the IP address of my Unity Connection. 00:28:21.530 --> 00:28:23.900 align:middle line:84% I believe the IP address we'll have to go 00:28:23.900 --> 00:28:27.080 align:middle line:84% and check under my internal DNS server, 00:28:27.080 --> 00:28:31.130 align:middle line:84% check the A record to see what the FQDN address is. 00:28:31.130 --> 00:28:35.000 align:middle line:90% And let's go back here. 00:28:35.000 --> 00:28:38.230 align:middle line:90% 00:28:38.230 --> 00:28:47.680 align:middle line:84% So for Unity Connection, the IP address is 11.100.64.15, 00:28:47.680 --> 00:28:50.600 align:middle line:90% which you can see here. 00:28:50.600 --> 00:28:53.635 align:middle line:84% So let's go back to our Jabber machine. 00:28:53.635 --> 00:29:04.620 align:middle line:90% 00:29:04.620 --> 00:29:20.900 align:middle line:84% Let's go back to Expressway-C. It 00:29:20.900 --> 00:29:26.490 align:middle line:84% looks like the Unity Connection has been added. 00:29:26.490 --> 00:29:28.460 align:middle line:84% So now the only thing that we have to do 00:29:28.460 --> 00:29:32.870 align:middle line:84% is go to our Candidate PC and log in. 00:29:32.870 --> 00:29:35.210 align:middle line:84% And we've already tested that PSTN 00:29:35.210 --> 00:29:40.550 align:middle line:84% was able to call in from line 1 to Tony Stark. 00:29:40.550 --> 00:29:42.710 align:middle line:84% Let's go back to Unity Connection. 00:29:42.710 --> 00:29:47.800 align:middle line:84% And let's log off and relog in just 00:29:47.800 --> 00:29:51.280 align:middle line:84% to see-- just to verify if it's still working. 00:29:51.280 --> 00:29:56.540 align:middle line:84% And he was able to log in, which you can see here. 00:29:56.540 --> 00:29:59.080 align:middle line:90% And phone services are working. 00:29:59.080 --> 00:30:01.480 align:middle line:84% Voicemail should work now because now we 00:30:01.480 --> 00:30:02.780 align:middle line:90% have Unity Connection. 00:30:02.780 --> 00:30:05.830 align:middle line:84% So with this, we've successfully configured MRA. 00:30:05.830 --> 00:30:09.640 align:middle line:84% And we've completed task number 5.2. 00:30:09.640 --> 00:30:13.970 align:middle line:84% One thing that we have to test is the presence status. 00:30:13.970 --> 00:30:16.420 align:middle line:84% So if I actually go back to do a Control-Shift-D 00:30:16.420 --> 00:30:20.170 align:middle line:84% and look at the presence status, it 00:30:20.170 --> 00:30:22.880 align:middle line:84% should show as "Connected," which I can see here, 00:30:22.880 --> 00:30:24.710 align:middle line:90% it shows as "Connected." 00:30:24.710 --> 00:30:30.030 align:middle line:84% Let's go back and check if I can make the inbound call. 00:30:30.030 --> 00:30:32.960 align:middle line:84% So I see that the phone service has failed. 00:30:32.960 --> 00:30:35.465 align:middle line:90% Let me log off and relog in. 00:30:35.465 --> 00:30:39.300 align:middle line:90% 00:30:39.300 --> 00:30:44.690 align:middle line:84% I also make sure that on Jabber 1, Tony Stark is not logged in. 00:30:44.690 --> 00:30:46.600 align:middle line:84% So you don't want to log in from Jabber 1 00:30:46.600 --> 00:30:48.160 align:middle line:90% because that's the local PC. 00:30:48.160 --> 00:30:50.780 align:middle line:84% So you want Tony Stark to be logged off. 00:30:50.780 --> 00:30:52.660 align:middle line:84% And at the same time, on Candidate PC, 00:30:52.660 --> 00:30:57.250 align:middle line:84% we can then log in and check if presence status works. 00:30:57.250 --> 00:31:00.370 align:middle line:84% Inbound calls we've already tested. 00:31:00.370 --> 00:31:02.740 align:middle line:84% Voicemail should work, also PSTN. 00:31:02.740 --> 00:31:06.400 align:middle line:84% You can probably do a call from PSTN and not answer the call. 00:31:06.400 --> 00:31:07.570 align:middle line:90% It should go to voicemail. 00:31:07.570 --> 00:31:10.210 align:middle line:84% And you should be able to leave a voicemail. 00:31:10.210 --> 00:31:15.640 align:middle line:84% Going back to our Expressway-C, as you can see, 00:31:15.640 --> 00:31:17.740 align:middle line:90% I have Unity Connection here. 00:31:17.740 --> 00:31:19.960 align:middle line:90% I have my call managers. 00:31:19.960 --> 00:31:26.210 align:middle line:84% And I have my IM&P also, which is active. 00:31:26.210 --> 00:31:29.560 align:middle line:84% I have a traversal zone, which is TLS-verified, 00:31:29.560 --> 00:31:32.770 align:middle line:84% between Expressway-C and Expressway Edge. 00:31:32.770 --> 00:31:37.660 align:middle line:84% And I have a connection between my call manager 00:31:37.660 --> 00:31:39.820 align:middle line:84% and Expressway Core using TLS, and, again, 00:31:39.820 --> 00:31:43.270 align:middle line:84% connection between IM&P and Expressway Core using TLS. 00:31:43.270 --> 00:31:46.720 align:middle line:84% Unity Connection is not using TLS. 00:31:46.720 --> 00:31:49.690 align:middle line:84% With this, we've successfully configured MRA. 00:31:49.690 --> 00:31:53.180 align:middle line:90% And we've tested MRA as well. 00:31:53.180 --> 00:31:55.070 align:middle line:84% I hope this video was informative to you. 00:31:55.070 --> 00:31:57.500 align:middle line:90% And thank you for watching. 00:31:57.500 --> 00:31:58.000 align:middle line:90%