<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">Nick,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">I just did this Multi domain deployment and ran into the same issues,
</span><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">you do have the option to Add a Forward Lookup zone to your existing Windows DNS Servers. You will need to add forward lookup zone for
</span><a href="http://domain.com">domain.com</a><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"> to allow your internal DNS servers to be authoritative for this domain; then once the zone is created, create SRV Records for cuplogin
and cisco-uds.<br>
<br>
Information for adding forward zone:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"><a href="http://technet.microsoft.com/en-us/library/cc771566.aspx"><span style="color:#002060">http://technet.microsoft.com/en-us/library/cc771566.aspx</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">DNS Records to add<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">SRV Record _cisco-uds._tcp.</span>
<span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"><a href="http://domain.com">domain.com</a> --> cucm.</span>
<a href="http://Internal.domain.com">Internal.domain.com</a><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">SRV Record _cuplogin._tcp.</span>
<span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"><a href="http://domain.com">domain.com</a> --> cups.</span>
<span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"><a href="http://Internal.domain.com">Internal.domain.com</a></span><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">A Record voice.
<a href="http://domain.com">domain.com</a> </span><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">à</span><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"> xx.xx.xx.xx(where x is your E)</span><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">Please make sure _<i>collab-edge.</i>_tls.</span><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">
<a href="http://domain.com">domain.com</a></span><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"> SRV record is NOT created on your internal dns servers or resolvable by them.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">Why do you need record SRV Records for
</span><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"><a href="http://domain.com">domain.com</a></span><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"> on internal dns servers that are only resolvable
internally? Please see here since you are using multiple domains:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"><a href="http://www.cisco.com/c/en/us/support/docs/unified-communications/expressway-series/117811-configure-vcs-00.html"><span style="color:#002060">http://www.cisco.com/c/en/us/support/docs/unified-communications/expressway-series/117811-configure-vcs-00.html</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">Also as you can see in the MRA Deployment guide on page 11 DNS Records, both Public DNS and Local DNS uses the same domain, i.e.
<a href="http://example.com"><span style="color:#002060">example.com</span></a>. In your case, you are using multiple domains which is why the extra configuration steps.<br>
<a href="http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X8-2/Mobile-Remote-Access-via-Expressway-Deployment-Guide-X8-2.pdf"><span style="color:#002060">http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X8-2/Mobile-Remote-Access-via-Expressway-Deployment-Guide-X8-2.pdf</span></a>”<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:black">:-:gm<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:black">Grace Maximuangu<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:black">Voice Solutions Engineer<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:black">Black Box Network Services<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:black">Cell: 213.268.6342<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:black"><a href="mailto:grace.maximuangu@blackbox.com">grace.maximuangu@blackbox.com</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:black"><a href="http://www.blackbox.com/">www.blackbox.com</a>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#17365D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><img border="0" width="236" height="48" id="Picture_x0020_1" src="cid:image001.jpg@01CFDD56.440D4500" alt="bbox logo.JPG"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> cisco-voip [mailto:cisco-voip-bounces@puck.nether.net]
<b>On Behalf Of </b>Nick<br>
<b>Sent:</b> Wednesday, October 01, 2014 4:51 AM<br>
<b>To:</b> Heim, Dennis<br>
<b>Cc:</b> cisco-voip@puck.nether.net<br>
<b>Subject:</b> Re: [cisco-voip] MRA/Expressway<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Hi Dennis<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Did you get the MRA working with Split DNS domains, I am configuring the same with
<a href="http://Internal.domain.com">Internal.domain.com</a> for the C and <a href="http://domain.com">
domain.com</a> for E and I have added the certs and my traversal Zone is up but I am unable to login to Jabber.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">I have seen some docs that state to add the external domain to VoiceServcesDomain in the Jabber-confg.xml and to add another _cisco-uds SRV on the internal DNS which is configured with <a href="http://domain.com">domain.com</a> rather than
<a href="http://internal.domain.com">internal.domain.com</a> however I am unable to do this as
<a href="http://domain.com">domain.com</a> is not setup as a zone in the DNS.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Any assistance on your experience is appreaciated.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Kind Regards<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Nick<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On 9 July 2014 05:13, Heim, Dennis <<a href="mailto:Dennis.Heim@wwt.com" target="_blank">Dennis.Heim@wwt.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I am trying to configure MRA for the first time. We have split dns zones, so acme.loc (internal DNS) and
<a href="http://acme.com" target="_blank">acme.com</a> (external DNS). We are struggling with determining what should be in the subject alternative names (SAN) for the Expressway-E certificate?<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Thanks,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:10.0pt;color:black">Dennis Heim | Collaboration Solutions Architect</span></b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;color:black">World Wide Technology, Inc. |
<a href="tel:%2B1%20314-212-1814" target="_blank">+1 314-212-1814</a></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://twitter.com/CollabSensei" target="_blank"><span style="text-decoration:none"><img border="0" width="124" height="25" id="_x0000_i1025" src="cid:image007.png@01CFDD55.E637D0D0" alt="twitter"></span></a><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><img border="0" width="95" height="28" id="_x0000_i1026" src="cid:image008.png@01CFDD55.E637D0D0" alt="chat"><a href="tel:+13142121814" target="_blank"><span style="color:windowtext;text-decoration:none"><img border="0" width="95" height="28" id="_x0000_i1027" src="cid:image009.png@01CFDD55.E637D0D0" alt="Phone"></span></a><img border="0" width="95" height="28" id="_x0000_i1028" src="cid:image010.png@01CFDD55.E637D0D0" alt="video"><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1">This email and any files transmitted with it are confidential and are intended for the sole use of the individual to whom they are addressed. Black Box Corporation reserves the right to scan all e-mail traffic for restricted
content and to monitor all e-mail in general. If you are not the intended recipient or you have received this email in error, any use, dissemination or forwarding of this email is strictly prohibited. If you have received this email in error, please notify
the sender by replying to this email.<br>
</font>
</body>
</html>