<div dir="ltr">If you're using UDS for Directory Lookup with Jabber, users will get certificate warnings since CUCM will present whatever is in the System->Server list as the UDS servers. Some internal CAs will allow you to add the IP address as a SAN to the tomcat certificate to workaround this.</div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, May 28, 2015 at 10:26 AM, Eric Pedersen <span dir="ltr"><<a href="mailto:PedersenE@bennettjones.com" target="_blank">PedersenE@bennettjones.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">We switched to IP addresses for our CUCM server entries and haven’t had any application problems. Jabber appears to use the hostnames set in the “UC Server”
settings not the System->Server settings. Windows accepts IP addresses in certificate Subject Alt Name attributes too.
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">We had an issue at one point where some of our phones briefly lost L3 access to DNS and CUCM briefly (no SRST). They were down for 10 minutes or so after the
network came back. Seemed like they didn’t like that they had been unable to resolve the CUCM DNS entries. IP address server entries have worked great.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Switching just involves change the System->Server entries and rebooting the cluster. I heard that the reboot isn’t necessarily required but RTMT was broken
after the change and I was just more comfortable with the reboot anyway.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> cisco-voip [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>]
<b>On Behalf Of </b>Jason Aarons (AM)<br>
<b>Sent:</b> 26 May 2015 7:03 PM<span class=""><br>
<b>To:</b> Gyrion, Larry; Cisco-voip (<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a>)<br>
</span><b>Subject:</b> Re: [cisco-voip] Changing DNS entries in Call Manager 9.1.2.10000-28<u></u><u></u></span></p>
</div>
</div><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Everything is hostnames so https works without complaining. Certificates with ip addresses give warnings. 443/TLS/PKI is the future
</span><span style="font-size:11.0pt;font-family:Wingdings;color:#1f497d">J</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">You can change CUCM back to ip address but applications and websites, clients like Jabber, will give warnings/errors. I think your DNS should be rock solid,
maybe you need secondary/tertiary dns entries.<u></u><u></u></span></p>
<p class="MsoNormal"><a name="14d9aeb4895ceb67__MailEndCompose"></a><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">mailto:cisco-voip-bounces@puck.nether.net</a>]
<b>On Behalf Of </b>Gyrion, Larry<br>
<b>Sent:</b> Tuesday, May 26, 2015 5:20 PM<br>
<b>To:</b> Cisco-voip (<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a>)<br>
<b>Subject:</b> [cisco-voip] Changing DNS entries in Call Manager 9.1.2.10000-28<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">We had an issue where we lost outbound calling ability when out primary DNS experiencing an unscheduled outage.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Our DNS entries are by host-name, not IP address. (it never failed over to the secondary DNS server, other items like computers did and internal and incoming
traffic was working fine)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">We also use UCCE 9<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I’m not sure why it was configured by host name rather than IP address when it was configured a long time ago.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">So my questions are:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Is there a valid reason why we use host-names instead of ip addresses?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">How can we change from host-name to IP address?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Will this affect the licensing (ELM)? (The below is reference to pre 9.0 CUCM)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:avholloway@gmail.com" target="_blank">avholloway@gmail.com</a> [<a href="mailto:avholloway@gmail.com" target="_blank">mailto:avholloway@gmail.com</a>]
<b>On Behalf Of </b>Anthony Holloway<br>
<b>Sent:</b> Monday, January 26, 2015 8:13 PM<br>
<b>To:</b> Gyrion, Larry; Cisco-voip (<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a>)<br>
<b>Subject:</b> Re: [cisco-voip] Changing DNS entries in Call Manager 8.6.2<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">The easiest way to view the license MAC, is to SSH to the server, and issue the show status command.<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Also, <a href="http://cisco.com/go/license" target="_blank">
http://cisco.com/go/license</a> enables you to rehost your own license files without opening a case. Of course, I don't guarantee you'll be successful, but it's nice to know this option exists.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><img border="0" width="237" height="210" src="cid:image001.png@01D0991E.CC7CE470" alt="Inline image 1"><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Another thing to note, you will get 30 days to rehost your license before anything bad happens to your servers, but if you're in a pinch, and you're like on day 28 and you need like 10 more days, you can revert your change, then make the
same change again, to restart the 30 day period.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">If that was confusing, let me use this example. If my primary DNS was 1.1.1.1, and I changed it to 2.2.2.2, I would have 30 days to rehost my licenses. On day 28, I set the primary DNS back to 1.1.1.1, then immediately back to 2.2.2.2,
and the 30 days starts over.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Last, buy certainly not least, if you are changing DNS settings, it would be imperative for you to consider what might happen if you changed your DNS suffix. I cannot speak to your environment exactly, but suffice it to say, certificates
are based on names, and names sometimes contain DNS suffixes. You might start a chain reaction of changes, and as such you should plan that piece out more carefully. If you're only changing DNS server addresses, then you can ignore this last paragraph.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Good luck.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Mon Jan 26 2015 at 4:43:19 PM Gyrion, Larry <<a href="mailto:Larry.Gyrion@deancare.com" target="_blank">Larry.Gyrion@deancare.com</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">Looking for some guidance on updating the DNS entries on our CUCM cluster. A colleague went through the process, but upon entering the command received a warning stating that the
change would invalidate our licenses. Has anybody come across this before, and if so, what was the proper course of action to ensure license preservation?<u></u><u></u></p>
<p class="MsoNormal">CUCM 8.6.2<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d">Thank you,</span><u></u><u></u></p>
<p class="MsoNormal"><b><span style="font-size:18.0pt;font-family:"Brush Script MT";color:#1f497d">Larry Gyrion</span></b><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">
| Telecommunications Analyst | Information Technology</span></b><span style="color:#1f497d">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">Dean Clinic - Corporate offices</span><span style="font-size:10.0pt;color:#1f497d">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">1800 W. Beltline Hwy</span><span style="font-size:10.0pt;color:#1f497d">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">Madison WI. 53713</span><span style="font-size:10.0pt;color:#1f497d">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">Phone
<a href="tel:608.294.6201" target="_blank">608.294.6201</a> | 5406201| Fax <a href="tel:608.280.6852" target="_blank">
608.280.6852</a></span><span style="font-size:10.0pt;color:#1f497d"><br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d"><a href="mailto:larry.gyrion@deancare.com" target="_blank">larry.gyrion@deancare.com</a> |
<a href="http://www.deancare.com/" target="_blank">
www.deancare.com</a></span><span style="color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal" style="line-height:120%">
<b><i><span style="font-size:10.0pt;line-height:120%;font-family:"Arial","sans-serif";color:#6a2c91">Partners who care</span></i></b><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<p class="MsoNormal">The information contained in this e-mail message and any attachments may be proprietary and is intended only for the confidential use of the designated recipient named above. If the reader of this message is not the intended recipient or
an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution or copying of this message is strictly prohibited. If you have received
this communication in error please notify us immediately at the e-mail address listed above. Thank you.
<u></u><u></u></p>
</div>
<p class="MsoNormal">_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="3" width="100%" align="center">
</div>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"><br>
Confidentiality Notice: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are
not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.<br>
</span><br>
<br>
<span style="color:white">itevomcid</span> <u></u><u></u></p>
</div></div></div>
<br>
<br>
The contents of this message may contain confidential and/or privileged
subject matter. If this message has been received in error, please contact
the sender and delete all copies. Like other forms of communication,
e-mail communications may be vulnerable to interception by unauthorized
parties. If you do not wish us to communicate with you by e-mail, please
notify us at your earliest convenience. In the absence of such
notification, your consent is assumed. Should you choose to allow us to
communicate by e-mail, we will not take any additional security measures
(such as encryption) unless specifically requested.
<br>
<br>
If you no longer wish to receive commercial messages, you can unsubscribe
by accessing this link: <a href="http://www.bennettjones.com/unsubscribe" target="_blank">http://www.bennettjones.com/unsubscribe</a>
</div>
<br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br></div>