<html><body><div style="font-family: Verdana; font-size: 10pt; color: #000000"><div><br></div><div>DNS views are a requirement for Jabber MRA. <span style="font-size: 10pt;">That being said, there is a "workaround".</span></div><div><br></div><div><div style="font-size: 13.3333px;" data-mce-style="font-size: 13.3333px;"><a href="http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/BYOD_Design_Guide/BYOD_CollabEdge.html#pgfId-1029370" data-mce-href="http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/BYOD_Design_Guide/BYOD_CollabEdge.html#pgfId-1029370">http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/BYOD_Design_Guide/BYOD_CollabEdge.html#pgfId-1029370</a></div><div><br></div></div><div>We're hoping this will work for us. We tested it out, and while it did work, we believe it had an adverse reaction which resulted in some DNS service interruptions. We're hoping to open a ticket with the TAC to understand the configuration a bit more clearly and what potential impact it might have on operations.</div><div><br></div><div>If this doesn't work, we'll have no option but to implement DNS split view if we want MRA to work. </div><div><br></div><div>That being said, there may be an option to enable split view DNS on a subzone rather than on a whole zone. That's my hope and plan B.</div><div><br></div><div><br></div><div><br></div><div><br></div><div><span name="x"></span>---<br>Lelio Fulgenzi, B.A.<br>Senior Analyst, Network Infrastructure<br>Computing and Communications Services (CCS)<br>University of Guelph<br><div><br></div>519‐824‐4120 Ext 56354<br>lelio@uoguelph.ca<br>www.uoguelph.ca/ccs<br>Room 037, Animal Science and Nutrition Building<br>Guelph, Ontario, N1G 2W1<span name="x"></span><br></div><div><br></div><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>From: </b>"Brian Meade" <bmeade90@vt.edu><br><b>To: </b>"James Conyers" <James.Conyers@du.edu><br><b>Cc: </b>cisco-voip@puck.nether.net<br><b>Sent: </b>Wednesday, February 3, 2016 3:29:55 PM<br><b>Subject: </b>Re: [cisco-voip] Cisco Network Registrar DNS and Mobile Remote Access<br><div><br></div><div dir="ltr">I think that's what the DNS Views are for- <a href="http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/network_registrar/8-2/user/guide/CPNR_8_2_User_Guide/UG_ZoneViews.html" target="_blank" data-mce-href="http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/network_registrar/8-2/user/guide/CPNR_8_2_User_Guide/UG_ZoneViews.html">http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/network_registrar/8-2/user/guide/CPNR_8_2_User_Guide/UG_ZoneViews.html</a></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Feb 3, 2016 at 3:00 PM, James Conyers <span dir="ltr"><<a href="mailto:James.Conyers@du.edu" target="_blank" data-mce-href="mailto:James.Conyers@du.edu">James.Conyers@du.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex" data-mce-style="margin: 0 0 0 .8ex; border-left: 1px #ccc solid; padding-left: 1ex;"><div lang="EN-US"><div><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri",sans-serif;color:black" data-mce-style="font-size: 10.5pt; font-family: 'Calibri',sans-serif; color: black;">Hi,<span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span></span></p><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri",sans-serif;color:black" data-mce-style="font-size: 10.5pt; font-family: 'Calibri',sans-serif; color: black;">We are running into a problem with Cisco Mobile Remote Access where the DNS entries we created are being replicated on the inside and outside of our firewall. The users/devices attempt to connect to the correct services (_cisco-uds_tcp & _cuplogin._tcp) from outside of the firewall and because our DNS entries are replicated on both the inside and outside these lookups do not fail but the registration does eventually fail because these addresses are internal IP’s. The users/devices never get prompted to lookup the (_cisco-uds) through Expressway and thus are unable to register. <span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span></span></p><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri",sans-serif;color:black" data-mce-style="font-size: 10.5pt; font-family: 'Calibri',sans-serif; color: black;">Is there any way to configure an ACL/whitelist/blacklist entries for certain zone entries within Cisco Network Registrar which would enable outside users/devices to hit the Expressway as opposed to the internal IPs of the Call Manager/ CUPs server?<span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span></span></p><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri",sans-serif;color:black" data-mce-style="font-size: 10.5pt; font-family: 'Calibri',sans-serif; color: black;">Any ideas?<span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span></span></p><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri",sans-serif;color:black" data-mce-style="font-size: 10.5pt; font-family: 'Calibri',sans-serif; color: black;">Thanks,<span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span></span></p><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri",sans-serif;color:black" data-mce-style="font-size: 10.5pt; font-family: 'Calibri',sans-serif; color: black;">James<span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span></span></p><div><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri",sans-serif;color:black" data-mce-style="font-size: 10.5pt; font-family: 'Calibri',sans-serif; color: black;"><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span> <span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span></span></p></div><div><div><div><p class="MsoNormal"><span style="font-size:11.0pt;color:#44546a" data-mce-style="font-size: 11.0pt; color: #44546a;">James Conyers </span><span style="font-size:11.0pt;color:black" data-mce-style="font-size: 11.0pt; color: black;"><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#44546a" data-mce-style="font-size: 11.0pt; color: #44546a;">Telecommunications Engineer II</span><span style="font-size:11.0pt;color:black" data-mce-style="font-size: 11.0pt; color: black;"><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#44546a" data-mce-style="font-size: 11.0pt; color: #44546a;"><a href="tel:303-871-7992" target="_blank" data-mce-href="tel:303-871-7992">303-871-7992</a></span><span style="font-size:11.0pt;color:black" data-mce-style="font-size: 11.0pt; color: black;"><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span></span></p></div><div><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri",sans-serif;color:black" data-mce-style="font-size: 10.5pt; font-family: 'Calibri',sans-serif; color: black;"><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span> <span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"></span></span></p></div></div></div></div></div><br>_______________________________________________<br> cisco-voip mailing list<br> <a href="mailto:cisco-voip@puck.nether.net" target="_blank" data-mce-href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br> <a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank" data-mce-href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br> <br></blockquote></div><br></div><br>_______________________________________________<br>cisco-voip mailing list<br>cisco-voip@puck.nether.net<br>https://puck.nether.net/mailman/listinfo/cisco-voip<br></div><div><br></div></div></body></html>