Ask the Expert: Cisco TelePresence for the Enterprise

Welcome to the Cisco® Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about Cisco Telepresence® for the enterprise.
Cisco experts Jaret, Fernando, and Fred will be covering all Cisco TelePresence products. Topics include Cisco TelePresence endpoints and TelePresence infrastructure such as the Cisco TelePresence Video Communication Server (VCS), Cisco Expressway Series, Cisco Unified Communication Manager (CallManager), Cisco TelePresence Servers (MSE 8710, on Virtual Machine, etc.), MCU (MSE 8510, etc.), Cisco TelePresence Management Suite (TMS), and all other Cisco TelePresence related devices.
Jaret Osborne is an 8-year Cisco Advanced Services veteran. In his Advanced Services tour, Jaret has covered all aspects of Cisco Unified Communications and TelePresence products, including both enterprise and service provider verticals. Most recently Jaret has been working with global service providers supporting their Cisco TelePresence as a Service offerings while also incubating new cloud services at Cisco.
Fernando Rivas is a Cisco Advanced Services NCE, starting in the Cisco Technical Assistance Center (TAC), 2007, on the Collaboration Technology Team mastering the Cisco Unified Communication technologies and specialized in call control CUCM,VCS) and conferencing (MeetingPlace, Telepresence). In 2011, he joined Cisco Advanced Services as a member of the Cisco Collaboration team and participated in several Cisco TelePresence and video-related technologies deployments. Currently he is a member of the Video Cloud Technology Team, supporting video exchanges in several and architecting new private video cloud solutions for large enterprises. Fernando holds a routing and switching CCIE® certification (22975).
Fred Mollenkopf is a Cisco Advanced Services Network consulting engineer working at Cisco for the last 7 years. Fred has led some of the largest Cisco Unified Communication and Collaboration deployments done for Cisco customers and partners. Over 15 years’ experience in data networking with a specialization in Cisco Unified Communications in 2004. Currently he is a member of the SP Video Advanced Services Team, supporting SP video exchanges and the Cisco Telepresence solutions. Fred maintains an active CCIE® in Voice (17521).
Remember to use the rating system to let Jaret, Fernando, and Fred know if you have received an adequate response.
Because of the volume expected during this event, Jaret, Fred, and Fernando might not be able to answer every question. Remember that you can continue the conversation in the Collaboration, Voice and Video Community, under the sub-community TelePresence, shortly after the event. This event lasts through August 15, 2014. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.

Tenaro,
Additionally here are the most common login issues. Unfortunately this includes items related to Presence implementation but I commented where we did not use these in our lab setup for CUCM Phone Capabilities only.
Login Issues
Problem:
Jabber Unable to Sign-in Through MRA
Solution
This can be caused by a number of things, a few of which are outlined below.
1. Collaboration Edge SRV record not created and/or port 8443 unreachable
For a jabber client to be able to login successfully using MRA, a specific collaboration edge SRV record must be created and accessible externally. When a jabber client is initially started it will make server DNS SRV queries:
_cisco-uds : this SRV record is used to determine if a CUCM server is available.
_cuplogin : this SRV record is used to determine if an IM&P server is available.
_collab-edge : this SRV record is used to determine if MRA is available.
If the jabber client is started and does not receive an SRV answer for _cisco-uds and _cuplogin, and does receive an answer for _collab-edge then it will use this answer to try to contact the Expressway-E listed in the SRV answer.
The _collab-edge SRV record should point to the FQDN of the Expressway-E using port 8443. If the _collab-edge SRV is not created, or is not externally available, or if it is available, but port 8443 is not reachable, then the jabber client will fail to login.
2.  Unacceptable or No Available Certificate on VCS Expressway
After the jabber client has received an answer for _collab-edge, it will then contact the expressway using TLS over port 8443 to try to retrieve the certificate from the expressway to setup TLS for communication between the jabber client and the expressway.
If the Expressway does not have a valid signed certificate that contains either the FQDN or domain of the Expressway, then this will fail and the jabber client will fail to login.
If this is occurring, the you should use the CSR tool on the Expressway, which will automatically include the FQDN of the expressway as a Subject Alternative Name.
MRA requires secure communication between the Expressway-C and Expressway-E, and between the Expressway-E and external endpoints.
Expressway-C Server Certificate Requirements:
The Chat Node Aliases configured on the IM&P servers. This is required if you are doing XMPP federation. The Expressway-C should automatically include these in the CSR provided that an IM&P server has already been discovered on the Expressway-C.
The names in FQDN format of all Phone Security Profiles in CUCM configured for TLS and used on devices configured for MRA. This allows for secure communication between the CUCM and Expressway-C for the devices using those Phone Security Profiles.
Expressway-E Server Certificate Requirements:
All domains configured for Unified Communications. This includes the domain of the Expressway-E and C, e-mail address domain configured for Jabber, and any presence domains.
The Chat Node Aliases configured on the IM&P servers. This is required if you are doing XMPP federation.
The MRA Deployment guide describes this in greater detail on pages 17-18. (http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X8-1/Mobile-Remote-Ac...
Note: In our lab for testing Phone Capabilities only, we did not include the Chat Node Aliases in the certificate as we were not using IM&P.
3.  No UDS Servers Found in Edge Config
After the Jabber client successfully establishes a secure connection with the Expressway-E, it will ask for its edge config. This edge config will contain the SRV records for _cuplogin and _cisco-uds. If these SRV records are not returned in the edge config, then the jabber client will not be able to proceed with trying to login.
To fix this, make sure that _cisco-uds and _cuplogin SRV records are created internally and resolvable by the Expressway-C
More information on the DNS SRV records can be found on page 10 of the MRA deployment guide for X8.1.1 (http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X8-1/Mobile-Remote-Access-via-Expressway-Deployment-Guide-X8-1-1.pdf)
Note: In our lab for testing Phone Capabilities only, we did not include the DNS SRV for _cuplogin.
4.  The Expressway-C logs will indicate the following error: XCP_JABBERD Detail="Unable to connect to host '%IP%', port 7400:(111) Connection refused"
If Expressway-E NIC is incorrectly configured, this can cause the XCP server to not be updated. If the Expressway-E meets the following criteria, then you will likely have this issue:
Using a single NIC
Advanced Networking Option Key is installed
Use Dual Network Interfaces option is set to “Yes”
To correct this problem, change the “Use Dual Network Interfaces” option to “No”
The reason this is a problem is because the Expressway-E will be listening for the XCP session on the wrong network interface, which will cause the connection to fail/timeout. The Expressway-E listens on TCP port 7400 for the XCP session. You can verify this by using the netstat command from the VCS as root.
Note: We used a Dual Network Interface Expressway for testing but were not using XCP, so this was not applicable to us.
5.  VCE-E Server hostname/domain name does not match what is configured in the _collab-edge SRV.
If the Expressway-E Server hostname/domain name does not match what was received in the _collab-edge SRV answer, the jabber client will not be able to communicate to the Expressway-E. The Jabber client uses the xmppEdgeServer/Address element in the get_edge_config response to establish the XMPP connection to the Expressway-E.
This is an example of what the xmppEdgeServer/Address would look like in the get_edge_config response from the Expressway-E to the Jabber client:
<xmppEdgeServer>
<server>
<address>ott-vcse1.vcx.cisco.com</address>
<tlsPort>5222</tlsPort>
</server>
</xmppEdgeServer>
To avoid this, make sure that the _collab-edge SRV record matches the Expressway-E hostname/domain name. Enhancement CSCuo83458 has been filed for this.
Note: This was one of our issues when we first setup. We adjusted our Expressway-E to insure the below:
System > Administration > System Name this was the FQDN
System > DNS > System Host Name was the host portion of the FQDN
System > DNS > Domain Name was the domain portion of the FQDN
System > Clustering > Cluster Name (FQDN for Provisioning) was the FQDN
6. Unable to log into certain IM&P servers. VCS logs say "No realm found for host cups-example.domain.com, check connect auth configuration"
From the Expressway-E, go to Configuration -> Unified Communications -> IM&P Servers. Open each server and click "Save" again. Not sure exactly why this happens.
Note: This was N/A to our test and can be ignored with Phone Capabilities only.
Thanks
Fred

Similar Messages

Ask the Expert: Cisco Unified Computing System Director

With Andrew Nam
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about Cisco Unified Computing System (UCS) Director with Cisco expert Andrew Nam.
Cisco UCS Director was designed to operationally integrate bare-metal and virtual data center infrastructure resources to address complex, time-consuming, manual, and compartmentalized management processes. These processes burden IT organizations, preventing them from achieving business agility and efficiency. Cisco expert Andrew Nam will provide an update on installation, configuration, and troubleshooting VM provisioning process using Cisco UCS Director.
Andrew Nam is a data center solution engineer in the DC Solution team in Sydney, Australia, responsible for orchestrating the end-to-end solution support of Cisco Data Centre solutions, including Cisco UCS, Cisco Nexus architecture, VBlock/FlexPod, VDI/VXI, and cloud solutions. His areas of expertise include routing and switching, load balancer, WAN optimization, VPN, and firewalls. Andrew has worked for Cisco for more than 13 years and has 15 years of experience in the networking industry. He graduated from New South Wales University in Australia with a mechanical/manufacturing engineering degree and holds R&S CCIE 9586, VMware VPC5, and Citrix CCA - Xendesktop5 certifications.
Remember to use the rating system to let Andrew know if you have received an adequate response.
Andrew might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation in Data Center community, sub-community, Unified Computing discussion forum shortly after the event. This event lasts through January 17, 2014. Visit this forum often to view responses to your questions and the questions of other community members.

Hi James
This Ask the Expert session may not be the right place to show you all the essential steps for how the workflow can be related to task library to achieve your initial setup flow chart, and onboarding a new client.
However, I can briefly walktthrough "Client blade Provisioning" task so it might give some idea and how you can go about.
Assumption : the infrastructure used in the following examples consists of:
- Vmware VCenter
- Cisco UCS
- NetApp ONTAP controlled storage
To be able to provision Cisco UCS blade server in automated fashion, you need to create and define the below UCS entities beforehand.
- Create UCS Organisation
- Create UUID Pool
- Create MAC Address Pool
- Create WWNN Pool
- Create WWPN Pool
- Create vHBA Templates
- Create vNIC Templates
- Create UCS Policy vHBAs
- Create UCS Policy vNICs
- Create Storage Policy
- Create Network Policy
- Create SAN Boot Policy
- Create LAN Boot Policy
Once you create all the policy above, you are good to set up a workflow container for the client blade provisoining.
1. Create UCS Service Profile
- Add a ‘Create UCS Service Profile’ workflow task and select ‘Map to User Input’ for ‘Service Profile Name’. Select the ‘Service Profile Name’ dropdown as created when the workflow container was created.
- ‘Create UCS Service Profile’ inputs. Ensure that Storage_Policy, Network_Policy, Boot_Policy_LAN and Boot_Policy_SAN entries are correct.
- Once this is done , you can move to SAN zoning.
2. Configure SAN Zoning
- In this step, a new workflow task will be created in order to configure SAN zoning. Rather than use a specific user input for this task, output variables from the previous ‘Create UCS Service Profile’ workflow task will be used as input items for this task.
- Open the workflow and search for the workflow task ‘configure san zoning’. Drag the storage workflow task into the work area and map the following user inputs.
Create Flexible Volume
- Create a ‘Create Flexible Volume’ workflow task in order to build a NetApp flexible volume and provision it for the required size.
- Once again, reconfigure the workflow such that the success criteria from the ‘Configure SAN Zoning’ workflow task proceeds to ‘Create Flexible Volume’.
Create LUN
- Using the NetApp ONTAP ‘Create LUN’ workflow task, create a LUN located within the volume created during the previous step. In order to do this, map the Volume Name user input to the output from the previous ‘Create Flexible Volume’ workflow task.
- Next, enter the LUN details, ensuring that the configured size is less than that of the volume created in the previous step.
- As before, re-map the workflow designer flow so that the successful output of the Create Flexible Volume workflow task flows into this task.
3. Create Initiator Group
- Create a ‘Create Initiator Group’ workflow task in order to build a NetApp ONTAP Initiator Group. Map the ‘Filer Identity Name’ attribute to the OUTPUT_FILER_IDENTITY output variable as supplied by the ‘Create NetApp Flexible Volume’ workflow task as created earlier in this workflow.
- Once again, modify the the workflow designer flow so that the successful output from ‘Create LUN’ flows into ‘Create Initiator Group’
4. Add Initiator to Initiator Group
- Create an ‘Add Initiator to Initiator Group’ workflow task and map the ‘Initiator Group Name’ entry to the OUTPUT_IGROUP_IDENTITY output variable from the ‘Create NetApp Initiator Group’ workflow task and map the ‘Initiator Name’ entry to the SP_VHBA1 output variable from the ‘Create UCS Service Profile’ workflow task created earlier in this flow.
- Repeat this task for in order to add initiator name entry for SP_VHBA2. Once done, re-map the successful output from the two Create Initiator Group workflow tasks so that they flow into each other as follows:
- Move onto the next step in order to map the created LUN to the initiator group.
And the rest of steps are fairly similar to above. Create a Workflow and map the User Input Mappings".
5. Map LUN to Initiator Group
6. Modify UCS Boot Policy LUN ID
7. Select UCS Server
8. Associate UCS Service Profile
9. Power On UCS Server
10. Modify UCS Service Profile Boot Policy
11. Add VLAN to Service Policy
12. Disassociate UCS Service Profile
13. Wait for Specified Duration
14. Associate UCS Service Profile
15. Power On UCS Server
16. Register Host with VCenter
regards
Andrew

Ask the Expert:Cisco Web Security

With Ryan Wager
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn about design, configuration and troubleshooting of the Cisco Web Security Solutions including Cisco Ironport WSA and Cisco ScanSafe with Cisco experts Kiran Sirupa and Ryan Wager. Kiran Sirupa is a technical marketing engineer in the product marketing team for the Cisco IronPort Web Security Appliance product line. He also works on documentation, partner ,and system engineering training. Kiran has been working in the Cisco Security Technologies group for more than six years. Ryan Wager is a technical marketing engineer at Cisco in the product management team for the ScanSafe Web Security platform. He is heavily involved with the product's integration with the Cisco Integrated Services Router Generation 2 platform, along with documentation, training, and testing of all new products and features. Before joining the product management team, Wagner spent two years as an implementation engineer helping ScanSafe's largest customers implement the platform into their networks.
Remember to use the rating system to let Kiran and Ryan know if you have received an adequate response.
They might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Security sub-community, discussion forum shortly after the event. This event lasts through October 7, 2011.. Visit this forum often to view responses to your questions and the questions of other community members.

Yes, the IronPort WSA will support all the security functions including Anti-Virus, Anti-Malware, Anti-Spyware, Web Reputation when working in conjunction with an existing proxy.
There are two conditions:
1. WSA acts as an upstream proxy - In this case, the authentication will be handled by your existing proxy, but the WSA is the first layer of defense. The WSA will perform a lookup in its web reputation database based on the destination. Also, The WSA can scan the http response with Anti-Virus, Anti-SpyWare and Anti-Malware software. However, since the WSA doesn't have user authentication information, you can only apply global controls for Acceptable Use.
2. WSA has to go through an existing upstream proxy - In this case, the WSA has all the security functionality. In addition, it also handles the authentication. Hence, you can apply role based controls.
You may refer to the following links for more information:
WSA Product Literature: http://www.cisco.com/en/US/products/ps10164/prod_literature.html
Cisco Security Reports: http://www.cisco.com/en/US/prod/vpndevc/annual_security_report.html
Cisco Security Intelligence Operations: http://tools.cisco.com/security/center/home.x

I just bought a used iPad 2, how do I change the previous owners info for the app store? Whenever I try to buy an app it asks for the previous owners password for the iTunes account. I have my own account Nd would like to use it.

Need help Changing the previous owners settings for the app store. I can't buy any apps. Because it asks for previous owners information.

I had this same problem, and it was erased.
For some really odd reason iPads sometimes retain the last user iTunes account on first visit to the iTunes store.
I am thinking it is actually the iTunes store recognising the iPad, and so 'helping' by showing the last log in settings.
So I would also recommend Erase All Content and Settings to start.
If that was done then what you need to do is log in, or create your own itunes account.
This is in Settings, Store.
create your own iTunes account (or log in with an old one).
Purchase something.
Then (as long as you don't have any app from the last owner on) it should never ask for the old account again.

I reset my disabled ipad 2 and it is asking me for the apple id which first set it up but i forgot the password for that apple id and the password/recovery information for the recovery email address. What can i do?

i reset my disabled ipad 2 and it is asking me for the apple id which first set it up but i forgot the password for that apple id and the password/recovery information for the recovery email address. What can i do?

Click here and use Apple's iForgot service, or contact their Account Security team, or if you're the device's original owner, take it and its purchase receipt to a physical Apple Store.
(124525)

Ok i have been trying to download albums, songs, apps, etc. and my itunes keeps asking me for the security question and for the life of me i cant remember the answers. I dont know what the email is that receives the question reset.

ok i have been trying to download albums, songs, apps, etc. and my itunes keeps asking me for the security question and for the life of me i cant remember the answers. I dont know what the email is that receives the question reset. is there anything i can do to fix this or am i screwed?

If you have music that was purchased on different iTunes accounts than the one you use, then you must provide the password, otherwise the tunes are not considered yours. You can turn off iCloud and just use the usual USB sync method. But I wonder whether you'll have the same problem?

Hi i'm trying to install updates but Name and then the password I have for the account won't let me in. Is my name my email address?

hi i'm trying to install updates but Name and then the password I have for the account won't let me in. Is my name my email address?

Updates do not normally require any kind of password access. It is more likely your machine's security is asking for you to allow things to be updated.

I purchased the Brookstone DLP projector for the iPhone, and all the reviews state the iPhone 4S can be mirrored with it. However, I can't not figure out how to do so. Is there a setting to change? Can't figure it out! ARGGG!

I purchased the Brookstone DLP projector for the iPhone, and all the reviews state the iPhone 4S can be mirrored with it. However, I can't not figure out how to do so. Is there a setting to change? Can't figure it out! ARGGG!
It will show pictures and videos if I choose, Start Slideshow, but it won't show anything else, no apps, etc.
Here's a few examples of the reviews which state it mirrors:
http://www.bgr.com/2011/11/07/brookstone-pocket-projector-for-iphone-4-and-4s-re view/
http://www.gadgetaddict.info/brookstone-pocket-projector-for-iphone-4-and-4s-rev iew/
I bought this for video analysis presentations with an app on the phone, so this is a key feature for me.
Any help is appreciated.
Jim

I also have not figured out how to mirrow either. I ask you both, is the sound via the projector louder than the phone itself when projector is tuerned off? No matter what I do the max vilume through the projector speakers is lower that the phone itself even with phone remaining installed in projector. I am think of taking it back to try another one.
Keith

I rented a movie on my iPad. It downloaded fine but would only play 36 minutes, 5 seconds worth of the movie; although the time kept running for the length of the movie. Can this be fixed or do I need to get a refund?

I rented a movie on my iPad. It downloaded fine but would only play 36 minutes, 5 seconds worth of the movie; although the time kept running for the length of the movie. Can this be fixed or do I need to get a refund?

You can try a rest:
Reset iPad: Press and hold the On/Off Sleep/Wake button and the Home
button at the same time for at least ten seconds, until the Apple logo appears.
- If that does work, contact iTunes and request a redownload. You can ask for a refund though.

How do I determine the correct sales org for the employee?

Hi
The requirement here is to determine the correct sales org for the employee logged in when creating an activity (a customer visit). We know that all employees will belong to one sales org.
On this basis, in the organisational data determination I have maintained the organisational data profile Z0001 with the Organisational Model Determination Rule: 10000162 (employees for responsible org. unit). I have left the Responsibilities Determination Rule empty. I am not sure if both have to be filled. Can anyone explain the difference between the two?
I have checked the sales organisation and distribution channel. This is for the sales scenario.
I simulated this rule in Maintain Determination Rules. I entered the Sales Org and no agents (employees) were found.
The org data profile Z0001 has been assigned to the transaction.
The Object Permitted in Determination has been checked for the sales scenario in the Organisational Model.
Regards
Declan

Hi PePe
I made the change and it worked as I wanted it. Thanks a lot.
You say there's no need to Maintain the Responsibilities Rule. Can I ask what this section does and why it can be one or the other?
Regards
Declan

[Extend DBI] specify the drill-down report for the custom report column

Hi,
I realized two custom reports by using the extend DBI tools:
1st report displays the sum of invoices amounts grouped by Operating Units.
2nd report display the details of invoices for all Operating Units
In the 1st report I specified a link on the column Operating Units to drill-down at 2nd report.
The problem is how specified the drill-down link so that the 2nd report display only the detail of invoices for the selected Operating Unit?
Thanks.

Adding the time dimenstions like Year, Quarter, Period, Week is quite possible.
Steps would be:
1. make sure your data source (Table/View has these columns). If you don't have them you can generate them by joining the date of the data table with FIII_TIME_DAY.
2. Map these new columns to appropriate Dimesnions. (Lile Enterprise Year, Enterprise Quarter etc.)
Once you have done these two your report will work for the Time Dimensions.
I dont think its possible to get the Prior Period functionality unless you use a generated datasource.
Regards,
Sudeep

Issues downloading the 5.0 software for the iPhone 3GS. Any suggestions?

Issues downloading the 5.0 software for the iPhone 3GS. Any suggestions?

Disable your firewall/security software.
This is asked and answered many times each day. The forum search bar is on the right side of this page.

When does apple expect to get the Mophie juice pack for the iPhone 5

When is the expected release date for the Mophie juice pack for the iPhone 5

You would have to ask Mophie

The SYSVAL table entry for the database version (16) does not match the required version

We upgraded from Tidal Enterprise Scheduler (TES) 5.31 to 6.1 on fresh Windows x64 2008 R2 servers. I did a fresh install but our DBA restored a copy of our database from pre-prod which was at 5.31. I get the error below. Note, SQL went from 2005 to 2012 during this upgrade. Do I need to change a value in this table to reflect the SQL change?
[04/29 12:47:14:198]:TIDAL Enterprise Scheduler: version 6.1.0.133
[04/29 12:47:14:198]:Java version: 1.8.0
[04/29 12:47:14:198]:Java Virtual Machine version: 25.0-b70
[04/29 12:47:14:198]:Start Time : 04/29/14 12:47:14:198
[04/29 12:47:14:198]:----------------------------------------------------------------------------
[04/29 12:47:14:198]:Database URL :jdbc:sqlserver://SQL2012-Host:1433;responseBuffering=adaptive
[04/29 12:47:14:198]:Database Driver :com.microsoft.sqlserver.jdbc.SQLServerDriver
[04/29 12:47:14:198]:Maximum number of log files = 100
[04/29 12:47:14:198]:Added a LogFile called 'RegularFile'
[04/29 12:47:14:198]:LogManager: setting default log
[04/29 12:47:14:214]:Retrieved a LogFile called 'RegularFile'
[04/29 12:47:14:495]:MessageBroker: Instantiated TcpTransportServer (URI = tcp://0.0.0.0:6215)
[04/29 12:47:16:975]:Retrieved a LogFile called 'RegularFile'
[04/29 12:47:17:272]:The SYSVAL table entry for the database version (16) does not match the required version (23). Shutting down.
[04/29 12:47:20:282]:
[04/29 12:47:20:282]:
[04/29 12:47:20:282]:Shutting down the application

I had this error last night while applying a patch to 6.0. However in my case the version was 21 versus a required version of 23.
As far as i know 6.1 is not compatible with the 5 db schema, so you will need an update / migration plan for the db also.

I would like to know the wi fi distance for the new airport extreem

I am wanting the new airport extreem for the modom i am using is not giving me the wi fi speeds that I pay for from my internet provider. I pay for 50k speeds but through wi fi am only getting about 20k speeds. I bought the first airport 5 years ago and it did not have the range this current cisco modum has. Please give me your oppinion that you...

The latest 802.11ac AirPort Extreme uses a completely redesigned Wi-Fi antenna array over the earler 802.11n models. You should see a significant difference in the useable bandwidth vs. range with this new AirPort over those previous models.

Ask the Expert: Cisco TelePresence for the Enterprise

Similar Messages

Maybe you are looking for