Unity Interoperability Gateway - Interop Domain FQDN

We are trying to setup digital networking between Unity 8 and Unity Connection 8 for migration. Both system in the same AD and Exchange Site.
We cannot do a flash cutover.
When setting up the Unity Interoperability gateway, what is the Interop Domain FQDN suppose to be?
What domain name should we give to the Unity Connection 8 server?
I read in the documentation that they cannot be the same. I am kinda confused about this part.
Lets suppose that our AD domain name is mydomain.admin
and our email domain name is mydomain.com
Thank you!

In the documentation it says
"It should not match any SMTP domain used in the Exchange organization to which Cisco Unity belongs for any purpose other than for routing messages through the Interoperability Gateway for Microsoft Exchange."
"It must not match the SMTP domain of the Connection site gateway. (You can check the SMTP domain on the System settings > SMTP Configuration > Server page in Cisco Unity Connection Administration on the Connection gateway.
What can I use for Unity 8? What can I use for Unity Connection 8?

Similar Messages

Dual-routing messages in gateway/ext-domain

Here's another question related to our impending rollout of Groupwise to
our stores...
Currently, our stores' POS systems receive text messages via the
mainframe. To allow corporate users with Groupwise to send mail to the
stores, we set up many years ago an external domain and set up each
store as an external user in this external domain. Then, using the 4.2
API gateway, all mail sent to any of these external users is dumped in
the ATT_OUT and API_OUT folders which is then picked up on a timed
basis by the mainframe and delivered to the store's POS system.
Now, using SLES10 and a Linux portal, we are going to give each of the
stores a REAL groupwise address with a REAL mailbox.
What I'd like to know is... is it possible to route messages sent to
the external user back to the new real mailbox while the conversion
process is taking place. In other words, we've got to convert 1300
stores and this process will take several months. Thus, we won't be
able to turn off the api gateway all at once and it will take some time
for systems and users to start using the new mailboxes.
So... if an internal groupwise person sent a groupwise message to
external user 10337.POS (where 10337 is the external user and POS is
the external domain), could the message still be placed in the
API_OUT/ATT_OUT folder of the gateway so the mainframe could pick it up
while simultaneously the message is routed to store10337.PRI_DOMAIN or
[email protected]?
Jim
jgosney

jgosney,
It appears that in the past few days you have not received a response to your posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at http://support.novell.com in both the "free product support" and "paid product support" drop down boxes.
- You could also try posting your message again. Make sure it is posted in the correct newsgroup. (http://support.novell.com/forums)
If this is a reply to a duplicate posting, please ignore and accept our apologies and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Unity 7.0 - AD Domain Admin Group

I have Unity 7.0 with failover, AD, and Exchange 2010. Unity accounts are created in AD in the Domain Admin Group. Most that I have read states if Unity is a domain controller it needs to be in the Domain Admin group. I do not know how to see if Unity is a domain controller and do not know why (previous to me), Unity was setup in the Domain Admin Group.
Can you help me understand why Unity might be setup in the Domain Admin Group, reasons?
Thanks,

Melinda;
-> if you use the tools depot option in the unity server you will see an option called dc\gc reconnect tool to check if unity looks at itself as a domain controller; here is a link that will give you more informaiton on this tool; http://www.ciscounitytools.com/Applications/Unity/DCGCReconnect/Help/DCGCConnectionManager.htm
-> Can you clarify if you are asking whether the unity reference account ( unityinstall/unimgstoresvc/unitydirsvc) needs to be domain admin or not ? If you query is related to the above mentioned accounts ; what permissions do they need is documented in the following link;
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/unity/5x/installation/guide/umexfo/5xcuigumefox/5xcuigumefo070.html
-i hope this helps.

RDS 2012 Gateway , no domain prompt

Is there a way, that when you have install RD WB and RD GW on same server, that user is not ask for additional credentials, when accessing published application.

Hi,
Have you enter the FQDN name of server under “Allow delegating default credential” policy setting as shown in that article.
Apart for your reference you can check beneath article.
Single credential prompt for TS Gateway Server and Terminal Server
http://blogs.msdn.com/b/rds/archive/2007/05/04/single-credential-prompt-for-ts-gateway-server-and-terminal-server.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Issue with Agents in Application DNS domains

I have a confusing scenario. We have a number of servers being monitored that have their DNS in an application domain, not their true AD domain. When installing the SCOM agent it picks up the application domain FQDN (properties tab of the agent) and not
the true AD FQDN. The console shows the servers by true AD FQDN. The servers show up in the console as "Not monitored".
I have not found a config file or registry entry where I can change this. One option I thought of is to remove the explicit "Primary DNS suffix for this computer", install the agent, then put the application domain suffix back. That is a lot of
work, though.
Any other suggestions so I can get these systems monitored?
Thanks,
Steve

Hi,
We should check operation manager logs on the agent, and check out any related messages there, if there is no errors or warnings, then I would like to suggest you remove agent from the problemtic computer and clear caches, and then manually reinstall the
agent and check the result.
If the issue is still there, we may try your method.
In addition, also hope the below link be helpful:
Fixing troubled agents
http://blogs.technet.com/b/kevinholman/archive/2009/10/01/fixing-troubled-agents.aspx
Regards,
Yan Li
Regards, Yan Li

Webvpn GW's on one router with domain names

Hi,
I'm trying to configure multiple WebVPN gateways on one router using one front door VRF and multiple back door VRF's. Think of this like a cloud service provider with several customers using different VRFs and one Internet VRF used for the incoming connections for the remote users.
Doing so, several scenarios arise:
Using one gateway and several context with a seperate VRF for each.
Please let me know if I am wrong here:
I can only assign one trustpoint because I only have one gateway. This means that all users connecting can only use one domain name like "*.isp.com". This also implies the use of a wildcard certificate.
Using several gateways and several context with a seperate VRF for each.
I can only assign multiple trustpoints because I only have one gateway. This means that users connecting can use multiple domains name like "webvpn.clientA.com" and "webvpn.clientB.com".
I would prefer the first situation but then I run into a second problem:
There are several commands related to hostname and up till now I have not figured out which one does exactly what:
ROUTER(config)#webvpn gateway WEB_GW
ROUTER(config-webvpn-gateway)#hostname
ROUTER(config)#webvpn context CUST1_CT
ROUTER(config-webvpn-context)#gateway WEB_GW domain
ROUTER(config-webvpn-context)#gateway WEB_GW virtual-host
Is there anyone who can explain to me what exactly does what?
My personal guest is that I only need to configure the virtual-host like this" CUST1_CT -> virtual-host cust1.isp.com and CUST2_CT -> virtual-host cust2.isp.com". But I'm not sure about this and up till now I have not found any documentation that describes this very clearly.

I think for this to work correctly and be able to split traffic between the 2 ISPs, you would need to use BGP, because default is going to use one ISP or the other.
If you can use BGP, this link will help you in load shearing between multiple ISPs when you have one router.
http://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/13762-40.html#conf4
HTH

Active Directory Cross Forest Domain Migration

Dear All,
We are in the process to rebuild new Active Directory infrastructure. Multiple single forest domains in organization which needs to be consolidated/migrated on single Active Directory Domain. For this consolidation, have some queries to be addressed before
going to start consolidation.
What is the best practices and what tool should we use for domain migration/consolidation
Active directory is on Windows 2003, forest and domain level is on Windows 2003, this will support to Windows 2012 R2 forest and domain functional level, will be migrated
directly from windows 2003 to windows 2012?
When move users to new domain, how will they access the other resources on the network. For e.g. Printer, File server, local web base application
After moving some computers to new domain would be possible to access remaining computers on old domain?
How the file server data will be moved? Best practices with NTFS folder permissions and users rights?
Is there any policy to register network printers on new Active Directory domain?
How users would be access web base application on new domain as their FQDN would be define with old domain name? Any option to change old domain FQDN with new domain that would be describe with any URL link?
Kindly give your valuable input to meet the desire result.
Thanks in Advance.

Dear Lucky,
Ya you can Migrate contents from multiple forest domain. Using ADMT (Active Directory Migration Tool)is the best way to migrate AD content. But you can't migrate from Windows Server 2003 to Windows Server 2012 R2, cause in Windwos Server 2012 R2 don't
have the supportebility of Windows Sever 2003.And not only users you can also migrate all others info (i.e. Computer object info, groups info, Exchange mailbox info, security info).You can migrate users face by face, means which peoples are in old domain they
can access old domain and new users are in new domain.For more info please follow the given link:
http://technet.microsoft.com/en-us/library/cc974332(v=WS.10).aspx
Mithun Dey Web: http://cloudmithun.wordpress.com If this may give your necessary resolution please mark it as Answre.

Resolving local domain name and nameserver address

Hi,
Is there any way to get the local domain name (on Windows it would be NT domain name and on Unix based platform it is DNS server's domain name) and local DNS server address ?
Thanks,
Rohit

import java.net.*;
try
   InetAddress ip = InetAddress.getLocalHost();
   String fqdn = InetAddress.getCanonicalHostName();
   int firstDot = fqdn.indexOf(".");
   String domain = fqdn.substring(firstDot+1);
   System.out.println("domain: "+domain);
catch(Exception ex)
   ex.printStackTrace();
}

Cisco VCS Microsoft Office 365 interop

As I understand this in order to connect Cisco Telepresence endpoints to the MS Lync client a VCS gateway is required.
This is supported for the on premises version of MS Lync. However I cannot find anything that details support or a road map
of the support of MS Lync within MS Office 365.
Does anyone have a road map or information on when support for Lync MS Office 365 may be forthcoming?
Thanks
Mark

Ah, but is SIP a "standard"? There are multiple RFCs outlining the protocol, but it isn't a standard per se, not in the way that H.323 is a "standard".
Yes, I'm splitting hairs, however, I agree with you and when companies bastardise SIP for their own nefarious purposes, they should at the very minimum provide an open interoperable gateway so that they can communicate will "normal" SIP based product that do comply to the RFCs. An example of a way that it could be done is through the StarLeaf (ex Codian) products. They use their own propitiatory SIP stack, yet their backend allows for full interoperability with H.323 , 'normal' SIP, and Lync - I must admit that I do like what they offer. The only ironic thing is that they don't negotiate AAC audio when hooked up to the Codian MCUs due to there product not being "white-listed"!. As Cisco now own Codian, we did forward a request to Cisco to add the StartLeaf product to the whitelist for these MCUs - we will have to see what happens....
Nevertheless, the last I read about this was that MS were looking to bring such a development to Lync, probably in 2015. I can't remember where I read it, but I think it may have come out of the last Lync Conference. My guess is that it will be rolled into a part of the next evolution of the product such as Lync 2015/16?

Advanced Accepted Domain Question

When you install Exchange 2010 into an organization that previously had Exchange 2003, new Active Directory objects are created here:
CN=Accepted Domains,CN=Transport Settings,CN=DemoLab,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=demolab,DC=local
Within each one of these objects there is an attribute called msExchAcceptedDomainFlags. If the value for this attribute is:
·           1 - It’s an External Relay Domain
·           2 - ?
·           8 - It’s an authoritative domain
·           10 - It’s an Internal Relay Domain
·           12 - ?
When I first started working with Exchange 2007, I didn’t realize these were new objects. In fact, I thought when you clicked the Accepted Domains tab in EMC it was just somehow interpreting the previous recipient policies which are located here:
CN=Recipient Policies,CN=DemoLab,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=demolab,DC=local
Each of the recipient policy objects located here has a multi-valued attribute called msExchNonAuthoritativeDomains and another called gatewayProxy.
Instead of making each domain as an object and indicating whether or not it’s one of the 3 above types via flag, the policies simply list all the authoritative domains in gatewayProxy and domains that would otherwise be considered Internal Relay within msExchNonAuthoritativeDomains.
So now that I’ve laid this out, I have a question (a few questions).
A.      At what point during the Exchange install are these objects created?
B.       The objects are obviously created by somehow copying elements of the recipient policies. Are these two objects kept in sync beyond initial creation?
In my example my AD domain is demolab.local. This is also the primary domain used in my recipient policy in 2003. This domain was marked as non-authoritative within the ESM. When Exchange 2010 was introduced, an Accepted Domain object was created, but it was marked as authoritative – not Relay as it should have been.
C.       Why?
I have other domains marked as non-authoritative in the recipient policies as well. However, these did get created properly as relay domains. Why wasn’t demolab.local preserved?
D.      Is it because it also matches the name of my AD forest?
This is easily fixed, (don’t tell me how to change accepted domain types). I’m just looking to better understand this topic.
Mike Crowley: MCT, MCSE, MCTS, MCITP: Enterprise Administrator / Messaging Administrator

For B, it won't let you create a new e-mail address policy for a domain that is not one of the accepted domains, and adding an accepted domain doesn't do anything to e-mail address policies. So I guess the answer is no, not exactly. If you have Exchange 2003 in the mix, I guess B could be answered through the best practice of not using Exchange 2003 management tools to manage organizational settings like recipient/e-mail address policies after installing Exchange 2007/2010.
C & D? Since the domain fqdn in my greenfield lab was marked as authoritative, maybe this is default behavior and it doesn't check first? Ahh, 2003, how I'm forgetting some of the little things, I think by default the domain fqdn is marked as authoritative in the default recipient policy, if so, I'll bet that 90% or more of Exchange 2003 organizations that have the domain fqdn in the recipient policy have it set as authoritative.
Joseph Durnal

Qustion have 2 nexus 3000 setup in vPC domain, want to add the 3rd one, How is this done?

If some can supply a sample of what the 3rd Nexus Switch configuration.
Nexus-1 Config
vrf context management
ip route 0.0.0.0/0 192.168.50.1
vlan 1
vlan 10
name ISCSI_VLAN
vpc domain 1
peer-keepalive destination 192.168.50.242
peer-gateway
interface port-channel1
switchport mode trunk
switchport trunk allowed vlan 10
spanning-tree port type network
flowcontrol receive on
flowcontrol send on
no negotiate auto
vpc peer-link
interface Ethernet1/52/1 - 4
switchport mode trunk
switchport trunk allowed vlan 10
flowcontrol receive on
flowcontrol send on
channel-group 1 mode active
Nexsus-2 Config
vrf context management
vlan 1
vlan 10
name ISCSI_VLAN
no vpc domain 1
peer-keepalive destination 192.168.50.241
peer-gateway
vpc domain 1
peer-keepalive destination 192.168.50.241 vrf management
peer-gateway
interface port-channel1
switchport mode trunk
switchport trunk allowed vlan 10
spanning-tree port type network
flowcontrol receive on
flowcontrol send on
no negotiate auto
vpc peer-link
interface Ethernet1/51/1 - 4
switchport mode trunk
switchport trunk allowed vlan 10
flowcontrol receive on
flowcontrol send on
channel-group 1 mode active

VPC can only have 2 members
HTH

I have 3 CD for install unity, what mean each one?

Hello,
I have to install the Uity 7.0(2), and I have 3 CDs for do it. whats mean each one and whats is the correct sequence of installation?
1) Cisco Unity (version 7.0(2), application and localizations: ENU, ENX, ARA, CHS, CHT, CSY and DEU)
2) Cisco Unity Data Store 2000 (version ENU, with the cisco unity system, preparation assistant)
3) Cisco Unity Message Store 2003 (version English)
principally I need wich one i have to install first and there are a manual of installation for following.
note: the platform operate systems 2003 (window server) is installed.
thanks very much.

Hi Oscar -
1. Failover means a second Unity server, for which you need to purchase failover licensing. Here is a link for reference - http://www.cisco.com/en/US/prod/collateral/voicesw/ps6789/ps5745/ps2237/data_sheet_c78-478111.html
2. Voicemail - typically the Unity server is installed as its own AD infrastructure, with the Unity server acting as domain controller and global catalog server, runs Exchange on the Unity server (or can be separate server) and users access voicemail using a different account than the one used on their PCs. The naming standard for user accounts MUST be different. In the past I have used vm-xxxxx where xxxxx is the user alias.
3. Unified Messaging - users access same inbox for email and voicemail. Unity is installed as a member server in domain and integrates with existing AD and Exchange infrastructure. Users use same account as their PC.
In prior Unity versions, voicemail only licensing was cheaper than unified messaging. Now it is up to you to decide. If your users want same inbox for email and voicemail, you will want Unified Messaging. Note Unity must be installed as member server in AD domain and integrate with a separate Exchange server. If this is not your area of expertise, I recommend you contact your team members that provide this support to discuss with them. The links you posted will discuss the differences in the two installs.
Hope this helps!
Ginger

Cisco Unity 7 Problem in Message Store Wiard. Showing some SRV Records Missing in DNS Table. Please suggest and help on this matter.

Installed Cisco Unity 7 on Windows Server 2000 and Unity Server is on Domain,and Exchange we are using is Exhcnage 2007. When we reach at Message Store Wizard it is showing some error at the end that " Failed reaching for Unity in Active Directory Global Catalog. The SVR Record may be missing in DNS Table" . It shows when we slected Exchange in Process and the Selected Storage Group. And the it takes time and then shows error. Please try to resolve this issue soon, we need this solution urgently. We have already spent several days on different issues regarding Unity.
If you need to talk regarding this matter, Please contact on +919780660619, and the conatct person name is Manav.
Thanks in Advance
Rosy

Rosy,
We cannot call you from this forum. If you truly need a call, you can open a TAC case. The info I can tell you is that you need to fix this in your dns. A simple google search of "no SRV record Windows 2000 server" comes up with numerous resources that can help you fix this. Here is just one example.
http://support.microsoft.com/kb/241505
and
http://www.petri.co.il/active_directory_srv_records.htm
I would also advise you, if you are doing a new install with Unity 7 and that version of Exchange, that you use Windows 2003 as the OS. Even MS doesn't support Windows 2000 Server any more so if you end up having an OS issue on your Unity server, we will not be able to get MS to help you. From a support perspective, I would advise you to use Windows 2003 Server in this implimentation.
Thanks!
Tray

Gateway.GWIA sending messages

Hello,
We are having an issue where our mail server is sending out a lot of message, but I cannot figure out who or how it is sending. Looking at the POA logs I see: Sender of message (message ID) Gateway.GWIA.Domain.
I checked the SMTP relay settings and made sure Prevent message relaying is checked. And we do not have any exceptions.
Is there a way to check the message ID to see more info on who is sending to see if someone internal account has been compromised?
Thank you,

Originally Posted by damloste
Ok, Think I found the account and are no longer getting the sender message as GWIA.Gateway is the POA logs. In GWIA logs I am still seeing a lot of external email trying to be sent. Would there be a queue that I just need to wait out?
Thank you
When spamming you will find files here:
[path to GWIA's Domain]/wpgate/gwia/defer <-- outbound message which could not be sent immediately
[path to GWIA's Domain]/wpgate/gwia/send <-- outbound message which are being sent... now
Take a look at some of the recent files ( they are text files ) and you can see the messages the GWIA is trying to send.
It is unusual for the GWIA to be sending out messages by itself without an actual sender being specified.
In /var/log/novell/groupwise/[gwia_name] you will find the logs. I use the followign script to identify the top senders, in all instances it has identified the compromised account. Its also useful to just to run it occasionally to know what "normal" looks like. Verbose logging needs to be enable on the GWIA. Here is the redacted output:
Code:
[/var/log/novell/groupwise/gwia] # ./topsenders.sh
Top senders from m.edu
92 [email protected]
145 [email protected]
314 [email protected]
730 [email protected]
747 [email protected]
Top senders from anywhere
271 [email protected]
314 [email protected]
328 [email protected]
440 [email protected]
730 [email protected]
747 [email protected]
and the script
Code:
#!/bin/bash
echo Top senders from m.edu
cat `date +%m%d`gwia.0?? | grep Sender | grep -i m.edu | cut -d: -f 4 | sort | uniq -c | sort -n | tail -20
echo .
echo Top senders from anywhere
cat `date +%m%d`gwia.0?? | grep Sender | cut -d: -f 4 | sort | uniq -c | sort -n | tail -20
Replace m.edu with your domain name, or a substring of it.
If you find [email protected] sending 10,000 messages when she is on vacation... then you have a clue. By default the scriptlet looks at today's logs.

VG224 - some ports show "unregistered" after changing domain name

hi,
recently i have changed the domain name of a VG224, before the change, all ports shows "registered" from the CUCM.
after I changed the domain name from VG224 and CUCM, the VG224 can be registered to CUCM, and some ports can register too...only serveral ports showing "unregistered" in the CUCM. But from the VG224, everything is normal. and call/ fax can be made successfully from those "unregistered" ports.
anyone has idea what's going on?
thanks.

Melany,
Sorry for the delay,
I have had a look at bugs etc.
The only one I can find that may be related is:-
Change MGCP gateway Domain Name only reset endpoints not whole gateway
CSCsg39923
Description
Symptom:
Incoming and outgoing calls over an MGCP gateway fails randomly after changing gateway's domain name in CallManager. Sometimes caller receives dead air.
Conditions:
The administrator changes the gateway domain name in CCM without stopping Gateway's mgcp service.
Workaround:
Reset or reload the gateway.
Further Problem Description:
The proper way of changing a gateway's domain name is:
- Stop Gateway's mgcp service (gateway command: no mgcp)
- Chnage the domain name in the gateway and in CCM.
- Start Gateway's mgcp service (gateway command: mgcp)
Customer Visible
Save Bug
">
Save Bug
Open Support Case
">
Open Support Case
View Bug in CDETS
">View Bug in CDETS
Was the description about this Bug Helpful?
(0)
Details
Last Modified:
Nov 2,2012
Status:
Fixed
Severity:
3 Moderate
Product:
Cisco Unified Communications Manager (CallManager)
Support Cases:
2
Known Affected Releases:
(1)
4.2
Known Fixed Releases:
(4)
6.0(0.9901.37)
6.0(1.1000.37)
7.0(0.99999.65)
1.0(0.98000.42)
Download software for Cisco Unified Communications Manager (CallManager)
Support Cases:
(2)
Support case links are not customer visible
Related Bugs
Bug(s)
Community Discussion on CSCsg39923 - Cisco Support Community
Regards,
Alex.
Please rate useful posts.

Unity Interoperability Gateway - Interop Domain FQDN

Similar Messages

Maybe you are looking for