UCA Clients not working in tw mode - dns issues ?

[711220]

Trying to get an mobile uca sip sp to work for incoming calls in mbg mode !
UCA mobile/desktops works in lan A and lan B (using vpn)
-----
Do i need to change the UCA server fqdn from y.y.local to x.x.com to get UCA mobile client to work for incoming calls ?
Can see the red icon on the app when trying to call.
I have to reinstall the clients if i need to change it ?
-----
My topology/network settings,
3300 ICP and Mas exists in Lan A icp gw = mas server
Mas Network Edge coexisting (MBG V7.1.35.0/UCA V5.1.34.0)
----
in mas
- two domains in mas y.local and x.com
- no corp dns server
- added local networks to lan b via fw vpn site to site

dns settings
- uca server x1.y.local
- 3300 icp x2.y.local

split-dns
- split dns wan clients x.x.com to mbg wan ip
- split dns lan clients to mas lan ip x.x.com at corporate dns-server

[dilkie]

you shouldn't need to change anything except configure uca sip client in tw mode. your dns name should already be split dns, internally pointing to the uca server, externally pointing to the mbg.

[Navarre]

Trying to get an mobile uca sip sp to work for incoming calls in mbg mode !

And are they not working? What symptoms are you seeing?

[711220]

Trying to get an mobile uca sip sp to work for incoming calls in mbg mode !

And are they not working? What symptoms are you seeing?

Symptoms UCA-client Iphone 5
- I can see a call trying to connect, but no answer/decline pops up l
- Presence/status/outgoing calls works.
- If changing status sending calls to prg members softphone/mobile the cellphone starts ringing.


   

[LoopyLou]

can you resolve to the exteranal FQDN. Can you ping the
FQDN of the MBG?

[bluewhite4]

Take a look at the security settings of the MBG. We had a similar issue for a customer when a tech had allowed ssh from all subnets.

[cdromtom]

can you resolve to the exteranal FQDN. Can you ping the
FQDN of the MBG?

Yes i can Resolve the external fqdn. Fr.o.m. all networks using split-dns.

[cdromtom]

Take a look at the security settings of the MBG. We had a similar issue for a customer when a tech had allowed ssh from all subnets.

Okey, checking tomorrow. I think ssh is allowed fr.o.m. all subnets. 

[cdromtom]

Take a look at the security settings of the MBG. We had a similar issue for a customer when a tech had allowed ssh from all subnets.

Okey, checking tomorrow. I think ssh is allowed fr.o.m. all subnets. 

Deactivated ssh in mas server no change.

Triyng inc call to two statuses with different prg.
If using à status with sending calls to cellphone and sphone.
The cellphone ehdu rings not sip sphone.

In the eng gl for uca i read this.

UC Advanced Engineering Guidelines Server/Gateway Mode (when co-resident with MAS) In a server/gateway mode, as in Figure 3, the UCA server (as part of MAS) sits directly on both the Company LAN and the WAN. Even though UCA is directly accessible on the network to teleworker users in this configuration, the MBG application must be configured to support RTP traffic used by remote soft phones.

Figure 6 shows all the different ports UCA requires when all the other servers shown in the figure are in the same LAN network and the UCA Clients are connecting via the MBG. Use this as a reference to determine what ports to open in the firewall when there is one between the UCA server and any of the other servers and clients shown

Does it mean to add a portforward in msl with source udp 30250 and above to ip pbx with dest ports udp 1024 and above using snat on or off ?
It should call the sip sphone without this using port 5060 in My head.
Time to submit à ticket and send a log using wireshark ?
Im lost.

[s97ai]

I have a particular issue setting up UCA, we have MAS server MBG ver 8 and UCA server is seperate version 6 and 3300 MCD ver 11 release 5.
Our reseller does not have enough knowledge to get this set up, Iwant to set up mibile sipsoft phone and soft phone for the laptops, can you please tell me how to configure it on MAS and MCD, also I can access the Mobile app on my phone intermnally not externally, I asked the reseller they told me to set up uca@domain.com to pub ip of the MAS, is that correct.

UCA and MAS they are both on the same subnet internally, any help would be great.

Thanks

[johnp]

we have MAS server MBG ver 8 and UCA server is seperate version 6

Are you saying you have a MAS with MBG and have UCA running on a separate server?
If so, why? I don't think the MBG on MAS has the remote proxy blade. Ideally you should have a MBG in the DMZ with the proxy blade directing external connections. You would cluster it to the MAS so that the teleworker licenses are shared. You would then setup split dns for your UCA so that internally it resolves to the UCA server and externally to the MBG who would then proxy it correctly.

[s97ai]

Yeah that was installed before I joined the company but was not configured, I can import the UCA database to MAS if needs be, I want to know how/what do I need to configure (settings) on the 3300 and MAS in order for the sip and mobile soft phone to work, and I dont need to buy tw licences for sip phone to work without connecting to VPN right??

[711220]

Case solved. The setup was ok. But not the customers network. Thanks wireshark.