Solved: VCS Expressway TLS issue

huangzg · ‎07-11-2014

I installed expressway for collaboration edge, and it works fine for Jabber for Windows.

But when I tried Jabber for Mac (9.6), the phone services and voicemail are connected, but not the IM service. Same thing happens for Jabber for iPhone and iPad.

When I checked the event log, it says

traffic_server[26816]: Event="Sending HTTP error response" Status="407" Reason="Proxy Authentication Required"

tvcs: Event="Registration Rejected" Reason="Unknown domain"

tvcs: Event="Inbound TLS Negotiation Error" Detail="No SSL error available, probably remote disconnect"

Any idea?

By the way, I am using self-signed certificates following the VCS certificate deployment guide and MRA deployment guide.

Ayodeji Okanlawon · ‎09-18-2014

Did your IM work when Jabber is internal? Have you tried a new jabber version 9.7 or 10.5?

Please rate all useful posts

View solution in original post

Nikhil Jayan Kandampully · ‎07-17-2014

Call failures due to "407 proxy authentication required" or "500 Internal Server Error" errors
Call failures can occur if the traversal zones on VCS are configured with an Authentication policy of Check credentials. Ensure that the Authentication policy on the traversal zones used for mobile and remote access is set to Do not check credentials.

Please refer below document page no 32.

http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-1/Mobile-Remote-Access-via-VCS-Deployment-Guide-X8-1-1.pdf

Thanks & Regards,

Nikhil Jayan

huangzg · ‎07-17-2014

The traversal zone is configured Do not check credentials on both sides.

Nikhil Jayan Kandampully · ‎07-17-2014

Hope the below ports are opened from VCSC to IM&P

TCP 7400

Thanks & Regards,

Nikhil Jayan

huangzg · ‎07-17-2014

VCSC is in internal network. And the wierd thing is Windows client works with no issues.

Roberto Zamudio Esparza · ‎09-17-2014

I have this problem too, could you share to me the way you fix this problem?

Thank you!

Ayodeji Okanlawon · ‎09-18-2014

Did your IM work when Jabber is internal? Have you tried a new jabber version 9.7 or 10.5?

Please rate all useful posts

Roberto Zamudio Esparza · ‎09-18-2014

Hi all!

Yes of course! I 've been trying with 10.5 but seems to be a certificate problem, I am not pretty sure yet. Thanks!

Ayodeji Okanlawon · ‎09-19-2014

Jabber doesn't exchange certificates with IM and presence server for MRA. Certificate exchange occurs between expressway-c and expressway-e to create a secure https and sip channel for the http and sip signalling messages. If all your other services are working, then I doubt your issue is certificate related

Please rate all useful posts

huangzg · ‎09-18-2014

Upgrading to new version Jabber clients fixed the issue.