Expressways MRA - One side says traversal is up, other says it's down

kylebrogers · ‎05-20-2016

I have a new deployment of a pair of Expressways for MRA. Running the latest version on both.

The EXP-E is in a DMZ and is deployed single-NIC (don't have 2 DMZ subnets).

We have all of the DNS and certificates taken care of

The EXP-C says the traversal zone is "Active", while the EXP-E says it is "Failed".

Any idea why one side thinks it's up while the other doesn't?

Chris Deren · ‎05-22-2016

Make sure that whatever you are pointing to (fqdn, hostname, ip address) is what is defined on the other side's certificate, i.e. if you are pointing to IP, but the cert is issued to FQDN change it to point to FQDN.

If that is not it, you'll need to look in the logs and review firewall rules/logs.

kylebrogers · ‎05-26-2016

It turned out that I hadn't entered the NAT info into the E. Once I did that, everything came up.