Intercluster trunk(non-gatekeeper) through Cisco ASA and Checkpoint
We are trying to set up intercluster trunk between our two sites, one site is using Cisco ASA and other site is using Checkpoint as a firewall.
On both the firewalls we have allowed TCP/1720. We are not able to get trunk registered through this setup. On Cisco ASA we have configured inspect h323 ras and inspect h323 h225. No NAT is being used
When we try to make a call from the call manager which is behind Cisco ASA, we see SYN timeout after ASA trying to build TCP connection on port 1720 after about 30 seconds. ICMP works fine as both call manager can ping each other.
Has anyone done ICT set up through firewalls and any other configuration that we have missed on firewall?
Are you getting this error “Installer User Interface Mode Not Supported. The installer cannot run in this UI mode. To specify the interface mode, use the -i command-line option, followed by the UI mode identifier. The value UI mode identifiers...
The below trick might come handy when you have to add a new node to a cluster but you don't have or is unsure of the security password for the publisher. This procedure has been around for ages.
1) Login into the CLI of the Publisher.