Cisco Cisco Expressway
Configuration overview
This section summarizes the steps involved in configuring your Unified Communications system for mobile
and remote access. It assumes that you already have set up:
and remote access. It assumes that you already have set up:
n
(this document contains information about the different networking options for deploying
the Expressway-E in the DMZ)
n
Unified CM and IM and Presence Service have been configured as specified in Configuration and
Administration of IM and Presence Service on Cisco Unified Communications Manager (for your version),
at
Administration of IM and Presence Service on Cisco Unified Communications Manager (for your version),
at
Prerequisites
Ensure that you are running the following software versions:
n
Expressway X8.1.1 or later
n
Unified CM 9.1(2)SU1 or later and IM and Presence Service 9.1(1) or later
Supported clients when using Mobile and Remote Access
Expressway X8.1.1 and later:
n
Cisco Jabber for Windows 9.7 or later
n
Cisco Jabber for iPhone and iPad 9.6.1 or later
n
Cisco Jabber for Android 9.6 or later
n
Cisco Jabber for Mac 9.6 or later
n
Cisco TelePresence endpoints/codecs running TC7.0.1 or later firmware
Expressway X8.6 and later:
Mobile and Remote Access is being expanded to include the following new endpoints.
The DX Series endpoints are officially supported via MRA if they are running version 10.2.4(99) or later. The
Cisco IP Phone 78/8800 Series endpoints are not yet officially supported via MRA, but they must be running
version 10.3.1 or later if you want to preview them with Mobile and Remote Access.
Cisco IP Phone 78/8800 Series endpoints are not yet officially supported via MRA, but they must be running
version 10.3.1 or later if you want to preview them with Mobile and Remote Access.
n
n
n
n
n
When deploying DX Series or IP Phone 78/8800 Series endpoints to register with Cisco Unified
Communications Manager via Mobile and Remote Access, you need to be aware of the following:
Communications Manager via Mobile and Remote Access, you need to be aware of the following:
n
Phone security profile: If the phone security profile for any of these endpoints has TFTP Encrypted
Config checked, you will not be able to use the endpoint via Mobile and Remote Access. This is because
the MRA solution does not support devices interacting with CAPF (Certificate Authority Proxy Function).
Config checked, you will not be able to use the endpoint via Mobile and Remote Access. This is because
the MRA solution does not support devices interacting with CAPF (Certificate Authority Proxy Function).
n
Trust list: You cannot modify the root CA trust list on these endpoints. Make sure that the Expressway-
E's server certificate is signed by one of the CAs that the endpoints trust, and that the CA is trusted by the
E's server certificate is signed by one of the CAs that the endpoints trust, and that the CA is trusted by the
Unified Communications Mobile and Remote Access via Cisco Expressway Deployment Guide (X8.6)
Page 11 of 55
Configuration overview