Cisco Cisco TelePresence Video Communication Server Expressway
Appendix 1 – Troubleshooting
SIP TLS negotiation failures on neighbor and traversal zones
If TLS verify mode is enabled, the neighbor system's FQDN or IP address, as specified in the Peer
address field of the zone’s configuration, is used to verify against the certificate holder’s name contained
within the X.509 certificate presented by that system. (The name has to be contained in either the Subject
Common Name or the Subject Alternative Name attributes of the certificate.) The certificate itself must also
be valid and signed by a trusted certificate authority.
address field of the zone’s configuration, is used to verify against the certificate holder’s name contained
within the X.509 certificate presented by that system. (The name has to be contained in either the Subject
Common Name or the Subject Alternative Name attributes of the certificate.) The certificate itself must also
be valid and signed by a trusted certificate authority.
Therefore when certificates have been generated with peer or cluster FQDNs, ensure that the zone's Peer
address fields are configured with FQDNs rather than IP addresses.
address fields are configured with FQDNs rather than IP addresses.
Certificate Creation and Use With Cisco VCS Deployment Guide (X7.2)
Page 12 of 36
Appendix 1 – Troubleshooting