[cisco-voip] Question about enabling DNS on CUCM cluster(s)

2014-08-11 Thread Ed Leatherman
Good morning! Was hoping someone with a little more experience on the jabber/collab edge side could point me in the right direction here. I have 2 CUCM clusters that I am researching configuring jabber and/or collab edge for. Up till now I've never had a need for DNS resolution on the either.

Re: [cisco-voip] Question about enabling DNS on CUCM cluster(s)

2014-08-11 Thread Matthew Loraditch
https://supportforums.cisco.com/document/68701/communications-manager-security-default-and-itl-operation-and-troubleshooting#Changing_Host_Names_or_Domain_Names Take a look there, pretty much covers every scenario, I just did a multi-node with ITL only for the same reasons as you and it worked

Re: [cisco-voip] Question about enabling DNS on CUCM cluster(s)

2014-08-11 Thread Ed Leatherman
Thanks Matt, So it sounds like purely from database replication perspective enabling DNS by itself isn't an issue. If I do need to change the domain or hostnames on the cluster then it becomes a certificate operation of some variety depending on the security state of the particular cluster - in

Re: [cisco-voip] Question about enabling DNS on CUCM cluster(s)

2014-08-11 Thread Ryan Ratliff (rratliff)
Kind of makes me want to enable mixed-mode on the 2nd cluster. If you've got the eTokens handy then it will certainly make you life a lot easier when it comes to SBD and endpoints. -Ryan On Aug 11, 2014, at 8:41 AM, Ed Leatherman ealeather...@gmail.commailto:ealeather...@gmail.com wrote:

Re: [cisco-voip] TVS Signed Certificates

2014-08-11 Thread Ryan Ratliff (rratliff)
Yes, but not by nature of the TVS cert itself being CA-signed. Since the TVS cert will get into the ITL who signs it doesn't matter. Why it may help is because TVS will authorize any cert in the local server's trust store. If the other certs (the ones the endpoint presents to TVS) are