300-820 · Question #124
An engineer is deploying Mobile and Remote Access to allow external Cisco Jabber users to sign into a Cisco UCM cluster via Cisco Expressways. The users will sign-in in the format…
The correct answer is C. An HTTP allow list entry must be made on the Expressway-C for phonebook cisco.com. In MRA deployments, external Jabber clients tunnel HTTP requests through Expressway-E to Expressway-C, which then proxies them to internal resources. The HTTP allow list on the Expressway-C controls which internal hostnames are reachable via this HTTP proxy tunnel. Because the…
Question
An engineer is deploying Mobile and Remote Access to allow external Cisco Jabber users to sign into a Cisco UCM cluster via Cisco Expressways. The users will sign-in in the format [email protected]. Contact photos for Jabber are hosted on a webserver with the FQDN of phonebook cisco.com. Which configuration must be completed to allow external Jabber users to see contact photos?
Options
- AAn HTTP allow list entry must be made on the Expressway-E for phonebook cisco.com.
- BA SIP allow list entry must be made on the Expressway-E for .*@cisco.com.
- CAn HTTP allow list entry must be made on the Expressway-C for phonebook cisco.com.
- DA SIP allow list entry must be made on the Expressway-C for .*@cisco.com.
How the community answered
(32 responses)- A6% (2)
- B3% (1)
- C78% (25)
- D13% (4)
Explanation
In MRA deployments, external Jabber clients tunnel HTTP requests through Expressway-E to Expressway-C, which then proxies them to internal resources. The HTTP allow list on the Expressway-C controls which internal hostnames are reachable via this HTTP proxy tunnel. Because the photo server (phonebook.cisco.com) is an internal resource, it must be explicitly allowed on the Expressway-C. The Expressway-E does not need an HTTP allow list entry for internal resources; it relays the proxied request to Expressway-C.
Topics
Community Discussion
No community discussion yet for this question.