nerdexam
Cisco

300-820 · Question #185

Refer to the exhibit. An engineer is configuring Cisco Expressway-C to discover Cisco UCM by using an IP address and a TCP connection. After the configuration is saved, errors occur. Which two…

The correct answer is B. Configure an application user with Administrative XML privileges in Cisco UCM. D. Set TLS verify mode to Off. When configuring Expressway-C to discover Cisco UCM via IP address and TCP, TLS verification must be disabled and the correct application user privilege (AXL) must be used, otherwise errors occur.

Initial Expressway Configurations

Question

Refer to the exhibit. An engineer is configuring Cisco Expressway-C to discover Cisco UCM by using an IP address and a TCP connection. After the configuration is saved, errors occur. Which two changes must be made to resolve the errors? (Choose two.)

Exhibit

300-820 question #185 exhibit

Options

  • AConfigure an application user with Cisco Computer Telephony Integration-enabled privileges in
  • BConfigure an application user with Administrative XML privileges in Cisco UCM.
  • CUpload a valid Cisco Tomcat certificate from the Cisco UCM to Expressway-C.
  • DSet TLS verify mode to Off.
  • EConfigure an HTTP allow list that contains the Cisco UCM FQDN.

How the community answered

(56 responses)
  • A
    5% (3)
  • B
    80% (45)
  • C
    4% (2)
  • E
    11% (6)

Why each option

When configuring Expressway-C to discover Cisco UCM via IP address and TCP, TLS verification must be disabled and the correct application user privilege (AXL) must be used, otherwise errors occur.

AConfigure an application user with Cisco Computer Telephony Integration-enabled privileges in

CTI (Computer Telephony Integration) privileges are required for JTAPI/TSP-based integrations, not for AXL-based UCM discovery used by Expressway-C.

BConfigure an application user with Administrative XML privileges in Cisco UCM.Correct

Expressway-C uses the Cisco AXL (Administrative XML) API to discover and sync with Cisco UCM, so the application user configured in UCM must have the Standard AXL API Access role; without this privilege, the API calls fail with authentication or authorization errors.

CUpload a valid Cisco Tomcat certificate from the Cisco UCM to Expressway-C.

Uploading the Tomcat certificate would be required for TLS-secured connections, but since TCP is being used as stated in the question, certificate upload does not resolve the described errors.

DSet TLS verify mode to Off.Correct

When connecting via IP address over TCP instead of FQDN over TLS, TLS verify mode must be set to Off on Expressway-C because there is no valid certificate hostname to verify against an IP address, and leaving TLS verify enabled causes the connection to fail.

EConfigure an HTTP allow list that contains the Cisco UCM FQDN.

An HTTP allow list on Expressway-C is used to permit Jabber clients to access specific web servers via MRA proxy; it is not relevant to Expressway-C-to-UCM AXL discovery.

Concept tested: Expressway-C UCM AXL discovery via TCP with TLS verify off

Source: https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X14-3/exwy_b_mra-deployment-guide/exwy_m_configure-expressway-c.html

Topics

#Expressway-C Configuration#UCM Integration#Call Control Discovery#TLS Troubleshooting

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-820 Practice