nerdexam
Cisco

300-820 · Question #198

An engineer must review a new traversal zone that is not establishing a successful connection between Expressway-C and Expressway-E. When the event log page on the Expressway-E is reviewed, an…

The correct answer is B. Ensure that the authentication credentials configured on both zones to match. D. Ensure that the authentication credentials exist on the Expressway-E local database. A traversal zone authentication failure with 'user not found' on Expressway-E means the zone credentials are either mismatched or absent from the Expressway-E local database.

Cisco Expressway for Collaboration

Question

An engineer must review a new traversal zone that is not establishing a successful connection between Expressway-C and Expressway-E. When the event log page on the Expressway-E is reviewed, an authentication failure is found with the detail "user not found". Which two actions must the engineer take to resolve the issue? (Choose two.)

Options

  • ADisable TLS verification on the Expressway-E.
  • BEnsure that the authentication credentials configured on both zones to match.
  • CEnsure that LDAP is properly configured and synchronized on the Expressway-E.
  • DEnsure that the authentication credentials exist on the Expressway-E local database.
  • EEnsure that the authentication credentials exist on the Expressway-C local database.

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    75% (18)
  • C
    8% (2)
  • E
    13% (3)

Why each option

A traversal zone authentication failure with 'user not found' on Expressway-E means the zone credentials are either mismatched or absent from the Expressway-E local database.

ADisable TLS verification on the Expressway-E.

Disabling TLS verification affects certificate validation, not credential-based authentication, so it would not resolve a 'user not found' error.

BEnsure that the authentication credentials configured on both zones to match.Correct

Traversal zone authentication requires that the username and password configured on the Expressway-C outbound zone exactly match those configured on the Expressway-E traversal zone; any mismatch causes authentication failure.

CEnsure that LDAP is properly configured and synchronized on the Expressway-E.

LDAP integration is used for directory lookups and end-user authentication, not for inter-zone traversal authentication, which relies on local database credentials.

DEnsure that the authentication credentials exist on the Expressway-E local database.Correct

The 'user not found' error specifically indicates the Expressway-E cannot locate the authenticating user in its own local credential store, so the credentials must be added to the Expressway-E local database to resolve this.

EEnsure that the authentication credentials exist on the Expressway-C local database.

The error occurs on Expressway-E and indicates a missing user on that node; credentials on Expressway-C are the outbound credentials being sent, not the ones that need to be present for lookup.

Concept tested: Expressway traversal zone authentication credential configuration

Source: https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/admin_guide/X14-3/exwy_b_cisco-expressway-administrator-guide/exwy_m_traversal-zone-configuration.html

Topics

#Expressway#Traversal Zone#Authentication#Troubleshooting

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-820 Practice