Answered by:
External Calling is limited due to server connectivity problems

Question
-
We recently installed an Edge server in our environment and are attempting to work through the issues associated with that process, but about a day after we installed the role this error occurred on all Communicator Clients. No users are enabled for Voice access, and there are no VOIP settings configured as part of this. Does anyone have any ideas where to start with this? I have seen a few posts regarding this but none appeared resolved or related to my particular issue.
If this is not the correct forum, I apologize.
Monday, November 12, 2007 2:29 PM
Answers
-
Actually, we figured this out. We have two internal SIP domains, only one of which was configured on the original Cert. Created a new cert with sip.domain.com for both sip domains and this issue was resolved.Friday, November 16, 2007 6:40 PM
All replies
-
You must configure the user for remote access
Deli
Friday, November 16, 2007 4:02 PM -
Actually, we figured this out. We have two internal SIP domains, only one of which was configured on the original Cert. Created a new cert with sip.domain.com for both sip domains and this issue was resolved.Friday, November 16, 2007 6:40 PM
-
sorry for asking again but i'm running through this problem now so i decided to ask once again.
you mean that you created a certificates with a supported sip domain names as a certificate alternate subject name? and what exactly this alternate name should be like? i mean if i specified mydomain.com in supported sip domains master page should the cert alternate name be sip.mydomain.com or just mydomain.com?
thanks in advance!
Monday, December 17, 2007 2:10 PM -
It depends on your OCS configuration. If you are using both SIP domain names in your OCS Configuration you will need to have sip.<domainname> as SANs on your Cert that the OCS front end server is using.
In our case, sip.company.com and sip.a.company.com were both supported domains, but our cert looked like this:
SN=ocsserver.company.com
SAN=sip.company.com
And now looks like this:
SN=ocsserver.company.com
SAN=Sip.company.com
SAN=sip.a.company.com
Thursday, December 20, 2007 3:18 PM -
Hi,
I am sure that my OCS config is correct but I still recieve external calling error...
OCS is deployed internally in intra.company.com but we only support "company.com" SIP domain.
The cert looks like this:
SN=ocspool01.intra.company.com
SAN=ocspool01.intra.company.com
SAN=ocspool01.company.com
SAN=sip.company.com
Do I require another SAN of "sip.intra.company.com"?
Monday, January 7, 2008 5:16 PM -
I don't think that it could hurt, as this was the resolution for my issue. If intra.company.com is listed on the general tab of your Forest configuration, then I would add a SAN to your cert of sip.intra.company.com.
Monday, January 21, 2008 1:00 PM -
I'm experiencing the same issue. I tried recreating the certificate with Multiple SANs and cannot find the option in the OCS certificate creation process to add additional domains. I search other sources and couldn't figure out how to create this request on our internal Microsoft certificate server. Is there a document which describes how to create a certificate with multiple Subject Alternative Names for OCS 2007?Tuesday, February 5, 2008 4:31 PM
-
We followed the steps in this article: http://support.microsoft.com/kb/931351 to allow SAN names to be generated by our Internal CA.
Once you enable this, you should be able to use SAN names on any Cert you issue. You can also use the Cert generation utility provided with OCS to add multiple san names to a certificate request.
Thursday, February 7, 2008 3:26 PM -
Hi Tabitha,How do you do? My name is Derry and I have been looking out for a friend I knew way back in primary school. Her name is Tabitha Oye Opare. She attended Soul Clinic before (if i'm not mistaking), then came to Ford Preparatory School in Teshie where she used to reside as well. She had a younger brother. Tabitha left Ghana for the UK while still in class 3. I will like to know if you have a similar background.Kindly send me an email (derry1406 (at) gmail.com ) if you are the person.Pls revert.regards,Derrydean DadzieThursday, February 21, 2008 5:37 PM