DMA , CMA and VBP-ST integration - Gatekeeper

[Anonymous]

Hi,

We are deploying the UC infrastructure and want to use DMA as GK.

need your help in verifying the configuration

1. VBP-ST lan side gatekeeper : DMA iP is used a GK

2. in CMA local site :  DMA IP is used as GK  in provisioning settings

3. in RMX : DMA IP is used as GK

4. in CMA internet/VPN: site what should be used in provisioning setting for cmad. DMA internal IP, same server(CMA ) or vbp ST public interface ?

your help will be much appreciated.

Thanks,

Vikas

[Anonymous]

1. VBP-ST lan side gatekeeper-CMA lan side ip

2. in CMA local site :  DMA IP is used as GK  in provisioning settings

3. in RMX : DMA IP is used as GK

4. in CMA internet/VPN: wan side ip of the vbp st(public ip)

5 use of DMA-for rmx pool and for load balancing

Regards

Yashpal

[simons3]

Vikas,

You are correct in every point except #4.

With the VBP-ST box, I assume you are using the Access Proxy feature. This will make any registered user look and act like an endpoint on your internal network. The DMA does not support this function of the VBP-ST. Therefore, you have to create a site which includes the LAN side of the VBP-ST and associate this site to the CMA managed terroritory. You would provision the CMA as the gatekeeper for this site. I would then make sure the CMA is neighbored to the DMA.

All of this is needed if you integrate the DMA with the CMA. If you don't integrate, then you can provision the DMA as the gatekeeper in previous mentioned site. Gatekeepers determine the area of control by the use of territories. Territories are defined by the sites. If you did not create a special site for the VBP-ST and assigned it to the CMA, then the DMA would see the registered endpoints coming in and would reject them as the primary gatekeeper would be the CMA for the territory. If you moved everything over to the DMA, the Access Proxy feature would not work correctly as the changes to internal Apache firewall rules would not get updated correctly like they should.

Good luck,

S.

[Anonymous]

Thanks simons,

please  confirm if by integration of cma with dma  you mean neighboring cma and dma gatekeeper. In integration menu of dma I get resource manager, exchange, ads and juniper only as i am on latest version of dma software. 

regards

vikas

[Anonymous]

What in case of two DMA's which are server cluster mode. I want to use DMA as gatekeepr.How to reach this ?

[simons3 · Accepted solution]

Resource Manager is the next gen of CMA. However, this will work for both CMA and RM integration.

S.

[simons3]

@Shailesh

DMA Super cluster has no impact. The changes are made per site in the Resource Manager/CMA. Here is where you would configure the appropiate DMA to be the gatekeeper.

S.

[Anonymous]

Thanks Simons.. your help is very much appreciated.!