Per Cisco's X15.5 guidance, SSH tunnels that stay inactive while the UC traversal zone is active indicate the client certificate lacks the Client Authentication EKU needed for port 2222.

Checked 2026-10-01

Vendor
Cisco
Product
Cisco Expressway
Subsystem
ssh-tunnels
Deployment
on-premises
Region
not restricted
Release range
X15.5
Checked
2026-10-01

Sources

Cite this note

APA

WarmTransfer. (2026, October 1). Troubleshooting Expressway Mobile and Remote Access: source note expressway-mra-troubleshooting-eku-ssh-tunnel-sign. WarmTransfer. https://warmtransfer.net/knowledge/claims/expressway-mra-troubleshooting-eku-ssh-tunnel-sign

BibTeX

@misc{warmtransfer-claim-expressway-mra-troubleshooting-eku-ssh-tunnel-sign,
  title  = {Troubleshooting Expressway Mobile and Remote Access: source note expressway-mra-troubleshooting-eku-ssh-tunnel-sign},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/expressway-mra-troubleshooting-eku-ssh-tunnel-sign},
  note   = {Source note expressway-mra-troubleshooting-eku-ssh-tunnel-sign, checked 2026-10-01}
}

Read in context