Cisco TelePresence Service manual

Cisco TelePresence

Video Communication

Server

Administrator Guide

Software version: X8.1.1

D14049.16

April 2014

Contents

Introduction 11

About the Cisco TelePresence Video Communication Server (VCS) 12

VCS base applications 13

Standard features 13

Optional features 14

Installation and initial configuration 16

About this guide 17

Related documentation 17

Training 17

Glossary 17

Accessibility notice 17

Using the web interface 18

Using the command line interface (CLI) 19

Web page features and layout 20

What’s new in this version? 22

X8.1.1 22

X8.1 22

Network and system settings 28

Network settings 29

Configuring IP settings 29

Configuring Ethernet settings 31

Configuring DNS settings 32

Configuring Quality of Service settings 33

Intrusion protection 34

Configuring firewall rules 34

Current active firewall rules 36

Configuring automated intrusion protection 36

Network services 40

Configuring system name and access settings 40

Configuring SNMP settings 43

Configuring time settings 45

Configuring the Login page 47

Configuring external manager settings 48

Configuring TMS Provisioning Extension services 49

Firewall traversal 52

About firewall traversal 53

The Expressway solution 53

How does it work? 53

Endpoint traversal technology requirements 54

H.323 firewall traversal protocols 54

SIP firewall traversal protocols 54

Media demultiplexing 54

Firewall traversal configuration overview 55

Configuring a traversal client and server 57

Configuring ports for firewall traversal 58

Configuring the firewall 58

Configuring traversal server ports 58

Cisco VCS Administrator Guide (X8.1.1) Page 2 of 507

Configuring ports for connections from traversal clients 59

Firewall traversal and authentication 61

Authentication and NTP 61

Configuring Expressway and traversal endpoint communications 62

About ICE and TURN services 63

About ICE 63

About TURN 63

Configuring TURN services 64

Unified Communications 66

Mobile and remote access 67

Jabber client connectivity without VPN 68

Configuring mobile and remote access on VCS 69

Setting up the VCS Control 69

Setting up the VCS Expressway 72

Setting up VCS security certificates 72

Setting up secure VCS traversal zones 74

Checking the status of Unified Communications services 75

Additional configuration 75

Protocols 77

About H.323 78

Using the VCS as an H.323 gatekeeper 78

H.323 endpoint registration 78

Configuring H.323 79

About SIP 81

VCS as a SIP registrar 81

VCS as a SIP proxy server 82

Proxying registration requests 83

VCS as a SIP Presence Server 83

Configuring SIP 84

SIP functionality and SIP-specific transport modes and ports 84

Certificate revocation checking modes 84

Registration controls 85

Authentication controls 87

Configuring domains 88

Configuring the supported services for Unified Communications (VCS Control only) 88

Configuring delegated credential checking (VCS Expressway only) 88

Configuring SIP and H.323 interworking 90

Registration control 92

About registrations 93

Finding a VCS with which to register 93

Registrations on a VCS Expressway 93

MCU, gateway and Content Server registration 94

Configuring registration restriction policy 94

Registering aliases 94

About Allow and Deny Lists 97

Configuring the registration Allow List 97

Configuring the registration Deny List 98

Configuring Registration Policy to use an external service 99

Device authentication 101

Cisco VCS Administrator Guide (X8.1.1) Page 3 of 507

About device authentication 102

Configuring VCS authentication policy 103

Controlling system behavior for authenticated and non-authenticated devices 104

Authentication policy configuration options 105

SIP authentication trust 108

Configuring delegated credential checking (SIP only) 109

Device provisioning and authentication policy 112

Presence and authentication policy 114

Hierarchical dial plans and authentication policy 115

Practical configuration of authentication policy 116

Configuring VCS authentication methods 116

Configuring authentication to use the local database 119

Using an H.350 directory service lookup via LDAP 120

Using Active Directory database (direct) 123

Configuring the connection to Active Directory Service (ADS) 124

Authenticating with external systems 129

Zones and neighbors 130

About your video communications network 131

Structuring your dial plan 132

Flat dial plan 132

Structured dial plan 132

Hierarchical dial plan 132

About zones 134

Configuring media encryption policy 135

Configuring the B2BUA for media encryption 136

Configuring ICE messaging support 137

About the Local Zone and subzones 138

The Default Zone 139

Configuring the Default Zone 139

Configuring Default Zone access rules 140

Configuring zones 141

Configuring neighbor zones 141

Configuring traversal client zones 144

Configuring traversal server zones 146

Configuring ENUM zones 149

Configuring DNS zones 150

Zone configuration: advanced settings 151

Zone configuration: pre-configured profile settings 154

TLS certificate verification of neighbor systems 155

Configuring a zone for incoming calls only 156

Clustering and peers 157

About clusters 158

License usage within a cluster 160

Managing clusters and peers 162

Setting up a cluster 162

Maintaining a cluster 163

Specifying peer-specific items in clustered systems 164

Sharing registrations across peers 166

Sharing bandwidth across peers 166

Cluster upgrades, backup and restore 167

Cisco VCS Administrator Guide (X8.1.1) Page 4 of 507

Clustering and Presence 167

Clustering and Cisco TMS 167

About the Cluster Subzone 168

Neighboring the local VCS to another VCS cluster 169

Troubleshooting cluster replication problems 170

Dial plan and call processing 171

Call routing process 172

Configuring hop counts 174

Configuring dial plan settings 175

About the fallback alias 175

About transforms and search rules 176

About pre-search transforms 176

Configuring pre-search transforms 177

Search and zone transform process 178

Configuring search rules 179

Example searches and transforms 182

Filter queries to a zone without transforming 182

Always query a zone with original alias (no transforms) 183

Query a zone for a transformed alias 183

Query a zone for original and transformed alias 184

Query a zone for two or more transformed aliases 185

Stripping @domain for dialing to H.323 numbers 186

Transforms for alphanumeric H.323 ID dial strings 188

Allowing calls to IP addresses only if they come from known zones 190

Configuring search rules to use an external service 191

About Call Policy 194

Configuring Call Policy 194

Configuring Call Policy rules using the web interface 195

Configuring Call Policy using a CPL script 195

Configuring Call Policy to use an external service 197

Supported address formats 199

Dialing by IP address 199

Dialing by H.323 ID or E.164 alias 199

Dialing by H.323 or SIP URI 199

Dialing by ENUM 200

Dialing by IP address 201

About URI dialing 203

URI dialing without DNS 203

URI dialing via DNS 204

URI resolution process using DNS 204

URI dialing via DNS for outgoing calls 205

URI dialing via DNS for incoming calls 207

URI dialing and firewall traversal 209

About ENUM dialing 211

ENUM dialing process 211

Enabling ENUM dialing 211

ENUM dialing for outgoing calls 212

Configuring zones and search rules for ENUM dialing 213

ENUM dialing for incoming calls 215

Configuring DNS servers for ENUM and URI dialing 217

Configuring call routing and signaling 218

Cisco VCS Administrator Guide (X8.1.1) Page 5 of 507

Identifying calls 219

Disconnecting calls 220

Bandwidth control 221

About bandwidth control 222

Configuring bandwidth controls 223

About downspeeding 223

About subzones 224

About the Traversal Subzone 224

Configuring the Default Subzone 225

Configuring subzones 225

Configuring subzone membership rules 226

Applying bandwidth limitations to subzones 228

Links and pipes 230

Configuring links 230

Default links 230

Configuring pipes 231

Applying pipes to links 232

Bandwidth control examples 233

Applications 235

Configuring Conference Factory 236

Presence 238

Presence Server 238

Presence User Agent (PUA) 239

Configuring Presence 240

B2BUA (back-to-back user agent) overview 243

Configuring B2BUA TURN servers 243

Microsoft Lync B2BUA 244

FindMe™ 251

End-user FindMe account configuration 251

How are devices specified? 251

FindMe process overview 252

Recommendations when deploying FindMe 252

Configuring FindMe 252

Cisco TMS provisioning 255

VCS Provisioning Server 256

Starter Pack provisioning 258

Configuring Starter Pack provisioning 258

User accounts 259

About user accounts 260

Account authentication 260

Account types 260

Configuring password security 262

Configuring administrator accounts 263

Viewing active administrator sessions 264

Configuring remote account authentication using LDAP 265

Checking the LDAP server connection status 267

Configuring administrator groups 268

Configuring FindMe groups 270

Cisco VCS Administrator Guide (X8.1.1) Page 6 of 507

Configuring FindMe accounts 271

Configuring a FindMe account's principal devices 273

Active FindMe sessions 273

Resetting forgotten passwords 274

Resetting your root or admin password via a serial connection 274

Resetting FindMe account passwords 274

Using the root account 275

Changing the root account password 275

Accessing the root account over SSH 275

Maintenance 276

Enabling maintenance mode 277

About upgrading software components 278

Upgrading VCS software 279

Upgrading using secure copy (SCP/PSCP) 280

Configuring logging 281

Event Log levels 281

Remote logging of events 281

Managing option keys 283

About security certificates 285

Managing the trusted CA certificate list 285

Managing the VCS's server certificate 286

Managing certificate revocation lists (CRLs) 288

Configuring certificate-based authentication 290

Testing client certificates 292

Advanced security 295

Configuring advanced account security mode 295

Configuring FIPS140-2 cryptographic mode 296

Configuring language settings 299

Changing the language 299

Installing language packs 299

Removing language packs 300

Backing up and restoring VCS data 301

When to create a backup 301

Content of the backup file 301

Limitations 301

Creating a system backup 301

Restoring a previous backup 302

Diagnostics tools 303

Configuring diagnostic logging 303

Creating a system snapshot 304

Configuring Network Log levels 304

Configuring Support Log levels 305

Incident reporting 306

Incident reporting caution: privacy-protected personal data 306

Enabling automatic incident reporting 306

Sending incident reports manually 307

Viewing incident reports 307

Incident report details 308

Checking the effect of a pattern 309

Locating an alias 310

Port usage 311

Cisco VCS Administrator Guide (X8.1.1) Page 7 of 507

Local inbound ports 311

Local outbound ports 311

Remote listening ports 312

Network utilities 313

Ping 313

Traceroute 313

Tracepath 314

DNS lookup 314

Restarting, rebooting and shutting down 317

Developer resources 319

Debugging and system administration tools 319

Experimental menu 319

Overview and status information 320

Status overview 321

System information 323

Ethernet status 324

IP status 325

Resource usage 326

Registration status 328

Call status 330

Disconnecting calls 331

B2BUA calls 332

Viewing B2BUA call media details 332

Search history 333

Search details 334

Local Zone status 335

Zone status 336

Bandwidth 337

Link status 337

Pipe status 337

Policy server status and resiliency 338

Viewing policy server status via the VCS 338

TURN relays status 339

Unified Communications status 340

Presence 341

Presence publishers 341

Presence presentities 341

Presence subscribers 342

Lync B2BUA 343

Lync user status 343

Lync B2BUA status 343

TMS Provisioning Extension service status 344

Provisioning Server device requests status (Cisco TMSPE) 344

User records provided by Cisco TMSPE services 345

FindMe records provided by Cisco TMSPE services 346

Phone book records provided by Cisco TMSPE services 346

Provisioned devices 347

Checking provisioned data 347

Starter Pack Provisioning Server status 348

Managing alarms 349

Logs 350

Cisco VCS Administrator Guide (X8.1.1) Page 8 of 507

Event Log 350

Configuration Log 351

Network Log 352

Hardware status 354

VCS unit front panel 354

Reference material 355

Performance capabilities 356

About Event Log levels 357

Event Log format 357

Administrator and FindMe user events 358

Message details field 358

Events and levels 360

CPL reference 366

CPL address-switch node 366

otherwise 368

not-present 368

location 368

rule-switch 369

proxy 370

reject 370

Unsupported CPL elements 370

CPL examples 371

LDAP server configuration for device authentication 377

Downloading the H.350 schemas 377

Configuring a Microsoft Active Directory LDAP server 377

Configuring an OpenLDAP server 379

DNS configuration examples 383

Verifying the SRV record 383

Microsoft DNS server 383

BIND 8 & 9 383

Changing the default SSH key 385

Restoring default configuration (factory reset) 386

Prerequisite files 386

Performing a reset to default configuration 386

Resetting via USB stick 386

Password encryption 388

Pattern matching variables 389

Port reference 391

Local VCS inbound/outbound ports 391

Remote listening ports 393

Unified Communications port reference 395

Microsoft Lync B2BUA port reference 397

Device authentication port reference 399

H.350 directory service 399

Active Directory (direct) 399

Regular expressions 400

Supported characters 402

Call types and licensing 403

Call types 403

What are traversal calls? 403

Alarms 405

Cisco VCS Administrator Guide (X8.1.1) Page 9 of 507

Command reference — xConfiguration 422

Command reference — xCommand 469

Command reference — xStatus 488

External policy overview 490

Using an external policy server 490

External policy request parameters 491

Default CPL for policy services 492

Flash status word reference table 493

Supported RFCs 494

Software version history 496

X7.2.1 496

X7.2 496

X7.1 499

X7 500

Popular Server manuals by other brands

HP AlphaServer ES47 Cli reference manual

Dell

Dell PowerEdge R410 Getting started

PowerNAS

PowerNAS CMA quick start guide

Supero

Supero FatTwin F617R3-FT user manual

MSI

MSI P1-109N-L70 user manual

Dell

Dell PowerEdge XE9640 Installation and service manual

Dell

Dell PS4100 Hardware

EtroVISION

EtroVISION EV3151 user manual

NEC

NEC Express5800/T110j System configuration guide

HP ProLiant Gen9 user guide

Compaq

Compaq ProLiant 3000 Maintenance and service guide

Dell

Dell PowerEdge 3YPMN Getting started guide

iRobo

iRobo IPC2U user manual

Nortel

Nortel 1000 Con?guration guide user manual

Asus

Asus AP7500 Hardware reference guide

Avid Technology

Avid Technology AirSpeed 5000 manual

HP Integrity rx2600 overview

Milestone

Milestone Husky IVO 350T Getting started