Cisco TelePresence Video Communication Server Service manual

Cisco TelePresence
Video Communication
Server
Administrator Guide
D14049.10
April 2011
Software version: X6.1

Contents
Contents
Contents 2
About the Cisco TelePresence Video Communication Server (VCS) 16
VCS base applications 16
VCS Control 16
VCS Expressway™ 16
Standard features 17
Optional features 17
FindMe™ 18
Device Provisioning 18
Dual Network Interfaces 18
About this guide 19
Typographical conventions 19
Installation and initial configuration 19
Using the web interface 20
Required fields 20
How page navigation is shown in this guide 20
Supported browsers 20
Using the command line interface (CLI) 21
Command types 21
Web page features and layout 22
What’s new in this version? 24
Session management 24
Client certificate-based authentication 24
Automatic updating of CRLs (certificate revocation lists) 24
Cisco AM GW available on VCS Expressway 24
Movi ClearPath provisioning 24
Improved cluster set-up process 24
Presence configuration 24
Overview and status information 25
Status overview 25
System information 26
Cisco VCS Administrator Guide (X6.1) Page 2 of 401

Contents
Ethernet status 27
IP status 28
Resource usage 29
Active administrator sessions 29
Active user sessions 29
Registration status 29
Registrations by device 29
Registrations by alias 30
Registration history 31
Registration details 32
Call status 32
Call status 32
Call history 33
Call summary 34
Call details 34
Call media details 34
Search history 35
About searches 35
Search history list 35
Search details 36
Local Zone status 36
Zone status 37
Link status 37
Pipe status 37
Policy service status 38
TURN relays status 38
Presence 39
Presence publishers 39
Presence presentities 39
Presence subscribers 40
OCS Relay status 40
Provisioning status 41
Provisioning server 41
Cisco VCS Administrator Guide (X6.1) Page 3 of 401

Contents
Phone book server 41
Warnings 41
Hardware status 42
Event Log 42
Configuration Log 43
VCS unit front panel 44
Network and system settings 45
Configuring IP settings 45
Configuring Ethernet settings 46
Configuring DNS settings 46
Configuring Quality of Service settings 47
Configuring system name and access settings 48
Configuring SNMP settings 51
Configuring time zone and NTP server settings 52
Configuring the Login page 53
Configuring external manager settings 53
Configuring logging levels 54
Event Log levels 54
Remote logging 55
Protocols 56
About H.323 56
Using the VCS as an H.323 gatekeeper 56
H.323 endpoint registration 56
About SIP 56
VCS as a SIP registrar 57
VCS as a SIP proxy server 58
Proxying registration requests 58
VCS as a SIP Presence Server 59
H.323 configuration 59
SIP configuration 60
Configuring SIP domains 62
Configuring SIP and H.323 interworking 62
Searching by protocol 62
Cisco VCS Administrator Guide (X6.1) Page 4 of 401

Contents
Enabling SIP endpoints to dial H.323 numbers 63
Registration control 64
About registrations 64
Finding a VCS with which to register 64
Registrations on a VCS Expressway 64
MCU, gateway and Content Server registration 65
Configuring registration restriction policy 65
Registering aliases 66
H.323 66
SIP 67
Attempts to register using an existing alias 67
Blocking registrations 67
Removing existing registrations 67
Re-registrations 67
About Allow and Deny Lists 68
Configuring the registration Allow List 68
Configuring the registration Deny List 69
Device authentication 70
About device authentication 70
Authentication Policy 70
Authentication mechanism 70
Authentication Policy configuration options 71
Zone-level Authentication Policy 71
Subzone-level Authentication Policy 73
SIP authentication trust 74
Device authentication configuration 75
Authentication database 75
Endpoint credentials used for authentication 75
Device authentication using LDAP 75
Authentication process 75
LDAP server settings 76
Device LDAP schemas 77
Authentication using a local database 78
Cisco VCS Administrator Guide (X6.1) Page 5 of 401

Contents
Authenticating with external systems 78
Zones and neighbors 79
About your video communications network 79
Example network diagram 79
Structuring your dial plan 80
Flat dial plan 80
Structured dial plan 80
Hierarchical dial plan 80
About the Local Zone and subzones 81
Bandwidth management 81
Local Zone searches 81
About zones 82
Default Zone 82
Zone configuration 82
Configuring neighbor zones 83
Configuring traversal client zones 86
Configuring traversal server zones 88
Configuring ENUM zones 91
Configuring DNS zones 92
Zone configuration: advanced settings 93
Zone configuration: pre-configured profile settings 98
TLS certificate verification of neighbor systems 99
Clustering and peers 100
About clusters 100
About the configuration master 101
Secure communication between peers 101
Alternates 101
Setting up a cluster 101
Maintaining a cluster 102
Cluster name 102
Cluster pre-shared key 102
Setting configuration for the cluster 102
Adding and removing peers from a cluster 102
Cisco VCS Administrator Guide (X6.1) Page 6 of 401

Contents
Changing the master peer 102
Monitoring the status of the cluster 103
Configuration that is not replicated across a cluster 103
Troubleshooting cluster replication problems 104
Managing clusters and peers 105
Sharing registrations across peers 105
Sharing bandwidth across peers 105
Cluster upgrades and downgrades 106
Cluster backup and restore 106
Clustering and FindMe 106
Clustering and Presence 107
Clustering and TMS 107
About the Cluster Subzone 107
Neighboring the local VCS to another VCS cluster 108
TMS Agent replication status 109
Dial plan and call processing 110
Call routing process 110
How the VCS determines the destination of a call 110
About the VCS's directory service 112
About hop counts 112
Configuring hop counts 112
About transforms and search rules 112
Transforms 113
Search rules 113
Dial plan configuration 113
About the fallback alias 114
About pre-search transforms 115
Pre-search transform process 115
Configuring pre-search transforms 115
Search and zone transform process 117
Configuring search rules 118
Example searches and transforms 120
Filter queries to a zone without transforming 121
Cisco VCS Administrator Guide (X6.1) Page 7 of 401

Contents
Always query a zone with original alias (no transforms) 121
Query a zone for a transformed alias 122
Query a zone for original and transformed alias 123
Query a zone for two or more transformed aliases 124
Stripping @domain for dialing to H.323 numbers 125
Transforms for alphanumeric H.323 ID dial strings 127
Allowing calls to IP addresses only if they come from known zones 129
Configuring policy services 129
About Call Policy 131
Configuring Call Policy 131
Configuring Call Policy rules using the web interface 133
Configuring Call Policy using a CPL script 134
Configuring VCS to use the Cisco TelePresence Advanced Media Gateway 135
Configuring the VCS 135
Usage features and limitations 135
Configuring Cisco AM GW policy rules 136
Dialable address formats 137
Dialing by IP address 138
Dialing by H.323 ID or E.164 alias 138
Dialing by H.323 or SIP URI 138
Dialing by ENUM 138
IP dialing 139
Calls to unknown IP addresses 139
About URI dialing 140
URI dialing without DNS 140
URI dialing via DNS 141
URI resolution process using DNS 141
URI dialing via DNS for outgoing calls 142
URI dialing via DNS for incoming calls 144
URI dialing and firewall traversal 146
About ENUM dialing 146
ENUM dialing process 146
Enabling ENUM dialing 147
Cisco VCS Administrator Guide (X6.1) Page 8 of 401

Contents
ENUM dialing for outgoing calls 147
Zone configuration for ENUM dialing 149
ENUM dialing for incoming calls 150
Configuring DNS servers for ENUM and URI dialing 151
Configuring a zone for incoming calls only 151
Call signaling configuration 152
Identifying calls 153
Disconnecting calls 154
Disconnecting a call using the web interface 154
Disconnecting a call using the CLI 154
Limitations when disconnecting SIP calls 154
Bandwidth control 156
About bandwidth control 156
Example network deployment 156
Bandwidth configuration 157
About downspeeding 158
About subzones 158
Default links between subzones 158
About the Traversal Subzone 158
About the Default Subzone 159
Configuring subzones 159
Configuring subzone membership rules 160
Applying bandwidth limitations to subzones 162
Links and pipes 163
Configuring links 163
Default links 164
Configuring pipes 164
Applying pipes to links 165
Bandwidth control examples 166
Firewall traversal 169
About firewall traversal 169
Expressway solution 169
How does it work? 169
Cisco VCS Administrator Guide (X6.1) Page 9 of 401

Contents
VCS as a firewall traversal client 170
VCS as a firewall traversal server 170
Configuring traversal server zones 170
Configuring other traversal server features 170
Quick guide to VCS traversal client - server configuration 170
Firewall traversal protocols and ports 172
Expressway process 172
H.323 firewall traversal protocols 172
SIP firewall traversal protocols 172
Ports for initial connections from traversal clients 172
Default port summary 173
TURN ports 173
Ports for connections out to the public internet 174
Firewall traversal and authentication 174
Authentication and NTP 176
Firewall traversal and Dual Network Interfaces 176
Firewall configuration 176
Configuring traversal for endpoints 176
Configuring traversal server ports 177
About ICE and TURN services 178
About ICE 178
About TURN 178
TURNrelay server 178
Configuring TURN services 179
TURN relay status information 180
Applications 181
Conference Factory 181
Conference creation process 181
About Presence 182
Presence Server 183
Presence User Agent (PUA) 183
Configuring Presence 184
OCS Relay 186
Cisco VCS Administrator Guide (X6.1) Page 10 of 401