Example With A Firewall; Cisco Vcs Expressway Subzone Configuration; Cisco Vcs Control Subzone Configuration - Cisco TelePresence Administrator's Manual

Grey Headline (continued)
Bandwidth control examples
If we modify the previous example deployment to include
firewalls between the offices, we can use Cisco's Expressway™
firewall traversal solution to maintain connectivity. We do this
by adding a VCS Expressway outside the firewall on the public
internet, which will work in conjunction with the VCS Control and
Home and Branch office endpoints to traverse the firewalls.
In this example, the endpoints in the Head Office register with
the VCS Control, while those in the Branch and Home offices
register with the VCS Expressway.
The introduction of the firewalls means that there is no longer
any direct connectivity between the Branch and Home offices.
All traffic must be routed through the VCS Expressway. This is
shown by the absence of a link between the Home and Branch
subzones.

Cisco VCS Expressway subzone configuration

The VCS Expressway has subzones configured for the Home
Office and Branch Office. These are linked to the VCS
Expressway's Traversal Subzone, with pipes placed on each link.
All calls from the VCS Expressway to the VCS Control must go
through the Traversal Subzone and will consume bandwidth from
this subzone. Note also that calls from the Home Office to the
Branch Office must also go through the Traversal Subzone, and
will also consume bandwidth from this subzone as well as the
Home and Branch subzones and Home Office, Branch Office and
Head Office pipes.
In this example we have assumed that there is no bottleneck
on the link between the VCS Expressway and the Head Office
network, so have not placed a pipe on this link. If you want to
limit the amount of traffic flowing through your firewall, you could
provision a pipe on this link.

Cisco VCS Control subzone configuration

Because the VCS Control is only managing endpoints on the
Head Office LAN, its configuration is simpler. All of the endpoints
in the Head Office are assigned to the Default Subzone. This is
linked to the Traversal Subzone, through which all calls leaving
the Head Office must pass.
Overview and System
Introduction
status configuration
D14049.08
November 2010

Example with a firewall

VCS CONTROL
Default
Subzone
Cisco VCS Zones and Clustering and
configuration neighbors peers
Traversal
Traversal
Traversal
Client Server
Subzone
Zone Zone
Call Bandwidth
processing control
127
CISCO TELEPRESENCE VIDEO COMMUNICATION SERVER
VCS EXPRESSWAY
HOME OFFICE
INTERNET
Pipe B
Traversal
Subzone
Pipe A
Pipe C
BRANCH OFFICE
Branch Office
Subzone
Firewall
Applications Maintenance
traversal
ADMINISTRATOR GUIDE
Home Office
Subzone
Appendices