Configuring Traversal Client Zones - Cisco TelePresence Administrator's Manual

Grey Headline (continued)
Zones
The following options are available (in addition
to the Name, Type and Hop count described in
the Configuring zones section) when configuring
a traversal client zone on the VCS. Traversal
client zones are used to enable a connection
from the local VCS to a traversal server.
For full details on how traversal client zones and
traversal server zones work together to achieve
firewall traversal, see the Firewall traversal
section.
An NTP server must be configured for
traversal zones to work.
Authentication username and password
Traversal clients must always authenticate
with traversal servers by providing their
authentication credentials.
Each traversal client zone must specify an
Authentication username and Authentication
password to be used for authentication with the
traversal server.
Multiple traversal client zones can be
configured on a VCS, each with distinct
credentials, to connect to one or more
service providers.
Note that the outbound connection credentials
username and password are used for
connections to all other (non traversal server)
external systems.
Overview and System
Introduction
status configuration
D14049.08
November 2010

Configuring traversal client zones

H.323
Mode
Determines whether H.323 calls are allowed to
and from the traversal server.
Protocol
Determines which of the two firewall traversal
protocols (Assent or H.460.18) to use for
calls to the traversal server. (See the H.323
firewall traversal protocols section for more
information.)
Port
The port on the traversal server to use for
H.323 calls to and from the local VCS.
For firewall traversal to work via H.323,
the traversal server must have a
traversal server zone configured on it to
represent this VCS, using this same port
number.
Cisco VCS Zones and Clustering and
configuration neighbors peers
SIP
Mode
Determines whether SIP calls are allowed to and
from the traversal server.
Port
The port on the traversal server to use for SIP
calls to and from the VCS.
Transport
The transport type to use for SIP calls to and
from the traversal server. The default is TLS.
For firewall traversal to work via SIP, the
traversal server must have a traversal
server zone configured on it to represent
this VCS, using this same transport type and
port number.
TLS verify mode
Controls X.509 certificate checking and mutual
authentication between this VCS and the
traversal server when communicating over TLS.
See TLS certificate verification of neighbor
systems for more information.
Accept proxied registrations
Controls whether proxied SIP registrations
routed through this zone are accepted.
This setting only applies to registration requests
for a domain for which the VCS is acting as a
Registrar. For requests for other domains the
SIP Registration Proxy Mode setting applies
(see Proxying registration requests).
Poison mode
Determines if SIP requests sent to systems
located via this zone are "poisoned" such that if
they are received by this VCS again they will be
rejected.
Call Bandwidth
processing control
69
CISCO TELEPRESENCE VIDEO COMMUNICATION SERVER
Client settings
Retry interval
Specifies the interval in seconds with which a
failed attempt to establish a connection to the
traversal server should be retried.
Location
Peer 1 to Peer 6 address
The IP address or FQDN of the traversal server.
If the traversal server is a VCS Expressway
cluster, this should include all of its peers. See
the Neighboring the local Cisco VCS to another
VCS cluster section for more information.
If the traversal server is a TANDBERG Border
Controller, this should include all its Alternates.
Firewall
Applications Maintenance
traversal
ADMINISTRATOR GUIDE
Appendices