Vcs As A Firewall Traversal Client; Vcs As A Firewall Traversal Server; Configuring Traversal Server Zones; Configuring Other Traversal Server Features - Cisco TelePresence Video Communication Server Administrator's Manual

VCS as a firewall traversal client

Your VCS can act as a firewall traversal client on behalf of SIP and H.323 endpoints registered to it,
and any gatekeepers that are neighbored with it. To act as a firewall traversal client, the VCS must be
configured with information about the systems that will act as its firewall traversal server.
You do this by adding a new traversal client zone on the VCS client
and configuring it with the details of the traversal server. See
more information. You can create more than one traversal client zone if you want to connect to multiple
traversal servers.
Note that:
In most cases, you will use a VCS Control as a firewall traversal client. However, a VCS
n
Expressway can also act as a firewall traversal client.
The firewall traversal server used by the VCS client can be a VCS Expressway, or (for H.323 only)
n
a TANDBERG Border Controller.

VCS as a firewall traversal server

The VCS Expressway has all the functionality of a VCS Control (including being able to act as a
firewall traversal client). However, its main feature is that it can act as a firewall traversal server for
other Cisco systems and any traversal-enabled endpoints that are registered directly to it. It can also
provide TURN relay services to ICE-enabled endpoints.

Configuring traversal server zones

For the VCS Expressway to act as a firewall traversal server for Cisco systems, you must create and
configure a traversal server zone on the VCS Expressway
configure it with the details of the traversal client. See
information.
Note that you must create a separate traversal server zone for every system that is its traversal client.

Configuring other traversal server features

For the VCS Expressway to act as a firewall traversal server for traversal-enabled endpoints (such
n
as Cisco MXP endpoints and any other endpoints that support the ITU H.460.18 and H.460.19
standards), no additional configuration is required. See
information.
To enable TURN relay services and find out more about ICE, see
n
To reconfigure the default ports used by the VCS Expressway, see
n
ports.

Quick guide to VCS traversal client - server configuration

Full details of how to configure a VCS Control and VCS Expressway as traversal client and server
respectively are given in the following sections. However, the basic steps are as follows:
Step Description
On the VCS Expressway, create a traversal server zone (this represents the incoming
connection from the VCS Control). In the Username field, enter the VCS Control's
authentication username.
Cisco VCS Administrator Guide (X6.1)
(VCS configuration
Configuring traversal client zones
(VCS configuration >
Configuring traversal server zones
Configuring traversal for endpoints
About ICE and TURN
Configuring traversal server
Firewall traversal
> Zones)
for
Zones) and
for more
for more
services.
Page 170 of 401