Cisco TelePresence Video Communication Server Administrator's Manual page 347

Reference material
Zones Zone [1..1000] TraversalClient SIP Protocol: <Assent/TURN/ICE>
Determines which firewall traversal protocol will be used for SIP calls to and from the traversal server. Note: the
same protocol must be set on the server for calls to and from this traversal client.
Default: Assent
Example: xConfiguration Zones Zone 1 TraversalClient SIP Protocol: Assent
Zones Zone [1..1000] TraversalClient SIP TLS Verify Mode: <On/Off>
Controls X.509 certificate checking and mutual authentication between this VCS and the traversal server. When
enabled, the server's FQDN or IP address, as specified in the Peer address field, must be contained within the
server's X.509 certificate (in either the Subject Common Name or the Subject Alternative Name attributes).
Default: Off
Example: xConfiguration Zones Zone 4 TraversalClient SIP TLS Verify Mode: On
Zones Zone [1..1000] TraversalClient SIP Transport: <TCP/TLS>
Determines which transport type will be used for SIP calls to and from the traversal server.
Default: TLS
Example: xConfiguration Zones Zone 4 TraversalClient SIP Transport: TLS
Zones Zone [1..1000] TraversalServer Authentication Mode:
<DoNotCheckCredentials/TreatAsAuthenticated/CheckCredentials>
Controls how the VCS authenticates incoming messages from this zone and whether they are subsequently
treated as authenticated, unauthenticated, or are rejected. The behavior varies for H.323 messages, SIP
messages that originate from a local domain and SIP messages that originate from non-local domains. See the
online help for full details about each of the Authentication Policy options.
Default: DoNotCheckCredentials
Example: xConfiguration Zones Zone 1 TraversalServer Authentication Mode:
DoNotCheckCredentials
Zones Zone [1..1000] TraversalServer Authentication UserName: <S: 0,128>
The name used by the traversal client when authenticating with the traversal server. If the traversal client is a
VCS, this must be the VCS's authentication user name. If the traversal client is a gatekeeper, this must be the
gatekeeper's System Name. For other types of traversal clients, refer to the VCS Admin Guide for further
information.
Example: xConfiguration Zones Zone 5 TraversalServer Authentication UserName:
"User123"
Cisco VCS Administrator Guide (X6.1) Page 347 of 401