The Default Zone; Configuring The Default Zone - Cisco TelePresence Administrator's Manual

Zones and neighbors

The Default Zone

The Default Zone represents any incoming calls from endpoints or other devices that are unregistered or not
recognized as belonging to the Local Zone or any of the existing configured zones.
The VCS comes pre-configured with the Default Zone and
Subzone and the Traversal Subzone. Note that the Default Zone cannot be deleted.

Configuring the Default Zone

By configuring the Default Zone you can control how the VCS handles calls from unrecognized systems and
endpoints. To configure the Default Zone, go to
The configurable options are:
Field Description
Authentication The Authentication policy setting
policy controls how the VCS challenges
incoming messages to the Default
Zone.
Media The Media encryption mode
encryption setting controls the media
mode encryption capabilities for SIP
calls flowing through the Default
Zone.
ICE support Controls whether ICE messages
are supported by the devices in
this zone.
Use Default The Use Default Zone access
Zone access rules setting controls which
rules external systems are allowed to
connect over SIP TLS to the VCS
via the Default Zone.
Using links and pipes to manage access and bandwidth
You can also manage calls from unrecognized systems and endpoints by configuring the
associated with the Default Zone. For example, you can:
delete the default links to prevent any incoming calls from unrecognized endpoints
n
apply pipes to the default links to control the bandwidth consumed by incoming calls from unrecognized
n
endpoints
Cisco VCS Administrator Guide (X8.1.1)
default links between it and both the Default
Configuration > Zones > Zones
Usage tips
See Authentication policy configuration options [p.105]
more information.
See Configuring media encryption policy [p.135]
information.
See Configuring ICE messaging support [p.137]
information.
If the access rules are enabled, then by default no systems
will be allowed to connect over SIP TLS via the Default
Zone; you must set up the
want to grant access. In essence, it enables TLS verify
mode on the Default Zone.
Note that this setting does not affect other connections to
the Default Zone (H.323 and SIP UDP/TCP).
The Default Zone
and click on DefaultZone.
for more
for more
access rules for the systems you
links and pipes
Page 139 of 507
for