Cisco TelePresence Administrator's Manual page 143

Zones and neighbors
Field Description
TLS verify Controls whether the VCS performs X.509
mode certificate checking against the neighbor
system when communicating over TLS.
Accept Controls whether proxied SIP registrations
proxied routed through this zone are accepted.
registrations
Media Controls the media encryption policy applied by
encryption the VCS for SIP calls (including interworked
mode calls) to and from this zone.
ICE support Controls whether ICE messages are supported
by the devices in this zone.
Authentication section:
Authentication Controls how the VCS authenticates incoming
policy messages from this zone and whether they are
subsequently treated as authenticated,
unauthenticated, or are rejected.
SIP Controls whether authenticated SIP messages
authentication (ones containing a P-Asserted-Identity header)
trust mode from this zone are trusted without further
challenge.
Location section:
Location The IP address or FQDN of the neighbor
Peer 1 to Peer system.
6 address
Enter the addresses of additional peers if:
the neighbor is a VCS cluster, in which case
n
you must specify all of the peers in the
cluster
the neighbor is a resilient non-VCS system,
n
in which case you must enter the addresses
of all of the resilient elements in that system
Advanced section:
Cisco VCS Administrator Guide (X8.1.1)
Usage tips
If the neighbor system is another VCS, both
systems can verify each other's certificate
(known as mutual authentication). See
certificate verification of neighbor systems
[p.155] for more information.
This setting only applies to registration
requests for a domain for which the VCS is
acting as a Registrar. For requests for other
domains the SIP registration proxy mode
setting applies. See Proxying registration
requests for more information.
See Configuring media encryption policy
[p.135] for more information.
See Configuring ICE messaging support
[p.137] for more information.
The behavior varies for H.323 messages, SIP
messages that originate from a local domain
and SIP messages that originate from non-
local domains. See Authentication policy
configuration options [p.105]
information.
See SIP authentication trust [p.108]
information.
Calls to a VCS cluster are routed to whichever
peer in that neighboring cluster has the
lowest resource usage. See
local VCS to another VCS cluster [p.169]
more information.
For connections to non-VCS systems, the
VCS uses a round-robin selection process to
decide which peer to contact if no resource
usage information is available.
Configuring zones
TLS
for more
for more
Neighboring the
for
Page 143 of 507