Tls Certificate Verification Of Neighbor Systems - Cisco TelePresence Administrator's Manual

Zones and neighbors
Setting
Monitor peer status
Call signaling routed mode
Automatically respond to
H.323 searches
H.323 call signaling port
Automatically respond to
SIP searches
Send empty INVITE for
interworked calls
SIP poison mode
SIP encryption mode
SIP SDP attribute line limit
mode
SIP SDP attribute line limit
length
SIP multipart MIME strip
mode
SIP UPDATE strip mode
Interworking SIP search
strategy
SIP UDP/BFCP filter mode
SIP UDP/IX filter mode
SIP Duo Video filter mode
SIP record route address
type
SIP Proxy-Require header
strip list
For more information about configuring a SIP trunk between VCS and Unified CM, see
Communications Manager with VCS Deployment

TLS certificate verification of neighbor systems

When a SIP TLS connection is established between a VCS and a neighbor system, the VCS can be
configured to check the X.509 certificate of the neighbor system to verify its identity. You do this by
configuring the zone's TLS verify mode setting.
If TLS verify mode is enabled, the neighbor system's FQDN or IP address, as specified in the Peer
address field of the zone's configuration, is used to verify against the certificate holder's name contained
within the X.509 certificate presented by that system. (The name has to be contained in either the Subject
Cisco VCS Administrator Guide (X8.1.1)
Cisco Unified Cisco Unified
Communications Communications
Manager Manager (8.6.1
or later)
Yes Yes
Always Always
Off Off
1720 1720
Off Off
On On
Off Off
Auto Auto
Off Off
130 130
Off Off
Off Off
Options Options
On Off
On On
Off Off
IP IP
<blank> <blank>
Guide.
Nortel Infrastructure
Communication device
Server 1000
Yes No
Auto Always
Off On
1720 1720
Off On
On On
Off Off
Auto Auto
Off Off
130 130
Off Off
On Off
Options Options
Off Off
On On
Off Off
IP IP
"com.nortelnetw <blank>
orks.firewall"
Cisco Unified
Configuring zones
Default
Yes
Auto
Off
1720
Off
On
Off
Auto
Off
130
Off
Off
Options
Off
Off
Off
IP
<blank>
Page 155 of 507