Firewall Traversal And Authentication - Cisco TelePresence Administrator's Manual

Firewall traversal and authentication

To control which systems can use the VCS Expressway as a traversal server, each VCS Control or
Gatekeeper that wants to be its client must first authenticate with it.
Upon receiving the initial connection request from the traversal client, the VCS Expressway asks the client
to authenticate itself by providing its authentication credentials. The VCS Expressway then looks up the
client's credentials in its own authentication database. If a match is found, the VCS Expressway accepts the
request from the client.
The settings used for authentication depend on the combination of client and server being used. These are
detailed in the table below.
Client
VCS Control or VCS Expressway
The VCS client provides its Username and
Password. These are set on the traversal client
zone by using VCS configuration > Zones > Edit
zone, in the Connection credentials section.
Endpoint
The endpoint client provides its Authentication
ID and Authentication Password.
TANDBERG Gatekeeper (version 5.2 and
earlier)
The Gatekeeper looks up its System Name in its
own authentication database and retrieves the
password for that name. It then provides this
name and password.
TANDBERG Gatekeeper (version 6.0 or later;
6.1 or later is recommended)
The Gatekeeper provides its Authentication
Username and Authentication Password.
These are set on the Gatekeeper by using
Gatekeeper Configuration >
the External Registration Credentials section.
Cisco VCS Administrator Guide (X7.1)
Server
VCS Expressway
The traversal server zone for the VCS client must be
configured with the client's authentication Username. This is
set on the VCS Expressway by using
Zones > Edit
There must also be an entry in the VCS Expressway's
authentication database with the corresponding client
username and password.
VCS Expressway
There must be an entry in the VCS Expressway's
authentication database with the corresponding client
username and password.
VCS Expressway
The traversal server zone for the Gatekeeper client must be
configured with the Gatekeeper's System Name in the
Username field. This is set on the VCS Expressway by
using
Connection credentials section.
There must be an entry in the VCS Expressway's
authentication database that has the Gatekeeper's System
name as the username, along with the corresponding
password.
VCS Expressway
The traversal server zone for the Gatekeeper client must be
configured with the Gatekeeper's Authentication
Username in the Username field. This is set on the VCS
Expressway by using
Authentication, in zone, in the Connection credentials section.
There must also be an entry in the VCS Expressway's
authentication database with the corresponding client
username and password.
zone, in the Connection credentials section.
VCS configuration > Zones > Edit
VCS configuration > Zones > Edit
Firewall traversal
VCS configuration >
zone, in the
Page 225 of 479