Firewall Traversal And Authentication - Cisco TelePresence Administrator's Manual

Firewall traversal and authentication

To control which systems can use the VCS Expressway as a traversal server, each VCS Control or
Gatekeeper that wants to be its client must first authenticate with it.
Upon receiving the initial connection request from the traversal client, the VCS Expressway asks the client
to authenticate itself by providing its authentication credentials. The VCS Expressway then looks up the
client's credentials in its own authentication database. If a match is found, the VCS Expressway accepts the
request from the client.
The settings used for authentication depend on the combination of client and server being used. These are
detailed in the table below.
Client
VCS Control or VCS Expressway
The VCS client provides its Username and
Password. These are set on the traversal client
zone by using VCS configuration > Zones >
Zones > Edit zone, in the Connection credentials
section.
Endpoint
The endpoint client provides its Authentication ID
and Authentication Password.
TANDBERG Gatekeeper (version 5.2 and
earlier)
The Gatekeeper looks up its System Name in its
own authentication database and retrieves the
password for that name. It then provides this name
and password.
TANDBERG Gatekeeper (version 6.0 or later;
6.1 or later is recommended)
The Gatekeeper provides its Authentication
Username and Authentication Password. These
are set on the Gatekeeper by using
Configuration > Authentication, in the External
Registration Credentials section.
Cisco VCS Administrator Guide (X7.2)
Server
VCS Expressway
The traversal server zone for the VCS client must be
configured with the client's authentication Username. This
is set on the VCS Expressway by using
> Zones > Zones > Edit
credentials section.
There must also be an entry in the VCS Expressway's
authentication database with the corresponding client
username and password.
VCS Expressway
There must be an entry in the VCS Expressway's
authentication database with the corresponding client
username and password.
VCS Expressway
The traversal server zone for the Gatekeeper client must be
configured with the Gatekeeper's System Name in the
Username field. This is set on the VCS Expressway by
using VCS configuration > Zones > Zones > Edit
the Connection credentials section.
There must be an entry in the VCS Expressway's
authentication database that has the Gatekeeper's System
name as the username, along with the corresponding
password.
VCS Expressway
The traversal server zone for the Gatekeeper client must be
configured with the Gatekeeper's Authentication
Username in the Username field. This is set on the VCS
Gatekeeper Expressway by using
> Edit zone, in the Connection credentials section.
There must also be an entry in the VCS Expressway's
authentication database with the corresponding client
username and password.
Firewall traversal
VCS configuration
zone, in the Connection
VCS configuration > Zones > Zones
Page 238 of 498
zone, in