Implementing Cisco Unified Communications Manager, Part 2 (CIPT2) 9781587055614, 1587055619

Table of contents :
Cover......Page 1
Contents......Page 9
Foreword......Page 21
Introduction......Page 22
Multisite Deployment Challenge Overview......Page 26
Quality Challenges......Page 28
Bandwidth Challenges......Page 29
Availability Challenges......Page 31
Dial Plan Challenges......Page 32
Overlapping and Nonconsecutive Numbers......Page 35
Fixed Versus Variable-Length Numbering Plans......Page 36
Optimized Call Routing and PSTN Backup......Page 38
NAT and Security Issues......Page 40
Chapter Summary......Page 41
Review Questions......Page 42
Chapter Objectives......Page 46
Quality of Service......Page 47
QoS Advantages......Page 48
Solutions to Bandwidth Limitations......Page 49
Low-Bandwidth Codecs and RTP-Header Compression......Page 51
Disabled Annunciator......Page 52
Mixed Conference Bridge......Page 53
Transcoders......Page 54
Multicast MOH from the Branch Router Flash......Page 56
Availability......Page 60
PSTN Backup......Page 61
MGCP Fallback......Page 62
Fallback for IP Phones......Page 63
Using CFUR to Reach Users on Cell Phones......Page 65
AAR and CFNB......Page 66
Dial Plan Solutions......Page 67
Dial Plan Components in Multisite Deployments......Page 68
Cisco Unified Border Element in Flow-Through Mode......Page 69
Review Questions......Page 71
Chapter Objectives......Page 76
Examining Multisite Connection Options......Page 77
H.323 Gateway Characteristics......Page 78
H.323 Trunk Overview......Page 79
H.323 Trunk Comparison......Page 80
MGCP Gateway Implementation......Page 82
H.323 Gateway Implementation......Page 84
Cisco IOS H.323 Gateway Configuration......Page 86
CUCM H.323 Gateway Configuration......Page 87
Trunk Implementation Overview......Page 88
Gatekeeper-Controlled ICT and H.225 Trunk Configuration......Page 89
Implementing SIP Trunks......Page 90
Implementing Intercluster and H.225 Trunks......Page 92
CUCM Gatekeeper-Controlled ICT and H.225 Trunk Configuration......Page 93
References......Page 96
Review Questions......Page 97
Multisite Dial Plan Overview......Page 102
Digit-Manipulation Requirements When Using Access and Site Codes......Page 103
Access and Site Code Requirements for Centralized Call-Processing Deployments......Page 105
Implementing PSTN Access......Page 106
Transformation of Incoming Calls Using ISDN TON......Page 107
Implementing Selective PSTN Breakout......Page 109
Configure IP Phones to Use Remote Gateways for Backup PSTN Access......Page 110
Considerations When Using Backup PSTN Gateways......Page 111
Digit-Manipulation Requirements for PSTN Backup of On-Net Intersite Calls......Page 112
Implementing Tail-End Hop-Off......Page 114
Summary......Page 115
Review Questions......Page 116
Chapter Objectives......Page 120
Remote-Site Redundancy Overview......Page 121
Remote-Site Redundancy Technologies......Page 122
Cisco Unified SIP SRST Usage......Page 124
Cisco Unified SRST Operation......Page 125
SRST Function of Switchover Signaling......Page 126
SRST Function of the Call Flow After Switchover......Page 127
SRST Timing......Page 128
MGCP Fallback Operation......Page 130
MGCP Gateway Fallback During Switchover......Page 131
MGCP Gateway Fallback During Switchback......Page 132
MGCP Gateway Fallback Process......Page 133
SRST 4.0 Platform Density......Page 135
Dial Plan Requirements for MGCP Fallback and SRST Scenarios......Page 136
Ensuring Connectivity for Remote Sites......Page 137
CFUR Considerations......Page 138
SRST Dial Plan Example......Page 140
Summary......Page 141
Review Questions......Page 142
Chapter Objectives......Page 146
Configuration Requirements for MGCP Fallback and Cisco Unified SRST......Page 147
SRST Reference Definition......Page 148
SRST Configuration on the Cisco IOS Gateway......Page 149
SRST Phone Definition Commands......Page 150
SRST Performance Commands......Page 151
Cisco Unified SRST Configuration Example......Page 152
MGCP-Gateway-Fallback Configuration on the Cisco IOS Gateway......Page 153
MGCP Fallback Configuration Example......Page 154
Dial Plan Configuration for SRST Support in CUCM......Page 155
SRST Dial Plan of CFUR and CSS......Page 156
SRST Dial Plan: Max Forward UnRegistered Hops to DN......Page 157
SRST Dial Plan Components for Normal Mode Analogy......Page 158
SRST Dial Plan Dial Peer Commands......Page 159
SRST Dial Plan Commands: Open Numbering Plans......Page 163
SRST Dial Plan Voice Translation-Profile Commands for Digit Manipulation......Page 165
SRST Dial Plan Voice Translation-Rule Commands for Number Modification......Page 166
SRST Dial Plan Profile Activation Commands for Number Modification......Page 167
SRST Dial Plan Class of Restriction Commands......Page 168
SRST Dial Plan Example......Page 169
Telephony Features Supported by Cisco Unified SRST......Page 173
Special Requirements for Voice-Mail Integration Using Analog Interfaces......Page 174
Review Questions......Page 175
Chapter Objectives......Page 180
CUCME in SRST Mode......Page 181
Standalone CUCME Versus CUCM and CUCME in SRST Mode......Page 182
CUCME Features and Versions......Page 184
Other CUCME Features......Page 185
General Configuration of CUCME......Page 186
CUCME Basic Configuration......Page 187
CUCME Configuration for Music On Hold......Page 188
Configuring CUCME in SRST Mode......Page 190
Phone-Provisioning Options......Page 191
Phone Registration Process......Page 192
Configuring CUCME for SRST......Page 193
CUCME for SRST Mode Configuration......Page 195
Review Questions......Page 196
Bandwidth Management Overview......Page 200
CUCM Codec Configuration......Page 201
Review of CUCM Codecs......Page 202
Local Conference Bridge Implementation......Page 204
Transcoder Implementation......Page 207
Implementing a Transcoder at the Main Site......Page 208
Configuration Procedure for Implementing Transcoders......Page 210
Multicast MOH from Branch Router Flash Implementation......Page 214
Implementing Multicast MOH from Branch Router Flash......Page 215
Configuration Procedure for Implementing Multicast MOH from Branch Router Flash......Page 217
Summary......Page 225
Review Questions......Page 226
Chapter Objectives......Page 230
Call Admission Control in CUCM......Page 231
Locations......Page 232
Locations: Hub-and-Spoke Topology......Page 233
Locations: Full-Mesh Topology......Page 234
Locations Configuration Example of a Hub-and-Spoke Topology......Page 235
Three Call Legs with RSVP-Enabled Locations......Page 238
Characteristics of Phone-to-RSVP Agent Call Legs......Page 239
RSVP Basic Operation......Page 240
RSVP-Enabled Location Configuration......Page 243
Step 1: Configure RSVP Service Parameters......Page 244
Step 2: Configure RSVP Agents in Cisco IOS Software......Page 248
Step 3: Add RSVP Agents to CUCM......Page 250
Step 4: Enable RSVP Between Location Pairs......Page 251
Automated Alternate Routing......Page 253
AAR Example......Page 254
AAR Considerations......Page 256
AAR Configuration Procedure......Page 257
H.323 Gatekeeper CAC......Page 262
H.323 Gatekeeper Used for Call Routing for Address Resolution Only......Page 263
Using an H.323 Gatekeeper for CAC......Page 266
H.323 Gatekeeper Also Used for Call Admission Control......Page 268
Provide PSTN Backup for Calls Rejected by CAC......Page 270
Configuration Procedure for Implementing H.323 Gatekeeper-Controlled Trunks with CAC......Page 271
References......Page 272
Review Questions......Page 273
Chapter Objectives......Page 278
Tcl Scripting Language......Page 279
VoiceXML Markup Language......Page 280
The Analogy Between HTML and VoiceXML......Page 281
Cisco IOS Call Application Support......Page 282
Tcl Versus VoiceXML Features in Cisco IOS......Page 283
Cisco IOS Call Application Support Requirements......Page 284
Examples of Cisco IOS Call Applications Available for Download at Cisco.com......Page 285
Call Application Auto-Attendant Script Example......Page 286
Remote-Site Gateway Using an Auto-Attendant Script During a WAN Failure......Page 288
Auto-Attendant Tcl Script Flowchart......Page 289
Call Application Configuration......Page 290
Step 2: Upload and Uncompress the Script to Flash......Page 291
Step 3b: Configure the Call Application Service Parameters......Page 292
Call Application Configuration Example......Page 293
Review Questions......Page 295
Issues with Devices Roaming Between Sites......Page 300
Issues with Roaming Devices......Page 301
Device Mobility Solves Issues of Roaming Devices......Page 302
Dynamic Device Mobility Phone Configuration Parameters......Page 303
Device Mobility Dynamic Configuration by Location-Dependent Device Pools......Page 305
Device Mobility Configuration Elements......Page 306
The Relationship Between Device Mobility Configuration Elements......Page 307
Device Mobility Operation......Page 308
Device Mobility Operation Flowchart......Page 309
Review of Line and Device CSSs......Page 312
Examples of Different Call-Routing Paths Based on Device Mobility Groups and TEHO......Page 313
Step 3: Configure Device Pools......Page 316
Step 4: Configure Device Mobility Infos......Page 317
Step 5a: Set the Device Mobility Mode CCM Service Parameter......Page 318
Step 5b: Set the Device Mobility Mode for Individual Phones......Page 319
Review Questions......Page 320
Issues with Users Roaming Between Sites......Page 324
Issues with Roaming Users......Page 325
CUCM Extension Mobility Overview......Page 326
Extension Mobility: Dynamic Phone Configuration Parameters......Page 327
Extension Mobility with Dynamic Phone Configuration by Device Profiles......Page 328
CUCM Extension Mobility Configuration Elements......Page 329
The Relationship Between Extension Mobility Configuration Elements......Page 330
CUCM Extension Mobility Operation......Page 331
Extension Mobility Solution to Phone Model Differences......Page 333
Extension Mobility and Calling Search Spaces (CSS)......Page 334
Alternatives to Mismatching Phone Models and CSS Implementations......Page 335
Step 1: Activate the Cisco Extension Mobility Feature Service......Page 336
Step 2: Set Cisco Extension Mobility Service Parameters......Page 337
Step 4: Create Default Device Profiles......Page 338
Step 5b: Subscribe the Device Profile to the Extension Mobility Phone Service......Page 339
Step 7a: Configure Phones for Cisco Extension Mobility......Page 341
Summary......Page 343
Review Questions......Page 344
Cisco Unified Mobility Overview......Page 350
Mobile Connect and Mobile Voice Access Characteristics......Page 351
Cisco Unified Mobility Features......Page 352
Mobile Connect Call Flow of Internal Calls Placed from a Remote Phone......Page 353
Mobile Voice Access Call Flow......Page 354
Cisco Unified Mobility Components......Page 355
Cisco Unified Mobility Configuration Elements......Page 356
Shared Line Between the Phone and the Remote Destination Profile......Page 358
Relationship Between Cisco Unified Mobility Configuration Elements......Page 359
Configuring Mobile Connect......Page 361
Configuring Mobile Voice Access......Page 371
Review Questions......Page 378
Cryptographic Services......Page 382
Symmetric Versus Asymmetric Encryption......Page 385
Algorithm Example: AES......Page 386
Asymmetric Encryption......Page 387
Algorithm Example: RSA......Page 388
Hash-Based Message Authentication Codes......Page 389
Algorithm Example: SHA-1......Page 390
No Integrity Provided by Pure Hashing......Page 391
Hash-Based Message Authentication Code, or “Keyed Hash”......Page 392
Digital Signatures......Page 393
Symmetric Key Distribution Protected by Asymmetric Encryption......Page 395
Public Key Distribution in Asymmetric Cryptography......Page 396
PKI: Distributing the Public Key of the Trusted Introducer......Page 397
PKI: Signing Certificates......Page 399
PKI: Providing Entities with Their Certificates......Page 400
PKI: Exchanging Public Keys Between Entities Using Their Signed Certificates......Page 401
PKI Entities......Page 402
X.509v3 Certificates......Page 403
PKI Example: SSL on the Internet......Page 404
Internet Web Browser: Embedded Internet-CA Certificates......Page 405
Obtaining the Authentic Public Key of the Web Server......Page 406
Web Server Authentication......Page 407
Exchanging Symmetric Session Keys......Page 408
Session Encryption......Page 409
Review Questions......Page 410
CUCM Security Features Overview......Page 414
CUCM Security Feature Support......Page 416
Cisco Unified Communications Security Considerations......Page 417
IPsec Scenarios in Cisco Unified Communications......Page 418
Signed Phone Loads......Page 420
SIP Digest Authentication......Page 421
SIP Digest Authentication Configuration Example......Page 422
SIP Trunk Encryption......Page 423
SIP Trunk Encryption Configuration......Page 424
Self-Signed Certificates......Page 425
Locally Significant Certificates......Page 426
Multiple PKI Roots in CUCM Deployments......Page 427
Cisco Certificate Trust List......Page 428
Cisco CTL Client Function......Page 429
Initial CTL Download......Page 431
IP Phone Verification of a New Cisco CTL......Page 432
PKI Topology with Secure SRST......Page 433
Secure SRST: Certificate Import: CUCM......Page 435
Secure SRST: Certificate Import: Secure SRST Gateway......Page 436
Certificate Usage in Secure SRST......Page 437
Summary......Page 438
Review Questions......Page 439
Chapter Objectives......Page 442
Enabling PKI-Based Security Features in CUCM......Page 443
Configuration Procedure for PKI-Based CUCM Security Features......Page 444
Installing the Cisco CTL Client......Page 445
Cisco CTL Client Usage......Page 446
Setting the Cluster Security Mode......Page 447
CAPF Configuration and LSC Enrollment......Page 448
CAPF Phone Configuration Options......Page 449
First-Time Installation of a Certificate with a Manually Entered Authentication String......Page 451
Certificate Upgrade Using an Existing MIC......Page 452
Generating a CAPF Report to Verify LSC Enrollment......Page 453
Signed and Encrypted Configuration Files......Page 454
Encrypted Configuration Files......Page 455
Obtaining Phone Encrypted Configuration Files......Page 456
Phone Security Profiles......Page 457
Default SCCP Phone Security Profiles......Page 458
Secure Signaling......Page 459
Server-to-Phone Authentication......Page 461
Phone-to-Server Authentication......Page 462
TLS Session Key Exchange......Page 463
Secure Media Transmission Between Cisco IP Phones......Page 464
SRTP Protection......Page 465
SRTP Encryption......Page 466
SRTP Authentication......Page 467
Secure Call Flow Summary......Page 468
Configuring IP Phones to Use Secure Signaling and Media Exchange......Page 469
Secure Media Transmission to H.323 and MGCP Gateways......Page 470
H.323 SRTP CUCM......Page 471
Secure Conferencing......Page 473
Secure Conferencing Considerations......Page 474
Secure Conferencing Configuration Procedure......Page 475
Summary......Page 481
Review Questions......Page 482
Appendix A: Answers to Chapter Review Questions......Page 488
A......Page 495
B......Page 496
C......Page 497
D......Page 503
E......Page 505
H......Page 506
I......Page 507
M......Page 508
N......Page 511
P......Page 512
R......Page 513
S......Page 515
T......Page 517
X......Page 518