Cisco Cisco Expressway
Policy Settings Configuration for XMPP Federation
n
n
Policy Exception Configuration
You can configure exceptions to the default policy for XMPP federation. In the exception, you must specify
the external domain to which you want to apply the exception, and a direction rule for the exception. When
you configure the domain name for a policy exception, note the following:
the external domain to which you want to apply the exception, and a direction rule for the exception. When
you configure the domain name for a policy exception, note the following:
n
If the URI or JID of the user is user@example.com, configure the external domain name in the
exception as example.com.
exception as example.com.
n
If the external enterprise uses hostname.domain in the URI or JID of the user, for example
user@hostname.example.com
user@hostname.example.com
, configure the external domain name in the exception as
hostname.example.com
n
You can use a wildcard (*) for the external domain name in the exception. For example, the value
*.example.com
*.example.com
applies the policy on example.com and any subdomain of example.com, for
example, somewhere.example.com.
You must also specify the direction that IM and Presence Service applies the policy exception. These
direction options are available:
direction options are available:
n
All federated packets from/to the above domain/host - IM and Presence Service allows or denies all
traffic going to and coming from the specified domain.
traffic going to and coming from the specified domain.
n
Only incoming federated packets from the above domain/host - allow IM and Presence Service to
receive inbound broadcasts from the specified domain, but the IM and Presence Service does not send
responses.
receive inbound broadcasts from the specified domain, but the IM and Presence Service does not send
responses.
n
Only outgoing federated packets to the above domain/host - allow IM and Presence Service to send
outbound broadcasts to the specified domain, but the IM and Presence Service does not receive
responses.
outbound broadcasts to the specified domain, but the IM and Presence Service does not receive
responses.
Configure Policy for XMPP Federation
Caution: If you make a change to any of the XMPP federation settings, you must restart these services in
the
the
Cisco Unified IM and Presence Serviceability
user interface: Cisco XCP Router (choose
Tools >
Control Center - Network Services
), Cisco XCP XMPP Federation Connection Manager (choose
Tools >
Control Center - Feature Services
). When you restart the Cisco XCP Router service, IM and Presence
Service restarts all the XCP services.
Procedure
1. Log in to the
Cisco Unified CM IM and Presence Administration
user interface. Choose
Presence >
Inter Domain Federation > XMPP Federation > Policy
.
2. Choose the policy settings from the drop-down list:
l
Allow - IM and Presence Service permits all federated traffic from XMPP federated domains, except
those domains that you explicitly deny on the policy exception list.
those domains that you explicitly deny on the policy exception list.
l
Deny -IM and Presence Service denies all federated traffic from XMPP federated domains, except
those domains that you explicitly permit on the policy exceptions list.
those domains that you explicitly permit on the policy exceptions list.
Cisco Unified Communications XMPP Federation Deployment Guide (1.4)
Page 37 of 59
XMPP Federation through IM and Presence Service