Cisco Cisco Expressway
6.
Configure the search rule fields as follows:
Expressway-C
Expressway-E
Rule name
Enter Local zone – full URI
Same as
Expressway-C
Expressway-C
Description
Enter Search local zone for SIP devices with
a domain
Priority
Enter 50
Protocol
Any
Source
Any
Request must be
authenticated
authenticated
No
Mode
Alias pattern match
Pattern type
Regex
Pattern string
Enter (.+)@example.com.*
Pattern behavior
Leave
On successful match
Continue
Target
LocalZone
State
Enabled
7.
Click Create search rule.
Task 10: Configuring the Traversal Zone
The traversal zone configuration defines a connection between the Expressway-C and Expressway-E platforms. A
traversal zone connection allows firewall traversal for signaling and media between the two platforms. Expressway-C
is configured with a traversal client zone. Expressway-E is configured with a traversal server zone.
traversal zone connection allows firewall traversal for signaling and media between the two platforms. Expressway-C
is configured with a traversal client zone. Expressway-E is configured with a traversal server zone.
Which type of traversal zone?
■
If your deployment is for business to business calling, use a traversal zone.
■
If your deployment is for mobile and remote access, use a Unified Communications traversal zone (see next
section).
section).
Traversal zones for Unified Communications
If you need Unified Communications features like mobile and remote access or Jabber Guest, a secure traversal zone
connection must exist between Expressway-C and Expressway-E:
connection must exist between Expressway-C and Expressway-E:
■
The Expressway-C and Expressway-E must be configured with a zone of type Unified Communications
traversal. This automatically configures an appropriate traversal zone (a traversal client zone when selected
on Expressway-C or a traversal server zone when selected on Expressway-E) that uses SIP TLS with TLS
verify mode set to On, and Media encryption mode set to Force encrypted.
traversal. This automatically configures an appropriate traversal zone (a traversal client zone when selected
on Expressway-C or a traversal server zone when selected on Expressway-E) that uses SIP TLS with TLS
verify mode set to On, and Media encryption mode set to Force encrypted.
■
Both Expressways must trust each other's server certificate. As each Expressway acts both as a client and as
a server you must ensure that each Expressway’s certificate is valid both as a client and as a server.
a server you must ensure that each Expressway’s certificate is valid both as a client and as a server.
25
Cisco Expressway-E and Expressway-C - Basic Configuration Deployment Guide
Routing Configuration