Cisco Cisco Expressway
3. Configure the fields as follows:
Expressway-C
Expressway-E
Name
Not applicable
Enter exampleauth
Password
Not applicable
Enter ex4mpl3.c0m
4. Click Create credential.
Configuring traversal zones for Unified Communications
To support Unified Communications features such as mobile and remote access or Jabber Guest, there must
be a secure traversal zone connection between the Expressway-C and the Expressway-E:
be a secure traversal zone connection between the Expressway-C and the Expressway-E:
n
The Expressway-C and Expressway-E must be configured with a zone of type Unified Communications
traversal. This automatically configures an appropriate traversal zone (a traversal client zone when
selected on a Expressway-C, or a traversal server zone when selected on an Expressway-E) that uses
SIP TLS with TLS verify mode set to On, and Media encryption mode set to Force encrypted.
traversal. This automatically configures an appropriate traversal zone (a traversal client zone when
selected on a Expressway-C, or a traversal server zone when selected on an Expressway-E) that uses
SIP TLS with TLS verify mode set to On, and Media encryption mode set to Force encrypted.
n
Both Expressways must trust each other's server certificate. As each Expressway acts both as a client
and as a server you must ensure that each Expressway’s certificate is valid both as a client and as a
server.
and as a server you must ensure that each Expressway’s certificate is valid both as a client and as a
server.
n
If an H.323 or a non-encrypted connection is also required, a separate pair of traversal zones must be
configured.
configured.
Neighboring between Expressway clusters
You can neighbor your local Expressway (or Expressway cluster) to a remote Expressway cluster; this
remote cluster could be a neighbor, traversal client, or traversal server to your local Expressway. In this
case, when a call is received on your local Expressway and is passed via the relevant zone to the remote
cluster, it will be routed to whichever peer in that neighboring cluster has the lowest resource usage. That
peer will then forward the call as appropriate to one of its external zones.
remote cluster could be a neighbor, traversal client, or traversal server to your local Expressway. In this
case, when a call is received on your local Expressway and is passed via the relevant zone to the remote
cluster, it will be routed to whichever peer in that neighboring cluster has the lowest resource usage. That
peer will then forward the call as appropriate to one of its external zones.
Lowest resource usage is determined by comparing the number of available media sessions (maximum -
current use) on the peers, and choosing the peer with the highest number. Peers that are in maintenance
mode are not considered.
current use) on the peers, and choosing the peer with the highest number. Peers that are in maintenance
mode are not considered.
When configuring a connection to a remote cluster, you create a single zone and configure it with details of all
the peers in the cluster. Adding this information to the zone ensures that the call is passed to that cluster
regardless of the status of the individual peers.
the peers in the cluster. Adding this information to the zone ensures that the call is passed to that cluster
regardless of the status of the individual peers.
You also need to enter the IP address of all peers in the remote cluster when the connection is via a
neighbor or traversal client zone. You do not do this for traversal server zones, as these connections are
not configured by specifying the remote system's IP address.
neighbor or traversal client zone. You do not do this for traversal server zones, as these connections are
not configured by specifying the remote system's IP address.
Cisco Expressway Basic Configuration Deployment Guide (X8.5)
Page 19 of 56
Routing configuration