Cisco Cisco Expressway Manuel De Maintenance
Field
Description
Usage tips
Mode
Determines whether SIP calls are allowed to and from
the traversal client.
the traversal client.
Port
The port on the local Expressway-E to use for SIP
calls to and from the traversal client.
calls to and from the traversal client.
This must be different from the listening
ports used for incoming TCP, TLS and
UDP SIP calls (typically 5060 and
5061).
ports used for incoming TCP, TLS and
UDP SIP calls (typically 5060 and
5061).
Transport
Determines which transport type is used for SIP calls
to and from the traversal client. The default is TLS.
to and from the traversal client. The default is TLS.
Unified
Communications
services
Communications
services
Controls whether this traversal zone provides Unified
Communications services, such as mobile and
remote access.
Communications services, such as mobile and
remote access.
If enabled, this zone must also be
configured to use TLS with TLS verify
mode enabled.
configured to use TLS with TLS verify
mode enabled.
and remote access.
TLS verify mode
and subject
name
and subject
name
Controls X.509 certificate checking and mutual
authentication between this Expressway and the
traversal client.
authentication between this Expressway and the
traversal client.
If TLS verify mode is enabled, a TLS verify subject
name must be specified. This is the certificate
holder's name to look for in the traversal client's
X.509 certificate.
name must be specified. This is the certificate
holder's name to look for in the traversal client's
X.509 certificate.
If the traversal client is clustered, the
TLS verify subject name must be the
FQDN of the cluster.
TLS verify subject name must be the
FQDN of the cluster.
for more
information.
Media
encryption
mode
encryption
mode
Controls the media encryption policy applied by the
Expressway for SIP calls (including interworked calls)
to and from this zone.
Expressway for SIP calls (including interworked calls)
to and from this zone.
for more information.
ICE support
Controls whether ICE messages are supported by the
devices in this zone.
devices in this zone.
for more information.
Poison mode
Determines if SIP requests sent to systems located
via this zone are "poisoned" such that if they are
received by this Expressway again they will be
rejected.
via this zone are "poisoned" such that if they are
received by this Expressway again they will be
rejected.
Authentication section:
Authentication
policy
policy
Controls how the Expressway authenticates
incoming messages from this zone and whether they
are subsequently treated as authenticated,
unauthenticated, or are rejected. The behavior varies
for H.323 messages, SIP messages that originate
from a local domain and SIP messages that originate
from non-local domains.
incoming messages from this zone and whether they
are subsequently treated as authenticated,
unauthenticated, or are rejected. The behavior varies
for H.323 messages, SIP messages that originate
from a local domain and SIP messages that originate
from non-local domains.
for
more information.
UDP / TCP probes section:
UDP retry
interval
interval
The frequency (in seconds) with which the client
sends a UDP probe to the Expressway-E if a keep
alive confirmation has not been received.
sends a UDP probe to the Expressway-E if a keep
alive confirmation has not been received.
The default UDP and TCP probe retry
intervals are suitable for most
situations. However, if you experience
problems with NAT bindings timing out,
they may need to be changed.
intervals are suitable for most
situations. However, if you experience
problems with NAT bindings timing out,
they may need to be changed.
Table 6 Traversal server zone configuration reference (continued)
109
Cisco Expressway Administrator Guide