Cisco Cisco TelePresence Video Communication Server Expressway

Cisco

Contents

VCS Deployment Guide: Device authentication on Cisco VCS (VCS X7.2)

Page 2 of 50

Contents

Introduction ......................................................................................................................... 4

Configuring VCS authentication policy ............................................................................. 5

Controlling system behavior for authenticated and non-authenticated devices ...................................... 5

Device provisioning and authentication policy......................................................................................... 7

TMS Provisioning Extension mode .................................................................................................. 7

Legacy TMS Agent mode ................................................................................................................. 8

Cisco VCS Starter Pack Express ..................................................................................................... 9

Presence and authentication policy ....................................................................................................... 10

Hierarchical dial plan (directory VCS) deployments .............................................................................. 11

Infrastructure devices ............................................................................................................................ 11

Practical configuration of authentication policy ..................................................................................... 12

Configuring VCS authentication methods ........................................................................13

Using the local database ....................................................................................................................... 14

Adding credentials to the local database ....................................................................................... 14

Credentials managed within TMS (for device provisioning) ........................................................... 14

Using the local database with other authentication mechanisms .................................................. 14

Starter Pack .................................................................................................................................... 15

Using an H.350 directory service lookup via LDAP ............................................................................... 16

Using Active Directory database (direct) ............................................................................................... 18

Configuration prerequisites ............................................................................................................ 18

IT request ....................................................................................................................................... 19

Configure Active Directory server details in Cisco VCS ................................................................. 19

Configure Movi / Jabber Video and test Active Directory database (direct) authentication .......... 22

Appendix 1 — Troubleshooting ........................................................................................23

Local database troubleshooting ............................................................................................................ 23

H.350 directory service troubleshooting ................................................................................................ 23

Active Directory (direct) troubleshooting ............................................................................................... 23

Movi / Jabber Video fails to authenticate ....................................................................................... 23

Device provisioning (TMS PE mode) and presence ...................................................................... 24

Appendix 2 — IT requisition ..............................................................................................25

H.350 directory service: IT requisition (for LDAP access to H.350 directory service) ......................... 25

Active directory (direct): IT requisition (for access to Active Directory server) ...................................... 26

Appendix 3 — SIP messages for a provisioning subscription ........................................27

Active Directory (direct) ......................................................................................................................... 27

Appendix 4 — Active Directory (direct): Example DNS SRV configuration for AD ........28

DNS SRV values needed ...................................................................................................................... 28

Web browser checking of DNS SRV settings........................................................................................ 28

Dig command to check DNS SRV settings ........................................................................................... 28

Appendix 5 — Active Directory (direct): Movi PC and AD server compatibility

configuration .............................................................................................................30