Cisco Cisco TelePresence Video Communication Server Expressway
Appendix 4: Advanced Network Deployments
Prerequisites
■
Apply an Advanced Networking option key on any VCS Expressway that needs static NAT or two
LAN interfaces.
LAN interfaces.
The Advanced Networking option is available for both the VCS Expressway and VCS Control, but only the
VCS Expressway supports static NAT.
VCS Expressway supports static NAT.
■
Disable SIP and H.323 ALGs (SIP / H.323 awareness) on routers/firewalls carrying network traffic to or from
the VCS Expressway.
the VCS Expressway.
We strongly recommend disabling this functionality on the firewall/s when deploying a VCS Expressway
behind a NAT, because our experience shows that they do not handle video traffic properly. You must use the
VCS to perform the static network address translation on its own interface. Read more in
behind a NAT, because our experience shows that they do not handle video traffic properly. You must use the
VCS to perform the static network address translation on its own interface. Read more in
Planning Your Deployment
Do Not Overlap Subnets
The recommended deployment of the VCS Expressway configures both LAN interfaces. The LAN1 and LAN2
interfaces must be located in non-overlapping subnets to ensure that traffic is sent out the correct interface.
interfaces must be located in non-overlapping subnets to ensure that traffic is sent out the correct interface.
Clustering
■
When the peers have the Advanced Networking option installed, you must use the LAN1 interface address of
each peer to create the cluster.
each peer to create the cluster.
■
The LAN interface that you use for clustering must not have Static NAT mode enabled.
For these reasons, we recommend that you use LAN2 as the externally facing interface, and also enable static
NAT on LAN2 when it's required.
NAT on LAN2 when it's required.
External LAN Interface Setting
The External LAN interface configuration setting, on the IP configuration page, controls where the VCS
Expressway's TURN server allocates TURN relays. In the recommended dual NIC deployment, you should select the
externally-facing LAN interface (LAN2) on the VCS Expressway.
Expressway's TURN server allocates TURN relays. In the recommended dual NIC deployment, you should select the
externally-facing LAN interface (LAN2) on the VCS Expressway.
Recommended: Dual NIC Static NAT Deployment
The following example illustrates the recommended deployment. It shows the typical DMZ configuration where the
internal and external firewalls cannot route directly to each other, and dual NIC devices such as VCS Expressway are
required to validate and forward the traffic between the isolated subnets.
internal and external firewalls cannot route directly to each other, and dual NIC devices such as VCS Expressway are
required to validate and forward the traffic between the isolated subnets.
The VCS Expressway has both NICs enabled, and it has static NAT enabled on its outward-facing LAN interface. The
VCS Control inside the network is a traversal client of the VCS Expressway in the DMZ.
VCS Control inside the network is a traversal client of the VCS Expressway in the DMZ.
63
Cisco VCS Expressway and VCS Control - Basic Configuration Deployment Guide
Appendix 4: Advanced Network Deployments