Cisco Cisco TelePresence Video Communication Server Expressway
4.
Click Add Allow List pattern.
To activate the registration restriction:
1.
Go to Configuration > Registration > Configuration.
2.
Configure the Restriction policy as follows:
Restriction policy
Allow List
3.
Click Save.
Task 12: Configuring Device Authentication Policy (optional)
Authentication policy is applied by the VCS at the zone and subzone levels. It controls how the VCS challenges
incoming messages (for provisioning, registration, presence, phone books and calls) from that zone or subzone and
whether those messages are rejected, treated as authenticated, or treated as unauthenticated within the VCS.
incoming messages (for provisioning, registration, presence, phone books and calls) from that zone or subzone and
whether those messages are rejected, treated as authenticated, or treated as unauthenticated within the VCS.
Each zone and subzone can set its Authentication policy to either
Check credentials, Do not check credentials, or Treat
as authenticated.
■
Registration authentication is controlled by the Default Subzone (or relevant alternative subzone) configuration.
■
Initial provisioning subscription request authentication is controlled by the Default Zone configuration.
■
Call, presence, and phone book request authentication is controlled by the Default Subzone (or relevant
alternative subzone) if the endpoint is registered, or by the Default Zone if the endpoint is not registered.
alternative subzone) if the endpoint is registered, or by the Default Zone if the endpoint is not registered.
By default, zones and subzones are configured as
Do not check credentials.
Task 13: Restricting Access to ISDN Gateways (optional)
VCS users are recommended to take appropriate action to restrict unauthorized access to any ISDN gateway resources
(also known as toll-fraud prevention). This optional step shows some methods in which this can be achieved.
(also known as toll-fraud prevention). This optional step shows some methods in which this can be achieved.
In these examples, an ISDN gateway is registered to the VCS Control with a prefix of 9 (and/or has a neighbour zone
specified that routes calls starting with a 9).
specified that routes calls starting with a 9).
This example shows how to configure the VCS Control to stop calls coming in via the gateway from being able to route
calls back out of the gateway. This is done by loading some specially constructed CPL onto the VCS Control and
configuring its Call policy mode to use
calls back out of the gateway. This is done by loading some specially constructed CPL onto the VCS Control and
configuring its Call policy mode to use
Local CPL.
20
Cisco Single VCS Control - Basic Configuration Deployment Guide