Cisco Cisco TelePresence Video Communication Server Expressway
3. Configure the following fields (leave all other fields with default values):
Rule name
An appropriate name, for example "Route domain xxx to Lync gateway"
Priority
Leave as default, for example 100
Source
Any
Mode
Alias pattern match
Pattern type
Regex
Pattern string
.+@<relevant domain>.*
Pattern behavior
Leave
On successful match
Stop
Target
Select the Lync gateway zone, for example "To Lync gateway"
4. Click Create search rule.
5. Repeat the process if additional search rules are needed, for example a search rule for the dedicated MCU
domain mcu.ciscotp.com.
"Lync gateway" VCS configuration (part 1)
This comprises the following steps:
1. Load CA certificate and server certificate onto VCS for TLS connectivity with Lync.
2. Configure DNS.
3. Ensure that a cluster name is configured.
4. Configure an NTP server.
5. Ensure that TLS is enabled in SIP configuration.
We recommend that you use TLS connectivity between VCS and Lync. (TCP may not work for Lync
configurations that include HLBs and / or Lync Director and the use of TCP prevents the use of encryption).
configurations that include HLBs and / or Lync Director and the use of TCP prevents the use of encryption).
If the "Lync gateway" is a cluster, unless this guide states that configuration is required on each peer,
configure the master "Lync gateway" VCS in the cluster and allow the configuration to be replicated to the
other peers automatically. If the "Lync gateway" is just a single VCS then set up the configuration on that
"Lync gateway" VCS.
configure the master "Lync gateway" VCS in the cluster and allow the configuration to be replicated to the
other peers automatically. If the "Lync gateway" is just a single VCS then set up the configuration on that
"Lync gateway" VCS.
"Lync gateway" VCS: Load CA certificate and server certificate (if using
TLS to Lync)
TLS to Lync)
Obtain and load the CA certificate, server certificate and private key onto the VCS. Note that for mutual TLS
authentication the server certificate must be capable of being used as a client certificate as well.
authentication the server certificate must be capable of being used as a client certificate as well.
A certificate must be created for each "Lync gateway" VCS; the certificate must specify:
n
Subject Name: the VCS peer’s FQDN e.g. vcs01.ciscotp.com
and if it is part of a cluster:
n
Subject Alternate Name: a comma separated list of the VCS cluster’s FQDN and the VCS peer’s
routable FQDN, e.g. lyncvcs.ciscotp.com, vcs01.ciscotp.com
routable FQDN, e.g. lyncvcs.ciscotp.com, vcs01.ciscotp.com
Cisco TelePresence Microsoft Lync and Cisco VCS Deployment Guide (X8.2)
Page 24 of 80
Enabling endpoints registered on the video network to call clients registered on Lync