Cisco Cisco TelePresence Video Communication Server Expressway
Setting up the VCS Expressway
This section describes the configuration steps required on the VCS Expressway.
Configuring DNS and NTP settings
Check and configure the basic system settings on VCS:
1. Ensure that System host name and Domain name are specified (
System > DNS
).
2. Ensure that public DNS servers are specified (
System > DNS
).
3. Ensure that all VCS systems are synchronized to a reliable NTP service (
System > Time
). Use an
Authentication method in accordance with your local policy.
If you have a cluster of VCSs you must do this for every peer.
Configuring the VCS Expressway for Unified Communications
To enable mobile and remote access functionality:
1. Go to
Configuration > Unified Communications > Configuration
.
2. Set Unified Communications mode to Mobile and remote access.
3. Click Save.
Ensuring that TURN services are disabled on VCS Expressway
You must ensure that TURN services are disabled on the VCS Expressway used for mobile and remote
access.
access.
1. Go to
Configuration > Traversal > TURN
.
2. Ensure that TURN services are Off.
Setting up VCS security certificates
This deployment requires secure communications between the VCS Control and the VCS Expressway, and
between the VCS Expressway and endpoints located outside the enterprise. Therefore, you must:
between the VCS Expressway and endpoints located outside the enterprise. Therefore, you must:
1. Install a suitable server certificate on both the VCS Control and the VCS Expressway. The certificate on
each VCS has different requirements for what needs to be included as subject alternate names as
described in
described in
VCS Control / VCS Expressway server certificate requirements
below.
l
The certificate must include the Client Authentication extension. (The system will not allow you to
upload a server certificate without this extension when mobile and remote access is enabled.)
upload a server certificate without this extension when mobile and remote access is enabled.)
l
The VCS includes a built-in mechanism to generate a certificate signing request (CSR) and is the
recommended method for generating a CSR. This CSR includes the client authentication request and
recommended method for generating a CSR. This CSR includes the client authentication request and
Unified Communications: Mobile and Remote Access via Cisco VCS Deployment Guide (X8.1.1)
Page 18 of 36
Configuring mobile and remote access on VCS