Cisco Cisco TelePresence Video Communication Server Expressway 관리 매뉴얼
Configuring static NAT
You can deploy the VCS Expressway behind a static NAT device, allowing it to have separate public and
private IP addresses. This feature is intended for use in deployments where the VCS Expressway is located
in a DMZ, and has the Advanced Networking feature enabled.
private IP addresses. This feature is intended for use in deployments where the VCS Expressway is located
in a DMZ, and has the Advanced Networking feature enabled.
In these deployments, the externally-facing LAN port has static NAT enabled in order to use both a private
and public IPv4 address; the internally facing LAN port does not have static NAT enabled and uses a single
IPv4 (or IPv6) address.
and public IPv4 address; the internally facing LAN port does not have static NAT enabled and uses a single
IPv4 (or IPv6) address.
In such a deployment, traversal clients should be configured to use the internally-facing IP address of the
VCS Expressway.
VCS Expressway.
To enable the use of a static NAT:
1. Ensure that the Advanced Networking option key is installed.
2. For the externally-facing LAN port:
a. In the IPv4 address field, enter the VCS Expressway's private IP address.
b. Set IPv4 static NAT mode to On.
c. In the IPv4 static NAT address field, enter the VCS Expressway's public IP address - this is the IP
b. Set IPv4 static NAT mode to On.
c. In the IPv4 static NAT address field, enter the VCS Expressway's public IP address - this is the IP
address of the outside of the NAT.
Note: The combination of having static NAT mode on and having the B2BUA engaged to do media
encryption/decryption can cause the firewall outside the VCS Expressway to mistrust packets originating
from the VCS Expressway. You can work around this by configuring the firewall to allow NAT reflection. If
your firewall cannot allow this, you must configure the traversal path such that the B2BUA on the VCS
Expressway is not engaged.
encryption/decryption can cause the firewall outside the VCS Expressway to mistrust packets originating
from the VCS Expressway. You can work around this by configuring the firewall to allow NAT reflection. If
your firewall cannot allow this, you must configure the traversal path such that the B2BUA on the VCS
Expressway is not engaged.
Configuring Ethernet settings
The
Ethernet
page (
System > Ethernet
) is used to configure the speed of the connection between the VCS
and the Ethernet switch to which it is connected. The speed must be set to the same value on both systems.
If you have the Advanced Networking option enabled, you can configure the Ethernet speed separately for
each LAN port.
If you have the Advanced Networking option enabled, you can configure the Ethernet speed separately for
each LAN port.
The default is Auto, which means that the two systems will auto-negotiate the appropriate speed.
Note: we recommend that you use the default value of Auto unless the switch to which you are connecting is
unable to auto-negotiate. A mismatch in Ethernet speed settings between the VCS and Ethernet switch will
at best result in packet loss; at worst it will make the system inaccessible for endpoints and system
administrators.
unable to auto-negotiate. A mismatch in Ethernet speed settings between the VCS and Ethernet switch will
at best result in packet loss; at worst it will make the system inaccessible for endpoints and system
administrators.
Configuring DNS settings
The
DNS
page (
System > DNS
) is used to configure the VCS's DNS servers and DNS settings.
Configuring the system host and domain name
The System host name defines the DNS host name that this VCS is known by.
Cisco TelePresence Video Communication Server Administrator Guide (X8.2)
Page 27 of 542
Network and system settings
Network settings