Cisco Cisco TelePresence Video Communication Server Expressway 관리 매뉴얼
Device authentication
Cisco VCS Administrator Guide (X7.2)
Page 105 of 498
Device provisioning and authentication policy
VCS X7.1 and X7.2 supports two provisioning modes:
n
TMS Provisioning Extension mode
n
TMS Agent legacy mode
The Provisioning Server (hosted on the VCS) has different device authentication requirements depending on
the provisioning mode.
the provisioning mode.
TMS Provisioning Extension mode
The Provisioning Server requires that any provisioning or phone book requests it receives have already been
authenticated at the zone or subzone point of entry into the VCS. The Provisioning Server does not do its
own authentication challenge and will reject any unauthenticated messages.
authenticated at the zone or subzone point of entry into the VCS. The Provisioning Server does not do its
own authentication challenge and will reject any unauthenticated messages.
The following diagram shows the flow of provisioning messages from an endpoint to the Provisioning Server,
together with the credential checking processes:
together with the credential checking processes:
The VCS must be configured with appropriate device authentication settings, otherwise provisioning-related
messages will be rejected:
messages will be rejected:
n
Initial provisioning authentication (of a subscribe message) is controlled by the authentication policy setting
on the Default Zone. (The Default Zone is used as the device is not yet registered.)
on the Default Zone. (The Default Zone is used as the device is not yet registered.)