Cisco TelePresence Administrator's Manual page 106

Device authentication
Policy Trust In local domain
Check Off Messages are challenged for
credentials authentication.
Messages that fail authentication are
rejected.
Messages that pass authentication are
classified as authenticated and a P-
Asserted-Identity header is inserted into
the message.
On Messages with an existing P-Asserted-
Identity header are classified as
authenticated, without further challenge.
The P-Asserted-Identity header is passed
on unchanged (keeping the originator's
asserted ID).
Messages without an existing P-Asserted-
Identity header are challenged. If
authentication passes, the message is
classified as authenticated and a P-
Asserted-Identity header is inserted into
the message. If authentication fails, the
message is rejected.
Do not check Off Messages are not challenged for
credentials authentication.
All messages are classified as
unauthenticated.
Any existing P-Asserted-Identity headers
are removed.
On Messages are not challenged for
authentication.
Messages with an existing P-Asserted-
Identity header are classified as
authenticated, and the header is passed
on unchanged.
Messages without an existing P-Asserted-
Identity header are classified as
unauthenticated.
Treat as Off Messages are not challenged for
authenticated authentication.
All messages are classified as
authenticated.
Any existing P-Asserted-Identity header is
removed and a new one containing the
VCS's originator ID is inserted into the
message.
Cisco VCS Administrator Guide (X8.1.1)
About device authentication
Outside local domain
Messages are not challenged for
authentication.
All messages are classified as
unauthenticated.
Any existing P-Asserted-Identity headers
are removed.
Messages are not challenged for
authentication.
Messages with an existing P-Asserted-
Identity header are classified as
authenticated, and the header is passed
on unchanged.
Messages without an existing P-Asserted-
Identity header are classified as
unauthenticated.
Messages are not challenged for
authentication.
All messages are classified as
unauthenticated.
Any existing P-Asserted-Identity headers
are removed.
Messages are not challenged for
authentication.
Messages with an existing P-Asserted-
Identity header are classified as
authenticated, and the header is passed
on unchanged.
Messages without an existing P-Asserted-
Identity header are classified as
unauthenticated.
Messages are not challenged for
authentication.
All messages are classified as
unauthenticated.
Any existing P-Asserted-Identity headers
are removed.
Page 106 of 507