Cisco TelePresence Administrator's Manual page 148

Zones and neighbors
Field Description
H.460.19 Determines whether or not the same two ports are
demultiplexing used for media by two or more calls.
mode
On: all calls from the traversal client use the same
two ports for media.
Off: each call from the traversal client uses a
separate pair of ports for media.
SIP section:
Mode Determines whether SIP calls are allowed to and
from the traversal client.
Port The port on the local VCS Expressway to use for
SIP calls to and from the traversal client.
Transport Determines which transport type is used for SIP
calls to and from the traversal client. The default is
TLS.
Unified Controls whether this traversal zone provides
Communications Unified Communications services, such as mobile
services and remote access.
TLS verify mode Controls X.509 certificate checking and mutual
and subject authentication between this VCS and the traversal
name client.
If TLS verify mode is enabled, a TLS verify
subject name must be specified. This is the
certificate holder's name to look for in the traversal
client's X.509 certificate.
Accept proxied Controls whether proxied SIP registrations routed
registrations through this zone are accepted.
Media Controls the media encryption policy applied by the
encryption mode VCS for SIP calls (including interworked calls) to
and from this zone.
ICE support Controls whether ICE messages are supported by
the devices in this zone.
Poison mode Determines if SIP requests sent to systems located
via this zone are "poisoned" such that if they are
received by this VCS again they will be rejected.
Authentication section:
Cisco VCS Administrator Guide (X8.1.1)
Configuring zones
Usage tips
This must be different from the listening
ports used for incoming TCP, TLS and
UDP SIP calls (typically 5060 and
5061).
If enabled, this zone must also be
configured to use TLS with TLS verify
mode enabled.
This setting only applies when
Communications mode is set to Mobile
and remote access.
If the traversal client is clustered, the
TLS verify subject name must be the
FQDN of the cluster.
See TLS certificate verification of
neighbor systems [p.155] for more
information.
This setting only applies to registration
requests for a domain for which the
VCS is acting as a Registrar. For
requests for other domains the SIP
Registration Proxy Mode setting
applies. See Proxying registration
requests for more information.
See Configuring media encryption
policy [p.135] for more information.
See Configuring ICE messaging
support [p.137] for more information.
Unified
Page 148 of 507