Authentication Controls - Cisco TelePresence Administrator's Manual

Protocols
Field Description
Outbound The maximum allowed value for a SIP registration refresh
registration period for an outbound registration. Requests for a value
refresh greater than this will result in a lower value being returned
maximum (calculated according to the Outbound registration
refresh strategy). The default is 3600 seconds.
SIP Specifies how proxied registrations and requests
registration containing Route Sets are handled when the VCS
proxy mode receives a registration request for a domain for which it is
not acting as a Registrar.
Off: registration requests are not proxied (but are still
permitted locally if the VCS is authoritative as a Registrar
for that domain). Requests with existing Route Sets are
rejected.
Proxy to known only: registration requests are proxied in
accordance with existing call processing rules, but only
to known neighbor, traversal client and traversal server
zones. Requests containing Route Sets are proxied only
if they were received from a known zone.
Proxy to any: registration requests are proxied in
accordance with existing call processing rules to all
known zones. Requests containing Route Sets are
always proxied.
The default is Off.

Authentication controls

This section contains the device authentication controls for enabling delegated credential checking. The
configurable options are:
Field Description
Delegated Controls whether the credential checking of SIP
credential messages is delegated, via a traversal zone, to another
checking VCS.
Off: use the relevant credential checking mechanisms
(local database, Active Directory Service or H.350
directory via LDAP) on the VCS performing the
authentication challenge.
On: delegate the credential checking to a traversal client.
The default is Off.
Cisco VCS Administrator Guide (X8.1.1)
Configuring SIP
Usage tips
See Proxying registration requests
[p.83] for more information.
Usage tips
Note that delegated credential
checking must be enabled on both
the traversal server and the
traversal client.
See delegated credential checking
for more information.
Page 87 of 507