Configuring Policy Services - Cisco TelePresence Administrator's Manual

Configuring policy services

The Policy services page
external policy services that can be used as a target of the VCS's search rules. The page lists all the
currently configured policy services and lets you create, edit and delete services. Up to 5 policy services can
be configured.
The configurable options are:
Field Description
Name The name of the policy service.
Description An optional free-form description of the policy
service.
Protocol The protocol used to connect to the policy service. The VCS automatically supports HTTP to
Certificate Controls whether the certificate presented by the
verification policy service is verified when connecting over
mode HTTPS.
HTTPS Controls certificate revocation list checking of the
certificate certificate supplied by the policy service.
revocation list
When enabled, the server's X.509 certificate is
(CRL)
checked against the HTTPS certificate revocation
checking
list.
Server The IP address or Fully Qualified Domain Name
address 1 - 3 (FQDN) of the service. You can specify a port by
appending :<port> to the address.
Path The URL of the service.
Status path The path for obtaining the remote service status.
Username The username used by the VCS to log in and
query the service.
Password The password used by the VCS to log in and
query the service.
The maximum plaintext length is 30 characters
(which is subsequently encrypted).
Default CPL The default CPL used by the VCS if the policy
service is unavailable.
See About policy services
Cisco VCS Administrator Guide (X7.1)
(VCS configuration > Dial plan > Policy
for more information.
Dial plan and call processing
services) is used to configure the
Usage tips
The description appears as a tooltip if you
hover your mouse pointer over a policy
service in the list.
HTTPS redirection when communicating
with the policy service server.
When enabled, the value specified in the
Server address field must be contained
within the server's X.509 certificate (in either
the Subject Common Name or the Subject
Alternative Name attributes).
Use the CRL management
configure how the VCS uploads CRL files.
For resiliency, up to three server addresses
can be supplied.
This defaults to <reject status='403'
reason='Service Unavailable'/> but
you could change it, for example, to redirect
to an answer service or recorded message.
page to
Page 171 of 479