About Allow And Deny Lists; Configuring The Registration Allow List - Cisco TelePresence Administrator's Manual

About Allow and Deny Lists

When an endpoint attempts to register with the VCS it presents a list of aliases. One of the methods provided
by the VCS to control which endpoints are allowed to register is to set the Restriction policy (on the
Configuring registration restriction policy
endpoint's aliases on the Allow List or the Deny List as appropriate. Each list can contain up to 2,500 entries.
When an endpoint attempts to register, each of its aliases is compared with the patterns in the relevant list to
see if it matches. Only one of the aliases needs to appear in the Allow List or the Deny List for the registration
to be allowed or denied.
For example, if the Restriction policy is set to Deny List and an endpoint attempts to register using three
aliases, one of which matches a pattern on the Deny List, that endpoint's registration will be denied.
Likewise, if the Restriction policy is set to Allow List, only one of the endpoint's aliases needs to match a
pattern on the Allow List for it to be allowed to register using all its aliases.
Allow Lists and Deny Lists are mutually exclusive: only one may be in use at any given time. You can also
control registrations at the
deny registrations assigned to it via the subzone membership rules.

Configuring the registration Allow List

The Registration Allow List
aliases and alias patterns that are allowed to register with the VCS. Only one of an endpoint's aliases needs
to match an entry in the Allow List for the registration to be allowed.
To use the Allow List, you must select a Restriction policy of Allow List on the
page.
The configurable options are:
Field Description
Pattern The pattern against which an
alias is compared.
Type The way in which the Pattern
must match the alias. Options
are:
Exact: the alias must match the
Pattern exactly.
Prefix: the alias must begin
with the Pattern.
Suffix: the alias must end with
the Pattern.
Regex: the Pattern is a
regular expression.
Description An optional free-form
description of the entry.
Cisco VCS Administrator Guide (X7.1)
page) to Allow List or Deny List and then to include any one of the
subzone level. Each subzone's registration policy can be configured to allow or
page (VCS configuration > Registration > Allow
Usage tips
You can test whether a pattern matches a particular alias by using
the Check pattern
List) shows the endpoint
Registration configuration
tool (Maintenance > Tools > Check
Registration control
pattern).
Page 93 of 479