Cisco TelePresence Administrator's Manual page 134

Field Description
TLS verify Controls whether the VCS performs X.509 certificate
mode checking against the neighbor system when
communicating over TLS.
Accept Controls whether proxied SIP registrations routed
proxied through this zone are accepted.
registrations
Media Controls the media encryption policy applied by the
encryption VCS for SIP calls (including interworked calls) to and
mode from this zone.
Authentication section:
Authentication Controls how the VCS authenticates incoming
policy messages from this zone and whether they are
subsequently treated as authenticated,
unauthenticated, or are rejected. The behavior varies
for H.323 messages, SIP messages that originate
from a local domain and SIP messages that originate
from non-local domains.
SIP Controls whether authenticated SIP messages (ones
authentication containing a P-Asserted-Identity header) from this
trust mode zone are trusted without further challenge.
Location section:
Location The IP address or FQDN of the neighbor system.
Peer 1 to Peer
Enter the addresses of additional peers if:
6 address
the neighbor is a VCS cluster, in which case you
n
must specify all of the peers in the cluster
the neighbor is a resilient non-VCS system, in
n
which case you must enter the addresses of all of
the resilient elements in that system
Advanced section:
Zone profile Determines how the zone's advanced settings are
configured.
Default: uses the factory default profile.
Custom: allows you to configure each setting
individually.
Alternatively choose one of the preconfigured
profiles to automatically use the appropriate settings
required for connections to that type of system.
Cisco VCS Administrator Guide (X7.2)
Zones and neighbors
Usage tips
If the neighbor system is another VCS,
both systems can verify each other's
certificate (known as mutual
authentication). See TLS certificate
verification of neighbor systems
information.
This setting only applies to registration
requests for a domain for which the VCS
is acting as a Registrar. For requests for
other domains the SIP registration
proxy mode setting applies. See
Proxying registration requests
information.
See Media encryption policy
information.
See Authentication policy configuration
options for more information.
See SIP authentication trust
information.
Calls to a VCS cluster are routed to
whichever peer in that neighboring
cluster has the lowest resource usage.
See Neighboring the local VCS to
another VCS cluster for more
information.
For connections to non-VCS systems,
the VCS uses a round-robin selection
process to decide which peer to contact
if no resource usage information is
available.
See Zone configuration: advanced
settings for details on the Advanced
settings.
Do not use the Custom option or
configure the individual Advanced
settings except on the advice of Cisco
customer support.
Page 134 of 498
for more
for more
for more
for more