Configuring Policy Services - Cisco TelePresence Administrator's Manual

Configuring policy services

The Policy services page
external policy services that can be used as a target of the VCS's search rules. The page lists all the
currently configured policy services and lets you create, edit and delete services. Up to 20 policy services
can be configured.
For each service you can specify:
the service name and description
n
the protocol to use when connecting to the service
n
certificate and CRL checking requirements when communicating with the server
n
up to 3 server addresses
n
the path to the service, and the path for obtaining the service status
n
any required username and password connection credentials
n
default CPL to use if the policy service is unavailable
n
The configurable options are:
Field Description
Name The name of the policy service.
Description An optional free-form description of the policy
service.
Protocol The protocol used to connect to the policy service. The VCS automatically supports HTTP to
Certificate Controls whether the certificate presented by the
verification policy service is verified when connecting over
mode HTTPS.
HTTPS Controls certificate revocation list checking of the
certificate certificate supplied by the policy service.
revocation list
When enabled, the server's X.509 certificate is
(CRL)
checked against the HTTPS certificate revocation
checking
list.
Server The IP address or Fully Qualified Domain Name
address 1 - 3 (FQDN) of the service. You can specify a port by
appending :<port> to the address.
Path The URL of the service.
Status path The path for obtaining the remote service status.
Username The username used by the VCS to log in and
query the service.
Cisco VCS Administrator Guide (X7.2)
(VCS configuration > Dial plan > Policy
Dial plan and call processing
services) is used to configure the
Usage tips
The description appears as a tooltip if you
hover your mouse pointer over a policy
service in the list.
HTTPS redirection when communicating
with the policy service server.
When enabled, the value specified in the
Server address field must be contained
within the server's X.509 certificate (in either
the Subject Common Name or the Subject
Alternative Name attributes).
Use the CRL management
configure how the VCS uploads CRL files.
For resiliency, up to three server addresses
can be supplied.
page to
Page 184 of 498