Cisco TelePresence Administrator's Manual page 452

Reference material
Zones Zone [1..1000] TraversalClient SIP Poison Mode: <On/Off>
Determines whether SIP requests sent out to this zone will be "poisoned" such that if they are received by the
local VCS again they will be rejected.
On: SIP requests sent out via this zone that are received again by this VCS will be rejected.
Off: SIP requests sent out via this zone that are received by this VCS again will be processed as normal.
Default: Off
Example: xConfiguration Zones Zone 4 TraversalClient SIP Poison Mode: Off
Zones Zone [1..1000] TraversalClient SIP Port: <1024..65534>
Specifies the port on the traversal server to be used for SIP calls from this VCS. If your traversal server is a VCS
Expressway, this must be the port number that has been configured in the traversal server zone for this VCS.
Example: xConfiguration Zones Zone 4 TraversalClient SIP Port: 5061
Zones Zone [1..1000] TraversalClient SIP Protocol: <Assent/TURN/ICE>
Determines which firewall traversal protocol will be used for SIP calls to and from the traversal server. Note: the
same protocol must be set on the server for calls to and from this traversal client.
Default: Assent
Example: xConfiguration Zones Zone 4 TraversalClient SIP Protocol: Assent
Zones Zone [1..1000] TraversalClient SIP TLS Verify Mode: <On/Off>
Controls X.509 certificate checking and mutual authentication between this VCS and the traversal server. When
enabled, the server's FQDN or IP address, as specified in the Peer address field, must be contained within the
server's X.509 certificate (in either the Subject Common Name or the Subject Alternative Name attributes).
Default: Off
Example: xConfiguration Zones Zone 4 TraversalClient SIP TLS Verify Mode: On
Zones Zone [1..1000] TraversalClient SIP Transport: <TCP/TLS>
Determines which transport type will be used for SIP calls to and from the traversal server.
Default: TLS
Example: xConfiguration Zones Zone 4 TraversalClient SIP Transport: TLS
Zones Zone [1..1000] TraversalServer Authentication Mode:
<DoNotCheckCredentials/TreatAsAuthenticated/CheckCredentials>
Controls how the VCS authenticates incoming messages from this zone and whether they are subsequently
treated as authenticated, unauthenticated, or are rejected. The behavior varies for H.323 messages, SIP
messages that originate from a local domain and SIP messages that originate from non-local domains. See the
online help for full details about each of the Authentication Policy options.
Default: DoNotCheckCredentials
Example: xConfiguration Zones Zone 5 TraversalServer Authentication Mode:
DoNotCheckCredentials
Zones Zone [1..1000] TraversalServer Authentication UserName: <S: 0,128>
The name used by the traversal client when authenticating with the traversal server. If the traversal client is a
VCS, this must be the VCS's authentication user name. If the traversal client is a gatekeeper, this must be the
gatekeeper's System Name. For other types of traversal clients, refer to the VCS Admin Guide for further
information.
Example: xConfiguration Zones Zone 5 TraversalServer Authentication UserName: "User123"
Cisco VCS Administrator Guide (X7.2) Page 452 of 498