#Login local on cisco ios xe password#
STUN password is a prerequisite for the local gateway to send STUN messages out. This helps in opening up the pinhole in the firewall. The STUN bindings feature on the local gateway allows locally generated STUN requests to be sent over the negotiated media When a call is forwarded back to a Webex Calling user (for example, both the called and calling parties are Webex Calling subscribers and have the media anchored at the Webex Calling SBC), the media cannot flow to the local gateway as the pinhole isn't open. Stun flowdata shared-secret 0 Password123$ No supplementary-service sip handle-replacesĭisables REFER and replaces dialog ID in Replaces header with the peer dialog ID.įax Protocol fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback noneĮnables T.38 for fax transport, though the fac traffic will not be encrypted. Supplementary Services no supplementary-service sip refer SIP-to-SIP Basic Functionality allow-connections sip to sipīy default, IOS/IOS-XE voice devices do not allow an incoming VoIP leg to go out as VoIP. Media bulk-stats enables the control plane to poll the data plane for bulk call statistics. Media Statistics enables media monitoring on the local gateway. IP addresses must match the IP of hosts the outbound-proxy resolves to in tenant 200 Other IP addresses may need to be configured on other interfaces for example, your Unified CM addresses may need to be added
Your longer term configuration overhead, because we cannot guarantee that the addresses of the Webex Calling peers will remain fixed, and you would need to configure your firewall for the peers in any case. This is because the firewall already protects you from unsolicited inbound VoIP. If your LGW is behind a firewall with restricted cone NAT, you may prefer to disable the IP address trusted list on the Webex Calling-facing interface. This CLI allows the admin to change the value to accommodate network conditionsĪnd detect connection failures with the Access SBC much faster). To the next available Webex Calling Access SBC. (LGW takes 20 seconds to detect the TLS connection failure before it attempts to establish a connection Range is between 5 and 20 seconds and theĭefault is 20 seconds. (IOS-XE 17.3.2 and later) Set timers connection establish tls. Set tcp-retry count to 1000 (5 msec multiples = 5 seconds). The crypto trustpoint is needed for TLS to work even though a local client certificate (for example, mTLS) is not requiredĭisable TLS v1.0 and v1.1 by enabling v1.2 exclusivity. LocalGateway(config)# ip name-server 8.8.8.8Įnable TLS 1.2 Exclusivity and a default placeholder Trustpoint:Ĭreate a placeholder PKI Trustpoint and call it sampleTPĪssign the trustpoint as the default signaling trustpoint under sip-uaĬn-san-validate server is needed to ensure that the local gateway establishes the connection only if the outbound proxy configured on the tenant 200 (described later) matches with CN-SAN list received from the server. Enter configuration commands, one per line.
0 kommentar(er)
