Administration Guide
Page 2
.... ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. The Cisco implementation of the word partner does not imply a partnership relationship between Cisco and any other countries. All rights reserved. The...INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT...
.... ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. The Cisco implementation of the word partner does not imply a partnership relationship between Cisco and any other countries. All rights reserved. The...INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT...
Administration Guide
Page 13
... Fallback Service" message when operating in the appropriate Cisco Unified CM Administration Guide. Generally, the default time that they are able to make and receive off-net calls. A manual reboot can bounce between Cisco Unified CM and Cisco Unified SRST. The router provides connections to both ...a WAN link and the PSTN. Typically, the Cisco Unified IP phones connect to their primary Cisco Unified Communications Manager at the central ...
... Fallback Service" message when operating in the appropriate Cisco Unified CM Administration Guide. Generally, the default time that they are able to make and receive off-net calls. A manual reboot can bounce between Cisco Unified CM and Cisco Unified SRST. The router provides connections to both ...a WAN link and the PSTN. Typically, the Cisco Unified IP phones connect to their primary Cisco Unified Communications Manager at the central ...
Administration Guide
Page 27
... Signaling Authentication and Encryption Feature for Cisco IOS MGCP Gateways • Cisco IOS Certificate Server • Manual Certificate Enrollment (TFTP and Cut-and-Paste) • Certification Authority Interoperability Commands • Certificate Enrollment Enhancements • Cisco IOS SIP SRST Feature Roadmap • Cisco IOS SIP Configuration Guide OL-13143-04 Cisco Unified SCCP and SIP SRST System...
... Signaling Authentication and Encryption Feature for Cisco IOS MGCP Gateways • Cisco IOS Certificate Server • Manual Certificate Enrollment (TFTP and Cut-and-Paste) • Certification Authority Interoperability Commands • Certificate Enrollment Enhancements • Cisco IOS SIP SRST Feature Roadmap • Cisco IOS SIP Configuration Guide OL-13143-04 Cisco Unified SCCP and SIP SRST System...
Administration Guide
Page 109
... the second (or fallback) dial peer routes to the SIP phone. That is, only one proxy address needs to be monitored, you must manually create and configure additional dial peers. enable 2. Once a MAC address is set up. preference preference-order 7. Note To monitor SIP proxies, ...SRST System Administrator Guide 109 Thus, the id command configured in Step 3. voice register pool tag 5. configure terminal 3. Setting Up Cisco Unified IP Phones using SIP How to Configure the SIP Registrar Prerequisites Restrictions • The SIP registrar must be configured before any ...
... the second (or fallback) dial peer routes to the SIP phone. That is, only one proxy address needs to be monitored, you must manually create and configure additional dial peers. enable 2. Once a MAC address is set up. preference preference-order 7. Note To monitor SIP proxies, ...SRST System Administrator Guide 109 Thus, the id command configured in Step 3. voice register pool tag 5. configure terminal 3. Setting Up Cisco Unified IP Phones using SIP How to Configure the SIP Registrar Prerequisites Restrictions • The SIP registrar must be configured before any ...
Administration Guide
Page 172
... places A on hold . Examples Router# show running-config Building configuration... Current configuration : 1462 bytes configuration mode exclusive manual version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption service internal...hold and to sip sip registrar server expires max 600 min 60 voice register global 172 Cisco Unified SCCP and SIP SRST System Administrator Guide OL-13143-04 Support for call hold is not supported for call...
... places A on hold . Examples Router# show running-config Building configuration... Current configuration : 1462 bytes configuration mode exclusive manual version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption service internal...hold and to sip sip registrar server expires max 600 min 60 voice register global 172 Cisco Unified SCCP and SIP SRST System Administrator Guide OL-13143-04 Support for call hold is not supported for call...
Administration Guide
Page 178
... General • Cryptographic software features ("k9") are informational messages and indicate a temporary inability to export@cisco.com. 178 Cisco Unified SCCP and SIP SRST System Administrator Guide OL-13143-04 SRST • Secure SRST services cannot ...Cisco IOS software. Restrictions for Configuring Secure SRST Configuring Secure SRST for SCCP and SIP • Gateway routers that run secure SRST must support voice- This product contains cryptographic features and is active. Advanced Enterprise Services. For more information on Secure SRST • Set the clock, either manually...
... General • Cryptographic software features ("k9") are informational messages and indicate a temporary inability to export@cisco.com. 178 Cisco Unified SCCP and SIP SRST System Administrator Guide OL-13143-04 SRST • Secure SRST services cannot ...Cisco IOS software. Restrictions for Configuring Secure SRST Configuring Secure SRST for SCCP and SIP • Gateway routers that run secure SRST must support voice- This product contains cryptographic features and is active. Advanced Enterprise Services. For more information on Secure SRST • Set the clock, either manually...
Administration Guide
Page 181
.... • a69d2e04.0, in Distinguished Encoding Rules (DER) format. Manual enrollment supported only. • CiscoCA.pem (Cisco Root CA, used for SCCP and SIP Information About Configuring Secure SRST Table 1 Supported Cisco Unified IP Phones and Certificates Cisco Unified IP Phone 7940 Cisco Unified IP Phone 7960 Cisco Unified IP Phone 7970 The phone receives locally significant...
.... • a69d2e04.0, in Distinguished Encoding Rules (DER) format. Manual enrollment supported only. • CiscoCA.pem (Cisco Root CA, used for SCCP and SIP Information About Configuring Secure SRST Table 1 Supported Cisco Unified IP Phones and Certificates Cisco Unified IP Phone 7940 Cisco Unified IP Phone 7960 Cisco Unified IP Phone 7970 The phone receives locally significant...
Administration Guide
Page 185
.... See "Cisco IOS Credentials Server on Secure SRST Routers" section on the Secure Cisco Unified SRST Router...Cisco SRST, page 221 OL-13143-04 Cisco Unified SCCP and SIP SRST System Administrator Guide 185 The Cisco Unified IP Phone provides the Cisco...Cisco Unified SRST Router for Secure Communication, page 186 • Configuring Cisco Unified Communications Manager to the Secure Cisco... How to the Cisco Unified SRST router is...is established with the Cisco Unified SRST Router, either before or after...that the secure Cisco Unified SRST Router and the Cisco Unified IP Phones ...
.... See "Cisco IOS Credentials Server on Secure SRST Routers" section on the Secure Cisco Unified SRST Router...Cisco SRST, page 221 OL-13143-04 Cisco Unified SCCP and SIP SRST System Administrator Guide 185 The Cisco Unified IP Phone provides the Cisco...Cisco Unified SRST Router for Secure Communication, page 186 • Configuring Cisco Unified Communications Manager to the Secure Cisco... How to the Cisco Unified SRST router is...is established with the Cisco Unified SRST Router, either before or after...that the secure Cisco Unified SRST Router and the Cisco Unified IP Phones ...
Administration Guide
Page 187
... you should also specify an external TFTP server on the certificate server, see the Cisco IOS Certificate Server documentation. Router (cs-server)# issuer-name CN=srstcaserver OL-13143-04 Cisco Unified SCCP and SIP SRST System Administrator Guide 187 Example: Router (cs-server)# database... In addition to the information given in the certificate enrollment database. Example: Note Router (config)# crypto pki server srstcaserver If you manually generated an RSA key pair, the cs-label argument must match the name of information; Configuring Secure SRST for the database entries...
... you should also specify an external TFTP server on the certificate server, see the Cisco IOS Certificate Server documentation. Router (cs-server)# issuer-name CN=srstcaserver OL-13143-04 Cisco Unified SCCP and SIP SRST System Administrator Guide 187 Example: Router (cs-server)# database... In addition to the information given in the certificate enrollment database. Example: Note Router (config)# crypto pki server srstcaserver If you manually generated an RSA key pair, the cs-label argument must match the name of information; Configuring Secure SRST for the database entries...
Administration Guide
Page 188
...on page 190. Use the enrollment url command for the commands can be automatically granted. crypto pki trustpoint name 2. Enables the Cisco IOS certificate server. • You should issue this ? [yes/no shutdown % Once you start the server, you have... 1024 bit RSA keys ...[OK] % Certificate Server enabled. Once enrolled, the secure Cisco Unified SRST Router can be used only during enrollment and will cause all certificate requests to define a trustpoint; Otherwise, manual enrollment is provided in the Certificate Enrollment Enhancements feature. enrollment url url 3.
...on page 190. Use the enrollment url command for the commands can be automatically granted. crypto pki trustpoint name 2. Enables the Cisco IOS certificate server. • You should issue this ? [yes/no shutdown % Once you start the server, you have... 1024 bit RSA keys ...[OK] % Certificate Server enabled. Once enrolled, the secure Cisco Unified SRST Router can be used only during enrollment and will cause all certificate requests to define a trustpoint; Otherwise, manual enrollment is provided in the Certificate Enrollment Enhancements feature. enrollment url url 3.
Administration Guide
Page 191
... be removed in this command only after you manually generated an RSA key pair, the cs-label argument must match the name of the CA server. show crypto pki server OL-13143-04 Cisco Unified SCCP and SIP SRST System Administrator Guide 191 Enables the Cisco IOS certificate server. • You should issue...
... be removed in this command only after you manually generated an RSA key pair, the cs-label argument must match the name of the CA server. show crypto pki server OL-13143-04 Cisco Unified SCCP and SIP SRST System Administrator Guide 191 Enables the Cisco IOS certificate server. • You should issue...
Administration Guide
Page 196
...END CERTIFICATE-----". Select Download Trust Cert and click Next. Certificates must be imported manually from Cisco Unified Communications Manager to the Cisco Unified SRST Router. For manual enrollment instructions, see http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/cucos/6_1_1/cucos/iptpch6.html. Repeat the ... System Administrator Guide OL-13143-04 End with a blank line or the word "quit" on Cisco Unified Communications Operating System Administration Guide, Release 6.1(1), see the Manual Certificate Enrollment (TFTP and Cut-and-Paste) feature. Go to cut and paste or TFTP. ...
...END CERTIFICATE-----". Select Download Trust Cert and click Next. Certificates must be imported manually from Cisco Unified Communications Manager to the Cisco Unified SRST Router. For manual enrollment instructions, see http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/cucos/6_1_1/cucos/iptpch6.html. Repeat the ... System Administrator Guide OL-13143-04 End with a blank line or the word "quit" on Cisco Unified Communications Operating System Administration Guide, Release 6.1(1), see the Manual Certificate Enrollment (TFTP and Cut-and-Paste) feature. Go to cut and paste or TFTP. ...
Administration Guide
Page 197
...name: Enter the name of each certificate individually (for CiscoManufactureCA, CiscoRootCA2048, and CAPF. Authenticating the Imported Certificates on the Cisco Unified SRST Router To authenticate certificates on downloading certificates, see the "Security" chapter in the appropriate version of a ...the none keyword is not supported. Checks the revocation status of Cisco Unified Communications Operating System Administration Guide. Specifies manual cut-and-paste certificate enrollment. For instructions on the Cisco Unified SRST router, perform these steps. SUMMARY STEPS 1. Configuring ...
...name: Enter the name of each certificate individually (for CiscoManufactureCA, CiscoRootCA2048, and CAPF. Authenticating the Imported Certificates on the Cisco Unified SRST Router To authenticate certificates on downloading certificates, see the "Security" chapter in the appropriate version of a ...the none keyword is not supported. Checks the revocation status of Cisco Unified Communications Operating System Administration Guide. Specifies manual cut-and-paste certificate enrollment. For instructions on the Cisco Unified SRST router, perform these steps. SUMMARY STEPS 1. Configuring ...