Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VCS Expressway placement

Hi,

I am doing a new implementation at one of client location, below are devices:

1. TMS 14.3 with tmep  1.1

2. VCS-c  x7.2.1

3. VCS-e x7.2.1

Need your suggestion on configuration of VCS-e, i don't have dule Nic card lic.

n/w goes like this client have one firewall sonicwall 4500 , 6 port. behind that having only one n/w subnet.

I have configured TMS and VCS-c and things are working fine for internal endpoints.

TMS (192.168.10.32) ---- VCS-s(192.168.10.40)----VCS-e(192.168.10.217) got static 1 to 1 net at firewall with public ip 203.x.x.x

when i am pointing traversal client zone towards local ip of VCS-e i.e 192.168.10.217 both SIP and H323 connections are ok , but i am not able to register any endpoint to VCS-e Jabber is also not able to login.

Same way if i am pointing traversal client zone towards Public ip i.e. 203.x.x.x  at VCS-s end both SIP and H.323 both protocols are up ,, but at VCS-e end only H.323 protocol is up SIP says failed. In this conf. also i am not able  to register any endpoint at VCS-e.

Please suggest if  both VCS-c and VCS-e and same subnet will work out or i need to look for some other concept.

Thanks

Rishu

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions

VCS Expressway placement

Are you using TLS or TCP?

Check that all the required ports are open:

http://www.cisco.com/en/US/docs/telepresence/infrastructure/vcs/config_guide/Cisco_VCS_IP_Port_Usage_for_Firewall_Traversal_Deployment_Guide_X7-2.pdf

Disable all layer-3 awareness for sip&h323 in your network., its often called ALG, Nat-Helper,

Protocol instpection, ....

Please remember to rate helpful responses and identify helpful or correct answers.

Please remember to rate helpful responses and identify

4 REPLIES

VCS Expressway placement

If the outside IP of a VCS is NATed it requires the dual interface option kit, even if only one interface is used.

Also the communication must go to the outside ip address (in your case for example the destination for the traversal zone).

(which often causes that really the second interface will be used as well ;-)

It is handy for statistics if the VCS-E has the capability to talk to the TMS, but its not neccessary.

(that woulre require the VCS to contact the TMS on TCP/80,443

Besdies that its the in/out communication from/to the outside and the traversal zone which is only

to the VCS-E and related answers back in.

You have multiple options

* either getting the dual interface option and use NAT

* fix your network so you get a DMZ with public ips where you place the VCS-E inside.

* place the vcs in any kind of datacenter with public ips

* use a service provider to provide you vcs-e connectivity

Please remember to rate helpful responses and identify helpful or correct answers.

Please remember to rate helpful responses and identify

New Member

VCS Expressway placement

Hi Martin,

Thanks for reply, it is not possible for me t get dual interface option also i can't place VCS-e out side client location.

-lastly i have a option place it behind firewall and assign it a public IP, ans poiting traversal zone towards public IP 203.x.x.x.

in that  case at VCS-c traversal client zone both SIP and H323 protocols are up and at VCS-e SIp say " failed to connect" but H.323 to fine .

Any that i can check on that part please suggest.

Thanks

Rishu

VCS Expressway placement

Are you using TLS or TCP?

Check that all the required ports are open:

http://www.cisco.com/en/US/docs/telepresence/infrastructure/vcs/config_guide/Cisco_VCS_IP_Port_Usage_for_Firewall_Traversal_Deployment_Guide_X7-2.pdf

Disable all layer-3 awareness for sip&h323 in your network., its often called ALG, Nat-Helper,

Protocol instpection, ....

Please remember to rate helpful responses and identify helpful or correct answers.

Please remember to rate helpful responses and identify

New Member

VCS Expressway placement

Thanks Martin,

It was somthing related to firewall , i got public IP for VCS-e and now its working.

I have one requirement from client,, they are having one Ex90 system that is used for monitoring of Hospital ICU's ,, ICU systems are C20 and dont have any monitor installed, all c20 systems are on auto answer.

Whenever Doctors from from Command center calls C20 it will getting auto answered and they can monitor full ICU.

Problem is if any one dial to C20 system from there I-pad,  from EX90 they cant connect,is there any work arround in VCS that when we are a call from command center ussing Ex90 , one to one between C20 and I-pad get disconnect and Ex90 will connect automatically.

Rishu

489
Views
0
Helpful
4
Replies