book

Authorized Self-Study Guide Cisco IP Telephony (CIPT), Second Edition

Name: Authorized Self-Study Guide Cisco IP Telephony (CIPT), Second Edition
Author: Jeremy D. Cioara - CCIE No. 11727
ISBN: 9781587052613

by Jeremy D. Cioara - CCIE No. 11727

October 2006

Intermediate to advanced

912 pages

19h 19m

English

Cisco Press

Read now

Unlock full access

Copyright
Dedications
About the Author
About the Technical Reviewers
Acknowledgments
Icons Used in This Book
Command Syntax Conventions
Foreword
Introduction
Goals and MethodsWho Should Read This Book?How This Book Is Organized
I. Cisco CallManager Fundamentals
1. Introduction to Cisco Unified Communications and Cisco Unified CallManager
Cisco Unified CommunicationsUnderstanding Cisco Unified CallManagerCisco Unified CallManager and IP Phone InteractionThe Components of Cisco Unified CallManagerCisco Unified CallManager ServersSummaryReview Questions

2. Cisco Unified CallManager Clustering and Deployment Options
The Two Sides of the Cisco Unified CallManager ClusterThe SQL Database ClusterIntracluster Run-Time DataCluster Redundancy Designs1:1 Redundancy Design2:1 Redundancy DesignCall-Processing Deployment ModelsSingle-Site DeploymentMultisite Deployment with Centralized Call ProcessingMultisite Deployment with Distributed Call ProcessingClustering over the IP WANSummaryReview Questions
3. Cisco Unified CallManager Installation and Upgrades
Cisco Unified CallManager 4.x Clean Installation ProcessInstallation DisksInstallation Configuration DataSample Configuration Data WorksheetPostinstallation ProceduresActivating Cisco Unified CallManager ServicesUpgrading Prior Cisco Unified CallManager VersionsSummaryReview Questions
II. IPT Devices and Users
4. Cisco IP Phones and Other User Devices
Cisco IP PhonesEntry-Level Cisco IP PhonesMidrange and Upper-End Cisco IP PhonesAdditional Cisco IP Telephony EndpointsIP Phone Startup ProcessCisco IP Phone Codec SupportSummaryReview Questions
5. Configuring Cisco Unified CallManager to Support IP Phones
Configuring Intracluster IP Phone CommunicationRemoving DNS RelianceConfiguring Device PoolsCisco Unified CallManager Group ConfigurationDate/Time Group ConfigurationRegion ConfigurationSoftkey Template ConfigurationIP Phone Button TemplatesPutting It All TogetherIP Phone ConfigurationManual IP Phone and Directory Number ConfigurationAutomatic IP Phone RegistrationCase Study: Device Pool DesignSummaryReview Questions
6. Cisco IP Telephony Users
Cisco CallManager User DatabaseCisco CallManager User ConfigurationAdding a UserConfiguring Device PoolsUser Logon and Device ConfigurationCallManager User Options: Log OnCallManager User Options: WelcomeCallManager User Options: Call ForwardingCallManager User Options: Speed DialsCallManager User Options: IP Phone ServicesCallManager User Options: Personal Address Book and Fast DialCallManager User Options: Message Waiting Lamp PolicyCallManager User Options: Locale SettingsSummaryReview Questions
7. Cisco Bulk Administration Tool
The Cisco Bulk Administration ToolBAT ComponentsBAT InstallationAdding Cisco IP Phones Using BATUsing BAT Wizard Step 1: Choosing DevicesUsing BAT Wizard Step 2: Device SpecificsUsing BAT Wizard Step 3: Proceed with TaskAdding Phones Step 1: Configuring BAT TemplatesAdding Phones Step 2: Creating CSV FilesAdding Phones Step 3: Validating PhonesAdding Phones Step 4: Inserting PhonesUpdating IP Phones Using BATUsing the Tool for Auto-Registered Phone SupportSummaryReview Questions
III. IPT Network Integration and Route Plan
8. Cisco Catalyst Switches
Catalyst Switch Role in IP TelephonyPowering the Cisco IP PhoneTwo Types of PoE DeliveryPoE Device DetectionCatalyst Family of PoE SwitchesConfiguring PoEVerifying PoEData and Voice VLANsConfiguring and Verifying Dual VLANs Using the CatOSConfiguring and Verifying Dual VLANs Using the NativeOSConfiguring Class of ServiceSummaryReview Questions
9. Configuring Cisco Gateways and Trunks
Cisco Gateway ConceptsAnalog and Digital GatewaysCore Gateway RequirementsGateway Communication OverviewConfiguring Access GatewaysH.323 Gateway ConfigurationCall ClassificationMGCP Gateway ConfigurationNon-IOS MGCP Gateway ConfigurationCisco Trunk ConceptsConfiguring Intercluster TrunksSIP and Cisco CallManagerSIP ComponentsCallManager SIP Integration and ConfigurationSummaryReview Questions
10. Cisco Unified CallManager Route Plan Basics
External Call RoutingRoute Plan Configuration ProcessRoute Group Overview and ConfigurationRoute List Overview and ConfigurationRoute Pattern Concepts and ConfigurationRoute Pattern: Commonly Used WildcardsRoute Pattern ExamplesDigit AnalysisDigit CollectionClosest Match RoutingInterdigit TimeoutSimple Route Plan ExampleSummaryReview Questions
11. Cisco Unified CallManager Advanced Route Plans
Route FiltersRoute Filter TagsConfiguring Route FiltersApplying Route FiltersPractical Route Filter ExampleDiscard Digit InstructionsTransformation MasksCalling-Party TransformationsCalled-Party TransformationsConfiguring Calling- and Called-Party Transformation MasksTransformation ExampleTranslation PatternsTranslation Pattern ConfigurationPractical Use of a Translation PatternRoute Plan ReportSummaryReview Questions
12. Configuring Hunt Groups and Call Coverage
Call Distribution ComponentsLine GroupsCall-Distribution AlgorithmsHunt OptionsCall Distribution Scenarios: Top-Down ExampleHunting and ForwardingConfiguring Line Groups, Hunt Lists, and Hunt PilotsConfiguring Line GroupsConfiguring Hunt ListsConfiguring Hunt PilotsSummaryReview Questions
13. Implementing Telephony Call Restrictions and Control
Class of Service OverviewPartitions and Calling Search Spaces OverviewCalling Search Spaces Applied to Gateways and Intercluster TrunksPartition ConfigurationCalling Search Space ConfigurationTime-of-Day Routing OverviewTime PeriodsTime ScheduleTime-of-Day Routing Effect on UsersConfiguring Time-of-Day RoutingConfiguring Time PeriodsConfiguring Time SchedulesApplying Time SchedulesTime-of-Day Routing Usage ScenarioSummaryReview Questions
14. Implementing Multiple-Site Deployments
Call Admission ControlLocations-Based Call Admission ControlConfiguring Location-Based Call Admission ControlAAR OverviewConfiguring AAREnabling AAR in the CallManager ClusterAAR Group ConfigurationConfiguring Endpoints for AARGatekeeper-Based Call Admission ControlGatekeeper CommunicationGatekeeper-Based Call Admission Control ConfigurationSurvivable Remote Site TelephonySRST Router ConfigurationSRST Reference ConfigurationSummaryReview Questions
IV. VoIP Features
15. Media Resources
Introduction to Media ResourcesConference Bridge ResourcesConference Bridge HardwareConference Bridge Hardware CallManager ConfigurationMedia Termination Point ResourcesMTP ConfigurationAnnunciator ResourcesAnnunciator ConfigurationTranscoder ResourcesTranscoder ConfigurationMusic on Hold ResourcesCreating Audio Source FilesConfiguring MoHStep 1: Configure the Audio TranslatorStep 2: Configure the MoH ServerStep 3: Add and Configure Audio Source FilesStep 4: Set MoH Servicewide SettingsStep 5: Find and Configure the Fixed Audio SourceStep 6: Assigning Audio Source IDsMedia Resource ManagementMedia Resource DesignMedia Resource GroupsMedia Resource Group ConfigurationMedia Resource Group List ConfigurationAssigning Media Resource Group ListsMRGL Design Strategy: Grouping Resources by TypeMRGL Design Strategy: Grouping Resources by LocationSummaryReview Questions
16. Configuring User Features, Part 1
Basic IP Phone FeaturesSpeed Dial and Abbreviated Dial ConfigurationAuto Answer ConfigurationCall Forward and Configurable Call Forward Display ConfigurationSoftkey TemplatesAdding Softkey TemplatesModifying Softkey Availability and PositioningAssigning Softkey Templates to DevicesDeleting Softkey TemplatesEnhanced IP Phone FeaturesMultiple Calls per Line AppearanceDirect TransferCall JoinImmediate Divert to Voice MailCall ParkCall Pickup and Group Call PickupOther Group Call PickupCall Pickup ConfigurationAutoCall PickupCisco Call BackBarge and PrivacyConfiguring BargeConfiguring PrivacyIP Phone ServicesConfiguring IP Phone ServicesServices Phone Display ExamplesSummaryReview Questions
17. Configuring User Features, Part 2
Cisco CallManager Extension MobilityExtension Mobility ExampleConfiguring Extension MobilityCisco CallManager Extension Mobility Service ParametersConfiguring a Default Device ProfileConfiguring User Device ProfilesAssociating Users with Device ProfilesCreating the Extension Mobility ServiceUpdating Cisco IP Phones to Add Extension Mobility SupportClient Matter Codes and Forced Authentication CodesFAC ConceptsCMC ConceptsFAC and CMC ConfigurationCreating CMC CodesCreating FAC CodesEnabling Route Patterns for FAC and CMCCall Display RestrictionsUnderstanding Calling Line ID PresentationUnderstanding Connected Line ID PresentationUnderstanding Ignore Presentation IndicatorsConfiguring Caller ID RestrictionsMalicious Call IdentificationConfiguring MCIDConfiguring CallManager to Support CDRsConfiguring MCID AlarmsAdding the MCID SoftkeyMultilevel Precedence and PreemptionSummaryReview Questions
18. Configuring Cisco Unified CallManager Attendant Console
Introduction to Cisco CallManager Attendant ConsoleTerms and DefinitionsThe Telephony Call Dispatcher and Attendant Console DirectoryCisco Telephony Call DispatcherCisco CallManager Attendant Console DirectoryPilot Points and Hunt GroupsCall Routing and Call QueuingCall RoutingCall QueuingServer and Administration ConfigurationAdding Attendant Console UsersAdding the “ac” UserPilot Point ConfigurationHunt Group ConfigurationActivating Cisco TCD and CTIManager ServicesUsing the Attendant Console Configuration ToolInstalling and Configuring the Attendant Console ClientCisco Attendant Console FeaturesAttendant Console GUI: Call ControlAttendant Console GUI: Custom Speed DialsAttendant Console GUI: Directory LookupAttendant Console GUI: Parked CallsAttendant Console GUI: Broadcast CallsSummaryReview Questions
19. Configuring Cisco IP Manager Assistant
Cisco IP Manager Assistant OverviewCisco IPMA with Proxy-Line SupportCisco IPMA with Shared-Line SupportCisco IP Manager Assistant ArchitectureConfiguring Cisco IPMA for Shared-Line SupportIPMA Step 1: Activating the Cisco IPMA ServiceIPMA Step 2: Configuring Service ParametersIPMA Step 3: Restarting the Cisco IPMA ServiceIPMA Step 4: Configuring Managers and AssistantsIPMA Step 5: Configuring Call Divert TargetIPMA Step 6: Installing the IPMA Assistant ConsoleSummaryReview Questions
V. IPT Security
20. Securing the Windows Operating System
Threats Targeting the Operating SystemLowering the Threats in Windows Operating SystemSecurity and Hot Fix PolicyOperating System HardeningIP Telephony Operating System Security ScriptsFile-Sharing ConsiderationsAntivirus ProtectionCisco Security AgentCisco Security Headless AgentCisco Security Managed AgentCSA Supported ApplicationsCSA ProtectionCSA GuidelinesAdministrator Password PolicyAccount and Password ConsiderationsCommon Windows ExploitsSecurity TaboosSummaryReview Questions
21. Securing Cisco Unified CallManager Administration
Threats Targeting Remote AdministrationSecuring CallManager Communications Using HTTPSHTTPS CertificatesAccessing CallManager When Using Self-Signed CertificatesMultilevel AdministrationEnabling MLAMLA Functional GroupsMLA User GroupsAssigning MLA Access PrivilegesCreating New MLA Functional and User GroupsSummaryReview Questions
22. Preventing Toll Fraud
Toll Fraud ExploitsPreventing Call Forward and Voice-Mail Toll Fraud Using Calling Search SpacesBlocking Commonly Exploited Area CodesUsing Time-of-Day RoutingUsing FAC and CMCRestricting External TransfersDefining OnNet and OffNetConfiguring Call Transfer RestrictionsCall Transfer Restriction ExampleDropping Conference CallsSummaryReview Questions
23. Hardening the IP Phone
Threats Targeting EndpointsBlocking Endpoint AttacksStopping Rogue Images from Entering IP PhonesDisabling Phone Settings in Cisco CallManager AdministrationDisabling PC Port and Settings AccessDisabling IP Phone Web AccessIgnoring Gratuitous ARPDisabling Voice VLAN AccessEnabling IP Phone Encryption and AuthenticationSummaryReview Questions
24. Understanding Cryptographic Fundamentals
What Is Cryptography?Authentication and EncryptionSymmetric EncryptionSymmetric Encryption Example: AESAsymmetric EncryptionSymmetric Encryption Example: RSAHash FunctionsDigital SignaturesDigital Signatures and RSASummaryReview Questions
25. Understanding the Public Key Infrastructure
The Need for a PKIKey Exchange in Symmetric CryptographyKey Exchange Protected by Asymmetric EncryptionThe Pitfall of Asymmetric Key ExchangePKI as a Trusted Third-Party ProtocolPKI EntitiesX.509v3 CertificatesSelf-Signed CertificatesPKI EnrollmentMan-in-the-Middle PKI Enrollment AttackSecure PKI EnrollmentPKI Revocation and Key StoragePKI Revocation MethodsKey StorageSmart Cards and Smart TokensPKI ExamplePKI and SSL/TLSWeb Server Certificate ExchangeSummaryReview Questions
26. Understanding Cisco IP Telephony Authentication and Encryption Fundamentals
Threats Targeting the IP Telephony SystemHow CallManager Protects Against ThreatsSecure Signaling and Media TransferAuthentication of Phone ImagesAuthentication of Phone Configuration FilesPKI Topologies in Cisco IP TelephonySelf-Signed Certificates PKI TopologyManufacturing Installed Certificates PKI TopologyLocally Significant Certificates PKI TopologyIndependent, Separated PKI TopologyCTL ClientCTL Client ApplicationCTL Verification on the IP PhoneInitial Deployment IssuePKI Enrollment in Cisco IP TelephonyCAPF Acting as a CACAPF Acting as a Proxy to an External CAKeys and Certificate Storage in Cisco IP TelephonyAuthentication and IntegrityCertificate Exchange in TLSServer-to-Phone AuthenticationPhone-to-Server AuthenticationTLS SHA-1 Session Key ExchangeEncryptionTLS AES EncryptionSRTP Media EncryptionSRTP Packet FormatSecure Call Flow SummarySummaryReview Questions
27. Configuring Cisco IP Telephony Authentication and Encryption
Authentication and Encryption Configuration OverviewEnabling Services Required for SecurityUsing the CTL ClientInstalling the CTL ClientWorking with Locally Significant CertificatesIssuing a Phone Certificate Using an Authentication StringIssuing a Phone Certificate Using the CAPFConfiguring the Device Security ModeNegotiating Device Security ModeGenerating a CAPF ReportSummaryReview Questions
VI. IP Video
28. Introducing IP Video Telephony
IP Video Telephony Solution ComponentsVideo Call ConceptsCisco CallManager Involvement in Video CallsVideo Call FlowVideo Codecs Supported by Cisco CallManagerVideo Protocols Supported in Cisco CallManagerSCCP Video Call CharacteristicsH.323 Video Call CharacteristicsSCCP and H.323 in Cisco CallManagerBandwidth ManagementVideo Call Bandwidth RequirementCalculating the Total BandwidthActual Bandwidth Used Per Video CallCall Admission Control in Cisco CallManagerCall Admission Control Within a ClusterRegion ConfigurationLocation ConfigurationCall Admission Control ExampleRetry Video Call as AudioCall Admission Control Between ClustersGatekeeper Call Admission Control OptionsGatekeeper Call Admission Control ExampleSummaryReview Questions
29. Configuring Cisco VT Advantage
Cisco VT Advantage OverviewCisco VT Advantage ComponentsCisco VT Advantage Supported StandardsProtocols Used by Cisco VT AdvantageHow Calls Work with Cisco VT AdvantageCisco VT Advantage Video ModesConfiguring Cisco CallManager for VideoCall-Routing ConsiderationsVT Advantage Deployment ToolConfiguring Cisco IP Phones for Cisco VT AdvantageVerifying Phone LoadsConfiguring IP Phones to Support VideoVerification of Phone ConfigurationInstalling Cisco VT Advantage on a ClientCisco VT Advantage Hardware and Software RequirementsCisco VT Advantage Installation Preparation ChecklistInstalling Cisco VT AdvantageCisco VT Advantage Installation VerificationSummaryReview Questions
VII. IPT Management
30. Introducing Database Tools and Cisco Unified CallManager Serviceability
Database Management ToolsDatabase Management Tools OverviewMicrosoft SQL Server 2000 Enterprise ManagerDBLHelperCisco CallManager Serviceability OverviewServiceability ComponentsAlarmTraceToolsApplicationHelpControl CenterService ActivationTools OverviewSummaryReview Questions
31. Monitoring Performance
Performance CountersPerformance AnalysisMicrosoft Event ViewerMicrosoft Performance MonitorMicrosoft Performance Monitor Report ViewMicrosoft Performance Monitor Graph and Histogram ViewMicrosoft Windows Task ManagerReal-Time Monitoring Tool OverviewReal-Time Monitoring Tool Configuration ProfilesUsing the Real-Time Monitoring Tool EffectivelyViewing Call ActivityUsing Device SearchVisiting Alert CentralSummaryReview Questions
32. Configuring Alarms and Traces
Alarm OverviewAlarm ConfigurationConfiguring AlarmsConfiguring Alarms for Java ApplicationsAlarm DetailsTrace ConfigurationTypes of TracesTrace Configuration and Analysis OverviewTrace ConfigurationEnabling Clusterwide Trace SettingsTrace AnalysisTrace CollectionThe Trace Collection ToolBulk Trace AnalysisBulk Trace Analysis FeaturesUsing Bulk Trace AnalysisAdditional Trace ToolsSummaryReview Questions
33. Configuring CAR
CAR OverviewCDRs and CMRsCAR UsersCAR Report Types and User LevelsCAR ConfigurationInitial ConfigurationCAR System Parameter Menu ConfigurationAdministration Rights and Mail ParametersDial Plan ConfigurationGateway and System PreferencesReport SchedulingManaging the CDR LoadConfiguring the SchedulersSystem Database ConfigurationCDR and CAR Database AlertsDatabase PurgesUser Report ConfigurationViewing the ReportSending the ReportSummaryReview Questions
34. Using Additional Management and Monitoring Tools
Remote Management ToolsCiscoWorks ITEM OverviewSimple Network Management ProtocolSNMP BasicsSNMP Configuration on Cisco CallManagerSyslog OverviewSyslog Configuration in Cisco CallManagerDependency RecordsEnabling Dependency RecordsAccessing Dependency RecordsPassword Changer ToolUsing the Password Changer ToolCisco Dialed Number AnalyzerInstalling Cisco Dialed Number AnalyzerUsing the Cisco Dialed Number AnalyzerQuality Report ToolActivating the QRT SoftkeyViewing QRT LogsSummaryReview Questions
VIII. Appendix
A. Answers to Review Questions
Chapter 1Chapter 2Chapter 3Chapter 4Chapter 5Chapter 6Chapter 7Chapter 8Chapter 9Chapter 10Chapter 11Chapter 12Chapter 13Chapter 14Chapter 15Chapter 16Chapter 17Chapter 18Chapter 19Chapter 20Chapter 21Chapter 22Chapter 23Chapter 24Chapter 25Chapter 26Chapter 27Chapter 28Chapter 29Chapter 30Chapter 31Chapter 32Chapter 33Chapter 34

Content preview from Authorized Self-Study Guide Cisco IP Telephony (CIPT), Second Edition

Chapter 21. Securing Cisco Unified CallManager Administration

This chapter covers the following topics:

Explaining the threats targeting remote Cisco CallManager Administration and other applications
Explaining how HTTPS provides secure remote communication and logins to Cisco CallManager Administration
Describing HTTPS certificate details, using Microsoft IIS to save a certificate to a trusted folder, and copying the certificate to a file
Describing how MLA provides multiple levels of security to Cisco CallManager Administration
Enabling MLA and assigning a password to the superuser
Defining a functional group and identifying ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Authorized Self-Study Guide Cisco Voice over IP (CVoice)

Publisher Resources

ISBN: 9781587052613Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Authorized Self-Study Guide Cisco IP Telephony (CIPT), Second Edition

by Jeremy D. Cioara - CCIE No. 11727

Chapter 21. Securing Cisco Unified CallManager Administration

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.