Brkucc 2301

Cisco Unified Communications at the
branch office: Deployment scenarios,

Management and Security
BRKUCC-2301
Tony Banuelos – Technical Marketing Engineer

Agenda
 Communications Manager Express Deployments

• CME overview
• CME deployment models
• CME in Retail and Hospitality verticals
• CME management
 Cisco Unified Survivable Remote Site Telephony Deployments

• Enhanced Survivable Remote Site Telephony/ SRST Manager
• Classic Survivable Remote Site Telephony
• Dialplan survivability
BRKUCC-2301 © 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 2
Cisco Unified Communications Manager Express
Simple, Affordable All-In-One Communications
 Unified Communications solution for 450 users or less based on
Cisco Integrated Services Routers
 Full-featured solution that meets the needs of distributed enterprise

branch office, and service-provider-managed-service
 Provides robust networking across sites using

H.323 or SIP
 Voice mail, auto-attendant and IVR capabilities with integrated

Cisco Unity Express
 Configure as PBX, Key Switch or hybrid mode for business

continuity
 Options include: Video Telephony, Tele-workers, Cisco IP

Communicator soft phone, B-ACD call routing, SIP phone support,
plus integration with Cisco Unified Communications Manager
 Provisioning and fault reporting using Cisco Configuration

Professional and Cisco Unified Operations Manager and Arcana
ManageExpress iManage
Integrated UC Architecture on the ISR G2
Only Cisco UC uses the full power of the Network.
Deployment Flexibility
Superior Voice Quality
Lower OpEx, Better ROI, Green
More Efficient Use of IT Resources
Survivability, Disaster Recovery
Easier Migration to IP
Application Optimization
UC as a Network Service
CDP • Auto QoS • VLANs • RSVP • POE •
Priority Queuing • SRST • E-911 • Protocol
Translation
Integrated
• Codecs • DSPsApplications on RTP
• FW • secure ISRs and TLS
CME deployment models
Cisco Unity Express or Cisco Unity Connection Public
PSTN Internet
SIP Trunk
CO Line 1, 2,
3, 4
Dial backup and Cisco ISR, including:
Fax • Unified Communications Manager Express
POTS
• IOS Firewall
Analog phones • Integrated PoE switch
• Integrated WLAN
GUI Management
station
Employee Laptop ,
Cisco IP Phone 7906 in Cisco IP Phone
lobby, or break room 7975G
Printer Cisco
Jabber Cisco IP VoWLAN 7925
Unified IP Phone 7965 + client Phone/PTT
7915 as the Admin
device
Wireless LAN Table PC

Application access point
server
Standalone office deployment
Unified Communications Express: Distributed
Enterprise Branch Office
Cisco Integrated Services Router
Main business location with Cisco Communications Branch Location
Manager Express, Cisco Unity
Express, Cisco Unity Connection
SIP Trunk and IOS Firewall
Supports
TLS/sRTP SIP Trunk
(SCCP phones Supports
only) TLS/sRTP
Public Internet, VPN (SCCP phones
or Private WAN with only)
Cisco Integrated VoIP
Services Router with 10-20 employees
Cisco Communications SIP Trunk
Manager Express, Cisco Supports
Unity Express, Cisco TLS/sRTP
(SCCP phones
Unity Connection and
IOS Firewall
only) Distribution Center
100 – 450 employees
PSTN
 Networked Call Processing
 Networked Voice Messaging Cisco Integrated Services
 Extension dialing between sites Router with Cisco
 Toll Savings Communications Manager
Express, Cisco Unity Express,
 Calling Name, Number SIP trunk
FXO backup Cisco Unity Connection and IOS
 Intelligent Call FWD & Transfer Firewall 25-75 employees
Hybrid Deployment Models
Distributed Call Processing (Unified CM-Unified CME Model)
Applications
(Vmail, Jabber, webex…)
Cisco Unified
PSTN Communications
Unified CM
Manager Express
Cluster
IP WAN
Regional Branch A
Headquarters GK Gatekeeper
Cisco Unified
 Unified CM, applications located at HQ or Branch site Communications
 DSP resources located at each site Manager Express
 Up to 40,000 phones per Unified CM cluster
 Up to 450 phones per Unified CME
 100+ sites
BRKUCC-2301 © 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public Regional Branch B 7
Cisco Unified Communications Manager Express 9.0
(IOS 15.2(2)T)
Improves User Experience
 Support for Native video conference
SCCP and SIP endpoints
 SIP to SCCP Feature Parity: Single Number Reach and
Paging support for SIP Endpoints
 Shared line support between SCCP and SIP endpoints
 NEW Endpoint Support: ATA 187
Customer Benefits
 Enables native video conferencing on the Branch sites
 Increased SIP line side Feature support to bridge the gap between
SCCP and SIP
CME Enhancements 9.5
Feature development targeted for retail solutions
CME development continues to evolve in order to bring focused solutions to the retail space
Hunt-Group enhancements:
• Enhancement to Hunt Group Agent Statistics Lumber Electrical
• Preventing Local-Call Forwarding to Final Agent in Voice Hunt Groups
• Display Support for Name of Called Voice Hunt Groups
• Support for Voice Hunt Group Descriptions
Enhanced voice application security:

• Trunk-to-Trunk Transfer Blocking for Toll Fraud Prevention on Cisco Unified SIP IP Phones Tools
• HTTPS Support for Directory Services
CME VoIP feature enhancements:

• Localization Enhancements
• Afterhours Pattern Blocking Support for Regular Expressions
• Call Park Recall Enhancement
CME hunt-group enhancements
CME 9.5 (IOS 15.3(2)T)
• Enhancement to ephone-hunt group agent statistics (not supported for SIP phones or SRST)
Total logged in time—On an hourly basis, displays the duration (in sec) since a specific agent logged into a hunt group.
Total logged out time—On an hourly basis, displays the duration (in sec) since a specific agent logged out of a hunt group.
To display ephone-hunt statistic use the “show ephone-hunt <tag-id>” command
• Preventing Local-Call Forwarding to Final Agent in Voice Hunt Groups

Local calls are prevented from being forwarded to the final destination using the no forward local-calls to-final command in
parallel or sequential voice hunt-group configuration mode.
• Display Support for Name of Called Hunt Groups

The display of the name of the called voice-hunt-group pilot to the final destination point is supported by configuring the
following command in voice hunt-group or ephone-hunt configuration mode:
[no] name “primary pilot name” [secondary “secondary pilot name”]
• Support for Voice Hunt Group Descriptions

The “description” cli is now available under voice hunt-group config (Has been supported under ephone-hunt config)
CME Admin guide: http://www.cisco.com/en/US/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm.html (See “Adding features)

CME enhancements to voice application security
CME 9.5 (IOS 15.3(2)T)
• Trunk-to-Trunk Transfer Blocking for Toll Fraud Prevention on Cisco Unified SIP IP Phones
 Support is added for new and modified transfer-blocking commands that prevent toll bypass fraud in Cisco Unified Session
Initiation Protocol(SIP) IP phones.
• HTTPS Support for Directory Services

 CME now supports HTTPS to deliver phone services like: local-directory, My phone apps and extension mobility

CME VoIP feature enhancements
CME 9.5 (IOS 15.3(2)T)
• Afterhours Pattern Blocking Support for Regular Expressions

 The “after-hours block pattern” command now supports regular expression characters.
Example:
• Call Park Recall Enhancement

 The recall force keyword has been added to the call-park system command. This allows a user to force the
recall or transfer of a parked call to the phone that put the call in park
New Features in Cisco Unified CME 10.0
IOS 15.3(3)M
 Support for 8831 conference phone

Replacement for 7937 phone
 Jabber for windows and MAC  SIP Phone Feature negotiation for
support E-SRST
Softphone mode support Enables Video Survivability and Busy
Lamp Field (BLF)
 Fast Track Phone support for SIP  SRST Support on ISR 4451 (XE3.9.1)
phones
Enables new phone types to be
backward compatible
Cisco CME 10.0
Cisco Jabber
voice register pool 4
registration-timer max 720 min 660
id device-id-name SEP0C715D65DB07
session-transport tcp
CME supported today type Jabber-Android
number 1 dn 4
 Cisco Jabber for iPhone and for Android

presence call-list
dtmf-relay rtp-nte
(This is not Jabber for iPad app) codec g711ulaw
 Make and receive calls with your work number, access voicemail, move calls between mobile device voice register pool 2
and deskphone, directory integration, IM chat and presence, Supported on VPN connections registration-timer max 720 min 660
id device-d-name SEPAA7D24C18765
 Voicemail requires Cisco Unity express or Cisco Unity Connection session-transport tcp
type CiscoMobile-iOS
 Cisco Jabber IM for iPhone and for Android require Webex IM/presence account. These apps are number 1 dn 1
separate apps from the voice Cisco Jabber for iphone, Cisco jabber for Android apps. dtmf-relay rtp-nte
username iPhone password 1234
codec g711ulaw
New CME 10.0 support
 Cisco Jabber for Windows and Cisco Jabber for Mac
 Make and receive calls with your work number, access voicemail, directory integration, IM chat and
presence integrated, video calling, Supported on VPN connections, initiate instant webex meetings,
calendar integration.
 Voicemail requires Cisco Unity express or Cisco Unity Connection
 Cisco Jabber for Windows and Cisco Jabber for Mac require Webex IM/presence account
 Deskphone control “not supported”
Cisco CME 10.0
Cisco Jabber configuration
Jabber for Windows or MAC
ip http secure-server
ip http secure-port 8443
Jabber WIN: Jabber for Android Jabber for iPhone

voice register dn 1 Jabber Android Jabber iPhone
number 991001
voice register dn 3 voice register dn 4
!
number 991003 number 991004
! !
id device-id-name JabberWIN1
voice register pool 4 voice register pool 2
type Jabber-Win registration-timer max 720 min 660 registration-timer max 720 min 660
number 1 dn 1 id device-id-name SEP0C715D65DB07 id device-d-name SEPAA7D24C18765
username syara password session-transport tcp session-transport tcp
abcd1234 type Jabber-Android type CiscoMobile-iOS
description Jabber WIN number 1 dn 3 number 1 dn 4
presence call-list dtmf-relay rtp-nte
Jabber MAC: dtmf-relay rtp-nte username iPhone password 1234
codec g711ulaw codec g711ulaw
description Jabber Android Description Jabber iphone
voice register dn 2
number 991002
!
id device-id-name JabberMAC1
type Jabber-Mac
number 1 dn 2
username satya password abcd1234
description Jabber MAC
Cisco CME 10.0
IP phone “Fast-track” configuration feature
 Configure “new” Cisco IP phones and SCCP phones as fully

supported IP phones.
 No loss of feature functionality due to third-party registration
configuration.
 The Fast-Track configuration approach is aimed at new phones
that do not undergo complete code change but provide changes
in hardware, like the display or button layout.
Sample Fast-track configurations:
New 9900 SIP IP phone based on 9951 layout Configure Cisco CP-9971 using fast-track CLI
voice register pool-type 9900 ephone-type 9971

device-reference 9951 device-id 576
num-lines 24 device-name Cisco Unified IP Phone 9971
transport tcp num-buttons 3
gsm-handoff max-presentation 3
phoneload no utf8
xml-config maxNumCalls 3 no phoneload
xml-config busyTrigger 3
id mac 1234.4567.7891
Cisco Communications Manager Express for the
Hospitality Vertical NEW
 Solution
 Cisco CME for on-prem telephony solution
Cisco ISR G2 and Cisco UCS E-series server
 Nevotek Hospitality application virtualized on the
Cisco UCS E-series server
 Provides On-premise guest voice and back of
house voice services
 Targeted for mid-tier hotels
 Supports Analog ,VoIP phones and third party
phones
 PMS integration, with Call Accounting - Nevotek
 Server blades can run other hotel

applications
 PMS, Group Sales, Finance, IPTV, etc.
Cisco CME in hospitality
CME with Nevotek VIP Connect
• What is Nevotek VIP Connect?
 VIP Connect converges sophisticated hospitality PMS systems with Cisco UC
solutions, enabling personalized guest room check-in and delivers hotel services
through the Cisco UC tools
 It integrates to CME using Cisco IOS XML Infrastructure (IXI) and telnet interfaces
are used to communicate with the router
 Guest services delivered to guests via their IP phone:
1. Hotel Guide
2. City Guide
3. Weather
4. Wake Up Service
5. News
6. COR
• Which PMS systems are supported?

 Supports all the leading Hotel PMS systems
• How many guest rooms are supported?
 100-250
Dependencies:
• CME version 8.6 or later
• SCCP (including analog) and SIP phones
• Cisco UCS E-series server to host
VIPConnect
Deploying Cisco CME with Nevotek
 CME must be pre-provisioned to allow XML and telnet control from VIPConnect and register phones
CME Configuration for integrating with NG
 CME version 8.6 or higher is required
1 . 2 users on CME, one is XML user with privilege
 List of CLI commands VIPConnect pushes to CME 15 other one is privilege 15 user for login. Both
ephone [device] reset must have the same user and password:
ephone [device] restart
ephone-dn [ext] label [label] First user :
ephone-dn [ext] name [name]
ephone-dn [ext] call-forward noan [dest] [timeout] telephony-service
ephone-dn [ext] call-forward all [dest] xml user nevotek password nevotek 15
ephone-dn [ext] corlist incoming [cor]
second one:
voice register pool [pool] reset
voice register pool [pool] restart username nevotek privilege 15 secret 5
voice register dn [ext] name [name] $1$Tr5v$hJisQy6UnCQd2AKTfQxy7.
voice register dn [ext] label [label]
voice register dn [ext] call-forward b2bua noan [dest] [timeout]
voice register dn [ext] call-forward b2bua all [dest] This is required because NG collects data from cme
voice register dn [ext] cor incoming [cor] also update the phone displays using those users.
 How is COR implemented?

Nevotek collects COR list from CME
During check in/out, Nevotek updates phone-COR depending on phone scenario configuration.
Note: Nevotek engineers will hand-hold installations at customer sites
CME Use Cases for Hospitality
Guest Room Back of House
•Order room service for in-room dining • Front Desk calls guest in room to follow-up on guest
•Collaborates with concierge to book a reservation at a request
local restaurant • Guest Services calls engineer over Wi-Fi phones to
•Receive messages about changes in conference address an issue in the guest room
event • Staff coordinate on the arrival of a large group attending a
conference
• Obtain city guide and weather updates
Hotel House Phone

• Guest is in the lobby and needs to know
when airport shuttle schedule
• Analog and VoIP capability

• Single cost effective voice solution – Guest, Back of House, House
Business • Global solution - reduce complexity and cost for new properties with hotel-in-a-box, pre-
Value certified hotel system (plug-and-play)
• On-premise for properties that cannot move the cloud – International, remote properties
Cisco Unified CME 9.5 - IP Phone Portfolio
Executive Video
Cisco Unified IP Phone Cisco Unified IP Phone
9951/9971 9951/9971/8961
7975
Manager Cisco Jabber (CME 10.0)
Cisco Unified IP Phone
7962G/7965G
Business Mobility
7942G / 7945G Cisco Jabber for iPhone/Android
Cisco Unified Wireless IP Phone
Conference 7921G/ 7925G/7925G-EX/7926G
Cisco Unified IP Conference
Phone
7937G
Basic Accessories
Cisco Unified IP Phone Expansion Module
3905/3911/6901/6911/69 7900/8900/9900
21/6941/6945/6961
Analog
Multibutton Cisco ATA
Cisco Unified IP Phone Cisco VG202XM, VG204XM, VG224, VG350
7931G BRKUCC-2301 © 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
CME Phone User License Simplified
Aligned with Cisco UCL 9.0
Current Offering New Offering

• Per-phone-model ordering • Consistent with UCL 9.0 ordering
• Over 50 SKUs • 3 new SKUs (other SKUs in current
• 7 price points offering will be end of sale)
• $40, $100, $150, $200, $250, $300, $350 • 3 price points
• $40,$125, $210
7906 Analog
7911 7942 7965 Essential
8945 Models 3905, 6901, Analog …
9971 3905 iPhone
3905 3905
Basic
8961 9951
6941 6911 3905 Models 7906, 7911, 6911 …
6901 6921
Enhanced
Models 7942, 9971, 8961 …
CME
3 new CME Phone user License SKUs based on UCL 9.0:
Essential: SW-CCME-UL-ESS= $40
Basic: SW-CCME-UL-BASIC= $125
Enhanced: SW-CCME-UL-ENH= $210
Enhanced
99xx
Basic
Jabber Desktop Jabber Mobile
Essential
89xx
Roadmapped
69xx EX60 / EX90
Fax Analog 6911
79xx
3905 6901 6921 Roadmapped

Third Party
7937 VXME
SIP
Security on CUCME
Background
 Increase rate of toll-fraud occurrence for customers with Cisco
voice solutions
– Hackers scan unsecure boxes for open port 5060
– Free SIP Clients
 Methods of Toll-Fraud
– Internal – Internal employee misusing system to make fraudulent
calls
– External – External parties misusing unsecured Cisco routers to
make fraudulent calls
 External Toll-Fraud occurs because of improperly configured
voice systems
– Access-list not configured to prevent invalid inbound VoIP calls
– Misuse of Secondary dial tone
Toll Fraud—ACLs, Dial-Peers
 Use ACLs to allow/deny explicit sources of calls
 Apply explicit incoming and outgoing dial-peers to CME interfaces to control the types and
parameters of calls allowed on the network
 Use explicit destination-patterns on dial-peers (not .T) to block out disallowed off-net call
destinations
 Use translation rules to ensure only valid calling/called numbers allowed
 Use Tcl/VXML scripts to do database lookups or additional checks to allow/deny call flows
 Change SIP port to something other than 5060
 Close unused H.323/SIP ports
Is this a valid call flow to
 Disable secondary dial-tone on TDM ports allow?
A Incoming Outgoing SP VoIP

Outgoing Incoming
192.168.10.10 172.16.10.6
access-list 1 permit 192.168.10.0 0.0.0.255 access-list 2 permit 172.16.10.0 0.0.0.255
access-list 100 deny … (everything else) access-list 200 deny … (everything else)
Explicit inc and outg dial-peers Explicit inc and outg dial-peers
Toll-Fraud Prevention Improvements
 Default Behavior in IOS 15.1.2T
 direct-inward-dial isdn enabled by default
 Feature is enabled to prevent the toll fraud for incoming ISDN calls. The called
number of an incoming ISDN enbloc dialing call is used to match the outbound
dial-peers voice service pots
[no] direct-inward-dial isdn
 Two-stage dialing service blocked by default, no secondary dial-tone

presented on inbound calls to FXO port
 Secondary-dialtone is normally initiated when an Analog or Digital FXO port
goes offhook and the Private Line Automatic Ringdown (PLAR) is disabled or
not configured
 * New behavior can be disabled to revert back to old behavior

All specificationsBRKUCC-2301 © 2013 Cisco and/or its affiliates. All rights reserved.
subject to change without notice Cisco Public 28
Toll-Fraud Prevention Improvements
 IP address trusted authentication is enabled by default
 Cisco voice router maintains an IP address trusted list* to validate the remote IP
addresses of incoming VOIP calls
 With IP address trusted list enabled, voice router accepts incoming VoIP (SIP/H.323) calls
only if the remote IP address of an incoming VoIP call is successfully validated from the
system IP address trusted list. Cisco3845#show ip address trusted list
IP Address Trusted Authentication
Administration State: UP
Operation State: UP
Can disable IP Trusted IP Address Trusted Call Block Cause: call-reject (21)
List VoIP Dial-peer IPv4 Session Targets:
Peer Tag Oper State Session Target
-------- ---------- --------------
IP Address Trusted List:
Cisco3845(conf-voi-serv)#no ip address trusted ?
authenticate ip address trusted (toll fraud prevention)
authenticate control
call-block ip address trusted (toll fraud prevention) call-
block
list ip address trusted (toll fraud prevention) list
setup
All specificationsBRKUCC-2301
subject to change without notice
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
Configuration and Management Tools for CUCME
Cisco CME End User GUI
 Microsoft Internet Explorer 5.5 or a later http://ip_address/ccme.html

version, recommended IE 6.0 or greater
 CUCMEGUI provides a web-based
interface to manage most system-wide and
IP Phone-based features
 Web GUI facilitates the routine additions
and changes associated with employee
turnover
 HTTP-based GUI access
Cisco Configuration Professional (CCP)
Intuitive device management GUI for easily configuring access routers
 Windows Based Application

 Latest version: 2.7
 GUI based
 Device Management tool for
access routers (ISR and ISR-G2)
 Unified GUI
 Security, Voice
 License Management
 Appl Module Management
 Valuable productivity enhancing
tool for network administrators
and channel partners for
deploying routers with increased
confidence and ease.
 Free Download:
www.cisco.com/go/ciscocp
Cisco CME Management
Arcana ManageExpress® iManage
 Complete Centralized voice management

for a distributed CME environment
 Make changes in bulk
 Simplifies moves, adds and changes
 Reduce operational costs
 Ready-to-use business metrics
 Monitors CDR, Hunt-groups and alarms
 Available on the Cisco price list
For more information visit: http://www.arcananet.com/html/imanage.htm

Arcana ManageExpress® mCloud
Arcana support
Enhanced Survivability for Enterprise
and Cloud based UC (E-SRST)
36
Agenda
Survivability
 SRST on ISR 4451
Deployment Model
 Importance of Survivability
Cloud Survivability
 SRST now available with HCS
 SRST supported with NanoCUBE
Enhanced Survivability
 NEW solution
 Enhanced Capability
 SRST Manager 9.0 *** NEW Branding ***
Technical Deep Dive

Survivable Remote Site Telephony
SRST Support on ISR 4451!
 Only SRST supported in XE 3.9

 CME and Enhanced SRST will be supported in future release – XE 3.11+
 A total of 1500 phones will be supported
 It can be a mix of SCCP and SIP phones, however the total cannot exceed 1500
 Expect to gain15% - 20% in future releases.
SRST SRST
Platform
SCCP Phones SIP Phones
ISR 4451 1500 1500
Deployment Models
Centralized Call Processing (Unified CM-Unified SRST Model)
Applications
(VMail, jabber, webex…)
Cisco Unified
PSTN Survivable Remote
Unified CM
site Telephony
Cluster
IP WAN
Regional Branch A
Headquarters GK Gatekeeper
Cisco Unified
 Unified CM, applications located at HQ or Survivable remote site
Branch site Telephony
 DSP resources located at each site
 Up to 40,000 phones per Unified CM cluster
 Up to 1500 phones per Unified SRST
 UP to 450 phones per Unified Enhanced
SRST Regional Branch B
SRST Branch Telephony Survivability
 Provides Telephony Survivability
during WAN outages
 Uses Cisco router to auto register & Headquarters Branch
Cisco Unified
provide local call processing — no CM
SRST
Router
manual intervention required
PSTN
 SRST IP phone calls remain secure
 When WAN is available, IP phones X IP WAN

auto-revert back to the Primary Call
Control
 Calls in progress stay connected
during WAN failure/restore
Cisco SRST and HCS:
Now cloud based telephony survivability Now
Supported
 Provides Telephony Survivability on HCS
during WAN outages
 Uses Cisco router to auto register & Headquarters Branch
Branch
provide local call processing — no Cisco Unified
SRST
manual intervention required CM
Router
PSTN
 SRST IP phone calls remain secure
 When WAN is available, IP phones
auto-revert back to the primary call X IP WAN
control
 Now supported on Cisco Hosted
Collaboration Solution (HCS) 9.0
• D+M Group used Cisco SRST to help sell HCS
internally
Global Company Transforms Culture with Cloud-Based
Collaboration HCS + SRST Win
About D+M Holdings: Results:
Industry: Consumer Electronics Bridged organizational silos and made it
Location: Headquarter in Mahwah,NJ easier to collaborate from any global
Number of Employees: 2000 location
Challenges: Solution:
• Increase operational efficiency • Cloud collaboration for all divisions, with
• Promote innovation by fostering Cisco HCS delivered by West IP
collaboration Communications
• Lower communications total cost of • Reliable telephony backup service with
ownership Cisco SRST on the ISR G2
SRST Quote: “Cisco Unified SRST gave us the confidence that our telephony services
would remain reliable once we moved to the cloud,” Jackson says
(VP of global Infrastructure at D+M). “This helped us sell Cisco HCS internally.”
SRST Call Flow: Failover and Redundancy
Normal
WAN Operation
Failure Unified CM
Cluster
Signaling Traffic Signaling Traffic
IP WAN
SRST
Capable Voice Traffic Applications
Branch Site Router
PSTN Central Site
Voice Traffic
 IP Phones have SRST router IP as the last option in their CM GROUP configuration
 Support for both SIP and SCCP IP Phones
 With SRST, only a subset of features are available to the phones
 H323 PSTN GW connectivity option during failure modes via VoIP/POTS dial-peers; MGCP
GWs require the ‘MGCP Fallback to H323’ feature
SRST Support on NanoCUBE NEW
Light weight CUBE on 8xx platform
NanoCUBE delivers differentiated voice and video services NANO-CUBE 8xx SIP
Support SRST
Supports Third Party Hosted UC

SIP
SRST available on NanoCUBE
Support for Hosted Broadsoft call control
Provides fallback UC capability
Hosted Service
Small Business
NanoCUBE FCS : August 2013
Enhanced SRST
Good is NOT enough !
More
Consistent
Survivable
Access
Features
Increased
Automatic
USER
Learning
productivity
Less OPEX
Need to be Fantastic
Cisco Enhanced Survivabilty!!
SRST plus more
Enhanced user experience in survivability
mode
 Device display and phone user operations are identical in
survivable mode
Automatic branch provisioning and

centralized management
 Automatically provisions remote branch sites
 Always in-sync with the centralized Cisco UCM and pushes the
updates to the Branch routers
 Manages new adds and migration
 GUI interface for provisioning , monitoring, reporting troubleshooting
Continuous security & billing restrictions
 Access and security control

 Digit manipulation for both incoming and outgoing calls
Enhanced SRST Drives Additional Savings
Savings with E-
SRST E-SRST
SRST
Time to Deployment Months (manual) Days (automated) $$$$
Branch Maintenance (moves,

Manual Automatic $$$$
adds, changes)
Solution Cost $ $ -
Employee Productivity During

Good Best $$$$
Failover
Total Savings with E-SRST $$$$
Cisco Unified SRST Manager - Overview
 SRST Manager is a Cisco application
that runs on a virtual machine
 Connects to Cisco UCM to read
configuration and translates
configuration to CLI and provisions
SRST routers
 SRST manager is compatible with
Cisco UCM and Cisco Business
Edition 6000 versions 8.6, 9.0 and
above
 Automates CLI provisioning of SRST site routers, greatly impacting OPEX and
improving SRST site resiliency
 Supports classic SRST and Enhanced SRST provisioning
Cisco Unified SRST Manager
Overview
 E-SRST supports surviving enhanced features (e.g. dial plan, user
specific phone configuration)
 One SRST Manager can manage ~2000 SRST or E-SRST sites
 Troubleshooting made easy with Troubleshoot tab menu and Dashboard
 Supports both SCCP and SIP end-point survivability configuration
 Supports mapping and provisioning Class of Restrictions from Central
Cisco UCM to SRST site
 Supports mix of SCCP and SIP end-points
 SRSV de-coupled from SRST Manager and now runs on Connection
SRSV 9.1 http://www.cisco.com/en/US/docs/voice_ip_comm/connection/9x/srsv/guide/9xcucsrsvx.html
Cisco Unified SRST manager
Connection SRSV
Virtual machine
 Supported on VMware ESXi 4.1 and 5.0
 SRST Manager virtual machine is delivered in a .ova
file. The .ova file includes the SRST manager
application software
 Virtual machine reserved resources:
 1 vCPU
 1GB memory
 25GB storage min. (thin provision is recommended to allow
for growth as needed, 256GB max.)
 1 vNIC
 OVA file will automatically configure these setting when
deployed
 Runs on Cisco UCS, UCS-E and any third-party
virtualized server
 Supported on UC on UCS TRC’s (Tested reference
configurations)
Cisco Unified SRST manager
Configuration flow
Headquarters
Branch offices
PSTN
Prerequisites to configure SRST Manager
 The Tomcat certificate from Cisco UCM needs to be
uploaded to SRST Manager in order to establish a trusted
HTTPS connection. For certificate download details see
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/cuc
os/8_6_1/cucos/iptpch6.html#wp1061671
 Requires DNS network services to resolve Cisco UCM
FQDN and certificate verification
 Cisco UCM has been configured with users and devices
and devices have been assigned to SRST/branch sites, via Configure username and password, requires privilege level 15:
username name privilege 15 password password
the device pool configuration line vty 0 4
login local
 SRST site routers must be configured to allow connections Choose whether to use telnet or SSH:
Configure telnet:
from SRST manager, the connection can be telnet or SSH transport input telnet
OR
 SRST manager needs to be updated with new SRST site Configure SSH:
- Generate crypto keys
username/password crypto key zerioze
crypto key generate rsa
- Configure line vty 0 4
 The ‘enable’ password is not required, SRST manager uses transport input ssh
username and password to do local authentication
Configure HTTP services:
 Enable TLS option in SRST Manager GUI for SSH access ip http server
ip http authentication local
to SRST routers Enable or disable the HTTPS secure server, depending on whether TLS is enabled on the Cisco Unified SRST
Manager:
•If TLS is enabled on the Cisco SRST Manager, enter the following command:
ip http secure-server
•If TLS is disabled on the Cisco SRST Manager, enter the following command:
no ip http secure-server
If TLS is disabled on the Cisco SRST Manager, this setting is required for the CUCM voice configuration to be
downloaded to the branch router.
Set the IP HTTP timeout policy using the following command:
ip http timeout-policy idle <1-600>
Prerequisites to configure SRST Manager
Continued
An Application User with the Standard

AXL API Access Role must be
configured. SRST Manager needs the
credentials for this user to connect to
Cisco UCM and retrieve SRST site
configurations
Cisco Unified CM with Cisco Unified SRST
Manager
 The tomcat certificate must be
uploaded to SRST manager before
adding the CUCM publisher server for
SRST site discovery
Enhanced-SRST for IP phones
 SIP phones are now supported with enhanced SRST

 Voice register global
 Voice register pool
 Voice hunt-group
 Sip registrar service
 Phone configuration survivability (e.g. Speed-dials, hunt-group, call pickup/park)
 SRST manager retrieves all SRST sites from CUCM DB and provisions all IP phones assigned to SRST site
 In CUCM IP phones are assigned to “device pool” with which in turn has a “SRST “ site reference assigned
 Cisco UCM IP configuration gets correlated to E-SRST “ephone” and/or “voice register pool” configuration
 Support for both SCCP and SIP phones
 Capacity of users per SRST site
 E-SRST supports supplementary user features and scales to numbers inline with CME
Feature enhancements compared to UMG E-SRST
 MGCP based dial-plan
 SIP phones
 SIP hunt-group
 Class of Restrictions, including Time-of-day routing
 External mask translations
MGCP Dialplan feature is
 Outbound dialing patterns
on a controlled release
Contact Cisco at: srstmgr@cisco.com
 Incoming call treatment
 Option to choose automatic provisioning of ESRST, SRST and Dial Plan per branch site
 SSH console support
 Music on-hold
 Single number reach
 Video Survivability (SRST manager requires enhancement for auto-provision
SRST site configuration templates
 SRST manager allows the administrator to
enable or disable automatic provisioning of
features
 SRST manager comes with a default
provisioning template and pre-created
templates for ESRST and dialplan, SRST and
dialplan, ESRST only or SRST only options.
 An administrator can also create a new
template and choose the features to
automatically provision through SRST
manager. This would allow the administrator
to manually configure and manage features.
For example disabling dialplan in cases
where the administrator only wants to
manage IP phones via SRST manager
SCCP and SIP IP phone feature overview
 Using ESRST most user specific IP phone configurations are survived,
but not all feature are
Survived Not Survived
• Speed-dials
• BLF-SD
• Caller-id
• fastdials
• Softkey layout
• directory services
• multi-line appearance
• extension/abbreviated-
• Call-forward
dialing between SRST
• DN extension line
sites
• hunt-group
• Call-park and pickup
• Class of restriction
• MGCP Dial plan
• MoH
 Dialplan survivability
 Correlates CUCM Calling Search Space and Partition configuration to IOS “COR list” configuration and applies to IP phones
 Cisco UCM route-patterns and translation-patterns correlate to dial-peers and number-expansions respectively
 Calling/Called party transformation in Route Patterns, Route List Detail Level and Gateway are configured as translation-profile
and translation-rules
 COR policies applied to users and trunks on CUCM are carried to E-SRST sites during WAN outages
 Dial plan survivability only supports MGCP gateways T1/E1/FXO ISDN/CAS (SIP and H323 gateways in roadmap)
Only MGCP gateways supported dial-peer cor custom

name International
name Local
!
!
dial-peer cor list International-pt
member International
!
dial-peer cor list Local-pt
member Local
!
dial-peer cor list Restricted-cs
member International
member Local
Dial Plan Provisioning
SRST
CUCM
num-exp <match-pattern> <replace-pattern>
Route Pattern
Transl. Pattern dial-peer voice 898980001 pots
Calling/Called Xform description Created by SRST Manager
translation-profile outgoing rp97123
translation-profile incoming gw000:23

Route List
Calling/Called destination-pattern 97123
Xform clid strip name
no digit-strip
port 0/0/0:23
Route Group Route Group

voice translation-profile rp97123
translate called 898980004
translate calling 898980005
Gateways Gateways
Trans. Trans. voice translation-rule 898980012
Patterns Patterns rule 1 /$.*$$....$/ /\2/
COR Overview
 Assigns calling
privileges for SIP
(voice register pool)
or Skinny (ephone-
dn) phones on CME
 Allows or restricts
DNs to call other
internal DNs within
a site
 Allows or restricts
DNs to call external
phone numbers that
are local, long
distance or
international
Hunt-group with Time-of-Day routing
SRST Manager
configuration
Enhanced IP phone survivability -Before WAN failure-
Enhanced IP phone survivability -After WAN failure-
Cisco SRST and E-SRST Capacity on
ISR G2
3945E
Cisco Unified E-SRST 3925E 450/1500
400/1350
Cisco Unified SRST 350/1200
250/730 Phones
150/250 Phones
100/100 Phones
35/35 50/50 Phones 3945
Phones Phones
3925
2951
2921 High-Density Services
2901 2911
Multiple Services Modularity with Performance
Extended Modular Optimized for “All-in-one”
Connectivity (EVM, Solution (NM-SM, NME, EVM,
Low Density Services ISM, WIC/VIC)
ISM, SM, WIC/VIC)
Small Branch Medium Branch Large Branch
Performance
 In subsequent updates SRST Manager looks for any modified, added, erased changes in CUCM. If any,
it will push the new configuration; if none, it leaves SRST router alone.
 SRST configuration updates can be scheduled through the provisioning scheduler based on time of day
and can be set to perform updates on a daily, weekly or monthly basis
 After SRST manager retrieves branch sites configuration from CUCM it waits for the provision the sites.
SRST manager will provision 5 sites at a time (5 simultaneous threads) until all branch sites are
configured
 SRST manager bandwidth utilisation of a single branch router provisioning is ~100kbps peak (1000
sites, 30 users per site)
Note: Although SRST Manager does not over use network and computing resources it is recommended to run
updates during off-peak hours because CUCM queries may cause CUCM processing interruptions. Although
CUCM 8.0 and above is designed to ignore CPU request other than call signaling request when CPU utilisation
crosses a threshold.
SRST Manager can run on 1vCPU or assign 2 vCPU to achieve better performance during first time provisioning
and subsequent configuration updates if changes are constant across the majority of sites.
500 sites, 30 users 1000 sites, 30 users 2000 sites, 30 users 500 sites, 30 users plus 1000 sites, 30 users plus 2000 sites, 30 users plus
No. of vCPU provisioned in hours provisioned in hours provisioned in hours dialplan provisioned in dialplan provisioned in dialplan provisioned in
hours hours hours
1 5 hrs. 10 hrs. 22 hrs ~6 hrs ~12 hrs. ~26 hrs

2 <3 hrs. 5 hrs. 10 hrs. <5 hrs ~6 hrs. ~12 hrs.
Configuring existing SRST sites
Pre-existing configuration found on SRST Manager Action
ESRST router (Keep/Overwrite with CUCM configuration)
Ephones Keep
Ephone-dns Keep
Ephone buttons Keep
Ephone speed-dials Keep
Voice register pool Keep
Voice register dn Keep
CoR (Class of Restrictions) Erase all, then configure using CUCM configuration
Ephone-templates (soft keys) Erase all, then configure using CUCM configuration
Ephone-dn-templates Erase all, then configure using CUCM configuration
Other IOS configuration (dial-peer, Keep
interfaces etc.)
Conflicting configuration between CUCM configuration takes precedence

CUCM and ESRST
Monitor and reports
 Administrator can monitor progress of each remote site provisioning and obtain history information
Troubleshooting
 Collect traces for specific services (e.g. cli,
SRSX)
 View option allows viewing:
– tech-support information (i.e. running-config,
version, vGE interface status)
– Logged messages via log buffer (similar to
“show log” on a router)
– You can download log file in txt format
 During provisioning if a SRST site fails to
configure the GUI will display an error message
 You can view a summary of provisioning errors
and system alerts via the system “Dashboard”
 Test Network Connectivity to Central Cisco
UCM and remote branch SRST routers
More Troubleshooting –Dashboard-
 Dashboard gives you high-level

view of system status and
provides link to details of each
event summary
 The Failed reports will give
diagnosis of each failed SRST site
and the reason it failed
More troubleshooting –Collecting traces-
 Critical log trace is “SRSx all”

 To capture traces use tab
TroubleshootTraces
 To clear and/or download the trace buffer use
the tab TroubleshootTrace Buffer
 Download trace bundle file
 Reports for history performance
Migration Path SRST  E-SRST
Simple download of SRST Manager
Existing customers with install base of

SRST
Free upgrade to E-SRST ( includes SRST
Manager) for ISR G2
SRST Manager only supported in
virtualized mode
SRST Supported today with HCS
New customers
One Price Point (Seat licenses) for SRST
and E-SRST
( includes SRST Manager)
SRST Manager available in virtualized
mode
Licensing
 Right to Use License

 No CSL based license
 No limit on number of Sites supported
– System has been verified to support 2000 sites.
– Additional vCPUs may be needed to support higher site counts
Simplified Licensing for E-SRST
 SRST and E-SRST offered at SAME price Point
 No Node License required for E-SRST
 FL-E-SRST-25= SKU to be End-Of-Sale (Required for previous UMG)
 SRST Manager to be bundled into the SRST Seat price
ISR G2 with
SRST / SRST Seat License
UC tech
E-SRST ( Includes SRST Manager)
Package
 New Pricing for the SRST Seat Skus:
 Effective
Seat SKU Jan 12th, 2013 Current Price New Price
(L-)FL-CME-SRST-5(=) $150 $170
(L-)FL-CME-SRST-25(=) $550 $650
(L-)FL-CME-SRST-100(=) $2000 $2300
 Caveats when in SRST/ESRST mode
 MGCP dialplan feature is on a controlled release. Looking for interested customers to test and deploy
 Video phones will not support video calls (no workaround, to be fixed in next release)
 Abbreviated dialing between remote sites requires CUCM translation-patterns
 HTTP based services on phones will not survive (e.g. directory lookup, Extension-Mobility)
 H323 and SIP based dial-plan not supported
 Secure SRST is not supported in E-SRST mode (Classic SRST supports secure SRST but must be
provisioned out-of-band)
 Automatic abbreviated dialing between remote sites
 The following features are provisioned automatically by SRST Manager, but current SIP phone firmware do
not support these features during SRST mode:
– SIP-SIP / SIP-SCCP Share Line
– SIP SNR
– SIP Call Park/Pickup
(Note: The above features are disabled by the IP phone firmware when the phone enters SRST mode.
Enhancement
BRKUCC-2301to the SIP Ip phone firmware
© 2013 Cisco and/or is required
its affiliates. All rightsand planned for an upcoming
reserved. Cisco Public firmware release) 77
Summary
 SRST and E-SRST are the two survivability solutions from Cisco
 Enhanced SRST delivers true business continuity and resilient access to
services
 Enhanced SRST provides rich end user experience, automatic learning and
improves operational cost for the customer
 SRST Manager now available in a virtualized form
 SRST Manager provides centralized management for both SRST and
Enhanced SRST
Cisco Unified SRST Manager – Important Links
 Cisco Unified SRST

http://www.cisco.com/en/US/products/sw/voicesw/ps2169/index.html
 Cisco Unified SRST Manager data sheet
http://www.cisco.com/en/US/products/sw/voicesw/ps2169/products_data_sheets_list.html
 Cisco Unified SRST Manager compatibility matrix
http://www.cisco.com/en/US/products/sw/voicesw/ps2169/tsd_products_support_general_information.html
 Cisco Unified SRST Manager software download
http://www.cisco.com/cisco/software/release.html?mdfid=268439627&softwareid=284490609&release=9.0.1
&relind=AVAILABLE&rellifecycle=&reltype=latest&i=rm
 Cisco Unified SRST Manager ordering guide

http://www.cisco.com/web/partners/sell/technology/ipc/uc_tech_readiness.html#~7
Complete Your Online Session Evaluation
 Give us your feedback and
you could win fabulous prizes.
Winners announced daily.
 Receive 20 Cisco Daily Challenge
points for each session evaluation
you complete.
 Complete your session evaluation
online now through either the mobile
app or internet kiosk stations.
Maximize your Cisco Live experience with your
free Cisco Live 365 account. Download session
PDFs, view sessions on-demand and participate in
live activities throughout the year. Click the Enter
Cisco Live 365 button in your Cisco Live portal to
log in.

Brkucc 2301

Uploaded by

Copyright:

Available Formats

Brkucc 2301

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Brkucc 2301

Uploaded by

Copyright:

Available Formats

Cisco Unified Communications at the

branch office: Deployment scenarios,

Tony Banuelos – Technical Marketing Engineer

 Communications Manager Express Deployments

• CME deployment models

• CME in Retail and Hospitality verticals

 Cisco Unified Survivable Remote Site Telephony Deployments

• Classic Survivable Remote Site Telephony

 Full-featured solution that meets the needs of distributed enterprise

 Provides robust networking across sites using

 Voice mail, auto-attendant and IVR capabilities with integrated

 Configure as PBX, Key Switch or hybrid mode for business

 Options include: Video Telephony, Tele-workers, Cisco IP

 Provisioning and fault reporting using Cisco Configuration

Wireless LAN Table PC

Standalone office deployment

Enhanced voice application security:

CME VoIP feature enhancements:

• Preventing Local-Call Forwarding to Final Agent in Voice Hunt Groups

• Display Support for Name of Called Hunt Groups

• Support for Voice Hunt Group Descriptions

CME Admin guide: http://www.cisco.com/en/US/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm.html (See “Adding features)

• HTTPS Support for Directory Services

CME Admin guide: http://www.cisco.com/en/US/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm.html (See “Adding features)

• Afterhours Pattern Blocking Support for Regular Expressions

• Call Park Recall Enhancement

 Support for 8831 conference phone

 Cisco Jabber for iPhone and for Android

Jabber WIN: Jabber for Android Jabber for iPhone

 Configure “new” Cisco IP phones and SCCP phones as fully

voice register pool-type 9900 ephone-type 9971

 PMS integration, with Call Accounting - Nevotek

 Server blades can run other hotel

• Which PMS systems are supported?

 How is COR implemented?

Hotel House Phone

• Analog and VoIP capability

Current Offering New Offering

3905 6901 6921 Roadmapped

A Incoming Outgoing SP VoIP

 Two-stage dialing service blocked by default, no secondary dial-tone

 * New behavior can be disabled to revert back to old behavior

 Microsoft Internet Explorer 5.5 or a later http://ip_address/ccme.html

Intuitive device management GUI for easily configuring access routers

 Windows Based Application

 Complete Centralized voice management

For more information visit: http://www.arcananet.com/html/imanage.htm

Technical Deep Dive

 Only SRST supported in XE 3.9

ISR 4451 1500 1500

 When WAN is available, IP phones X IP WAN

Supports Third Party Hosted UC

Automatic branch provisioning and

 Access and security control

Time to Deployment Months (manual) Days (automated) $$$$

Branch Maintenance (moves,

Employee Productivity During

Total Savings with E-SRST $$$$

An Application User with the Standard