<div dir="ltr">Be aware that Call Service Connect is being deprecated for anything besides Video Endpoints.<div><br></div><div>If this is for Webex Teams client, they want you to start looking at Unified CM calling in Webex Teams.</div><div><a href="https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cloudCollaboration/wbxt/ucmcalling/unified-cm-wbx-teams-deployment-guide/unified-cm-wbx-teams-deployment-guide_chapter_01.html">https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cloudCollaboration/wbxt/ucmcalling/unified-cm-wbx-teams-deployment-guide/unified-cm-wbx-teams-deployment-guide_chapter_01.html</a> </div><div><br></div><div>If you need something behind hold/resume for mid-call controls or need mobile Teams client to work, Cisco is pushing towards having Teams launch Jabber for any phone links which can be configured as well.</div><div><br></div><div>Long-term goal is to have Teams calling function very similar to Jabber softphone for Desktop and mobile. <br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, May 15, 2019 at 7:45 PM Ryan Huff <<a href="mailto:ryanhuff@outlook.com">ryanhuff@outlook.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="auto">
<div>Inbound Flow (PSTN user calls user’s DID):</div>
<div><br>
</div>
<div>GW > CCM > (per userWebex Hybrid CTI Device) > Exp-C > Exp-E > ControlHub > (rings your cloud registered device)</div>
<div><br>
</div>
<div>Outbound Flow (cloud registered device calls PSTN via CCM or other on-prem device):</div>
<div><br>
</div>
<div>Cloud registered device (ControlHub) > Exp-E > Exp-C > CCM (interacts with the dialplan for onnet/offnet calling).</div>
<div><br>
</div>
<div>Basically, it’s a B2B call that gets 15 pieces of flair added to it so it can utilize your on-prem gateway for PSTN access. When you go through the configuration, One of the steps will lead you to creating CTI devices in communications manager which share
the users DID (Essentially, and on premise representation of the cloud registered device). The inbound flow is a little unique as it essentially capitalizes on a bastardized form of SNR to ring the cloud device.</div>
<div><br>
</div>
<div>As far as security goes, you are mostly at the mercy of traditional call policy rules (or more specifically writing search rules for your zones).</div>
<div><br>
</div>
<div>
<div><span style="background-color:rgba(255,255,255,0)">I have found the following to be two good "reject" policies that tend not to interfere with most deployments (though they could if the internal URIs match the policy). Most organizations have Directory
URIs that ultimately have been inherited from the user's email address or other corporate standardizations which these policies tend to avoid and also tend to deny routing to a surprising amount of obvious junk (typically, I apply CPL at the edge): <br>
</span></div>
<div><span style="background-color:rgba(255,255,255,0)"><br>
</span></div>
<div>
<ul>
<li><span style="background-color:rgba(255,255,255,0)">^[0-9,a-z,A-Z]{0,6}@.*</span></li><ul>
<li><span style="background-color:rgba(255,255,255,0)"> The first 0-6 characters are made up of alphanumerics 0-9 and/or upper/lower case letters, “@“ anything</span></li><ul>
<li><span style="background-color:rgba(255,255,255,0)">Example: <a href="mailto:123456@domain.com" dir="ltr" target="_blank">123456@domain.com</a></span></li><li><span style="background-color:rgba(255,255,255,0)">Example: <a href="mailto:NoAuth@domian.com" dir="ltr" target="_blank">NoAuth@domian.com</a></span></li><li><span style="background-color:rgba(255,255,255,0)">Example: <a href="mailto:9999@domain.com" dir="ltr" target="_blank">9999@domain.com</a></span></li></ul>
</ul>
</ul>
<ul>
<li><span style="background-color:rgba(255,255,255,0)">^[0-9,a-z,A-Z]{0,6}$</span></li><ul>
<li><span style="background-color:rgba(255,255,255,0)">The first 0-6 characters are made up of alphanumerics 0-9 and/or upper/lower case letter and do not exceed the 6th character</span></li><li><span style="background-color:rgba(255,255,255,0)">Example: 1000</span></li><li><span style="background-color:rgba(255,255,255,0)">Example: 9999</span></li><li><span style="background-color:rgba(255,255,255,0)">Example: NoAuth</span></li><li><br>
</li></ul>
</ul>
</div>
</div>
<div>Good Luck!</div>
<div><br>
</div>
<div>-Ryan</div>
<div>
<div dir="ltr"><br>
On May 15, 2019, at 19:30, Jonathan Charles <<a href="mailto:jonvoip@gmail.com" target="_blank">jonvoip@gmail.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div dir="ltr">Thanks!... looks like I have some more reading to do... so how does it prevent anyone from sending a pstn number to my expressway? How does it authenticate the Webex devices to pass calls to CUCM for?
<div><br>
</div>
<div>Customer has enterprise licensing, so they should be able to do whatever they want...</div>
<div><br>
</div>
<div><br>
</div>
<div>Jonathan</div>
<div><br>
</div>
<div><br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, May 15, 2019 at 6:16 PM Ryan Huff <<a href="mailto:ryanhuff@outlook.com" target="_blank">ryanhuff@outlook.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="auto">You’ll need a specific Webex DNS zone and the traversal trunk really just needs to support pre-loaded route headers and SIP parameter preservation (those are the most significant differences over the traversal / neighbor zone you might have
setup for B2B).
<div><br>
</div>
<div>It’s a simple enough configuration, but there are a few more moving parts than what the marketing may lead one to believe. Here is the configuration documentation: <a href="https://eur04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cisco.com%2Fc%2Fen%2Fus%2Ftd%2Fdocs%2Fvoice_ip_comm%2FcloudCollaboration%2Fspark%2Fhybridservices%2Fcallservices%2Fcmgt_b_ciscospark-hybrid-call-service-config-guide.html&data=02%7C01%7C%7C7ee4a253802142b2a30f08d6d98d40fe%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636935598030629961&sdata=1n%2BPAGaE0G2GZrt3Jq7l2uo41jWG0NYoZh5cUcHFAaw%3D&reserved=0" target="_blank">https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cloudCollaboration/spark/hybridservices/callservices/cmgt_b_ciscospark-hybrid-call-service-config-guide.html</a></div>
<div><br>
</div>
<div>Oh and don’t forget to enable MTLS on the edge and also be aware the ControlHub now requires CCM 11.5.1SU3 or better (it detects CCM version via call connector on Exp-C). It wouldn’t allow you to enable hybrid calling on cloud registered devices otherwise.</div>
<div><br>
</div>
<div>You can technically still get away using Expressway 8.11.4, but that’ll soon be a deprecated version for hybrid calling (you’ll get an alarm about it), so might as well go to 12.5.2 and be done with it.</div>
<div><br>
</div>
<div>BTW, if you try to upgrade an 8.x Expressway to 12.5.x, you will interact with GLO for the 12.x release key (can’t do it from the self service portal because the existing 8.x virtual license is already associated to a PAK and GLO has to invalidate that
relationship first, then hash your new keys to 12.5.x).</div>
<div><br>
</div>
<div>Good Luck!</div>
<div><br>
</div>
<div>- Ryan<br>
<div dir="ltr"><br>
On May 15, 2019, at 18:42, Lelio Fulgenzi <<a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div><br>
</div>
Very good question. From what I understand, there’s a special traversal link built and it’s all “built-in” and uses the CSS of the remote destination or something like that.
<div><br>
</div>
<div>I’ve read absolutely zero docs about this. This is all based on a quick convo I had. I had the same worries and if I recall correctly, my worries were somewhat alleviated. </div>
<div><br>
</div>
<div>However, that being said, there is only one template in control hub, so if your user needs a different setup on their remote destination (or something like that) you need to go make a manual change. </div>
<div><br>
</div>
<div>It’s sorta like how there’s only one licensing template in control hub for new users. We’re gonna struggle with that. We might have to engage (professional) services which make uses of APIs to assign different services for different users in webex. But
I digress. </div>
<div><br>
<div id="gmail-m_7241152079220097586gmail-m_327357299127115259AppleMailSignature" dir="ltr">
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"><i>-sent from mobile device-</i></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"><b><br>
</b></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"><b>Lelio Fulgenzi, B.A.</b> | Senior Analyst<u></u><u></u></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)">Computing and Communications Services | University of Guelph<u></u><u></u></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)">Room 037 Animal Science & Nutrition Bldg | <a dir="ltr">50 Stone Rd E | Guelph, ON | N1G 2W1</a><u></u><u></u></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><font color="#000000"><span style="background-color:rgba(255,255,255,0)"><a href="tel:519-824-4120;56354" dir="ltr" target="_blank">519-824-4120 Ext. 56354</a> | <a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a><u></u><u></u></span></font></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><font color="#000000"><span style="background-color:rgba(255,255,255,0)"><a href="https://eur04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.uoguelph.ca%2Fccs&data=02%7C01%7C%7C7ee4a253802142b2a30f08d6d98d40fe%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636935598030639969&sdata=rnRA4o7FYEPynK7wGT4D8HPePQV7pDXYc69P5PiURa4%3D&reserved=0" target="_blank">www.uoguelph.ca/ccs</a> |
@UofGCCS on Instagram, Twitter and Facebook<u></u><u></u></span></font></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"><img border="0" width="187" height="100" id="gmail-m_7241152079220097586gmail-m_327357299127115259Picture_x0020_1" alt="University of Guelph Cornerstone with Improve Life tagline" action="http://null" title="null" style="width: 1.9479in; height: 1.0416in;"></span></p>
</div>
<div dir="ltr"><br>
On May 15, 2019, at 5:20 PM, Jonathan Charles <<a href="mailto:jonvoip@gmail.com" target="_blank">jonvoip@gmail.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div dir="ltr">Enabling Cisco hybrid call and routing calls to the PSTN using local gateway (via Expressway C/E pair).
<div><br>
</div>
<div>What search rules do we need on the E and C?</div>
<div><br>
</div>
<div>How do we prevent toll fraud if we have E.164 patterns inbound on our Expressways?</div>
<div><br>
</div>
<div>Am I being paranoid?</div>
<div><br>
</div>
<div><br>
</div>
<div>Jonathan</div>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div dir="ltr"><span>_______________________________________________</span><br>
<span>cisco-voip mailing list</span><br>
<span><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a></span><br>
<span><a href="https://eur04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7C%7C7ee4a253802142b2a30f08d6d98d40fe%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636935598030639969&sdata=sSSIRWnroOXGc9j1XbdMp5%2FZ9xcQ%2FXqV3DmMD5hXBMY%3D&reserved=0" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a></span><br>
</div>
</blockquote>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div dir="ltr"><span>_______________________________________________</span><br>
<span>cisco-voip mailing list</span><br>
<span><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a></span><br>
<span><a href="https://eur04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7C%7C7ee4a253802142b2a30f08d6d98d40fe%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636935598030649977&sdata=h481tpl5aQI%2BYfdWwiuYXVuQlKvZms3jQlHH6JXmL4U%3D&reserved=0" target="_blank">https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7C%7C5b817b962f3e419f017508d6d986a8fe%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636935569711652307&sdata=UCJB8OKg5UlpRWHaTtp6Y2AJNzpfh6NmVWdejkBYmDI%3D&reserved=0</a></span><br>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
</div>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</blockquote></div>