The Default Zone
The Default Zone represents any incoming calls from endpoints or other devices that are unregistered or not
recognized as belonging to the Local Zone or any of the existing configured zones.
The VCS comes pre-configured with the Default Zone and
default links
between it and both the Default
Subzone and the Traversal Subzone. Note that the Default Zone cannot be deleted.
Configuring the Default Zone
By configuring the Default Zone you can control how the VCS handles calls from unrecognized systems and
endpoints. To configure the Default Zone, go to
Configuration > Zones > Zones
and click on
DefaultZone
.
The configurable options are:
Field
Description
Usage tips
Authentication
policy
The
Authentication policy
setting
controls how the VCS challenges
incoming messages to the Default
Zone.
See
Authentication policy configuration options [p.105]
for
more information.
Media
encryption
mode
The
Media encryption mode
setting controls the media
encryption capabilities for SIP
calls flowing through the Default
Zone.
See
Configuring media encryption policy [p.135]
for more
information.
ICE support
Controls whether ICE messages
are supported by the devices in
this zone.
See
Configuring ICE messaging support [p.137]
for more
information.
Use Default
Zone access
rules
The
Use Default Zone access
rules
setting controls which
external systems are allowed to
connect over SIP TLS to the VCS
via the Default Zone.
If the access rules are enabled, then by default no systems
will be allowed to connect over SIP TLS via the Default
Zone; you must set up the
access rules
for the systems you
want to grant access. In essence, it enables
TLS verify
mode
on the Default Zone.
Note that this setting does not affect other connections to
the Default Zone (H.323 and SIP UDP/TCP).
Using links and pipes to manage access and bandwidth
You can also manage calls from unrecognized systems and endpoints by configuring the
links
and
pipes
associated with the Default Zone. For example, you can:
n
delete the default links to prevent any incoming calls from unrecognized endpoints
n
apply pipes to the default links to control the bandwidth consumed by incoming calls from unrecognized
endpoints
Cisco VCS Administrator Guide (X8.1.1)
Page 139 of 507
Zones and neighbors
The Default Zone