How To Set Up eSign in CMS

How to integration sign set up cms

Hey good morning so first of all welcome to everyone for this webinar on CMS to you to again time constraint there's a lot to talk about or CMS but what we would focus on is going to be on the introduction to CMS and also setting up the call courage and XMPP the web admin and the web bridge we would also be looking at some API calls to the CMS so first of all some quick introduction for some of you who do not know me my name is Rohit and I'm a full-time instructor we're tiny I have five CCR UCC routes which security voice collaboration and service providers so without further ado let's start with CMS so the first thing what we would look at is what exactly is CMS now if you look at the cisco cisco meeting server it basically brings video audio and web communication together to meet the collaboration needs of the company and it basically allows you to create join meetings from anywhere it could be busy maybe joining from a rule or a desktop video system mobile client or even a browser so as as a client or a customer you don't really need to install any applications you can just use a plain browser to join meetings maybe as a guest or maybe a specific meeting to a specific space where you could join by one click join by just going to the browser maybe I can send you a link or it could be like a meeting ID I could set that up and with CMS I can do that so it doesn't really need to be just a browser it could be an application also I could use an application to join the meetings or I could use a video endpoint so even my 88 45 phones I could use that to join a meeting space by maybe dialing into an IVR which CMS has and I could join the meeting space the biggest advantage of the CMS is that everyone gets a consistent familiar meeting experience so it doesn't matter whether you're joining in from Cisco endpoint or maybe a third-party video endpoint or maybe a jabber or Cisco meeting app or even the browser so irrespective of how you joined into the meeting your experience would still be the same so that's the best part about the CMS they've kept the experience exactly the same the look and feel is exactly the same whether it's a browser or Cisco or non Cisco video endpoint so there are some major components that we really need to talk about as far as the CMS is concerned so obviously there's a lot more than what I would display to you in this webinar there's a lot more to it but again due to time constraint I would just discuss the four main components of CMS so the first one is it's going to be the call bridge which is your MCU the web bridge to basically allow WebRTC logins or remote login through browsers we have the web admin which can be used for management at the same time it can be used for ad-hoc and then we have the XMPP which is again a pretty core component of CMS so these four components is what we would focus on in this webinar so what exactly is the coal bridge so the coal bridge is the core component of CMS it's basically used to bridge at the conference connection so anytime you have a connection coming in whether it's coming in from a browser or a Cisco meeting app or a video endpoint it's the coal bridge which is the main component which is used to bridge the participants to a meeting so maybe let's say if I was coming in from an XMPP or maybe it's ASCO meeting app the Cisco meeting app or even the WebRTC would act as an XMPP client and the connection is through the coal bridge which is the major main component which does the connection to the XMPP server so it's the primary component of the solution it must always be present in any deployment so it doesn't matter whether you have a single deployment or a single split deployment or maybe you have a resilience configured it doesn't really matter you're a coal bridge must always be present it is also the media processing engine and the API integration point so if I have to make API calls this is where my API integration point is and then we have it is also the call processing and routing component excuse me and it is fully brandable audio and video from so I could actually go and customize my CMS with audio prompts video prompts so let's say if somebody calls in it could say welcome to I knee and maybe enter the meeting ID or maybe press something to go to a meeting ID I could customize it as for my requirement I could even do video prompts where maybe a video be is being played to you maybe something about the company so this is coal bridge the next component is going to be the web bridge the web bridge service is it basically allows web RTC connections from the browser so now if you look at the CMS there are many ways to connect or join a meeting one way it could be I joined from a video endpoint maybe I dial a call ID of a space or maybe I go through an IVR and then enter the meeting ID or maybe the call ID of the space another way it could be maybe I don't have a video endpoint I could do it from jabber or another way it could be maybe I use I install an application which is the Cisco meeting app but what if I don't really want to use any of that I just want to use a browser because you really cannot tell maybe if I am a company and I want to have a meeting with a customer and I want the customer to join the meeting space maybe I'm trying to sell something media trying to give a demo of something I don't really want the customer to to be me telling the customer saying hey just install this application everybody has a browser so with WebRTC connection I could just simply use a browser what browsers are supported we have chrome Chromebooks really well with WebRTC it suposed Firefox it supports opera I believe it does not support Internet Explorer and I believe it does not support Safari but maybe in the newer versions it must be but as of right now what I know is that it's not supported it mainly works with opera Chrome and Firefox now how does the connection actually happen so for the connection of the web RTC to your call bridge that basically happens through XMPP so your browser or your client your app just is competing app that becomes the XMPP client and and I need to basically integrate my caldrich with the XMPP server I'll actually show you the process the step-by-step process of how it does a DNS lookup it tries to find the XMPP server and the connection is established we'll talk about that in probably one of my other slides which is coming up so like I said it uses Chrome Firefox or para chrome is preferred officially cisco actually says that in what the document I've read that it actually prefers chrome to be used now one thing about the web bridge is that the web bridge by default works on port 443 the problem is that even the web admin works on four four three you cannot have web admin and the web bridge using the same port so if you were using the web admin you need or if you want to activate web bridge then you need to go back to your web admin and change the port or the IP as long as you do that as I'm going to keep a different IP or you keep a different port you can you can use your web bridge but by default they both use for for free so you need to change your web admin to use a different IP or a different port in our case when we actually set this up we will be using a different port for my web admin because I only have one IP so so if somebody connects to my CMS let's say HQ - CMS Turin accom the DNS would resolve to an IP address of my CMS and if it is 4 4 3 it would show me the Cisco meeting app application in the browser but if I was going to maybe 4 4 5 if I change my web admin and I go to 4:45 then he would take me to the GUI login of off my CMS so we're bridge typically mainly used for web RTC again it's not something that you have to configure it's not necessary if you don't need web RTC you don't need to configure it the main component that you always need is you need the web admin you require call bridge and you require XMPP server these are three things which you always need web bridge it depends if you do want browser-based connection which again normally you would have that introduction so like I said the web admin sir is the service to enable web GUI for the meeting server the web admin is specifically configured to allow the basically it's used to configure how call bridge talks to other components so it's it's through the web admin I would decide how is my call bridge going to talk with the XMPP or other services or other components I define all of those things using the web admin it is required for call routing configuration so if you do want to do call rodding then you can do that through the web admin you can do API calls also to configure call routing and required for viewing logs while the web and increasing log levels all of this can be done from the web admin the web admin is mainly used for besides the GUI it is also used for ad hoc so if I want to actively add someone in a conference so for example if I call you and you and me are talking on the phone or view me are in a meeting and I need to add a third person I could do that with ad hoc again CMS also supports run the rule conferencing so maybe I have like how we had something called us meet me so CMS also has something called as run the book conferencing so if we can dial in to a specific number and order space and they can join the conference or I could do ad hoc so if you're doing ad hoc you require the web admin service one thing that you should note is that if you are doing ad hoc which normally you would you must have the certificate signed by a public CA or a private CA it must be a sign cert you cannot use a self sign that's if you're doing at heart if you're not doing ad hoc if I just want the web admin to be use just for GUI see I don't need sign third eye I only need a set I could I could work with the self-signed cert I could work with the self-signed cert but if I'm doing ad hoc I do need a sign cert in fact more all of the components of CMS whether the coal bridge or XMPP or web bridge or the web admin or recording or screaming or turn services they all require certificates whether you use a self-signed or you use a sign that depends so everything can use self sign except for web admin web admin requires sign if you're doing ad hoc otherwise everything can be Sailor self sign but again in a lab environment it doesn't matter it doesn't matter I can use self sign everywhere just for web admin maybe I use a sign cert in a lab environment but production you'll definitely have maybe a private CA server or maybe a public CSL you will definitely get it signed so this is my web admin again it uses 443 which is default you can change that to four four five or seven four four three maybe you can change that again to change the web admin port you have to do that from the GUI which basically means that I have to activate the web admin first to run on four four three which is default login and then change the port to maybe seven four four three or four four five so you cannot just really activate both the web admin and web bridge at the same time because they actually using the same port so you activate web admin login change the port and then activate your web rige the last component that we would discuss would be the XMPP the XMPP service allows or it is basically used to enable system meeting app which basically allows PC clients or iOS like phones iPads they can connect so if you have a phone or an iPad and you don't want to use WebRTC you want to maybe use a meeting app so I could download an application which is the Cisco meeting app I could download that install that and then I can use the meeting app to join meetings so XMPP is going to be mainly used for that but it's not just about Cisco meeting app even my web bridge or the WebRTC connection that the web app is the or the browser acts as an XMPP client and then we have the Cole Bridge integrating with the XMPP server which has to be configured on the CMS so the XMPP service handles signaling to and from the Cisco meeting app it is the registration point for desktop and mobile clients as well as the web bridge so like I said earlier that it's not about just the meeting app it's also about the web bridge so even the web bridge uses that it's the registration point so my meeting app or the browser the web bridge they all act as a client it allows for calls instant messaging and presence it is traversal capable so I could basically go through the expressway maybe let's say if I have a customer somewhere on the internet and he wants to connect or maybe enjoying a meeting he could connect from the Internet by traversing through the firewall through the expressway obviously you would have to configure the expressway to support turn services has to be turned on on the expressway and you will also have to do that on the CMS again that can only be done by doing API calls to to your CMS you cannot enable turn services from the GUI in fact very few things can be done from the GUI it's not like a call manager where you could do so much but everything what you do is you do it by making an API call to the CMS one important thing is it requires LDAP source to be configured on the Cole bridge with users imported so it's like this it's not like I like a call manager which goes to authenticate to an LDAP server the problem is that CMS needs to import all the users only then a user can log in through the Cisco meeting app or even the WebRTC browser now what about customer customer may not have an account but then customer doesn't need to log in as a user you need to log in as a guest so for guests it's not going to ask me anything it's just going to ask me for maybe your name your email address whatever changes I want to ask him I can do that but a customer just can log in as as guest but as an employee I need to log in with my account so maybe I log in as Tony Stark at any calm that's my username password so for me to login I need to integrate with LDAP and I need to import all the users only then the Cisco meeting app makes sense or even the web bridge makes sense because otherwise you just cannot log in there's no user account and you cannot create the user accounts through the GUI you cannot manually create them you can create spaces manually through the GUI but users I cannot create it from the GUI I have to do an API call so this is one of the key slide for basically looking at how the the the call happens basically my signal flow so let's say if I use a it could be on the internet or it could be within the organization a user tries to login so once the user tries to login that user the applications is for meeting app or even the browser acts as an XMPP client so it comes to the call bridge because call bridge is the core component it is the it is the component that integrates to find the XMPP server for the client so the call bridge will first do a lookup for XMPP server settings it's like how jabber jabber looks for cisco UDS or the collab edge depending on where you're connecting from so it's same thing like Java so the call bridge is going to do a lookup it's an SR we look up which it looks for the settings of XMPP so for that the when once it tries to look that up it's go look at for the it's gonna look for the fqdn and it's gonna make a query to the DNS server so obviously you need a DNS may be an internal DNS may be an external DNS as long as your CMS can resolve the XMPP is IP or which is again eventually going to point to CMS's IP again so it tries to resolve that SR we look up and by default it works on port 5 to 2 through you can change that but default is that and once you get a response the the call bridge and the XMPP would basically evaluate the cert the certs and if they are integrated which you must pre do you must have called bridge and XMPP pre-integrated for this to work so whenever I create the component of coal bridge when I create the component of XMPP I would have to do an integration between them so this all of this signal flow would make no sense if I have not done the integration between coal bridge and X and VP it makes no sense because even if I try to find through DNS okay who's my what's my XMPP so the SR we look up is for underscore XMPP - client so even if I do find that if my integration has not been done the cal would fail or them you would not be able to join the meeting so once the registration request is authorized which means the integration has been done then the XMPP sends back an authorization may be succeeded message back to the coal bridge and then your Mead you're connected to the meeting so this is the whole process of client connecting through a Cisco meeting app or a browser now what are the certificate requirements like I said earlier all of the components of CMS they all require certs I could use self-signed my third could be self-signed it could be a private CA it could be a public CA but they all need a cert I have to configure certificates so but again from a production perspective you would probably use a private CA or a public CA you would never use self sign but you when you practice you don't need to use a public CA or a private CA well in fact you could if you have like the Windows machine which is configured as a CA server which we have in our racks so you could use like the private CA to get your certificate signed but if you're just testing it out the features then you can just use a self-signed cert ad hoc won't work but everything else would still work so this was the base or the basic for introduction basically to CMS the next thing what we will do is we will now actually configure call bridge XMPP we will configure all of this and test it out one by one we would also do an API call to the CMS maybe what we can do is maybe we can do an API call to the CMS maybe to him for the users maybe integrate with LDAP maybe we could do that so I have my CMS here let me in fact expand it a bit so it gets bigger let's make this 36 all right now since everything is sod based there are two things or three things which become extremely important first thing would be NTP you must have an NTP server which ensures that your time is correct because you don't want your time to be incorrect and because of that your certificates become invalid so that's the first thing that I would check and maybe define time zone so let's go and do time zone you can give the command list which shows you the entire all the lists of kind zones available so let's just choose any one maybe letters use where'd it go perfect and yep let's use this one so again you can just choose it choose any one from your list depending on what time zone you are in so now again tab really does not work I mean it works sometimes sometimes it doesn't work so you can use the question mark to give you a hint about the commands so let's say if I do time zone and let me see in fact if so you're the tab is working for time zone it's working and let's say if I do a question mark it's different from an iOS because in the iOS if I do a question mark it just shows me the list of commands supported after time zone you know I have to hit enter it doesn't shows me the format of the syntax of the time zone command so let's give the command time zone and put this as p st 8 PDT I do need to reboot CMS for the time zone to take effect I will do that once I set up the NTP so NTP is going to be again you can do a question mark to look at the commands so I can do an NTP server ad I could do a TP server delete or maybe an NTP server list if I have multiple NTP servers again if I do have multiple entity servers it's going to be based on the stratum value so whichever 10 DB server hat as a lower stratum that that would be the clock source so I just have one in DB server so NDP's ad let's put this has 150 726 1.4 which is one of my NTP served master which is already pre-configured at the backend so I do have a router which is configured for for NTP to serve time and now my CMS would take time from from that server and then let's also add DNS so again I could say I could just basically say DNS question mark and it me all of the DNS settings or the commands so let's set this up TNS and forward now if I see the cab is not working right now if I'm trying tab it doesn't work so it kind of from the for some commands it work for some command it doesn't work so you just need to do a DNS question mark and take it from there so DNS ad forwards own IANA comms that's my domain and my DNS server is going to be 1164 9 which is my internal DNS server in my rack so that's something which is there so DNS add forward zone ina calm and then let's this reboot our CMS again CMS is free fast in the reboot unlike maybe a router or call manager takes really long just takes like a few seconds and the reboot would be done so a few initial things you have to do from the CLI so so I have set up my time zone I have set up my NTP I have set up my DNS and I've done my reboot now the next thing is going to be to set up my coal bridge like I said coal bridge was the core component right it was the component that bridges the call or the conference so for that you can give the command call bridge and again if you hit Enter that's a call bridge it will tell you whether it's called bridge has configured or it's not configured if it is configured you would see some list of settings for the call bridge so for example if I give the command call bridge listen a is my interface so that's my interface of CMS so once I get the command call bridge listen a and if I gave the command call bridge and hit enter it'll tell me now okay I have the [Music] call bridge is listening on interface a and there's no proof for interface there's no key file there is no there is no certificates or anything now if you remember I told you earlier that you require search for everything all right I could do a self sign or I could do a sign set for this webinar we would use a self-signed cert I would not be doing a sign surd again that's because it takes too long so I would create a self-signed cert which we can use so for creating a self-signed cert the commander's crypto or in fact PGI self-signed and then just give a name whatever name you want so let's just give the name self-irony maybe self-signed tiny whatever name you want it creates two files for you what on a self-signed I need a key which is this one and self sign I need our CRT so now I have a self-signed cert created and once I've done that I can now go back to my call bridge and ask my call wish to use this certificate to use the cert I would give the command called grid search again you can do a question mark just to show the list of commands so if you see I have called bridge certs here I have to put the key file then the CRT fine and maybe then the cert bundle so let's say if I had a sign cert I would have to put three things first is the key file then is the CRT file which is your sensor and then is the CA servers signs that so this is your sign cert and this is see a service sign so let's say if you're getting a certificate from GoDaddy and this would be good at you certificate and this would be your sign so from GoDaddy since I'm not using a signs third all I need to do is call bridge so-called bridge certs and I would give self-signed I need that key and then self signed I nee start CR T hit enter so now if I go and get call bridge command you would see there okay I'm using interface a and the key file is self sign I need key and the certificate file is self sign I need our CRT once I've done this for the coal bridge to use this certificate I should always do a restart so let's do that you start and hit enter once I restart the coal bridge it'll give me like a success message if my certificates are okay so let's say if you were getting a sign cert and your certificates were not valid once I hit call bridge restart it would say fail or failure it cuz maybe it'll say that your key and certificate pair does not match so if your certificates are not signed correctly or maybe the names are different then maybe you would see a failure in our case we used a self signed one so it's not a problem so now my call bridge has been set up the next thing I set up is my XMPP so for setting up XMPP the command is XMPP if I see XMPP right now it says enabled is false so it's not enabled by default see for call bridge I didn't have to enable it I only had to give the command called bridge listen a and then define my certs and we start for bridge but for XMPP it is disabled by default so I have to enable it so the first command for XMPP would be XMPP again listen on which interface a then XMPP always requires a domain if you remember the slide which was the signal flow when the Cole bridge does a lookup it does a lookup based on the domain so once that once I find the SR we look up it priced the XMPP server would would would have to have this domain whatever the domain is in u.s. are we record so I have to define the domain so I'm going to use XMPP Jemaine I need calm and in fact they've been do one thing so let's say if I don't define the domain the the good part is that it actually prompts back so when I try it when I try to enable XMPP if I have not defined the domain it's actually going to say that could not enable XMPP because domain not configured so it actually gives you that message that's pretty nice and again XMPP requires certificates so XMPP certs would be the same self signed one so use the same command and finally XMPP enable so for commands is what you need to set up XMPP now you remember I told you one thing that there's no point of WebRTC or Cisco meeting app or anybody trying to to join a meeting space there's no point if I have not done an integration between the Cole bridge and XMPP if I have not done that then it's not going to work because the meeting app or even the browser that's an acceptable ient and they do they connect they don't connect to like simply be directly it's through the Cole bridge so I have to do a pre integration between them only then I would be able to to make it work so for integrating mine Cole bridge with XMPP the command is XMPP Cole bridge again my tab doesn't work so I have to type it out so called bridge if I can spell that right and then add and give any name that you want so let's just give a conference bridge choose CMS so once I give this command it gives me a secret registration key like a password and this is the password that I need to go to my web admin log in and configure my call bridge to use this so what I've actually done right now my integration is not complete yet what I've done is that I have told XMPP dad okay you need to integrate with it with Cole bridge but the integration is not completed if it has to be done two ways it's a the curb handshake between them it has to be done two ways so my whole bridge hasn't been configured yet to use this password the only way to do that would be through the GUI on the web admin so I will now go and configure my web admin again you should note this down and maybe store it somewhere so if I just give XMPP let's say question mark and I can look at the XMPP call bridge list command that's if I've forgotten the password or I can just go back and give the command makes MPP called rich list it will show me the password again so next step is to enable the web admin which is for GUI access in fact at this point of time if I go to my GUI and try to access CMS I believe it's somewhere here HQ CMS so if I try to access it says cannot access or cannot connect because web admin is not enabled by default so no GUI access by default so going back command would be web admin listen a now I know that I'm going to be setting up even the web bridge like I said web bridge and web admin the both use the same port for for three so I must change my maybe my web admin port to some other port so let's set this to four four five so web admin listen on interface a on port four four five and then web admin certs would again be the same set that we used earlier the self-signed one and finally I enabled my web admin so now web admin service or service has basically been enabled I should be able to access my CMS through the GUI going back and let's try let's try so I'm still not getting an accident me go back so I still don't get access to my web admin let's see why now that the reason why I was not able to access my web admin what we do we said we are not going to use four four three by default it tries to use what four four three why don't we say in a config use for four five not four four three right by default it tries to use four four three so obviously it's not going to work let's go back and change the port to four four five and that should work and it does I get GUI access to my CMS let's try and login let me try and expand the screen a bit username admin a straight-up asks for I believe a CGI collab and that's my GUI access so if I go back to general or in fact means look at the logs first if I go to event logs and look at the logs so I don't have any XMPP registration requests coming in yet let's go and do configuration general and my call bridge so that if you remember the name that we gave was CFP CMS domain would be I need comm server address would be HQ - CMS that I need comm which is my CMS is fqdn and the shared secret the password would be this one let me know one thing that you just put a wrong password I'll just eliminate the last one and let's just put a wrong password and save it so obviously my my call bridge XMPP integration would not be done if I look back at my logs it should say failed so it's trying to do one handshake handshake failed for reason seven authentication failure that basically tells me that obviously my shared secret password may be incorrect let's go back and change that to except EP called fridge list take this and save and let's go back to my bent logs I should see a success which I can see here that authentication component succeeded and my basic connection between the XMPP and the Cole bridge is done it is complete now so at this point of time if I go to let's say my maybe if I go to my call manager if you see in my call manager I do have some users I don't know if they were local users or they may be the oil diffusers but like I said earlier from my slide that you for XMPP to work you require LDAP source and the users to be imported otherwise it really doesn't make sense because nobody can login so I believe I have some users on Cole manager I have to UM check I just have one user Bruce Banner but if I look at CMS status users I don't have any users so obviously for this to work I would need to configure LDAP so before we actually configure LDAP there's a there's one thing that I wanted to show you it's in fact go through one of my machine I believe this is Java 2 and I have Cisco meeting app on this machine and if I try to login let's say with Bruce start banner a tiny comm and password Cisco it says unable to connect check your user name and password so obviously I don't have that at this point of time I don't have that because I don't have any users which is basically imported at this point of time so so let's let's in fact do a quick API call to my CMS I could do the LDAP integration from the CMS GUI I could just go back here and go to Active Directory and fill this up I could fill this up and that would automatically synchronize and import all the users and maybe create spaces for those users also I could do it here but since in this webinar we were going to do an API call so we might as well do that so the first thing that you need is the API reference guide that's the first thing you need because it's really impossible for you to remember everything for making API calls to CMS that's a reference guide which is available to you in the lab also this guru cisco.com slash go slash meetings and scroll down to technical support and then you should see programming guides and here you would see API reference guys you can just take any API reference guide obviously the new one one would have more things in it so I'm just gonna choose the the first 12.9 API reference guide and what we want to do we want to import users create spaces basically integrate with LDAP so just look at your API guide for LDAP I believe it is somewhere here well that's just search LDAP all right so I have a lap here it's Levin dot xi dot X so let me expand this so it actually gives you this is a free amazing document because it actually gives you pretty much a step-by-step approach of actually what you need to do to make an API call that' the best part about this document so [Music] so if you look at this the first one 11.1 dot one it is retrieving information from an LDAP server so if you already had LDAP servers configured then you can retrieve that information I don't have any LDAP configured yet so I don't I would skip this I'm not retrieving anything at this point of time I'll go to the next point which is 1.2 11 1 2 adding an LDAP server and it gives you the that create a post method for LDAP servers so again to do API calls we would have to use postman and postman has to be installed on any PC which has access to CMS so again the connection point for API would be would basically be through the call bridge so what I'm going to do is on my PC which is this one I have postman pre-installed that's open that up you you you all right so once it opens up a few things you should do before so the first thing you would go to file settings and uncheck SSL certificate verification because if you don't do that I don't have an SSL certificate so if I don't know that my API call to the CMS is going to fail so I'm gonna uncheck that and then close this and once I've done that next thing that I would do is go to to the type go type and choose basic authentication here is where I would put the credentials to login to CMS so as of right now I only have one user account which is administrator and that has the role of admin basically full rights normally you would not use the administrator account here you would create a new account a new user for management for API you would create a new user with the role as API so there so the the reason you do that is because then that user can only be used to make API calls to CMS he would not be able to log into the GUI of of your CMS so normally you would want to create a new user whatever name you want but but the role should be API but I'm not doing that I'm just going to use the administrator right now but if you do want to know how to create users for API then we could maybe watch the CMS videos I think it in one of those videos I'm discussing that so user name administrator password would be CCI a collab and I believe that's that CCI collab and once I've set this up the next thing I would do is go to this tab here and change it to post as per my document here let me see if I can increase this a bit zoom in it's still small looks better okay so I'm using the administrator account but like I said you could use an on administrator account but just need an API user which has the role of API so Jesus to post story somebody needs to post because it's Asia I need a post method and this is the name that's copy this from this document and here you're you are a always remains the same so the first part of the URL always remains the same which is HTTP 4/4 / HQ the CMS that I need comm : 4 4 5 the reason I'm giving 4 or 5 because I changed my web admin if you remember I changed my web admin to 4 4 5 so change it so give the port 4 4 5 and /ap i /v one so this part always remains the same it never changes increase a bit more alright so this part always remains the same this never changes what I give ahead of this would be a spur that documents the document says it should be a lap sword I'll app servers so what I'm actually effectively doing right now is as for this document I'm adding an LDAP server if I look back at CMS what I'm effectively doing I'm actually doing this part right now this is the part I'm actually configuring the what's the LDAP servers IP what's the port was the username password to connect to it and is it a secure connection or not I'm actually filling this part but not through the GUI I'm doing this through API so choose LDAP servers then go to body choose the format as X www form URL encoded choose this format and go back to that document and now we need to fill this this part so take it from here address the address would be my LDAP servers IP or fqdn HQ des DNS third IANA calm that's my lab server the next one was port number so name is something that I need to give from version 2.9 so we are not using version 2.9 so you don't need to give the name this is a pretty old version of the CMS and I believe 2.9 is all the latest I believe the new version also doesn't have 2.9 I think it's 2.5 but they've given like a like a star or an Asterix next to the equipment list which which kind of says that at any given point of time they can change the version of CMS but I think as of right now it's listed x 2.5 but I believe the latest is 2.9 so I don't think you would be tested for 2.9 so quickly good just it's just latest one but I think they could - is 2.5 but what I would suggest is always use the same versions when you're practicing let's say if you were attempting a CCI in lab example you should probably use the same versions that you would encounter in the lab because maybe in production you may not use 2.5 or maybe 2.2 or something you may not use that but if that's in the lab then you must use the same one just so that you know you get familiar with the GUI or the experience so port number is the next one let's go and put the port number the port number would be 389 then the next thing that I would do would be the username that would be administrator at I need calm that's my elapsed I was username/password so and then the password I believe is CCI ecolab CCI collab and is the connection going to be secure or non secure so here it basically says that to or false so if I am using TLS then I should set that to true if not then if false and TCP would be used I would set this to false so let this set this to false and then finally I can do a send I should see a 200 ok and let's do a get just to cross check if my server part was created to a get so it pulls information the differences post is sending information to the CMS versus get is pulling information from the CMS so if you see now I basically send all that information and created an LDAP server on the CMS and these are this is my LDAP server ID now I don't recommend you should actually store this somewhere you should store this somewhere maybe in a notepad or something I'm not doing that I'm just going to keep this tab open so that I can reuse that tab or that I be later on so Levin dot 1.2 was adding an LDAP server 11 . 1.3 was retrieving which we just did we did a get to retrieve that information so 11 1 3 is done next is 11 to 1 adding LDAP mapping so that's my next step adding an LDAP map now what are we actually filling out if I look back from that page earlier we we basically filled the first part if only we filled this part with their lab server now we are filling this part or in fact you know what the LDAP mapping is going to be a lot more so if I go back if all the information I'm actually filling this part not this one right now I'm actually filling this part and that mappings which is my display name how do I want the the space is the core spaces to be created for all the LDAP users so what information do I want to pull from the lab server and Basinger information I would I would create the space so next step is going back here this name changes to LDAP mappings so go back to your machine keep this tab just right click and click on duplicate so it creates a new tab for you but this is my lab server and this is going to be for a left mapping so let's change this to a lab mapping should give a forward slash so I left mappings change this to post again and go back to body and we will fill this out now the first thing was ji D mapping now what we are actually doing is we are actually telling CMS that when you connect to the LDAP server pull all these things from their lab server so all of these names the parameters that you see here there are actually parameters of LDAP server so if I actually go back to my LDAP machine oil app server I believe this is my lab server if I go to Active Directory and go to HQ and click on any user let's say Bruce Banner go to properties and go to attributes you would see all of these attributes here whichever I'm pulling from from there so for example I would see [Music] have employee-id i have phone number it should be JIT mapping here so this is all the attributes that I'm actually pulling so I'm telling CMS that okay go to LDAP server connects to it and pull all the lab users based on the distinguished name that I would define later on so based on that based on my my search base I would download the users and I would download based on the attributes that I'm pulling from LDAP servers so what do I need here so first is JD mapping has changed this to JD mapping and this should be again this information is actually here just go and take it from here and change it to I need calm because my users are they have like for example Bruce Banner is Boost Banner a tiny calm so I need calm what's the next thing that we need once I have my name mapping so named ping this would be dollar common name dollar so if a user on the LDAP server has a common name that would come here next thing that I need CDR tag mapping again this is optional because this can be used when you have inbound calls our bar calls coming in I'm not using that right now and someone else that go to authentic Asian ID mapping let's take that and this would be again use a principal name let's take that and put that here and next thing that I would do would be what's the next one is going to be course base URI mapping let's take this and if you look at this it says if these parameters are supplied they ensure that each user account generated by this LDAP mappings has its associated post Nikko space the user is automatically added as a member of the core space so so again this could be maybe I could use the common name dot something for example let's say let's say givers let's keep it as his first name last name dot join or something let's go back let's keep this as [Music] you so taller and taller and maybe keep it as dot join do I want a second Ryu RI I don't want that again it's optional only one is enough and then I have course base name mapping so what name do you want to give to his core space so let's go give that as maybe I could give this as taller see n dollars a common name space me eating space and if I want to create a call ID I could even create a call ID mapping which means that the reason I'm doing a call ID also is that users or endpoints like for example jabber or even a video endpoint he can dial like for example a t-888 he could just dial that hits the route patent goes through a SIP trunk to CMS and it'll ask him entered the call ID to join a meeting so let's say if I wanted to join Bruce banners meeting space I could just dial his call ID so normally his caller ID would be his extension his telephone number so I would go and say call ID would be again dollar IP phone caller that's it so my my this part which is the CMS bottom part all of this has basically been filled so I filled the display name GID mapping user name space name a primary space user part I didn't define the secondary I kept it blank and and defined the call ID so let's send this I see to win it okay and let's do a get and do a send so now I have my LDAP mapping ID also which is basically created the next thing that I have to fill is this part the LDAP source information because there may be many different types of users on the LDAP server they could be users who belong to maybe the organization HQ or organization side B or side C maybe I have a common LDAP server so here I can define LDAP sources so where I would say okay don't import everything from LDAP because there may be thousands of users there import only whoever has the base DN as oh u equals HQ and DS equals i nee and DZ equals calm again this information you can get that from the users attributes for example if I go back to Bruce Banner and go to properties and go to attribute editor if I scroll down under the user you would see here you see here that the distinguished name for u equals h QD c equals rned sequels come so I'm telling the CMS that when you import the users don't import thousands of users whoever has that base DN then input those users so for that I have to go back to my document so this part is I don't have a secondary LDAP mapping I only have one end that mappings which we have just created I coordinate to next step retrieving we've done so now next is lavender free and lap source so here in the name is LDAP sources so let's go back to my let's duplicate is first and change this too [Music] a lab sources change this to post go back to body and let's see what we need so for a lab sources I need this is what this is retrieving I don't want retrieving I want to add a lab source so first one is server so lover is who go back to the server tab and take this if you remember the first tab was I made an LDAP server second time was a lab mapping so take the servers called core servers ID and let's copy this and go back to your tab and put the server's ID here I believe it's the right one so it starts with B ends with e starts with B ends with E the next tab is mapping go to mapping and take the mappings ID it's a lot of work F and for but once you get used to it it's fun F and for what's next filter so filter is going to be put mail equals star so anybody who has a mail set in the attributes on the LDAP server those users would be imported and next is tenant I'm not doing that use a profile I'm not doing that what else is there I think that should be enough and then maybe based the end we didn't do that so base DN because I don't want to import all the users so base DN would be oh u equals HQ d C equals I nee and D C equals calm and let's remove the other tabs so there should be enough oil lab sources let's do a send and lets them do a get so a lab sources also created that's my ID for lab sources what's next next 11.4 is elapsing so now what I'm actually doing is I filled up everything from from that GUI tab I filled up everything but what I'm effectively doing is after filling this I'm going to click on sync now so that's the LDAP sync so when I click on sync that actually goes to their laps of retrieves all the information based on the parameters that I provided so the minute I do sync I would be able to see if I go to status and users I would be able to see users here once I do my sync so let's go back and duplicate this and let's change this to post and change this to adapt sink so elapse think look back to body here I would go so initiating a new and lapsing that's what we're doing we're not retrieving so what do I need LDAP source so first would be mine LDAP source which is going to be from that fili that we actually created so go back to the LDAP source tab and take the ID starts with C ends with seven and the next tab is remove then finished true or false so if you keep this as true this LDAP sync will when it has finished be removed from the system so so it can no longer be queried if you make it as false then the LDAP sync will persist so you can reuse it maybe later on I'll keep this as false I have to copy it from here let's say the Sioux Falls that's it that's all I need let's do send I believe it was post it is a post method let's do sin I see 200 okay and then let's do a get once I do get I see it was completed and I see three users were imported from the LDAP server let's go back and check her go to status users I should see three years as I have Bruce Banner I have flash and I have Tony Stark so three users were imported and if you look at the XMPP ID it is Bruce Banner a tiny comm this is basically their our login so when when they log into XMPP or they they when they log into cisco meeting app or they log into the browser you the domain part comes from here and if I go back to configuration spaces the spaces would have been automatically created you remember we gave the name as Bruce banners meeting space we give a dollar CN dollar past of years meeting space that's the name here we gave the URI user Park as Bruce Banner so they can join grossest meeting space through this or they could even call Bruce Banner using the Kohl ID 2002 which is his extension or the N or telephone number so they could die 2002 also so now I have the users imported would my call work let me in fact go back to my machine I believe I don't need the force an anymore this was API calls to CMS I did everything from postman so obviously this tool is really powerful for customization you have to do it through API calls to CMS you cannot do it through movie and it's a pretty powerful tool let me minimize this if I go back now to my meeting app if you remember earlier when I try to log in I got a message user and check your user name or password because there was no name password this time if I try to login Cisco let's see what message we get am I able to log in it still says unable to connect check your username and try again now why am I getting that the reason I'm actually getting that is because you remember I told you about how the connection happened you two tries to log in the CMS what does he do the Cole bridge what does he do first he does a look up for the SRV record do I have that now so he doesn't know where is my XMPP server because this guy is a client my Cisco meeting app is the client XMPP client so I need an SR we record on my DNS machine which is here let's go and create one forward look up zone I need calm right click go to other new records scroll down to SR we and create a record so this would be for domain I need calm and the service would be underscore XMPP - client protocol would be underscore TCP and if you remember the port number default is 5 2 2 2 and who's offering the service CMS so HQ - CMS da da any calm so now I have an SR we record also created let's go back and try logging in this time this time I was able to log in I don't get that incorrect username or password let's go to Advanced Settings trust this self sign said and continue so now Bruce Banner is basically logged in to Chua meetings to his Cisco meeting app and he can actually go and join a meeting or somebody else can join a meeting so let's say if I use an endpoint on call manager wants to join a meeting space maybe he wants to join that how would I do that so before doing that I think my call manager is pre-configured let me just quickly check what do I need on call manager I just need one SIP trunk to CMS and I need one route pattern going to CMS so [Music] I think I have acid drunk pre-created let's do a find you so I do have a sip trunk here to CMS it shows full service one thing to keep in mind is that your trunk to CMS would not show full service if you do not have the SIP profile as cipro file for telepresence conferencing and your normalization script which is built-in should be if Cisco TelePresence conduct I drop this is for CMS it's built in in the Cole manager earlier for those select that without this your SIP trunk would not come up it would not show full service and I believe I also have a route pattern so I have a rock pattern which basically points to my sacrum so if my video endpoints on register to call manager if they dial a today did it goes to my SIP trunk to CMS so that's the only way they would be able to join Bruce's meeting space or they could dial the URI which I believe was Bruce Banner God join or something which we created it but I can join by from the video endpoint on the call manager by just dialing a today date and it goes to the Cole Bridge and Ivy are comes up so right now let's say if I try right now I believe the called should fail let's try it from Jabba so eight eight eight eight so it says so-called failed obviously because I don't really have anything on the on the CMS which says what do I do with a daily date I don't have anything so obviously I would have to go back to my CMS and tell him that you need to handle a today date as an IVR so under configuration general you would see an option to define the IVR number which is ADA dated so call manage a video endpoints dial a date a date it hits the route pattern goes to this through the SIP trunk to CMS the call Bridge and Ivy are prom comes in at save this and let's retry eight eight eight eight can you see CMS just came in she's asking me to enter the call ID which is I'll just enter Bruce banners call ID which is two zero zero two and then pound so he's entered Bruce banners meeting space right now he's the only participant because Bruce himself hasn't joined the meeting yet if I look back at Bruce he is in his cisco meeting and he's logged in but he does not really see a user he sees a message like a green check box which says that that there is a user I could just click on join meeting you so I see a message like a sign which says somebody has joined my meeting space and I could just click on join and should join you right so I see the both the videos I have Bruce Banner talking to Steve Rogers so if this was basically used it was a video endpoint on call manager talking through to another user who is using the Cisco meeting app and I could do the same thing through maybe a browser let me disconnect this disconnect the call and let's lower out so instead of using the Cisco meeting app I could use a browser to to basically connect inter mean stalling a software I can just use the browser so for using the browser go let's go back to the command prompt we would enable the web bridge this time so web bridge listen a I don't have to specify the port because default is 443 but I should go and define the search I believe the search web bridge certs I think it was self signed so I need a G and [Music] self sign I need at CRT and then one thing about the web bridge is that once you define the certs you have to trust those certs so I have to give the command web bridge trust I need our CRT point extra line got CRT it is self signed tiny dot CRT so trust this and next thing you can do is web bridge enable so web bridges configured which means now my users or customers can even join through browser so all I have to do is let's go back here instead of using Cisco meaning app I'll use like Chrome and go to HTTPS to HQ the CMS that our Unicom so if I go to 4 4 5 it goes to web admin the GUI and if I just do 443 it goes to leading app but through the browser now that's except so now I feel this committee amp if you remember I told you it gives you the same user experience in the spectrum of how you connect Sign In Bruges dog banner and I need calm password was Cisco let's login so he's logged in now through a browser and again users can join a meeting space so that style 8 8 8 8 you let's dial to 0-0 to pound so he's entering Bruce Banner spaced I see like a green sign here somebody has logged in I joined the meeting and I see video that's Mutis and new this now Bruce is actually should see my video also he's not seeing that because my my chrome I need to go ahead and go to settings and select a camera so your machine should have a camera only then the browser would detect that camera oh you have to select that camera from your browser otherwise you would he would not see your video so let me disconnect this I believe the setting is here you can choose your camera so I don't have a camera on this machine which the browser can use so that's why you won't see video on the end point but that's how you connect it's pretty much the same thing same user experience irrespective of how you connect all right so I hope you guys enjoyed this webinar I will look at some questions that you may have put up and on to those so I have one question here I would say is so it is like WebEx but on premise one exactly like WebEx but yeah it is on premise I see another question I believe cisco has announced that cisco meeting app is no more than the new version it is there in the new version in the new version 3 blueprint it is listed in the equipment list so so it is there the only difference is that they have listed 2.5 and then there's a star next to it which basically says that they could change the version anytime you as you know the question that is there an application for desktops running on Linux distribution I believe the newer versions do have an option for Linux also but then again you can use browser right it's the same experience you you it's another question which is do you know if chromium-based edge browsers work with CMS yes 2.9 works with that not this version you you you you so I see another question how do import users in CMS I believe we just did that it could be true well that through API or it could be through manual configuration on the GUI you I think the question is the signalling done on every login yes so every time you log in the same process happens it connects to call bridged and SRV lookup connection succeeds and then the XMPP sends back an authorized and then you're able to login you you okay I see another question signal flow was not clear when the client starts to register from public Internet is it looking up for SRV record which points to XMPP and then connects to call bridge so once the user tries to login in but I try to login I never give cms's I like how in jabber I normally give it tries to find call manager or presence or something right I normally I could go manually and give the presence IP or call Melges IP I could give that or I could search through SRB to a UDS record but here the the PC is sending a lookup basically the lookup is going within that domain it's a nicer vlookup coming in the call bridge takes that and takes the domain path and looks for XMPP to respond back with that domain so the process happens starts from the PC you again another question why do I need time zone if I assign NDP's you don't need that I see one more which is what is the spaces that is created for users is this going to consume license so it depends whether you want a shared versus a personal license so I didn't actually active I didn't actually give personal licenses to my users you have to do that again through API but that you want a shared license to be given to everyone so let's say if everyone join the meeting space it's a common shared license versus I've dedicating one license for a specific user whether he uses or not that license is basically reserved for him personally use license so postal meeting room and then I have one more question can I had a letter I'm GUI yes you can from from the Greek okay I hope you enjoyed this webinar and I will see you in my next webinar