TPO Cluster

Installation recommendations

•It is preferable the Alpha node is an Active node. In that case, the client certificate could be in used after its creation.

•It is preferable to have only an active node in a TPO cluster due to the "several active nodes" limitation.

The following steps describe how to configure TPO for secure communication usage:

1.Go to TSS console administration, TPO Cluster

2.Enable Secure mode on the cluster

Location: TPO Boot Settings
SIP	CuCM Secure mode - Enable truefalse Key: application.ccmsecuremode.enable Description: Allow to support SIPS and SRTP when using Cisco CuCM Related settings: Always configure SIP TLS context (application.sip.change.tls.ctx)

3.Enable Bulk registration

Location: TPO Shared Settings, TPO Private Settings, TPO Boot Settings
SIP	Use bulk registration (Cisco only) truefalse Key: application.sip.tpo.register.bulk Description: Specify whether bulk registration should be used when registering device's extensions onto the Cisco UCM PBX. Bulk registration is a mechanism introduced starting from version 7.1.3.33025-1 of the Cisco UCM which allows registering several extensions in a single SIP transaction. Refer to installation documentation for recommended values. Constraint: true|false Related settings: Bulk registration always contain a body (application.sip.register.bulk.send.all) Force subscription usage for Cisco Message Dialog (application.sip.msgDialog.uses.subs) Use subscribtions for MWI (application.sip.mwi.uses.subs) SIP Proxy time refresh (application.proxytime.refresh)

4.Configure SIP settings

 Important:

▪the SIP Proxy must be configured to use default SIPS port 5061 (in the PBX Cluster configuration, see "Node addresses/Subscribers list" field).

 Example: cucm12pub.iptrade.local:5061

▪The setting "application.capf.proxy.address" must be configured to the same value.

 Example: application.capf.proxy.address = cucm12pub.iptrade.local:5061

▪SIP Local TLS Ports must contains the  default SIPS port 5061

 Example: application.sip.tlsconnection.port = 5061,5062,5063

5.TPO Server Certificate

Create TPO Server Certificate. It allows the turrets to make a secure communication with TPO.

Important: TPO node must in Active or Passive state to display the certificate management icons:

6.CuCM Devices Setup

7.Fetch < %DEVICE_5000%> lines

 Important:

 Once lines are fetched, TSS automatically adds SIP Local IP ports and TLS ports.  Depending of the secure/non secure configuration, the TPO will use one setting or the other.
 The administrator must check ports have been correctly added in both keys.

 Example: 2 devices fetched using local port 5062 and 5063

8.Reboot the Cluster