Cisco Meeting Server Feature Update Lab v1: About This Demonstration
Cisco Meeting Server Feature Update Lab v1: About This Demonstration
Cisco Meeting Server Feature Update Lab v1: About This Demonstration
• Requirements
• Topology
• Session Users
• Get Started
• Scenario 2: Load Balancing across Meeting Servers with Call Bridge Groups
Requirements
The table below outlines the requirements to complete this lab.
Table 1. Requirements
Required Optional
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 75
Cisco dCloud
With v2.0, Cisco Meeting Server is now optimized to be deployed with Cisco Unified Communications Manager (CM) for call
control. This allows customers with Cisco Unified Communications (UC) deployment to fully integrate with our latest conferencing
capabilities such as distributed conferencing, and existing UC features such ad-hoc conference escalation, scheduled conferences
using Exchange and personal Spaces. The objective for this session is to understand the latest features and innovations included
in the Cisco Meeting Server platform, and deploy them as part of the Cisco UC platform to create the best collaborative video
experience for customers.
• Rich interoperability with support for standards based endpoints, WebRTC, and Skype for Business
Multiparty licensing is the primary licensing model used for Cisco Meeting Server. Multiparty licensing is available in two variations:
Personal Multiparty plus (PMP plus) licensing, which offers a named host license, and Shared Multiparty plus (SMP plus) licensing,
which offers a shared host license. Both PMP plus and SMP plus licenses can be used on the same server.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 2 of 75
Cisco dCloud
license includes one Rich Media Session (RMS) license for the Cisco Expressway™, which can be used to enable business-to-
business (B2B) video conferencing.
This lab consists of a preconfigured standalone Cisco Unified CM and TelePresence Management Suite (TMS), two clustered
combined Cisco Meeting Servers (for the purpose of this lab, Cisco Meeting Server will also be referred to as CMS), and a third
CMS instance to be used for recording and streaming. Each CMS has the core components preconfigured with self-signed
certificates installed.
The goal of the lab is to configure Unified CM, TMS, and CMS to demonstrate new features including Active Control, Call Bridge
groups, recording, and live streaming. Additionally, you will get a preview of upcoming enhancements including support for CMS
edge service in Expressway (Unified Edge), and Cisco Meeting Management (CMM). CMM is a new tool that will initially allow
control of active meetings, but will ultimately grow to cover control, configuration, and management of the CMS system.
NOTE: CMS PMP plus and SMP plus licenses are both included on the servers used in this lab.
Each module in the lab is standalone and can be completed in any order.
Topology
The components in the lab include preconfigured users and components to illustrate the features and function of the solution. Most
components are fully configurable with predefined administrative user accounts. You can see the IP address and user account
credentials to use to access a component by clicking the component icon in the Topology menu of your active session and in the
scenario steps that require their use.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 3 of 75
Cisco dCloud
Session Users
The table below contains details on preconfigured users available for your session.
Charles Holland cholland C1sco12345 DX70 +1 408 555 6018 6018 wkst1
Monica Cheng mcheng C1sco12345 8800 +1 408 555 6030 6030 wkst3
Anita Perez aperez C1sco12345 8800 +1 212 555 6017 6017 wkst2 (OUTSIDE)
Get Started
BEFORE PRESENTING
Cisco dCloud strongly recommends that you perform the tasks in this document with an active session before presenting in front
of a live audience. This will allow you to become familiar with the structure of the document and content.
It may be necessary to schedule a new session after following this guide in order to reset the environment to its original
configuration.
Follow the steps to schedule a session of the content and configure your presentation environment.
1. Browse to dcloud.cisco.com, select the location closest to you, and log in with your Cisco.com credentials.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 75
Cisco dCloud
2. Register and configure your router if this is the first time you will use the router with dCloud. [Show Me How]
5. Verify that the status of your session is Active in My Dashboard > My Sessions.
7. For best performance, connect to the lab with Cisco AnyConnect VPN [Show Me How] and the local RDP client on your
laptop [Show Me How].
NOTE: You can also connect to the workstation using the Cisco dCloud Remote Desktop client [Show Me How]. The dCloud
Remote Desktop client works best for accessing an active session with minimal interaction.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 5 of 75
Cisco dCloud
CMS supports sending the following meeting information to ActiveControl enabled endpoints:
• Participant list (also known as the roster list) so that you can see the names of the other people in the call and the total
number of participants
• Indicators telling whether the meeting is being recorded or streamed, and if there are any non-secure endpoints in the call
Limitations
• If an ActiveControl enabled call traverses a Unified CM trunk with a Unified CM version lower than 9.1(2), the call may fail.
ActiveControl should not be enabled on older Unified CM trunks (Unified CM 8.x or earlier).
• Active Control is a SIP only feature. H.323 interworking scenarios are not supported.
NOTE: ActiveControl uses UDT transport for certain features, i.e. sending roster lists to endpoints and allowing users to disconnect
other participants while in a call.
• Connections to Unified CM 8.x or earlier systems. Older Unified CM systems will reject calls from ActiveControl-enabled
devices. To avoid having these calls fail, disable iX on any trunk towards the Unified CM 8.x device in the network. In cases
where the 8.x device is reached via a SIP proxy, ensure that iX is disabled on the trunk towards that proxy.
• Connections to third-party networks. In these cases, there is no way to know how the third-party network will handle calls from
ActiveControl-enabled devices, the handling mechanism may reject them. To avoid such calls failing, leave iX disabled on all
trunks to third-party networks.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 6 of 75
Cisco dCloud
• Cisco VCS-centric deployments which connect to external networks or connect internally to older Unified CM versions. From
Cisco VCS X8.1, you can turn on a zone filter to disable iX for INVITE requests sent to external networks or older Unified CM
systems. (By default, the filter is off.)
1. If disconnected from Workstation 1, RDP to Workstation 1 (198.18.133.36) and, if necessary, log in as Charles Holland:
a. Username: dcloud\cholland
b. Password: C1sco12345
a. Username: admin
b. Password: dCloud123!
c. Password will show as expired. Please set new password to dCloud123! Again.
4. In the blank entry at the bottom, create a new space. Use these parameters:
6. Test the new space by dialing 7000 from one of the endpoints. You should be connected to the new space you just created.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 7 of 75
Cisco dCloud
Support for the iX protocol is enabled by default on the Standard SIP Profile for Telepresence Conferencing that is used on the
trunks to CMS. To properly see the effects of Active Control, you need to create a SIP profile with the iX protocol disabled.
a. Username: administrator
b. Password: dCloud123!
2. Once logged in, go to Device > Device Settings > SIP Profiles.
4. At the top, click Copy. Change the name to SEVT SIP Profile for Telepresence Conferencing and click Save.
5. Scroll to the bottom and UNCHECK the box Allow iX Application Media and click Save.
2. Touch the person list icon in the top right corner of the DX70. You will see a list of meeting participants.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 8 of 75
Cisco dCloud
3. Touch a participant on the list. You will see a Favorite and a Drop option. Click Drop. That caller will be removed from the
meeting.
4. There is also an icon (next to the person list icon) that allows you to change the screen layout. Touch this icon and test by
changing the layout to something different.
5. Now turn Active Control OFF and try the test again.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 9 of 75
Cisco dCloud
7. Look for the trunk to CMS that has the 7XXX route pattern associated with it. Click that trunk to open it.
8. Change the SIP Profile (in the SIP Information section at the bottom of the page) to the SEVT SIP Profile for TelePresence
Conferencing that you created before.
10. Wait several minutes for the trunk to come back into Full Service before proceeding.
11. Now we will test with active control DISABLED. Dial into the Test Space at 7000 for all three endpoints.
12. Notice with Active Control disabled, you are only able to see yourself and the number you called on the list – not the individual
participants.
13. Also note that there is no icon showing to change the screen layout – that is an Active Control Function.
14. When you are finished testing, change the SIP Profile on the trunk back to Standard SIP Profile for TelePresence
Conferencing.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 10 of 75
Cisco dCloud
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 11 of 75
Cisco dCloud
This lab will show how to use Call Bridge Grouping to load balance incoming on the Meeting Servers, and avoid overloading
individual Meeting Servers in the cluster. In a real-world scenario, load balancing outbound calls would also be recommended.
Using Call Bridge groups, a Meeting Server cluster can intelligently load balance calls across the Call Bridges within the same
location or across nodes in different locations. The intelligent decision making behind where calls end up, is handled by the
Meeting Servers. The call control system needs to be able to handle SIP messages from the meeting servers, in order to move
calls to the correct location. This functionality has been tested using Cisco Unified Communications Manager as a call control
system, which is the only Cisco-supported call control system for this functionality.
NOTE: The Cisco VCS is not currently supported since it doesn’t include support for SIP ‘INVITE with Replaces’.
For the load balancing feature to work correctly, a Round Trip Time (RTT) of less than 100 ms is required for the servers in a Call
Bridge group. The maximum RTT between any two nodes in the same cluster remains as 300 ms.
Refer to the Load Balancing across CMS white paper for real world example:
• http://www.cisco.com/c/dam/en/us/td/docs/conferencing/ciscoMeetingServer/White_papers/Load-balancing-calls-across-
Meeting-Servers-2-2-white-paper.pdf
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 12 of 75
Cisco dCloud
a. Username: dcloud\cholland
b. Password: C1sco12345
2. Before you access Postman Application you need to access CMS1 and CMS2 to reset the api password.
3. Please access CMS1 with the admin password dCloud123! and run the command passwd api. Enter the existing password
dCloud123!.
5. Repeat steps 2-4 on CMS2 (Password on CMS2 is expired. Please set new password to dCloud123!)
6. If it is not already running, from the taskbar, launch the Postman [ ] application.
7. Import the CallBridgeGroups-config.json file from the CMS Update Lab folder on the Workstation 1 desktop.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 13 of 75
Cisco dCloud
9. Click Send.
10. Copy the returned CallBridge IDs, which are associated to CMS1/2 to Notepad for later use. Copy everything between the <>.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 14 of 75
Cisco dCloud
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 15 of 75
Cisco dCloud
16. Repeat the previous Post method changing the name key to CallBridgeGroup2.
19. Copy the callBridgeGroup IDs to Notepad for later use. Copy everything between the <>.
20. In the right pane of postman, leave the method as GET and add a slash “/” to the end of the URI field followed by one of the
callBridgeGroup IDs that was returned in the previous step.
For example: https://cms1.dcloud.cisco.com:445/api/v1/callBridgeGroups/8b58de8e-f696-4ef6-b6be-99702082bf57
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 16 of 75
Cisco dCloud
23. You can repeat the previous steps to verify the second call bridge group as well.
Figure 14. Verify Load Balancing is Enabled for the Bridge Group
26. After the slash “/” in the URI field, copy the Call Bridge ID for CMS1 that was saved in notepad previously. Only copy the ID
between the quotes “”. For example: 8cbb6c16-f8ef-45a7-ab53-4b5d89c0018e
27. Copy the callBridgeGroup id for CallBridgeGroup1 from Notepad into the callBridgeGroup key. Only copy the ID between
the quotes “‘’. For example: 8b58de8e-f696-4ef6-b6be-99702082bf57
29. After the slash “/” in the URI field, copy the CallBridge ID for CMS2 that was saved in notepad previously. Only copy the ID
between the quotes “”.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 17 of 75
Cisco dCloud
30. Copy the callBridgeGroup ID for CallBridgeGroup2 from Notepad into the callBridgeGroup key. Only copy the ID between
the quotes ‘’.
32. Verify that the call bridges are assigned to a group by using the a GET method to the following URI:
https://cms1.dcloud.cisco.com:445/api/v1/callBridges/<callBridgeID>
4. Click Send.
NOTE: The CMS servers in the lab have 5 vCPUs, base the value of the load limits you set on the following chart.
5. In the right pane of Postman, change the method to GET and click Send. You should see the loadLimit parameter is now set
to 6250 in the value returned.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 18 of 75
Cisco dCloud
NOTE: Since the lab has limited number of endpoints, we cannot test the load balancing is working, but it is now configured on
CMS1. In actual production, you would need to set the load limit on each CMS bridge in the cluster by issuing the put command
above to each server individually by changing the server in the URI field in the right pane of postman to:
https://cms2.dcloud.cisco.com:445/api/v1/system/configuration/cluster
Before you can do this on each server, you have to set up the API user on each of the servers.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 19 of 75
Cisco dCloud
The Recorder should be hosted on the CMS server that is remote to the server hosting the Call Bridge. If the Recorder is hosted
on the same server as the Call Bridge (local), then it should only be used for testing purposes or for very small deployments. It is
recommended to deploy the Recorder and NFS in the same physical locality as the target file system to ensure low latency and
high network bandwidth. It is expected that the NFS is located within a secure network.
One call bridge can support multiple Recorders or multiple call bridges can use the same Recorder (see figures below). If multiple
Recorders are used, then the solution load balances recordings between all recording devices and no knowledge of the physical
location of recording devices is known. Every Call Bridge will use every Recorder.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 20 of 75
Cisco dCloud
In addition, the recorder is an XMPP client and XMPP server is required for the deployment.
In this lab, we will use a third CMS server (CMS3) as a recording / streaming device as recommended in the deployment
documentation. To configure the Recorder, use CLI commands to enable the Recorder on CMS, specify which Call Bridges within
the deployment will work with the Recorder and where to save the recordings. Also, use CMS API to specify the Recorder’s
HTTPS URL address that the Call Bridge should use, set the recordingMode parameter in call profiles object to specify how to
start recording, set the recordingControlAllowed parameter in call leg profiles object to allow users control when to start/stop
recording. Here are the high-level tasks to setup this scenario:
• Task 1: Install the certificate bundle on the CMS3 server to be used by the recorder (SKIP THIS IF YOU RAN THROUGH
THE STREAMING SCENARIO ALREADY – IT WAS DONE THERE)
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 21 of 75
Cisco dCloud
3. Drag the file cmsbundle.crt (located in the CMS folder on the desktop) to the CMS3 server.
4. Close WinSCP.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 22 of 75
Cisco dCloud
6. Log in with:
a. Username: admin
b. Password: dCloud123!
8. Verify that certificates cms3.key, cms3.crt, caroot.crt, and cmsbundle.crt are listed.
Configure Recorder
2. Log in with:
a. Usenamer: admin
b. Password: dCloud123!
Recorder is an XMPP client and requires the enablement of the XMPP server.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 23 of 75
Cisco dCloud
NOTE: This lab uses a remote recorder, and the recorder must therefore listen on an appropriate network interface e.g. a:8443.
Otherwise, the recorder can listen on the network interfaces a – d.
Recordings store on the NFS mount recordings located on the dcloud domain controller (198.18.133.1).
5. You must authenticate the Call Bridge to the XMPP service. Open a web browser and view the CMS3 web admin interface at
https://cms3.dcloud.cisco.com:445.
6. Log in with:
a. Username: admin
b. Password: dCloud123!
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 24 of 75
Cisco dCloud
7. Navigate to Configuration->General and note the name of the Call Bridge under XMPP server settings.
8. Add the Callbridge to XMPP using PuTTY and the command line for CMS3.
10. Make note of the Secret shown. You will need it in the next step. If you miss it, you can find it again by entering xmpp
callbridge list from the cms3> prompt.
11. Return to the web admin page, Configuration->General. On the line for Shared Secret, click [change]. Enter the secret key
from above for both Shared Secret and Confirm Shared Secret. Be sure to click Submit at the bottom of the page to save
your changes.
12. Verify that the XMPP service is active and has no errors. On the web admin interface for CMS3, navigate to Status->General.
The XMPP connection should say connected and the Authentication service should be registered.
13. Finally, to view the recorder details enter the command recorder.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 25 of 75
Cisco dCloud
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 26 of 75
Cisco dCloud
Configure API
1. If disconnected from Workstation 1, RDP to Workstation 1 (198.18.133.36) and if necessary log in as Charles Holland with
Username: dcloud\cholland and Password: C1sco12345
3. SSH to 198.18.134.147 (CMS3) and log in with User admin and Password dCloud123!.
NOTE: Configure an API user that the Postman tool utilizes to authenticate with CMS for making API calls.
1. If disconnected from Workstation 1, RDP to Workstation 1 (198.18.133.36) and, if necessary, log in as Charles Holland with
Username: dcloud\cholland and Password: C1sco12345.
2. If it is not already running, from the taskbar, launch the Postman [ ] application.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 27 of 75
Cisco dCloud
6. Browse to the Desktop->CMS Update Lab folder and select the Recorder-Config.json file.
7. Click Open.
8. In the Postman left panel, under Recorder-Config collection, click on the recorders folder to expand the folder.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 28 of 75
Cisco dCloud
10. On the right panel of Postman, this will load the recorders POST request URL. Click the Body tab to display its key/value
pairs as shown below.
NOTE: This creates a remote recorder entry in the CalI Bridge on CMS1 and CMS2 that points to CMS3 port 8443 that was set up
previously.
A callLeg profile determines the in-call behavior. In the case of recording, it determines if a call can be recorded.
12. In the left panel, under Recorder-Config collection, click on the callLegProfiles folder to expand it.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 29 of 75
Cisco dCloud
14. One the right panel of Postman, this will load the callLegProfiles POST request URL. Click the Body tab to display its
key/value pairs as shown below.
NOTE: This creates a callLeg profile with the parameter, recordingControlAllowed, set to true. A Record button appears on the
Cisco Meeting App that users can use to start/stop recording(s). On a regular endpoint device, users can utilize DTMF to start/stop
recording, however, this requires creating a DTMF profile to define the keys to use to start/stop recording. If
recordingControlAllowed is set to false or does not exist, no Record button will appear on the Cisco Meeting APP nor can users
utilize DTMF to start/stop recording(s).
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 30 of 75
Cisco dCloud
17. This will load the GET request URL on the right panel as shown below.
18. Click Send and the response should show all the callLeg profile ID.
NOTE: This would retrieve all existing call leg profiles in CMS. Validate that the first one listed is the one you just created. IF
YOU DON’T KNOW HOW TO VALIDATE, ASK A PROCTOR – THIS IS IMPORTANT!
19. Save the correct callLegProfile id attribute to Notepad for later use.
A Call profile defines whether calls can be recorded and if they can be done with or without user intervention.
20. Under the Recorder-Config collection, click on the callProfiles folder to expand it.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 31 of 75
Cisco dCloud
22. On the right panel of Postman, this will load the callProfiles POST request URL. Click the Body tab to display its key/value
pairs as shown below.
NOTE: Set the recordingMode parameter in call profile. Manual allows user to start/stop recording manually, Automatic allows the
recording to start automatically when the call is launched. This lab uses Manual.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 32 of 75
Cisco dCloud
25. This will load the GET request URL on the right panel as shown below.
26. Click Send. The response should show the call profile ID.
27. Save the first callProfile id attribute to notepad for later use.
NOTE: A DTMF Profile identifies DTMF Key sequences to control system functions, such as like start and stop recording in our
case.
28. Under the Recorder-Config collection, click on the dtmfProfiles fold to expand it.
30. On the right panel of Postman, this will load the dtmfProfiles POST request URL. Click the Body tab to display its key/value
pairs as shown below.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 33 of 75
Cisco dCloud
NOTE: We are using **2 to start recording and **3 to stop recording.
32. Click the GET request in the dtmfProfiles folder. This will load the GET request in the right hand panel in Postman.
33. Click SEND. The system will return the ID of the newly created DTMF profile as shown below.
34. Save the DTMF Profile ID in Notepad for use in the next step.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 34 of 75
Cisco dCloud
Add Call Leg Profile, Call Profile, and DTMF Profile To System Profiles
35. Under the Recorder-Config collection, click on the systemProfiles folder to expand it.
37. On the right panel of Postman, this will load the systemProfiles PUT request URL. Click the Body tab to display its key/value
pairs as shown below.
38. Copy and paste the callProfile ID, callLegProfile and dtmfProfile IDs, saved previously to Notepad, to fill in the values in
the following key fields:
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 35 of 75
Cisco dCloud
41. The response should contain the call profile and call leg profile that were added to the system profiles. Minimize Postman.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 36 of 75
Cisco dCloud
Test Recording
1. Call the Space recorder.space (or any space) the Cisco Meeting App on wkst1.
2. Call the same space (recorder.space@dcloud.cisco.com) from the DX70 and from Jabber on wkst3.
3. After the devices joined the conference, click on the Record button at the top of the Cisco Meeting App window.
4. You will hear the announcement “This call is being recorded” and see a red dot to indicate recording.
5. If your laptop is NOT connected with a dCloud router, skip this and move on to step 6. Otherwise, continue onto steps a – f
below.
NOTE: Steps a – f gives you the experience of using WebRTC compatible browser to join a Space conference. Current WebRTC
compatible supported browsers are Firefox and Chrome.
i. Username: cholland@dcloud.cisco.com
h. Type recorder.space in the box, click the [ ] next to video icon and select Use this device.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 37 of 75
Cisco dCloud
i. Charles Holland joined the Remote Recorder’s Meeting along with the DX70 and Cisco Meeting App and should
see the recording indicator on the top.
9. Using Windows File Explorer, locate and open the spaces folder. Observe the MP4 recordings under one of the folders.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 38 of 75
Cisco dCloud
11. Test again but connect to the space with an endpoint or Jabber. Use DTMF to start/stop the recording (**2 to start, **3 to
stop).
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 39 of 75
Cisco dCloud
NOTE: Several standards based streaming servers are known to work with the Streamer, but Cisco only offers support for VBrick
as external streaming server. For our lab, we will test using YouTube. The stream can be viewed from any device that can connect
to the YouTube service.
The Streamer connects to an external server using RTMP with an overall bitrate of 2Mbps. The video is encoded using H.264 at
720p30, while the audio is 64kbps AAC-LC. All traffic between the Streamer and the external streaming server is unencrypted. The
Streamer should be hosted on another Meeting Server instance than the server hosting the Call Bridge. If the Streamer is hosted
on the same server as the Call Bridge (local), then it should only be used for testing purposes.
The Streamer also supports redundant configurations as shown in the figures below. If you use multiple streamers, the solution
load balances between available streaming devices. To restrict the use of specific Streamers to specific Call Bridges, use the Call
Bridge Group functionality.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 40 of 75
Cisco dCloud
If your deployment has multiple Call Bridge and multiple Streamers then every Call Bridge will use every Streamer (see Figure
below), unless the callBridgeGroup and callBridge parameters have been set for each Streamer using the API to PUT to
/streamers/ .
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 41 of 75
Cisco dCloud
Figure 58. Permitted Deployments for Streaming: Call Bridge Cluster with Multiple Streamers and No Call Bridge Groups Set up
Figure 59. Permitted Deployments for Streaming: Call Bridge Cluster with Multiple Streamers and Call Bridge Groups
For purposes our our lab, we will use CMS3 as the streamer from our Call Bridge cluster.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 42 of 75
Cisco dCloud
When using a remote recorder, it needs to trust all of the Call Bridges that will connect to it. This is accomplished by installing a
trust bundle containing all of the certificates from the other servers plus the root certificate. The recorder process will trust all the
Callbridges included in the trust bundle. The trust bundle has been created for you and is located on wkst1 in the CMS folder.
3. Drag the file cmsbundle.crt (located in the CMS folder on the desktop) to the CMS3 server.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 43 of 75
Cisco dCloud
4. Close WinSCP.
6. Log in with:
a. Username: admin
b. Password: dCloud123!
8. Verify that certificates cms3.key, cms3.crt, caroot.crt, and cmsbundle.crt are listed.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 44 of 75
Cisco dCloud
Configure Streamer
2. Log in with:
a. Usenamer: admin
b. Password: dCloud123!
Recorder is an XMPP client and requires the enablement of the XMPP server.
IMPORTANT NOTE: If you have already completed the Recorder Setup in Scenario 3, this step has been completed.
Continue with Step 23.
4. You must authenticate the Callbridge to the XMPP service. Open a web browser and view the CMS3 web admin interface at
https://cms3.dcloud.cisco.com:445.
5. Log in with:
a. Username: admin
b. Password: dCloud123!
6. Navigate to Configuration->General and note the name of the Call Bridge under XMPP server settings.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 45 of 75
Cisco dCloud
7. Add the Callbridge to XMPP using PuTTY and the command line for CMS3.
9. Make note of the Secret shown. You will need it in the next step. If you miss it, you can find it again by entering xmpp
callbridge list from the cms3> prompt.
10. Return to the web admin page, Configuration->General. On the line for Shared Secret, click change. Enter the secret key
from above for both Shared Secret and Confirm Shared Secret. Be sure to click Submit at the bottom of the page to save
your changes.
11. Verify that the XMPP service is active and has no errors. On the web admin interface for CMS3, navigate to Status->General.
The XMPP connection should say connected and the Authentication service should be registered.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 46 of 75
Cisco dCloud
NOTE: This lab uses a remote streamer, and the streamer must therefore listen on an appropriate network interface e.g. a:8445.
Otherwise, the recorder can listen on the network interfaces a – d.
The streaming destination URL will be setup in a later step as it can be unique to a Space.
13. Finally, to view the streamer details, enter the command streamer.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 47 of 75
Cisco dCloud
Configure API
1. If disconnected from Workstation 1, RDP to Workstation 1 (198.18.133.36) and, if necessary, log in as Charles Holland with
Username: dcloud\cholland and Password: C1sco12345
3. SSH to 198.18.134.147 (CMS3) and log in with User admin and Password dCloud123!.
4. Continuing from Task 1 in PuTTY at the command prompt type: user add api api
NOTE: Configure an API user that the Postman tool utilizes to authenticate with CMS for making API calls.
7. If disconnected from Workstation 1, RDP to Workstation 1 (198.18.133.36) and, if necessary, log in as Charles Holland with
Username: dcloud\cholland and Password: C1sco12345.
8. If it is not already running, from the taskbar, launch the Postman [ ] application.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 48 of 75
Cisco dCloud
12. Browse to the Desktop->CMS Update Lab and select the Streamer-Config.json file.
14. In the Postman left panel, under Streamer-Config collection, click on the streamers folder to expand the folder.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 49 of 75
Cisco dCloud
16. On the right panel of Postman, this will load the streamers POST request URL. Click the Body tab to display its key/value
pairs as shown below.
NOTE: This creates a remote streamer entry in the CalIBridge that points to CMS3 port 8445 that was setup previously.
Create a callProfile
A callProfile defines whether calls can be recorded and if they can be done with or without user intervention.
18. Under the Streamers-Config collection, click on the callProfiles folder to expand it.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 50 of 75
Cisco dCloud
20. On the right panel of Postman, this will load the callProfiles POST request URL. Click the Body tab to display its key/value
pairs as shown below.
NOTE: Set the streamingMode parameter in call profile. Manual allows user to start/stop streaming manually, Automatic allows
the streaming to start automatically when the call is launched. This lab uses Automatic.
23. This will load the GET request URL on the right panel as shown below.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 51 of 75
Cisco dCloud
24. Click Send. The response should show the call profile ID.
26. Validate it is the correct profile if more than one exists. THIS IS IMPORTANT!
27. Under the Streamer-Config collection, click on the cospaces folder to expand it.
29. On the right panel of Postman, this will load the cospaces GET request URL. Click the Send tab and review the results.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 52 of 75
Cisco dCloud
30. Go to a web browser and log in to Youtube.com using the lab credentials provided on your lab sheet. There are not enough
lab accounts for everyone, so we are sharing 5 accounts. If your account is already in use, please wait until it becomes free.
NOTE: You can also use your personal YouTube credentials if you prefer.
31. Once in YouTube, go to My Channel, then Video Manager. Click on the Video Manager Tab, and then Live Streaming.
32. On the Live Streaming page, there is a section at the bottom labeled Encoder Setup. Click the Reveal button to show the
stream name key. Copy the Server URL and the Stream Name/Key to Notepad.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 53 of 75
Cisco dCloud
33. Return to Postman and click the PUT request under the cospaces tab. This will load the cospaces PUT request in the right
hand window. Click on Body to see the parameters.
34. At the end of the PUT request URL, add a slash “/” and paste the CoSpace ID you saved earlier from Notepad.
36. In the streamURL, add the information you saved from YouTube (the Server URL and the Stream Key).
37. Copy and paste the callProfile ID you saved from the previous step into that variable.
39. To verify the result, change POST to GET and click Send again.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 54 of 75
Cisco dCloud
1. Log in to YouTube with your browser using the test account assigned to your lab pod.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 55 of 75
Cisco dCloud
4. Connect to the streaming.space with any client. You can use the Cisco Meeting App, dial in from an endpoint, or join via a
browser.
5. For our example, we will connect using the Cisco Meeting App.
6. If everything is configured correctly, you should see the stream startup on YouTube in just a few seconds.
7. You can add additional calls to the meeting and all the calls will be streamed.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 56 of 75
Cisco dCloud
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 57 of 75
Cisco dCloud
a. Username: admin
b. Password: dCloud123!
3. Navigate to Maintenance->Security Certificates-> Trusted CA Certificate and verify that there is a certificate for
CN=dcloud-AD1-CA present.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 58 of 75
Cisco dCloud
4. Navigate to Maintenance->Security Certificates->Server Certificate. A server certificate already exists. You can view it by
clicking the Show (decoded) button. We need to recreate this certificate to include everything it has at present, plus the CMS
guest URI join.dcloud.cisco.com.
6. On the Generate CSR page, add join.dcloud.cisco.com as an Additional Alternative Name. Leave everything else on the
page as is (it will be pre-populated).
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 59 of 75
Cisco dCloud
8. Click on Download under Certificate Signing Request to download the CSR to wkst1. You can place it on the desktop or
any convenient place where you can easily find it. Firefox will default to saving the file in the Downloads folder.
9. Create the certificate. Open a command prompt and enter “certreq –submit –attrib
“CertificateTemplate:Webclientandserver” C:\Users\cholland\Downloads\<CSR File Name> as shown below. Save
the certificate to the Downloads folder as exp-e-1.crt.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 60 of 75
Cisco dCloud
10. Upload the new certificate. Click Browse in the Upload New Certificate section and select the file for the new certificate.
Then click Upload server certificate data.
11. The system will display a message at the top of the screen when the certificate is uploaded and accepted. Click restart twice
to restart the Expressway and make the certificate active.
12. After the system restart is complete, the new certificate will be in place
a. Username: admin
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 61 of 75
Cisco dCloud
b. Password: dCloud123!
2. Navigate to Configuration->Traversal->TURN.
5. Click Save.
6. Note the two IP addresses shown on the status display. Expressway typically has two interfaces – one facing to the “inside”
that is used by the Expressway-C to establish an encrypted tunnel so traffic can be proxied inward. The other facing to the
“outside”. The outside interface is where traffic is routed through the firewall to the Expressway-E. This means no ports need
to be opened from the outside directly to the inside network to support services.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 62 of 75
Cisco dCloud
a. Username: dcloud\aperez
b. Password: C1sco12345
3. Instead of going to the Meeting Server login screen, you get the default login screen for the Expressway. Your request was not
proxied through to the Meeting Server.
4. Because of this behavior, it is recommended in a production deployment that you change the default port used by the
Expressway for administration services. Details are in the documentation. Now let’s correct that problem.
a. Username: admin
b. Password: dCloud123!
9. Click Save
10. You should see a successful completion message that shows both the CMS1 and CMS2 servers as shown below.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 63 of 75
Cisco dCloud
Figure 96. Successful Completion Message that Shows Both the CMS1 and CMS2 Servers
11. It is also necessary to add DNS records on the inside and outside DNS for the guest URI to allow clients to resolve the name.
The DNS A record for join.dcloud.cisco.com has already been added to the External DNS and points to the Expressway-E
outside interface.
a. Username: dcloud\aperez
b. Password: C1sco12345
2. Workstation wkst2 is on the outside. You can verify this by looking at Jabber. If you navigate to Settings->Help->Show
Connection Status, you’ll see that the connection shows as -Expressway, indicating it is an MRA connection through the
Expressway.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 64 of 75
Cisco dCloud
4. You should see the Cisco Meeting Server login screen. Log in to Meeting Server:
a. Username: aperez@dcloud.cisco.com
b. Password: C1sco12345
5. You should see Anita Perez’ client. Connect to Anita Perez Meeting Space.
7. There should be no difference between the call into the Meeting Server from the DX70 on the inside and the connection via
the browser on the outside.
8. Log out of the browser and open the Cisco Meeting App on wkst2.
a. Username: aperez@dcloud.cisco.com
b. Password: C1sco12345
10. The connection should FAIL. The Meeting App is not supported via Expressway at this time. If customers need to support the
meeting app from the outside, they will need to deploy the Meeting Server TURN services at the edge. This will be addressed
in a future release.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 65 of 75
Cisco dCloud
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 66 of 75
Cisco dCloud
CMM will be developed in phases over time. We are fortunate to have an early version of the software to PREVIEW in our lab so
you can get a view of what the CMM platform GUI will look like and a beginning understanding of how you will be able to use it. In
this version, CMM allows control of active meetings running on CMS servers. This is unreleased alpha software. It is a PREVIEW
only. There are many features that are not complete yet and it does not directly reflect the version that will FCS. FCS is planned for
the July/August 2017 timeframe.
The figure below shows the solution architecture for CMS and CMM deployments. CMM runs as a separate VM. CMS servers are
added to CMM via the GUI.
a. Username: dcloud\cholland
b. Password: C1sco12345
a. Username: admin
b. Password: cisco
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 67 of 75
Cisco dCloud
3. You are taken to the Overview dashboard. In future releases, the Overview will be the single place to view the status of you
entire CMS system (single, cluster, distributed) and will show information like the number of active calls, total spaces, and
number of meetings. A conceptual diagram is included below. In our early PREVIEW version of the system, no information is
yet displayed on the overview page.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 68 of 75
Cisco dCloud
4. To add the CMS servers into CMM, click on Servers on the left hand navigation tab, then click Add Server at the top right of
the page.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 69 of 75
Cisco dCloud
5. Fill in the host name, port, admin user name, and password on the add server screen as shown. This version of CMM does
not let us add certificates so UNCHECK the box HTTPS Verification. When all the fields are filled in, click Add.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 70 of 75
Cisco dCloud
6. Because in the lab CMS1 and CMS2 are setup as a cluster, when you add CMS1 to the CMM portal, it will display it as well as
the notation that there is 1 unmanaged. If you click show, you will see that it found CMS2 as part of the cluster. Also note that
the server is showing unverified. That is because we disabled HTTPS verification when adding the server.
7. From here you can rename the cluster, delete the cluster, edit servers in the list, or add more servers.
8. Go ahead and add CMS2 and CMS3. Notice that CMS3 appears as a different cluster; not part of the CMS1/CMS2 cluster.
9. Rename the first cluster as CMS_Cluster and the second as Recorder-Streamer. This gives the users a good idea how the
system is laid out. The names could be based on region, business unit, or whatever makes sense for the customer.
10. From the Cisco Meeting App on wkst1, join Charles Holland’s Space.
11. From there, invite Anita Perez and Monica Cheng and add them to the conference.
14. If you click on the Meetings tab on CMM, you should see the active meeting displayed. Note it includes the start time, duration,
and number of participants.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 71 of 75
Cisco dCloud
15. Click on the meeting to open the details. From here you have a great deal of control and visibility. You can see who the
participants are and when they joined. If anyone left, they will show up too. You can add other participants, start recording or
streaming, look at the event logs for this meeting, or end the meeting.
16. Click on the Recording button to add the recorder to the meeting. Notice the recorder has been added to the meeting. Press
Recording again to stop the recording.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 72 of 75
Cisco dCloud
17. Click on Event Logs. You can now see all events pertaining to this meeting that were recorded by the CMS server hosting the
meeting.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 73 of 75
Cisco dCloud
18. Click on a User to open the details panel. You can mute audio or video for the user, change their screen layout, drop the user
from the conference, and see key statistics about the audio, video, and screen share for that user.
19. Lastly, click End Meeting. The meeting will end for all participants.
20. Take some time to explore the interface. Test out the capabilities. The current planned release date is in the July/Aug 2017
timeframe. The addition of CMM will bring greatly enhanced management capabilities to customers.
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 74 of 75
Cisco dCloud
© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 75 of 75