Send cisco-voip mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://puck.nether.net/mailman/listinfo/cisco-voip
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of cisco-voip digest..."
Today's Topics:
1. Re: question about those funky USB token keys (Eric Pedersen)
2. Re: question about those funky USB token keys (Stephen Welsh)
3. UCS Sizing woes (Ki Wi)
4. Re: UCS Sizing woes (Matthew Saskin)
----------------------------------------------------------------------
Message: 1
Date: Sat, 18 May 2013 16:59:23 +0000
From: Eric Pedersen <[email protected]>
To: Erich Novak <[email protected]>, Lelio Fulgenzi
<[email protected]>
Cc: VoIP List Cisco <[email protected]>
Subject: Re: [cisco-voip] question about those funky USB token keys
Message-ID:
<[email protected]>
Content-Type: text/plain; charset="iso-2022-jp"
If you want to be able to move phones between the clusters without erasing the
CTL, you need to put all the keys on both clusters. Otherwise when the phone
moves to the other cluster it will get a new CTL file signed by an unknown
certificate and reject it. I made that mistake before I understood what was
going on...
________________________________
From: cisco-voip [[email protected]] on behalf of Erich Novak
[[email protected]]
Sent: Friday, May 17, 2013 12:20 PM
To: Lelio Fulgenzi
Cc: VoIP List Cisco
Subject: Re: [cisco-voip] question about those funky USB token keys
You could use all keys on both clusters... Or any combination of at least 2 on
each cluster - there is nothing happening on the tokens.
Brgds
Erich
Am 17.05.2013 um 20:09 schrieb "Lelio Fulgenzi"
<[email protected]<mailto:[email protected]>>:
So I need to buy some of those USB token keys for security. We have two
clusters, a test cluster and a production cluster. I'd like to buy two for the
test cluster and three for the production cluster to be sure.
>From what I understand, the product is: KEY-CCM-ADMIN-K9= and there's no
>"pairing" of the keys by any means from the factory, so I can just order as
>many as I need, so I'm thinking, just order 5.
Question though, can I use the same key to store the certs from different
clusters?
Lelio
---
Lelio Fulgenzi, B.A.
Senior Analyst, Data Centre and Communications Facilities
Computing and Communications Services (CCS)
University of Guelph
519?824?4120 Ext 56354
[email protected]<mailto:[email protected]>
www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs>
Room 037, Animal Science and Nutrition Building
Guelph, Ontario, N1G 2W1
_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip
The contents of this message may contain confidential and/or privileged
subject matter. If this message has been received in error, please contact
the sender and delete all copies. Like other forms of communication,
e-mail communications may be vulnerable to interception by unauthorized
parties. If you do not wish us to communicate with you by e-mail, please
notify us at your earliest convenience. In the absence of such
notification, your consent is assumed. Should you choose to allow us to
communicate by e-mail, we will not take any additional security measures
(such as encryption) unless specifically requested.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20130518/bf81fcde/attachment-0001.html>
------------------------------
Message: 2
Date: Sat, 18 May 2013 18:22:34 +0000
From: Stephen Welsh <[email protected]>
To: Eric Pedersen <[email protected]>
Cc: VoIP List Cisco <[email protected]>
Subject: Re: [cisco-voip] question about those funky USB token keys
Message-ID: <[email protected]>
Content-Type: text/plain; charset="iso-2022-jp"
Good point Eric,
Its for the point you made that I recommend reading Akhil's book
(http://www.amazon.com/dp/1587142953) before doing any work with CTL Files.
In-fact everyone running (or upgrading to) UCM 8.0 or above should read his
book as IPT Security is no longer an add-on/option because of Security by
Default. It's very important to have a good understanding of how Cisco's
internal implementation of PKI works, especially when working with multiple
clusters are you pointed out.
UnifiedFX are starting the beta of the next version of PhoneView (Version 3.1)
that has some great new and unique features, including a very relevant endpoint
security feature. If anyone is interested in testing out the new version email
[email protected]<mailto:[email protected]>
Also,
The book has some good reviews (some almost as long as the book ;) I also wrote
a review if anyone wants a quick summary:
http://www.amazon.com/review/R30F5QJYK17QZU/ref=cm_cr_pr_perm?ie=UTF8&ASIN=1587142953&linkCode=&nodeID=&tag=
Thanks
Stephen Welsh
CTO
http://www.unifiedfx.com
On 18 May 2013, at 17:59, Eric Pedersen
<[email protected]<mailto:[email protected]>>
wrote:
If you want to be able to move phones between the clusters without erasing the
CTL, you need to put all the keys on both clusters. Otherwise when the phone
moves to the other cluster it will get a new CTL file signed by an unknown
certificate and reject it. I made that mistake before I understood what was
going on...
________________________________
From: cisco-voip
[[email protected]<mailto:[email protected]>]
on behalf of Erich Novak [[email protected]<mailto:[email protected]>]
Sent: Friday, May 17, 2013 12:20 PM
To: Lelio Fulgenzi
Cc: VoIP List Cisco
Subject: Re: [cisco-voip] question about those funky USB token keys
You could use all keys on both clusters... Or any combination of at least 2 on
each cluster - there is nothing happening on the tokens.
Brgds
Erich
Am 17.05.2013 um 20:09 schrieb "Lelio Fulgenzi"
<[email protected]<mailto:[email protected]>>:
So I need to buy some of those USB token keys for security. We have two
clusters, a test cluster and a production cluster. I'd like to buy two for the
test cluster and three for the production cluster to be sure.
>From what I understand, the product is: KEY-CCM-ADMIN-K9= and there's no
>"pairing" of the keys by any means from the factory, so I can just order as
>many as I need, so I'm thinking, just order 5.
Question though, can I use the same key to store the certs from different
clusters?
Lelio
---
Lelio Fulgenzi, B.A.
Senior Analyst, Data Centre and Communications Facilities
Computing and Communications Services (CCS)
University of Guelph
519?824?4120 Ext 56354
[email protected]<mailto:[email protected]>
www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs>
Room 037, Animal Science and Nutrition Building
Guelph, Ontario, N1G 2W1
_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip
The contents of this message may contain confidential and/or privileged
subject matter. If this message has been received in error, please contact
the sender and delete all copies. Like other forms of communication,
e-mail communications may be vulnerable to interception by unauthorized
parties. If you do not wish us to communicate with you by e-mail, please
notify us at your earliest convenience. In the absence of such
notification, your consent is assumed. Should you choose to allow us to
communicate by e-mail, we will not take any additional security measures
(such as encryption) unless specifically requested.
_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20130518/f6c4e31c/attachment-0001.html>
------------------------------
Message: 3
Date: Sun, 19 May 2013 04:36:14 +0800
From: Ki Wi <[email protected]>
To: Cisco VoIP List <[email protected]>
Subject: [cisco-voip] UCS Sizing woes
Message-ID:
<CAMefa2qdQRUJz0h5Bk3E16uwfEYV=_3+0Gw=dNRRYi=1=8x...@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
All along each C220 server (based on TRC spec), i have sized can only
accomodate like 3 to 4 Cisco VM . Partly because C220 is only 8 CPU core.
If each VM actually takes up 2 vCPU , i can only squeeze 4 VM. If i have a
Unity connection VM, i am able to squeeze only 3 VM since CUC will takes up
additional CPU core.
I discovered that I might be wrong all along after I have read the PCCE
sizing. Looks like if my UCS server have 4 cores , my largest VM needs only
4vCPU for example. As long as the total CPU reservation and memory
reservation doesn't hit the limit, i could actually squeeze more VM in? Is
this true? I know it is true in VMware world (since i am vcp certified) but
I was somehow mislead to believe that each vCPU requirement actually maps
to 1 physical core.
http://www.cisco.com/en/US/docs/voice_ip_comm/cust_contact/contact_center/pcce/pcce_901/reference/guide/PCCE_BK_PBD08CF9_00_packaged-cce_chapter_00.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20130519/f1724c90/attachment-0001.html>
------------------------------
Message: 4
Date: Sun, 19 May 2013 08:50:21 -0400
From: Matthew Saskin <[email protected]>
To: Ki Wi <[email protected]>
Cc: "cisco-voip@puck. nether. net" <[email protected]>
Subject: Re: [cisco-voip] UCS Sizing woes
Message-ID:
<CAMSV-mv-C1tCpJ=3krg_mtavmnqnbft9px84kwxovqx1cts...@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Unfortunately, PCCE is a very special use case tested and approved by the
CCBU. For all other applications, the rule of no CPU or memory
oversubscription applies.
On May 18, 2013 4:39 PM, "Ki Wi" <[email protected]> wrote:
> All along each C220 server (based on TRC spec), i have sized can only
> accomodate like 3 to 4 Cisco VM . Partly because C220 is only 8 CPU core.
> If each VM actually takes up 2 vCPU , i can only squeeze 4 VM. If i have a
> Unity connection VM, i am able to squeeze only 3 VM since CUC will takes up
> additional CPU core.
>
> I discovered that I might be wrong all along after I have read the PCCE
> sizing. Looks like if my UCS server have 4 cores , my largest VM needs only
> 4vCPU for example. As long as the total CPU reservation and memory
> reservation doesn't hit the limit, i could actually squeeze more VM in? Is
> this true? I know it is true in VMware world (since i am vcp certified) but
> I was somehow mislead to believe that each vCPU requirement actually maps
> to 1 physical core.
>
>
> http://www.cisco.com/en/US/docs/voice_ip_comm/cust_contact/contact_center/pcce/pcce_901/reference/guide/PCCE_BK_PBD08CF9_00_packaged-cce_chapter_00.html
>
>
> _______________________________________________
> cisco-voip mailing list
> [email protected]
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/cisco-voip/attachments/20130519/08949122/attachment-0001.html>
------------------------------
Subject: Digest Footer
_______________________________________________
cisco-voip mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/cisco-voip
------------------------------
End of cisco-voip Digest, Vol 115, Issue 18
*******************************************
