These instructions help you configure your Cisco UCME / BE4000 / UC500 to work with TIM Enterprise. Contact your system maintainer if you are not familiar with the configuration of your PBX.
| Pbxsummary |
|---|
| Supportfiles1 | Cisco UCME - RADIUS.TDT |
|---|
| Supportfiles2 | Cisco UCME - RADIUS.TDS |
|---|
| Connection | RADIUS connection |
|---|
| RequiredTask1 | Configure Cisco AXL sync |
|---|
| RequiredTask2 | Configure UCME to send RADIUS events |
|---|
| RequiredTask2RequiredTask3 | Configure TIM Enterprise to capture RADIUS packets |
|---|
|
| HTML |
|---|
<a id="Configure Cisco AXL sync |
...
Configuring Cisco AXL sync
Follow the steps below to configure TIM Enterprise to synchronise with the directory of your your Cisco UCME:
- Click on the Directory tab.
- Go to the Directory level where you want to sync the UCME files and add a new Directory Sync object. Enter a name for the object and click on the Add button, as shown below:
| Screenshotmacro |
|---|
| Border | false |
|---|
| URL | /download/attachments/13271095/cisco_ucme_6.png |
|---|
|
- Left-click on the newly-created object and select Properties.
- In the Directory type drop-down list, select Cisco UCME.
- In the Host name field, enter the IP address of your UCME.
- In the Host port field, enter the port number of the IOS service, e.g. 23 .
- In the Username field, enter the username of the IOS login that can perform synchronisation.
| Screenshotmacro |
|---|
| Border | false |
|---|
| URL | /download/attachments/13271095/cisco_ucme_3.png |
|---|
|
- Click on Set password button and enter the password of the IOS login that can perform synchronisation.
| Screenshotmacro |
|---|
| Border | false |
|---|
| URL | /download/attachments/13271095/cisco_ucme_4.png |
|---|
|
- Click on the Save button to apply the changes.
| HTML |
|---|
<a id="Configure UCME to send RADIUS events"></a> |
Configuring UCME to send RADIUS events
Use Telnet to connect to the IP address of your UCME as shown below:
| Screenshotmacro |
|---|
| Border | false |
|---|
| Shadow | false |
|---|
| URL | /download/attachments/12158183/cisco_ucme_4.png |
|---|
|
Once connected, enter Single site configuration
Enter the following commands to enable the UCME to send RADIUS events to TIM to TIM Enterprise:
| Step | IOS commands | Description |
|---|
| 1 | enable | Causes the UCME to enter EXEC mode. Type your EXEC password if requested |
| 2 | conf t | Enters the global configuration mode |
| 3 | aaa new-model | Enables aaa accounting mode |
| aaa accounting connection h323 start-stop group RADIUS |
| gw-accounting aaa |
| acct-template callhistory-detail |
| 4 | RADIUS-server host 192.168.0.1 auth-port 0 acct-port 1612 | Specifies the IP address and port of TIM Enterprise's RADIUS, to which CDR data will be sent, e.g. 192.168.0.1:1612 |
| 5 | RADIUS-server key C1sco | Specifies a RADIUS authentication secret that will be used by TIM Enterprise (configured in the next section), e.g. C1sco |
| 6 | RADIUS-server vsa send accounting
| Enables VSA events |
| 7 | end | Exits configuration mode |
| 8 | wr | Saves the changes |
| HTML |
|---|
<a id="Configure Cisco AXL sync"></a> |
Configuring Cisco AXL sync
Follow the steps below to configure TIM Enterprise to synchronise with the directory of your your Cisco UCME:
- Click on the Directory tab.
- Go to the Directory level where you want to sync the UCME files and add a new Directory Sync object. Enter a name for the object and click on the Add button, as shown below:
| Screenshotmacro |
|---|
| Border | false |
|---|
| URL | /download/attachments/13271095/cisco_ucme_6.png |
|---|
|
- Left-click on the newly-created object and select Properties.
- In the Directory type drop-down list, select Cisco UCME.
- In the Host name field, enter the IP address of your UCME.
- In the Host port field, enter the port number of the IOS service, e.g. 23 .
- In the Username field, enter the username of the IOS login that can perform synchronisation.
| Screenshotmacro |
|---|
| Border | false |
|---|
| URL | /download/attachments/13271095/cisco_ucme_3.png |
|---|
|
- Click on Set password button and enter the password of the IOS login that can perform synchronisation.
| Screenshotmacro |
|---|
| Border | false |
|---|
| URL | /download/attachments/13271095/cisco_ucme_4.png |
|---|
|
- Click on the Save button to apply the changes.
Multi-site configuration
If you need to send the data to more than one server, such as TIM Enterprise and UCC server for example, you can set up multiple RADIUS connections in the phone system. To configure a multi-site system, follow the steps below:
| Info |
|---|
Replace SITE_NAME with a unique name for the destination RADIUS information.
Replace SITE_IP with the IP address of the RADIUS server.
Replace SITE_KEY with the secret you want to assign to that specific site. |
| Step | IOS Commands | Description |
|---|
| 1 | enable | Causes the UCME to enter EXEC mode. Type your EXEC password if requested |
| 2 | conf t | Enters the global configuration mode |
| 3 | aaa new-model | Enables accounting mode |
| 4 | aaa accounting update newinfo |
| 5 | radius-server vsa send accounting | Enables VSA events |
6 | gw-accounting aaa | Enables aaa accounting
|
| | acct-template callhistory-detail |
| | exit |
| 7 | radius server SITE_NAME | Configures the call accounting for each separate site |
| | address ipv4 SITE_IP acct-port 1612 | Specifies the IP address and port of TIM Enterprise's RADIUS, to which CDR data will be sent, e.g. 192.168.0.1:1612 |
| | key SITE_KEY | Specifies a RADIUS authentication secret that will be used by TIM Enterprise (configured in the next section), e.g. C1sco |
| | exit | Exits current site configuration |
| Info |
|---|
Repeat step 7 for each individual site |
|
| 8 | aaa group server radius SITE_NAME | Configures a specified server group |
| | server name SITE_NAME | Specifies a RADIUS server to use for this aaa group |
| | exit | Exits current site configuration |
| Info |
|---|
Repeat step 8 for each individual site |
|
| 9 | aaa accounting connection h323 | Configures the connection information |
| | action-type start-stop | Setting the action type will send RADIUS information when the call starts and stops |
| | broadcast | Enabling broadcast means that all the groups will be sent RADIUS data |
| 10 | group SITE_NAME | Specifies the group(s) that the accounting system will send RADIUS data to |
| Info |
|---|
Repeat step 10 for each system |
|
| 11 | end | Exits configuration mode |
| 12 | wr | Saves the changes |
| Info |
|---|
For a system with five or more RADIUS servers, it is recommended to amend the server retransmit options in the UCME, in order to reduce the stress on the phone system. |
IP radius source-interface
To force RADIUS to use the IP address of a specified interface for all outgoing RADIUS packets, use the
| Keywordmacro |
|---|
| Label | ip radius source-interface |
|---|
|
command in global configuration mode. If you don't wish to use the IP address of a specified interface, use the form of this command.| Step | IOS Command |
|---|
| 1 | | Keywordmacro |
|---|
| Label | ip radius source-interface |
|---|
|
SUBINTERFACE_NAME |
| 2 | | Keywordmacro |
|---|
| Label | no ip radius source-interface |
|---|
|
|
| HTML |
|---|
<a id="Configure TIM Enterprise to capture RADIUS packets"></a> |
Configuring TIM Enterprise to capture RADIUS packets
Follow the steps below to configure TIM Enterprise to receive RADIUS data from your UCME:
...