Cisco Enterprise Mobile Collaboration

Transcription

1

2 BRKUCC-2060 Cisco Enterprise Mobile Collaboration Matt Jordy, Technical Marketing Engineer

3 Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation BRKUCC-2060 Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online Cisco and/or its affiliates. All rights reserved. Cisco Public

4 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#brkucc Cisco and/or its affiliates. All rights reserved. Cisco Public

5 Agenda Enterprise Mobile Collaboration Overview On-Premises Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Cloud and Hybrid Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Enterprise Mobile Collaboration Conclusion

6 BRKUCC-2060: Cisco Enterprise Mobile Collaboration Session Overview This session describes how Cisco's enterprise and cloud collaboration mobility applications & services enable anytime, anywhere collaboration for mobile workers wherever they are located. This session focuses on:» On-premise mobile solutions and services for smartphones and tablets including Cisco Jabber» Cloud and hybrid mobile solutions and services for smartphones and tablets including Cisco Spark These solutions and services are delivered through the following types of integrations:» Fixed mobile convergence (FMC) with the Cisco Unified CM Unified Mobility feature set.» Fixed mobile substitution (FMS) with Cisco mobile applications & solutions for mobile devices. Cisco mobile applications and services provide a comprehensive set of features and capabilities for enterprise workers in motion, enabling collaboration and ensuring persistent reachability for these mobile users regardless of their location. BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 6

7 BRKUCC-2060: Cisco Enterprise Mobile Collaboration Session Logistics Attendees should have some familiarity with Cisco enterprise mobility solutions. Attendees should also have a good understanding of IP telephony and familiarity with Cisco Unified Communications Manager's features and functions. Appendix slides at the end. Session time: 120 minutes Please ask questions as we go Questions I'll answer Questions I'll defer to later in the session Please consult the latest applicable product documentation for specific feature, software version, and hardware version support requirements Questions I don't know the answer to, outside the scope of our session, or those that consume too much time Come see me after the session, send me an , or Spark message (mjordy@cisco.com) with your question and I will get back to you. BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 7

8 Cisco Enterprise Mobile Collaboration Overview

9 Cisco Enterprise Mobile Collaboration Overview Cisco Mobile Collaboration solutions include: Cisco Unified Mobility» Fixed Mobile Convergence (FMC) Cisco Mobile Clients Mobile Devices» Fixed Mobile Substitution (FMS) Enables access to Cisco collaboration applications and services for mobile users: Inside and outside the enterprise Mobile Voice Network (Carrier) Mobile Data Network (Carrier) Cisco PSTN Public/ Private WLAN Internet Spark / WebEx WLAN (802.11) Cloud-based Collaboration Services PSTN Gateway DMZ Cisco ASA Cisco Expressway-E Cisco Unified CM Directory Cisco Unity Connection Cisco IM & P On-Premise Enterprise and Collaboration Applications Cisco Expressway-C Voice (cellular) Data/signaling /media BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 9

10 Cisco Enterprise Mobile Collaboration Anytime, Anywhere Collaboration! 8:30 AM 11 AM 1:15 PM 7 AM 3 PM 9 PM 7 PM 5:30 PM 4 PM BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 10

11 Cisco Enterprise Mobile Collaboration Fixed Mobile Convergence (FMC): Linking User s Enterprise Line to Mobile Device Mobile Voice Network (Carrier) PSTN What is fixed mobile convergence? Mobile Device Enterprise Line Integrating or linking a user's enterprise line with their mobile device BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 11

12 FMC with Cisco Unified Mobility Overview Cisco Unified Mobility PSTN Gateway WAN/ Internet Cisco Unified Mobility User Cisco Unified Communications Manager Cisco Unified Mobility links a user s enterprise phone (or enterprise directory number) to their mobile device Cisco Unified Mobility User PSTN Cisco Unified Mobility includes the following benefits:» Single enterprise number for all calls whether handled by enterprise desk phone or mobile phone» Enterprise dialing from mobile devices for toll reduction, mobile phone number masking, access to non-did enterprise extensions. Cisco Unified Mobility User» Features delivered on any mobile phone regardless of mobile platform or provider with no requirement for software on the device or a mobile data plan. BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 12

13 FMC with Cisco Unified Mobility Feature Overview Receiving Calls:» Single Number Reach (SNR)» Call Filtering» Mobile Voic Avoidance Making Calls:» 2-Stage Dialing Mobile Voice Access (MVA) IVR Enterprise Feature Access (EFA) non-ivr Other Features:» Move Active Call» Mid-Call Features Carrier Voic X Mobile Voice Network (Carrier) Unified Mobility User PSTN Gateway PSTN Cisco Unity Connection Cisco Unified CM Single Number Reach Mobile Voic Avoidance 2-Stage Dialing Move Call BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 13

14 Cisco Enterprise Mobile Collaboration Fixed Mobile Substitution (FMS): Enabling User's Enterprise Line on Mobile Device Mobile Voice Network (Carrier) PSTN What is fixed mobile substitution? Mobile Device Enterprise Line Enterprise Line Moving or enabling the enterprise line on the user's mobile device BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 14

15 Cisco Enterprise Mobile Collaboration Fixed Mobile Substitution (FMS): Enabling User's Enterprise Line on Mobile Device Mobile Data Network (Carrier) Mobile Voice Network (Carrier) PSTN Considerations: What is fixed mobile substitution? Software/application required on the mobile device. What device(s) do I need? WLAN or Mobile Data or both? Substitution: Do I need an enterprise device? WLAN (802.11) Mobile Device Enterprise Line Enterprise Line Moving or enabling the enterprise line on the user's mobile device BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 15

16 Overview Cisco mobile clients enable mobile users to leverage enterprise collaboration applications and services Cisco Unity Connection Cisco IM & P Voice & video calling Enterprise IM & presence, and file sharing services Enterprise voic , meetings, and directory services Enterprise secure remote attachment Enterprise WLAN Cisco Unified CM Cisco Expressway PSTN Gateway Cisco ASA BRKUCC-2060 Mobile Voice PSTN Cisco Mobile Clients WAN/ Internet Mobile Data Cisco Spark / WebEx Public/ Private Wi-Fi Moving/enabling the enterprise line on the mobile device (FMS) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public Enterprise WLAN 16

17 Cisco Jabber, Cisco Spark, and Other Mobile Clients Cisco Jabber Cisco Jabber for Android and ios provides SIP-based voice & video over IP calling, XMPP-based IM & presence, visual voic , file and screen sharing, secure remote enterprise attachment. Cisco WebEx Mobile Other Cisco Mobile Clients Please consult the latest applicable product documentation for specific feature, software version, and hardware version support requirements Cisco AnyConnect Cisco Spark for Android and ios provides 1-to-1 & 1-to-many cloud-based collaboration rooms enabling voice/video over IP calling, secure persistent messaging, file & screen sharing. Cisco Spark» Cisco WebEx Meeting Meetings client for Android, Apple ios, BlackBerry 10, Windows Phone 8 mobile devices» Cisco AnyConnect VPN client for Android & Apple ios mobile devices BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 17

18 Mobile Clients: Message, Meet, and Call for 1:1 to Team Collaboration WORKSTYLES & COLLABORATION TOOLS Cisco Collaboration Cloud Team Audio, Video, Web Structured Meetings Real-Time Share Content Conferencing Meetings Cisco Webex Persistent Conversations Small Team Collaboration Time Shifted Rapid Iteration Pervasive Team Collaboration Messaging / Calling Cisco Spark 1:1 Phones and IM Premise-based communication Real-Time Messaging and Calling Unified Communications BRKUCC-2060 Cisco Jabber 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 18

19 Cisco Spark and Collaboration Cloud Architecture Cisco Collaboration Cloud COMPUTE File / Data Storage Analytics / Reporting Billing / Provisioning Cisco Spark Cloud Infrastructure Internet Management Content Sharing Messaging Identity / SSO Calendar Calling Media / Transcode Cloud Services BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 19

20 Voice and Video over IP Calling with Unified CM or Collaboration Cloud Cisco Jabber mobile clients register to Unified CM: Mobile device = enterprise phone Signaling is SIP / Media is (S)RTP Cisco Spark mobile clients register to the Collaboration Cloud: Mobile device = cloud-based phone Signaling is HTTPS (REST) / Media is (S)RTP IP signaling/media over WLAN (enterprise/public/private) OR mobile data network Mobile Client Device Mobile Client Device Audio: G.711, G722.1, G.729, Opus Mobile Voice Network (Carrier) Video: H.264 Mobile Data Network (Carrier) VVoIP Public/Private WiFi HTTPS Audio: Opus BRKUCC-2060 VVoIP Video: H.264 Internet PSTN Cisco Collaboration Cloud Enterprise WLAN Cisco Expressway 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public Cisco Unified CM SIP Signaling (SIP) VVoIP (RTP) Signaling (HTTPS REST) 20

21 Instant Messaging (IM) and Presence: On-Premises or Collaboration Cloud Cisco Jabber mobile clients enable instant messaging, presence, and file sharing services: XMPP-based flows with onpremise IM & P or cloud-based WebEx Messenger Cisco Spark mobile clients enable instant messaging and file sharing services: HTTPS (REST)-based Collaboration Cloud services Mobile Client Device Mobile Client Device XMPP and REST over WLAN (enterprise/public/private) OR mobile data network Mobile Voice Network (Carrier) Mobile Data Network (Carrier) HTTPS Public/Private WiFi BRKUCC-2060 XMPP XMPP Internet PSTN Cisco Collaboration Cloud Enterprise WLAN Cisco Expressway WebEx Messenger (CLOUD) XMPP 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public Unified CM IM & Presence (ON-PREMISE) HTTPS (REST) 21

22 On-Premises Mobile Collaboration

23 Agenda Enterprise Mobile Collaboration Overview On-Premises Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Cloud and Hybrid Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Enterprise Mobile Collaboration Conclusion

24 Cisco Jabber Enterprise Architecture Overview Call Control Unified CM On-Premise Enterprise Collaboration Applications & Services Applications IM & P Unity Connection Directory Conferencing Cisco Meeting Server TelePresence Management Suite (TMS) Edge PSTN GW Expressway-C Expressway-E PSTN WLAN Internet Mobile Voice Network (Carrier) Mobile Data Network (Carrier) Hybrid On-Premise Enterprise Collaboration Services / Cloud-based Collaboration Services Cloud Collaboration Services WebEx Messenger / Meeting / WebEx PMR Internet Mobile Data Network (Carrier) WLAN BRKUCC-2060» Cisco call control, applications, and edge» WebEx IM & presence, and conferencing 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 24

25 Agenda Enterprise Mobile Collaboration Overview On-Premises Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Cloud and Hybrid Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Enterprise Mobile Collaboration Conclusion

26 Cisco Unified Mobility Configuration: Standard and Jabber Dual-Mode Standard Unified Mobility for SNR» Remote Destination Profile with Enterprise DN (shared line with enterprise device*)» 1 10 Remote Destinations Remote Destination Profile Virtual Phone DN: Remote Destination # Remote Destination #10 Maximum of 10 per user Jabber Dual-Mode + Unified Mobility for SNR» Client Device with Enterprise DN (shared line with enterprise device*) - No Remote Destination Profile» 1 Mobility Identity + up to 9 Remote Destinations Dual Mode for Android Dual Mode for iphone Client Device Type DN: No Remote Destination Profile Mobility Identity Remote Destination #9 Dual-mode only Maximum of 10 per user * If provisioned BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 26

27 Cisco Unified Mobility Configuration: Standard and Jabber Dual-Mode Standard Unified Mobility for SNR» Remote Destination Profile with Enterprise DN (shared line with enterprise device*)» 1 10 Remote Destinations Remote Destination Profile Mobility Identity What's so special? Virtual Phone Enables dual-mode handoff (moving call from WLAN Remote to Destination cellular) #1and Dial via Office (DVO) DN: Dual-ring avoidance: SNR engaged *ONLY* when client device is not registered to Unified CM Remote Destination #10 Maximum of 10 per user Jabber Dual-Mode + Unified Mobility for SNR» Client Device with Enterprise DN (shared line with enterprise device*) - No Remote Destination Profile» 1 Mobility Identity + up to 9 Remote Destinations Dual Mode for Android Dual Mode for iphone Client Device Type DN: No Remote Destination Profile Mobility Identity Remote Destination #9 Dual-mode only Maximum of 10 per user * If provisioned BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 27

28 Cisco Unified Mobility Integration: Dual Mode Dual-Ring Avoidance 1 st : VoIP 2 nd : SNR Incoming calls are NOT routed to Mobility Identity via SNR when client device is registered to Unified CM Incoming calls ARE routed to Mobility Identity via SNR when client device is not registered to Unified CM PSTN Mobile Voice Network (Carrier) Mobility Identity (Mobile Line) * NO Enterprise Registration * Call: PSTN Gateway Mobile Client WITHOUT Enterprise Registration Call: Cisco Unified CM Cisco Unified Mobility User Enterprise Number (408) Same Device Enterprise WLAN Enterprise Line * Enterprise Registration * Mobile Client WITH Enterprise Registration NOTE: Incoming calls directly to the mobile phone number will ring the mobile voice/ cellular interface even when the dual mode phone is BRKUCC-2060 registered to 2018 Unified Cisco and/or CM its affiliates. All rights reserved. Cisco Public 28

29 Enterprise Secure Remote Attachment Architecture: VPN Enterprise secure remote attachment enables secure remote connectivity to the enterprise for Cisco routers, endpoints, and clients. VPN with the Cisco ASA» VPN IOS router (e.g. Cisco Virtual Office)» Cisco AnyConnect VPN software client for mobile devices. Mobile Devices Public/Private WLAN (802.11) PSTN PSTN Gateway DMZ Cisco ASA Cisco Unified CM Cisco Unity Connection Cisco IM and Presence Mobile Data Network (Data Channel) Internet Cisco Expressway -E Cisco Expressway -C BRKUCC-2060 BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 29

30 Enterprise Secure Remote Attachment Architecture: VPN-less Collaboration Edge Enterprise secure remote attachment enables secure remote connectivity to the enterprise for Cisco routers, endpoints, and clients. VPN with the Cisco ASA» VPN IOS router (e.g. Cisco Virtual Office)» Cisco AnyConnect VPN software client for mobile devices. Collaboration Edge (VPN-less)» Cisco Expressway mobile and remote access Mobile Devices Mobile Data Network (Data Channel) Public/Private WLAN (802.11) PSTN Internet PSTN Gateway Cisco Expressway -E Cisco Unified CM Call signaling (SIP) IM & Presence DMZ (XMPP) Visual voic , directory (HTTPS) Cisco ASA Voice/video media (RTP / srtp) Cisco Expressway -C Expressway Collaboration flows Cisco Unity Connection Cisco IM and Presence BRKUCC-2060 All other traffic 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 30

31 Cisco Expressway: Firewall Traversal Basics Enterprise Network DMZ Public Network Unified CM Expressway-C Firewall Expressway-E Firewall Internet Signaling Media 1. Expressway-E is the traversal server installed in DMZ. Expressway-C is the traversal client installed inside the enterprise network. 2. Expressway-C initiates traversal connections outbound through the firewall to specific ports on Expressway-E with secure login credentials. 3. Once the connection has been established, Expressway-C sends keep-alive packets to Expressway-E to maintain the connection 4. When Expressway-E receives an incoming call, it issues an incoming call request to Expressway-C. 5. Expressway-C then routes the call to Unified CM to reach the called user or endpoint 6. The call is established and media traverses the firewall securely over an existing traversal connection BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 31

32 Cisco Jabber and Expressway Mobile and Remote Access: DNS SRV Queries Unified CM IM & P (imp.example.com) Enterprise Network DMZ Public Network Unified CM (ucm.example.com) Expressway-C Firewall Expressway-E Firewall (expressway.example.com) Internet Jabber inside the enterprise DNS Corporate DNS Split DNS V Jabber outside the enterprise DNS Public DNS _cisco-uds._tcp.example.com? = ucm.example.com _cisco-uds._tcp.example.com? = No resolution _cuplogin._tcp.example.com? = imp.example.com _cuplogin._tcp.example.com? = No resolution _collab-edge._tls.example.com? = No resolution _collab-edge._tls.example.com? = expressway.example.com BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 32

33 Cisco Jabber and Cisco AnyConnect VPN: DNS SRV Queries Unified CM IM & P (imp.example.com) Enterprise Network DMZ Public Network Unified CM (ucm.example.com) Expressway-C Firewall Expressway-E Firewall (expressway.example.com) Internet DNS Corporate DNS Adaptive Security Appliance (ASA) Same as on-premise DNS resolution _cisco-uds._tcp.example.com? _cuplogin._tcp.example.com? _collab-edge._tls.example.com? DNS Public DNS Jabber outside the enterprise with AnyConnect VPN = ucm.example.com = imp.example.com = No resolution BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 33

34 Cisco Expressway Mobile and Remote Access: Design Considerations (1 of 2) DNS Corporate DNS» Split DNS configuration is critical for successful deployments of Jabber over Expressway Certificates» Public CA signed certificate and public key infrastructure (PKI) required for Expressway deployments: Capacity Public CA signed certificates required for Expressway-E nodes. All other nodes (Expressway-C, Unified CM, IM & P) may use public CA or self-signed / enterprise-signed CA certificates.» Large Expressway OVA or CE appliance maximum capacities: Maximum of 10,000 proxy device registrations per Expressway cluster Maximum of 2,000 concurrent video calls or 4,000 voice calls per Expressway cluster DNS DNS Public DNS BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 34

35 Cisco Expressway Mobile and Remote Access: Design Considerations (2 of 2) High Availability» Like Unified CM, Expressway nodes are clustered for redundancy and scale. Expressway-C and E nodes must deployed in equal numbers and sizes Expressway nodes cluster in up to 4:2 (primary:backup) redundancy scheme Jabber Expressway connections including clients registrations are re-established via alternate node(s) given failure of an Expressway node CAUTION: All enterprise collaboration services are NOT highly available over MRA.» IM & P node failures: Jabber client will failover to active node for messaging and presence services» Unified CM and Unity Connection node failures: Jabber client will NOT failover to active node for voice/video and voice messaging services. BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 35

36 Enterprise Secure Remote Attachment Architecture: Expressway or VPN? Supported workflows Licensing Media/data path Collaboration feature support Cisco AnyConnect VPN All workflows, full enterprise access not just collaboration Per session/connection VPN license + collaboration user/endpoint licensing All traffic traverses/hairpins at the Adaptive Security Appliance (ASA) / VPN head-end All collaboration features supported including active WLAN to cellular handoff, CAPF enrollment, LDAP directory services Cisco Expressway Mobile and Remote Access Collaboration work flows only: voice/video, IM and presence, visual voic , directory access No additional licensing beyond collaboration user/endpoint licensing» All collaboration traffic traverse/hairpins at the Expressway-C node(s). No point-to-point media.» All other traffic remains on the local network/internet Active call hand-out, CAPF enrollment, LDAP directory access NOT supported. Note: UDS is forced for directory/contact source over Expressway For Your Reference Other considerations Per user enablement for enterprise secure remote access.» No secure remote access device / user policy restrictions.» No session persistency calls/connections cleared when network path lost or changed. BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 36

37 Agenda Enterprise Mobile Collaboration Overview On-Premises Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Cloud and Hybrid Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Enterprise Mobile Collaboration Conclusion

38 Cisco Jabber Deployment: Service Discovery Flow - On-Premise, Full UC Mode 1 DNS SRV lookup: _cisco-uds._tcp This flow illustrates Jabber in Full UC mode IP address(es) for UDS 2 DNS Corporate DNS 3 Find home cluster and TFTP server address Download UC Services Profile and jabbber-config.xml 5 Address for home Unified CM TFTP 4 Unified CM UDS Unified CM IM & P 7 Unified CM User TFTP authentication* Unified CM Authz 6 Unity Connection 7 Connect and register to additional services (message, voic , etc.) * OAuth used for authentication / authorization against Unified CM Authz server BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 38

39 Cisco Jabber Deployment: Service Discovery Flow - On-Premise, Full UC Mode HTTP request to WebEx Download UC cloud (example.com) 2 User log-in to WebEx Cisco Services Profile and jabbber-config.xml 3 1 WebEx 5 IP address(es) for UDS 2 4 Hybrid: UC settings sent to client Hybrid: Client connects/ registers to on-premise services Address for home Unified CM TFTP Unified CM TFTP 4 1 DNS SRV lookup: _cisco-uds._tcp DNS Corporate DNS 3 Find home cluster and TFTP server address 4 Unified CM UDS Unified CM Authz Unity Connection 4 Connect and register to additional services (call control, voic , etc.) BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 39

40 Cisco Jabber Deployment: Administrator Tasks Provision Devices Administrators must enable, configure, and associate Jabber device types. Three Jabber device types: Cisco Dual Mode for Android Cisco Dual Mode for iphone Cisco Jabber for Tablet (ipad or Android) Configured like other endpoints in Unified CM Jabber specific configuration under product specific settings. Depending on version of Unified CM, COP file install may be required to enable device type. Refer to latest product release notes for requirements and download location Associate user to Jabber device BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 40

41 Cisco Jabber Deployment: Administrator Tasks Provision UC Services Administrators should prepare for service discovery configure UC services, assign to service profile(s), and associate profile(s) to user(s). END USER Configure and upload a jabber-config.xml file to Unified CM for service customization (user policies/options, directory integration, etc.). BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 41

42 Cisco Jabber Deployment: Administrator Tasks DNS SRV and Directory Integration Administrator should configure corporate DNS SRV records to ensure service discovery works properly. Unified CM / UDS e.g. _cisco-uds._tcp Administrator should select and configure Jabber contact source» Common Directory Integration (CDI)*» Unified CM User Data Services (UDS)**!! CAUTION Prior to Unified CM 11.5 / Jabber 11.5 UDS reduces Unified CM endpoint capacity. Each Jabber client leveraging UDS counts as two (2) endpoint registrations!!! _cisco-uds._tcp.example.com = ucm.example.com BRKUCC-2060 Common Directory Integration HTTPS/ REST (UDS) Corporate Directory User Data Services Unified CM UDS LDAP LDAP (AD, AD/LDS, OpenLDAP) LDAP Directory Sync LDAP * Default on-premise directory source for Jabber ** Expressway Mobile & Remote Access contact source 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 42

43 Cisco Jabber Deployment: Administrator Tasks DNS SRV and Directory Integration Administrator should configure corporate DNS SRV records to ensure service discovery works properly. Unified CM / UDS e.g. _cisco-uds._tcp» Unified CM 11.5 introduced LDAP proxy capabilities for UDS.» When UDS-to-LDAP Proxy is _cisco-uds._tcp.example.com = ucm.example.com Administrator enabled, should client select directory and queries configure Jabber UDS contact source are sent by UDS to LDAP.» Query results are received HTTPS/» Common by Directory UDS and Integration relayed back (CDI)* REST (UDS)» Unified CM to the User client Data Services (UDS)**» Enables client searches against corporate!! CAUTION directories with more than 160,000 users!! Prior to Unified CM 11.5 / Jabber 11.5 UDS reduces Unified CM endpoint capacity. Each Jabber client leveraging UDS counts as two (2) endpoint registrations! BRKUCC-2060 Common UDS-to-LDAP Directory Proxy Integration LDAP Corporate > 160K Users Unified CM UDS HTTPS/ REST (UDS) Directory User Data Services LDAP Unified CM UDS LDAP LDAP (AD, AD/LDS, OpenLDAP) LDAP Directory Sync LDAP * Default on-premise directory source for Jabber ** Expressway Mobile & Remote Access contact source 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 43

44 Cisco Jabber Deployment: Administrator Tasks DNS SRV and Directory Integration Administrator should configure corporate DNS SRV records to ensure service discovery works properly. e.g. _cisco-uds._tcp WebEx Messenger/WebEx cloud is the Jabber contact source with hybrid deployments Administrator should select and configure Jabber contact source» Common Directory Integration (CDI)* Unified CM / UDS» Unified CM User Data Services (UDS)**!! CAUTION Prior to Unified CM 11.5 / Jabber 11.5 UDS reduces Unified CM endpoint capacity. Each Jabber client leveraging UDS counts as two (2) endpoint registrations!!! _cisco-uds._tcp.example.com = ucm.example.com Cisco WebEx BRKUCC-2060 Common Directory Integration HTTPS/ REST (UDS) Corporate Directory User Data Services Unified CM UDS LDAP LDAP (AD, AD/LDS, OpenLDAP) LDAP Directory Sync LDAP * Default on-premise directory source for Jabber ** Expressway Mobile & Remote Access contact source 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 44

45 Cisco Jabber Deployment: User Tasks - Download and Install Download and install the Jabber client from appropriate public application store. Jabber for Android Available on Google Play Jabber for iphone and ipad Available on Apple App Store At first time launch:» Jabber prompts user for username@domain.» Jabber uses service discovery to connect and configure» Jabber prompts user for credentials If service discovery is not configured or fails, user can manually configure service(s) BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 45

46 Cisco Jabber OAuth Beginning with Jabber 11.9, Jabber is capable of leveraging OAuth for all authorization and authentication flows.» Previously OAuth was only enabled / engaged with Single Sign-On (SSO)» OAuth must be explicitly enabled on collaboration applications* OAuth 2.0 is a standard-based framework (RFC 6749) enabling applications to securely access a service or API on behalf of a user. OAuth 2.0 is implemented using authorization tokens which are issued by an Authorization Server. Unified CM acts as the Authorization Server and issues token which other applications (IM&P, Unity Connection, and Expressway) are able to validate. * Enabled by default on Expressway BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 46

47 Cisco Jabber OAuth Authorization Flow Enterprise Internet Refresh Tokens: Used to request a new OAuth token when existing token expires. Full authentication not required. Faster login / relogin for improved experience during network transition and when application is brought to the foreground 1 Authorization Server (Authz) 1 Unified CM 1A OAuth Token Jabber (on-premise / VPN) 2 OAuth Refresh Token Authentication method at Unified CM may be SSO, LDAP, or local 1A IM & P Unity Connection Expressway-C Expressway-E 2 OAuth Token OAuth Refresh Token Initial Authorization / Authentication Jabber (MRA) OAuth Token Issued Authorization with OAuth Access Token BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 47

48 Cisco Jabber OAuth Configuration and Requirements Unified CM, IM&P, and Unity Connection: OAuth with Refresh Login Flow set to Enable Unity Connection: Define Authz Server (Unified CM) Expressway-C: Authorize by OAuth token with refresh set to On (default) Version requirements: Unified CM / IM & P 12.0 (or SU3+) Unity Connection 12.0 Expressway X8.10 Jabber Cisco and/or its affiliates. All rights reserved. Cisco Public 48

49 Cisco Jabber OAuth Configuration and Requirements Unified CM, IM&P, and Unity Connection: OAuth with Refresh Login Flow set to Enable Unity Connection: Define Authz Server (Unified CM) Expressway-C: Authorize by OAuth token with refresh set to On (default) Version requirements: Unified CM / IM & P 12.0 (or SU3+) Unity Connection 12.0 Expressway X8.10 Jabber 11.9 For more information, refer to the Deploying OAuth with Cisco Collaboration Solution Release 12.0 white paper available at: Cisco and/or its affiliates. All rights reserved. Cisco Public 49

50 Cisco Jabber for ios: Apple Push Notification Service (APNS) Apple Push Notifications are now supported with Cisco Jabber for ios enabling Unified CM, IM&P, and WebEx Messenger to notify the Jabber application of incoming calls and messages when the client is running in the background. Previously Jabber alerted user of incoming calls/messages by direct notification over IP (SIP, XMPP) from application services in order to bring the client to the foreground. IP connection maintained via periodic keep alive. With APNS, notification of incoming calls/messages are sent via HTTPS through the cloud-based Apple Push Notification service to bring the client to the foreground. This change is required due to plans by Apple to deprecate IP socket method used for SIP and XMPP keep alives. BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 50

51 Apple Push Notification Service (APNS) Flow 1 Notification sent via HTTPs to Cisco Collaboration Cloud 2 Cisco Collaboration Cloud sends notification to APNS 3 APNS propagates notification to the ios device Unified CM IM & P Enterprise Expressway-C Jabber for ios (on-premise / VPN) 1 Expressway-E DMZ Jabber ios in Background Notifications via APNS Jabber for ios (MRA) Jabber ios in Foreground Notifications Direct (SIP, XMPP) Internet Cisco Collaboration Cloud Apple Push Notification Service BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public

52 Apple Push Notification Service (APNS): Before and After BEFORE AFTER SIP / XMPP (keep alives) FOREGROUND BACKGROUND SIP / XMPP FOREGROUND BACKGROUND HTTPS Version requirements: Unified CM / IM & P 11.5(1) SU3+ Jabber 11.9 Expressway X8.10(1) Cisco Collaboration Cloud Apple Push Notification Service NOTE: APNS has NO impact on non-ios Jabber clients (Android, Windows, Mac) BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 52

53 Cisco Unified Mobility Integration: Multiple Mobile Client Devices When deploying multiple Cisco mobile clients for a single user: You must configure/ associate the Mobility Identity with the dual-mode client device Always configure/ associate any other Remote Destinations on the client device with the Mobility Identity Mobility Identity Remote Destination #2 XXX XXX-XXXX Remote Destination N Maximum of 10 Mobility Identities / Remote Destinations per user Cisco Dual Mode for iphone/ Android No Remote Destination Profile Cisco Jabber for Tablet Shared Line IP Phone BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 53

54 Dial Plan: Call Routing - Originate and Terminate Jabber Device and Remote Destination Profile Calling Search Space (CSS) configuration settings» 2-stage (MVA/EFA)» DVO» Voice/video over IP Call Origination: CSS (device-level)» Determines call routing to target when Unified Mobility / Jabber user makes a call (in concatenation w./ line-level CSS) Mobile Voice Network (Carrier) PSTN PSTN Gateway Cisco Unified CM» SNR Call Termination: Rerouting CSS» DVO-R call leg» Determines call routing to mobile when Unified Mobility/ Jabber user receives a call Unified Mobility User Call Origination Call Termination BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 54

55 Dial Plan: Call Routing - Originate and Terminate Jabber Device and Remote Destination Profile Calling Search Space (CSS) configuration settings» 2-stage (MVA/EFA)» DVO» Voice/video over IP Call Origination: CSS (device-level)» Determines call routing to target when Unified Mobility / Jabber user makes a call (in concatenation w./ line-level CSS) Mobile Voice Network (Carrier) PSTN PSTN Gateway Dual-mode Cisco Unified CM» SNR Call Termination: Rerouting CSS» DVO-R call leg» Determines call routing to mobile when Unified Mobility/ Jabber user receives a call Unified Mobility User BRKUCC-2060 Unified Mobility Call Origination Call Termination 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 55

56 Design Considerations: Cisco Jabber Emergency Calling Calls for emergency services from mobile client devices should be routed via the mobile provider network whenever possible. Mobile provider networks typically provide more accurate location information than enterprise or public WLAN networks. Unified CM provides a mechanism for escaping or forcing of emergency calls from Jabber clients directly over the cellular voice network of the device. Dual Mode Client Device Configuration» Avoids enterprise call routing (VoIP or DVO)» Applies to Cisco Jabber for iphone and Android BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 56

57 Design and Deployment Considerations: Cisco Jabber Scalability/Capacity Planning» Maximum of 40,000 Mobility Identities + Remote Destinations per Unified CM cluster» Maximum of 40,000 registered/configured devices per Cisco Unified CM cluster» Maximum of 10,000 Cisco Expressway mobile and remote access proxy registrations, 2,000 concurrent video or 4,000 audio calls per Expressway-C/E cluster High Availability» Client registration/feature sets are highly available based on Unified CM clustering and device pool/cm group configuration» Dual mode devices fall-back to SRST or the mobile voice/cellular network when Unified CM is unavailable BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 57

58 Wireless Network Control and Quality User Experience The transport network is key to successful voice/video over WLAN deployments = Wired More CONTROL = higher quality collaboration experience.» Control over wired and wireless (RF) design: bandwidth/capacity, speed, QoS, features, etc. Less (or no) CONTROL beyond the enterprise boundary = potential poor quality But this does not mean we should not try!» Do what we can within the enterprise.» Overprovision / increase bandwidth. Enterprise WLAN (802.11) BRKUCC-2060» Non-deterministic media access.» No priority servicing.» No bandwidth guarantees SHARED CHANNEL Wireless Public/Private WiFi Hotspot (802.11) Internet Increasing Control = Increasing Quality Mobile Provider (4G/LTE/UTMS) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 58

59 Wireless Site Survey, RF Design, and Call Capacity Conduct WLAN site survey to verify radio frequency design and identify / mitigate interference so that WLAN is optimized for voice/video traffic WLAN RF (radio frequency) Design» Channel cell radius of -67 dbm (or less) RF Design target for Voice/Video over WLAN (minimize packet loss)» Same channel cell separation of 19 dbm (minimize co-channel interference)» Non-adjacent channel cell overlap of at least 20% (ensure seamless roaming between access points) Call Capacity (per channel cell)» Maximum of 27 simultaneous voice calls* per a/g/n/ac channel cell» Maximum of 8 simultaneous voice/video** calls* per a/g/n/ac channel cell * Bi-directional streams ** Video resolution of 720p, video bit rate up to 1 Mbps -67 dbm -67 dbm 19 dbm -86 dbm 5GHz or no Bluetooth BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 59

60 Wireless QoS: WMM e and Network Access Wi-Fi Multimedia (WMM): Wi-Fi Alliance interoperability certification based on the e standard Provides wireless QoS by enabling layer e UP marking of wireless traffic Separates traffic into 4 differentiated service QoS access categories corresponding to 4 traffic queues» 4 traffic queues contend for access to the wireless channel» Each access category of traffic defines specific delay & random back-off characteristics for contention management e UP Marking Ensures high-priority traffic flows get more frequent access to the channel Voice: EF Video: AF41 Signal: CS3 WMM Access Categories Voice (AC_VO) Video (AC_VI) Best Effort (AC_BE) Background (AC_BK) Voice/video benefit: WMM-capable endpoints receive higher priority throughput on the wireless channel for real-time traffic (AC_VO and AC_VI categories) ensuring high-quality voice & video BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 60

61 Wireless QoS: WLAN QoS Profile A platinum QoS profile should be configured on the Cisco WLC and applied to all WLANs that will carry voice/video traffic» Maximum Priority should be set to voice : This determines the highest allowed DSCP value for traffic on the WLAN (DSCP 46) [802.11e UP 6 / WMM Access Category AC_VO]» Unicast and Multicast Default Priority should be set to best effort : This is the default marking applied to all unmarked traffic on the WLAN (DSCP 0) [802.11e UP 0 / WMM Access Category AC_BE] AireOS BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 61

62 Optimized Fast lane Cisco and Apple ios Interop: Optimized Wi-Fi, Fastlane Application Prioritization Cisco wireless networks provide improved wireless operation for Apple ios devices When connected to Cisco wireless networks, Apple ios client devices receive optimized Wi-Fi connectivity» Optimized roaming with standards r enables fast secure roaming without full reauthentication k network provides enhanced neighbor lists for determining best roaming candidate v BSS Transition messaging between client & network facilitate network assisted roaming» These standards are enabled on the WLAN by default and ios devices take advantage for optimized performance on the network ios client device critical business and real-time capable applications are prioritized on Cisco wireless networks with the Fast lane feature» Fast lane is enabled on Cisco wireless networks and a QoS profile is pushed to the ios client device» Fast lane QoS profiles are created using Meraki Systems Manager or Apple Configurator and contain whitelisted applications which can mark QoS for prioritization on the network Network and software requirements: Cisco AireOS 8.3+ WLC with ac, Cisco Aironet APs, ios 10+, Meraki Systems Manager (Enterprise Mobility Manager) or Apple Configurator BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 62

63 Optimized Wi-Fi Connectivity for Non-iOS Devices (Android, OSX, Windows) Most newer Android devices provide support for r (Fast Roaming) and k (Neighbor Lists) standards and some provide support for v (BSS Transition) standard, however support is not prevalent. Currently Apple Mac (OSX) devices do not support r, k, or v. Microsoft Windows 10 devices provide support for r, k, and v. These device operating systems should interoperate with SSIDs that have these standards enabled even if they do not support the standard. No need to create separate SSIDs for on your wireless network. Testing recommended to confirm device operation on your wireless network BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 63

64 Wireless QoS: Traffic Marking for Non-iOS Devices (Android, OSX, Windows) Android, OSX, and Windows devices are NOT able to leverage wireless Fastlane QoS, however In the case of Microsoft Windows, a QoS policy can be applied to workstations using Group Policy Objects (GPOs) and the GPO management console on a Windows domain server. The QoS policy can be used to enable traffic marking for wireless application traffic including Jabber client. Alternatively or in the case of non-windows devices, Application Visibility and Control (AVC) on the WLAN may be configured for network-based automatic application recognition and traffic marking including Jabber client. BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 64

65 Wireless QoS: Application Visibility and Control (AVC) and QoS Marking Application Visibility and Control (AVC) is a built-in network-based application recognition (NBAR) feature available on Cisco APs and WLAN controllers For each identified application flow, the network can drop, mark/remark, or permit (as marked) packets of specific traffic types Network identifies traffic type of each flow based on deep packet inspection Non-iOS Devices Packet WLAN (802.11) Wired LAN Wireless AP WLAN Controller Upstream / Downstream WLC treatment (drop/mark/permit) occurs on egress in both upstream and down stream directions. STOP DROP PERMIT Trash MARK Voice Video Bulk Data Best Effort BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 65

66 Wireless QoS: Application Visibility and Control (AVC) and QoS Marking (cont.) Application Visibility and Control (AVC) is a built-in network-based application recognition (NBAR) feature available on Cisco APs and WLAN controllers WLC firmware contains 100s of application 1. Create AVC profile: signatures for identification of application traffic types including Cisco Jabber Audio and Cisco Jabber Video. Voice flows (re)marked EF (46) 2. Enable AVC and apply profile to WLAN: AireOS Video flows (re)marked AF41 (34) Signaling flows (re)marked CS3 (24) BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 66

67 Cloud and Hybrid Mobile Collaboration

68 Agenda Enterprise Mobile Collaboration Overview On-Premises Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Cloud and Hybrid Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Enterprise Mobile Collaboration Conclusion

69 Cisco Spark Enterprise Architecture Overview On-Premise Enterprise Collaboration Applications & Services Call Control Applications Edge Unified CM Active Directory (LDAP) Exchange (Calendar) PSTN GW Expressway-C Expressway-E PSTN WLAN Internet Mobile Voice Network (Carrier) Mobile Data Network (Carrier) Hybrid Services On-Premise Enterprise Collaboration Services / Cloud-based Collaboration Services Cloud Collaboration Services Spark Message / Meet / Call Internet BRKUCC-2060 Mobile Data Network (Carrier) WLAN» Cisco call control, enterprise identity, enterprise calendar, secure edge.» Spark message/meet for team collaboration 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 69

70 Agenda Enterprise Mobile Collaboration Overview On-Premises Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Cloud and Hybrid Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Enterprise Mobile Collaboration Conclusion

71 Cisco Spark Hybrid Services Connectors on the host communicate with the cloud using HTTPS HTTPS Internet DMZ Enterprise Hybrid Service enterprise integration is facilitated by an on-premise Expressway-C Connector host Expressway E / C Expressway-C Connector Host Cisco Spark Hybrid Services enable integration of enterprise on-premise identity, calendar, and calling services with cloud-based collaboration services provided by the Cisco Collaboration Cloud. Expressway X8.7.1 or later BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 71

72 Cisco Spark Hybrid Services: Enterprise Directory Integration Cisco Spark Hybrid Services enables synchronization of the corporate directory with the Cisco Collaboration Cloud identity services. HTTPS Internet Expressway E / C User information (once synchronized from the enterprise directory via LDAP) is pushed from the Directory Connector via HTTPS to the cloud identity store of the enterprise s cloud services organization. DMZ Cisco Directory Connector is a service that is installed Enterprise with domain administrator rights on a Windows Domain server and uses a read-only account to import user contact information from the enterprise Microsoft Active Directory Cisco Directory Connector Microsoft APIs (.NET) Microsoft Active Directory BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 72

73 Cisco Spark Hybrid Services: Enterprise Directory Integration (cont.) Cisco Spark Hybrid Services enables synchronization of the corporate directory with the Cisco Collaboration Cloud identity services. Hybrid Services Directory Connector allows: HTTPS Internet Expressway E / C User information (once synchronized from the enterprise directory via LDAP) is pushed from the Directory Connector via HTTPS to the cloud identity store of the enterprise s cloud Spark users to search for contacts in their corporate directory. services organization. DMZ Cisco Directory Connector is a service that is installed Enterprise with domain administrator rights on a Windows Domain server and uses a read-only account to import user contact information from the enterprise Microsoft Active Directory Cisco Directory Connector Microsoft APIs Administrator to assign user roles, manage user capabilities, and entitle or activate imported enterprise users for specific cloud services. Microsoft Active Directory BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 73

74 Cisco Spark Hybrid Services: Enterprise Calendar Integration Cisco Spark Hybrid Services enable integration and synchronization of the enterprise calendar with the Cisco Collaboration Cloud calendar service. HTTPS Internet Internet Calendar Connector is a service that runs on the Expressway-C Connector Host and imports user meeting and calendar information from enterprise Microsoft Exchange Web Services using EWS (HTTPS) Also available for Google Calendar Expressway E / C DMZ Microsoft Exchange Calendar Connector pushes user meeting information via HTTPS to Enterprise the cloud calendar service for the enterprise s cloud organization. Expressway-C Connector Host Calendar Connector Common Connector Framework HTTPS (Exchange Web Services) Call Connector BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 74

75 Cisco Spark Hybrid Services: Enterprise Calendar Integration (cont.) Cisco Spark Hybrid Services enable integration and synchronization of the enterprise calendar with the Cisco Collaboration Cloud calendar service. HTTPS Internet Internet Calendar Connector is a service that runs on the Expressway-C Connector Host and imports user meeting and calendar information from enterprise Microsoft Also available for Google Calendar Expressway E / C Exchange Web Services using EWS (HTTPS) DMZ Calendar Connector pushes user meeting information via HTTPS to Enterprise the cloud calendar service for the enterprise s cloud organization. Expressway-C Connector Host Calendar Connector Common Connector Framework (Exchange Web Services) Call Connector Hybrid Services Calendar Connector enables collaboration before, during, and after a Added to the meeting location field allows Spark users to automatically create HTTPS Spark collaboration space based on the title and attendees for a scheduled Added to the meeting location field allows Spark Microsoft users to automatically add WebEx personal meeting room to the meeting invite and the Spark Exchange room BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 75

76 Cisco Spark Hybrid Services: Enterprise Calling Cisco Spark Hybrid Services enables integration of Unified CMbased enterprise calling with the Cisco Collaboration Cloud calling and media services. Media and signaling traverse the enterprise firewall using Expressway-E / C pairs DMZ HTTPS Internet Internet RTP media and SIP signaling are exchanged between Unified CM, the endpoints, and the Collaboration Cloud calling and media services. Expressway E / C RTP Call Connector (on the Expressway-C Connector Host) and communicates with Unified CM using AXL to validate and provision user and CTI to provide enterprise device monitoring/control to the cloud. Expressway-C Connector Host Calendar Connector Call Connector Common Connector Framework SIP AXL / CTI Unified CM BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 76

77 Cisco Spark Hybrid Services: Enterprise Calling (cont.) Cisco Spark Hybrid Services enables integration of Unified CMbased enterprise calling with the Cisco Collaboration Cloud calling and enterprise media services. call control (Unified CM) Media and signaling traverse the enterprise firewall using Expressway-E / C pairs DMZ HTTPS Internet Internet RTP media and SIP signaling are exchanged between Unified CM, the endpoints, and the Collaboration Cloud calling and media services. Expressway E / C RTP Call Connector (on the Expressway-C Connector Host) and communicates with Unified CM using AXL to validate and provision user and CTI to provide enterprise device monitoring/control to the cloud. Expressway-C Connector Host Calendar Connector Call Connector Hybrid Services Call Connector enables call integration between enterprise and Spark clients Common Connector Framework Call Service Aware Cisco Spark enables unified call history as well as one button to AXL / CTI share between Spark clients when Spark users make calls with their enterprise phone. Call Service Connect Enables Cisco Spark users to make and receive calls from SIP Unified CM BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 77

78 Cisco Spark Hybrid Calling Integration The Cisco Spark Hybrid Call Services integration leverages the Unified CM Unified Mobility framework. New device type: Spark Remote Device (RD)» Early deployments leverage device type: CTI Remote Device (RD) Functionality relies on Unified Mobility capabilities including:» Inbound caller ID matching» Automatic inbound call anchoring» Single number reach call routing Spark RDs are not counted against overall cluster Remote Destination / Mobility Identity count. BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 78

79 Cisco Spark Hybrid Services: Call Service Aware 4 Jane Screen share button Expressway-C Host Call Connector forwards the active call indication to the Collaboration Cloud via HTTPS Cisco Spark Hybrid Services Cisco Collaboration Cloud Internet 3 Unified CM signals via CTI to the Call Connector that there is an enterprise call between hybrid calling enabled users Expressway E / C Expressway-C Connector Host 2 Unified CM jane@example.org DN: Bob bob@example.org Cisco Spark brings to the foreground or creates a 1:1 space between the two users and displays the Screen Share button. Either user can click to share their screen Call Service Aware enables one button screen share Hybrid calling enabled users are on an active enterprise call between Unified CM registered endpoints DN: 1001 bob@example.org between Spark clients for users on an active BRKUCC-2060 enterprise 2018 Cisco and/or call its affiliates. All rights reserved. Cisco Public 79

80 Cisco Spark Hybrid Services: Call Service Connect and SNR Bob Cisco Collaboration Cloud Cisco Spark Hybrid Services Call Service Connect enables calling between cloud-based Spark clients and enterprise devices The call rings both Bob s desk phone and Spark client. He can answer at either device, however in this case he is out of the office and answers using Spark on his mobile. Internet Unified CM extends call to Bob s Spark RD (shared line) which engages SNR and forks call to Bob s Spark Hybrid Services URI 4 Spark Remote Device Expressway E / C User Jane selects contact or dials number for Bob (1001 / bob@example.org). Expressway-C Connector Host Unified CM DN: 1001 RD: bob@example.call.ciscospark.org 3 2 Shared Line jane@example.org DN: Unified CM receives call setup and extends call to Bob s enterprise phone DN: 1001 bob@example.org BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 80

81 Agenda Enterprise Mobile Collaboration Overview On-Premises Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Cloud and Hybrid Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Enterprise Mobile Collaboration Conclusion

82 Cloud and Hybrid Mobile Collaboration Cisco Spark Deployment: Provisioning Cisco Spark Control Hub: Onboarding Users» Add users to a managed/paid organization via the Cisco Spark Control Hub» Add users by creating a new space Provisioning/invite sent to user Desktop BRKUCC-2060 Mobile 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 82

83 Cloud and Hybrid Mobile Collaboration Cisco Spark Deployment: End User 1. User acquires the Cisco Spark application: Desktop: Download and installer for Window and Mac» Mobile: with redirect link to appropriate application store (Android, ios)» Web: Open in browser ( 2. User logs in with address BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 83

84 Cisco Spark Hybrid Services Deployment: Provisioning Cloud The organization administrator uses the Cisco Spark Control Hub ( to provision and manage Cisco Spark Hybrid Services and activate users for these services BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 84

85 Cisco Spark Hybrid Services Deployment: Provisioning Expressway-C Calendar Connector BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 85

86 Cisco Spark Hybrid Services Deployment: Provisioning Expressway-C Call Connector BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 86

87 Dial Plan: Cisco Spark Call Routing - Originate and Terminate Spark Remote Device / CTI Remote Device Calling Search Space (CSS) configuration settings» 2-stage (MVA/EFA)» DVO» Voice/video over IP» SNR Call Origination: CSS (device-level)» Determines call routing to target when Spark user makes a call (in concatenation w./ line-level CSS) Call Termination: Rerouting CSS» DVO-R call leg» Determines Single Number Reach call routing to Spark Mobile Voice Network (Carrier) PSTN Unified Mobility User BRKUCC-2060 PSTN Gateway Cisco Unified CM Spark RD / CTI RD Call Origination Call Termination 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 87

88 Design Considerations: Cisco Spark Emergency Calling Calls for emergency services from mobile client devices should be routed via the mobile provider network whenever possible. Mobile provider networks typically provide more accurate location information than enterprise or public WLAN networks. With Cisco Spark Hybrid Services Call Service Connect deployments, emergency calls from Cisco Spark client are routed using enterprise call control and PSTN gateway. BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 88

89 Design and Deployment Considerations: Cisco Spark Scalability/Capacity Planning» Unlimited users. Unlimited rooms» Maximum of 25 participants on voice/video call (paid) / 3 participants on voice/video call (free) High Availability» Cisco Collaboration Cloud services are generally redundant and highly available» Cisco Spark Hybrid Services: Clustered Expressway-C Connector Hosts ensure high availability» Dual mode devices fall-back to mobile voice/cellular network if IP connection is unavailable BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 89

90 Spark Call Handoff An active Spark call is maintained during client device network connection transitions» Between WLANs (enterprise or private/public)» Between WLAN and mobile data (or vice versa) There may be perceptible temporary breaks in the audio/video stream during this network transition, however the call remains active. Mobile Data Network (Carrier) Cisco Collaboration Cloud Internet HANDOFF Public / Private WLAN Enterprise WLAN BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 90

91 Cisco Spark: WLAN Design and Deployment Considerations Wireless LAN control and impact on user experience, requirement for wireless site survey, importance of RF design and call capacity, Apple ios optimizations, and AVC considerations all apply to Cisco Spark (just as with Cisco Jabber). BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 91

92 Wireless QoS: Application Visibility and Control (AVC) and QoS Marking (cont.) Application Visibility and Control (AVC) is a built-in network-based application recognition (NBAR) feature available on Cisco APs and WLAN controllers WLC firmware contains 100s of application 1. Create AVC profile: signatures for identification of application traffic types including cisco-spark, cisco-spark-audio *, and cisco-spark-video* Signaling flows (re)marked CS3 (24) Voice flows (re)marked EF (46) 2. Enable AVC and apply profile to WLAN: * Requires NBAR2 protocol pack version 24 or higher AireOS BRKUCC-2060 Video flows (re)marked AF41 (34) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 92

93 Cisco Enterprise Mobile Collaboration Solutions Summary

94 Cisco Enterprise Mobile Collaboration Anytime, Anywhere Collaboration! 8:30 AM 11 AM 1:15 PM 7 AM 3 PM 9 PM 7 PM 5:30 PM 4 PM BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 94

95 Cisco Enterprise Mobile Collaboration Application Feature Matrix (1 of 2) For Your Reference Feature Single Number Reach (via Unified Mobility) Cisco Jabber for Android and Apple ios (Smartphone only) Cisco Spark for Android and Apple ios, (Hybrid Services: Call Service Connect) Cisco WebEx Mobile Cisco AnyConnect Voice / Video over WLAN/Mobile Data Hand-out (WLAN to Cellular) (smartphone only) Hand-in (Cellular to WLAN) (Manual) X (Automatic) Single Sign-On File share Instant Messaging / Chat Apple Push Notification Service (APNS) (ios only) Supported X Not Supported Support Not Applicable BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 95

96 Cisco Enterprise Mobile Collaboration Application Feature Matrix (2 of 2) For Your Reference Dial via Office Feature Cisco Jabber for Android and Apple ios (Dual-mode only) Cisco Spark for Android and Apple ios Cisco WebEx Mobile Cisco AnyConnect Presence * Visual Voic X Corporate Directory/Contact Access Enterprise Secure Remote Attachment Hybrid Services: Call Service Connect WebEx Meetings Supported X Not Supported Support Not Applicable BRKUCC-2060 * Read receipts, responding indication, last active and out of office indications 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 96

97 Cisco Enterprise Mobile Collaboration Additional Resources (1 of 3) For additional information on Cisco Mobile Collaboration solutions consult the following resources: Cisco Unified Mobility: Features Configuration Guide for Cisco Unified CM (Cisco Unified Mobility chapter) Cisco Jabber: Product documentation» Jabber for ipad and iphone: Jabber for Android: Deploying OAuth with Cisco Collaboration Solution Release 12.0 white paper: Cisco Expressway: Product/solution documentation For Your Reference BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 97

98 Cisco Enterprise Mobile Collaboration Additional Resources (2 of 3) For additional information on Cisco Mobile Collaboration solutions consult the following resources (cont.): For Your Reference Cisco Spark: Product documentation Cisco Collaboration Help: Preferred Architecture for Cisco Spark Hybrid Services CVD: Mobile and Remote Access via Cisco Expressway Deployment Guide: Cisco AnyConnect Secure Mobile Client: Product documentation WebEx Meetings mobile client: Product documentation BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 98

99 Cisco Enterprise Mobile Collaboration Additional Resources (3 of 3) For additional information on Cisco Mobile Collaboration solutions consult the following resources (cont.): Solution Design Guides: For Your Reference» Cisco Collaboration Systems SRND: Mobile Collaboration chapter Real-time Traffic over Wireless LAN (RToWLAN) SRND: Cisco Validated Design:» Cisco Unified Access (UA) and Bring Your Own Device (BYOD) CVD Guide.html BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 99

100 Design and Deployment Best Practices for Cisco Collaboration What you would tell your best friend, if they asked you how to design their Cisco collaboration deployment? Preferred Architectures (PA) Prescriptive design and deployment best practices within a well-defined architecture containing common Cisco collaboration portfolio components Three preferred architectures (PAs) covering a wide range of customer deployment types and sizes:» On-Premises (Enterprise, Midmarket)» Cloud (Midmarket)» Hybrid (Enterprise) Collaboration Solution Reference Network Design (SRND) Design guidance across the Cisco collaboration portfolio with a focus on enterprise, on-premises deployments Versions aligning with major Collaboration System Releases (CSRs): 9.x, 10.x, 11.x, and 12.x* * Coming soon. Target Q1 CY Cisco and/or its affiliates. All rights reserved. Cisco Public

101 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#brkucc Cisco and/or its affiliates. All rights reserved. Cisco Public

102 Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online Cisco and/or its affiliates. All rights reserved. Cisco Public

103 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Lunch & Learn Meet the Engineer 1:1 meetings» Walk-in MTE with Matt Jordy Today (31 st Jan.) 11:30 13:30 Related sessions BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 103

104 Thank you

105

106 Appendix Thank you

107 Dial via Office: Cisco Jabber for Android and iphone The Dial via Office (DVO) feature enables Cisco mobile client running on dual-mode devices to automatically dial an outgoing call through the enterprise All voice media traverses the mobile voice network and PSTN All voice signaling (SIP) traverses the IP connection ( WLAN or mobile data) between the client and Unified CM. DVO provides improved voice quality and reliability for workers on the move PROBLEM #1: IP path DOES NOT provide ample bandwidth/throughput to ensure good voice quality» SOLUTION: DVO moves audio to the mobile voice network/pstn ensuring high quality voice PROBLEM #2: IP path DOES NOT provide reliable connection to prevent call disconnects» SOLUTION: DVO audio traverses the mobile voice network/pstn ensuring audio is maintained even when IP connection is lost BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 107

108 Dial via Office: Cisco Jabber for Android and iphone The Dial via Office (DVO) feature enables Cisco mobile client running on dual-mode devices to automatically dial an outgoing call through the enterprise All voice media traverses the mobile voice network and PSTN All voice signaling (SIP) traverses the IP connection ( WLAN or mobile data) between the client and Unified CM. DVO provides improved voice quality and reliability for workers on the move. The Cisco Jabber DVO feature provides the following additional benefits:» Improved user experience: Automated enterprise dialing eliminates manual 2-stage dialing» Mobile phone number masking: System sends user s enterprise number as caller ID» Cost savings: International and in some cases long distance calls made at reduced cost.» Enterprise call anchoring: Enables desk phone pickup and DTMF-based mid-call features BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 108

109 Dial via Office Reverse (DVO-R) Cisco Jabber for Android/ iphone supports Dial via Office Reverse (DVO-R) DVO-R calls are set up by the Unified CM system calling the user's mobile number (configured as a Mobility Identity) Once the call is answered at the target number, Unified CM anchors the call in the enterprise gateway Mobile 4 Voice Network (Carrier) Mobile Data Network (Carrier) User selects contact or dials number Cisco Jabber client signals to Unified CM over the IP path (WLAN or mobile data) +1 (408) PSTN Public/ Private WiFi 1 Internet Call Media (Voice) 1 Call Signaling (SIP) 3 PSTN Gateway Enterprise WLAN 2 Cisco Expressway DMZ After the user answers at the mobile device, Unified CM extends a call to the number the user dialed. The user begins to hear ring-back. Cisco ASA Unified CM extends a call to the mobile number (Mobility Identity) of the Cisco Jabber client device. Cisco Unified CM Call signaling Voice media BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 109

110 DVO-R Using Alternate Callback Number Cisco Jabber for Android/ iphone supports Dial via Office Reverse (DVO-R) DVO-R calls are set up by the Unified CM system calling the user's mobile number (configured as a Mobility Identity) DVO-R calls may also be setup using a user-specified alternative callback number NOTE: DVO-R calls using an alternate callback number are not anchored Mobile Voice Network (Carrier) Mobile Data Network (Carrier) User selects contact or dials number Cisco Jabber client signals to Unified CM over the IP path (WLAN or mobile data) +1 (408) PSTN Public/ Private WiFi 1 Internet Call Media (Voice) 1 Call Signaling (SIP) 3 PSTN Gateway Enterprise WLAN 2 Cisco Expressway After the user answers at the mobile device, Unified CM extends a call to the number the user dialed. The user begins to hear ring-back. Cisco ASA Unified CM extends a call to the alternate number configured within the Cisco Jabber client. Cisco Unified CM Call signaling Voice media BRKUCC Cisco and/or its affiliates. All rights reserved. Cisco Public 110