BRKCOC-2399 Inside Cisco IT: Integrating Spark with existing large deployments

Transcription

1

2 Inside Cisco IT: Integrating Spark with existing large deployments Jan Seynaeve, Sr. Collaborations Engineer Luke Clifford, Sr. Collaborations Engineer

3 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot# 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

4 Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

5 Luke Clifford 16 years at Cisco 10 years as a UC Design Engineer 3 years as a Windows System Admin 3 Years in the Global Technical Response Centre Jan Seynaeve 10 years in Cisco IT Engineering Field Implementation Core Voice and Collaboration Experience in Routing, switching Cisco Unified Call Manager Global Dial plan 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 5

6 Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

7 UC Evolution Non IP IP Per site Centralized Dedicated Hardware Virtualized Hybrid Cloud PSTN Breakout (Centralized) SIP Breakout 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 7

8 EMEAR Clusters High Level Unified Communications Manager Deployment APAC Clusters BGL UCCE BGL SYD UCCE SYD ASIA CCP HKG UCCE ALPHA AMS CCP LAB SME Middle East ACE AMS UCCE TP SJC SJC UCCE CCC AMER CCP RTP RTP UCCE AMER Clusters VCS-D 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 8

9 UCM Clusters SME cluster Production UCM (Phone registration) SME (1 global cluster) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 9

10 Call Routing Overview 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 10

11 Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

12 What are Spark Hybrid Services Connect diverse on-premise assets to Cisco Spark in the cloud Uses Hybrid Service Connectors or Software Modules Provide a single, integrated experience Cisco Call Control MS Exchange/Calendaring Active Directory 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 12

13 Hybrid Services Overview Cisco Collaboration Cloud Directory Connector Call Connector Expressway Calendar Connector Directory Cisco UCM Exchange 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 13

14 Hybrid Services Overview 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 14

15 Spark Hybrid Services Overview Directory Connector Calendar Connector Call Connector

16 Directory Connector Runs on a Windows Domain Server Pulls users from AD (with filters) Then pushes them to Spark SSO 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 16

17 Spark Hybrid Services Overview Directory Connector Calendar Connector Call Connector

18 Calendar Connector Runs on an Expressway-C Need to trust exchange certificate(s) Impersonation Account(s) to Pull information from Exchange to an Outlook meeting invite to automatically create a Cisco Spark room to an Outlook meeting invite to automatically share the host s Cisco WebEx personal room and include meeting-join information in the invitation Cisco and/or its affiliates. All rights reserved. Cisco Public 18

19 Calendar Connector Out of Office synchronisation Press a single button to join/start upcoming meetings 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 19

20 Spark Hybrid Services Overview Directory Connector Calendar Connector Call Connector Call Service Aware Call Service Connect

21 Call Connector Call Service Aware Integrates with Cisco Unified Communications Manager Notify Spark when 2 users are in a call, so desktop share can be offered in the Spark client See on-premise and Spark call status Integrated Call History 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 21

22 Call Connector Call Service Aware Aware Call History Call Aware offers status information from UCM into Cisco Cloud Active / Away / DnD Desktop sharing will be available when 2 users are in a 1-to-1 call Unified Call History will make sure all devices / clients will present the same recent / missed calls 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 22

23 Call Connector Call Service Connect Requires Call Aware being deployed and configured Expressway-E & C for call signalling and media Spark Remote Destination (Spark RD) on UCM 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 23

24 Call Connector Call Service Connect Connect Call Service Connect leverages existing Unified Communications Manager Call control to the Spark Client In- and outbound External calls, on-premise to offpremise calls, Spark Remote Destination devices Expressway-E and Expressway-C for Call setup/media and firewall traversal 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 24

25 Route Header Destination 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 25

26 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 26

27 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 27

28 Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

29 Cisco IT Spark Hybrid Design & Implementation Directory Connector Calendar Connector Call Connector Service Aware Service Connect

30 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 30

31 Directory Connector (Windows) Scaling and redundancy Integrated with your AD setup, installs on Windows Domain Server (download installer from CCO) 2 servers for redundancy 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 31

32 Directory Connector (Windows) Windows Domain Server 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 32

33 Directory Connector (Windows) CSCH > Settings > Directory Synchronization 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 33

34 Cisco IT Spark Hybrid Design & Implementation Directory Connector Calendar Connector Call Connector Service Aware Service Connect

35 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35

36 Calendar Connector (Exchange) Scaling and redundancy Connector runs on Expressway cluster(s) 15,000 users per node uses a N-1 resiliency model for maximum user calculation single, 6-server cluster supports 75,000 users (using medium OVA) Fill up first server / cluster, then go to the next (more settings to fine tune are coming) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 36

37 Calendar Connector (Exchange) Scaling and redundancy Cisco (scale for up to 120,000 users): We have 3 clusters of 6 nodes, close to our exchange servers Fully resilient for 1 DC site to go down DR cluster is in place if 2 sites would go down Exchange Connection: we have 2 Impersonation accounts allowing password rotation without loss of service 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 37

38 Calendar Connector (Exchange) Prerequisites not covered here Install expressway cluster (with CA trusted certificates) Firewall configuration see deployment guides 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 38

39 Calendar Connector (Exchange) CSCH > Services > Hybrid Calendar > Exchange > Resources > Add Resource Enter hostname or IP After Next, click the link to go to the expressway Choose manual or automatic CA Certs addition Select Register After redirect to CSCH, allow registration 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 39

40 Calendar Connector (Exchange) Expressway > Maintenance > Security > Trusted CA certificate Obtain cert from Exchange Click Append CA certificate Select cert file Click Append 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 40

41 Calendar Connector (Exchange) Expressway > Applications > Hybrid Services > Calendar Service > Microsoft Exchange Configuration Obtain impersonation account from Exchange Fill in the fields as per your exchange setup Use Address for testing, any valid address will do 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 41

42 Cisco IT Spark Hybrid Design & Implementation Directory Connector Calendar Connector Call Connector Service Aware Service Connect

43 Call Connector Service Aware Components 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 43

44 Call Connector Scaling and redundancy Also installed on Expressway cluster(s) Large OVA supports up to 10,000 1:1 redundancy, so 6 node cluster for 30,000 users 1 Call Connector cluster can support multiple CUCM clusters For our 14 UCM clusters (prod + ucce) 2 x 6-servers (SJC and BGL Campus) 3 x 4-servers (AMER, APAC and EMEAR) 1 x 2-servers (RTP campus) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 44

45 Call Connector Scaling and redundancy Alpha and ACE groups have their own call connectors This can be accomplished with resource groups 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 45

46 Call Connector Service Aware CSCH > Services > Hybrid Call > Resources > Add resource Enter FQDN or IP After Next, click the link to go to the expressway Choose manual or automatic CA Certs addition Select Register After redirect to CSCH, allow registration 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 46

47 Call Connector Service Aware UCM > User Management > End User User config needs: Directory URI Telephone Number Mail ID Home Cluster Device Association(s) CTI Control 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 47

48 Call Connector Service Aware UCM > User Management > Application User Needed Roles: Standard AXL API Access Standard CTI Allow Control of all Devices Standard CTI Allow Control of Phones supporting Connected Xfer and conf Standard CTI Enabled Standard CTI Allow Control of Phones supporting Rollover Mode 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 48

49 Call Connector Service Aware Expressway > Applications > Hybrid Services > Call Service > Unified CM Servers Unified CM where AXL is running (and serviceability) Application user (see previous) Spark Remote Device Manual or Auto User Validation Check 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 49

50 Call Connector Service Connect Components 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50

51 Call Connector Service Connect Scaling and redundancy Expressway-E / C for call setup and media Only 1 SIP destination can be defined Calls from Spark to on-prem come over a dedicated expressway-e / C cluster Located in central datacentre in the US, where we have optimal peering with the various cloud providers (including Spark, webex, ) Calls from on-prem to Spark will be routed out via our existing regional B2B expressways 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 51

52 Spark Production UCM SME (1 global cluster) Call Connector Existing B2B setup (to Spark) Expressway-E / C (from Spark) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 52

53 Expressways for call setup and media Prerequisites not covered here Install expressway cluster Firewall configuration see deployment guides Public DNS and SRV record setup (_sips_.tcp.sipmtls.example.com) CUCM URI call routing / ILS setup CUCM_BK_C733E983_00_cucm-system-configurationguide/CUCM_BK_C733E983_00_cucm-system-configuration-guidetransformed_chapter_ html 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 53

54 Call Connector Service Connect CSCH > Settings DNS zone Traversal zone Follow the wizard to setup SIP URIs Endpoints will be reachable on: UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 54

55 Call Connector Service Connect CSCH > Services > Hybrid Call > Service: Edit Settings DNS zone Traversal zone UCM neighbor zone Add SIP destination of expressway-e 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 55

56 Call Connector Service Connect Expressway-E > Applications > Cloud Certificate Management DNS zone Trust CA certificates for the Spark Cloud On cloud certificate management page, click get certificates Verify under Maintenance > Security > Trusted CA certificates Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 56

57 Call Connector Service Connect Expressway-E > Configuration > Protocols > SIP DNS zone H.323 can be set to off Use 5062 for MTLS to avoid conflict w/ MRA on 5061 Mutual TLS mode = On : enable additional MTLS port and not enable MTLS on 5061 Port 5062 needs to be opened on firewall inbound to Expressway-E Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 57

58 Call Connector Service Connect Expressway-E > Configuration > Zones > Zones DNS zone DNS zone for Cisco Collaboration Cloud TLS must be enabled Domain set to callservice.ciscospark.com Force encryption for media Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 58

59 Call Connector Service Connect Expressway-E > Configuration > Zones > Zones DNS zone Traversal to expressway-c TLS must be enabled Force encryption for media Set matching SIP port (range 7XXX) Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59

60 Call Connector Service Connect Expressway-E > Configuration > Dial Plan > Search Rules DNS zone Inbound from Cisco Collaboration Cloud Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 60

61 Call Connector Service Connect Expressway-E > Configuration > Dial Plan > Search Rules DNS zone Outbound to Cisco Collaboration Cloud Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 61

62 Call Connector Service Connect Expressway-C > Configuration > Zones > Zones Traversal to expressway-e TLS must be enabled Force encryption for media Set matching SIP port (range 7XXX) SIP parameter preservation must be set to on Add Peers DNS zone Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 62

63 Call Connector Service Connect Expressway-C > Configuration > Zones > Zones 1/2 UCM Neighbor Zone For each cluster TLS can be used for encrypted trunks Peers (up to 6) must be servers in the cluster that have CallManager service running DNS zone Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 63

64 Call Connector Service Connect Expressway-C > Configuration > Zones > Zones 2/2 DNS zone UCM Neighbor Zone Profile Choose Custom SIP Parameter preservation must be set to On Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 64

65 Call Connector Service Connect Expressway-C > Configuration > Dial Plan > Search Rules Inbound from Cisco Collaboration Cloud (via Expressway-C) One rule per CUCM cluster Source = traversal zone Destination = CUCM neighbor zone Pattern must match the Cluster FQDN set in CUCM Enterprise parameters DNS zone Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 65

66 Call Connector Service Connect Expressway-C > Configuration > Dial Plan > Search Rules DNS zone Outbound to Cisco Collaboration Cloud: Done via regional expressway-e clusters (de-centralized) Can be done via this setup (centralized) Pattern string (or suffix = ciscospark.com) Target = configured traversal zone Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 66

67 Call Connector Service Connect UCM > System > Enterprise Parameters DNS zone Add a Fully Qualified Domain name Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 67

68 Call Connector Service Connect UCM > Device > Device Settings > SIP Profile Copy Standard SIP Profile For Cisco VCS set Early Offer support for voice and video calls to Best Effort (no MTP inserted) DNS zone Traversal zone SIP Trunk Security Profile if you need TLS UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 68

69 Call Connector Service Connect UCM > Device > Trunk Create a new SIP Trunk Set Calling and Connected Party Info Format to Deliver URI and DN in connected party, if available Set destination IP to the servers in expressway cluster Set SIP Profile CSS, CMGroup, as per your installation DNS zone Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 69

70 Call Connector Service Connect UCM > Call Routing > SIP Route Pattern DNS zone Route *.ciscospark.com over the expressways other way towards internet e.g. regional / local PoP Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 70

71 Call Connector Service Connect UCM > Device > Phone DNS zone Add Spark Remote Destination Associated Id automatically added by Spark This is cached in Spark, need to wait (or restart service) Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 71

72 Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

73 User Enablement Calendar Connector CSCH > Users 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 73

74 User Enablement Call Connector CSCH > Users 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 74

75 User Enablement Automation New users get automatically provisioned with a basic Spark account via the AD connector estore will add a Calendar License automatically using Spark s management API (see ) Currently, all users within Cisco are enabled for Calendar Service 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 75

76 User Enablement Automation Spark Call is activated for our Advanced Cisco Experience (ACE) and some groups within IT, which is around 12,000 people Next Step is an opt-in model, where users can go to estore and switch this feature on 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 76

77 Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

78 No Home Cluster Routing Leaf Leaf VCS-C Leaf SME Leaf Leaf 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 78

79 Home Cluster Routing As of UCM v12 Leaf Leaf VCS-C SME Leaf Leaf Leaf 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 79

80 Hybrid Media Node On-premises media processing 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 80

81 Cisco Cloud Edge & Backbone Regional Branch Offices Extranet Partners Mobile Workforce Cisco Cloud Optimised Backbone Expressway-C and Expressway-E Cisco Global Private Backbone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

82 More Documentation Architecture Guide Deployment Guides Directory and Hybrid Calendar Deployment Guides Hybrid Call vices/callservices/cmgt_b_ciscospark-hybrid-call-service-config-guide.html 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 82

83 Continue Your Education Walk-in Self-Paced Labs Inside Cisco IT: Cisco on Cisco booth in World of Solutions Related sessions call routing: Enabling Seamless Collaboration with Advanced Session Routing Architectures and Cisco Spark [BRKUCC-3001] on cloud ready network: Inside Cisco IT: Digital Enterprise Network Architecture [BRKCOC-2493] 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 83

84 Come talk to our Cisco IT Experts! Cisco on Cisco will have 5 demo booths placed around the Cisco Campus showcasing how Cisco IT designs, deploys, and manages our own solutions. Through these IT success stories you ll see how Cisco solutions are driving transformational business benefits. World of Solutions Collaboration AppDynamics ACI & TA NSO vbranch Presentation ID 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 84

85 Q&A

86 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot# 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

87 Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at Cisco and/or its affiliates. All rights reserved. Cisco Public

88 Thank you

89

90 Production UCM (Phone registration) SME (1 global cluster) Calendar Connector Call Connector Expressway-E / C 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 90