Cisco Enterprise Mobile Collaboration

BRKUCC-2060 Cisco Enterprise Mobile Collaboration Matt Jordy, Technical Marketing Engineer

Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation BRKUCC-2060 Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#brkucc-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

Agenda Enterprise Mobile Collaboration Overview On-Premises Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Cloud and Hybrid Mobile Collaboration» Architecture» Features and Functions» Design and Deployment Considerations Enterprise Mobile Collaboration Conclusion

BRKUCC-2060: Cisco Enterprise Mobile Collaboration Session Overview This session describes how Cisco's enterprise and cloud collaboration mobility applications & services enable anytime, anywhere collaboration for mobile workers wherever they are located. This session focuses on:» On-premise mobile solutions and services for smartphones and tablets including Cisco Jabber» Cloud and hybrid mobile solutions and services for smartphones and tablets including Cisco Spark These solutions and services are delivered through the following types of integrations:» Fixed mobile convergence (FMC) with the Cisco Unified CM Unified Mobility feature set.» Fixed mobile substitution (FMS) with Cisco mobile applications & solutions for mobile devices. Cisco mobile applications and services provide a comprehensive set of features and capabilities for enterprise workers in motion, enabling collaboration and ensuring persistent reachability for these mobile users regardless of their location. BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 6

BRKUCC-2060: Cisco Enterprise Mobile Collaboration Session Logistics Attendees should have some familiarity with Cisco enterprise mobility solutions. Attendees should also have a good understanding of IP telephony and familiarity with Cisco Unified Communications Manager's features and functions. Appendix slides at the end. Session time: 120 minutes Please ask questions as we go Questions I'll answer Questions I'll defer to later in the session Please consult the latest applicable product documentation for specific feature, software version, and hardware version support requirements Questions I don't know the answer to, outside the scope of our session, or those that consume too much time Come see me after the session, send me an email, or Spark message (mjordy@cisco.com) with your question and I will get back to you. BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 7

Cisco Enterprise Mobile Collaboration Overview

Cisco Enterprise Mobile Collaboration Overview Cisco Mobile Collaboration solutions include: Cisco Unified Mobility» Fixed Mobile Convergence (FMC) Cisco Mobile Clients Mobile Devices» Fixed Mobile Substitution (FMS) Enables access to Cisco collaboration applications and services for mobile users: Inside and outside the enterprise Mobile Voice Network (Carrier) Mobile Data Network (Carrier) Cisco PSTN Public/ Private WLAN Internet Spark / WebEx WLAN (802.11) Cloud-based Collaboration Services PSTN Gateway DMZ Cisco ASA Cisco Expressway-E Cisco Unified CM Directory Cisco Unity Connection Cisco IM & P On-Premise Enterprise and Collaboration Applications Cisco Expressway-C Voice (cellular) Data/signaling /media BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 9

Cisco Enterprise Mobile Collaboration Anytime, Anywhere Collaboration! 8:30 AM 11 AM 1:15 PM 7 AM 3 PM 9 PM 7 PM 5:30 PM 4 PM BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 10

Cisco Enterprise Mobile Collaboration Fixed Mobile Convergence (FMC): Linking User s Enterprise Line to Mobile Device Mobile Voice Network (Carrier) PSTN What is fixed mobile convergence? Mobile Device Enterprise Line Integrating or linking a user's enterprise line with their mobile device BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 11

FMC with Cisco Unified Mobility Overview Cisco Unified Mobility PSTN Gateway WAN/ Internet Cisco Unified Mobility User Cisco Unified Communications Manager Cisco Unified Mobility links a user s enterprise phone (or enterprise directory number) to their mobile device Cisco Unified Mobility User PSTN Cisco Unified Mobility includes the following benefits:» Single enterprise number for all calls whether handled by enterprise desk phone or mobile phone» Enterprise dialing from mobile devices for toll reduction, mobile phone number masking, access to non-did enterprise extensions. Cisco Unified Mobility User» Features delivered on any mobile phone regardless of mobile platform or provider with no requirement for software on the device or a mobile data plan. BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 12

FMC with Cisco Unified Mobility Feature Overview Receiving Calls:» Single Number Reach (SNR)» Call Filtering» Mobile Voicemail Avoidance Making Calls:» 2-Stage Dialing Mobile Voice Access (MVA) IVR Enterprise Feature Access (EFA) non-ivr Other Features:» Move Active Call» Mid-Call Features Carrier Voicemail X Mobile Voice Network (Carrier) Unified Mobility User PSTN Gateway PSTN Cisco Unity Connection Cisco Unified CM Single Number Reach Mobile Voicemail Avoidance 2-Stage Dialing Move Call BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 13

Cisco Enterprise Mobile Collaboration Fixed Mobile Substitution (FMS): Enabling User's Enterprise Line on Mobile Device Mobile Voice Network (Carrier) PSTN What is fixed mobile substitution? Mobile Device Enterprise Line Enterprise Line Moving or enabling the enterprise line on the user's mobile device BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 14

Cisco Enterprise Mobile Collaboration Fixed Mobile Substitution (FMS): Enabling User's Enterprise Line on Mobile Device Mobile Data Network (Carrier) Mobile Voice Network (Carrier) PSTN Considerations: What is fixed mobile substitution? Software/application required on the mobile device. What device(s) do I need? WLAN or Mobile Data or both? Substitution: Do I need an enterprise device? WLAN (802.11) Mobile Device Enterprise Line Enterprise Line Moving or enabling the enterprise line on the user's mobile device BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 15

Overview Cisco mobile clients enable mobile users to leverage enterprise collaboration applications and services Cisco Unity Connection Cisco IM & P Voice & video calling Enterprise IM & presence, and file sharing services Enterprise voicemail, meetings, and directory services Enterprise secure remote attachment Enterprise WLAN Cisco Unified CM Cisco Expressway PSTN Gateway Cisco ASA BRKUCC-2060 Mobile Voice PSTN Cisco Mobile Clients WAN/ Internet Mobile Data Cisco Spark / WebEx Public/ Private Wi-Fi Moving/enabling the enterprise line on the mobile device (FMS) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public Enterprise WLAN 16

Cisco Jabber, Cisco Spark, and Other Mobile Clients Cisco Jabber Cisco Jabber for Android and ios provides SIP-based voice & video over IP calling, XMPP-based IM & presence, visual voicemail, file and screen sharing, secure remote enterprise attachment. Cisco WebEx Mobile Other Cisco Mobile Clients Please consult the latest applicable product documentation for specific feature, software version, and hardware version support requirements Cisco AnyConnect Cisco Spark for Android and ios provides 1-to-1 & 1-to-many cloud-based collaboration rooms enabling voice/video over IP calling, secure persistent messaging, file & screen sharing. Cisco Spark» Cisco WebEx Meeting Meetings client for Android, Apple ios, BlackBerry 10, Windows Phone 8 mobile devices» Cisco AnyConnect VPN client for Android & Apple ios mobile devices BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 17

Mobile Clients: Message, Meet, and Call for 1:1 to Team Collaboration WORKSTYLES & COLLABORATION TOOLS Cisco Collaboration Cloud Team Audio, Video, Web Structured Meetings Real-Time Share Content Conferencing Meetings Cisco Webex Persistent Conversations Small Team Collaboration Time Shifted Rapid Iteration Pervasive Team Collaboration Messaging / Calling Cisco Spark 1:1 Phones and IM Premise-based communication Real-Time Messaging and Calling Unified Communications BRKUCC-2060 Cisco Jabber 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 18

Cisco Spark and Collaboration Cloud Architecture Cisco Collaboration Cloud COMPUTE File / Data Storage Analytics / Reporting Billing / Provisioning Cisco Spark Cloud Infrastructure Internet Management Content Sharing Messaging Identity / SSO Calendar Calling Media / Transcode Cloud Services BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 19

Voice and Video over IP Calling with Unified CM or Collaboration Cloud Cisco Jabber mobile clients register to Unified CM: Mobile device = enterprise phone Signaling is SIP / Media is (S)RTP Cisco Spark mobile clients register to the Collaboration Cloud: Mobile device = cloud-based phone Signaling is HTTPS (REST) / Media is (S)RTP IP signaling/media over 802.11 WLAN (enterprise/public/private) OR mobile data network Mobile Client Device Mobile Client Device Audio: G.711, G722.1, G.729, Opus Mobile Voice Network (Carrier) Video: H.264 Mobile Data Network (Carrier) VVoIP Public/Private WiFi HTTPS Audio: Opus BRKUCC-2060 VVoIP Video: H.264 Internet PSTN Cisco Collaboration Cloud Enterprise WLAN Cisco Expressway 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public Cisco Unified CM SIP Signaling (SIP) VVoIP (RTP) Signaling (HTTPS REST) 20

Instant Messaging (IM) and Presence: On-Premises or Collaboration Cloud Cisco Jabber mobile clients enable instant messaging, presence, and file sharing services: XMPP-based flows with onpremise IM & P or cloud-based WebEx Messenger Cisco Spark mobile clients enable instant messaging and file sharing services: HTTPS (REST)-based Collaboration Cloud services Mobile Client Device Mobile Client Device XMPP and REST over 802.11 WLAN (enterprise/public/private) OR mobile data network Mobile Voice Network (Carrier) Mobile Data Network (Carrier) HTTPS Public/Private WiFi BRKUCC-2060 XMPP XMPP Internet PSTN Cisco Collaboration Cloud Enterprise WLAN Cisco Expressway WebEx Messenger (CLOUD) XMPP 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public Unified CM IM & Presence (ON-PREMISE) HTTPS (REST) 21

On-Premises Mobile Collaboration

Cisco Jabber Enterprise Architecture Overview Call Control Unified CM On-Premise Enterprise Collaboration Applications & Services Applications IM & P Unity Connection Directory Conferencing Cisco Meeting Server TelePresence Management Suite (TMS) Edge PSTN GW Expressway-C Expressway-E PSTN 802.11 WLAN Internet Mobile Voice Network (Carrier) Mobile Data Network (Carrier) Hybrid On-Premise Enterprise Collaboration Services / Cloud-based Collaboration Services Cloud Collaboration Services WebEx Messenger / Meeting / WebEx PMR Internet Mobile Data Network (Carrier) 802.11 WLAN BRKUCC-2060» Cisco call control, applications, and edge» WebEx IM & presence, and conferencing 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 24

Cisco Unified Mobility Configuration: Standard and Jabber Dual-Mode Standard Unified Mobility for SNR» Remote Destination Profile with Enterprise DN (shared line with enterprise device*)» 1 10 Remote Destinations Remote Destination Profile Virtual Phone DN: 12345 919 555-1212 Remote Destination #1 408 555-1212 Remote Destination #10 Maximum of 10 per user Jabber Dual-Mode + Unified Mobility for SNR» Client Device with Enterprise DN (shared line with enterprise device*) - No Remote Destination Profile» 1 Mobility Identity + up to 9 Remote Destinations Dual Mode for Android Dual Mode for iphone Client Device Type DN: 12345 No Remote Destination Profile 919 555-1212 Mobility Identity 408 555-1212 Remote Destination #9 Dual-mode only Maximum of 10 per user * If provisioned BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 26

Cisco Unified Mobility Configuration: Standard and Jabber Dual-Mode Standard Unified Mobility for SNR» Remote Destination Profile with Enterprise DN (shared line with enterprise device*)» 1 10 Remote Destinations Remote Destination Profile Mobility Identity What's so special? 919 555-1212 Virtual Phone Enables dual-mode handoff (moving call from WLAN Remote to Destination cellular) #1and Dial via Office (DVO) DN: 12345 Dual-ring avoidance: SNR engaged *ONLY* when client 408 555-1212 device is not registered to Unified CM Remote Destination #10 Maximum of 10 per user Jabber Dual-Mode + Unified Mobility for SNR» Client Device with Enterprise DN (shared line with enterprise device*) - No Remote Destination Profile» 1 Mobility Identity + up to 9 Remote Destinations Dual Mode for Android Dual Mode for iphone Client Device Type DN: 12345 No Remote Destination Profile 919 555-1212 Mobility Identity 408 555-1212 Remote Destination #9 Dual-mode only Maximum of 10 per user * If provisioned BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 27

Cisco Unified Mobility Integration: Dual Mode Dual-Ring Avoidance 1 st : VoIP 2 nd : SNR Incoming calls are NOT routed to Mobility Identity via SNR when client device is registered to Unified CM Incoming calls ARE routed to Mobility Identity via SNR when client device is not registered to Unified CM PSTN Mobile Voice Network (Carrier) Mobility Identity (Mobile Line) * NO Enterprise Registration * Call: 408 555-1234 PSTN Gateway Mobile Client WITHOUT Enterprise Registration Call: 51234 Cisco Unified CM Cisco Unified Mobility User Enterprise Number (408) 555-1234 Same Device Enterprise WLAN Enterprise Line * Enterprise Registration * Mobile Client WITH Enterprise Registration NOTE: Incoming calls directly to the mobile phone number will ring the mobile voice/ cellular interface even when the dual mode phone is BRKUCC-2060 registered to 2018 Unified Cisco and/or CM its affiliates. All rights reserved. Cisco Public 28

Enterprise Secure Remote Attachment Architecture: VPN Enterprise secure remote attachment enables secure remote connectivity to the enterprise for Cisco routers, endpoints, and clients. VPN with the Cisco ASA» VPN IOS router (e.g. Cisco Virtual Office)» Cisco AnyConnect VPN software client for mobile devices. Mobile Devices Public/Private WLAN (802.11) PSTN PSTN Gateway DMZ Cisco ASA Cisco Unified CM Cisco Unity Connection Cisco IM and Presence Mobile Data Network (Data Channel) Internet Cisco Expressway -E Cisco Expressway -C BRKUCC-2060 BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 29

Enterprise Secure Remote Attachment Architecture: VPN-less Collaboration Edge Enterprise secure remote attachment enables secure remote connectivity to the enterprise for Cisco routers, endpoints, and clients. VPN with the Cisco ASA» VPN IOS router (e.g. Cisco Virtual Office)» Cisco AnyConnect VPN software client for mobile devices. Collaboration Edge (VPN-less)» Cisco Expressway mobile and remote access Mobile Devices Mobile Data Network (Data Channel) Public/Private WLAN (802.11) PSTN Internet PSTN Gateway Cisco Expressway -E Cisco Unified CM Call signaling (SIP) IM & Presence DMZ (XMPP) Visual voicemail, directory (HTTPS) Cisco ASA Voice/video media (RTP / srtp) Cisco Expressway -C Expressway Collaboration flows Cisco Unity Connection Cisco IM and Presence BRKUCC-2060 All other traffic 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 30

Cisco Expressway: Firewall Traversal Basics Enterprise Network DMZ Public Network Unified CM Expressway-C Firewall Expressway-E Firewall Internet Signaling Media 1. Expressway-E is the traversal server installed in DMZ. Expressway-C is the traversal client installed inside the enterprise network. 2. Expressway-C initiates traversal connections outbound through the firewall to specific ports on Expressway-E with secure login credentials. 3. Once the connection has been established, Expressway-C sends keep-alive packets to Expressway-E to maintain the connection 4. When Expressway-E receives an incoming call, it issues an incoming call request to Expressway-C. 5. Expressway-C then routes the call to Unified CM to reach the called user or endpoint 6. The call is established and media traverses the firewall securely over an existing traversal connection BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 31

Cisco Jabber and Expressway Mobile and Remote Access: DNS SRV Queries Unified CM IM & P (imp.example.com) Enterprise Network DMZ Public Network Unified CM (ucm.example.com) Expressway-C Firewall Expressway-E Firewall (expressway.example.com) Internet Jabber inside the enterprise DNS Corporate DNS Split DNS V Jabber outside the enterprise DNS Public DNS _cisco-uds._tcp.example.com? = ucm.example.com _cisco-uds._tcp.example.com? = No resolution _cuplogin._tcp.example.com? = imp.example.com _cuplogin._tcp.example.com? = No resolution _collab-edge._tls.example.com? = No resolution _collab-edge._tls.example.com? = expressway.example.com BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 32

Cisco Jabber and Cisco AnyConnect VPN: DNS SRV Queries Unified CM IM & P (imp.example.com) Enterprise Network DMZ Public Network Unified CM (ucm.example.com) Expressway-C Firewall Expressway-E Firewall (expressway.example.com) Internet DNS Corporate DNS Adaptive Security Appliance (ASA) Same as on-premise DNS resolution _cisco-uds._tcp.example.com? _cuplogin._tcp.example.com? _collab-edge._tls.example.com? DNS Public DNS Jabber outside the enterprise with AnyConnect VPN = ucm.example.com = imp.example.com = No resolution BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 33

Cisco Expressway Mobile and Remote Access: Design Considerations (1 of 2) DNS Corporate DNS» Split DNS configuration is critical for successful deployments of Jabber over Expressway Certificates» Public CA signed certificate and public key infrastructure (PKI) required for Expressway deployments: Capacity Public CA signed certificates required for Expressway-E nodes. All other nodes (Expressway-C, Unified CM, IM & P) may use public CA or self-signed / enterprise-signed CA certificates.» Large Expressway OVA or CE appliance maximum capacities: Maximum of 10,000 proxy device registrations per Expressway cluster Maximum of 2,000 concurrent video calls or 4,000 voice calls per Expressway cluster DNS DNS Public DNS BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 34

Cisco Expressway Mobile and Remote Access: Design Considerations (2 of 2) High Availability» Like Unified CM, Expressway nodes are clustered for redundancy and scale. Expressway-C and E nodes must deployed in equal numbers and sizes Expressway nodes cluster in up to 4:2 (primary:backup) redundancy scheme Jabber Expressway connections including clients registrations are re-established via alternate node(s) given failure of an Expressway node CAUTION: All enterprise collaboration services are NOT highly available over MRA.» IM & P node failures: Jabber client will failover to active node for messaging and presence services» Unified CM and Unity Connection node failures: Jabber client will NOT failover to active node for voice/video and voice messaging services. BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35

Enterprise Secure Remote Attachment Architecture: Expressway or VPN? Supported workflows Licensing Media/data path Collaboration feature support Cisco AnyConnect VPN All workflows, full enterprise access not just collaboration Per session/connection VPN license + collaboration user/endpoint licensing All traffic traverses/hairpins at the Adaptive Security Appliance (ASA) / VPN head-end All collaboration features supported including active WLAN to cellular handoff, CAPF enrollment, LDAP directory services Cisco Expressway Mobile and Remote Access Collaboration work flows only: voice/video, IM and presence, visual voicemail, directory access No additional licensing beyond collaboration user/endpoint licensing» All collaboration traffic traverse/hairpins at the Expressway-C node(s). No point-to-point media.» All other traffic remains on the local network/internet Active call hand-out, CAPF enrollment, LDAP directory access NOT supported. Note: UDS is forced for directory/contact source over Expressway For Your Reference Other considerations Per user enablement for enterprise secure remote access.» No secure remote access device / user policy restrictions.» No session persistency calls/connections cleared when network path lost or changed. BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 36

Cisco Jabber Deployment: Service Discovery Flow - On-Premise, Full UC Mode 1 DNS SRV lookup: _cisco-uds._tcp This flow illustrates Jabber in Full UC mode IP address(es) for UDS 2 DNS Corporate DNS 3 Find home cluster and TFTP server address Download UC Services Profile and jabbber-config.xml 5 Address for home Unified CM TFTP 4 Unified CM UDS Unified CM IM & P 7 Unified CM User TFTP authentication* Unified CM Authz 6 Unity Connection 7 Connect and register to additional services (message, voicemail, etc.) * OAuth used for authentication / authorization against Unified CM Authz server BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 38

Cisco Jabber Deployment: Service Discovery Flow - On-Premise, Full UC Mode HTTP request to WebEx Download UC cloud (example.com) 2 User log-in to WebEx Cisco Services Profile and jabbber-config.xml 3 1 WebEx 5 IP address(es) for UDS 2 4 Hybrid: UC settings sent to client Hybrid: Client connects/ registers to on-premise services Address for home Unified CM TFTP Unified CM TFTP 4 1 DNS SRV lookup: _cisco-uds._tcp DNS Corporate DNS 3 Find home cluster and TFTP server address 4 Unified CM UDS Unified CM Authz Unity Connection 4 Connect and register to additional services (call control, voicemail, etc.) BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 39

Cisco Jabber Deployment: Administrator Tasks Provision Devices Administrators must enable, configure, and associate Jabber device types. Three Jabber device types: Cisco Dual Mode for Android Cisco Dual Mode for iphone Cisco Jabber for Tablet (ipad or Android) Configured like other endpoints in Unified CM Jabber specific configuration under product specific settings. Depending on version of Unified CM, COP file install may be required to enable device type. Refer to latest product release notes for requirements and download location Associate user to Jabber device BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 40

Cisco Jabber Deployment: Administrator Tasks Provision UC Services Administrators should prepare for service discovery configure UC services, assign to service profile(s), and associate profile(s) to user(s). END USER Configure and upload a jabber-config.xml file to Unified CM for service customization (user policies/options, directory integration, etc.). BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 41

Cisco Jabber Deployment: Administrator Tasks DNS SRV and Directory Integration Administrator should configure corporate DNS SRV records to ensure service discovery works properly. Unified CM / UDS e.g. _cisco-uds._tcp Administrator should select and configure Jabber contact source» Common Directory Integration (CDI)*» Unified CM User Data Services (UDS)**!! CAUTION Prior to Unified CM 11.5 / Jabber 11.5 UDS reduces Unified CM endpoint capacity. Each Jabber client leveraging UDS counts as two (2) endpoint registrations!!! _cisco-uds._tcp.example.com = ucm.example.com BRKUCC-2060 Common Directory Integration HTTPS/ REST (UDS) Corporate Directory User Data Services Unified CM UDS LDAP LDAP (AD, AD/LDS, OpenLDAP) LDAP Directory Sync LDAP * Default on-premise directory source for Jabber 11.8+ ** Expressway Mobile & Remote Access contact source 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 42

Cisco Jabber Deployment: Administrator Tasks DNS SRV and Directory Integration Administrator should configure corporate DNS SRV records to ensure service discovery works properly. Unified CM / UDS e.g. _cisco-uds._tcp» Unified CM 11.5 introduced LDAP proxy capabilities for UDS.» When UDS-to-LDAP Proxy is _cisco-uds._tcp.example.com = ucm.example.com Administrator enabled, should client select directory and queries configure Jabber UDS contact source are sent by UDS to LDAP.» Query results are received HTTPS/» Common by Directory UDS and Integration relayed back (CDI)* REST (UDS)» Unified CM to the User client Data Services (UDS)**» Enables client searches against corporate!! CAUTION directories with more than 160,000 users!! Prior to Unified CM 11.5 / Jabber 11.5 UDS reduces Unified CM endpoint capacity. Each Jabber client leveraging UDS counts as two (2) endpoint registrations! BRKUCC-2060 Common UDS-to-LDAP Directory Proxy Integration LDAP Corporate > 160K Users Unified CM UDS HTTPS/ REST (UDS) Directory User Data Services LDAP Unified CM UDS LDAP LDAP (AD, AD/LDS, OpenLDAP) LDAP Directory Sync LDAP * Default on-premise directory source for Jabber 11.8+ ** Expressway Mobile & Remote Access contact source 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 43

Cisco Jabber Deployment: Administrator Tasks DNS SRV and Directory Integration Administrator should configure corporate DNS SRV records to ensure service discovery works properly. e.g. _cisco-uds._tcp WebEx Messenger/WebEx cloud is the Jabber contact source with hybrid deployments Administrator should select and configure Jabber contact source» Common Directory Integration (CDI)* Unified CM / UDS» Unified CM User Data Services (UDS)**!! CAUTION Prior to Unified CM 11.5 / Jabber 11.5 UDS reduces Unified CM endpoint capacity. Each Jabber client leveraging UDS counts as two (2) endpoint registrations!!! _cisco-uds._tcp.example.com = ucm.example.com Cisco WebEx BRKUCC-2060 Common Directory Integration HTTPS/ REST (UDS) Corporate Directory User Data Services Unified CM UDS LDAP LDAP (AD, AD/LDS, OpenLDAP) LDAP Directory Sync LDAP * Default on-premise directory source for Jabber 11.8+ ** Expressway Mobile & Remote Access contact source 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 44

Cisco Jabber Deployment: User Tasks - Download and Install Download and install the Jabber client from appropriate public application store. Jabber for Android Available on Google Play Jabber for iphone and ipad Available on Apple App Store At first time launch:» Jabber prompts user for username@domain.» Jabber uses service discovery to connect and configure» Jabber prompts user for credentials If service discovery is not configured or fails, user can manually configure service(s) BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 45

Cisco Jabber OAuth Beginning with Jabber 11.9, Jabber is capable of leveraging OAuth for all authorization and authentication flows.» Previously OAuth was only enabled / engaged with Single Sign-On (SSO)» OAuth must be explicitly enabled on collaboration applications* OAuth 2.0 is a standard-based framework (RFC 6749) enabling applications to securely access a service or API on behalf of a user. OAuth 2.0 is implemented using authorization tokens which are issued by an Authorization Server. Unified CM acts as the Authorization Server and issues token which other applications (IM&P, Unity Connection, and Expressway) are able to validate. * Enabled by default on Expressway BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 46

Cisco Jabber OAuth Authorization Flow Enterprise Internet Refresh Tokens: Used to request a new OAuth token when existing token expires. Full authentication not required. Faster login / relogin for improved experience during network transition and when application is brought to the foreground 1 Authorization Server (Authz) 1 Unified CM 1A OAuth Token Jabber (on-premise / VPN) 2 OAuth Refresh Token Authentication method at Unified CM may be SSO, LDAP, or local 1A IM & P Unity Connection Expressway-C Expressway-E 2 OAuth Token OAuth Refresh Token Initial Authorization / Authentication Jabber (MRA) OAuth Token Issued Authorization with OAuth Access Token BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 47

Cisco Jabber OAuth Configuration and Requirements Unified CM, IM&P, and Unity Connection: OAuth with Refresh Login Flow set to Enable Unity Connection: Define Authz Server (Unified CM) Expressway-C: Authorize by OAuth token with refresh set to On (default) Version requirements: Unified CM / IM & P 12.0 (or 11.5.1SU3+) Unity Connection 12.0 Expressway X8.10 Jabber 11.9 For more information, refer to the Deploying OAuth with Cisco Collaboration Solution Release 12.0 white paper available at: https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/jabber/11_9/unified-cm-oauth-whitepaper-v17-final.pdf 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 49

Cisco Jabber for ios: Apple Push Notification Service (APNS) Apple Push Notifications are now supported with Cisco Jabber for ios enabling Unified CM, IM&P, and WebEx Messenger to notify the Jabber application of incoming calls and messages when the client is running in the background. Previously Jabber alerted user of incoming calls/messages by direct notification over IP (SIP, XMPP) from application services in order to bring the client to the foreground. IP connection maintained via periodic keep alive. With APNS, notification of incoming calls/messages are sent via HTTPS through the cloud-based Apple Push Notification service to bring the client to the foreground. This change is required due to plans by Apple to deprecate IP socket method used for SIP and XMPP keep alives. BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50

Apple Push Notification Service (APNS) Flow 1 Notification sent via HTTPs to Cisco Collaboration Cloud 2 Cisco Collaboration Cloud sends notification to APNS 3 APNS propagates notification to the ios device Unified CM IM & P Enterprise Expressway-C Jabber for ios (on-premise / VPN) 1 Expressway-E DMZ Jabber ios in Background Notifications via APNS Jabber for ios (MRA) Jabber ios in Foreground Notifications Direct (SIP, XMPP) Internet Cisco Collaboration Cloud Apple Push Notification Service BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 51 3 2

Apple Push Notification Service (APNS): Before and After BEFORE AFTER SIP / XMPP (keep alives) FOREGROUND BACKGROUND SIP / XMPP FOREGROUND BACKGROUND HTTPS Version requirements: Unified CM / IM & P 11.5(1) SU3+ Jabber 11.9 Expressway X8.10(1) Cisco Collaboration Cloud Apple Push Notification Service NOTE: APNS has NO impact on non-ios Jabber clients (Android, Windows, Mac) BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 52

Cisco Unified Mobility Integration: Multiple Mobile Client Devices When deploying multiple Cisco mobile clients for a single user: You must configure/ associate the Mobility Identity with the dual-mode client device Always configure/ associate any other Remote Destinations on the client device with the Mobility Identity. 919 555-1212 Mobility Identity 408 555-1212 Remote Destination #2 XXX XXX-XXXX Remote Destination N Maximum of 10 Mobility Identities / Remote Destinations per user Cisco Dual Mode for iphone/ Android No Remote Destination Profile Cisco Jabber for Tablet Shared Line IP Phone BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 53

Dial Plan: Call Routing - Originate and Terminate Jabber Device and Remote Destination Profile Calling Search Space (CSS) configuration settings» 2-stage (MVA/EFA)» DVO» Voice/video over IP Call Origination: CSS (device-level)» Determines call routing to target when Unified Mobility / Jabber user makes a call (in concatenation w./ line-level CSS) Mobile Voice Network (Carrier) PSTN PSTN Gateway Cisco Unified CM» SNR Call Termination: Rerouting CSS» DVO-R call leg» Determines call routing to mobile when Unified Mobility/ Jabber user receives a call Unified Mobility User Call Origination Call Termination BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 54

Dial Plan: Call Routing - Originate and Terminate Jabber Device and Remote Destination Profile Calling Search Space (CSS) configuration settings» 2-stage (MVA/EFA)» DVO» Voice/video over IP Call Origination: CSS (device-level)» Determines call routing to target when Unified Mobility / Jabber user makes a call (in concatenation w./ line-level CSS) Mobile Voice Network (Carrier) PSTN PSTN Gateway Dual-mode Cisco Unified CM» SNR Call Termination: Rerouting CSS» DVO-R call leg» Determines call routing to mobile when Unified Mobility/ Jabber user receives a call Unified Mobility User BRKUCC-2060 Unified Mobility Call Origination Call Termination 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 55

Design Considerations: Cisco Jabber Emergency Calling Calls for emergency services from mobile client devices should be routed via the mobile provider network whenever possible. Mobile provider networks typically provide more accurate location information than enterprise or public WLAN networks. Unified CM provides a mechanism for escaping or forcing of emergency calls from Jabber clients directly over the cellular voice network of the device. Dual Mode Client Device Configuration» Avoids enterprise call routing (VoIP or DVO)» Applies to Cisco Jabber for iphone and Android BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 56

Design and Deployment Considerations: Cisco Jabber Scalability/Capacity Planning» Maximum of 40,000 Mobility Identities + Remote Destinations per Unified CM cluster» Maximum of 40,000 registered/configured devices per Cisco Unified CM cluster» Maximum of 10,000 Cisco Expressway mobile and remote access proxy registrations, 2,000 concurrent video or 4,000 audio calls per Expressway-C/E cluster High Availability» Client registration/feature sets are highly available based on Unified CM clustering and device pool/cm group configuration» Dual mode devices fall-back to SRST or the mobile voice/cellular network when Unified CM is unavailable BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 57

Wireless Network Control and Quality User Experience The transport network is key to successful voice/video over WLAN deployments = Wired More CONTROL = higher quality collaboration experience.» Control over wired and wireless (RF) design: bandwidth/capacity, speed, QoS, features, etc. Less (or no) CONTROL beyond the enterprise boundary = potential poor quality But this does not mean we should not try!» Do what we can within the enterprise.» Overprovision / increase bandwidth. Enterprise WLAN (802.11) BRKUCC-2060» Non-deterministic media access.» No priority servicing.» No bandwidth guarantees SHARED CHANNEL Wireless Public/Private WiFi Hotspot (802.11) Internet Increasing Control = Increasing Quality Mobile Provider (4G/LTE/UTMS) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 58

802.11 Wireless Site Survey, RF Design, and Call Capacity Conduct 802.11 WLAN site survey to verify radio frequency design and identify / mitigate interference so that WLAN is optimized for voice/video traffic 802.11 WLAN RF (radio frequency) Design» Channel cell radius of -67 dbm (or less) RF Design target for Voice/Video over WLAN (minimize packet loss)» Same channel cell separation of 19 dbm (minimize co-channel interference)» Non-adjacent channel cell overlap of at least 20% (ensure seamless roaming between access points) Call Capacity (per 802.11 channel cell)» Maximum of 27 simultaneous voice calls* per 802.11a/g/n/ac channel cell» Maximum of 8 simultaneous voice/video** calls* per 802.11a/g/n/ac channel cell * Bi-directional streams ** Video resolution of 720p, video bit rate up to 1 Mbps -67 dbm -67 dbm 19 dbm -86 dbm 5GHz or no Bluetooth BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59

Wireless QoS: WMM + 802.11e and Network Access Wi-Fi Multimedia (WMM): Wi-Fi Alliance interoperability certification based on the 802.11e standard Provides wireless QoS by enabling layer 2 802.11e UP marking of wireless traffic Separates traffic into 4 differentiated service QoS access categories corresponding to 4 traffic queues» 4 traffic queues contend for access to the wireless channel» Each access category of traffic defines specific delay & random back-off characteristics for contention management 802.11e UP Marking Ensures high-priority traffic flows get more frequent access to the channel 7 6 5 4 3 0 2 1 Voice: EF Video: AF41 Signal: CS3 WMM Access Categories Voice (AC_VO) Video (AC_VI) Best Effort (AC_BE) Background (AC_BK) Voice/video benefit: WMM-capable endpoints receive higher priority throughput on the wireless channel for real-time traffic (AC_VO and AC_VI categories) ensuring high-quality voice & video BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 60

Wireless QoS: WLAN QoS Profile A platinum QoS profile should be configured on the Cisco WLC and applied to all WLANs that will carry voice/video traffic» Maximum Priority should be set to voice : This determines the highest allowed DSCP value for traffic on the WLAN (DSCP 46) [802.11e UP 6 / WMM Access Category AC_VO]» Unicast and Multicast Default Priority should be set to best effort : This is the default marking applied to all unmarked traffic on the WLAN (DSCP 0) [802.11e UP 0 / WMM Access Category AC_BE] AireOS BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 61

Optimized Fast lane Cisco and Apple ios Interop: Optimized Wi-Fi, Fastlane Application Prioritization Cisco wireless networks provide improved wireless operation for Apple ios devices When connected to Cisco wireless networks, Apple ios client devices receive optimized Wi-Fi connectivity» Optimized roaming with 802.11 standards 802.11r enables fast secure roaming without full reauthentication 802.11k network provides enhanced neighbor lists for determining best roaming candidate 802.11v BSS Transition messaging between client & network facilitate network assisted roaming» These standards are enabled on the WLAN by default and ios devices take advantage for optimized performance on the network ios client device critical business and real-time capable applications are prioritized on Cisco wireless networks with the Fast lane feature» Fast lane is enabled on Cisco wireless networks and a QoS profile is pushed to the ios client device» Fast lane QoS profiles are created using Meraki Systems Manager or Apple Configurator and contain whitelisted applications which can mark QoS for prioritization on the network Network and software requirements: Cisco AireOS 8.3+ WLC with 802.11ac, Cisco Aironet APs, ios 10+, Meraki Systems Manager (Enterprise Mobility Manager) or Apple Configurator BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 62

Optimized Wi-Fi Connectivity for Non-iOS Devices (Android, OSX, Windows) Most newer Android devices provide support for 802.11r (Fast Roaming) and 802.11k (Neighbor Lists) standards and some provide support for 802.11v (BSS Transition) standard, however support is not prevalent. Currently Apple Mac (OSX) devices do not support 802.11r, 802.11k, or 802.11v. Microsoft Windows 10 devices provide support for 802.11r, 802.11k, and 802.11v. These device operating systems should interoperate with SSIDs that have these standards enabled even if they do not support the standard. No need to create separate SSIDs for on your wireless network. Testing recommended to confirm device operation on your wireless network BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 63

Wireless QoS: Traffic Marking for Non-iOS Devices (Android, OSX, Windows) Android, OSX, and Windows devices are NOT able to leverage wireless Fastlane QoS, however In the case of Microsoft Windows, a QoS policy can be applied to workstations using Group Policy Objects (GPOs) and the GPO management console on a Windows domain server. The QoS policy can be used to enable traffic marking for wireless application traffic including Jabber client. Alternatively or in the case of non-windows devices, Application Visibility and Control (AVC) on the WLAN may be configured for network-based automatic application recognition and traffic marking including Jabber client. BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 64

Wireless QoS: Application Visibility and Control (AVC) and QoS Marking Application Visibility and Control (AVC) is a built-in network-based application recognition (NBAR) feature available on Cisco APs and WLAN controllers For each identified application flow, the network can drop, mark/remark, or permit (as marked) packets of specific traffic types Network identifies traffic type of each flow based on deep packet inspection Non-iOS Devices Packet WLAN (802.11) Wired LAN Wireless AP WLAN Controller Upstream / Downstream WLC treatment (drop/mark/permit) occurs on egress in both upstream and down stream directions. STOP DROP PERMIT Trash MARK Voice Video Bulk Data Best Effort BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 65

Wireless QoS: Application Visibility and Control (AVC) and QoS Marking (cont.) Application Visibility and Control (AVC) is a built-in network-based application recognition (NBAR) feature available on Cisco APs and WLAN controllers WLC firmware contains 100s of application 1. Create AVC profile: signatures for identification of application traffic types including Cisco Jabber Audio and Cisco Jabber Video. Voice flows (re)marked EF (46) 2. Enable AVC and apply profile to WLAN: AireOS Video flows (re)marked AF41 (34) Signaling flows (re)marked CS3 (24) BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 66

Cloud and Hybrid Mobile Collaboration

Cisco Spark Enterprise Architecture Overview On-Premise Enterprise Collaboration Applications & Services Call Control Applications Edge Unified CM Active Directory (LDAP) Exchange (Calendar) PSTN GW Expressway-C Expressway-E PSTN 802.11 WLAN Internet Mobile Voice Network (Carrier) Mobile Data Network (Carrier) Hybrid Services On-Premise Enterprise Collaboration Services / Cloud-based Collaboration Services Cloud Collaboration Services Spark Message / Meet / Call Internet BRKUCC-2060 Mobile Data Network (Carrier) 802.11 WLAN» Cisco call control, enterprise identity, enterprise calendar, secure edge.» Spark message/meet for team collaboration 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 69

Cisco Spark Hybrid Services Connectors on the host communicate with the cloud using HTTPS HTTPS Internet DMZ Enterprise Hybrid Service enterprise integration is facilitated by an on-premise Expressway-C Connector host Expressway E / C Expressway-C Connector Host Cisco Spark Hybrid Services enable integration of enterprise on-premise identity, calendar, and calling services with cloud-based collaboration services provided by the Cisco Collaboration Cloud. Expressway X8.7.1 or later BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 71

Cisco Spark Hybrid Services: Enterprise Directory Integration Cisco Spark Hybrid Services enables synchronization of the corporate directory with the Cisco Collaboration Cloud identity services. HTTPS Internet Expressway E / C User information (once synchronized from the enterprise directory via LDAP) is pushed from the Directory Connector via HTTPS to the cloud identity store of the enterprise s cloud services organization. DMZ Cisco Directory Connector is a service that is installed Enterprise with domain administrator rights on a Windows Domain server and uses a read-only account to import user contact information from the enterprise Microsoft Active Directory Cisco Directory Connector Microsoft APIs (.NET) Microsoft Active Directory BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 72

Cisco Spark Hybrid Services: Enterprise Directory Integration (cont.) Cisco Spark Hybrid Services enables synchronization of the corporate directory with the Cisco Collaboration Cloud identity services. Hybrid Services Directory Connector allows: HTTPS Internet Expressway E / C User information (once synchronized from the enterprise directory via LDAP) is pushed from the Directory Connector via HTTPS to the cloud identity store of the enterprise s cloud Spark users to search for contacts in their corporate directory. services organization. DMZ Cisco Directory Connector is a service that is installed Enterprise with domain administrator rights on a Windows Domain server and uses a read-only account to import user contact information from the enterprise Microsoft Active Directory Cisco Directory Connector Microsoft APIs Administrator to assign user roles, manage user capabilities, and entitle or activate imported enterprise users for specific cloud services. Microsoft Active Directory BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 73

Cisco Spark Hybrid Services: Enterprise Calendar Integration Cisco Spark Hybrid Services enable integration and synchronization of the enterprise calendar with the Cisco Collaboration Cloud calendar service. HTTPS Internet Internet Calendar Connector is a service that runs on the Expressway-C Connector Host and imports user meeting and calendar information from enterprise Microsoft Exchange Web Services using EWS (HTTPS) Also available for Google Calendar Expressway E / C DMZ Microsoft Exchange Calendar Connector pushes user meeting information via HTTPS to Enterprise the cloud calendar service for the enterprise s cloud organization. Expressway-C Connector Host Calendar Connector Common Connector Framework HTTPS (Exchange Web Services) Call Connector BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 74

Cisco Spark Hybrid Services: Enterprise Calendar Integration (cont.) Cisco Spark Hybrid Services enable integration and synchronization of the enterprise calendar with the Cisco Collaboration Cloud calendar service. HTTPS Internet Internet Calendar Connector is a service that runs on the Expressway-C Connector Host and imports user meeting and calendar information from enterprise Microsoft Also available for Google Calendar Expressway E / C Exchange Web Services using EWS (HTTPS) DMZ Calendar Connector pushes user meeting information via HTTPS to Enterprise the cloud calendar service for the enterprise s cloud organization. Expressway-C Connector Host Calendar Connector Common Connector Framework (Exchange Web Services) Call Connector Hybrid Services Calendar Connector enables collaboration before, during, and after a meeting: @spark Added to the meeting location field allows Spark users to automatically create HTTPS Spark collaboration space based on the title and attendees for a scheduled meeting. @webex Added to the meeting location field allows Spark Microsoft users to automatically add WebEx personal meeting room to the meeting invite and the Spark Exchange room BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 75

Cisco Spark Hybrid Services: Enterprise Calling Cisco Spark Hybrid Services enables integration of Unified CMbased enterprise calling with the Cisco Collaboration Cloud calling and media services. Media and signaling traverse the enterprise firewall using Expressway-E / C pairs DMZ HTTPS Internet Internet RTP media and SIP signaling are exchanged between Unified CM, the endpoints, and the Collaboration Cloud calling and media services. Expressway E / C RTP Call Connector (on the Expressway-C Connector Host) and communicates with Unified CM using AXL to validate and provision user and CTI to provide enterprise device monitoring/control to the cloud. Expressway-C Connector Host Calendar Connector Call Connector Common Connector Framework SIP AXL / CTI Unified CM BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 76

Cisco Spark Hybrid Services: Enterprise Calling (cont.) Cisco Spark Hybrid Services enables integration of Unified CMbased enterprise calling with the Cisco Collaboration Cloud calling and enterprise media services. call control (Unified CM) Media and signaling traverse the enterprise firewall using Expressway-E / C pairs DMZ HTTPS Internet Internet RTP media and SIP signaling are exchanged between Unified CM, the endpoints, and the Collaboration Cloud calling and media services. Expressway E / C RTP Call Connector (on the Expressway-C Connector Host) and communicates with Unified CM using AXL to validate and provision user and CTI to provide enterprise device monitoring/control to the cloud. Expressway-C Connector Host Calendar Connector Call Connector Hybrid Services Call Connector enables call integration between enterprise and Spark clients Common Connector Framework Call Service Aware Cisco Spark enables unified call history as well as one button to AXL / CTI share between Spark clients when Spark users make calls with their enterprise phone. Call Service Connect Enables Cisco Spark users to make and receive calls from SIP Unified CM BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 77

Cisco Spark Hybrid Calling Integration The Cisco Spark Hybrid Call Services integration leverages the Unified CM Unified Mobility framework. New device type: Spark Remote Device (RD)» Early deployments leverage device type: CTI Remote Device (RD) Functionality relies on Unified Mobility capabilities including:» Inbound caller ID matching» Automatic inbound call anchoring» Single number reach call routing Spark RDs are not counted against overall cluster Remote Destination / Mobility Identity count. BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 78

Cisco Spark Hybrid Services: Call Service Aware jane@example.org 4 Jane Screen share button Expressway-C Host Call Connector forwards the active call indication to the Collaboration Cloud via HTTPS Cisco Spark Hybrid Services Cisco Collaboration Cloud Internet 3 Unified CM signals via CTI to the Call Connector that there is an enterprise call between hybrid calling enabled users Expressway E / C Expressway-C Connector Host 2 Unified CM jane@example.org DN: 2001 1 Bob bob@example.org Cisco Spark brings to the foreground or creates a 1:1 space between the two users and displays the Screen Share button. Either user can click to share their screen Call Service Aware enables one button screen share Hybrid calling enabled users are on an active enterprise call between Unified CM registered endpoints DN: 1001 bob@example.org between Spark clients for users on an active BRKUCC-2060 enterprise 2018 Cisco and/or call its affiliates. All rights reserved. Cisco Public 79

Cisco Spark Hybrid Services: Call Service Connect and SNR Bob bob@example.org Cisco Collaboration Cloud Cisco Spark Hybrid Services Call Service Connect enables calling between cloud-based Spark clients and enterprise devices The call rings both Bob s desk phone and Spark client. He can answer at either device, however in this case he is out of the office and answers using Spark on his mobile. Internet Unified CM extends call to Bob s Spark RD (shared line) which engages SNR and forks call to Bob s Spark Hybrid Services URI 4 Spark Remote Device Expressway E / C User Jane selects contact or dials number for Bob (1001 / bob@example.org). Expressway-C Connector Host Unified CM DN: 1001 RD: bob@example.call.ciscospark.org 3 2 Shared Line jane@example.org DN: 2001 1 Unified CM receives call setup and extends call to Bob s enterprise phone DN: 1001 bob@example.org BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 80

Cloud and Hybrid Mobile Collaboration Cisco Spark Deployment: Provisioning Cisco Spark Control Hub: https://admin.ciscospark.com Onboarding Users» Add users to a managed/paid organization via the Cisco Spark Control Hub» Add users by creating a new space Provisioning/invite email sent to user Desktop BRKUCC-2060 Mobile 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 82

Cloud and Hybrid Mobile Collaboration Cisco Spark Deployment: End User 1. User acquires the Cisco Spark application: https://download.ciscospark.com» Desktop: Download and installer for Window and Mac» Mobile: Email with redirect link to appropriate application store (Android, ios)» Web: Open in browser (https://web.ciscospark.com/) 2. User logs in with email address BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 83

Cisco Spark Hybrid Services Deployment: Provisioning Cloud The organization administrator uses the Cisco Spark Control Hub (https://admin.ciscospark.com) to provision and manage Cisco Spark Hybrid Services and activate users for these services BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 84

Dial Plan: Cisco Spark Call Routing - Originate and Terminate Spark Remote Device / CTI Remote Device Calling Search Space (CSS) configuration settings» 2-stage (MVA/EFA)» DVO» Voice/video over IP» SNR Call Origination: CSS (device-level)» Determines call routing to target when Spark user makes a call (in concatenation w./ line-level CSS) Call Termination: Rerouting CSS» DVO-R call leg» Determines Single Number Reach call routing to Spark Mobile Voice Network (Carrier) PSTN Unified Mobility User BRKUCC-2060 PSTN Gateway Cisco Unified CM Spark RD / CTI RD Call Origination Call Termination 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 87

Design Considerations: Cisco Spark Emergency Calling Calls for emergency services from mobile client devices should be routed via the mobile provider network whenever possible. Mobile provider networks typically provide more accurate location information than enterprise or public WLAN networks. With Cisco Spark Hybrid Services Call Service Connect deployments, emergency calls from Cisco Spark client are routed using enterprise call control and PSTN gateway. BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 88

Design and Deployment Considerations: Cisco Spark Scalability/Capacity Planning» Unlimited users. Unlimited rooms» Maximum of 25 participants on voice/video call (paid) / 3 participants on voice/video call (free) High Availability» Cisco Collaboration Cloud services are generally redundant and highly available» Cisco Spark Hybrid Services: Clustered Expressway-C Connector Hosts ensure high availability» Dual mode devices fall-back to mobile voice/cellular network if IP connection is unavailable BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 89

Spark Call Handoff An active Spark call is maintained during client device network connection transitions» Between WLANs (enterprise or private/public)» Between WLAN and mobile data (or vice versa) There may be perceptible temporary breaks in the audio/video stream during this network transition, however the call remains active. Mobile Data Network (Carrier) Cisco Collaboration Cloud Internet HANDOFF Public / Private WLAN Enterprise WLAN BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 90

Cisco Spark: 802.11 WLAN Design and Deployment Considerations Wireless LAN control and impact on user experience, requirement for wireless site survey, importance of RF design and call capacity, Apple ios optimizations, and AVC considerations all apply to Cisco Spark (just as with Cisco Jabber). BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 91

Wireless QoS: Application Visibility and Control (AVC) and QoS Marking (cont.) Application Visibility and Control (AVC) is a built-in network-based application recognition (NBAR) feature available on Cisco APs and WLAN controllers WLC firmware contains 100s of application 1. Create AVC profile: signatures for identification of application traffic types including cisco-spark, cisco-spark-audio *, and cisco-spark-video* Signaling flows (re)marked CS3 (24) Voice flows (re)marked EF (46) 2. Enable AVC and apply profile to WLAN: * Requires NBAR2 protocol pack version 24 or higher AireOS BRKUCC-2060 Video flows (re)marked AF41 (34) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 92

Cisco Enterprise Mobile Collaboration Solutions Summary

Cisco Enterprise Mobile Collaboration Application Feature Matrix (1 of 2) For Your Reference Feature Single Number Reach (via Unified Mobility) Cisco Jabber for Android and Apple ios (Smartphone only) Cisco Spark for Android and Apple ios, (Hybrid Services: Call Service Connect) Cisco WebEx Mobile Cisco AnyConnect Voice / Video over WLAN/Mobile Data Hand-out (WLAN to Cellular) (smartphone only) Hand-in (Cellular to WLAN) (Manual) X (Automatic) Single Sign-On File share Instant Messaging / Chat Apple Push Notification Service (APNS) (ios only) Supported X Not Supported Support Not Applicable BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 95

Cisco Enterprise Mobile Collaboration Application Feature Matrix (2 of 2) For Your Reference Dial via Office Feature Cisco Jabber for Android and Apple ios (Dual-mode only) Cisco Spark for Android and Apple ios Cisco WebEx Mobile Cisco AnyConnect Presence * Visual Voicemail X Corporate Directory/Contact Access Enterprise Secure Remote Attachment Hybrid Services: Call Service Connect WebEx Meetings Supported X Not Supported Support Not Applicable BRKUCC-2060 * Read receipts, responding indication, last active and out of office indications 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 96

Cisco Enterprise Mobile Collaboration Additional Resources (1 of 3) For additional information on Cisco Mobile Collaboration solutions consult the following resources: Cisco Unified Mobility: Features Configuration Guide for Cisco Unified CM https://www.cisco.com/c/en/us/support/unified-communications/unified-communications-manager-callmanager/productsinstallation-and-configuration-guides-list.html (Cisco Unified Mobility chapter) Cisco Jabber: Product documentation» Jabber for ipad and iphone: https://www.cisco.com/c/en/us/support/customer-collaboration/jabber-iphoneipad/tsd-products-support-series-home.html» Jabber for Android: https://www.cisco.com/c/en/us/support/unified-communications/jabber-android/tsdproducts-support-series-home.html» Deploying OAuth with Cisco Collaboration Solution Release 12.0 white paper: https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/jabber/11_9/unified-cm-oauth-whitepaper-v17-final.pdf Cisco Expressway: Product/solution documentation https://www.cisco.com/c/en/us/support/unifiedcommunications/expressway-series/tsd-products-support-series-home.html For Your Reference BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 97

Cisco Enterprise Mobile Collaboration Additional Resources (2 of 3) For additional information on Cisco Mobile Collaboration solutions consult the following resources (cont.): For Your Reference Cisco Spark: Product documentation https://support.ciscospark.com Cisco Collaboration Help: https://collaborationhelp.cisco.com/ Preferred Architecture for Cisco Spark Hybrid Services CVD: https://www.cisco.com/c/en/us/td/docs/solutions/cvd/collaboration/hybrid/12x/hybcvd.html Mobile and Remote Access via Cisco Expressway Deployment Guide: https://www.cisco.com/c/en/us/support/unified-communications/expressway-series/products-installation-andconfiguration-guides-list.html Cisco AnyConnect Secure Mobile Client: Product documentation https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/tsd-products-support-series-home.html WebEx Meetings mobile client: Product documentation https://www.webex.com/products/web-conferencing/mobile.html BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 98

Cisco Enterprise Mobile Collaboration Additional Resources (3 of 3) For additional information on Cisco Mobile Collaboration solutions consult the following resources (cont.): Solution Design Guides: For Your Reference» Cisco Collaboration Systems SRND: Mobile Collaboration chapter https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/srnd/collab11/collab11/mobilapp.html» Real-time Traffic over Wireless LAN (RToWLAN) SRND: https://www.cisco.com/c/en/us/td/docs/solutions/enterprise/mobility/rtowlan/ccvp_bk_r7805f20_00_rtowlansrnd.html Cisco Validated Design:» Cisco Unified Access (UA) and Bring Your Own Device (BYOD) CVD https://www.cisco.com/c/en/us/td/docs/solutions/enterprise/borderless_networks/unified_access/byod_design_ Guide.html BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 99

Design and Deployment Best Practices for Cisco Collaboration What you would tell your best friend, if they asked you how to design their Cisco collaboration deployment? Preferred Architectures (PA) Prescriptive design and deployment best practices within a well-defined architecture containing common Cisco collaboration portfolio components https://www.cisco.com/go/pa Three preferred architectures (PAs) covering a wide range of customer deployment types and sizes:» On-Premises (Enterprise, Midmarket)» Cloud (Midmarket)» Hybrid (Enterprise) Collaboration Solution Reference Network Design (SRND) Design guidance across the Cisco collaboration portfolio with a focus on enterprise, on-premises deployments https://www.cisco.com/go/srnd Versions aligning with major Collaboration System Releases (CSRs): 9.x, 10.x, 11.x, and 12.x* * Coming soon. Target Q1 CY2018 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Lunch & Learn Meet the Engineer 1:1 meetings» Walk-in MTE with Matt Jordy Today (31 st Jan.) 11:30 13:30 Related sessions BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 103

Thank you

Appendix Thank you

Dial via Office: Cisco Jabber for Android and iphone The Dial via Office (DVO) feature enables Cisco mobile client running on dual-mode devices to automatically dial an outgoing call through the enterprise All voice media traverses the mobile voice network and PSTN All voice signaling (SIP) traverses the IP connection (802.11 WLAN or mobile data) between the client and Unified CM. DVO provides improved voice quality and reliability for workers on the move PROBLEM #1: IP path DOES NOT provide ample bandwidth/throughput to ensure good voice quality» SOLUTION: DVO moves audio to the mobile voice network/pstn ensuring high quality voice PROBLEM #2: IP path DOES NOT provide reliable connection to prevent call disconnects» SOLUTION: DVO audio traverses the mobile voice network/pstn ensuring audio is maintained even when IP connection is lost BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 107

Dial via Office: Cisco Jabber for Android and iphone The Dial via Office (DVO) feature enables Cisco mobile client running on dual-mode devices to automatically dial an outgoing call through the enterprise All voice media traverses the mobile voice network and PSTN All voice signaling (SIP) traverses the IP connection (802.11 WLAN or mobile data) between the client and Unified CM. DVO provides improved voice quality and reliability for workers on the move. The Cisco Jabber DVO feature provides the following additional benefits:» Improved user experience: Automated enterprise dialing eliminates manual 2-stage dialing» Mobile phone number masking: System sends user s enterprise number as caller ID» Cost savings: International and in some cases long distance calls made at reduced cost.» Enterprise call anchoring: Enables desk phone pickup and DTMF-based mid-call features BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 108

Dial via Office Reverse (DVO-R) Cisco Jabber for Android/ iphone supports Dial via Office Reverse (DVO-R) DVO-R calls are set up by the Unified CM system calling the user's mobile number (configured as a Mobility Identity) Once the call is answered at the target number, Unified CM anchors the call in the enterprise gateway Mobile 4 Voice Network (Carrier) Mobile Data Network (Carrier) User selects contact or dials number +1 408 555 7890. Cisco Jabber client signals to Unified CM over the IP path (WLAN or mobile data) +1 (408) 555-7890 PSTN Public/ Private WiFi 1 Internet Call Media (Voice) 1 Call Signaling (SIP) 3 PSTN Gateway Enterprise WLAN 2 Cisco Expressway DMZ After the user answers at the mobile device, Unified CM extends a call to the number the user dialed. The user begins to hear ring-back. Cisco ASA Unified CM extends a call to the mobile number (Mobility Identity) of the Cisco Jabber client device. Cisco Unified CM Call signaling Voice media BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 109

DVO-R Using Alternate Callback Number Cisco Jabber for Android/ iphone supports Dial via Office Reverse (DVO-R) DVO-R calls are set up by the Unified CM system calling the user's mobile number (configured as a Mobility Identity) DVO-R calls may also be setup using a user-specified alternative callback number NOTE: DVO-R calls using an alternate callback number are not anchored Mobile Voice Network (Carrier) Mobile Data Network (Carrier) User selects contact or dials number +1 408 555 7890. Cisco Jabber client signals to Unified CM over the IP path (WLAN or mobile data) +1 (408) 555-7890 PSTN Public/ Private WiFi 1 Internet Call Media (Voice) 1 Call Signaling (SIP) 3 PSTN Gateway Enterprise WLAN 2 Cisco Expressway After the user answers at the mobile device, Unified CM extends a call to the number the user dialed. The user begins to hear ring-back. Cisco ASA Unified CM extends a call to the alternate number configured within the Cisco Jabber client. Cisco Unified CM Call signaling Voice media BRKUCC-2060 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 110