BRKCOC-2399 Inside Cisco IT: Integrating Spark with existing large deployments

Inside Cisco IT: Integrating Spark with existing large deployments Jan Seynaeve, Sr. Collaborations Engineer Luke Clifford, Sr. Collaborations Engineer

Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot# 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

Luke Clifford 16 years at Cisco 10 years as a UC Design Engineer 3 years as a Windows System Admin 3 Years in the Global Technical Response Centre Jan Seynaeve 10 years in Cisco IT Engineering Field Implementation Core Voice and Collaboration Experience in Routing, switching Cisco Unified Call Manager Global Dial plan 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 5

Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

EMEAR Clusters High Level Unified Communications Manager Deployment APAC Clusters BGL UCCE BGL SYD UCCE SYD ASIA CCP HKG UCCE ALPHA AMS CCP LAB SME Middle East ACE AMS UCCE TP SJC SJC UCCE CCC AMER CCP RTP RTP UCCE AMER Clusters VCS-D 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 8

Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

What are Spark Hybrid Services Connect diverse on-premise assets to Cisco Spark in the cloud Uses Hybrid Service Connectors or Software Modules Provide a single, integrated experience Cisco Call Control MS Exchange/Calendaring Active Directory 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 12

Hybrid Services Overview Cisco Collaboration Cloud Directory Connector Call Connector Expressway Calendar Connector Directory Cisco UCM Exchange 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 13

Spark Hybrid Services Overview Directory Connector Calendar Connector Call Connector

Calendar Connector Runs on an Expressway-C Need to trust exchange certificate(s) Impersonation Account(s) to Pull information from Exchange Add @Spark to an Outlook meeting invite to automatically create a Cisco Spark room Add @WebEx to an Outlook meeting invite to automatically share the host s Cisco WebEx personal room and include meeting-join information in the invitation. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 18

Spark Hybrid Services Overview Directory Connector Calendar Connector Call Connector Call Service Aware Call Service Connect

Call Connector Call Service Aware Integrates with Cisco Unified Communications Manager Notify Spark when 2 users are in a call, so desktop share can be offered in the Spark client See on-premise and Spark call status Integrated Call History 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 21

Call Connector Call Service Aware Aware Call History Call Aware offers status information from UCM into Cisco Cloud Active / Away / DnD Desktop sharing will be available when 2 users are in a 1-to-1 call Unified Call History will make sure all devices / clients will present the same recent / missed calls 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 22

Call Connector Call Service Connect Requires Call Aware being deployed and configured Expressway-E & C for call signalling and media Spark Remote Destination (Spark RD) on UCM 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 23

Call Connector Call Service Connect Connect Call Service Connect leverages existing Unified Communications Manager Call control to the Spark Client In- and outbound External calls, on-premise to offpremise calls, Spark Remote Destination devices Expressway-E and Expressway-C for Call setup/media and firewall traversal 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 24

Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

Cisco IT Spark Hybrid Design & Implementation Directory Connector Calendar Connector Call Connector Service Aware Service Connect

Directory Connector (Windows) Scaling and redundancy Integrated with your AD setup, installs on Windows Domain Server (download installer from CCO) 2 servers for redundancy 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 31

Cisco IT Spark Hybrid Design & Implementation Directory Connector Calendar Connector Call Connector Service Aware Service Connect

Calendar Connector (Exchange) Scaling and redundancy Connector runs on Expressway cluster(s) 15,000 users per node uses a N-1 resiliency model for maximum user calculation single, 6-server cluster supports 75,000 users (using medium OVA) Fill up first server / cluster, then go to the next (more settings to fine tune are coming) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 36

Calendar Connector (Exchange) Scaling and redundancy Cisco (scale for up to 120,000 users): We have 3 clusters of 6 nodes, close to our exchange servers Fully resilient for 1 DC site to go down DR cluster is in place if 2 sites would go down Exchange Connection: we have 2 Impersonation accounts allowing password rotation without loss of service 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 37

Calendar Connector (Exchange) Prerequisites not covered here Install expressway cluster (with CA trusted certificates) http://www.cisco.com/c/en/us/support/unifiedcommunications/expressway-series/products-installation-guides-list.html Firewall configuration see deployment guides 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 38

Calendar Connector (Exchange) CSCH > Services > Hybrid Calendar > Exchange > Resources > Add Resource Enter hostname or IP After Next, click the link to go to the expressway Choose manual or automatic CA Certs addition Select Register After redirect to CSCH, allow registration 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 39

Calendar Connector (Exchange) Expressway > Maintenance > Security > Trusted CA certificate Obtain cert from Exchange Click Append CA certificate Select cert file Click Append 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 40

Calendar Connector (Exchange) Expressway > Applications > Hybrid Services > Calendar Service > Microsoft Exchange Configuration Obtain impersonation account from Exchange Fill in the fields as per your exchange setup Use Email Address for testing, any valid address will do 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 41

Cisco IT Spark Hybrid Design & Implementation Directory Connector Calendar Connector Call Connector Service Aware Service Connect

Call Connector Scaling and redundancy Also installed on Expressway cluster(s) Large OVA supports up to 10,000 users @Cisco 1:1 redundancy, so 6 node cluster for 30,000 users 1 Call Connector cluster can support multiple CUCM clusters For our 14 UCM clusters (prod + ucce) 2 x 6-servers (SJC and BGL Campus) 3 x 4-servers (AMER, APAC and EMEAR) 1 x 2-servers (RTP campus) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 44

Call Connector Scaling and redundancy Alpha and ACE groups have their own call connectors This can be accomplished with resource groups 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 45

Call Connector Service Aware CSCH > Services > Hybrid Call > Resources > Add resource Enter FQDN or IP After Next, click the link to go to the expressway Choose manual or automatic CA Certs addition Select Register After redirect to CSCH, allow registration 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 46

Call Connector Service Aware UCM > User Management > End User User config needs: Directory URI Telephone Number Mail ID Home Cluster Device Association(s) CTI Control 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 47

Call Connector Service Aware UCM > User Management > Application User Needed Roles: Standard AXL API Access Standard CTI Allow Control of all Devices Standard CTI Allow Control of Phones supporting Connected Xfer and conf Standard CTI Enabled Standard CTI Allow Control of Phones supporting Rollover Mode 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 48

Call Connector Service Aware Expressway > Applications > Hybrid Services > Call Service > Unified CM Servers Unified CM where AXL is running (and serviceability) Application user (see previous) Spark Remote Device Manual or Auto User Validation Check 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 49

Call Connector Service Connect Scaling and redundancy Expressway-E / C for call setup and media Only 1 SIP destination can be defined Calls from Spark to on-prem come over a dedicated expressway-e / C cluster Located in central datacentre in the US, where we have optimal peering with the various cloud providers (including Spark, webex, ) Calls from on-prem to Spark will be routed out via our existing regional B2B expressways 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 51

Expressways for call setup and media Prerequisites not covered here Install expressway cluster http://www.cisco.com/c/en/us/support/unifiedcommunications/expressway-series/products-installation-guides-list.html Firewall configuration see deployment guides Public DNS and SRV record setup (_sips_.tcp.sipmtls.example.com) CUCM URI call routing / ILS setup http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/11_0_1/sysconfig/ CUCM_BK_C733E983_00_cucm-system-configurationguide/CUCM_BK_C733E983_00_cucm-system-configuration-guidetransformed_chapter_01100100.html 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 53

Call Connector Service Connect CSCH > Settings DNS zone Traversal zone Follow the wizard to setup SIP URIs Endpoints will be reachable on: <user>@cisco.call.ciscospark.com <room>@cisco.room.ciscospark.com UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 54

Call Connector Service Connect CSCH > Services > Hybrid Call > Service: Edit Settings DNS zone Traversal zone UCM neighbor zone Add SIP destination of expressway-e 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 55

Call Connector Service Connect Expressway-E > Applications > Cloud Certificate Management DNS zone Trust CA certificates for the Spark Cloud On cloud certificate management page, click get certificates Verify under Maintenance > Security > Trusted CA certificates Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 56

Call Connector Service Connect Expressway-E > Configuration > Protocols > SIP DNS zone H.323 can be set to off Use 5062 for MTLS to avoid conflict w/ MRA on 5061 Mutual TLS mode = On : enable additional MTLS port and not enable MTLS on 5061 Port 5062 needs to be opened on firewall inbound to Expressway-E Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 57

Call Connector Service Connect Expressway-E > Configuration > Zones > Zones DNS zone DNS zone for Cisco Collaboration Cloud TLS must be enabled Domain set to callservice.ciscospark.com Force encryption for media Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 58

Call Connector Service Connect Expressway-E > Configuration > Zones > Zones DNS zone Traversal to expressway-c TLS must be enabled Force encryption for media Set matching SIP port (range 7XXX) Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59

Call Connector Service Connect Expressway-E > Configuration > Dial Plan > Search Rules DNS zone Inbound from Cisco Collaboration Cloud Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 60

Call Connector Service Connect Expressway-E > Configuration > Dial Plan > Search Rules DNS zone Outbound to Cisco Collaboration Cloud Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 61

Call Connector Service Connect Expressway-C > Configuration > Zones > Zones Traversal to expressway-e TLS must be enabled Force encryption for media Set matching SIP port (range 7XXX) SIP parameter preservation must be set to on Add Peers DNS zone Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 62

Call Connector Service Connect Expressway-C > Configuration > Zones > Zones 1/2 UCM Neighbor Zone For each cluster TLS can be used for encrypted trunks Peers (up to 6) must be servers in the cluster that have CallManager service running DNS zone Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 63

Call Connector Service Connect Expressway-C > Configuration > Zones > Zones 2/2 DNS zone UCM Neighbor Zone Profile Choose Custom SIP Parameter preservation must be set to On Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 64

Call Connector Service Connect Expressway-C > Configuration > Dial Plan > Search Rules Inbound from Cisco Collaboration Cloud (via Expressway-C) One rule per CUCM cluster Source = traversal zone Destination = CUCM neighbor zone Pattern must match the Cluster FQDN set in CUCM Enterprise parameters DNS zone Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 65

Call Connector Service Connect Expressway-C > Configuration > Dial Plan > Search Rules DNS zone Outbound to Cisco Collaboration Cloud: Done via regional expressway-e clusters (de-centralized) Can be done via this setup (centralized) Pattern string =.*@.*\.call\.ciscospark\.com.* (or suffix = ciscospark.com) Target = configured traversal zone Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 66

Call Connector Service Connect UCM > System > Enterprise Parameters DNS zone Add a Fully Qualified Domain name Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 67

Call Connector Service Connect UCM > Device > Device Settings > SIP Profile Copy Standard SIP Profile For Cisco VCS set Early Offer support for voice and video calls to Best Effort (no MTP inserted) DNS zone Traversal zone SIP Trunk Security Profile if you need TLS UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 68

Call Connector Service Connect UCM > Device > Trunk Create a new SIP Trunk Set Calling and Connected Party Info Format to Deliver URI and DN in connected party, if available Set destination IP to the servers in expressway cluster Set SIP Profile CSS, CMGroup, as per your installation DNS zone Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 69

Call Connector Service Connect UCM > Call Routing > SIP Route Pattern DNS zone Route *.ciscospark.com over the expressways other way towards internet e.g. regional / local PoP Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 70

Call Connector Service Connect UCM > Device > Phone DNS zone Add Spark Remote Destination Associated Id automatically added by Spark This is cached in Spark, need to wait (or restart service) Traversal zone UCM neighbor zone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 71

Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

User Enablement Automation New users get automatically provisioned with a basic Spark account via the AD connector estore will add a Calendar License automatically using Spark s management API (see https://developer.ciscospark.com/resource-people.html ) Currently, all users within Cisco are enabled for Calendar Service 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 75

User Enablement Automation Spark Call is activated for our Advanced Cisco Experience (ACE) and some groups within IT, which is around 12,000 people Next Step is an opt-in model, where users can go to estore and switch this feature on 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 76

Agenda Introduction Cisco IT s On-Premise Environment Spark Hybrid Services Overview Cisco IT Spark Hybrid Design & Implementation User Enablement Future

Cisco Cloud Edge & Backbone Regional Branch Offices Extranet Partners Mobile Workforce Cisco Cloud Optimised Backbone Expressway-C and Expressway-E Cisco Global Private Backbone 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

More Documentation Architecture Guide https://www.cisco.com/c/en/us/td/docs/solutions/pa/overview/12x/hybpa120.html Deployment Guides Directory and Hybrid Calendar https://www.cisco.com/c/en/us/support/unified-communications/spark/products-installationguides-list.html Deployment Guides Hybrid Call https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cloudcollaboration/spark/hybridser vices/callservices/cmgt_b_ciscospark-hybrid-call-service-config-guide.html 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 82

Continue Your Education Walk-in Self-Paced Labs Inside Cisco IT: Cisco on Cisco booth in World of Solutions Related sessions call routing: Enabling Seamless Collaboration with Advanced Session Routing Architectures and Cisco Spark [BRKUCC-3001] on cloud ready network: Inside Cisco IT: Digital Enterprise Network Architecture [BRKCOC-2493] 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 83

Come talk to our Cisco IT Experts! Cisco on Cisco will have 5 demo booths placed around the Cisco Campus showcasing how Cisco IT designs, deploys, and manages our own solutions. Through these IT success stories you ll see how Cisco solutions are driving transformational business benefits. World of Solutions Collaboration AppDynamics ACI & TA NSO vbranch Presentation ID 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 84

Q&A

Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at www.ciscolive.com/global/on-demand-library/. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

Thank you