topic Re: Cisco SSM and CUCM/ CUC in Collaboration Applications

Cisco SSM and CUCM/ CUC

Pragash22 — Thu, 10 Sep 2020 09:30:39 GMT

Hi All

It was mentioned in the documentation that, need to allow below rules between SSM and CUCM nodes

Prerequisites

These ports must be enabled for communication with CSSM:

User Interface: HTTPS (port 8443)
Product Registration: HTTPS (port 443), HTTP (port 80)
Communication to CSSM: HTTPS (tools.cisco.com, api.cisco.com, cloudsso.cisco.com), port 443

Ref link - https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/212883-cucm-smart-licensing-mediated-model.html

We have the SSM on Prem and I would like to know when enabling firewall rule between SSM and CUCM/CUC
1. Does that need to be Bi-Directional rule? If No, Just want to know who initiate the session, Is it always Call manager?
2. Lets say If I have multiple nodes (1 Pub and 4 Sub - all subs are located at separate locations with different subnets) - Does all these Subs need to have the same rules enabled?

Kind regards

Pragash

Re: Cisco SSM and CUCM/ CUC

Nithin Eluvathingal — Sat, 12 Sep 2020 08:39:04 GMT

1. Does that need to be Bi-Directional rule? If No, Just want to know who initiate the session, Is it always Call manager?

Since no direction mentioned in the guide, better to keep Bidirectional.
2. Lets say If I have multiple nodes (1 Pub and 4 Sub - all subs are located at separate locations with different subnets) - Does all these Subs need to have the same rules enabled?

only publisher need to be considered. Publisher the licensing Node.

Re: Cisco SSM and CUCM/ CUC

Vinod.s — Sat, 12 Sep 2020 07:42:30 GMT

Hello Pragash,

What you want to achieve?

You want to enable firewall port in between cucm and on prem ssm or in between On prem SSM and cloud SSM or in between cucm and cloud SSM ...

As per Document which you shared it will enable rule in between on prem ssm and cloud ssm and it should be bidirectional and first on prem ssm will initiate requst.

No need to create rule for cucm sub since pub will manage .

Re: Cisco SSM and CUCM/ CUC

Pragash22 — Fri, 02 Oct 2020 02:14:04 GMT

Hi Nithin
Thank you for your reply.

I generated this on Lab and checked the packet flow to see how it works.

Always the Publisher initiate the request though if you sync on-Prem Satallite with Cisco cloud.

Once you have synced with the On-Prem to Cisco cloud, on-prem SSM will not initiate a request to CCM and on-Prem SSM wait for the CCM to initiate the request.

Kind regards

Pragash