Cisco Cube and Genesys CX - Setup TLS connection

[MiB]

Hi all,

I'm trying to configure a trunk between my Cisco CUBES(ISR4431) to Genesys Cloud for a new implementation

Has anybody made this challange ?

It works with SIP/RTP and SIP/SRTP but when i switch to SIP with TLS it fails.

TLS Handshake between Cube an Genesys is completed and cube sents a invite to Genesys but no response to this, TLS Connection will be closed from Genesys side. Otherwise, call from Genesys cloud, i can see TLS Handshake in pcap at my cube but i dont get data from there after tls is completed.

Unfortunately, the genesys colleagues have almost no information and access to the system as it is a cloud service.

(Their service partner looks like they don't have a clue either)

I run 17.06.03a on cube, TLS to CUCM works fine

may someone has implemented this successfully

Thanks

[Hermanus Janse van Vuuren]

no worries, thank you, thought it might need some special setup like MS teams. Will figure it out as I go a long, have had a connection to genesys on-prem edges so could be the same setup then just pointing to the cloud.

[alisha_rascon01]

Setting up a TLS (Transport Layer Security) connection between Cisco Cube and Genesys CX involves configuring both systems to use secure communication. Here's a general guide on how you can achieve this:

Cisco Cube TLS Configuration:

1. Generate Certificates:

- Obtain or generate X.509 certificates for the Cisco Cube. You may use a certificate authority (CA) to sign these certificates.

2. Upload Certificates to Cisco Cube:

- Upload the generated certificates (public and private key) to the Cisco Cube.

- Use the following commands on the Cisco Cube:

voice service voip
tls srtp
certificate <certificate_name> [password <password>]

3. Configure SIP TLS on Cisco Cube:

- Enable SIP TLS on the Cisco Cube using the following commands:

voice service voip
sip
bind control source-interface <interface_name>
tls bind source-interface <interface_name>

4. Define SIP Profile:

- Define a SIP profile that uses TLS. Example:

voice class sip-profiles 1

request ANY sip-header Via modify "<sip_profile_name>"

5. Apply SIP Profile:

- Apply the SIP profile to your voice service configuration:

voice service voip

sip

sip-profiles 1

[eljose_lol]

Hello MIB, Trying to set up TLS between CUBE and Genesys, could you please sharing the configuration that you used in CUBE ?