CCNP Collaboration cheat sheet
CCNP Collaboration · Keep the key ideas within reach.
Infrastructure and Design
A CUCM cluster uses a publisher for the database and subscribers for call processing; subscribers can continue call processing if the publisher is down after database replication completes.
A device pool assigns region, location, date/time group, SRST reference, network locale, and device mobility group to devices.
Regions select the codec used between sites; locations enforce call admission control bandwidth limits between sites.
DHCP option 150 supplies the TFTP server list to Cisco IP phones; option 66 can supply a TFTP server name.
SRST on a remote-site router provides fallback registration and call routing when WAN connectivity to the CUCM cluster is lost.
NTP synchronization is required across CUCM, IM&P, Unity Connection, Expressway, and gateways for certificates, logs, and replication.
Voice bearer traffic is marked DSCP EF (46); call signaling is commonly marked CS3 (24).
Cisco Collaboration sizing uses OVA templates to define vCPU, vRAM, disk, and supported user counts for each application node.
Protocols and Endpoints
SCCP phones register to CUCM over TCP port 2000; SIP uses UDP or TCP 5060 and TLS 5061 for signaling.
An IP phone boots by obtaining power, getting an IP address via DHCP, learning TFTP servers, downloading configuration and firmware, then registering with CUCM.
TFTP provides phone configuration files, firmware, CTL/ITL trust files, and certificate trust lists.
CAPF issues Locally Significant Certificates to endpoints; the MIC is a manufacturer-installed certificate.
DTMF methods include RFC 4733 RTP Named Telephone Events, SIP INFO, in-band tones, and SCCP out-of-band signaling.
RTP carries media, RTCP provides QoS statistics, and SRTP encrypts media payloads.
G.711 encodes at 64 kbps, G.722 is a wideband codec, and G.729 encodes at 8 kbps.
H.323 and MGCP gateways interwork CUCM with PSTN or legacy systems.
Endpoint registration uses keepalives and a prioritized CUCM server list for primary, secondary, and tertiary call control.
Call Control
CUCM digit analysis matches translation patterns and route patterns in partitions; route lists and route groups then select the outbound trunk or gateway.
Partitions contain directory numbers and patterns; calling search spaces provide an ordered list of partitions a device or line may access.
Translation patterns transform called or calling digits before routing; route patterns can also apply called and calling party transformations.
A route group distributes calls among gateways or trunks; a route list orders route groups for primary, secondary, and backup paths.
A hunt pilot points to a hunt list, which contains line groups; distribution algorithms include top-down, longest idle, and broadcast.
Time-of-day routing uses time periods, time schedules, and date/time groups assigned to partitions to permit or deny dial-plan matches.
Locations provide call admission control and can block calls when configured audio or video bandwidth limits are exceeded.
Shared lines allow multiple devices to use one DN; privacy disables barge, and barge requires a built-in bridge on the target device.
Call park stores a call on a park DN; the park recall timer returns the call to the parking party if it is not retrieved.
Collaboration Applications
Unity Connection integrates with CUCM through a SIP trunk or SCCP; the voicemail pilot and voicemail profile connect lines to voicemail.
Unity Connection supports LDAP user synchronization and SMTP/IMAP message access.
IM&P uses XMPP for instant messaging and presence, integrates with CUCM for availability, and can federate with external domains.
Cisco Jabber uses User Data Service over HTTPS for configuration discovery and supports MRA for off-network registration.
SAML 2.0 single sign-on uses an identity provider; CUCM, Unity Connection, and IM&P act as service providers.
UCCX provides IVR scripts, queueing, agent routing, and reporting for contact center deployments integrated with CUCM.
CUIC provides contact center reports, while CUCM CDR and CMR provide call detail and call management records.
LDAP synchronization imports users into CUCM applications; authentication can be handled by LDAP or by CUCM local credentials.
CUCM certificate types include tomcat for web services, callmanager for SCCP services, and cup or cup-xmpp for IM&P services.
Collaboration Edge and Services
Expressway-C is placed in the internal network and connects to CUCM, IM&P, Unity, and CUBE; Expressway-E is placed in the DMZ.
A traversal zone between Expressway-C and Expressway-E uses mutual TLS; TCP 7001 carries traversal signaling and a configured range carries media.
MRA discovery uses the DNS SRV record _collab-edge._tls; the Expressway-E certificate must include public edge FQDNs in its SANs.
MRA lets remote Jabber clients register through Expressway-E and Expressway-C to CUCM, IM&P, and Unity Connection.
Business-to-business calls use neighbor zones, DNS SRV discovery, or static routes; TLS and SRTP can secure signaling and media.
CUBE provides SIP demarcation, SDP normalization, transcoding, call admission control, and security between SIP domains.
CUBE can terminate TLS and SRTP toward a provider and interwork with an internal SIP or H.323 environment.
MRA firewall rules allow Jabber to Expressway-E on TCP 8443, 5222, and 5061; Expressway-E to Expressway-C uses TCP 7001.
Toll fraud prevention includes class of restriction, SIP inspection, trusted ACLs, and restricting outbound dial peers.
Protocols and Endpoints
SCCP uses TCP port 2000 to CUCM; SIP uses UDP or TCP 5060 and TLS 5061.
Phone boot order is power, DHCP, TFTP, configuration download, and CUCM registration.
TFTP serves firmware, configuration, CTL/ITL, and trust lists to endpoints.
CAPF issues LSC certificates; the MIC is burned into the phone.
DTMF methods are RFC 4733, SIP INFO, in-band, and SCCP out-of-band.
RTP carries media; RTCP reports statistics; SRTP encrypts media.
G.711 is 64 kbps, G.722 is wideband, and G.729 is 8 kbps.
Call Control
Partitions hold DNs and patterns; CSS is an ordered list of partitions.
Translation patterns transform digits before route pattern selection.
Route groups distribute calls; route lists order route groups.
Hunt pilot points to a hunt list; the hunt list contains line groups.
Time-of-day routing uses time periods, schedules, and date/time groups.
Locations enforce CAC bandwidth limits between sites.
Shared lines require privacy disabled for barge.
Collaboration Applications
Unity Connection integrates with CUCM via SIP trunk or SCCP.
The voicemail pilot and voicemail profile route lines to voicemail.
IM&P uses XMPP for presence and instant messaging.
Jabber uses UDS over HTTPS for configuration discovery.
SAML SSO uses an identity provider with CUCM as a service provider.
UCCX provides IVR, queueing, agent routing, and reporting.
Collaboration Edge and Services
Expressway-C is internal; Expressway-E is in the DMZ.
Traversal zones use mutual TLS and TCP 7001 for signaling.
MRA discovery uses _collab-edge._tls SRV records.
Expressway-E certificates must include edge FQDNs in SANs.
CUBE provides SIP demarcation, transcoding, and CAC.
MRA allows remote Jabber registration through Expressway.