s 1 sdspfarm transcode sessions 128 sdspfarm tag 1 TRANS12345 Note the following: 1. These commands define the DSPs on the platform to be available for services such as conferencing and transcoding. 2. This command defines the IP address of CUBE. 3. This block of commands defines the controlling call agent for the DSP resources. Although the command language uses CUCM terminology, the controlling call agent can be CUCM, CUBE, or CME. Chapter 10: Deployment Scenarios 227 For CUBE to be the controlling call agent of the transcoding DSP resources, this IP address must match the IP address in (2). 5. This block of commands is the same regardless of whether CUCM, CME, or CUBE is the controlling call agent. These commands instruct the DSP resources to register with the call agent. 6. These commands define the codecs and the number of sessions the transcoding DSPs can service. These commands turn on local call agent control of transcoding. This configuration is the same for either CUBE or CME as the controlling call agent. 8. This IP address must match the IP address in (2). CUBE with Integrated Cisco IOS Firewall The Cisco IOS Zone-Based Firewall (ZBFW) has the capability (starting in 12.4[20T]) to inspect locally sourced traffic and router transit traffic. CUBE creates locally sourced traffic on the router as it is a back-to-back user agent (B2BUA) and terminates and re- originates the H.323 and SIP call streams routed by it. Example 10-10 shows a sample configuration of how the ZBFW inspection policies can be used with CUBE to provide a layered security approach where the firewall inspects the traffic first, before handing it off to the Layer 7 SIP User Agent (CUBE) application for additional security checks and call routing. Example 10-10 CUBE and Cisco IOS ZBFW Configuration voice service voip (1) address-hiding allow-connections sip to sip session transport tcp rel1xx disable header passing midcall - signaling passthru class-map type inspect match - - any SIP-inbound (2) match protocol sip class-map type inspect s