Step 1

From Cisco Unified Serviceability, choose Tools > Service Activation.

Step 2

From the Server drop-down list, select the publisher node and click Go.

Step 3

Under Database and Admin Services, confirm that the Cisco AXL Web Service is Activated.

Step 4

If the service is not activated, check the corresponding check box and click Save to activate the service.

Step 1

From Cisco Unified CM Administration, choose System > Region Information > Region.

Step 2

Perform any one of the following:

• Click Find and select the region to edit the bit rates within an existing region.
• Click Add New to create a new region.

Step 3

In the Modify Relationship to other Regions area, configure a new setting for the Maximum Session Bit Rate for Video Calls. For example, 6000 kbps.

Step 4

Configure any other fields in the Region Configuration window. For more information on the fields and their configuration options, see Online Help..

Step 5

Click Save.

Step 1

From Cisco Unified CM Administration, choose System > Device Pool.

Step 2

Do either of the following:

• Click Find and select the existing device pool to edit.
• Click Add New to create a new device pool.

Step 3

Enter a Device Pool Name.

Step 4

Select a redundant Cisco Unified Communications Manager Group.

Step 5

Assign the Date/Time Group that you set up. This group includes the Phone NTP references that you set up for Mobile and Remote Access endpoints.

Step 6

From the Region drop-down list, select the region that you configured for Mobile and Remote Access.

Step 7

Complete the remaining fields in the Device Pool Configuration window. For more information on the fields and their configuration options, see Online Help.

Step 8

Click Save.

Step 1

From Cisco Unified CM Administration:

• Choose System > Enterprise Phone to configure system defaults for ICE.
• Choose Device > Device Settings > Common Phone Profile to configure ICE for groups of endpoints and select the profile you want to edit.
• Choose Device > Phone to configure ICE for an individual Cisco Jabber desktop endpoint and select the endpoint that you want to edit.

Step 2

Scroll down to the Interactive Connectivity Establishment (ICE) section.

Step 3

Set the ICE drop-down list to Enabled.

Step 4

Set the Default Candidate Type:

• Host—A candidate obtained by selecting the IP address on the host device. This is the default.
• Server Reflexive—An IP address and port candidate obtained by sending a STUN request. In many cases, this may represent the public IP address of the NAT.
• Relayed—An IP address and port candidate obtained from a TURN server. The IP address and port are resident on the TURN server such that media is relayed through the TURN server.

Step 5

From the Server Reflexive Address drop-down list, select whether you want to enable STUN-like services by setting this field to Enabled or Disabled. You must set this field to enabled if you configured Server Relexive as the Default Candidate.

Step 6

Enter the IP address or hostname for the Primary and Secondary TURN Servers.

Step 7

Set the TURN Server Transport Type to Auto (default setting), UDP, TCP, or TLS.

Step 8

Enter the Username and Password of the TURN Server.

Step 9

Click Save.

Step 1

From Cisco Unified CM Administration, choose System > Security > Phone Security Profile.

Step 2

Click Add New.

Step 3

From the Phone Security Profile Type drop-down list, select your device type. For example, you could select Cisco Unified Client Service Framework for a Jabber application.

Step 4

Click Next.

Step 5

Enter a Name for the profile. For Mobile and Remote Access, the name must be in FQDN format and must include the enterprise domain.

Step 6

From the Device Security Mode drop-down list, select Encrypted.

Step 7

Set the Transport Type to TLS.

Step 8

Leave the TFTP Encrypted Config check box unchecked for the following phones as Mobile and Remote Access will not work for these phones with this option enabled: DX Series, IP Phone 7800, or IP Phone 8811, 8841, 8845, 8861 and 8865

Step 9

Complete the remaining fields in the Phone Security Profile Configuration window. For more information on the fields and their configuration options, see Online Help.

Step 10

Click Save.

Step 1

From Cisco Unified CM Administration, choose User Management > User Settings > User Profile.

Step 2

Click Add New.

Step 3

Enter a Name and Description for the user profile.

Step 4

Assign a Universal Device Template to apply to users' Desk Phones, Mobile and Desktop Devices, and Remote Destination/Device Profiles.

Step 5

Assign a Universal Line Template to apply to the phone lines for users in this user profile.

Step 6

If you want the users in this user profile to be able to use the self-provisioning feature to provision their own phones, do the following:

1. Check the Allow End User to Provision their own phones check box.

2. In the Limit Provisioning once End User has this many phones field, enter a maximum number of phones the user is allowed to provision. The maximum is 20.

3. Check the Allow Provisioning of a phone already assigned to a different End User check box to determine whether the user who is associated with this profile has the permission to migrate or reassign a device that is already owned by another user. By default, this check box is unchecked.

Step 7

If you want Cisco Jabber users who are associated with this user profile, to be able to use the Mobile and Remote Access feature, check the Enable Mobile and Remote Access check box.

Step 8

Assign the Jabber policies for this user profile. From the Desktop Client Policy, and Mobile Client Policy drop-down list, choose one of the following options:

• No Service—This policy disables access to all Cisco Jabber services.
• IM & Presence only—This policy enables only instant messaging and presence capabilities.
• IM & Presence, Voice and Video calls—This policy enables instant messaging, presence, voicemail, and conferencing capabilities for all users with audio or video devices. This is the default option.

Step 9

If you want the users in this user profile to set the maximum login time for Extension Mobility or Extension Mobility Cross Cluster through Cisco Unified Communications Self Care Portal, check the Allow End User to set their Extension Mobility maximum login time check box.

Step 10

Click Save.