WEBVTT

00:00:00.000 --> 00:00:03.381 align:middle line:90%


00:00:03.381 --> 00:00:06.762 align:middle line:90%
[AUDIO LOGO]

00:00:06.762 --> 00:00:09.660 align:middle line:90%


00:00:09.660 --> 00:00:12.060 align:middle line:90%
Hello, and welcome to INE.

00:00:12.060 --> 00:00:15.420 align:middle line:84%
Today in this video, we will
start off with section 1.

00:00:15.420 --> 00:00:19.290 align:middle line:84%
In section 1, we would do
phone registration and IM&P.

00:00:19.290 --> 00:00:22.900 align:middle line:84%
So here is my first
task for section

00:00:22.900 --> 00:00:26.460 align:middle line:84%
1, which basically
talks about LDAP.

00:00:26.460 --> 00:00:30.330 align:middle line:84%
So here it says that we need
all LDAP users basically

00:00:30.330 --> 00:00:33.600 align:middle line:84%
need to be imported
into the HQ-CUCM.

00:00:33.600 --> 00:00:36.490 align:middle line:84%
Ensure the following
requirements are met.

00:00:36.490 --> 00:00:39.960 align:middle line:84%
The first requirement is
that configure HQ-CUCM LDAP

00:00:39.960 --> 00:00:43.440 align:middle line:84%
to import all LDAP users
from the LDAP server located

00:00:43.440 --> 00:00:46.710 align:middle line:90%
at 11.100.64.9.

00:00:46.710 --> 00:00:50.880 align:middle line:84%
Set the LDAP settings so
users primary extension

00:00:50.880 --> 00:00:55.350 align:middle line:84%
is automatically assigned
to the last four digits.

00:00:55.350 --> 00:00:59.490 align:middle line:84%
And the last four digits
should be their extension.

00:00:59.490 --> 00:01:01.980 align:middle line:84%
And even the access
group permissions

00:01:01.980 --> 00:01:03.880 align:middle line:84%
need to be assigned
automatically.

00:01:03.880 --> 00:01:07.560 align:middle line:84%
So when we actually look at
the users, under the users,

00:01:07.560 --> 00:01:09.420 align:middle line:84%
all the access group
permissions should

00:01:09.420 --> 00:01:11.700 align:middle line:90%
be assigned automatically.

00:01:11.700 --> 00:01:14.610 align:middle line:84%
The next requirement is we need
to create a default service

00:01:14.610 --> 00:01:18.810 align:middle line:84%
profile for each LDAP
users to associate the CTI

00:01:18.810 --> 00:01:23.760 align:middle line:84%
and your IM&P. All LDAP
users must authenticate

00:01:23.760 --> 00:01:25.950 align:middle line:90%
through the LDAP server.

00:01:25.950 --> 00:01:29.560 align:middle line:84%
And then you may use the
following LDAP directory

00:01:29.560 --> 00:01:30.060 align:middle line:90%
settings.

00:01:30.060 --> 00:01:32.475 align:middle line:84%
So they have given
some information to us

00:01:32.475 --> 00:01:35.100 align:middle line:84%
in the table, which says
the LDAP configuration

00:01:35.100 --> 00:01:36.420 align:middle line:90%
name should be INE.

00:01:36.420 --> 00:01:39.180 align:middle line:84%
The LDAP manager
distinguished name should

00:01:39.180 --> 00:01:41.190 align:middle line:90%
be administrator@ine.com.

00:01:41.190 --> 00:01:46.320 align:middle line:84%
The lab password is
going to be C1s0123!

00:01:46.320 --> 00:01:50.760 align:middle line:84%
And the LDAP user search base
is given to us by OU equals HQ,

00:01:50.760 --> 00:01:53.820 align:middle line:84%
DC equals ine,
and DC equals com.

00:01:53.820 --> 00:01:56.370 align:middle line:84%
Directory URI should
be based on the mail.

00:01:56.370 --> 00:01:58.020 align:middle line:84%
And the access
group permissions,

00:01:58.020 --> 00:02:00.720 align:middle line:84%
the what permissions need
to be assigned to the users

00:02:00.720 --> 00:02:04.530 align:middle line:84%
when we import the LDAP users,
should be the standard CCM end

00:02:04.530 --> 00:02:07.530 align:middle line:84%
user, the CTI enable,
and the standard CTI

00:02:07.530 --> 00:02:10.710 align:middle line:84%
allow control of phones
supporting connected Xfer

00:02:10.710 --> 00:02:11.910 align:middle line:90%
and conf.

00:02:11.910 --> 00:02:14.760 align:middle line:84%
The feature good-- group
template which should be used

00:02:14.760 --> 00:02:16.300 align:middle line:90%
should be the default one.

00:02:16.300 --> 00:02:20.190 align:middle line:84%
And the hostname or the IP
address of the LDAP server is

00:02:20.190 --> 00:02:24.600 align:middle line:84%
going to be
hq-internal-dns.ine.com.

00:02:24.600 --> 00:02:26.620 align:middle line:90%
So let's quickly go and do this.

00:02:26.620 --> 00:02:30.070 align:middle line:84%
So the first thing what we would
do is look at our topology.

00:02:30.070 --> 00:02:32.220 align:middle line:84%
If you look at our topology,
here's my topology,

00:02:32.220 --> 00:02:35.580 align:middle line:84%
all the devices are going to
be powered off by default.

00:02:35.580 --> 00:02:38.640 align:middle line:84%
You would have to
go to More Actions

00:02:38.640 --> 00:02:40.740 align:middle line:90%
and click on Start All Nodes.

00:02:40.740 --> 00:02:42.870 align:middle line:84%
Once you click on
Start All Nodes,

00:02:42.870 --> 00:02:45.990 align:middle line:84%
you would see that some
devices power on immediately.

00:02:45.990 --> 00:02:48.490 align:middle line:90%
Some may take time to power on.

00:02:48.490 --> 00:02:51.630 align:middle line:84%
So don't worry about that
because we have defined a delay

00:02:51.630 --> 00:02:54.870 align:middle line:84%
timer for them so that all
devices don't really come up

00:02:54.870 --> 00:02:57.370 align:middle line:90%
together and hog the CPU.

00:02:57.370 --> 00:02:59.760 align:middle line:84%
So some devices may take
30 seconds to power on.

00:02:59.760 --> 00:03:02.880 align:middle line:84%
Some devices may take
180 seconds to power on.

00:03:02.880 --> 00:03:06.200 align:middle line:84%
But you should still be able
to start with the first device.

00:03:06.200 --> 00:03:08.200 align:middle line:84%
By the time you are working
on the first device,

00:03:08.200 --> 00:03:10.158 align:middle line:84%
the second device would
power on automatically.

00:03:10.158 --> 00:03:13.830 align:middle line:84%
But just go to More Actions
and click on Start All Nodes.

00:03:13.830 --> 00:03:15.690 align:middle line:84%
This should start
all your devices.

00:03:15.690 --> 00:03:18.390 align:middle line:84%
Now in the diagram, if you
look at the diagram here,

00:03:18.390 --> 00:03:20.040 align:middle line:90%
we have some information here.

00:03:20.040 --> 00:03:21.810 align:middle line:90%
We have information about--

00:03:21.810 --> 00:03:23.310 align:middle line:90%
there's one Jabber, one PC.

00:03:23.310 --> 00:03:25.290 align:middle line:90%
There's an internal DNS machine.

00:03:25.290 --> 00:03:31.200 align:middle line:84%
We have the HQ pub, and we
have an IM&P in the HQ site.

00:03:31.200 --> 00:03:33.630 align:middle line:84%
As far as site B is
concerned, we have an IM&P,

00:03:33.630 --> 00:03:35.940 align:middle line:84%
we have a pub there,
and we have Jabber2.

00:03:35.940 --> 00:03:38.070 align:middle line:84%
Now, as per the
question, we don't really

00:03:38.070 --> 00:03:40.030 align:middle line:84%
have a touch site B
at this point of time.

00:03:40.030 --> 00:03:44.100 align:middle line:84%
We're only working on site
1, which is the HQ site.

00:03:44.100 --> 00:03:46.890 align:middle line:84%
And the information
given to us is, also, we

00:03:46.890 --> 00:03:48.600 align:middle line:90%
have some access information.

00:03:48.600 --> 00:03:52.200 align:middle line:84%
The UCM-- the headquarters
publisher IP address is

00:03:52.200 --> 00:03:54.420 align:middle line:90%
11.100.64.11.

00:03:54.420 --> 00:03:58.500 align:middle line:84%
The IM&P's address
is 11.100.64.17.

00:03:58.500 --> 00:04:00.180 align:middle line:84%
Site B's information
is given to us,

00:04:00.180 --> 00:04:02.850 align:middle line:84%
and the username password
is administrator.

00:04:02.850 --> 00:04:06.450 align:middle line:90%
And the password is C1s0123!

00:04:06.450 --> 00:04:08.430 align:middle line:90%
where C is uppercase.

00:04:08.430 --> 00:04:13.230 align:middle line:84%
The access the UCM GUI
using Firefox on Jabber1.

00:04:13.230 --> 00:04:15.600 align:middle line:84%
This is all the information
given to us in the diagram.

00:04:15.600 --> 00:04:18.670 align:middle line:84%
And we have all the information
from the question requirements.

00:04:18.670 --> 00:04:20.635 align:middle line:84%
So let's quickly
go and build this.

00:04:20.635 --> 00:04:22.260 align:middle line:84%
So the first thing
what I'm going to do

00:04:22.260 --> 00:04:25.950 align:middle line:84%
is access my Jabber1 PC
because that's from where

00:04:25.950 --> 00:04:28.470 align:middle line:90%
I would access my UCM.

00:04:28.470 --> 00:04:30.330 align:middle line:90%
So I would go--

00:04:30.330 --> 00:04:31.470 align:middle line:90%
let's click on Allow.

00:04:31.470 --> 00:04:34.760 align:middle line:90%
Open up Firefox.

00:04:34.760 --> 00:04:38.090 align:middle line:84%
And in Firefox, you would
see that I have some tabs

00:04:38.090 --> 00:04:40.460 align:middle line:84%
here so that it's
really easy for you

00:04:40.460 --> 00:04:43.560 align:middle line:84%
to navigate to the
respective sites.

00:04:43.560 --> 00:04:47.660 align:middle line:84%
So under HQ, we would
go to the CUCM pub.

00:04:47.660 --> 00:04:50.960 align:middle line:84%
Let's go to the
CUCM pub and log in.

00:04:50.960 --> 00:04:54.770 align:middle line:84%
I believe it should
have powered on by now.

00:04:54.770 --> 00:04:55.460 align:middle line:90%
Let's log in.

00:04:55.460 --> 00:04:57.080 align:middle line:90%
The username is administrator.

00:04:57.080 --> 00:04:59.375 align:middle line:90%
Password it C1s0123!

00:04:59.375 --> 00:05:00.950 align:middle line:90%
where C is uppercase.

00:05:00.950 --> 00:05:06.980 align:middle line:84%
Let's just click on Login, and
I should be able to log in.

00:05:06.980 --> 00:05:12.560 align:middle line:84%
Let me see if I can increase
the font a bit, not too big

00:05:12.560 --> 00:05:14.300 align:middle line:84%
so that it doesn't
really go outside

00:05:14.300 --> 00:05:15.710 align:middle line:90%
of the window of the recording.

00:05:15.710 --> 00:05:18.742 align:middle line:84%
But I'll increase this font a
bit so that you can see better.

00:05:18.742 --> 00:05:20.450 align:middle line:84%
Now what I'm going to
do, the first thing

00:05:20.450 --> 00:05:24.530 align:middle line:84%
what I'm going to do is we need
to import from the LDAP server.

00:05:24.530 --> 00:05:27.170 align:middle line:84%
So before we import,
we need the permissions

00:05:27.170 --> 00:05:28.370 align:middle line:90%
to come automatically.

00:05:28.370 --> 00:05:31.350 align:middle line:84%
We need the service profile
to be assigned to him,

00:05:31.350 --> 00:05:36.860 align:middle line:84%
and we also need the extension
to be four-digit, not

00:05:36.860 --> 00:05:41.540 align:middle line:84%
the entire e164
telephone number.

00:05:41.540 --> 00:05:43.560 align:middle line:84%
We need it to be
just four digits.

00:05:43.560 --> 00:05:45.830 align:middle line:84%
For example, if I go
back to, let's say,

00:05:45.830 --> 00:05:49.560 align:middle line:84%
EVE-NG and go on my
Active Directory machine,

00:05:49.560 --> 00:05:52.010 align:middle line:90%
and let's click on--

00:05:52.010 --> 00:05:58.110 align:middle line:84%
let's close this and
click on the DNS here.

00:05:58.110 --> 00:05:59.870 align:middle line:90%
And if I actually go to--

00:05:59.870 --> 00:06:02.900 align:middle line:90%


00:06:02.900 --> 00:06:06.680 align:middle line:84%
let's go to my Forward
Lookup Zone, ine.com,

00:06:06.680 --> 00:06:09.500 align:middle line:84%
and I have all of the DNS
already preconfigured.

00:06:09.500 --> 00:06:12.050 align:middle line:84%
So I should be able to
resolve through the FQDN.

00:06:12.050 --> 00:06:14.900 align:middle line:90%


00:06:14.900 --> 00:06:18.583 align:middle line:84%
Now what I'm going to do is
if I look at any of the user,

00:06:18.583 --> 00:06:20.000 align:middle line:84%
let's go to Active
Directory also.

00:06:20.000 --> 00:06:22.640 align:middle line:84%
If I look at the users, you
would see that their telephone

00:06:22.640 --> 00:06:24.630 align:middle line:90%
number is an e164 number.

00:06:24.630 --> 00:06:26.270 align:middle line:90%
Let's go to HQ.

00:06:26.270 --> 00:06:28.910 align:middle line:84%
So I have three users here
already preconfigured.

00:06:28.910 --> 00:06:31.370 align:middle line:84%
Again, in the lab
exam, your LDAP server

00:06:31.370 --> 00:06:32.600 align:middle line:90%
is going to be preconfigured.

00:06:32.600 --> 00:06:33.980 align:middle line:84%
So you don't really
have to do much.

00:06:33.980 --> 00:06:35.563 align:middle line:84%
The only thing that
you may have to do

00:06:35.563 --> 00:06:37.790 align:middle line:84%
on the lab server
or the DNS server

00:06:37.790 --> 00:06:43.280 align:middle line:84%
is to add UDS records for your
IM&P, basically SRV records.

00:06:43.280 --> 00:06:46.190 align:middle line:84%
So but your users and everything
are going to be preconfigured.

00:06:46.190 --> 00:06:48.320 align:middle line:84%
So again here I have
three users which

00:06:48.320 --> 00:06:49.670 align:middle line:90%
are already preconfigured.

00:06:49.670 --> 00:06:51.180 align:middle line:84%
And if I look at
any one of them,

00:06:51.180 --> 00:06:52.763 align:middle line:84%
let's say if I double
click on HQ one,

00:06:52.763 --> 00:06:54.620 align:middle line:84%
the telephone number
is a e164 number.

00:06:54.620 --> 00:06:55.560 align:middle line:90%
We don't want that.

00:06:55.560 --> 00:06:57.290 align:middle line:84%
We want only the
last four digits

00:06:57.290 --> 00:07:00.270 align:middle line:90%
to be taken in as the extension.

00:07:00.270 --> 00:07:02.240 align:middle line:84%
So what we're going to
do is the first thing

00:07:02.240 --> 00:07:07.160 align:middle line:84%
what we would do is go
back to my Jabber1 PC

00:07:07.160 --> 00:07:10.010 align:middle line:84%
and go into User Management
and go to User Settings

00:07:10.010 --> 00:07:12.950 align:middle line:90%
and go to User Profile.

00:07:12.950 --> 00:07:15.110 align:middle line:84%
In the User Profile,
let's click on Find.

00:07:15.110 --> 00:07:17.640 align:middle line:84%
We will choose
the default fear--

00:07:17.640 --> 00:07:19.760 align:middle line:90%
the default user profile.

00:07:19.760 --> 00:07:21.290 align:middle line:90%
Click on that.

00:07:21.290 --> 00:07:24.990 align:middle line:84%
And here the desk phones would
be having the auto registration

00:07:24.990 --> 00:07:25.490 align:middle line:90%
template.

00:07:25.490 --> 00:07:27.350 align:middle line:84%
And the universal
line template is

00:07:27.350 --> 00:07:29.000 align:middle line:90%
going to be from the sample 1.

00:07:29.000 --> 00:07:32.040 align:middle line:90%
Let's click on Save.

00:07:32.040 --> 00:07:35.790 align:middle line:84%
Next thing what we do is go
to, again, User Management.

00:07:35.790 --> 00:07:37.680 align:middle line:90%
Go under User/Phone Add.

00:07:37.680 --> 00:07:39.930 align:middle line:84%
And here I will go to the
Feature Group Template.

00:07:39.930 --> 00:07:43.352 align:middle line:84%
If you remember as per
the question in the tab,

00:07:43.352 --> 00:07:45.810 align:middle line:84%
they had given that we should
use the default feature group

00:07:45.810 --> 00:07:46.480 align:middle line:90%
template.

00:07:46.480 --> 00:07:48.660 align:middle line:90%
So in the-- so click on Find.

00:07:48.660 --> 00:07:51.000 align:middle line:84%
And in the default
feature group template,

00:07:51.000 --> 00:07:52.750 align:middle line:84%
we would go and
make some changes.

00:07:52.750 --> 00:07:54.720 align:middle line:84%
First thing is we
want IM&P to be

00:07:54.720 --> 00:07:56.470 align:middle line:90%
enabled for them automatically.

00:07:56.470 --> 00:07:57.580 align:middle line:90%
So I would click on this.

00:07:57.580 --> 00:08:00.510 align:middle line:84%
So which means that as soon
as the users get imported,

00:08:00.510 --> 00:08:05.190 align:middle line:84%
your IM&P, which is instance
messaging and presence,

00:08:05.190 --> 00:08:08.590 align:middle line:84%
would automatically be enabled
with the service profile.

00:08:08.590 --> 00:08:10.535 align:middle line:90%
Let's go ahead and save this.

00:08:10.535 --> 00:08:15.700 align:middle line:84%
The next thing that I
would do is create some--

00:08:15.700 --> 00:08:17.950 align:middle line:90%
create my service profile.

00:08:17.950 --> 00:08:22.190 align:middle line:84%
Let's save this and go
back to User Management.

00:08:22.190 --> 00:08:25.860 align:middle line:84%
Under User Settings, we would
create some UC services first.

00:08:25.860 --> 00:08:27.260 align:middle line:90%
So we need two UC service.

00:08:27.260 --> 00:08:30.530 align:middle line:84%
One is going to be for
the IM&P, and one is going

00:08:30.530 --> 00:08:32.240 align:middle line:90%
to be for the call manager.

00:08:32.240 --> 00:08:35.169 align:middle line:90%
So let's click on Add.

00:08:35.169 --> 00:08:38.890 align:middle line:90%
Choose your IM&P and say Next.

00:08:38.890 --> 00:08:41.980 align:middle line:84%
The name is going to be-- this
could be anything, let's say,

00:08:41.980 --> 00:08:47.140 align:middle line:84%
IM-P. And the hostname
or the host IP address,

00:08:47.140 --> 00:08:49.870 align:middle line:84%
we could use an FQDN
because we have DNS server,

00:08:49.870 --> 00:08:52.090 align:middle line:84%
and we are able to resolve
through a DNS server.

00:08:52.090 --> 00:08:53.590 align:middle line:84%
We could use that
hidden, or if you

00:08:53.590 --> 00:08:56.815 align:middle line:84%
want to be safe in the lab exam,
you can give the IP address.

00:08:56.815 --> 00:09:02.120 align:middle line:84%
I will just use the
FQDN, so hq-imp.ine.com.

00:09:02.120 --> 00:09:05.080 align:middle line:84%
Again, if you're not
sure about the FQDN,

00:09:05.080 --> 00:09:10.930 align:middle line:84%
go back to your DNS machine in
your lab exam and verify what

00:09:10.930 --> 00:09:16.660 align:middle line:84%
the FQDN is for the IM&P. So
here we can see that hq-imp is

00:09:16.660 --> 00:09:18.520 align:middle line:90%
11.100.64.17.

00:09:18.520 --> 00:09:20.020 align:middle line:90%
So we do have a record there.

00:09:20.020 --> 00:09:22.720 align:middle line:84%
We do have an area code
there which resolves the IP

00:09:22.720 --> 00:09:24.550 align:middle line:90%
address and the host name.

00:09:24.550 --> 00:09:26.360 align:middle line:90%
Let's go back.

00:09:26.360 --> 00:09:28.350 align:middle line:90%
And let's save this.

00:09:28.350 --> 00:09:31.670 align:middle line:84%
Let's create one more
entry for your publisher.

00:09:31.670 --> 00:09:33.560 align:middle line:90%
That's going to be a CTI.

00:09:33.560 --> 00:09:35.000 align:middle line:90%
Let's go next.

00:09:35.000 --> 00:09:37.550 align:middle line:90%
And let's give this name as PUB.

00:09:37.550 --> 00:09:43.220 align:middle line:84%
And the host name, again, would
be an FQDN, hq-cucm.ine.com.

00:09:43.220 --> 00:09:45.000 align:middle line:90%
And let's save this.

00:09:45.000 --> 00:09:48.473 align:middle line:84%
So now I have my
UC service created.

00:09:48.473 --> 00:09:50.640 align:middle line:84%
The next thing would be to
create a service profile.

00:09:50.640 --> 00:09:52.910 align:middle line:84%
The UC service goes
inside a service profile,

00:09:52.910 --> 00:09:55.830 align:middle line:84%
and the service profile
gets assigned to the user.

00:09:55.830 --> 00:09:58.490 align:middle line:84%
So let's create one
service profile.

00:09:58.490 --> 00:10:01.550 align:middle line:84%
Go back to User Settings,
go to Service Profile.

00:10:01.550 --> 00:10:03.567 align:middle line:84%
And I don't have
any service profile.

00:10:03.567 --> 00:10:05.900 align:middle line:84%
Again, the question says that
the service profile should

00:10:05.900 --> 00:10:07.830 align:middle line:90%
be assigned automatically.

00:10:07.830 --> 00:10:09.320 align:middle line:90%
So let's click on Add New.

00:10:09.320 --> 00:10:10.400 align:middle line:90%
And let's give any name.

00:10:10.400 --> 00:10:11.850 align:middle line:90%
Let's say a service profile.

00:10:11.850 --> 00:10:15.170 align:middle line:84%
Make sure you select the
default, because if you don't

00:10:15.170 --> 00:10:18.260 align:middle line:84%
select this, then the
service profile is not

00:10:18.260 --> 00:10:20.210 align:middle line:84%
going to be
automatically assigned

00:10:20.210 --> 00:10:22.490 align:middle line:90%
as enabled for the user.

00:10:22.490 --> 00:10:24.470 align:middle line:84%
You would have to
manually go into the user

00:10:24.470 --> 00:10:27.768 align:middle line:84%
and enable that checkbox or
select the service profile.

00:10:27.768 --> 00:10:29.810 align:middle line:84%
So make sure you select
this as a default service

00:10:29.810 --> 00:10:31.040 align:middle line:90%
profile for the system.

00:10:31.040 --> 00:10:32.960 align:middle line:90%
Scroll down.

00:10:32.960 --> 00:10:36.590 align:middle line:90%
And for your instant--

00:10:36.590 --> 00:10:40.910 align:middle line:84%
for IM&P, we would
select the service,

00:10:40.910 --> 00:10:42.470 align:middle line:90%
the UC service that we created.

00:10:42.470 --> 00:10:44.630 align:middle line:84%
And the CTI profile
is going to be my pub,

00:10:44.630 --> 00:10:45.860 align:middle line:90%
the one that we created.

00:10:45.860 --> 00:10:48.380 align:middle line:90%
And click on Save.

00:10:48.380 --> 00:10:50.660 align:middle line:84%
Now once we've done
this, the next thing

00:10:50.660 --> 00:10:52.250 align:middle line:90%
is to define LDAP settings.

00:10:52.250 --> 00:10:55.580 align:middle line:90%
So go back to LDAP, LDAP system.

00:10:55.580 --> 00:10:57.710 align:middle line:84%
The first thing would be
to enable this checkbox.

00:10:57.710 --> 00:10:59.670 align:middle line:84%
We don't have to make
any changes here.

00:10:59.670 --> 00:11:01.700 align:middle line:90%
Let's save this.

00:11:01.700 --> 00:11:04.790 align:middle line:84%
Next thing we go and define the
LDAP directories for the search

00:11:04.790 --> 00:11:06.890 align:middle line:84%
criteria that which
users should be imported,

00:11:06.890 --> 00:11:09.065 align:middle line:84%
because you may
have multiple users

00:11:09.065 --> 00:11:10.190 align:middle line:90%
from different departments.

00:11:10.190 --> 00:11:11.840 align:middle line:84%
Let's say, if I
wanted only the HQ,

00:11:11.840 --> 00:11:15.110 align:middle line:84%
because if I look at
my LDAP or LDAP server,

00:11:15.110 --> 00:11:16.610 align:middle line:90%
I have site B users also.

00:11:16.610 --> 00:11:18.140 align:middle line:90%
I have HQ users also.

00:11:18.140 --> 00:11:21.110 align:middle line:84%
I don't want site B
users on the hq-cucm.

00:11:21.110 --> 00:11:23.840 align:middle line:84%
I only want to
import the HQ site.

00:11:23.840 --> 00:11:29.070 align:middle line:84%
So I would go back to LDAP
and define the LDAP directory.

00:11:29.070 --> 00:11:32.960 align:middle line:84%
And if you see there's nothing
here, let's click on Add New.

00:11:32.960 --> 00:11:35.600 align:middle line:84%
Now, as per the question,
the LDAP configuration name

00:11:35.600 --> 00:11:36.950 align:middle line:90%
was INE.

00:11:36.950 --> 00:11:40.100 align:middle line:90%
So let's click on INE.

00:11:40.100 --> 00:11:40.970 align:middle line:90%
Let's type INE.

00:11:40.970 --> 00:11:42.740 align:middle line:84%
And the LDAP manager
distinguished

00:11:42.740 --> 00:11:45.890 align:middle line:90%
name was administrator@ine.com.

00:11:45.890 --> 00:11:50.450 align:middle line:90%
The password was C1s0123!

00:11:50.450 --> 00:11:53.450 align:middle line:90%
C1s0123!

00:11:53.450 --> 00:12:02.420 align:middle line:84%
The search base is going to be
OU equals HQ, DC equals ine,

00:12:02.420 --> 00:12:05.075 align:middle line:90%
DC equals com.

00:12:05.075 --> 00:12:07.670 align:middle line:84%
The next thing that I
would do is scroll down.

00:12:07.670 --> 00:12:10.650 align:middle line:84%
My directory URI should be
based on the mail address.

00:12:10.650 --> 00:12:12.230 align:middle line:90%
So let's click on Mail.

00:12:12.230 --> 00:12:13.220 align:middle line:90%
Scroll down.

00:12:13.220 --> 00:12:15.530 align:middle line:84%
What permissions do we want
to automatically assign

00:12:15.530 --> 00:12:16.380 align:middle line:90%
to the user?

00:12:16.380 --> 00:12:18.650 align:middle line:90%
So click on Add to Access.

00:12:18.650 --> 00:12:20.180 align:middle line:90%
Click on Find.

00:12:20.180 --> 00:12:23.000 align:middle line:84%
And here we would select
the Standard CCM End

00:12:23.000 --> 00:12:27.980 align:middle line:84%
Users as per the question, and
Standard CTI Enabled and Allow

00:12:27.980 --> 00:12:31.460 align:middle line:84%
Control of Phones supporting
Connected Xfer and conf.

00:12:31.460 --> 00:12:32.955 align:middle line:90%
Let's click on Add.

00:12:32.955 --> 00:12:34.580 align:middle line:84%
Then select the
feature group template.

00:12:34.580 --> 00:12:37.950 align:middle line:84%
If you remember, we used the
default feature group template.

00:12:37.950 --> 00:12:39.800 align:middle line:90%
So let's select that.

00:12:39.800 --> 00:12:43.820 align:middle line:84%
And then we would say
apply mask and put the mask

00:12:43.820 --> 00:12:47.350 align:middle line:84%
as XXXX, which means the last
four digits of your telephone

00:12:47.350 --> 00:12:47.850 align:middle line:90%
number.

00:12:47.850 --> 00:12:51.890 align:middle line:84%
So your telephone number as
per LDAP is your e164 number,

00:12:51.890 --> 00:12:54.020 align:middle line:84%
but I am going to look
at only the last four

00:12:54.020 --> 00:12:56.870 align:middle line:84%
digits, and that's going
to be my extension,

00:12:56.870 --> 00:12:59.450 align:middle line:84%
or that's going to
be my phone number.

00:12:59.450 --> 00:13:01.290 align:middle line:84%
And then define the
LDAP server's address,

00:13:01.290 --> 00:13:08.810 align:middle line:84%
which is hq-internal-dns.ine.com
as per the question.

00:13:08.810 --> 00:13:11.060 align:middle line:90%
And click on Save.

00:13:11.060 --> 00:13:13.500 align:middle line:90%
Let's select Never Save this.

00:13:13.500 --> 00:13:17.370 align:middle line:84%
So once I click on Save, my LDAP
directory settings are done.

00:13:17.370 --> 00:13:19.310 align:middle line:84%
Now, I need to sync
with the LDAP server

00:13:19.310 --> 00:13:21.210 align:middle line:90%
to download all the users.

00:13:21.210 --> 00:13:25.210 align:middle line:84%
So click on Perform
Full Sync, and this

00:13:25.210 --> 00:13:28.850 align:middle line:84%
should download all the
users from the LDAP server.

00:13:28.850 --> 00:13:33.700 align:middle line:84%
However, when the user
tries to log into Jabber,

00:13:33.700 --> 00:13:36.170 align:middle line:84%
he is not going to be
able to be authenticated.

00:13:36.170 --> 00:13:40.870 align:middle line:84%
So for us to be authenticated,
we need to go back to LDAP

00:13:40.870 --> 00:13:42.890 align:middle line:90%
and define the authentication.

00:13:42.890 --> 00:13:43.720 align:middle line:90%
So click on this.

00:13:43.720 --> 00:13:46.600 align:middle line:84%
Use LDAP authentication
for end users.

00:13:46.600 --> 00:13:49.090 align:middle line:84%
The distinguisher name
was-- distinguished name

00:13:49.090 --> 00:13:51.520 align:middle line:90%
was administrator@ine.com.

00:13:51.520 --> 00:13:55.900 align:middle line:90%
The LDAP password was C1sc0123!

00:13:55.900 --> 00:13:58.480 align:middle line:90%
C1sc0123!

00:13:58.480 --> 00:14:00.290 align:middle line:84%
And the OU search
base is, again,

00:14:00.290 --> 00:14:10.078 align:middle line:84%
going to be OU equals HQ, DC
equals ine, DC equals com.

00:14:10.078 --> 00:14:14.200 align:middle line:84%
And define your LDAP server,
so hq-internal-dns.ine.com.

00:14:14.200 --> 00:14:19.035 align:middle line:90%


00:14:19.035 --> 00:14:20.470 align:middle line:90%
And save this.

00:14:20.470 --> 00:14:23.380 align:middle line:84%
Now once we've done this, if
you go back to User Management

00:14:23.380 --> 00:14:27.070 align:middle line:84%
under End Users, we should
be able to see users.

00:14:27.070 --> 00:14:29.240 align:middle line:90%
Three users should be imported.

00:14:29.240 --> 00:14:33.700 align:middle line:84%
And if I look here, because
my search base information was

00:14:33.700 --> 00:14:39.160 align:middle line:84%
OU equals HQ, all the users
that have the OU defined as--

00:14:39.160 --> 00:14:43.570 align:middle line:84%
the organization unit defined as
HQ and they are under ine.com,

00:14:43.570 --> 00:14:44.567 align:middle line:90%
they would be imported.

00:14:44.567 --> 00:14:46.150 align:middle line:84%
And if I look at my
LDAP server, there

00:14:46.150 --> 00:14:48.370 align:middle line:90%
were three users inside that.

00:14:48.370 --> 00:14:53.890 align:middle line:84%
If I go back to my Active
Directory and click on HQ,

00:14:53.890 --> 00:14:59.020 align:middle line:84%
I have three users there which
belong to this organization

00:14:59.020 --> 00:15:00.700 align:middle line:90%
and ine.com.

00:15:00.700 --> 00:15:04.300 align:middle line:84%
So I have three users, and
three users were imported.

00:15:04.300 --> 00:15:06.820 align:middle line:84%
Let's check if all the
settings as per the requirement

00:15:06.820 --> 00:15:08.450 align:middle line:90%
of the question has been met.

00:15:08.450 --> 00:15:10.102 align:middle line:84%
So if I click on any
one of the user--

00:15:10.102 --> 00:15:11.560 align:middle line:84%
look at first the
extension number.

00:15:11.560 --> 00:15:14.530 align:middle line:90%
It say 2001, 2002, and 2003.

00:15:14.530 --> 00:15:20.690 align:middle line:84%
If I click on, let's say, any
one, HQ-one and scroll down,

00:15:20.690 --> 00:15:24.610 align:middle line:84%
you would see that
IM&P is enabled

00:15:24.610 --> 00:15:29.050 align:middle line:84%
by default because we enable
that in the user profile.

00:15:29.050 --> 00:15:31.270 align:middle line:84%
And then as per the
feature template,

00:15:31.270 --> 00:15:34.660 align:middle line:84%
we have the service profile
also assigned automatically.

00:15:34.660 --> 00:15:38.200 align:middle line:84%
And in the feature template, we
define that only the last four

00:15:38.200 --> 00:15:39.740 align:middle line:90%
digits are going to be used.

00:15:39.740 --> 00:15:41.260 align:middle line:84%
So if I scroll
down, the permission

00:15:41.260 --> 00:15:43.130 align:middle line:84%
should also be
there automatically.

00:15:43.130 --> 00:15:45.730 align:middle line:84%
So if you look at the
primary extension has 2001,

00:15:45.730 --> 00:15:49.390 align:middle line:84%
and the permissions
are also-- have also

00:15:49.390 --> 00:15:50.740 align:middle line:90%
been assigned automatically.

00:15:50.740 --> 00:15:53.960 align:middle line:84%
So my users have been
imported correctly.

00:15:53.960 --> 00:15:56.800 align:middle line:84%
So with this, we've basically
met all the requirements

00:15:56.800 --> 00:15:59.650 align:middle line:84%
of the task, where we have three
users imported through LDAP,

00:15:59.650 --> 00:16:01.750 align:middle line:84%
and they would be
authenticated through LDAP.

00:16:01.750 --> 00:16:05.380 align:middle line:84%
And all the access form
access group permissions

00:16:05.380 --> 00:16:06.770 align:middle line:84%
have been
automatically assigned.

00:16:06.770 --> 00:16:08.770 align:middle line:84%
The extensions have been
automatically assigned.

00:16:08.770 --> 00:16:11.860 align:middle line:84%
The service profile has
been automatically assigned,

00:16:11.860 --> 00:16:14.500 align:middle line:84%
and the IM&P checkbox
has been enabled.

00:16:14.500 --> 00:16:17.500 align:middle line:84%
With this, we've met the
requirements of the question.

00:16:17.500 --> 00:16:19.460 align:middle line:84%
I hope this video was
informative to you,

00:16:19.460 --> 00:16:22.020 align:middle line:90%
and thank you for watching.

00:16:22.020 --> 00:16:23.000 align:middle line:90%