! -----------------------------------------------------------------------------------------------------------------
! Example of the basic configuration required for Webex managed gateway enrolment.
! Process detailed in: https://help.webex.com/xftgfc
! -----------------------------------------------------------------------------------------------------------------
!
hostname %hostname%
!
aaa new-model
aaa authentication login default local
aaa authorization console
aaa authorization exec default local
!
ip name-server %dns_servers%
ip domain name %domain_name%
!
license accept end user agreement
license smart transport smart
!
username %username% privilege 15 secret %password%
!
! Interface used to connect to the network, eg GigabitEthernet0/0/0 or GigabitEthernet1
interface %gateway_interface%
 ip address %gateway_ip% %gateway_ip_mask%
 no shut
!
! Add HTTP proxy details only if required for your network
ip http client proxy-server %proxy_address% proxy-port %proxy_port%
ip http client username %proxy_username%
ip http client password %proxy_password%
!
ip default-gateway %default_gateway_ip%
ip route 0.0.0.0 0.0.0.0 %default_gateway_ip%
crypto pki trustpool import url http://www.cisco.com/security/pki/trs/ios.p7b
!
! -----------------------------------------------------------------------------------------------------
! **Required configuration** for Webex Calling Site Survivability gateway
! Process detailed in: https://help.webex.com/d68vi1
! -----------------------------------------------------------------------------------------------------
!
! ............................Platform License BEGIN............................
! Licensing for ISR routers only
license boot level uck9
license boot level securityk9
! Save configuration and reload at this point to enable licensed features
!
! Licensing for Catalyst routers only (Premium also supported)
license boot level network-advantage add-on dna-advantage
platform hardware throughput crypto %bandwidth_license%
! Save configuration and reload at this point to enable licensed features
!
! Licensing for Catalyst 8000V only (Advantage and Premium also supported)
license boot level network-essentials add-on dna-essentials
platform hardware throughput level MB %throughput_license%
! Save configuration and reload at this point to enable licensed features
! ............................Platform License END............................
!
! Add time servers, if not present already
ntp server %ntp_address1%
ntp server %ntp_address2%
!
! ...........................Signed Certificate BEGIN...........................
! Create and install a signed certificate
crypto key generate rsa general-keys label webex-sgw exportable modulus 2048
!
crypto pki trustpoint webex-sgw
 enrollment terminal
 fqdn %gateway_fqdn%
 subject-name cn=%gateway_fqdn%
 subject-alt-name %gateway_fqdn%
 revocation-check crl
 rsakeypair webex-sgw
!
! Generate CSR
crypto pki enroll webex-sgw
!
! Authenticate your certificate using the **signing CA certificate**
crypto pki authenticate webex-sgw
!
! Import **your device certificate**
crypto pki import webex-sgw certificate
! ...........................Signed Certificate END...........................
!
! ...........................Auto attendant(BACD) BEGIN...........................
application
 service aa bootflash:app-b-acd-aa-3.0.0.8.tcl
  paramspace english index 1
  param handoff-string aa
  param dial-by-extension-option <dial-by-extn menu option, standard BACD script menu option is 3>
  paramspace english language en
  param aa-pilot <auto attendant 164 pilot number associated in auto attendant dial-peer>
  paramspace english location flash:
  param welcome-prompt _bacd_welcome.au
  param voice-mail <alternate destination for calls that are not answered>
  param service-name queue
 !
 service queue bootflash:app-b-acd-3.0.0.8.tcl
  param queue-len 30
  param queue-manager-debugs 1
 ! 
! ...........................Auto attendant(BACD) END...........................
!
! .............................Survivability BEGIN.............................
voice service voip
 ip address trusted list
  ipv4 %ip_address% %subnet_mask%
  ipv4 %ip_address% %subnet_mask%
 allow-connections sip to sip
 supplementary-service media-renegotiate
 no supplementary-service sip refer
 no supplementary-service sip moved-temporarily
 trace
 sip
  asserted-id pai
  registrar server
  asymmetric payload full
!
voice register global
 mode webex-sgw
 max-dn %max_dn_for_this_model%
 max-pool %max_pool_for_this_model%
!
voice class codec 1
 codec preference 1 g711ulaw
 codec preference 2 g711alaw
!
voice register pool 1
 id network 0.0.0.0 mask 0.0.0.0
 dtmf-relay rtp-nte
 voice-class codec 1
!
sip-ua 
 transport tcp tls v1.2
 no remote-party-id
 crypto signaling default trustpoint webex-sgw
! .............................Survivability END.............................
!
!
! ----------------------------------------------------------------------------
! **Optional configurations** for for Webex Calling Site Survivability gateway
! All of the following configurations are incremental.
! ----------------------------------------------------------------------------
!
! Local music on hold (plays media file from local flash)
call-manager-fallback
 moh enable-g711 "bootflash:music-on-hold.au"
!
! ..............................TDM or SIP PSTN Trunk BEGIN..............................
! Use these configurations if you are adding a route to the PSTN from this gateway.
voice class e164-pattern-map 300
 description All dialable PSTN numbers and patterns
  e164 %number_pattern%
  e164 %number_pattern%
!
voice class e164-pattern-map 350
 description Direct Dial numbers
  e164 %ELIN_number_pattern%
  e164 %ELIN_number_pattern%
!
! TDM PSTN Dial-Peers, ignore this section if SIP PSTN is used
dial-peer voice 300 pots
 description Outbound dial-peer for PSTN calls
 port %tdm_port%
 destination e164-pattern-map 300
!
dial-peer voice 350 pots
 description Inbound dial-peer for Direct Dial numbers
 incoming called e164-pattern-map 350
 direct-inward-dial
!
! SIP PSTN Dial-Peers, ignore this section if TDM PSTN is used
voice class tenant 300
 sip-server ipv4:%proxy_address%
 session transport udp
 bind all source-interface %gateway_interface%
!
dial-peer voice 300 voip
 description Outbound dial-peer for PSTN calls
 destination e164-pattern-map 300
 session protocol sipv2
 session target sip-server
 voice-class codec 1
 voice-class sip tenant 300
!
dial-peer voice 350 voip
 description Inbound dial-peer for Direct Dial numbers
 session protocol sipv2
 incoming called e164-pattern-map 350
 voice-class codec 1
 voice-class sip tenant 300
!
! ...............................TDM or SIP PSTN Trunk END...............................
!
! ................................Emergency Calling BEGIN................................
! This configuration identifies callers based on IP subnet and sets their ELIN accordingly.
! For more information see: https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/manual/cmeadm/cme911.html
voice emergency response location 1
 name %informal_location_name_1%
 address %registered_ali_1%
 elin 1 %erl_1_e164_elin%
 subnet 1 %erl_1_subnet% %erl_1_mask%
!
voice emergency response location 2
 name %informal_location_name_2%
 address %registered_ali_2%
 elin 1 %erl_2_e164_elin%
 subnet 1 %erl_2_subnet% %erl_2_mask%
!
voice emergency response zone 1
 location 1
 location 2
!
voice class e164-pattern-map 301
 description Emergency services numbers
  e164 %number_pattern%
  e164 %number_pattern%
!
voice class e164-pattern-map 351
 description Emergency ELINs
  e164 %ELIN_number_pattern%
  e164 %ELIN_number_pattern%
!
! Additional commands for TDM PSTN Dial-Peers if not using SIP
dial-peer voice 301 pots
 description Outbound dial-peer for E911 call
 emergency response zone 1
 port %tdm_port%
 destination e164-pattern-map 301
!
dial-peer voice 351 pots
 description Inbound dial-peer for E911 call
 emergency response callback
 incoming called e164-pattern-map 351
 direct-inward-dial
!
! Additional commands for SIP PSTN Dial-Peers if not using TDM
dial-peer voice 301 voip
 description Outbound dial-peer for E911 call
 emergency response zone 1
 destination e164-pattern-map 301
 session protocol sipv2
 session target sip-server
 voice-class codec 1
 voice-class sip tenant 300
!
dial-peer voice 351 voip
 description Inbound dial-peer for E911 call
 emergency response callback
 session protocol sipv2
 incoming called e164-pattern-map 351
 voice-class codec 1
 voice-class sip tenant 300
!
! SIP PSTN Dial-Peers for Auto Attendant(BACD) service called aa associated with incoming voice port
dial-peer voice 500 voip
 description Inbound dial-peer for Auto Attendant
 service aa
 session protocol sipv2
 incoming called-number <auto attendant pilot number>
 dtmf-relay rtp-nte
 codec g711ulaw
 no vad
!
! TDM PSTN Dial-Peers if not using SIP for Auto Attendant(BACD) service called aa associated with incoming voice pots
dial-peer voice 500 pots
 description Inbound dial-peer for Auto Attendant
 service aa
 incoming called-number <auto attendant pilot number>
 port %tdm_port%
!
! ................................Emergency Calling END................................
!
! ...............................Calling Permissions BEGIN...............................
! This class of restriction configuration emulates the advanced calling permissions
! used in Control Hub and should be added only if differentiated permissions are
! required for example, for specific phones. Add or adjust lists as required.
dial-peer cor custom
 name WxC-Internal
 name WxC-Toll-free
 name WxC-National
 name WxC-International
 name WxC-Operator_Assistance
 name WxC-Chargeable_Directory
 name WxC-Special_Services1
 name WxC-Special_Services2
 name WxC-Premium_Services1
 name WxC-Premium_Services2
!
dial-peer cor list WxC-InternalCalls
 member WxC-Internal
dial-peer cor list WxC-TollFreeCalls
 member WxC-Toll-free
dial-peer cor list WxC-NationalCalls
 member WxC-National
dial-peer cor list WxC-InternationalCalls
 member WxC-International
dial-peer cor list WxC-OperatorAssistanceCalls
 member WxC-Operator_Assistance
dial-peer cor list WxC-ChargeableDirectoryCalls
 member WxC-Chargeable_Directory
dial-peer cor list WxC-SpecialServices1Calls
 member WxC-Special_Services1
dial-peer cor list WxC-SpecialServices2Calls
 member WxC-Special_Services2
dial-peer cor list WxC-PremiumServices1calls
 member WxC-Premium_Services1
dial-peer cor list WxC-PremiumServices2Calls
 member WxC-Premium_Services2
!
dial-peer cor list WxC-DefaultPermissions
 member WxC-Internal
 member WxC-Toll-free
 member WxC-National
 member WxC-Operator_Assistance
 member WxC-Chargeable_Directory
 member WxC-Special_Services1
 member WxC-Special_Services2
!
dial-peer cor list WxC-FullPermissions
 member WxC-Internal
 member WxC-Toll-free
 member WxC-National
 member WxC-International
 member WxC-Operator_Assistance
 member WxC-Chargeable_Directory
 member WxC-Special_Services1
 member WxC-Special_Services2
 member WxC-Premium_Services1
 member WxC-Premium_Services2
!
voice register pool 1
 cor incoming WxC-DefaultPermissions default
!
! voice register pool if extension is used for match (create pool for each extension)
voice register pool 2
 id extension-number %extension%
 call-forward b2bua noan %extension%
 cor incoming WxC-FullPermissions default
 dtmf-relay rtp-nte
 voice-class codec 1
!
! voice register pool if phone number (TN) is used for match (create pool for each TN)
voice register pool 3
 id phone-number %phone number%
 call-forward b2bua all %phone number%
 cor incoming WxC-FullPermissions default
 dtmf-relay rtp-nte
 voice-class codec 1
!
! Sequential hunt group configuration
voice hunt-group <tag> sequential
 pilot %pilot number%
 number 1 %extension%
 number 2 %phone number%
 number 3 %pstn number%
 number 4 %routing prefix + extension%
 number 5 %extension%
 timeout <ring timeout after which the call will be placed to next agent>
 present-call idle-phone
 statistics collect 
 description sales department  
 final %extension%
!
! Parallel hunt group configuration
voice hunt-group <tag> parallel
 pilot %pilot number%
 number 1 %extension%
 number 2 %phone number%
 number 3 %pstn number%
 number 4 %routing prefix + extension%
 number 5 %extension%
 timeout <ring timeout after which the call will be placed to next agent>
 present-call idle-phone
 statistics collect 
 description sales department  
 final %extension%
!
voice class e164-pattern-map 302
 description Toll-free numbers
  e164 %number_pattern%
!
voice class e164-pattern-map 303
 description National numbers
  e164 %number_pattern%
!
voice class e164-pattern-map 304
 description International numbers
  e164 %number_pattern%
!
voice class e164-pattern-map 305
 description Operator Assistance numbers
  e164 %number_pattern%
!
voice class e164-pattern-map 306
 description Chargeable Directory numbers
  e164 %number_pattern%
!
voice class e164-pattern-map 307
 description Special Services1 numbers
  e164 %number_pattern%
!
voice class e164-pattern-map 308
 description Special Services2 numbers
  e164 %number_pattern%
!
voice class e164-pattern-map 309
 description Premium Services1 numbers
  e164 %number_pattern%
!
voice class e164-pattern-map 310
 description Premium Services2 numbers
  e164 %number_pattern%
!
! TDM/POTS PSTN Dial-Peers if not using SIP
dial-peer voice 302 pots
 description Outbound dial-peer for Toll-free calls
 port %tdm_port%
 destination e164-pattern-map 302
 corlist outgoing WxC-TollFreeCalls
!
dial-peer voice 303 pots
 description Outbound dial-peer for National calls
 port %tdm_port%
 destination e164-pattern-map 303
 corlist outgoing WxC-NationalCalls 
!
dial-peer voice 304 pots
 description Outbound dial-peer for International calls
 port %tdm_port%
 destination e164-pattern-map 304
 corlist outgoing WxC-InternationalCalls 
!
dial-peer voice 305 pots
 description Outbound dial-peer for Operator Assistance calls
 port %tdm_port%
 destination e164-pattern-map 305
 corlist outgoing WxC-OperatorAssistanceCalls
!
dial-peer voice 306 pots
 description Outbound dial-peer for Chargeable Directory calls
 port %tdm_port%
 destination e164-pattern-map 306
 corlist outgoing WxC-ChargeableDirectoryCalls
!
dial-peer voice 307 pots
 description Outbound dial-peer for Special Services1 calls
 port %tdm_port%
 destination e164-pattern-map 307
 corlist outgoing WxC-SpecialServices1Calls
!
dial-peer voice 308 pots
 description Outbound dial-peer for Special Services2 calls
 port %tdm_port%
 destination e164-pattern-map 308
 corlist outgoing WxC-SpecialServices2Calls
!
dial-peer voice 309 pots
 description Outbound dial-peer for Premium Services1 calls
 port %tdm_port%
 destination e164-pattern-map 309
 corlist outgoing WxC-PremiumServices1Calls
!
dial-peer voice 310 pots
 description Outbound dial-peer for Premium Services2 calls
 port %tdm_port%
 destination e164-pattern-map 310
 corlist outgoing WxC-PremiumServices2Calls
!
! SIP PSTN Dial-Peers if not using TDM/POTS
dial-peer voice 302 voip
 description Outbound dial-peer for Toll-free calls
 destination e164-pattern-map 302
 session protocol sipv2
 session target sip-server
 voice-class codec 1
 voice-class sip tenant 300
 corlist outgoing WxC-TollFreeCalls
!
dial-peer voice 303 voip
 description Outbound dial-peer for National calls
 destination e164-pattern-map 303
 session protocol sipv2
 session target sip-server
 voice-class codec 1
 voice-class sip tenant 300
 corlist outgoing WxC-NationalCalls
!
dial-peer voice 304 voip
 description Outbound dial-peer for International calls
 destination e164-pattern-map 304
 session protocol sipv2
 session target sip-server
 voice-class codec 1
 voice-class sip tenant 300
 corlist outgoing WxC-InternationalCalls
!
dial-peer voice 305 voip
 description Outbound dial-peer for Operator Assistance calls
 destination e164-pattern-map 305
 session protocol sipv2
 session target sip-server
 voice-class codec 1
 voice-class sip tenant 300
 corlist outgoing WxC-OperatorAssistanceCalls
!
dial-peer voice 306 voip
 description Outbound dial-peer for Chargeable Directory calls
 destination e164-pattern-map 306
 session protocol sipv2
 session target sip-server
 voice-class codec 1
 voice-class sip tenant 300
 corlist outgoing WxC-ChargeableDirectoryCalls
!
dial-peer voice 307 voip
 description Outbound dial-peer for Special Services1 calls
 destination e164-pattern-map 307
 session protocol sipv2
 session target sip-server
 voice-class codec 1
 voice-class sip tenant 300
 corlist outgoing WxC-SpecialServices1Calls
!
dial-peer voice 308 voip
 description Outbound dial-peer for Special Services2 calls
 destination e164-pattern-map 308
 session protocol sipv2
 session target sip-server
 voice-class codec 1
 voice-class sip tenant 300
 corlist outgoing WxC-SpecialServices2Calls
!
dial-peer voice 309 voip
 description Outbound dial-peer for Premium Services1 calls
 destination e164-pattern-map 309
 session protocol sipv2
 session target sip-server
 voice-class codec 1
 voice-class sip tenant 300
 corlist outgoing WxC-PremiumServices1Calls
!
dial-peer voice 310 voip
 description Outbound dial-peer for Premium Services2 calls
 destination e164-pattern-map 310
 session protocol sipv2
 session target sip-server
 voice-class codec 1
 voice-class sip tenant 300
 corlist outgoing WxC-PremiumServices2Calls
!
! .............................Calling Permissions END.............................