RMX 2000 Administrator's Guide Version 7.6.1 - Polycom

Interactive Connectivity Establishment (ICE)
Appendix H-Setting the RMX for Integration Into Microsoft Environment
Interactive Connectivity Establishment (ICE) provides a structure/protocol to unify the
various NAT Traversal techniques that are used to cross firewalls.
It enables SIP based endpoints to connect while traversing a variety of firewalls that may
exist between the calling endpoint (local) and the MCU or called endpoint (remote). It is the
only way for remote Microsoft Office Communicator/Lync users to call into the enterprise
without a VPN.
ICE Guidelines
• ICE is available in MPM+ Card Configuration Mode (Version 7.0 and later) and MPMx
Card Configuration Mode (Version 7.1 and later).
• RMX ICE implementation complies with Microsoft ICE implementation.
• ICE is available only in IPv4 environment.
• ICE can be implemented in an environment that includes a STUN server and a Relay
server (for example, Microsoft AV Edge server).
• The firewall must be UDP enabled.
• The RMX must have a unique account in the Active Directory and must be registered
with the Office Communications/Lync server.
• ICE is supported only within a single IP Network Service per RMX and not in Multiple
Networks configuration.
• Ensure that the RMX system SIP signaling domain has been allowed on the Lync Server
edge server to which you are federating (if your deployment does not include a DMA
system).
• Content sharing (BFCP protocol) is not supported in ICE environment.
Connecting to the RMX in ICE Environment
The dialing methods that can be used by an endpoint to connect to another endpoint
depends on the ICE environment: Local, Remote or Federation.
Figure 9 ICE Environment
Local connection - a connection between the RMX and endpoints that reside within the same
organization. For example, an endpoint in Zone A calls the RMX in Zone A.
Branch Office - a connection between an endpoint that is behind a firewall and the RMX that
reside in the same zone. The user in the Branch Office can also place and receive calls from
other enterprises and remote users. For example, Enterprise A also contains a branch office,
which in this example is a Polycom HDX user who is behind more than one firewall.
Polycom, Inc. H-3