Mobile and Remote Access Through Cisco Expressway Deployment Guide (X15.2) - ICE Media Path Optimization

Publisher

Cisco Systems

URL

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X15-2/mra/exwy_b_mra-deployment-guide-x152/exwy_m_ice-media-path-optimization.html

Published

2024-10-15

Updated

unknown

Accessed

2026-09-24

HTTP status

200

License

Cisco copyright; all rights reserved; no-redistribution; short excerpts and locators only

Source notes citing this source

• ICE Media Path Optimization lets MRA-registered endpoints send media directly to each other, bypassing the WAN and the Expressway servers. in context
• ICE passthrough requires the internal leg between Expressway-C and Unified CM to be encrypted. Unified CM must be in a secure mode, either SIP OAuth or mixed mode. in context
• ICE Media Path Optimization over MRA needs Unified CM 11.5 or later and Expressway-C and Expressway-E X12.5 or later. in context
• ICE Media Path Optimization is not tested or supported with Webex Hybrid Services, Jabber Guest, CMR Cloud or B2B calling. HCS Contact Center does not support ICE passthrough. in context
• ICE over MRA needs Expressway-E configured as a TURN server to supply relay candidates. in context
• On Expressway-C ICE Passthrough support is set On and ICE support Off in the UC traversal zone SIP pane and ICE Passthrough support is set On per Unified CM server lookup. in context
• Expressway-E TURN services are turned On with default port and realm and media range 24000-29999 and TURN client credentials are created in its local authentication database. in context
• ICE passthrough needs Expressway X12.5 or later and Unified CM 11.5 or later with Unified CM in SIP OAuth or mixed mode and endpoints on a TLS-encrypted phone security profile. in context
• ICE passthrough lets MRA-registered endpoints send media directly to each other bypassing the Expressway servers after first flowing through Expressway-E and -C, with non-ICE endpoints keeping the traversal path. in context
• In the Unified CM Common Phone Profile ICE is Enabled with Default Candidate Type Host and Server Reflexive Address Enabled plus the TURN server host names and TURN username and password. in context
• ICE passthrough is verified at Status > ICE Passthrough metrics and in Status > Calls > History where the ICE passthrough call type shows values such as none or host_to_host or relay_to_relay. in context
• Since Expressway X12.5, ICE Media Path Optimization lets MRA-registered endpoints send media directly to each other, bypassing the WAN and the Expressway servers, using host, server-reflexive or TURN relay candidates. in context
• On ICE calls over MRA, media first flows through the Expressway-E and Expressway-C and only then moves to the negotiated ICE path, so endpoints without ICE keep using the traversal path. in context
• ICE Media Path Optimization for MRA requires TURN services turned on at the Expressway-E, a TLS-encrypted Expressway-C to Unified CM connection, Unified CM 11.5 or later in Mixed Mode or SIP OAuth mode, and MRA endpoints on a TLS-encrypted Phone Security Profile. in context
• Cisco says ICE Media Path Optimization is not tested or supported with Webex Hybrid Services, Jabber Guest, Collaboration Meeting Room Cloud or Business to Business calling, and that HCS Contact Center does not support it. in context

Cite this source record

APA

WarmTransfer. (2024, October 15). Mobile and Remote Access Through Cisco Expressway Deployment Guide (X15.2) - ICE Media Path Optimization. WarmTransfer. https://warmtransfer.net/knowledge/sources/cisco-exwy-mra-guide-x152-ice

BibTeX

@misc{warmtransfer-cisco-exwy-mra-guide-x152-ice,
  title  = {Mobile and Remote Access Through Cisco Expressway Deployment Guide (X15.2) - ICE Media Path Optimization},
  author = {{WarmTransfer}},
  year   = {2024},
  url    = {https://warmtransfer.net/knowledge/sources/cisco-exwy-mra-guide-x152-ice},
  note   = {Cisco Systems, accessed 2026-09-24}
}