Monday, April 27, 2015

4 Ways to Protect CUCM Meetme Conferences with PIN

One of the useful features Cisco Unified Communications Manager provides is Meet Me conference. Admin defines the phone number for each conference room, and users need to dial the conference number to join the meeting. The common problem is that Meet Me conferences are not secure enough, anyone who knows the conference number can dial it and join.
This article describes the ways to add the PIN authentication to the CUCM Meet Me feature, which forces users to enter PIN before joining the meeting.
1. TCL script for CUCM Express (CME)

If you use Cisco UCM Express (CallManager Express), you can deploy the TCL IVR script that plays a voice prompt, waits for the user to enter PIN and checks if it matches the one configured in application or not before routing the call further. The TCL script and its discussion can be found here -
2. Cisco Unity Express/Connection

You can also use Cisco Unity to provide your employees with password protected Meet Me conferences. In the following  article you can learn, how to setup the Meet Me authentication with the help of Cisco Unity Connection (CUC) -
3. Cisco Unified Contact Center Express (UCCX)

If you have UCCX deployed, you can use it as an audio front end to meet me conferences. There are several UCCX scripts around the web which prompt the user for Meeting ID and password and if the entered PIN is correct, transfer the call to the MeetMe bridge. Meeting IDs and passwords are managed by the UCCX admin.
The common issue with these approaches is that you use Unity or UCCX for something that they’re not initially designed for. Thus when using these “workarounds” you still face  with some restrictions and lack of user features. So, the fourth way is to turn to the app from the authorized Cisco Solution Partner.
4. Commercial app

For a quite affordable price you can get the solution on top of the Cisco Meet Me conferencing feature that allows you to:
  • schedule Meet Me conferences from a web-calendar;
  • use the MS Outlook plugin to schedule the meetings from the Outlook calendar;
  • use only one phone number for all meet me conferences, when user calls are routed to  appropriate  meetings in accordance with the entered PIN;
  • protect meetings either by PIN or by Caller ID;
  • control the conference with the web-interface – the meeting organizer can see the list of  participants and disconnect anyone when needed;
  • start the meeting from any phone - without the necessity to use a Cisco IP phone to initiate the meetme bridge;
  • control the resources of the conference bridge.

One of the top 3rd party apps which can be used for MeetMe Security is Aurus PhoneUP. Aurus PhoneUP is the bundle of apps that works in Cisco UC & Collaboration environment. The PhoneUP solution counts more than 10 modules and includes the full-featured solution for Cisco Meet Me PIN authentication and scheduling.

Don't think about paying for 3rd party products. Think smarter about how much will you save if you use 3rd party product to protect MeetMe free solution versus the charges for global meeting solutions.


  1. Hi Mohammed,

    I've just configured Meet me with a PIN, using Unity Connection. it works.

    However, the problem is how to restrict users from just dialling the number directly. I need to give access to the Meet Me number range to all people who want to initiate a Meet Me conference.... and once I do that, there's no way to stop them dialling it directly.

    do you know of any way around that conundrum?

    Cheers, Mark.

    1. Why do you need to do this? Lets assume that a meetme admin started a meeting and everyone joined. Then during the call the admin dropped off (for any reason) and he wants to join the call back. In this case he won't be able to join because he can't dial-in. MeetMe softkey won't allow him to join. I will allow him to initiate the meeting only.

      In any way, if you want to do this,
      1. configure a translation pattern to match the meetme number and block the call
      2. assign the translation pattern to a partition which is accessible from meetme admin phone ONLY.
      3. This won't impact the actual meetme. It will only impact dialing meetme

  2. You can put meet me number in partition.



R1 …………………………………………………………………………………………………………………………………………… vrf definition dmvpn  !  address-family ipv4  exit-addre...