Then, you create CSS groups that only allow phones in those partitions to call each other, but no one else.
"You put your devices that need general access to only the cluster, such as voice mail and gateways, in a partition name``ClusterOnly""."