TANDBERG D13691.03 user manual Registration Control, Registration Restriction Policy

Page 27

TANDBERG Border Controller User Manual

5Registration Control

The TANDBERG Border Controller can control which endpoints are allowed to register with it. Two separate mechanisms are provided: a simple Registration Restriction Policy and an authentication process based on user names and passwords. It is possible to use both mechanisms at once: authentication to verify an endpoint’s identity from a corporate directory and registration restriction to control which of those authenticated endpoints may register with a particular Border Controller.

5.1Registration Restriction Policy

When an endpoint registers with your Border Controller it presents a list of aliases. By default, registration restriction policy is set to None. In this state, any endpoint may register. The registration restriction policy can be configured using the following command:

xConfiguration Gatekeeper Registration RestrictionPolicy [NoneAllowListDenyList

]

or by using the web interface, on the Border Controller Configuration → Restrictions page (see Figure 12 for a screenshot of the Registration Restrictions Configuration). If the policy is set to AllowList, only those endpoints with an alias which matches an entry in the AllowList may register. Conversely, if the policy is set to DenyList, all endpoints may register, unless they match an entry on the DenyList. Allow lists and Deny lists are mutually exclusive: only one may be in use at any given time.

 

Figure 12: Configuring registration restrictions

Matching uses a simple form of wild card expansion:

12345678

Exact match only

1234567?

First 7 characters are an exact match, last may be anything

123*

123 followed by anything

*@example.com

Any string ending with @example.com

To set entries in the Allow and Deny lists use the following commands AllowListAdd, AllowListDelete, DenyListAdd, DenyListDelete

To view the entries in the allow and deny lists, use the following commands:

xConfiguration Gatekeeper Registration AllowList

xConfiguration Gatekeeper Registration DenyList

20

Image 27
Contents Tandberg Border Controller Disclaimer Trademarks and copyrightEnvironmental Issues TANDBERG’s Environmental PolicyEnvironmental Considerations Operator Safety Summary Page Contents Software Upgrade Introduction Tandberg Border Controller Overview Installation PrecautionsUnpacking Mounting Connecting CablesSwitching on the System Installation site preparationsBorder Controller Initial Configuration Page System Administration Administrator AccountGetting started Registration Neighbor GatekeepersRoot Account Search Order Alternate Border Controllers Call Control Location decision flow diagram Firewall Traversal Bandwidth Control Page Bandwidth Control and Firewall Traversal Bandwidth Control Examples Network Deployment with firewalls Page Registration Restriction Policy Registration ControlAuthentication Authentication using a local databaseAuthentication using an Ldap server Securing the Ldap connection with TLS Creating DNS SRV records URI DialingPage Simple Enterprise deployment Example Traversal deploymentsDialing Public IP addresses Enterprise GatekeepersURI dialing from within the enterprise Neighbored enterprisesPage Address-switch Call PolicyMaking Decisions Based on Addresses Subfield Reject CPL Script ActionsLocation ProxySelective Call Screening Unsupported CPL ElementsCPL Examples Call screeningCall Redirection Controlling what is logged LoggingEvent log format Logged Events Event LevelsDNS 245,NTP,DNS,LDAP Event dataPage YYYY/MM/DD-HHMMSS Remote LoggingUpgrading Using Https Software UpgradeUpgrading Using SCP Page Ethernet Command ReferenceStatus CallsLdap ExternalmanagerFeedback 11.1.5 IPResourceUsage 11.1.8 NTPPipes RegistrationsZones Authentication11.2 Configuration SystemUnitGatekeeper Page 11.2.6 IP HTTP/HTTPSLdap 11.2.9 Log 11.2.10 NTPOption Key Session Snmp11.2.15 SSH Subzones Telnet TimeZoneTraversal Zones Command CheckBandwidth BootAllowListAdd AllowListDeleteDenyListDelete DefaultLinksAddDefaultValuesSet DenyListAddLinkAdd FeedbackRegisterFeedbackDeregister FindRegistrationPipeDelete OptionKeyAddOptionKeyDelete PipeAddHistory Feedback Eventlog Other commandsAbout ClearSyslog RelkeyBind 8 Appendix Configuring DNS ServersMicrosoft DNS Server Verifying the SRV recordAs expected Adding H.350 objects Appendix Configuring Ldap ServersMicrosoft Active Directory PrerequisitesSecuring with TLS OpenLDAPInstalling the H.350 schemas Add the H.350 objects EMC Immunity Electrical SafetyApprovals EMC Emission Radiated Electromagnetic InterferenceTechnical Specifications Physical Dimensions Power supplyCertification References Glossary Index

D13691.03 specifications

The TANDBERG D13691.03 is a cutting-edge communication device that has been designed to meet the rigorous demands of modern business environments. Known for its reliability and versatility, the D13691.03 offers a comprehensive suite of features that enhance collaboration and productivity for organizations seeking seamless communication solutions.

One of the key characteristics of the TANDBERG D13691.03 is its exceptional video quality. Equipped with advanced video codecs, this device provides users with crystal clear HD video, ensuring that every interaction is as lifelike and engaging as possible. The intelligent bandwidth management technology optimizes the video quality based on the available network conditions, allowing for smooth and uninterrupted communication even in less than ideal network scenarios.

In addition to superior video capabilities, the D13691.03 boasts impressive audio technology. With integrated echo cancellation and noise reduction features, users can enjoy natural and clear audio during calls. This ensures that conversations are not only visually effective but also audibly intelligible, allowing for a more immersive communication experience.

Another notable feature of the TANDBERG D13691.03 is its user-friendly interface. Designed with usability in mind, the device comes with a touchscreen interface that simplifies navigation through the various settings and options. Users can easily connect with colleagues, schedule meetings, and access video conferencing features in just a few taps.

Moreover, the D13691.03 supports various connectivity options, including Ethernet and Wi-Fi, providing users with the flexibility to connect to their networks with ease. The device is also compatible with standard video conferencing protocols, making it an ideal solution for organizations that utilize multiple communication platforms.

The D13691.03 has been designed with security in mind, featuring advanced encryption protocols to protect sensitive data during video calls. This ensures that conversations remain confidential and secure, which is crucial for businesses handling proprietary information.

Overall, the TANDBERG D13691.03 stands out as a robust communication solution that enhances the way organizations interact. With its blend of high-quality video and audio capabilities, user-friendly design, and strong security measures, this device is well-equipped to handle the dynamic needs of modern workplaces, facilitating collaboration and driving productivity. Businesses looking to improve their communication infrastructure will find the TANDBERG D13691.03 to be an invaluable addition to their technology arsenal.