TANDBERG D13691.03 user manual Zones

Page 62

TANDBERG Border Controller User Manual

xConfiguration Traversal UDPProbe KeepAliveInterval: <seconds>

Interval with which a UDP channel should be refreshed. xConfiguration Traversal TCPProbe RetryInterval: <seconds >

Interval with which a failed attempt to establish a TCP channel should be repeated.

xConfiguration Traversal TCPProbe RetryCount: <count>

Number of attempts at re-establishing a failed TCP channel.

xConfiguration Traversal TCPProbe KeepAliveInterval: <seconds>

Interval with which a TCP channel should be refreshed.

xConfiguration Traversal Media RTP Port: <port>

UDP port to which media should be sent. Conventionally this will be an even numbered port. The default is 2776.

xConfiguration Traversal Media RTCP Port: <port>

UDP port to which media control information should be sent. Conventionally this will be set to RTP port + 1. The default is 2777.

11.2.21 Zones

Traversal zones control how the Border Controller communicates with a Gatekeeper which it is cooperating with to provide ﬁrewall traversal.

xConfiguration Zones TraversalZone [1..50] Name: <name>

Sets the name of the TANDBERG Gatekeeper which is allowed to connect to this Border Controller.

xConfiguration Zones TraversalZone [1..100] HopCount: <count>

Speciﬁes the hop count to be used when originating an LRQ.

xConfiguration Zones TraversalZone [1..100] Match [1..5] Mode: <AlwaysMatch/PatternMatch/Disa

The preﬁx match mode determines when an LRQ will be sent to gatekeepers in the zone. If the mode is set to AlwaysMatch the zone will always be queried. If the mode is set to PatternMatch, the zone will only be queried if the alias queried for matches the corresponding pattern. If the mode is set to Disabled the zone will never be queried.

xConfiguration Zones TraversalZone [1..100] Match [1..5] Pattern String: <pattern>

The pattern to be used when deciding whether or not to query a zone. This is only used if the zone’s match mode is set to AlwaysMatch.

xConfiguration Zones TraversalZone [1..100] Match [1..5] Pattern Type: <Prefix/Suffix>

Determines whether the pattern string being checked should appear at the beginning or end of an alias.

55

Image 62

Contents Tandberg Border Controller Trademarks and copyright DisclaimerEnvironmental Considerations Environmental IssuesTANDBERG’s Environmental Policy Operator Safety Summary Page Contents Software Upgrade Introduction Tandberg Border Controller Overview Unpacking InstallationPrecautions Installation site preparations Connecting CablesSwitching on the System MountingBorder Controller Initial Conﬁguration Page Getting started System AdministrationAdministrator Account Root Account RegistrationNeighbor Gatekeepers Search Order Alternate Border Controllers Call Control Location decision ﬂow diagram Firewall Traversal Bandwidth Control Page Bandwidth Control and Firewall Traversal Bandwidth Control Examples Network Deployment with ﬁrewalls Page Registration Control Registration Restriction PolicyAuthentication using an Ldap server AuthenticationAuthentication using a local database Securing the Ldap connection with TLS URI Dialing Creating DNS SRV recordsPage Example Traversal deployments Simple Enterprise deploymentEnterprise Gatekeepers Dialing Public IP addressesNeighbored enterprises URI dialing from within the enterprisePage Making Decisions Based on Addresses Address-switchCall Policy Subﬁeld Proxy CPL Script ActionsLocation RejectCall screening Unsupported CPL ElementsCPL Examples Selective Call ScreeningCall Redirection Event log format Controlling what is loggedLogging Event Levels Logged EventsDNS Event data 245,NTP,DNS,LDAPPage Remote Logging YYYY/MM/DD-HHMMSSSoftware Upgrade Upgrading Using HttpsUpgrading Using SCP Page Calls Command ReferenceStatus Ethernet11.1.5 IP ExternalmanagerFeedback LdapRegistrations 11.1.8 NTPPipes ResourceUsageSystemUnit Authentication11.2 Conﬁguration ZonesGatekeeper Page HTTP/HTTPS 11.2.6 IPLdap Option Key 11.2.9 Log11.2.10 NTP 11.2.15 SSH Session Snmp Subzones Traversal TelnetTimeZone Zones Command AllowListDelete BootAllowListAdd CheckBandwidthDenyListAdd DefaultLinksAddDefaultValuesSet DenyListDeleteFindRegistration FeedbackRegisterFeedbackDeregister LinkAddPipeAdd OptionKeyAddOptionKeyDelete PipeDeleteHistory Feedback Clear Other commandsAbout EventlogRelkey SyslogVerifying the SRV record Appendix Conﬁguring DNS ServersMicrosoft DNS Server Bind 8As expected Prerequisites Appendix Conﬁguring Ldap ServersMicrosoft Active Directory Adding H.350 objectsOpenLDAP Securing with TLSInstalling the H.350 schemas Add the H.350 objects EMC Emission Radiated Electromagnetic Interference Electrical SafetyApprovals EMC ImmunityTechnical Speciﬁcations Certiﬁcation Physical DimensionsPower supply References Glossary Index