3Com Telecommuting Module, Version | HP VCX Software instruction

3Com® Telecommuting Module

User Manual

Version 4.6.5

Image 1

HP VCX Software manual 3Com Telecommuting Module, Version

Contents

Version 3Com Telecommuting ModulePage United States Government Legend Page Table of Contents Page Part I. Introduction to 3Com VCX IP Telecommuting Module Page Introduction to 3Com VCX IP Telecommuting Module What is a Telecommuting Module?Conﬁguration alternatives DMZ/LAN Conﬁguration DMZ Conﬁguration Standalone Conﬁguration Quick guide to 3Com VCX IP Telecommuting Module installation Introduction to 3Com VCX IP Telecommuting Module About settings in 3Com VCX IP Telecommuting Module Introduction to 3Com VCX IP Telecommuting Module Installation Installing 3Com VCX IP Telecommuting ModuleInstallation with magic ping Installation with a serial cablePage Page Page Page Installation with a diskette Page Page Remember to lock up the Telecommuting Module Turning off a Telecommuting Module Installing 3Com VCX IP Telecommuting Module Logging on Conﬁguring 3Com VCX IP Telecommuting ModuleLog on again Log out NavigationSite Map SIP Services AdministrationBasic Conﬁguration Network Conﬁguration Overview of conﬁguration Quality of ServiceFailover Virtual Private Networks Preliminary and permanent conﬁguration Page Mask/Bits IP address No. of computers Mask Bits Name queries in 3Com VCX IP Telecommuting ModulePage Conﬁguring 3Com VCX IP Telecommuting Module Part II. How To Page DMZ Telecommuting Module, SIP server on the WAN How To Conﬁgure SIPNetworks and Computers Surroundings Interoperability Basic Settings Routing Filtering Save/Load Conﬁguration DMZ Telecommuting Module, SIP server on the LAN Networks and Computers Basic Settings Routing Standalone Telecommuting Module, SIP server on the WAN Basic Settings Filtering Standalone Telecommuting Module, SIP server on the LAN Client Settings Basic Settings Interoperability DMZ/LAN Telecommuting Module, SIP server on the WAN Basic Settings Filtering DMZ/LAN Telecommuting Module, SIP server on the LAN Interoperability Filtering LAN Telecommuting Module Surroundings Filtering Remote SIP Connectivity Firewall How To Conﬁgure SIP Outgoing Calls How To Conﬁgure Advanced SIP Show One Number When Calling Show Different Numbers When Calling Incoming Calls Page Authentication by Accounts a.k.a SIP Trunk via SIP accounts Page Page Page Incoming Calls Page Multiple Operators Least Cost Routing Page Multiple PBXs How To Conﬁgure Advanced SIP How To Conﬁgure Advanced SIP Page Page Page Page Basic Conﬁguration Basic ConﬁgurationGeneral Name of this Telecommuting Module DNS Servers Default domain IP PolicyPolicy For Ping To Your 3Com VCX IP Telecommuting Module Cancel Access ControlSave Look up all IP addresses again Conﬁguration Allowed Via Interface User Authentication For Web Interface AccessConﬁguration Transport Conﬁguration via Https Conﬁguration via Http Conﬁguration via SSH Conﬁguration ComputersDNS Name Or Network Address Netmask/Bits Network addressRange Via IPsec Peer Radius Radius server Radius ServersPort Secret Contact IP Address IdentiﬁerStatus for Radius Servers Sent requests ScoreReceived replies Consecutive sends Value Conﬁguration of a Radius server Telecommuting Module IP address to respond to Snmp requests Snmp v1 and v2cContact person Node location Access via SNMPv3 Access via SNMPv1 and SNMPv2cSnmp Community Authentication PasswordSnmp Traps User Trap sending function Resource MonitoringTrap receiver Version SIP Sessions Trap Levels Download the 3Com MIBSIP User Registrations Trap Levels CPU Load Trap Levels DynDNS service Dynamic DNS updateDynDNS General Conﬁguration Use DynDNS User, Smtp Server IP address for updatesWildcard hostnames Ofﬂine URL redirection Username Smtp server is backup DNS Names to Update at DynDNSSmtp server DNS Name Private Certiﬁcates CertiﬁcatesName Certiﬁcate Create certiﬁcate or certiﬁcate request CA Certiﬁcates Advanced TimeoutsCA Certiﬁcate Timeout for two-way UDP connections Timeout for one-way UDP connectionsTimeout for established TCP connections Timeout for Icmp connections DMZ/LAN Conﬁguration Current Telecommuting Module Type Telecommuting Module Type conﬁgurationChange Telecommuting Module Type to Change type Duration of limited test mode AdministrationSave/Load Conﬁguration Test Preliminary Conﬁguration Show Message About Unapplied Changes BackupApply conﬁguration Save/Load CLI Command File Revert to Old Conﬁgurations Show ConﬁgurationAbort All Edits Reload Factory Conﬁguration Password For the ’admin’ Account User AdministrationOld password Change administration password New password, Conﬁrm passwordOther Accounts Account Type Currently Logged In Administrators Upgrade UpgradeLog Out Step Accept upgrade Try the upgradeAbort upgrade Table Look Edit Column Change Time Zone Date and Time Date Change Date and Time ManuallyTime Set date and time manually Change Date and Time With NTP NTP Servers To Use If NTP Is EnabledSynchronize time with NTP Restart Reboot Your 3Com VCX IP Telecommuting ModuleRestart the SIP Module Automatic Restart of the SIP Module Administration Administration 118 Networks and Computers Network Conﬁguration Subgroup NameLower Limit Interface/VLAN Upper LimitDelete Row Create Main Default Gateways Default GatewayPriority Interface Gateway Reference Hosts Policy For Packets From Unused Gateways Physical device Interface Network Interface 1Interface name Obtain IP Address Dynamically Directly Connected Networks Broadcast address AliasVlan Id Vlan Name Static Routing Router Routed network Named VLANs Vlan Interface Status Interface Status PPPoE Client Status Dhcp Client Status PPPoE AuthenticationKeep Alive LCP echo-request interval SurroundingsLog class for PPPoE negotiations Network Data InterfacesAdditional Negotiators Select a data interface here Network Conﬁguration 136 Display Log LoggingSearch the Log Display log Packet Selection Support Report IP Address Selection Packet Type SelectionProtocol/Port Selection All IP protocols Icmp Call-ID SIP Packet SelectionSIP Methods IP addresses Time Limits Export the Log Show ThisShow newest at top Clear form Log RST Display Load Time Period Packet LoadDirection Unit Value Diagram Size DiagramDiagram Heading View diagram Log class for non-SIP packets Inbound TrafﬁcLog class for spoofed packets Log class for broadcast packets Log class for Radius errors Log class for email errorsLog class for Snmp errors Log class for Dhcp requests Log class for IPsec key negotiations VPN EventsLog class for IPsec key negotiation debug messages Log class for ESP packets SIP Events Other Email Address Log ClassesLocal Log Syslog Log Sending Status for Outbound Email Smtp ServerSyslog Servers Reverts the ﬁelds to the previous conﬁguration 157 Logging 158 Administration of SIP SIP ServicesBasic Settings SIP Module Provisioning Relay Additional SIP Signaling PortsTransport Comment Public IP address for NATed Telecommuting Module SIP Media Port RangeSIP Servers To Monitor Server SIP Logging Log class for SIP signaling Loose Routing InteroperabilityRelaxed Refer-To Translation Exceptions Remove Via HeadersSIP Server Except this from translation Force Translation Expires HeaderAlways Translate This URI Encoding Loose Username Check Signaling Order of Re-INVITEsUser Matching Transmit RTP/AVP With sdescriptions Accept RTP/AVP With sdescriptionsForce Record-Route for Outbound Requests Force Record-Route for All Requests Accept TCP Marked As TLS Force Remote TLS Connection Reuse Remove Headers in 180 Responses Allow Large UDP Packets Use Cancel Body In ACK Forward Cancel BodyPreserve RFC 2543 Hold Open Port 6891 For File Transfer Allow RFC 2069 AuthenticationConvert Escaped Whitespaces in URIs Strip ICE Attributes Keep User-Agent Header When Acting as B2BUAPorts and the maddr Attribute Timeout for SIP over TCP/TLS Session timerSessions and Media Session Conﬁguration Allowed number of concurrent sessions Media ConﬁgurationLimitation of sender of media streams Limitation of RTP Codecs Type CodecsName This Codec Is Allowed Music on Hold Redirection Local RingbackLocal Ringback Played at Call Transfer Ring Tone for Local Ringback Maximum timeout for Invite requests Default timeout for Invite requestsRequests SIP blacklist interval Remote SIP Connectivity Base retransmission timeout for SIP requestsMaximum number of retransmissions for Invite requests Maximum number of retransmissions for non-INVITE requests Stun server Stun ServerStun server IP addresses Stun ports Remote NAT Traversal Remote Clients Signaling ForwardingRemote NAT traversal IP Address for Remote Clients NAT timeout for TCP NAT timeout for UDPForward Signaling from IP Address NAT keepalive method SIP Methods SIP Trafﬁc Trafﬁc To MethodAllow Auth Sender IP Filter Rules FilteringFrom Network Action Default Policy For SIP Requests Content TypesContent Type Allow Header Filter Rules Local Registrar Default Header Filter PolicyLocal SIP Domains Domain Local SIP User Database Authentication Name Authentication and AccountingRegister From SIP User Database Authentication settings Use P-Asserted-Identity Asserted-IdentityTrusted Domains Network Radius Accounting Dial PlanUse Dial Plan Emergency Number Reg Expr Matching From Header Preﬁx Matching Request-URIHead Tail Min. Tail Forward To Subno Replacement URI Dial Plan Forward To Request-URIAdd Preﬁx Enum Root Method Methods in Dial PlanRegister in Dial Plan Enum Root Routing DNS Override For SIP Requests SIP Routing Order WeightRelay To Port Routing Function Class 3xx Message Processing Requests To User Static RegistrationsAlso Forward To User Always handle Refer locally Local Refer HandlingFor clients not supporting Refer Sip/sips For dialogs with speciﬁed From URI For clients not supporting replacesFor dialogs with speciﬁed User-Agent header From URIs For Which Refer is Handled Locally Alias User RoutingRestrict Incoming Callers Send To Voice Mail ForwardAction Voice Mail Server From Domain Outbound ProxyRequest-URI Domain Domain or IP Address Gateway Tel URIs Active Sessions Registrar and Session StatusMonitored SIP Servers Monitored SIP server Registered UsersMonitored SIP server status Registered from Packet Capture ToolsNetwork Interface Selection IP Address Selection Tools Any Icmp Collect data Check NetworkCheck Network Test ResultsPage Tools 222 DMZ type Firewall and Client ConﬁgurationSIP over UDP SIP over TCP/TLS SIP clients DMZ/LAN type Standalone type SIP clients Part IV Com VCX IP Telecommuting Module Serial Console Page Connecting to the serial console Basic AdministrationMain Menu Command line interface Set passwordExit admin Wipe email logs Deactivate other interfaces Physical device name Conﬁgure from multiple computers Conﬁgure from a single computer Password Wipe email logs Exit admin Set password Basic Administration 236 Command Reference Command Line ReferenceHelp and Troubleshooting Modifying Tables Load-factory List-tablesModify-row Revert-edits Table Deﬁnitions Conﬁg.allowviainterface Conﬁg.allowconﬁgConﬁg.authlogclass Conﬁg.httpservers Conﬁg.authenticationConﬁg.httpsservers Conﬁg.mgmtlogclass Fent.alwaysfent Failover.ifacerefhostsFentalwaysfentexceptions Fentalwaysfentinterfaces Field Name Field Type Explanation Enabled OnOffToggle Fent.mapsignaladdressFent.fentkeepalive Fent.mediarelease ﬁrewall.blindroutepolicy ﬁrewall.defaultpolicyﬁrewall.broadcastlogclass ﬁrewall.dhcplogclass ﬁrewall.ownlogclass ﬁrewall.networkgroupsﬁrewall.pingpolicy ﬁrewall.policylogclass ﬁrewall.servicesﬁrewall.spooﬁnglogclass ﬁrewall.timeclasses Idsips.predeﬁnedipsrules Idsips.active Ipsec.cryptodef Idsips.ratelimitedipsIpsec.espproposals Ipsec.espahlogclass Ipsec.ikeproposals Ipsec.ikelogclassIpsec.ipsecnets Ipsec.nattkeepalive Ipsec.plutoverboselogclass Ipsec.plutologclassIpsec.radiusauthserver Field Name Field Type Ipsec.userauthlogclass Ipsec.tunnelednetsIpsec.x509cacerts Ipsec.x509cert Misc.conntracktimeoutsMisc.dnsservers Misc.dyndns Misc.fversion Misc.dyndnsnameMisc.ntpservers Field Name Field Type Explanation DomainName Misc.unitname Monitor.cpuloadlevelalarmMisc.usentp Monitor.emailalertlogclass Monitor.radiuserrorslogclass Monitor.memorylevelalarmMonitor.hardwarelogclass Monitor.logclasses Monitor.snmpagentaddress Monitor.siplevelalarmsMonitor.snmpagentlogclass Monitor.snmpmanagementstations Monitor.snmpcontactpersonMonitor.snmpnodelocation Monitor.snmppacketlogclass Monitor.snmpv3access Monitor.snmpv1v2caccessMonitor.snmptrapsending Monitor.snmpv1v2cauth Monitor.syslogservers Network.extradefaultgatewaysMonitor.watchdogs Network.aliasaddresses Network.localnets Network.interfacesNetwork.pppoe Network.routes Network.routetestserversNetwork.vlans Field Name Field Type Explanation Server DnsIpAddress Pptp.pptpenable Password.adminusersPptp.grelogclass Pptp.pptplogclass Pptp.pptpusers Pptp.pptpserveripPptp.pptpneglogclass Field Name Field Type Explanation PPTPOwnIpReference Qos.classes Qos.bandwidths Qos.ingressdefaultqueueing Qos.egressdefaultqueueingQos.egressqueueing Qos.sipcac Qos.ingressqueueingQos.status Qos.tagging Sip.active Sip.acceleratedtlsSip.addexpireheader Sip.allowedcodecs Sip.authmethods Sip.defaultgatewaySip.b2buaofferfromtemplate Sip.codecﬁltering Sip.externradiusdb Sip.emergencySip.externalrelay Field Name Field Type Explanation DnsIpAddress Sip.ﬁxﬁletransferport Sip.forwardcancelbodySip.forcemodify Sip.forwardtoheader Sip.headerﬁlterrules Sip.headerﬁlterdefaultSip.ignoreuriportwhenmaddr Field Name Field Type Explanation Action Sipﬁlteractionsel Sip.lcscompanion Sip.largeudpSip.listen Sip.localdomains Sip.looseusernamecheck Sip.looserefertoSip.lrtrue Sip.mediaencryptionpolicy Sip.mediaencryptionsuite Sip.mediaencryptionsettingsSip.mediaports Field Name Field Type Explanation Portslower PortNumber Sip.mediarestriction Sip.mediatimeoutsSip.message Sip.mfull Sip.mimetypes Sip.optiontimeoutSip.monitorserver Sip.musiconhold Sip.outboundproxy Field Name Field Type Explanation Timeout OptionTimeoutSip.percent20towhitespace Sip.preserve2543hold Sip.recurseon3xxinb2bua Sip.radiusacctSip.registrarlimits Sip.relayrules Sip.replyconﬁg Sip.removeviaSip.rewritetoforregisterindp Sip.ringback Sip.routingorder Sip.routeusesportSip.rroutealways Sip.rrouteoutbound Sip.siperrorslogclass Sip.signaladdressfordestinationSip.sessionlimits Sip.sipalias Sip.siplicenselogclass Sip.sipsignalinglogclassSip.sipmedialogclass Sip.sipmessagelogclass Sip.sttype Sip.tcptimeoutSip.stripiceattributes Sip.surroundings Sip.tlscacerts Sip.tlssettingsSip.tlsclientcfg Sip.tlsservercfg Sip.trusteddomain Sip.transactionconﬁgSip.uriencoding Field Name Field Type Explanation Uriencodingsel Sipswitch.accounts Sip.usecancelbodyinackSipswitch.b2buatransferenable Sip.uaregister Sipswitch.dialplan Sipswitch.b2buatransferfromuserSipswitch.dialplanenable Field Name Field Type Explanation User AliasAlias Sipswitch.enumroot Sipswitch.dialplanmethodsSipswitch.forwardto Field Name Field Type Explanation Enabled Fallbacksel Sipswitch.requestfrom Sipswitch.incomingunauthSipswitch.requestto Field Name Field Type Explanation Url SipWildcardUrl Sipswitch.users Sipswitch.userrouting Userdb.radiuslocalendpoint Sipswitch.voicemailUserdb.radiusservers Voipsm.voipsm AdminTypeSel AdminPasswordField Types Voipsm.voipsmdomains AliasAlias AdminUserAliasIpReference AliasUser AuthData CertReference CaReferenceCryptoDefReference DepUsableVlanInterface DnsDynIpAddress DnsDynIpNetworkInterface DnsDynIpOtherHost DyndnsServiceSel DyndnsPasswordEnumReference EspCryptoReference FirewallLogclassReference InviteRetransmitCount InterfaceSelIpsRuleName IpsecAuthSel LogclassReference IsakmpSALifeMaxMessageSizeInteger MaxReg OnOffButton NonemptyStringOnOffToggle OnOffToggleOn OptComment OptDnsAutoRuntimeReachableHost OptDnsIpAddressOptDSCPInteger OptDepOwnIpReference OptIcmpRangeList OptForwardToReferenceOptIpsecNetReference OptIpsecPeerReference OptServicesReference OptPasswordOptPercent OptPercentFloat OptSipUserDomain OptionTimeoutOptString OptTimeclassReference RegTimeout PptpPasswordPPTPOwnIpReference Percent SipUserDomainDefaultAll SessionTimeoutSipUserPassword SIPRadiusSel TimerAFloat SnmpPasswordSipWildcardUrl SubGroup Accountvoicemailsel Accounttypesel Autonegsel AddexpireheaderselBlindsel Bypasstransportsel Dpactionsel ConﬁgauthselFallbacksel Fentkeepalivesel Fwtypesel FunctionselHitsnumber Mediaencryptionsuitesel Policysel PingpolicyselPqueuesel Qostypesel RegexpwithAt Rfc2782weightRestfuncsel Rfc2782priority Sipﬁlteractionsel SipauthdirselSipfunctionsel Sipsel Snmpv3authsel SnmptrapversionselSnmpv3privacysel Sttypesel Tlsclientmethods SysloglevelselTlsservermethods Trusteddomaintransportsel TlsconfselUriencodingsel Voipsmmethodsel Add and change ﬁrewall rules CLI command examplesWindownumber Apply a conﬁguration Part V. Appendices Page Appendix A. More About SIP Why use SIP?SIP Protocol SIP and Firewalls Managing Your Own SIP DomainConﬁguring the 3Com VCX IP Telecommuting Module Page Conﬁguring the DNS Server Conﬁguring the PBXConﬁguring the SIP Clients SIP in 3Com VCX IP Telecommuting Module SIP SessionsEstablishing a SIP session Contact SIP Packet Headers Via Content-TypeRecord-Route Route Appendix A. More About SIP 328 Network troubleshooting Appendix B. TroubleshootingNo trafﬁc shown in the log Trafﬁc discarded as spoofed SIP users can’t register on the Telecommuting Module SIP troubleshootingSIP users can’t register through the Telecommuting Module SIP Trunking calls via SIP operator Call is established, but there is no voice Administration troubleshooting Log Messages SIP errorsSIP send failure -1 on socket -1 event number Destination IP addressport is known bad. Skipping Starting SIP TCP server at port IPsec key negotiationsStarting SIP UDP server at port Stopped SIP TCP server Conﬁguration server logins Name Port/protocol Description List of the most important reserved ports WWW Cmip Krcmd Kerberos encrypted remote shell -kfall Type Name List of Icmp types Type Name Reference Icmp codesIcmp type Name Code Description Unreachable for Type Protocol number Keyword Internet protocols and their numbers IP intervals Set bits Mask IP address class Class IP in- tervals Reserved IP addressesPage ARP Appendix D. Deﬁnitions of terms DMZ 349 Https NAT Nntp 353 PPP SIP Uucp 357 Appendix D. Deﬁnitions of terms 358 Software developed by Peter Åstrand Appendix E. License ConditionsBSD derived licenses Terms Software developed by Carnegie Mellon University Software developed by Cisco Systems Software developed by Gregory M Christy Software developed by Digital Equipment Corporation Software developed by Jason Downs Dhcp license Software developed by Brian Gladman GNU General Public License GPL Software developed by Google, IncVersion 2, June Preamble GNU General Public License 367 368 No Warranty IBM Public License Software developed in the GIE Dyade cooperation Software developed by Ingate Systems Software developed by Tommi Komulainen USA GNU Library General Public License Lgpl v 374 GNU Library General Public License 376 377 Page 379 380 Version 2.1, February GNU Lesser General Public License Lgpl v 382 GNU Lesser General Public License 384 385 386 Page Glibc Tzdata 2006a 388 Software in the GNU C distribution Appendix E. License Conditions Appendix E. License Conditions 392 More software in the GNU C distribution 394 License exceptions for gcc/libgcc2.c License for lilo License exceptions for libstdc++License Disclaimer Software developed by Paul Mackerras Software developed at M I T Software developed by Pedro Roque Marques Part 1 CMU/UCD copyright notice BSD like License for Net-SNMP Part 4 Sun Microsystems, Inc. copyright notice BSD Part 5 Sparta, Inc copyright notice BSD Part 6 Cisco/BUPTNIC copyright notice BSD License for OpenSSH License for NTP 404 Appendix E. License Conditions 406 407 Snprintf replacement Copyright Patrick Powell 409 License for OpenSSL License for OpenSWAN Release Derived Year Owner GPL- compatible? From Python license Terms and Conditions for Accessing or Otherwise Using Python Beopen Python Open Source License Agreement Version Cnri License Agreement for Python CWI License Agreement for Python 0.9.0 Through License for Python Imaging Library License for Rdisc More software developed by RSA Data Security, Inc Software developed by RSA Data Security, Inc License for SSL Software developed by Sun Microsystems, Inc License for stunnel License for Sun RPC More software developed by Sun Microsystems, Inc Software developed by Trusted Information Systems, Inc License for termcap Software developed by Paul Vixie Software developed by Andrew Tridgell Software developed by Rayan S Zachariassen Vovida Software License vVovida Software License, Version Software developed at University of California License for zlib Openswan-kernel 427 Appendix E. License Conditions Appendix E. License Conditions Readlink Appendix E. License Conditions 430 Solve Problems Online Register Your Product to Gain Service BeneﬁtsPurchase Extended Warranty Professional Services Appendix F. Obtaining Support for Your 3Com Products Contact Us Access Software DownloadsTelephone Technical Support and Repair Asia, Paciﬁc Rim Telephone Technical Support and Repair Country Telephone Number Latin America Telephone Technical Support and Repair US and Canada Telephone Technical Support and Repair Index For administration Conﬁguration logins From the Telecommuting Module MIBs