Administration 118 | HP VCX Software instruction

Chapter 7. Administration

118

Image 126

HP VCX Software manual Administration 118

Contents

3Com Telecommuting Module VersionPage United States Government Legend Page Table of Contents Page Part I. Introduction to 3Com VCX IP Telecommuting Module Page What is a Telecommuting Module? Introduction to 3Com VCX IP Telecommuting ModuleConﬁguration alternatives DMZ Conﬁguration DMZ/LAN Conﬁguration Quick guide to 3Com VCX IP Telecommuting Module installation Standalone Conﬁguration Introduction to 3Com VCX IP Telecommuting Module About settings in 3Com VCX IP Telecommuting Module Introduction to 3Com VCX IP Telecommuting Module Installation with magic ping Installing 3Com VCX IP Telecommuting ModuleInstallation Installation with a serial cablePage Page Page Page Installation with a diskette Page Page Turning off a Telecommuting Module Remember to lock up the Telecommuting Module Installing 3Com VCX IP Telecommuting Module Conﬁguring 3Com VCX IP Telecommuting Module Logging onLog on again Navigation Log outSite Map Basic Conﬁguration AdministrationSIP Services Network Conﬁguration Failover Quality of ServiceOverview of conﬁguration Virtual Private Networks Preliminary and permanent conﬁguration Page IP address Mask/Bits Name queries in 3Com VCX IP Telecommuting Module No. of computers Mask BitsPage Conﬁguring 3Com VCX IP Telecommuting Module Part II. How To Page How To Conﬁgure SIP DMZ Telecommuting Module, SIP server on the WANNetworks and Computers Surroundings Basic Settings Interoperability Filtering Routing DMZ Telecommuting Module, SIP server on the LAN Save/Load Conﬁguration Networks and Computers Basic Settings Routing Standalone Telecommuting Module, SIP server on the WAN Basic Settings Filtering Client Settings Standalone Telecommuting Module, SIP server on the LAN Basic Settings Interoperability DMZ/LAN Telecommuting Module, SIP server on the WAN Basic Settings Filtering DMZ/LAN Telecommuting Module, SIP server on the LAN Interoperability Filtering LAN Telecommuting Module Surroundings Filtering Remote SIP Connectivity Firewall How To Conﬁgure SIP How To Conﬁgure Advanced SIP Outgoing Calls Show One Number When Calling Show Different Numbers When Calling Incoming Calls Page Authentication by Accounts a.k.a SIP Trunk via SIP accounts Page Page Page Incoming Calls Page Multiple Operators Least Cost Routing Page Multiple PBXs How To Conﬁgure Advanced SIP How To Conﬁgure Advanced SIP Page Page Page Page General Basic ConﬁgurationBasic Conﬁguration Name of this Telecommuting Module Default domain IP Policy DNS ServersPolicy For Ping To Your 3Com VCX IP Telecommuting Module Save Access ControlCancel Look up all IP addresses again User Authentication For Web Interface Access Conﬁguration Allowed Via InterfaceConﬁguration Transport Conﬁguration via Http Conﬁguration via Https Conﬁguration Computers Conﬁguration via SSHDNS Name Or Network Address Range Network addressNetmask/Bits Via IPsec Peer Radius Port Radius ServersRadius server Secret Identiﬁer Contact IP AddressStatus for Radius Servers Received replies ScoreSent requests Consecutive sends Conﬁguration of a Radius server Value Contact person Snmp v1 and v2cTelecommuting Module IP address to respond to Snmp requests Node location Snmp Access via SNMPv1 and SNMPv2cAccess via SNMPv3 Community Snmp Traps PasswordAuthentication User Trap receiver Resource MonitoringTrap sending function Version SIP User Registrations Trap Levels Download the 3Com MIBSIP Sessions Trap Levels CPU Load Trap Levels DynDNS General Conﬁguration Dynamic DNS updateDynDNS service Use DynDNS Wildcard hostnames Ofﬂine URL redirection IP address for updatesUser, Smtp Server Username Smtp server DNS Names to Update at DynDNSSmtp server is backup DNS Name Name CertiﬁcatesPrivate Certiﬁcates Certiﬁcate Create certiﬁcate or certiﬁcate request CA Certiﬁcates Timeouts AdvancedCA Certiﬁcate Timeout for established TCP connections Timeout for one-way UDP connectionsTimeout for two-way UDP connections Timeout for Icmp connections DMZ/LAN Conﬁguration Telecommuting Module Type conﬁguration Current Telecommuting Module TypeChange Telecommuting Module Type to Change type Save/Load Conﬁguration AdministrationDuration of limited test mode Test Preliminary Conﬁguration Backup Show Message About Unapplied ChangesApply conﬁguration Save/Load CLI Command File Abort All Edits Show ConﬁgurationRevert to Old Conﬁgurations Reload Factory Conﬁguration User Administration Password For the ’admin’ AccountOld password Other Accounts New password, Conﬁrm passwordChange administration password Account Type Currently Logged In Administrators Log Out UpgradeUpgrade Step Abort upgrade Try the upgradeAccept upgrade Table Look Edit Column Date and Time Change Time Zone Time Change Date and Time ManuallyDate Set date and time manually NTP Servers To Use If NTP Is Enabled Change Date and Time With NTPSynchronize time with NTP Restart the SIP Module Reboot Your 3Com VCX IP Telecommuting ModuleRestart Automatic Restart of the SIP Module Administration Administration 118 Network Conﬁguration Networks and Computers Name SubgroupLower Limit Delete Row Upper LimitInterface/VLAN Create Priority Default GatewayMain Default Gateways Interface Policy For Packets From Unused Gateways Gateway Reference Hosts Interface Network Interface 1 Physical deviceInterface name Directly Connected Networks Obtain IP Address Dynamically Vlan Id AliasBroadcast address Vlan Name Static Routing Routed network Router Vlan Named VLANs Interface Status Interface Status Dhcp Client Status PPPoE Client Status Authentication PPPoEKeep Alive Surroundings LCP echo-request intervalLog class for PPPoE negotiations Data Interfaces NetworkAdditional Negotiators Select a data interface here Network Conﬁguration 136 Search the Log LoggingDisplay Log Display log Support Report Packet Selection Protocol/Port Selection Packet Type SelectionIP Address Selection All IP protocols Icmp SIP Methods SIP Packet SelectionCall-ID IP addresses Time Limits Show This Export the LogShow newest at top Log Clear form Display Load RST Direction Packet LoadTime Period Unit Value Diagram Heading DiagramDiagram Size View diagram Log class for spoofed packets Inbound TrafﬁcLog class for non-SIP packets Log class for broadcast packets Log class for Snmp errors Log class for email errorsLog class for Radius errors Log class for Dhcp requests Log class for IPsec key negotiation debug messages VPN EventsLog class for IPsec key negotiations Log class for ESP packets SIP Events Other Log Classes Email AddressLocal Log Log Sending Syslog Smtp Server Status for Outbound EmailSyslog Servers Reverts the ﬁelds to the previous conﬁguration 157 Logging 158 Basic Settings SIP ServicesAdministration of SIP SIP Module Transport Additional SIP Signaling PortsProvisioning Relay Comment SIP Media Port Range Public IP address for NATed Telecommuting ModuleSIP Servers To Monitor SIP Logging Server Log class for SIP signaling Interoperability Loose RoutingRelaxed Refer-To SIP Server Remove Via HeadersTranslation Exceptions Except this from translation Expires Header Force TranslationAlways Translate This URI Encoding Signaling Order of Re-INVITEs Loose Username CheckUser Matching Force Record-Route for Outbound Requests Accept RTP/AVP With sdescriptionsTransmit RTP/AVP With sdescriptions Force Record-Route for All Requests Force Remote TLS Connection Reuse Accept TCP Marked As TLS Allow Large UDP Packets Remove Headers in 180 Responses Forward Cancel Body Use Cancel Body In ACKPreserve RFC 2543 Hold Allow RFC 2069 Authentication Open Port 6891 For File TransferConvert Escaped Whitespaces in URIs Keep User-Agent Header When Acting as B2BUA Strip ICE AttributesPorts and the maddr Attribute Sessions and Media Session timerTimeout for SIP over TCP/TLS Session Conﬁguration Media Conﬁguration Allowed number of concurrent sessionsLimitation of sender of media streams Limitation of RTP Codecs Name CodecsType This Codec Is Allowed Local Ringback Played at Call Transfer Local RingbackMusic on Hold Redirection Ring Tone for Local Ringback Requests Default timeout for Invite requestsMaximum timeout for Invite requests SIP blacklist interval Maximum number of retransmissions for Invite requests Base retransmission timeout for SIP requestsRemote SIP Connectivity Maximum number of retransmissions for non-INVITE requests Stun server IP addresses Stun ServerStun server Stun ports Remote NAT traversal Remote Clients Signaling ForwardingRemote NAT Traversal IP Address for Remote Clients Forward Signaling from IP Address NAT timeout for UDPNAT timeout for TCP NAT keepalive method SIP Trafﬁc SIP Methods Allow MethodTrafﬁc To Auth From Network FilteringSender IP Filter Rules Action Content Type Content TypesDefault Policy For SIP Requests Allow Header Filter Rules Default Header Filter Policy Local RegistrarLocal SIP Domains Local SIP User Database Domain Authentication and Accounting Authentication NameRegister From Authentication settings SIP User Database Trusted Domains Asserted-IdentityUse P-Asserted-Identity Network Use Dial Plan Dial PlanRadius Accounting Emergency Number Matching From Header Reg Expr Head Matching Request-URIPreﬁx Tail Forward To Min. Tail Replacement URI Subno Dial Plan Add Preﬁx Request-URIForward To Enum Root Methods in Dial Plan MethodRegister in Dial Plan Routing Enum Root DNS Override For SIP Requests Relay To WeightSIP Routing Order Port Class 3xx Message Processing Routing Function Also Forward To Static RegistrationsRequests To User User For clients not supporting Refer Local Refer HandlingAlways handle Refer locally Sip/sips For dialogs with speciﬁed User-Agent header For clients not supporting replacesFor dialogs with speciﬁed From URI From URIs For Which Refer is Handled Locally User Routing AliasRestrict Incoming Callers Forward Send To Voice MailAction Voice Mail Server Request-URI Domain Outbound ProxyFrom Domain Domain or IP Address Tel URIs Gateway Registrar and Session Status Active SessionsMonitored SIP Servers Monitored SIP server status Registered UsersMonitored SIP server Registered from Network Interface Selection ToolsPacket Capture IP Address Selection Tools Any Icmp Check Network Check NetworkCollect data Test ResultsPage Tools 222 SIP over UDP Firewall and Client ConﬁgurationDMZ type SIP over TCP/TLS DMZ/LAN type SIP clients Standalone type SIP clients Part IV Com VCX IP Telecommuting Module Serial Console Page Basic Administration Connecting to the serial consoleMain Menu Exit admin Set passwordCommand line interface Wipe email logs Physical device name Deactivate other interfaces Conﬁgure from a single computer Conﬁgure from multiple computers Password Wipe email logs Set password Exit admin Basic Administration 236 Command Line Reference Command ReferenceHelp and Troubleshooting Modifying Tables Modify-row List-tablesLoad-factory Revert-edits Table Deﬁnitions Conﬁg.allowconﬁg Conﬁg.allowviainterfaceConﬁg.authlogclass Conﬁg.httpsservers Conﬁg.authenticationConﬁg.httpservers Conﬁg.mgmtlogclass Fentalwaysfentexceptions Failover.ifacerefhostsFent.alwaysfent Fentalwaysfentinterfaces Fent.fentkeepalive Fent.mapsignaladdressField Name Field Type Explanation Enabled OnOffToggle Fent.mediarelease ﬁrewall.broadcastlogclass ﬁrewall.defaultpolicyﬁrewall.blindroutepolicy ﬁrewall.dhcplogclass ﬁrewall.networkgroups ﬁrewall.ownlogclassﬁrewall.pingpolicy ﬁrewall.spooﬁnglogclass ﬁrewall.servicesﬁrewall.policylogclass ﬁrewall.timeclasses Idsips.active Idsips.predeﬁnedipsrules Ipsec.espproposals Idsips.ratelimitedipsIpsec.cryptodef Ipsec.espahlogclass Ipsec.ipsecnets Ipsec.ikelogclassIpsec.ikeproposals Ipsec.nattkeepalive Ipsec.radiusauthserver Ipsec.plutologclassIpsec.plutoverboselogclass Field Name Field Type Ipsec.tunnelednets Ipsec.userauthlogclassIpsec.x509cacerts Misc.dnsservers Misc.conntracktimeoutsIpsec.x509cert Misc.dyndns Misc.ntpservers Misc.dyndnsnameMisc.fversion Field Name Field Type Explanation DomainName Misc.usentp Monitor.cpuloadlevelalarmMisc.unitname Monitor.emailalertlogclass Monitor.hardwarelogclass Monitor.memorylevelalarmMonitor.radiuserrorslogclass Monitor.logclasses Monitor.siplevelalarms Monitor.snmpagentaddressMonitor.snmpagentlogclass Monitor.snmpnodelocation Monitor.snmpcontactpersonMonitor.snmpmanagementstations Monitor.snmppacketlogclass Monitor.snmptrapsending Monitor.snmpv1v2caccessMonitor.snmpv3access Monitor.snmpv1v2cauth Monitor.watchdogs Network.extradefaultgatewaysMonitor.syslogservers Network.aliasaddresses Network.interfaces Network.localnetsNetwork.pppoe Network.vlans Network.routetestserversNetwork.routes Field Name Field Type Explanation Server DnsIpAddress Pptp.grelogclass Password.adminusersPptp.pptpenable Pptp.pptplogclass Pptp.pptpneglogclass Pptp.pptpserveripPptp.pptpusers Field Name Field Type Explanation PPTPOwnIpReference Qos.bandwidths Qos.classes Qos.egressdefaultqueueing Qos.ingressdefaultqueueingQos.egressqueueing Qos.status Qos.ingressqueueingQos.sipcac Qos.tagging Sip.addexpireheader Sip.acceleratedtlsSip.active Sip.allowedcodecs Sip.b2buaofferfromtemplate Sip.defaultgatewaySip.authmethods Sip.codecﬁltering Sip.externalrelay Sip.emergencySip.externradiusdb Field Name Field Type Explanation DnsIpAddress Sip.forcemodify Sip.forwardcancelbodySip.ﬁxﬁletransferport Sip.forwardtoheader Sip.ignoreuriportwhenmaddr Sip.headerﬁlterdefaultSip.headerﬁlterrules Field Name Field Type Explanation Action Sipﬁlteractionsel Sip.listen Sip.largeudpSip.lcscompanion Sip.localdomains Sip.lrtrue Sip.looserefertoSip.looseusernamecheck Sip.mediaencryptionpolicy Sip.mediaports Sip.mediaencryptionsettingsSip.mediaencryptionsuite Field Name Field Type Explanation Portslower PortNumber Sip.message Sip.mediatimeoutsSip.mediarestriction Sip.mfull Sip.monitorserver Sip.optiontimeoutSip.mimetypes Sip.musiconhold Sip.percent20towhitespace Field Name Field Type Explanation Timeout OptionTimeoutSip.outboundproxy Sip.preserve2543hold Sip.registrarlimits Sip.radiusacctSip.recurseon3xxinb2bua Sip.relayrules Sip.rewritetoforregisterindp Sip.removeviaSip.replyconﬁg Sip.ringback Sip.rroutealways Sip.routeusesportSip.routingorder Sip.rrouteoutbound Sip.sessionlimits Sip.signaladdressfordestinationSip.siperrorslogclass Sip.sipalias Sip.sipmedialogclass Sip.sipsignalinglogclassSip.siplicenselogclass Sip.sipmessagelogclass Sip.stripiceattributes Sip.tcptimeoutSip.sttype Sip.surroundings Sip.tlsclientcfg Sip.tlssettingsSip.tlscacerts Sip.tlsservercfg Sip.uriencoding Sip.transactionconﬁgSip.trusteddomain Field Name Field Type Explanation Uriencodingsel Sipswitch.b2buatransferenable Sip.usecancelbodyinackSipswitch.accounts Sip.uaregister Sipswitch.dialplanenable Sipswitch.b2buatransferfromuserSipswitch.dialplan Field Name Field Type Explanation User AliasAlias Sipswitch.forwardto Sipswitch.dialplanmethodsSipswitch.enumroot Field Name Field Type Explanation Enabled Fallbacksel Sipswitch.requestto Sipswitch.incomingunauthSipswitch.requestfrom Field Name Field Type Explanation Url SipWildcardUrl Sipswitch.userrouting Sipswitch.users Userdb.radiusservers Sipswitch.voicemailUserdb.radiuslocalendpoint Voipsm.voipsm Field Types AdminPasswordAdminTypeSel Voipsm.voipsmdomains AliasIpReference AliasUser AdminUserAliasAlias AuthData CryptoDefReference DepUsableVlanInterface DnsDynIpAddress CaReferenceCertReference DnsDynIpNetworkInterface DnsDynIpOtherHost EnumReference DyndnsPasswordDyndnsServiceSel EspCryptoReference FirewallLogclassReference IpsRuleName InterfaceSelInviteRetransmitCount IpsecAuthSel MaxMessageSizeInteger IsakmpSALifeLogclassReference MaxReg OnOffToggle NonemptyStringOnOffButton OnOffToggleOn OptDSCPInteger OptDnsAutoRuntimeReachableHost OptDnsIpAddressOptComment OptDepOwnIpReference OptIpsecNetReference OptForwardToReferenceOptIcmpRangeList OptIpsecPeerReference OptPercent OptPasswordOptServicesReference OptPercentFloat OptString OptionTimeoutOptSipUserDomain OptTimeclassReference PPTPOwnIpReference PptpPasswordRegTimeout Percent SipUserPassword SessionTimeoutSipUserDomainDefaultAll SIPRadiusSel SipWildcardUrl SnmpPasswordTimerAFloat SubGroup Accounttypesel Accountvoicemailsel Blindsel AddexpireheaderselAutonegsel Bypasstransportsel Fallbacksel ConﬁgauthselDpactionsel Fentkeepalivesel Hitsnumber FunctionselFwtypesel Mediaencryptionsuitesel Pqueuesel PingpolicyselPolicysel Qostypesel Restfuncsel Rfc2782weightRegexpwithAt Rfc2782priority Sipfunctionsel SipauthdirselSipﬁlteractionsel Sipsel Snmpv3privacysel SnmptrapversionselSnmpv3authsel Sttypesel Sysloglevelsel TlsclientmethodsTlsservermethods Uriencodingsel TlsconfselTrusteddomaintransportsel Voipsmmethodsel CLI command examples Add and change ﬁrewall rulesWindownumber Apply a conﬁguration Part V. Appendices Page Why use SIP? Appendix A. More About SIPSIP Protocol Managing Your Own SIP Domain SIP and FirewallsConﬁguring the 3Com VCX IP Telecommuting Module Page Conﬁguring the PBX Conﬁguring the DNS ServerConﬁguring the SIP Clients SIP Sessions SIP in 3Com VCX IP Telecommuting ModuleEstablishing a SIP session SIP Packet Headers Contact Record-Route Content-TypeVia Route Appendix A. More About SIP 328 No trafﬁc shown in the log Appendix B. TroubleshootingNetwork troubleshooting Trafﬁc discarded as spoofed SIP users can’t register through the Telecommuting Module SIP troubleshootingSIP users can’t register on the Telecommuting Module SIP Trunking calls via SIP operator Administration troubleshooting Call is established, but there is no voice SIP send failure -1 on socket -1 event number SIP errorsLog Messages Destination IP addressport is known bad. Skipping Starting SIP UDP server at port IPsec key negotiationsStarting SIP TCP server at port Stopped SIP TCP server Conﬁguration server logins List of the most important reserved ports Name Port/protocol Description WWW Cmip Krcmd Kerberos encrypted remote shell -kfall List of Icmp types Type Name Icmp codes Type Name ReferenceIcmp type Name Code Description Unreachable for Type Internet protocols and their numbers Protocol number Keyword IP intervals Set bits Mask IP address class Reserved IP addresses Class IP in- tervalsPage Appendix D. Deﬁnitions of terms ARP DMZ 349 Https NAT Nntp 353 PPP SIP Uucp 357 Appendix D. Deﬁnitions of terms 358 BSD derived licenses Appendix E. License ConditionsSoftware developed by Peter Åstrand Terms Software developed by Carnegie Mellon University Software developed by Gregory M Christy Software developed by Cisco Systems Software developed by Digital Equipment Corporation Dhcp license Software developed by Jason Downs Software developed by Brian Gladman Version 2, June Software developed by Google, IncGNU General Public License GPL Preamble GNU General Public License 367 368 No Warranty IBM Public License Software developed by Ingate Systems Software developed in the GIE Dyade cooperation Software developed by Tommi Komulainen GNU Library General Public License Lgpl v USA 374 GNU Library General Public License 376 377 Page 379 380 GNU Lesser General Public License Lgpl v Version 2.1, February 382 GNU Lesser General Public License 384 385 386 Page Glibc Tzdata 2006a 388 Software in the GNU C distribution Appendix E. License Conditions Appendix E. License Conditions 392 More software in the GNU C distribution 394 License exceptions for gcc/libgcc2.c License License exceptions for libstdc++License for lilo Disclaimer Software developed by Paul Mackerras Software developed by Pedro Roque Marques Software developed at M I T License for Net-SNMP Part 1 CMU/UCD copyright notice BSD like Part 4 Sun Microsystems, Inc. copyright notice BSD Part 5 Sparta, Inc copyright notice BSD Part 6 Cisco/BUPTNIC copyright notice BSD License for NTP License for OpenSSH 404 Appendix E. License Conditions 406 407 Snprintf replacement Copyright Patrick Powell 409 License for OpenSSL License for OpenSWAN Python license Release Derived Year Owner GPL- compatible? From Terms and Conditions for Accessing or Otherwise Using Python Beopen Python Open Source License Agreement Version Cnri License Agreement for Python License for Python Imaging Library CWI License Agreement for Python 0.9.0 Through License for Rdisc Software developed by RSA Data Security, Inc More software developed by RSA Data Security, Inc License for SSL License for stunnel Software developed by Sun Microsystems, Inc More software developed by Sun Microsystems, Inc License for Sun RPC License for termcap Software developed by Trusted Information Systems, Inc Software developed by Andrew Tridgell Software developed by Paul Vixie Vovida Software License v Software developed by Rayan S ZachariassenVovida Software License, Version License for zlib Software developed at University of California Openswan-kernel 427 Appendix E. License Conditions Appendix E. License Conditions Readlink Appendix E. License Conditions 430 Purchase Extended Warranty Professional Services Register Your Product to Gain Service BeneﬁtsSolve Problems Online Appendix F. Obtaining Support for Your 3Com Products Telephone Technical Support and Repair Access Software DownloadsContact Us Asia, Paciﬁc Rim Telephone Technical Support and Repair Latin America Telephone Technical Support and Repair Country Telephone Number US and Canada Telephone Technical Support and Repair For administration Index Conﬁguration logins From the Telecommuting Module MIBs