Manuals / HP / Computer Equipment / Software

HP VCX Software manual Introduction to 3Com VCX IP Telecommuting Module

Models: VCX Software

1 446

Download 446 pages 4.55 Kb

Page 14

Chapter 1. Introduction to 3Com VCX IP Telecommuting Module

6

Image 14

HP VCX Software manual Introduction to 3Com VCX IP Telecommuting Module

Contents

3Com Telecommuting Module VersionPage United States Government Legend Page Table of Contents Page Part I. Introduction to 3Com VCX IP Telecommuting Module Page Conﬁguration alternatives What is a Telecommuting Module?Introduction to 3Com VCX IP Telecommuting Module DMZ Conﬁguration DMZ/LAN ConﬁgurationQuick guide to 3Com VCX IP Telecommuting Module installation Standalone ConﬁgurationIntroduction to 3Com VCX IP Telecommuting Module About settings in 3Com VCX IP Telecommuting Module Introduction to 3Com VCX IP Telecommuting Module Installation with magic ping Installing 3Com VCX IP Telecommuting ModuleInstallation Installation with a serial cablePage Page Page Page Installation with a diskette Page Page Turning off a Telecommuting Module Remember to lock up the Telecommuting ModuleInstalling 3Com VCX IP Telecommuting Module Log on again Conﬁguring 3Com VCX IP Telecommuting ModuleLogging on Site Map NavigationLog out Basic Conﬁguration AdministrationSIP Services Network ConﬁgurationFailover Quality of ServiceOverview of conﬁguration Virtual Private NetworksPreliminary and permanent conﬁguration Page IP address Mask/BitsName queries in 3Com VCX IP Telecommuting Module No. of computers Mask BitsPage Conﬁguring 3Com VCX IP Telecommuting Module Part II. How To Page Networks and Computers How To Conﬁgure SIPDMZ Telecommuting Module, SIP server on the WAN Surroundings Basic Settings InteroperabilityFiltering RoutingDMZ Telecommuting Module, SIP server on the LAN Save/Load ConﬁgurationNetworks and Computers Basic Settings Routing Standalone Telecommuting Module, SIP server on the WAN Basic Settings Filtering Client Settings Standalone Telecommuting Module, SIP server on the LANBasic Settings Interoperability DMZ/LAN Telecommuting Module, SIP server on the WAN Basic Settings Filtering DMZ/LAN Telecommuting Module, SIP server on the LAN Interoperability Filtering LAN Telecommuting Module Surroundings Filtering Remote SIP Connectivity Firewall How To Conﬁgure SIP How To Conﬁgure Advanced SIP Outgoing CallsShow One Number When Calling Show Different Numbers When Calling Incoming Calls Page Authentication by Accounts a.k.a SIP Trunk via SIP accounts Page Page Page Incoming Calls Page Multiple Operators Least Cost Routing Page Multiple PBXs How To Conﬁgure Advanced SIP How To Conﬁgure Advanced SIP Page Page Page Page General Basic ConﬁgurationBasic Conﬁguration Name of this Telecommuting ModulePolicy For Ping To Your 3Com VCX IP Telecommuting Module Default domain IP PolicyDNS Servers Save Access ControlCancel Look up all IP addresses againConﬁguration Transport User Authentication For Web Interface AccessConﬁguration Allowed Via Interface Conﬁguration via Http Conﬁguration via HttpsDNS Name Or Network Address Conﬁguration ComputersConﬁguration via SSH Range Network addressNetmask/Bits Via IPsec PeerRadius Port Radius ServersRadius server SecretStatus for Radius Servers IdentiﬁerContact IP Address Received replies ScoreSent requests Consecutive sendsConﬁguration of a Radius server ValueContact person Snmp v1 and v2cTelecommuting Module IP address to respond to Snmp requests Node locationSnmp Access via SNMPv1 and SNMPv2cAccess via SNMPv3 CommunitySnmp Traps PasswordAuthentication UserTrap receiver Resource MonitoringTrap sending function VersionSIP User Registrations Trap Levels Download the 3Com MIBSIP Sessions Trap Levels CPU Load Trap LevelsDynDNS General Conﬁguration Dynamic DNS updateDynDNS service Use DynDNSWildcard hostnames Ofﬂine URL redirection IP address for updatesUser, Smtp Server UsernameSmtp server DNS Names to Update at DynDNSSmtp server is backup DNS NameName CertiﬁcatesPrivate Certiﬁcates CertiﬁcateCreate certiﬁcate or certiﬁcate request CA Certiﬁcates CA Certiﬁcate TimeoutsAdvanced Timeout for established TCP connections Timeout for one-way UDP connectionsTimeout for two-way UDP connections Timeout for Icmp connectionsDMZ/LAN Conﬁguration Change Telecommuting Module Type to Telecommuting Module Type conﬁgurationCurrent Telecommuting Module Type Change type Save/Load Conﬁguration AdministrationDuration of limited test mode Test Preliminary ConﬁgurationApply conﬁguration BackupShow Message About Unapplied Changes Save/Load CLI Command File Abort All Edits Show ConﬁgurationRevert to Old Conﬁgurations Reload Factory ConﬁgurationOld password User AdministrationPassword For the ’admin’ Account Other Accounts New password, Conﬁrm passwordChange administration password Account TypeCurrently Logged In Administrators Log Out UpgradeUpgrade StepAbort upgrade Try the upgradeAccept upgrade Table LookEdit Column Date and Time Change Time ZoneTime Change Date and Time ManuallyDate Set date and time manuallySynchronize time with NTP NTP Servers To Use If NTP Is EnabledChange Date and Time With NTP Restart the SIP Module Reboot Your 3Com VCX IP Telecommuting ModuleRestart Automatic Restart of the SIP ModuleAdministration Administration 118 Network Conﬁguration Networks and ComputersLower Limit NameSubgroup Delete Row Upper LimitInterface/VLAN CreatePriority Default GatewayMain Default Gateways InterfacePolicy For Packets From Unused Gateways Gateway Reference HostsInterface name Interface Network Interface 1Physical device Directly Connected Networks Obtain IP Address DynamicallyVlan Id AliasBroadcast address Vlan NameStatic Routing Routed network RouterVlan Named VLANsInterface Status Interface StatusDhcp Client Status PPPoE Client StatusKeep Alive AuthenticationPPPoE Log class for PPPoE negotiations SurroundingsLCP echo-request interval Additional Negotiators Data InterfacesNetwork Select a data interface here Network Conﬁguration 136 Search the Log LoggingDisplay Log Display logSupport Report Packet SelectionProtocol/Port Selection Packet Type SelectionIP Address Selection All IP protocolsIcmp SIP Methods SIP Packet SelectionCall-ID IP addressesTime Limits Show newest at top Show ThisExport the Log Log Clear formDisplay Load RSTDirection Packet LoadTime Period UnitValue Diagram Heading DiagramDiagram Size View diagramLog class for spoofed packets Inbound TrafﬁcLog class for non-SIP packets Log class for broadcast packetsLog class for Snmp errors Log class for email errorsLog class for Radius errors Log class for Dhcp requestsLog class for IPsec key negotiation debug messages VPN EventsLog class for IPsec key negotiations Log class for ESP packetsSIP Events Other Local Log Log ClassesEmail Address Log Sending SyslogSyslog Servers Smtp ServerStatus for Outbound Email Reverts the ﬁelds to the previous conﬁguration 157 Logging 158 Basic Settings SIP ServicesAdministration of SIP SIP ModuleTransport Additional SIP Signaling PortsProvisioning Relay CommentSIP Servers To Monitor SIP Media Port RangePublic IP address for NATed Telecommuting Module SIP Logging ServerLog class for SIP signaling Relaxed Refer-To InteroperabilityLoose Routing SIP Server Remove Via HeadersTranslation Exceptions Except this from translationAlways Translate This Expires HeaderForce Translation URI Encoding User Matching Signaling Order of Re-INVITEsLoose Username Check Force Record-Route for Outbound Requests Accept RTP/AVP With sdescriptionsTransmit RTP/AVP With sdescriptions Force Record-Route for All RequestsForce Remote TLS Connection Reuse Accept TCP Marked As TLSAllow Large UDP Packets Remove Headers in 180 ResponsesPreserve RFC 2543 Hold Forward Cancel BodyUse Cancel Body In ACK Convert Escaped Whitespaces in URIs Allow RFC 2069 AuthenticationOpen Port 6891 For File Transfer Ports and the maddr Attribute Keep User-Agent Header When Acting as B2BUAStrip ICE Attributes Sessions and Media Session timerTimeout for SIP over TCP/TLS Session ConﬁgurationLimitation of sender of media streams Media ConﬁgurationAllowed number of concurrent sessions Limitation of RTP Codecs Name CodecsType This Codec Is AllowedLocal Ringback Played at Call Transfer Local RingbackMusic on Hold Redirection Ring Tone for Local RingbackRequests Default timeout for Invite requestsMaximum timeout for Invite requests SIP blacklist intervalMaximum number of retransmissions for Invite requests Base retransmission timeout for SIP requestsRemote SIP Connectivity Maximum number of retransmissions for non-INVITE requestsStun server IP addresses Stun ServerStun server Stun portsRemote NAT traversal Remote Clients Signaling ForwardingRemote NAT Traversal IP Address for Remote ClientsForward Signaling from IP Address NAT timeout for UDPNAT timeout for TCP NAT keepalive methodSIP Trafﬁc SIP MethodsAllow MethodTrafﬁc To AuthFrom Network FilteringSender IP Filter Rules ActionContent Type Content TypesDefault Policy For SIP Requests AllowHeader Filter Rules Local SIP Domains Default Header Filter PolicyLocal Registrar Local SIP User Database DomainRegister From Authentication and AccountingAuthentication Name Authentication settings SIP User DatabaseTrusted Domains Asserted-IdentityUse P-Asserted-Identity NetworkUse Dial Plan Dial PlanRadius Accounting Emergency NumberMatching From Header Reg ExprHead Matching Request-URIPreﬁx TailForward To Min. TailReplacement URI SubnoDial Plan Add Preﬁx Request-URIForward To Enum RootRegister in Dial Plan Methods in Dial PlanMethod Routing Enum RootDNS Override For SIP Requests Relay To WeightSIP Routing Order PortClass 3xx Message Processing Routing FunctionAlso Forward To Static RegistrationsRequests To User UserFor clients not supporting Refer Local Refer HandlingAlways handle Refer locally Sip/sipsFor dialogs with speciﬁed User-Agent header For clients not supporting replacesFor dialogs with speciﬁed From URI From URIs For Which Refer is Handled LocallyRestrict Incoming Callers User RoutingAlias Action ForwardSend To Voice Mail Voice Mail Server Request-URI Domain Outbound ProxyFrom Domain Domain or IP AddressTel URIs GatewayMonitored SIP Servers Registrar and Session StatusActive Sessions Monitored SIP server status Registered UsersMonitored SIP server Registered fromNetwork Interface Selection ToolsPacket Capture IP Address SelectionTools Any Icmp Check Network Check NetworkCollect data Test ResultsPage Tools 222 SIP over UDP Firewall and Client ConﬁgurationDMZ type SIP over TCP/TLSDMZ/LAN type SIP clientsStandalone type SIP clients Part IV Com VCX IP Telecommuting Module Serial Console Page Main Menu Basic AdministrationConnecting to the serial console Exit admin Set passwordCommand line interface Wipe email logsPhysical device name Deactivate other interfacesConﬁgure from a single computer Conﬁgure from multiple computersPassword Wipe email logs Set password Exit adminBasic Administration 236 Help and Troubleshooting Command Line ReferenceCommand Reference Modifying Tables Modify-row List-tablesLoad-factory Revert-editsTable Deﬁnitions Conﬁg.authlogclass Conﬁg.allowconﬁgConﬁg.allowviainterface Conﬁg.httpsservers Conﬁg.authenticationConﬁg.httpservers Conﬁg.mgmtlogclassFentalwaysfentexceptions Failover.ifacerefhostsFent.alwaysfent FentalwaysfentinterfacesFent.fentkeepalive Fent.mapsignaladdressField Name Field Type Explanation Enabled OnOffToggle Fent.mediareleaseﬁrewall.broadcastlogclass ﬁrewall.defaultpolicyﬁrewall.blindroutepolicy ﬁrewall.dhcplogclassﬁrewall.pingpolicy ﬁrewall.networkgroupsﬁrewall.ownlogclass ﬁrewall.spooﬁnglogclass ﬁrewall.servicesﬁrewall.policylogclass ﬁrewall.timeclassesIdsips.active Idsips.predeﬁnedipsrulesIpsec.espproposals Idsips.ratelimitedipsIpsec.cryptodef Ipsec.espahlogclassIpsec.ipsecnets Ipsec.ikelogclassIpsec.ikeproposals Ipsec.nattkeepaliveIpsec.radiusauthserver Ipsec.plutologclassIpsec.plutoverboselogclass Field Name Field TypeIpsec.x509cacerts Ipsec.tunnelednetsIpsec.userauthlogclass Misc.dnsservers Misc.conntracktimeoutsIpsec.x509cert Misc.dyndnsMisc.ntpservers Misc.dyndnsnameMisc.fversion Field Name Field Type Explanation DomainNameMisc.usentp Monitor.cpuloadlevelalarmMisc.unitname Monitor.emailalertlogclassMonitor.hardwarelogclass Monitor.memorylevelalarmMonitor.radiuserrorslogclass Monitor.logclassesMonitor.snmpagentlogclass Monitor.siplevelalarmsMonitor.snmpagentaddress Monitor.snmpnodelocation Monitor.snmpcontactpersonMonitor.snmpmanagementstations Monitor.snmppacketlogclassMonitor.snmptrapsending Monitor.snmpv1v2caccessMonitor.snmpv3access Monitor.snmpv1v2cauthMonitor.watchdogs Network.extradefaultgatewaysMonitor.syslogservers Network.aliasaddressesNetwork.pppoe Network.interfacesNetwork.localnets Network.vlans Network.routetestserversNetwork.routes Field Name Field Type Explanation Server DnsIpAddressPptp.grelogclass Password.adminusersPptp.pptpenable Pptp.pptplogclassPptp.pptpneglogclass Pptp.pptpserveripPptp.pptpusers Field Name Field Type Explanation PPTPOwnIpReferenceQos.bandwidths Qos.classesQos.egressqueueing Qos.egressdefaultqueueingQos.ingressdefaultqueueing Qos.status Qos.ingressqueueingQos.sipcac Qos.taggingSip.addexpireheader Sip.acceleratedtlsSip.active Sip.allowedcodecsSip.b2buaofferfromtemplate Sip.defaultgatewaySip.authmethods Sip.codecﬁlteringSip.externalrelay Sip.emergencySip.externradiusdb Field Name Field Type Explanation DnsIpAddressSip.forcemodify Sip.forwardcancelbodySip.ﬁxﬁletransferport Sip.forwardtoheaderSip.ignoreuriportwhenmaddr Sip.headerﬁlterdefaultSip.headerﬁlterrules Field Name Field Type Explanation Action SipﬁlteractionselSip.listen Sip.largeudpSip.lcscompanion Sip.localdomainsSip.lrtrue Sip.looserefertoSip.looseusernamecheck Sip.mediaencryptionpolicySip.mediaports Sip.mediaencryptionsettingsSip.mediaencryptionsuite Field Name Field Type Explanation Portslower PortNumberSip.message Sip.mediatimeoutsSip.mediarestriction Sip.mfullSip.monitorserver Sip.optiontimeoutSip.mimetypes Sip.musiconholdSip.percent20towhitespace Field Name Field Type Explanation Timeout OptionTimeoutSip.outboundproxy Sip.preserve2543holdSip.registrarlimits Sip.radiusacctSip.recurseon3xxinb2bua Sip.relayrulesSip.rewritetoforregisterindp Sip.removeviaSip.replyconﬁg Sip.ringbackSip.rroutealways Sip.routeusesportSip.routingorder Sip.rrouteoutboundSip.sessionlimits Sip.signaladdressfordestinationSip.siperrorslogclass Sip.sipaliasSip.sipmedialogclass Sip.sipsignalinglogclassSip.siplicenselogclass Sip.sipmessagelogclassSip.stripiceattributes Sip.tcptimeoutSip.sttype Sip.surroundingsSip.tlsclientcfg Sip.tlssettingsSip.tlscacerts Sip.tlsservercfgSip.uriencoding Sip.transactionconﬁgSip.trusteddomain Field Name Field Type Explanation UriencodingselSipswitch.b2buatransferenable Sip.usecancelbodyinackSipswitch.accounts Sip.uaregisterSipswitch.dialplanenable Sipswitch.b2buatransferfromuserSipswitch.dialplan Field Name Field Type Explanation User AliasAliasSipswitch.forwardto Sipswitch.dialplanmethodsSipswitch.enumroot Field Name Field Type Explanation Enabled FallbackselSipswitch.requestto Sipswitch.incomingunauthSipswitch.requestfrom Field Name Field Type Explanation Url SipWildcardUrlSipswitch.userrouting Sipswitch.usersUserdb.radiusservers Sipswitch.voicemailUserdb.radiuslocalendpoint Voipsm.voipsmField Types AdminPasswordAdminTypeSel Voipsm.voipsmdomainsAliasIpReference AliasUser AdminUserAliasAlias AuthDataCryptoDefReference DepUsableVlanInterface DnsDynIpAddress CaReferenceCertReference DnsDynIpNetworkInterface DnsDynIpOtherHostEnumReference DyndnsPasswordDyndnsServiceSel EspCryptoReference FirewallLogclassReferenceIpsRuleName InterfaceSelInviteRetransmitCount IpsecAuthSelMaxMessageSizeInteger IsakmpSALifeLogclassReference MaxRegOnOffToggle NonemptyStringOnOffButton OnOffToggleOnOptDSCPInteger OptDnsAutoRuntimeReachableHost OptDnsIpAddressOptComment OptDepOwnIpReferenceOptIpsecNetReference OptForwardToReferenceOptIcmpRangeList OptIpsecPeerReferenceOptPercent OptPasswordOptServicesReference OptPercentFloatOptString OptionTimeoutOptSipUserDomain OptTimeclassReferencePPTPOwnIpReference PptpPasswordRegTimeout PercentSipUserPassword SessionTimeoutSipUserDomainDefaultAll SIPRadiusSelSipWildcardUrl SnmpPasswordTimerAFloat SubGroupAccounttypesel AccountvoicemailselBlindsel AddexpireheaderselAutonegsel BypasstransportselFallbacksel ConﬁgauthselDpactionsel FentkeepaliveselHitsnumber FunctionselFwtypesel MediaencryptionsuiteselPqueuesel PingpolicyselPolicysel QostypeselRestfuncsel Rfc2782weightRegexpwithAt Rfc2782prioritySipfunctionsel SipauthdirselSipﬁlteractionsel SipselSnmpv3privacysel SnmptrapversionselSnmpv3authsel SttypeselTlsservermethods SysloglevelselTlsclientmethods Uriencodingsel TlsconfselTrusteddomaintransportsel VoipsmmethodselWindownumber CLI command examplesAdd and change ﬁrewall rules Apply a conﬁguration Part V. Appendices Page SIP Protocol Why use SIP?Appendix A. More About SIP Conﬁguring the 3Com VCX IP Telecommuting Module Managing Your Own SIP DomainSIP and Firewalls Page Conﬁguring the SIP Clients Conﬁguring the PBXConﬁguring the DNS Server Establishing a SIP session SIP SessionsSIP in 3Com VCX IP Telecommuting Module SIP Packet Headers ContactRecord-Route Content-TypeVia RouteAppendix A. More About SIP 328 No trafﬁc shown in the log Appendix B. TroubleshootingNetwork troubleshooting Trafﬁc discarded as spoofedSIP users can’t register through the Telecommuting Module SIP troubleshootingSIP users can’t register on the Telecommuting Module SIP Trunking calls via SIP operatorAdministration troubleshooting Call is established, but there is no voiceSIP send failure -1 on socket -1 event number SIP errorsLog Messages Destination IP addressport is known bad. SkippingStarting SIP UDP server at port IPsec key negotiationsStarting SIP TCP server at port Stopped SIP TCP serverConﬁguration server logins List of the most important reserved ports Name Port/protocol DescriptionWWW Cmip Krcmd Kerberos encrypted remote shell -kfall List of Icmp types Type NameIcmp type Name Code Description Icmp codesType Name Reference Unreachable for Type Internet protocols and their numbers Protocol number KeywordIP intervals Set bits Mask IP address class Reserved IP addresses Class IP in- tervalsPage Appendix D. Deﬁnitions of terms ARPDMZ 349 Https NAT Nntp 353 PPP SIP Uucp 357 Appendix D. Deﬁnitions of terms 358 BSD derived licenses Appendix E. License ConditionsSoftware developed by Peter Åstrand TermsSoftware developed by Carnegie Mellon University Software developed by Gregory M Christy Software developed by Cisco SystemsSoftware developed by Digital Equipment Corporation Dhcp license Software developed by Jason DownsSoftware developed by Brian Gladman Version 2, June Software developed by Google, IncGNU General Public License GPL PreambleGNU General Public License 367 368 No Warranty IBM Public License Software developed by Ingate Systems Software developed in the GIE Dyade cooperationSoftware developed by Tommi Komulainen GNU Library General Public License Lgpl v USA374 GNU Library General Public License 376 377 Page 379 380 GNU Lesser General Public License Lgpl v Version 2.1, February382 GNU Lesser General Public License 384 385 386 Page Glibc Tzdata 2006a 388 Software in the GNU C distribution Appendix E. License Conditions Appendix E. License Conditions 392 More software in the GNU C distribution 394 License exceptions for gcc/libgcc2.c License License exceptions for libstdc++License for lilo DisclaimerSoftware developed by Paul Mackerras Software developed by Pedro Roque Marques Software developed at M I TLicense for Net-SNMP Part 1 CMU/UCD copyright notice BSD likePart 4 Sun Microsystems, Inc. copyright notice BSD Part 5 Sparta, Inc copyright notice BSD Part 6 Cisco/BUPTNIC copyright notice BSD License for NTP License for OpenSSH404 Appendix E. License Conditions 406 407 Snprintf replacement Copyright Patrick Powell 409 License for OpenSSL License for OpenSWAN Python license Release Derived Year Owner GPL- compatible? FromTerms and Conditions for Accessing or Otherwise Using Python Beopen Python Open Source License Agreement Version Cnri License Agreement for Python License for Python Imaging Library CWI License Agreement for Python 0.9.0 ThroughLicense for Rdisc Software developed by RSA Data Security, Inc More software developed by RSA Data Security, IncLicense for SSL License for stunnel Software developed by Sun Microsystems, IncMore software developed by Sun Microsystems, Inc License for Sun RPCLicense for termcap Software developed by Trusted Information Systems, IncSoftware developed by Andrew Tridgell Software developed by Paul VixieVovida Software License, Version Vovida Software License vSoftware developed by Rayan S Zachariassen License for zlib Software developed at University of CaliforniaOpenswan-kernel 427 Appendix E. License Conditions Appendix E. License Conditions Readlink Appendix E. License Conditions 430 Purchase Extended Warranty Professional Services Register Your Product to Gain Service BeneﬁtsSolve Problems Online Appendix F. Obtaining Support for Your 3Com ProductsTelephone Technical Support and Repair Access Software DownloadsContact Us Asia, Paciﬁc Rim Telephone Technical Support and RepairLatin America Telephone Technical Support and Repair Country Telephone NumberUS and Canada Telephone Technical Support and Repair For administration IndexConﬁguration logins From the Telecommuting Module MIBs