Introduction to 3Com VCX IP Telecommuting Module | HP VCX Software

Chapter 1. Introduction to 3Com VCX IP Telecommuting Module

6

Image 14

HP VCX Software manual Introduction to 3Com VCX IP Telecommuting Module

Contents

3Com Telecommuting Module VersionPage United States Government Legend Page Table of Contents Page Part I. Introduction to 3Com VCX IP Telecommuting Module Page Conﬁguration alternatives What is a Telecommuting Module?Introduction to 3Com VCX IP Telecommuting Module DMZ Conﬁguration DMZ/LAN Conﬁguration Quick guide to 3Com VCX IP Telecommuting Module installation Standalone Conﬁguration Introduction to 3Com VCX IP Telecommuting Module About settings in 3Com VCX IP Telecommuting Module Introduction to 3Com VCX IP Telecommuting Module Installation with magic ping Installing 3Com VCX IP Telecommuting ModuleInstallation Installation with a serial cablePage Page Page Page Installation with a diskette Page Page Turning off a Telecommuting Module Remember to lock up the Telecommuting Module Installing 3Com VCX IP Telecommuting Module Log on again Conﬁguring 3Com VCX IP Telecommuting ModuleLogging on Site Map NavigationLog out Basic Conﬁguration AdministrationSIP Services Network Conﬁguration Failover Quality of ServiceOverview of conﬁguration Virtual Private Networks Preliminary and permanent conﬁguration Page IP address Mask/Bits Name queries in 3Com VCX IP Telecommuting Module No. of computers Mask BitsPage Conﬁguring 3Com VCX IP Telecommuting Module Part II. How To Page Networks and Computers How To Conﬁgure SIPDMZ Telecommuting Module, SIP server on the WAN Surroundings Basic Settings Interoperability Filtering Routing DMZ Telecommuting Module, SIP server on the LAN Save/Load Conﬁguration Networks and Computers Basic Settings Routing Standalone Telecommuting Module, SIP server on the WAN Basic Settings Filtering Client Settings Standalone Telecommuting Module, SIP server on the LAN Basic Settings Interoperability DMZ/LAN Telecommuting Module, SIP server on the WAN Basic Settings Filtering DMZ/LAN Telecommuting Module, SIP server on the LAN Interoperability Filtering LAN Telecommuting Module Surroundings Filtering Remote SIP Connectivity Firewall How To Conﬁgure SIP How To Conﬁgure Advanced SIP Outgoing Calls Show One Number When Calling Show Different Numbers When Calling Incoming Calls Page Authentication by Accounts a.k.a SIP Trunk via SIP accounts Page Page Page Incoming Calls Page Multiple Operators Least Cost Routing Page Multiple PBXs How To Conﬁgure Advanced SIP How To Conﬁgure Advanced SIP Page Page Page Page General Basic ConﬁgurationBasic Conﬁguration Name of this Telecommuting Module Policy For Ping To Your 3Com VCX IP Telecommuting Module Default domain IP PolicyDNS Servers Save Access ControlCancel Look up all IP addresses again Conﬁguration Transport User Authentication For Web Interface AccessConﬁguration Allowed Via Interface Conﬁguration via Http Conﬁguration via Https DNS Name Or Network Address Conﬁguration ComputersConﬁguration via SSH Range Network addressNetmask/Bits Via IPsec Peer Radius Port Radius ServersRadius server Secret Status for Radius Servers IdentiﬁerContact IP Address Received replies ScoreSent requests Consecutive sends Conﬁguration of a Radius server Value Contact person Snmp v1 and v2cTelecommuting Module IP address to respond to Snmp requests Node location Snmp Access via SNMPv1 and SNMPv2cAccess via SNMPv3 Community Snmp Traps PasswordAuthentication User Trap receiver Resource MonitoringTrap sending function Version SIP User Registrations Trap Levels Download the 3Com MIBSIP Sessions Trap Levels CPU Load Trap Levels DynDNS General Conﬁguration Dynamic DNS updateDynDNS service Use DynDNS Wildcard hostnames Ofﬂine URL redirection IP address for updatesUser, Smtp Server Username Smtp server DNS Names to Update at DynDNSSmtp server is backup DNS Name Name CertiﬁcatesPrivate Certiﬁcates Certiﬁcate Create certiﬁcate or certiﬁcate request CA Certiﬁcates CA Certiﬁcate TimeoutsAdvanced Timeout for established TCP connections Timeout for one-way UDP connectionsTimeout for two-way UDP connections Timeout for Icmp connections DMZ/LAN Conﬁguration Change Telecommuting Module Type to Telecommuting Module Type conﬁgurationCurrent Telecommuting Module Type Change type Save/Load Conﬁguration AdministrationDuration of limited test mode Test Preliminary Conﬁguration Apply conﬁguration BackupShow Message About Unapplied Changes Save/Load CLI Command File Abort All Edits Show ConﬁgurationRevert to Old Conﬁgurations Reload Factory Conﬁguration Old password User AdministrationPassword For the ’admin’ Account Other Accounts New password, Conﬁrm passwordChange administration password Account Type Currently Logged In Administrators Log Out UpgradeUpgrade Step Abort upgrade Try the upgradeAccept upgrade Table Look Edit Column Date and Time Change Time Zone Time Change Date and Time ManuallyDate Set date and time manually Synchronize time with NTP NTP Servers To Use If NTP Is EnabledChange Date and Time With NTP Restart the SIP Module Reboot Your 3Com VCX IP Telecommuting ModuleRestart Automatic Restart of the SIP Module Administration Administration 118 Network Conﬁguration Networks and Computers Lower Limit NameSubgroup Delete Row Upper LimitInterface/VLAN Create Priority Default GatewayMain Default Gateways Interface Policy For Packets From Unused Gateways Gateway Reference Hosts Interface name Interface Network Interface 1Physical device Directly Connected Networks Obtain IP Address Dynamically Vlan Id AliasBroadcast address Vlan Name Static Routing Routed network Router Vlan Named VLANs Interface Status Interface Status Dhcp Client Status PPPoE Client Status Keep Alive AuthenticationPPPoE Log class for PPPoE negotiations SurroundingsLCP echo-request interval Additional Negotiators Data InterfacesNetwork Select a data interface here Network Conﬁguration 136 Search the Log LoggingDisplay Log Display log Support Report Packet Selection Protocol/Port Selection Packet Type SelectionIP Address Selection All IP protocols Icmp SIP Methods SIP Packet SelectionCall-ID IP addresses Time Limits Show newest at top Show ThisExport the Log Log Clear form Display Load RST Direction Packet LoadTime Period Unit Value Diagram Heading DiagramDiagram Size View diagram Log class for spoofed packets Inbound TrafﬁcLog class for non-SIP packets Log class for broadcast packets Log class for Snmp errors Log class for email errorsLog class for Radius errors Log class for Dhcp requests Log class for IPsec key negotiation debug messages VPN EventsLog class for IPsec key negotiations Log class for ESP packets SIP Events Other Local Log Log ClassesEmail Address Log Sending Syslog Syslog Servers Smtp ServerStatus for Outbound Email Reverts the ﬁelds to the previous conﬁguration 157 Logging 158 Basic Settings SIP ServicesAdministration of SIP SIP Module Transport Additional SIP Signaling PortsProvisioning Relay Comment SIP Servers To Monitor SIP Media Port RangePublic IP address for NATed Telecommuting Module SIP Logging Server Log class for SIP signaling Relaxed Refer-To InteroperabilityLoose Routing SIP Server Remove Via HeadersTranslation Exceptions Except this from translation Always Translate This Expires HeaderForce Translation URI Encoding User Matching Signaling Order of Re-INVITEsLoose Username Check Force Record-Route for Outbound Requests Accept RTP/AVP With sdescriptionsTransmit RTP/AVP With sdescriptions Force Record-Route for All Requests Force Remote TLS Connection Reuse Accept TCP Marked As TLS Allow Large UDP Packets Remove Headers in 180 Responses Preserve RFC 2543 Hold Forward Cancel BodyUse Cancel Body In ACK Convert Escaped Whitespaces in URIs Allow RFC 2069 AuthenticationOpen Port 6891 For File Transfer Ports and the maddr Attribute Keep User-Agent Header When Acting as B2BUAStrip ICE Attributes Sessions and Media Session timerTimeout for SIP over TCP/TLS Session Conﬁguration Limitation of sender of media streams Media ConﬁgurationAllowed number of concurrent sessions Limitation of RTP Codecs Name CodecsType This Codec Is Allowed Local Ringback Played at Call Transfer Local RingbackMusic on Hold Redirection Ring Tone for Local Ringback Requests Default timeout for Invite requestsMaximum timeout for Invite requests SIP blacklist interval Maximum number of retransmissions for Invite requests Base retransmission timeout for SIP requestsRemote SIP Connectivity Maximum number of retransmissions for non-INVITE requests Stun server IP addresses Stun ServerStun server Stun ports Remote NAT traversal Remote Clients Signaling ForwardingRemote NAT Traversal IP Address for Remote Clients Forward Signaling from IP Address NAT timeout for UDPNAT timeout for TCP NAT keepalive method SIP Trafﬁc SIP Methods Allow MethodTrafﬁc To Auth From Network FilteringSender IP Filter Rules Action Content Type Content TypesDefault Policy For SIP Requests Allow Header Filter Rules Local SIP Domains Default Header Filter PolicyLocal Registrar Local SIP User Database Domain Register From Authentication and AccountingAuthentication Name Authentication settings SIP User Database Trusted Domains Asserted-IdentityUse P-Asserted-Identity Network Use Dial Plan Dial PlanRadius Accounting Emergency Number Matching From Header Reg Expr Head Matching Request-URIPreﬁx Tail Forward To Min. Tail Replacement URI Subno Dial Plan Add Preﬁx Request-URIForward To Enum Root Register in Dial Plan Methods in Dial PlanMethod Routing Enum Root DNS Override For SIP Requests Relay To WeightSIP Routing Order Port Class 3xx Message Processing Routing Function Also Forward To Static RegistrationsRequests To User User For clients not supporting Refer Local Refer HandlingAlways handle Refer locally Sip/sips For dialogs with speciﬁed User-Agent header For clients not supporting replacesFor dialogs with speciﬁed From URI From URIs For Which Refer is Handled Locally Restrict Incoming Callers User RoutingAlias Action ForwardSend To Voice Mail Voice Mail Server Request-URI Domain Outbound ProxyFrom Domain Domain or IP Address Tel URIs Gateway Monitored SIP Servers Registrar and Session StatusActive Sessions Monitored SIP server status Registered UsersMonitored SIP server Registered from Network Interface Selection ToolsPacket Capture IP Address Selection Tools Any Icmp Check Network Check NetworkCollect data Test ResultsPage Tools 222 SIP over UDP Firewall and Client ConﬁgurationDMZ type SIP over TCP/TLS DMZ/LAN type SIP clients Standalone type SIP clients Part IV Com VCX IP Telecommuting Module Serial Console Page Main Menu Basic AdministrationConnecting to the serial console Exit admin Set passwordCommand line interface Wipe email logs Physical device name Deactivate other interfaces Conﬁgure from a single computer Conﬁgure from multiple computers Password Wipe email logs Set password Exit admin Basic Administration 236 Help and Troubleshooting Command Line ReferenceCommand Reference Modifying Tables Modify-row List-tablesLoad-factory Revert-edits Table Deﬁnitions Conﬁg.authlogclass Conﬁg.allowconﬁgConﬁg.allowviainterface Conﬁg.httpsservers Conﬁg.authenticationConﬁg.httpservers Conﬁg.mgmtlogclass Fentalwaysfentexceptions Failover.ifacerefhostsFent.alwaysfent Fentalwaysfentinterfaces Fent.fentkeepalive Fent.mapsignaladdressField Name Field Type Explanation Enabled OnOffToggle Fent.mediarelease ﬁrewall.broadcastlogclass ﬁrewall.defaultpolicyﬁrewall.blindroutepolicy ﬁrewall.dhcplogclass ﬁrewall.pingpolicy ﬁrewall.networkgroupsﬁrewall.ownlogclass ﬁrewall.spooﬁnglogclass ﬁrewall.servicesﬁrewall.policylogclass ﬁrewall.timeclasses Idsips.active Idsips.predeﬁnedipsrules Ipsec.espproposals Idsips.ratelimitedipsIpsec.cryptodef Ipsec.espahlogclass Ipsec.ipsecnets Ipsec.ikelogclassIpsec.ikeproposals Ipsec.nattkeepalive Ipsec.radiusauthserver Ipsec.plutologclassIpsec.plutoverboselogclass Field Name Field Type Ipsec.x509cacerts Ipsec.tunnelednetsIpsec.userauthlogclass Misc.dnsservers Misc.conntracktimeoutsIpsec.x509cert Misc.dyndns Misc.ntpservers Misc.dyndnsnameMisc.fversion Field Name Field Type Explanation DomainName Misc.usentp Monitor.cpuloadlevelalarmMisc.unitname Monitor.emailalertlogclass Monitor.hardwarelogclass Monitor.memorylevelalarmMonitor.radiuserrorslogclass Monitor.logclasses Monitor.snmpagentlogclass Monitor.siplevelalarmsMonitor.snmpagentaddress Monitor.snmpnodelocation Monitor.snmpcontactpersonMonitor.snmpmanagementstations Monitor.snmppacketlogclass Monitor.snmptrapsending Monitor.snmpv1v2caccessMonitor.snmpv3access Monitor.snmpv1v2cauth Monitor.watchdogs Network.extradefaultgatewaysMonitor.syslogservers Network.aliasaddresses Network.pppoe Network.interfacesNetwork.localnets Network.vlans Network.routetestserversNetwork.routes Field Name Field Type Explanation Server DnsIpAddress Pptp.grelogclass Password.adminusersPptp.pptpenable Pptp.pptplogclass Pptp.pptpneglogclass Pptp.pptpserveripPptp.pptpusers Field Name Field Type Explanation PPTPOwnIpReference Qos.bandwidths Qos.classes Qos.egressqueueing Qos.egressdefaultqueueingQos.ingressdefaultqueueing Qos.status Qos.ingressqueueingQos.sipcac Qos.tagging Sip.addexpireheader Sip.acceleratedtlsSip.active Sip.allowedcodecs Sip.b2buaofferfromtemplate Sip.defaultgatewaySip.authmethods Sip.codecﬁltering Sip.externalrelay Sip.emergencySip.externradiusdb Field Name Field Type Explanation DnsIpAddress Sip.forcemodify Sip.forwardcancelbodySip.ﬁxﬁletransferport Sip.forwardtoheader Sip.ignoreuriportwhenmaddr Sip.headerﬁlterdefaultSip.headerﬁlterrules Field Name Field Type Explanation Action Sipﬁlteractionsel Sip.listen Sip.largeudpSip.lcscompanion Sip.localdomains Sip.lrtrue Sip.looserefertoSip.looseusernamecheck Sip.mediaencryptionpolicy Sip.mediaports Sip.mediaencryptionsettingsSip.mediaencryptionsuite Field Name Field Type Explanation Portslower PortNumber Sip.message Sip.mediatimeoutsSip.mediarestriction Sip.mfull Sip.monitorserver Sip.optiontimeoutSip.mimetypes Sip.musiconhold Sip.percent20towhitespace Field Name Field Type Explanation Timeout OptionTimeoutSip.outboundproxy Sip.preserve2543hold Sip.registrarlimits Sip.radiusacctSip.recurseon3xxinb2bua Sip.relayrules Sip.rewritetoforregisterindp Sip.removeviaSip.replyconﬁg Sip.ringback Sip.rroutealways Sip.routeusesportSip.routingorder Sip.rrouteoutbound Sip.sessionlimits Sip.signaladdressfordestinationSip.siperrorslogclass Sip.sipalias Sip.sipmedialogclass Sip.sipsignalinglogclassSip.siplicenselogclass Sip.sipmessagelogclass Sip.stripiceattributes Sip.tcptimeoutSip.sttype Sip.surroundings Sip.tlsclientcfg Sip.tlssettingsSip.tlscacerts Sip.tlsservercfg Sip.uriencoding Sip.transactionconﬁgSip.trusteddomain Field Name Field Type Explanation Uriencodingsel Sipswitch.b2buatransferenable Sip.usecancelbodyinackSipswitch.accounts Sip.uaregister Sipswitch.dialplanenable Sipswitch.b2buatransferfromuserSipswitch.dialplan Field Name Field Type Explanation User AliasAlias Sipswitch.forwardto Sipswitch.dialplanmethodsSipswitch.enumroot Field Name Field Type Explanation Enabled Fallbacksel Sipswitch.requestto Sipswitch.incomingunauthSipswitch.requestfrom Field Name Field Type Explanation Url SipWildcardUrl Sipswitch.userrouting Sipswitch.users Userdb.radiusservers Sipswitch.voicemailUserdb.radiuslocalendpoint Voipsm.voipsm Field Types AdminPasswordAdminTypeSel Voipsm.voipsmdomains AliasIpReference AliasUser AdminUserAliasAlias AuthData CryptoDefReference DepUsableVlanInterface DnsDynIpAddress CaReferenceCertReference DnsDynIpNetworkInterface DnsDynIpOtherHost EnumReference DyndnsPasswordDyndnsServiceSel EspCryptoReference FirewallLogclassReference IpsRuleName InterfaceSelInviteRetransmitCount IpsecAuthSel MaxMessageSizeInteger IsakmpSALifeLogclassReference MaxReg OnOffToggle NonemptyStringOnOffButton OnOffToggleOn OptDSCPInteger OptDnsAutoRuntimeReachableHost OptDnsIpAddressOptComment OptDepOwnIpReference OptIpsecNetReference OptForwardToReferenceOptIcmpRangeList OptIpsecPeerReference OptPercent OptPasswordOptServicesReference OptPercentFloat OptString OptionTimeoutOptSipUserDomain OptTimeclassReference PPTPOwnIpReference PptpPasswordRegTimeout Percent SipUserPassword SessionTimeoutSipUserDomainDefaultAll SIPRadiusSel SipWildcardUrl SnmpPasswordTimerAFloat SubGroup Accounttypesel Accountvoicemailsel Blindsel AddexpireheaderselAutonegsel Bypasstransportsel Fallbacksel ConﬁgauthselDpactionsel Fentkeepalivesel Hitsnumber FunctionselFwtypesel Mediaencryptionsuitesel Pqueuesel PingpolicyselPolicysel Qostypesel Restfuncsel Rfc2782weightRegexpwithAt Rfc2782priority Sipfunctionsel SipauthdirselSipﬁlteractionsel Sipsel Snmpv3privacysel SnmptrapversionselSnmpv3authsel Sttypesel Tlsservermethods SysloglevelselTlsclientmethods Uriencodingsel TlsconfselTrusteddomaintransportsel Voipsmmethodsel Windownumber CLI command examplesAdd and change ﬁrewall rules Apply a conﬁguration Part V. Appendices Page SIP Protocol Why use SIP?Appendix A. More About SIP Conﬁguring the 3Com VCX IP Telecommuting Module Managing Your Own SIP DomainSIP and Firewalls Page Conﬁguring the SIP Clients Conﬁguring the PBXConﬁguring the DNS Server Establishing a SIP session SIP SessionsSIP in 3Com VCX IP Telecommuting Module SIP Packet Headers Contact Record-Route Content-TypeVia Route Appendix A. More About SIP 328 No trafﬁc shown in the log Appendix B. TroubleshootingNetwork troubleshooting Trafﬁc discarded as spoofed SIP users can’t register through the Telecommuting Module SIP troubleshootingSIP users can’t register on the Telecommuting Module SIP Trunking calls via SIP operator Administration troubleshooting Call is established, but there is no voice SIP send failure -1 on socket -1 event number SIP errorsLog Messages Destination IP addressport is known bad. Skipping Starting SIP UDP server at port IPsec key negotiationsStarting SIP TCP server at port Stopped SIP TCP server Conﬁguration server logins List of the most important reserved ports Name Port/protocol Description WWW Cmip Krcmd Kerberos encrypted remote shell -kfall List of Icmp types Type Name Icmp type Name Code Description Icmp codesType Name Reference Unreachable for Type Internet protocols and their numbers Protocol number Keyword IP intervals Set bits Mask IP address class Reserved IP addresses Class IP in- tervalsPage Appendix D. Deﬁnitions of terms ARP DMZ 349 Https NAT Nntp 353 PPP SIP Uucp 357 Appendix D. Deﬁnitions of terms 358 BSD derived licenses Appendix E. License ConditionsSoftware developed by Peter Åstrand Terms Software developed by Carnegie Mellon University Software developed by Gregory M Christy Software developed by Cisco Systems Software developed by Digital Equipment Corporation Dhcp license Software developed by Jason Downs Software developed by Brian Gladman Version 2, June Software developed by Google, IncGNU General Public License GPL Preamble GNU General Public License 367 368 No Warranty IBM Public License Software developed by Ingate Systems Software developed in the GIE Dyade cooperation Software developed by Tommi Komulainen GNU Library General Public License Lgpl v USA 374 GNU Library General Public License 376 377 Page 379 380 GNU Lesser General Public License Lgpl v Version 2.1, February 382 GNU Lesser General Public License 384 385 386 Page Glibc Tzdata 2006a 388 Software in the GNU C distribution Appendix E. License Conditions Appendix E. License Conditions 392 More software in the GNU C distribution 394 License exceptions for gcc/libgcc2.c License License exceptions for libstdc++License for lilo Disclaimer Software developed by Paul Mackerras Software developed by Pedro Roque Marques Software developed at M I T License for Net-SNMP Part 1 CMU/UCD copyright notice BSD like Part 4 Sun Microsystems, Inc. copyright notice BSD Part 5 Sparta, Inc copyright notice BSD Part 6 Cisco/BUPTNIC copyright notice BSD License for NTP License for OpenSSH 404 Appendix E. License Conditions 406 407 Snprintf replacement Copyright Patrick Powell 409 License for OpenSSL License for OpenSWAN Python license Release Derived Year Owner GPL- compatible? From Terms and Conditions for Accessing or Otherwise Using Python Beopen Python Open Source License Agreement Version Cnri License Agreement for Python License for Python Imaging Library CWI License Agreement for Python 0.9.0 Through License for Rdisc Software developed by RSA Data Security, Inc More software developed by RSA Data Security, Inc License for SSL License for stunnel Software developed by Sun Microsystems, Inc More software developed by Sun Microsystems, Inc License for Sun RPC License for termcap Software developed by Trusted Information Systems, Inc Software developed by Andrew Tridgell Software developed by Paul Vixie Vovida Software License, Version Vovida Software License vSoftware developed by Rayan S Zachariassen License for zlib Software developed at University of California Openswan-kernel 427 Appendix E. License Conditions Appendix E. License Conditions Readlink Appendix E. License Conditions 430 Purchase Extended Warranty Professional Services Register Your Product to Gain Service BeneﬁtsSolve Problems Online Appendix F. Obtaining Support for Your 3Com Products Telephone Technical Support and Repair Access Software DownloadsContact Us Asia, Paciﬁc Rim Telephone Technical Support and Repair Latin America Telephone Technical Support and Repair Country Telephone Number US and Canada Telephone Technical Support and Repair For administration Index Conﬁguration logins From the Telecommuting Module MIBs