Network Conﬁguration 136 | HP VCX Software guide

Chapter 8. Network Conﬁguration

136

Image 144

HP VCX Software manual Network Conﬁguration 136

Contents

3Com Telecommuting Module VersionPage United States Government Legend Page Table of Contents Page Part I. Introduction to 3Com VCX IP Telecommuting Module Page What is a Telecommuting Module? Introduction to 3Com VCX IP Telecommuting ModuleConﬁguration alternatives DMZ Conﬁguration DMZ/LAN Conﬁguration Quick guide to 3Com VCX IP Telecommuting Module installation Standalone Conﬁguration Introduction to 3Com VCX IP Telecommuting Module About settings in 3Com VCX IP Telecommuting Module Introduction to 3Com VCX IP Telecommuting Module Installing 3Com VCX IP Telecommuting Module InstallationInstallation with magic ping Installation with a serial cablePage Page Page Page Installation with a diskette Page Page Turning off a Telecommuting Module Remember to lock up the Telecommuting Module Installing 3Com VCX IP Telecommuting Module Conﬁguring 3Com VCX IP Telecommuting Module Logging onLog on again Navigation Log outSite Map Administration SIP ServicesBasic Conﬁguration Network Conﬁguration Quality of Service Overview of conﬁgurationFailover Virtual Private Networks Preliminary and permanent conﬁguration Page IP address Mask/Bits Name queries in 3Com VCX IP Telecommuting Module No. of computers Mask BitsPage Conﬁguring 3Com VCX IP Telecommuting Module Part II. How To Page How To Conﬁgure SIP DMZ Telecommuting Module, SIP server on the WANNetworks and Computers Surroundings Basic Settings Interoperability Filtering Routing DMZ Telecommuting Module, SIP server on the LAN Save/Load Conﬁguration Networks and Computers Basic Settings Routing Standalone Telecommuting Module, SIP server on the WAN Basic Settings Filtering Client Settings Standalone Telecommuting Module, SIP server on the LAN Basic Settings Interoperability DMZ/LAN Telecommuting Module, SIP server on the WAN Basic Settings Filtering DMZ/LAN Telecommuting Module, SIP server on the LAN Interoperability Filtering LAN Telecommuting Module Surroundings Filtering Remote SIP Connectivity Firewall How To Conﬁgure SIP How To Conﬁgure Advanced SIP Outgoing Calls Show One Number When Calling Show Different Numbers When Calling Incoming Calls Page Authentication by Accounts a.k.a SIP Trunk via SIP accounts Page Page Page Incoming Calls Page Multiple Operators Least Cost Routing Page Multiple PBXs How To Conﬁgure Advanced SIP How To Conﬁgure Advanced SIP Page Page Page Page Basic Conﬁguration Basic ConﬁgurationGeneral Name of this Telecommuting Module Default domain IP Policy DNS ServersPolicy For Ping To Your 3Com VCX IP Telecommuting Module Access Control CancelSave Look up all IP addresses again User Authentication For Web Interface Access Conﬁguration Allowed Via InterfaceConﬁguration Transport Conﬁguration via Http Conﬁguration via Https Conﬁguration Computers Conﬁguration via SSHDNS Name Or Network Address Network address Netmask/BitsRange Via IPsec Peer Radius Radius Servers Radius serverPort Secret Identiﬁer Contact IP AddressStatus for Radius Servers Score Sent requestsReceived replies Consecutive sends Conﬁguration of a Radius server Value Snmp v1 and v2c Telecommuting Module IP address to respond to Snmp requestsContact person Node location Access via SNMPv1 and SNMPv2c Access via SNMPv3Snmp Community Password AuthenticationSnmp Traps User Resource Monitoring Trap sending functionTrap receiver Version Download the 3Com MIB SIP Sessions Trap LevelsSIP User Registrations Trap Levels CPU Load Trap Levels Dynamic DNS update DynDNS serviceDynDNS General Conﬁguration Use DynDNS IP address for updates User, Smtp ServerWildcard hostnames Ofﬂine URL redirection Username DNS Names to Update at DynDNS Smtp server is backupSmtp server DNS Name Certiﬁcates Private CertiﬁcatesName Certiﬁcate Create certiﬁcate or certiﬁcate request CA Certiﬁcates Timeouts AdvancedCA Certiﬁcate Timeout for one-way UDP connections Timeout for two-way UDP connectionsTimeout for established TCP connections Timeout for Icmp connections DMZ/LAN Conﬁguration Telecommuting Module Type conﬁguration Current Telecommuting Module TypeChange Telecommuting Module Type to Change type Administration Duration of limited test modeSave/Load Conﬁguration Test Preliminary Conﬁguration Backup Show Message About Unapplied ChangesApply conﬁguration Save/Load CLI Command File Show Conﬁguration Revert to Old ConﬁgurationsAbort All Edits Reload Factory Conﬁguration User Administration Password For the ’admin’ AccountOld password New password, Conﬁrm password Change administration passwordOther Accounts Account Type Currently Logged In Administrators Upgrade UpgradeLog Out Step Try the upgrade Accept upgradeAbort upgrade Table Look Edit Column Date and Time Change Time Zone Change Date and Time Manually DateTime Set date and time manually NTP Servers To Use If NTP Is Enabled Change Date and Time With NTPSynchronize time with NTP Reboot Your 3Com VCX IP Telecommuting Module RestartRestart the SIP Module Automatic Restart of the SIP Module Administration Administration 118 Network Conﬁguration Networks and Computers Name SubgroupLower Limit Upper Limit Interface/VLANDelete Row Create Default Gateway Main Default GatewaysPriority Interface Policy For Packets From Unused Gateways Gateway Reference Hosts Interface Network Interface 1 Physical deviceInterface name Directly Connected Networks Obtain IP Address Dynamically Alias Broadcast addressVlan Id Vlan Name Static Routing Routed network Router Vlan Named VLANs Interface Status Interface Status Dhcp Client Status PPPoE Client Status Authentication PPPoEKeep Alive Surroundings LCP echo-request intervalLog class for PPPoE negotiations Data Interfaces NetworkAdditional Negotiators Select a data interface here Network Conﬁguration 136 Logging Display LogSearch the Log Display log Support Report Packet Selection Packet Type Selection IP Address SelectionProtocol/Port Selection All IP protocols Icmp SIP Packet Selection Call-IDSIP Methods IP addresses Time Limits Show This Export the LogShow newest at top Log Clear form Display Load RST Packet Load Time PeriodDirection Unit Value Diagram Diagram SizeDiagram Heading View diagram Inbound Trafﬁc Log class for non-SIP packetsLog class for spoofed packets Log class for broadcast packets Log class for email errors Log class for Radius errorsLog class for Snmp errors Log class for Dhcp requests VPN Events Log class for IPsec key negotiationsLog class for IPsec key negotiation debug messages Log class for ESP packets SIP Events Other Log Classes Email AddressLocal Log Log Sending Syslog Smtp Server Status for Outbound EmailSyslog Servers Reverts the ﬁelds to the previous conﬁguration 157 Logging 158 SIP Services Administration of SIPBasic Settings SIP Module Additional SIP Signaling Ports Provisioning RelayTransport Comment SIP Media Port Range Public IP address for NATed Telecommuting ModuleSIP Servers To Monitor SIP Logging Server Log class for SIP signaling Interoperability Loose RoutingRelaxed Refer-To Remove Via Headers Translation ExceptionsSIP Server Except this from translation Expires Header Force TranslationAlways Translate This URI Encoding Signaling Order of Re-INVITEs Loose Username CheckUser Matching Accept RTP/AVP With sdescriptions Transmit RTP/AVP With sdescriptionsForce Record-Route for Outbound Requests Force Record-Route for All Requests Force Remote TLS Connection Reuse Accept TCP Marked As TLS Allow Large UDP Packets Remove Headers in 180 Responses Forward Cancel Body Use Cancel Body In ACKPreserve RFC 2543 Hold Allow RFC 2069 Authentication Open Port 6891 For File TransferConvert Escaped Whitespaces in URIs Keep User-Agent Header When Acting as B2BUA Strip ICE AttributesPorts and the maddr Attribute Session timer Timeout for SIP over TCP/TLSSessions and Media Session Conﬁguration Media Conﬁguration Allowed number of concurrent sessionsLimitation of sender of media streams Limitation of RTP Codecs Codecs TypeName This Codec Is Allowed Local Ringback Music on Hold RedirectionLocal Ringback Played at Call Transfer Ring Tone for Local Ringback Default timeout for Invite requests Maximum timeout for Invite requestsRequests SIP blacklist interval Base retransmission timeout for SIP requests Remote SIP ConnectivityMaximum number of retransmissions for Invite requests Maximum number of retransmissions for non-INVITE requests Stun Server Stun serverStun server IP addresses Stun ports Remote Clients Signaling Forwarding Remote NAT TraversalRemote NAT traversal IP Address for Remote Clients NAT timeout for UDP NAT timeout for TCPForward Signaling from IP Address NAT keepalive method SIP Trafﬁc SIP Methods Method Trafﬁc ToAllow Auth Filtering Sender IP Filter RulesFrom Network Action Content Types Default Policy For SIP RequestsContent Type Allow Header Filter Rules Default Header Filter Policy Local RegistrarLocal SIP Domains Local SIP User Database Domain Authentication and Accounting Authentication NameRegister From Authentication settings SIP User Database Asserted-Identity Use P-Asserted-IdentityTrusted Domains Network Dial Plan Radius AccountingUse Dial Plan Emergency Number Matching From Header Reg Expr Matching Request-URI PreﬁxHead Tail Forward To Min. Tail Replacement URI Subno Dial Plan Request-URI Forward ToAdd Preﬁx Enum Root Methods in Dial Plan MethodRegister in Dial Plan Routing Enum Root DNS Override For SIP Requests Weight SIP Routing OrderRelay To Port Class 3xx Message Processing Routing Function Static Registrations Requests To UserAlso Forward To User Local Refer Handling Always handle Refer locallyFor clients not supporting Refer Sip/sips For clients not supporting replaces For dialogs with speciﬁed From URIFor dialogs with speciﬁed User-Agent header From URIs For Which Refer is Handled Locally User Routing AliasRestrict Incoming Callers Forward Send To Voice MailAction Voice Mail Server Outbound Proxy From DomainRequest-URI Domain Domain or IP Address Tel URIs Gateway Registrar and Session Status Active SessionsMonitored SIP Servers Registered Users Monitored SIP serverMonitored SIP server status Registered from Tools Packet CaptureNetwork Interface Selection IP Address Selection Tools Any Icmp Check Network Collect dataCheck Network Test ResultsPage Tools 222 Firewall and Client Conﬁguration DMZ typeSIP over UDP SIP over TCP/TLS DMZ/LAN type SIP clients Standalone type SIP clients Part IV Com VCX IP Telecommuting Module Serial Console Page Basic Administration Connecting to the serial consoleMain Menu Set password Command line interfaceExit admin Wipe email logs Physical device name Deactivate other interfaces Conﬁgure from a single computer Conﬁgure from multiple computers Password Wipe email logs Set password Exit admin Basic Administration 236 Command Line Reference Command ReferenceHelp and Troubleshooting Modifying Tables List-tables Load-factoryModify-row Revert-edits Table Deﬁnitions Conﬁg.allowconﬁg Conﬁg.allowviainterfaceConﬁg.authlogclass Conﬁg.authentication Conﬁg.httpserversConﬁg.httpsservers Conﬁg.mgmtlogclass Failover.ifacerefhosts Fent.alwaysfentFentalwaysfentexceptions Fentalwaysfentinterfaces Fent.mapsignaladdress Field Name Field Type Explanation Enabled OnOffToggleFent.fentkeepalive Fent.mediarelease ﬁrewall.defaultpolicy ﬁrewall.blindroutepolicyﬁrewall.broadcastlogclass ﬁrewall.dhcplogclass ﬁrewall.networkgroups ﬁrewall.ownlogclassﬁrewall.pingpolicy ﬁrewall.services ﬁrewall.policylogclassﬁrewall.spooﬁnglogclass ﬁrewall.timeclasses Idsips.active Idsips.predeﬁnedipsrules Idsips.ratelimitedips Ipsec.cryptodefIpsec.espproposals Ipsec.espahlogclass Ipsec.ikelogclass Ipsec.ikeproposalsIpsec.ipsecnets Ipsec.nattkeepalive Ipsec.plutologclass Ipsec.plutoverboselogclassIpsec.radiusauthserver Field Name Field Type Ipsec.tunnelednets Ipsec.userauthlogclassIpsec.x509cacerts Misc.conntracktimeouts Ipsec.x509certMisc.dnsservers Misc.dyndns Misc.dyndnsname Misc.fversionMisc.ntpservers Field Name Field Type Explanation DomainName Monitor.cpuloadlevelalarm Misc.unitnameMisc.usentp Monitor.emailalertlogclass Monitor.memorylevelalarm Monitor.radiuserrorslogclassMonitor.hardwarelogclass Monitor.logclasses Monitor.siplevelalarms Monitor.snmpagentaddressMonitor.snmpagentlogclass Monitor.snmpcontactperson Monitor.snmpmanagementstationsMonitor.snmpnodelocation Monitor.snmppacketlogclass Monitor.snmpv1v2caccess Monitor.snmpv3accessMonitor.snmptrapsending Monitor.snmpv1v2cauth Network.extradefaultgateways Monitor.syslogserversMonitor.watchdogs Network.aliasaddresses Network.interfaces Network.localnetsNetwork.pppoe Network.routetestservers Network.routesNetwork.vlans Field Name Field Type Explanation Server DnsIpAddress Password.adminusers Pptp.pptpenablePptp.grelogclass Pptp.pptplogclass Pptp.pptpserverip Pptp.pptpusersPptp.pptpneglogclass Field Name Field Type Explanation PPTPOwnIpReference Qos.bandwidths Qos.classes Qos.egressdefaultqueueing Qos.ingressdefaultqueueingQos.egressqueueing Qos.ingressqueueing Qos.sipcacQos.status Qos.tagging Sip.acceleratedtls Sip.activeSip.addexpireheader Sip.allowedcodecs Sip.defaultgateway Sip.authmethodsSip.b2buaofferfromtemplate Sip.codecﬁltering Sip.emergency Sip.externradiusdbSip.externalrelay Field Name Field Type Explanation DnsIpAddress Sip.forwardcancelbody Sip.ﬁxﬁletransferportSip.forcemodify Sip.forwardtoheader Sip.headerﬁlterdefault Sip.headerﬁlterrulesSip.ignoreuriportwhenmaddr Field Name Field Type Explanation Action Sipﬁlteractionsel Sip.largeudp Sip.lcscompanionSip.listen Sip.localdomains Sip.loosereferto Sip.looseusernamecheckSip.lrtrue Sip.mediaencryptionpolicy Sip.mediaencryptionsettings Sip.mediaencryptionsuiteSip.mediaports Field Name Field Type Explanation Portslower PortNumber Sip.mediatimeouts Sip.mediarestrictionSip.message Sip.mfull Sip.optiontimeout Sip.mimetypesSip.monitorserver Sip.musiconhold Field Name Field Type Explanation Timeout OptionTimeout Sip.outboundproxySip.percent20towhitespace Sip.preserve2543hold Sip.radiusacct Sip.recurseon3xxinb2buaSip.registrarlimits Sip.relayrules Sip.removevia Sip.replyconﬁgSip.rewritetoforregisterindp Sip.ringback Sip.routeusesport Sip.routingorderSip.rroutealways Sip.rrouteoutbound Sip.signaladdressfordestination Sip.siperrorslogclassSip.sessionlimits Sip.sipalias Sip.sipsignalinglogclass Sip.siplicenselogclassSip.sipmedialogclass Sip.sipmessagelogclass Sip.tcptimeout Sip.sttypeSip.stripiceattributes Sip.surroundings Sip.tlssettings Sip.tlscacertsSip.tlsclientcfg Sip.tlsservercfg Sip.transactionconﬁg Sip.trusteddomainSip.uriencoding Field Name Field Type Explanation Uriencodingsel Sip.usecancelbodyinack Sipswitch.accountsSipswitch.b2buatransferenable Sip.uaregister Sipswitch.b2buatransferfromuser Sipswitch.dialplanSipswitch.dialplanenable Field Name Field Type Explanation User AliasAlias Sipswitch.dialplanmethods Sipswitch.enumrootSipswitch.forwardto Field Name Field Type Explanation Enabled Fallbacksel Sipswitch.incomingunauth Sipswitch.requestfromSipswitch.requestto Field Name Field Type Explanation Url SipWildcardUrl Sipswitch.userrouting Sipswitch.users Sipswitch.voicemail Userdb.radiuslocalendpointUserdb.radiusservers Voipsm.voipsm AdminPassword AdminTypeSelField Types Voipsm.voipsmdomains AdminUser AliasAliasAliasIpReference AliasUser AuthData CaReference CertReferenceCryptoDefReference DepUsableVlanInterface DnsDynIpAddress DnsDynIpNetworkInterface DnsDynIpOtherHost DyndnsPassword DyndnsServiceSelEnumReference EspCryptoReference FirewallLogclassReference InterfaceSel InviteRetransmitCountIpsRuleName IpsecAuthSel IsakmpSALife LogclassReferenceMaxMessageSizeInteger MaxReg NonemptyString OnOffButtonOnOffToggle OnOffToggleOn OptDnsAutoRuntimeReachableHost OptDnsIpAddress OptCommentOptDSCPInteger OptDepOwnIpReference OptForwardToReference OptIcmpRangeListOptIpsecNetReference OptIpsecPeerReference OptPassword OptServicesReferenceOptPercent OptPercentFloat OptionTimeout OptSipUserDomainOptString OptTimeclassReference PptpPassword RegTimeoutPPTPOwnIpReference Percent SessionTimeout SipUserDomainDefaultAllSipUserPassword SIPRadiusSel SnmpPassword TimerAFloatSipWildcardUrl SubGroup Accounttypesel Accountvoicemailsel Addexpireheadersel AutonegselBlindsel Bypasstransportsel Conﬁgauthsel DpactionselFallbacksel Fentkeepalivesel Functionsel FwtypeselHitsnumber Mediaencryptionsuitesel Pingpolicysel PolicyselPqueuesel Qostypesel Rfc2782weight RegexpwithAtRestfuncsel Rfc2782priority Sipauthdirsel SipﬁlteractionselSipfunctionsel Sipsel Snmptrapversionsel Snmpv3authselSnmpv3privacysel Sttypesel Sysloglevelsel TlsclientmethodsTlsservermethods Tlsconfsel TrusteddomaintransportselUriencodingsel Voipsmmethodsel CLI command examples Add and change ﬁrewall rulesWindownumber Apply a conﬁguration Part V. Appendices Page Why use SIP? Appendix A. More About SIPSIP Protocol Managing Your Own SIP Domain SIP and FirewallsConﬁguring the 3Com VCX IP Telecommuting Module Page Conﬁguring the PBX Conﬁguring the DNS ServerConﬁguring the SIP Clients SIP Sessions SIP in 3Com VCX IP Telecommuting ModuleEstablishing a SIP session SIP Packet Headers Contact Content-Type ViaRecord-Route Route Appendix A. More About SIP 328 Appendix B. Troubleshooting Network troubleshootingNo trafﬁc shown in the log Trafﬁc discarded as spoofed SIP troubleshooting SIP users can’t register on the Telecommuting ModuleSIP users can’t register through the Telecommuting Module SIP Trunking calls via SIP operator Administration troubleshooting Call is established, but there is no voice SIP errors Log MessagesSIP send failure -1 on socket -1 event number Destination IP addressport is known bad. Skipping IPsec key negotiations Starting SIP TCP server at portStarting SIP UDP server at port Stopped SIP TCP server Conﬁguration server logins List of the most important reserved ports Name Port/protocol Description WWW Cmip Krcmd Kerberos encrypted remote shell -kfall List of Icmp types Type Name Icmp codes Type Name ReferenceIcmp type Name Code Description Unreachable for Type Internet protocols and their numbers Protocol number Keyword IP intervals Set bits Mask IP address class Reserved IP addresses Class IP in- tervalsPage Appendix D. Deﬁnitions of terms ARP DMZ 349 Https NAT Nntp 353 PPP SIP Uucp 357 Appendix D. Deﬁnitions of terms 358 Appendix E. License Conditions Software developed by Peter ÅstrandBSD derived licenses Terms Software developed by Carnegie Mellon University Software developed by Gregory M Christy Software developed by Cisco Systems Software developed by Digital Equipment Corporation Dhcp license Software developed by Jason Downs Software developed by Brian Gladman Software developed by Google, Inc GNU General Public License GPLVersion 2, June Preamble GNU General Public License 367 368 No Warranty IBM Public License Software developed by Ingate Systems Software developed in the GIE Dyade cooperation Software developed by Tommi Komulainen GNU Library General Public License Lgpl v USA 374 GNU Library General Public License 376 377 Page 379 380 GNU Lesser General Public License Lgpl v Version 2.1, February 382 GNU Lesser General Public License 384 385 386 Page Glibc Tzdata 2006a 388 Software in the GNU C distribution Appendix E. License Conditions Appendix E. License Conditions 392 More software in the GNU C distribution 394 License exceptions for gcc/libgcc2.c License exceptions for libstdc++ License for liloLicense Disclaimer Software developed by Paul Mackerras Software developed by Pedro Roque Marques Software developed at M I T License for Net-SNMP Part 1 CMU/UCD copyright notice BSD like Part 4 Sun Microsystems, Inc. copyright notice BSD Part 5 Sparta, Inc copyright notice BSD Part 6 Cisco/BUPTNIC copyright notice BSD License for NTP License for OpenSSH 404 Appendix E. License Conditions 406 407 Snprintf replacement Copyright Patrick Powell 409 License for OpenSSL License for OpenSWAN Python license Release Derived Year Owner GPL- compatible? From Terms and Conditions for Accessing or Otherwise Using Python Beopen Python Open Source License Agreement Version Cnri License Agreement for Python License for Python Imaging Library CWI License Agreement for Python 0.9.0 Through License for Rdisc Software developed by RSA Data Security, Inc More software developed by RSA Data Security, Inc License for SSL License for stunnel Software developed by Sun Microsystems, Inc More software developed by Sun Microsystems, Inc License for Sun RPC License for termcap Software developed by Trusted Information Systems, Inc Software developed by Andrew Tridgell Software developed by Paul Vixie Vovida Software License v Software developed by Rayan S ZachariassenVovida Software License, Version License for zlib Software developed at University of California Openswan-kernel 427 Appendix E. License Conditions Appendix E. License Conditions Readlink Appendix E. License Conditions 430 Register Your Product to Gain Service Beneﬁts Solve Problems OnlinePurchase Extended Warranty Professional Services Appendix F. Obtaining Support for Your 3Com Products Access Software Downloads Contact UsTelephone Technical Support and Repair Asia, Paciﬁc Rim Telephone Technical Support and Repair Latin America Telephone Technical Support and Repair Country Telephone Number US and Canada Telephone Technical Support and Repair For administration Index Conﬁguration logins From the Telecommuting Module MIBs