Manuals / HP / Computer Equipment / Software

HP VCX Software manual Installing 3Com VCX IP Telecommuting Module

Models: VCX Software

1 446

Download 446 pages 4.55 Kb

Page 24

Chapter 2. Installing 3Com VCX IP Telecommuting Module

16

Image 24

HP VCX Software manual Installing 3Com VCX IP Telecommuting Module

Contents

3Com Telecommuting Module VersionPage United States Government Legend Page Table of Contents Page Part I. Introduction to 3Com VCX IP Telecommuting Module Page What is a Telecommuting Module? Introduction to 3Com VCX IP Telecommuting ModuleConﬁguration alternatives DMZ Conﬁguration DMZ/LAN ConﬁgurationQuick guide to 3Com VCX IP Telecommuting Module installation Standalone ConﬁgurationIntroduction to 3Com VCX IP Telecommuting Module About settings in 3Com VCX IP Telecommuting Module Introduction to 3Com VCX IP Telecommuting Module Installing 3Com VCX IP Telecommuting Module InstallationInstallation with magic ping Installation with a serial cablePage Page Page Page Installation with a diskette Page Page Turning off a Telecommuting Module Remember to lock up the Telecommuting ModuleInstalling 3Com VCX IP Telecommuting Module Conﬁguring 3Com VCX IP Telecommuting Module Logging onLog on again Navigation Log outSite Map Administration SIP ServicesBasic Conﬁguration Network ConﬁgurationQuality of Service Overview of conﬁgurationFailover Virtual Private NetworksPreliminary and permanent conﬁguration Page IP address Mask/BitsName queries in 3Com VCX IP Telecommuting Module No. of computers Mask BitsPage Conﬁguring 3Com VCX IP Telecommuting Module Part II. How To Page How To Conﬁgure SIP DMZ Telecommuting Module, SIP server on the WANNetworks and Computers Surroundings Basic Settings InteroperabilityFiltering RoutingDMZ Telecommuting Module, SIP server on the LAN Save/Load ConﬁgurationNetworks and Computers Basic Settings Routing Standalone Telecommuting Module, SIP server on the WAN Basic Settings Filtering Client Settings Standalone Telecommuting Module, SIP server on the LANBasic Settings Interoperability DMZ/LAN Telecommuting Module, SIP server on the WAN Basic Settings Filtering DMZ/LAN Telecommuting Module, SIP server on the LAN Interoperability Filtering LAN Telecommuting Module Surroundings Filtering Remote SIP Connectivity Firewall How To Conﬁgure SIP How To Conﬁgure Advanced SIP Outgoing CallsShow One Number When Calling Show Different Numbers When Calling Incoming Calls Page Authentication by Accounts a.k.a SIP Trunk via SIP accounts Page Page Page Incoming Calls Page Multiple Operators Least Cost Routing Page Multiple PBXs How To Conﬁgure Advanced SIP How To Conﬁgure Advanced SIP Page Page Page Page Basic Conﬁguration Basic ConﬁgurationGeneral Name of this Telecommuting ModuleDefault domain IP Policy DNS ServersPolicy For Ping To Your 3Com VCX IP Telecommuting Module Access Control CancelSave Look up all IP addresses againUser Authentication For Web Interface Access Conﬁguration Allowed Via InterfaceConﬁguration Transport Conﬁguration via Http Conﬁguration via HttpsConﬁguration Computers Conﬁguration via SSHDNS Name Or Network Address Network address Netmask/BitsRange Via IPsec PeerRadius Radius Servers Radius serverPort SecretIdentiﬁer Contact IP AddressStatus for Radius Servers Score Sent requestsReceived replies Consecutive sendsConﬁguration of a Radius server ValueSnmp v1 and v2c Telecommuting Module IP address to respond to Snmp requestsContact person Node locationAccess via SNMPv1 and SNMPv2c Access via SNMPv3Snmp CommunityPassword AuthenticationSnmp Traps UserResource Monitoring Trap sending functionTrap receiver VersionDownload the 3Com MIB SIP Sessions Trap LevelsSIP User Registrations Trap Levels CPU Load Trap LevelsDynamic DNS update DynDNS serviceDynDNS General Conﬁguration Use DynDNSIP address for updates User, Smtp ServerWildcard hostnames Ofﬂine URL redirection UsernameDNS Names to Update at DynDNS Smtp server is backupSmtp server DNS NameCertiﬁcates Private CertiﬁcatesName CertiﬁcateCreate certiﬁcate or certiﬁcate request CA Certiﬁcates Timeouts AdvancedCA Certiﬁcate Timeout for one-way UDP connections Timeout for two-way UDP connectionsTimeout for established TCP connections Timeout for Icmp connectionsDMZ/LAN Conﬁguration Telecommuting Module Type conﬁguration Current Telecommuting Module TypeChange Telecommuting Module Type to Change type Administration Duration of limited test modeSave/Load Conﬁguration Test Preliminary ConﬁgurationBackup Show Message About Unapplied ChangesApply conﬁguration Save/Load CLI Command File Show Conﬁguration Revert to Old ConﬁgurationsAbort All Edits Reload Factory ConﬁgurationUser Administration Password For the ’admin’ AccountOld password New password, Conﬁrm password Change administration passwordOther Accounts Account TypeCurrently Logged In Administrators Upgrade UpgradeLog Out StepTry the upgrade Accept upgradeAbort upgrade Table LookEdit Column Date and Time Change Time ZoneChange Date and Time Manually DateTime Set date and time manuallyNTP Servers To Use If NTP Is Enabled Change Date and Time With NTPSynchronize time with NTP Reboot Your 3Com VCX IP Telecommuting Module RestartRestart the SIP Module Automatic Restart of the SIP ModuleAdministration Administration 118 Network Conﬁguration Networks and ComputersName SubgroupLower Limit Upper Limit Interface/VLANDelete Row CreateDefault Gateway Main Default GatewaysPriority InterfacePolicy For Packets From Unused Gateways Gateway Reference HostsInterface Network Interface 1 Physical deviceInterface name Directly Connected Networks Obtain IP Address DynamicallyAlias Broadcast addressVlan Id Vlan NameStatic Routing Routed network RouterVlan Named VLANsInterface Status Interface StatusDhcp Client Status PPPoE Client StatusAuthentication PPPoEKeep Alive Surroundings LCP echo-request intervalLog class for PPPoE negotiations Data Interfaces NetworkAdditional Negotiators Select a data interface here Network Conﬁguration 136 Logging Display LogSearch the Log Display logSupport Report Packet SelectionPacket Type Selection IP Address SelectionProtocol/Port Selection All IP protocolsIcmp SIP Packet Selection Call-IDSIP Methods IP addressesTime Limits Show This Export the LogShow newest at top Log Clear formDisplay Load RSTPacket Load Time PeriodDirection UnitValue Diagram Diagram SizeDiagram Heading View diagramInbound Trafﬁc Log class for non-SIP packetsLog class for spoofed packets Log class for broadcast packetsLog class for email errors Log class for Radius errorsLog class for Snmp errors Log class for Dhcp requestsVPN Events Log class for IPsec key negotiationsLog class for IPsec key negotiation debug messages Log class for ESP packetsSIP Events Other Log Classes Email AddressLocal Log Log Sending SyslogSmtp Server Status for Outbound EmailSyslog Servers Reverts the ﬁelds to the previous conﬁguration 157 Logging 158 SIP Services Administration of SIPBasic Settings SIP ModuleAdditional SIP Signaling Ports Provisioning RelayTransport CommentSIP Media Port Range Public IP address for NATed Telecommuting ModuleSIP Servers To Monitor SIP Logging ServerLog class for SIP signaling Interoperability Loose RoutingRelaxed Refer-To Remove Via Headers Translation ExceptionsSIP Server Except this from translationExpires Header Force TranslationAlways Translate This URI Encoding Signaling Order of Re-INVITEs Loose Username CheckUser Matching Accept RTP/AVP With sdescriptions Transmit RTP/AVP With sdescriptionsForce Record-Route for Outbound Requests Force Record-Route for All RequestsForce Remote TLS Connection Reuse Accept TCP Marked As TLSAllow Large UDP Packets Remove Headers in 180 ResponsesForward Cancel Body Use Cancel Body In ACKPreserve RFC 2543 Hold Allow RFC 2069 Authentication Open Port 6891 For File TransferConvert Escaped Whitespaces in URIs Keep User-Agent Header When Acting as B2BUA Strip ICE AttributesPorts and the maddr Attribute Session timer Timeout for SIP over TCP/TLSSessions and Media Session ConﬁgurationMedia Conﬁguration Allowed number of concurrent sessionsLimitation of sender of media streams Limitation of RTP Codecs Codecs TypeName This Codec Is AllowedLocal Ringback Music on Hold RedirectionLocal Ringback Played at Call Transfer Ring Tone for Local RingbackDefault timeout for Invite requests Maximum timeout for Invite requestsRequests SIP blacklist intervalBase retransmission timeout for SIP requests Remote SIP ConnectivityMaximum number of retransmissions for Invite requests Maximum number of retransmissions for non-INVITE requestsStun Server Stun serverStun server IP addresses Stun portsRemote Clients Signaling Forwarding Remote NAT TraversalRemote NAT traversal IP Address for Remote ClientsNAT timeout for UDP NAT timeout for TCPForward Signaling from IP Address NAT keepalive methodSIP Trafﬁc SIP MethodsMethod Trafﬁc ToAllow AuthFiltering Sender IP Filter RulesFrom Network ActionContent Types Default Policy For SIP RequestsContent Type AllowHeader Filter Rules Default Header Filter Policy Local RegistrarLocal SIP Domains Local SIP User Database DomainAuthentication and Accounting Authentication NameRegister From Authentication settings SIP User DatabaseAsserted-Identity Use P-Asserted-IdentityTrusted Domains NetworkDial Plan Radius AccountingUse Dial Plan Emergency NumberMatching From Header Reg ExprMatching Request-URI PreﬁxHead TailForward To Min. TailReplacement URI SubnoDial Plan Request-URI Forward ToAdd Preﬁx Enum RootMethods in Dial Plan MethodRegister in Dial Plan Routing Enum RootDNS Override For SIP Requests Weight SIP Routing OrderRelay To PortClass 3xx Message Processing Routing FunctionStatic Registrations Requests To UserAlso Forward To UserLocal Refer Handling Always handle Refer locallyFor clients not supporting Refer Sip/sipsFor clients not supporting replaces For dialogs with speciﬁed From URIFor dialogs with speciﬁed User-Agent header From URIs For Which Refer is Handled LocallyUser Routing AliasRestrict Incoming Callers Forward Send To Voice MailAction Voice Mail Server Outbound Proxy From DomainRequest-URI Domain Domain or IP AddressTel URIs GatewayRegistrar and Session Status Active SessionsMonitored SIP Servers Registered Users Monitored SIP serverMonitored SIP server status Registered fromTools Packet CaptureNetwork Interface Selection IP Address SelectionTools Any Icmp Check Network Collect dataCheck Network Test ResultsPage Tools 222 Firewall and Client Conﬁguration DMZ typeSIP over UDP SIP over TCP/TLSDMZ/LAN type SIP clientsStandalone type SIP clients Part IV Com VCX IP Telecommuting Module Serial Console Page Basic Administration Connecting to the serial consoleMain Menu Set password Command line interfaceExit admin Wipe email logsPhysical device name Deactivate other interfacesConﬁgure from a single computer Conﬁgure from multiple computersPassword Wipe email logs Set password Exit adminBasic Administration 236 Command Line Reference Command ReferenceHelp and Troubleshooting Modifying Tables List-tables Load-factoryModify-row Revert-editsTable Deﬁnitions Conﬁg.allowconﬁg Conﬁg.allowviainterfaceConﬁg.authlogclass Conﬁg.authentication Conﬁg.httpserversConﬁg.httpsservers Conﬁg.mgmtlogclassFailover.ifacerefhosts Fent.alwaysfentFentalwaysfentexceptions FentalwaysfentinterfacesFent.mapsignaladdress Field Name Field Type Explanation Enabled OnOffToggleFent.fentkeepalive Fent.mediareleaseﬁrewall.defaultpolicy ﬁrewall.blindroutepolicyﬁrewall.broadcastlogclass ﬁrewall.dhcplogclassﬁrewall.networkgroups ﬁrewall.ownlogclassﬁrewall.pingpolicy ﬁrewall.services ﬁrewall.policylogclassﬁrewall.spooﬁnglogclass ﬁrewall.timeclassesIdsips.active Idsips.predeﬁnedipsrulesIdsips.ratelimitedips Ipsec.cryptodefIpsec.espproposals Ipsec.espahlogclassIpsec.ikelogclass Ipsec.ikeproposalsIpsec.ipsecnets Ipsec.nattkeepaliveIpsec.plutologclass Ipsec.plutoverboselogclassIpsec.radiusauthserver Field Name Field TypeIpsec.tunnelednets Ipsec.userauthlogclassIpsec.x509cacerts Misc.conntracktimeouts Ipsec.x509certMisc.dnsservers Misc.dyndnsMisc.dyndnsname Misc.fversionMisc.ntpservers Field Name Field Type Explanation DomainNameMonitor.cpuloadlevelalarm Misc.unitnameMisc.usentp Monitor.emailalertlogclassMonitor.memorylevelalarm Monitor.radiuserrorslogclassMonitor.hardwarelogclass Monitor.logclassesMonitor.siplevelalarms Monitor.snmpagentaddressMonitor.snmpagentlogclass Monitor.snmpcontactperson Monitor.snmpmanagementstationsMonitor.snmpnodelocation Monitor.snmppacketlogclassMonitor.snmpv1v2caccess Monitor.snmpv3accessMonitor.snmptrapsending Monitor.snmpv1v2cauthNetwork.extradefaultgateways Monitor.syslogserversMonitor.watchdogs Network.aliasaddressesNetwork.interfaces Network.localnetsNetwork.pppoe Network.routetestservers Network.routesNetwork.vlans Field Name Field Type Explanation Server DnsIpAddressPassword.adminusers Pptp.pptpenablePptp.grelogclass Pptp.pptplogclassPptp.pptpserverip Pptp.pptpusersPptp.pptpneglogclass Field Name Field Type Explanation PPTPOwnIpReferenceQos.bandwidths Qos.classesQos.egressdefaultqueueing Qos.ingressdefaultqueueingQos.egressqueueing Qos.ingressqueueing Qos.sipcacQos.status Qos.taggingSip.acceleratedtls Sip.activeSip.addexpireheader Sip.allowedcodecsSip.defaultgateway Sip.authmethodsSip.b2buaofferfromtemplate Sip.codecﬁlteringSip.emergency Sip.externradiusdbSip.externalrelay Field Name Field Type Explanation DnsIpAddressSip.forwardcancelbody Sip.ﬁxﬁletransferportSip.forcemodify Sip.forwardtoheaderSip.headerﬁlterdefault Sip.headerﬁlterrulesSip.ignoreuriportwhenmaddr Field Name Field Type Explanation Action SipﬁlteractionselSip.largeudp Sip.lcscompanionSip.listen Sip.localdomainsSip.loosereferto Sip.looseusernamecheckSip.lrtrue Sip.mediaencryptionpolicySip.mediaencryptionsettings Sip.mediaencryptionsuiteSip.mediaports Field Name Field Type Explanation Portslower PortNumberSip.mediatimeouts Sip.mediarestrictionSip.message Sip.mfullSip.optiontimeout Sip.mimetypesSip.monitorserver Sip.musiconholdField Name Field Type Explanation Timeout OptionTimeout Sip.outboundproxySip.percent20towhitespace Sip.preserve2543holdSip.radiusacct Sip.recurseon3xxinb2buaSip.registrarlimits Sip.relayrulesSip.removevia Sip.replyconﬁgSip.rewritetoforregisterindp Sip.ringbackSip.routeusesport Sip.routingorderSip.rroutealways Sip.rrouteoutboundSip.signaladdressfordestination Sip.siperrorslogclassSip.sessionlimits Sip.sipaliasSip.sipsignalinglogclass Sip.siplicenselogclassSip.sipmedialogclass Sip.sipmessagelogclassSip.tcptimeout Sip.sttypeSip.stripiceattributes Sip.surroundingsSip.tlssettings Sip.tlscacertsSip.tlsclientcfg Sip.tlsservercfgSip.transactionconﬁg Sip.trusteddomainSip.uriencoding Field Name Field Type Explanation UriencodingselSip.usecancelbodyinack Sipswitch.accountsSipswitch.b2buatransferenable Sip.uaregisterSipswitch.b2buatransferfromuser Sipswitch.dialplanSipswitch.dialplanenable Field Name Field Type Explanation User AliasAliasSipswitch.dialplanmethods Sipswitch.enumrootSipswitch.forwardto Field Name Field Type Explanation Enabled FallbackselSipswitch.incomingunauth Sipswitch.requestfromSipswitch.requestto Field Name Field Type Explanation Url SipWildcardUrlSipswitch.userrouting Sipswitch.usersSipswitch.voicemail Userdb.radiuslocalendpointUserdb.radiusservers Voipsm.voipsmAdminPassword AdminTypeSelField Types Voipsm.voipsmdomainsAdminUser AliasAliasAliasIpReference AliasUser AuthDataCaReference CertReferenceCryptoDefReference DepUsableVlanInterface DnsDynIpAddress DnsDynIpNetworkInterface DnsDynIpOtherHostDyndnsPassword DyndnsServiceSelEnumReference EspCryptoReference FirewallLogclassReferenceInterfaceSel InviteRetransmitCountIpsRuleName IpsecAuthSelIsakmpSALife LogclassReferenceMaxMessageSizeInteger MaxRegNonemptyString OnOffButtonOnOffToggle OnOffToggleOnOptDnsAutoRuntimeReachableHost OptDnsIpAddress OptCommentOptDSCPInteger OptDepOwnIpReferenceOptForwardToReference OptIcmpRangeListOptIpsecNetReference OptIpsecPeerReferenceOptPassword OptServicesReferenceOptPercent OptPercentFloatOptionTimeout OptSipUserDomainOptString OptTimeclassReferencePptpPassword RegTimeoutPPTPOwnIpReference PercentSessionTimeout SipUserDomainDefaultAllSipUserPassword SIPRadiusSelSnmpPassword TimerAFloatSipWildcardUrl SubGroupAccounttypesel AccountvoicemailselAddexpireheadersel AutonegselBlindsel BypasstransportselConﬁgauthsel DpactionselFallbacksel FentkeepaliveselFunctionsel FwtypeselHitsnumber MediaencryptionsuiteselPingpolicysel PolicyselPqueuesel QostypeselRfc2782weight RegexpwithAtRestfuncsel Rfc2782prioritySipauthdirsel SipﬁlteractionselSipfunctionsel SipselSnmptrapversionsel Snmpv3authselSnmpv3privacysel SttypeselSysloglevelsel TlsclientmethodsTlsservermethods Tlsconfsel TrusteddomaintransportselUriencodingsel VoipsmmethodselCLI command examples Add and change ﬁrewall rulesWindownumber Apply a conﬁguration Part V. Appendices Page Why use SIP? Appendix A. More About SIPSIP Protocol Managing Your Own SIP Domain SIP and FirewallsConﬁguring the 3Com VCX IP Telecommuting Module Page Conﬁguring the PBX Conﬁguring the DNS ServerConﬁguring the SIP Clients SIP Sessions SIP in 3Com VCX IP Telecommuting ModuleEstablishing a SIP session SIP Packet Headers ContactContent-Type ViaRecord-Route RouteAppendix A. More About SIP 328 Appendix B. Troubleshooting Network troubleshootingNo trafﬁc shown in the log Trafﬁc discarded as spoofedSIP troubleshooting SIP users can’t register on the Telecommuting ModuleSIP users can’t register through the Telecommuting Module SIP Trunking calls via SIP operatorAdministration troubleshooting Call is established, but there is no voiceSIP errors Log MessagesSIP send failure -1 on socket -1 event number Destination IP addressport is known bad. SkippingIPsec key negotiations Starting SIP TCP server at portStarting SIP UDP server at port Stopped SIP TCP serverConﬁguration server logins List of the most important reserved ports Name Port/protocol DescriptionWWW Cmip Krcmd Kerberos encrypted remote shell -kfall List of Icmp types Type NameIcmp codes Type Name ReferenceIcmp type Name Code Description Unreachable for Type Internet protocols and their numbers Protocol number KeywordIP intervals Set bits Mask IP address class Reserved IP addresses Class IP in- tervalsPage Appendix D. Deﬁnitions of terms ARPDMZ 349 Https NAT Nntp 353 PPP SIP Uucp 357 Appendix D. Deﬁnitions of terms 358 Appendix E. License Conditions Software developed by Peter ÅstrandBSD derived licenses TermsSoftware developed by Carnegie Mellon University Software developed by Gregory M Christy Software developed by Cisco SystemsSoftware developed by Digital Equipment Corporation Dhcp license Software developed by Jason DownsSoftware developed by Brian Gladman Software developed by Google, Inc GNU General Public License GPLVersion 2, June PreambleGNU General Public License 367 368 No Warranty IBM Public License Software developed by Ingate Systems Software developed in the GIE Dyade cooperationSoftware developed by Tommi Komulainen GNU Library General Public License Lgpl v USA374 GNU Library General Public License 376 377 Page 379 380 GNU Lesser General Public License Lgpl v Version 2.1, February382 GNU Lesser General Public License 384 385 386 Page Glibc Tzdata 2006a 388 Software in the GNU C distribution Appendix E. License Conditions Appendix E. License Conditions 392 More software in the GNU C distribution 394 License exceptions for gcc/libgcc2.c License exceptions for libstdc++ License for liloLicense DisclaimerSoftware developed by Paul Mackerras Software developed by Pedro Roque Marques Software developed at M I TLicense for Net-SNMP Part 1 CMU/UCD copyright notice BSD likePart 4 Sun Microsystems, Inc. copyright notice BSD Part 5 Sparta, Inc copyright notice BSD Part 6 Cisco/BUPTNIC copyright notice BSD License for NTP License for OpenSSH404 Appendix E. License Conditions 406 407 Snprintf replacement Copyright Patrick Powell 409 License for OpenSSL License for OpenSWAN Python license Release Derived Year Owner GPL- compatible? FromTerms and Conditions for Accessing or Otherwise Using Python Beopen Python Open Source License Agreement Version Cnri License Agreement for Python License for Python Imaging Library CWI License Agreement for Python 0.9.0 ThroughLicense for Rdisc Software developed by RSA Data Security, Inc More software developed by RSA Data Security, IncLicense for SSL License for stunnel Software developed by Sun Microsystems, IncMore software developed by Sun Microsystems, Inc License for Sun RPCLicense for termcap Software developed by Trusted Information Systems, IncSoftware developed by Andrew Tridgell Software developed by Paul VixieVovida Software License v Software developed by Rayan S ZachariassenVovida Software License, Version License for zlib Software developed at University of CaliforniaOpenswan-kernel 427 Appendix E. License Conditions Appendix E. License Conditions Readlink Appendix E. License Conditions 430 Register Your Product to Gain Service Beneﬁts Solve Problems OnlinePurchase Extended Warranty Professional Services Appendix F. Obtaining Support for Your 3Com ProductsAccess Software Downloads Contact UsTelephone Technical Support and Repair Asia, Paciﬁc Rim Telephone Technical Support and RepairLatin America Telephone Technical Support and Repair Country Telephone NumberUS and Canada Telephone Technical Support and Repair For administration IndexConﬁguration logins From the Telecommuting Module MIBs