Basic Administration 236 | HP VCX Software guide

Chapter 14. Basic Administration

236

Image 244

HP VCX Software manual Basic Administration 236

Contents

3Com Telecommuting Module VersionPage United States Government Legend Page Table of Contents Page Part I. Introduction to 3Com VCX IP Telecommuting Module Page Introduction to 3Com VCX IP Telecommuting Module What is a Telecommuting Module?Conﬁguration alternatives DMZ Conﬁguration DMZ/LAN Conﬁguration Quick guide to 3Com VCX IP Telecommuting Module installation Standalone Conﬁguration Introduction to 3Com VCX IP Telecommuting Module About settings in 3Com VCX IP Telecommuting Module Introduction to 3Com VCX IP Telecommuting Module Installing 3Com VCX IP Telecommuting Module InstallationInstallation with magic ping Installation with a serial cablePage Page Page Page Installation with a diskette Page Page Turning off a Telecommuting Module Remember to lock up the Telecommuting Module Installing 3Com VCX IP Telecommuting Module Logging on Conﬁguring 3Com VCX IP Telecommuting ModuleLog on again Log out NavigationSite Map Administration SIP ServicesBasic Conﬁguration Network Conﬁguration Quality of Service Overview of conﬁgurationFailover Virtual Private Networks Preliminary and permanent conﬁguration Page IP address Mask/Bits Name queries in 3Com VCX IP Telecommuting Module No. of computers Mask BitsPage Conﬁguring 3Com VCX IP Telecommuting Module Part II. How To Page DMZ Telecommuting Module, SIP server on the WAN How To Conﬁgure SIPNetworks and Computers Surroundings Basic Settings Interoperability Filtering Routing DMZ Telecommuting Module, SIP server on the LAN Save/Load Conﬁguration Networks and Computers Basic Settings Routing Standalone Telecommuting Module, SIP server on the WAN Basic Settings Filtering Client Settings Standalone Telecommuting Module, SIP server on the LAN Basic Settings Interoperability DMZ/LAN Telecommuting Module, SIP server on the WAN Basic Settings Filtering DMZ/LAN Telecommuting Module, SIP server on the LAN Interoperability Filtering LAN Telecommuting Module Surroundings Filtering Remote SIP Connectivity Firewall How To Conﬁgure SIP How To Conﬁgure Advanced SIP Outgoing Calls Show One Number When Calling Show Different Numbers When Calling Incoming Calls Page Authentication by Accounts a.k.a SIP Trunk via SIP accounts Page Page Page Incoming Calls Page Multiple Operators Least Cost Routing Page Multiple PBXs How To Conﬁgure Advanced SIP How To Conﬁgure Advanced SIP Page Page Page Page Basic Conﬁguration Basic ConﬁgurationGeneral Name of this Telecommuting Module DNS Servers Default domain IP PolicyPolicy For Ping To Your 3Com VCX IP Telecommuting Module Access Control CancelSave Look up all IP addresses again Conﬁguration Allowed Via Interface User Authentication For Web Interface AccessConﬁguration Transport Conﬁguration via Http Conﬁguration via Https Conﬁguration via SSH Conﬁguration ComputersDNS Name Or Network Address Network address Netmask/BitsRange Via IPsec Peer Radius Radius Servers Radius serverPort Secret Contact IP Address IdentiﬁerStatus for Radius Servers Score Sent requestsReceived replies Consecutive sends Conﬁguration of a Radius server Value Snmp v1 and v2c Telecommuting Module IP address to respond to Snmp requestsContact person Node location Access via SNMPv1 and SNMPv2c Access via SNMPv3Snmp Community Password AuthenticationSnmp Traps User Resource Monitoring Trap sending functionTrap receiver Version Download the 3Com MIB SIP Sessions Trap LevelsSIP User Registrations Trap Levels CPU Load Trap Levels Dynamic DNS update DynDNS serviceDynDNS General Conﬁguration Use DynDNS IP address for updates User, Smtp ServerWildcard hostnames Ofﬂine URL redirection Username DNS Names to Update at DynDNS Smtp server is backupSmtp server DNS Name Certiﬁcates Private CertiﬁcatesName Certiﬁcate Create certiﬁcate or certiﬁcate request CA Certiﬁcates Advanced TimeoutsCA Certiﬁcate Timeout for one-way UDP connections Timeout for two-way UDP connectionsTimeout for established TCP connections Timeout for Icmp connections DMZ/LAN Conﬁguration Current Telecommuting Module Type Telecommuting Module Type conﬁgurationChange Telecommuting Module Type to Change type Administration Duration of limited test modeSave/Load Conﬁguration Test Preliminary Conﬁguration Show Message About Unapplied Changes BackupApply conﬁguration Save/Load CLI Command File Show Conﬁguration Revert to Old ConﬁgurationsAbort All Edits Reload Factory Conﬁguration Password For the ’admin’ Account User AdministrationOld password New password, Conﬁrm password Change administration passwordOther Accounts Account Type Currently Logged In Administrators Upgrade UpgradeLog Out Step Try the upgrade Accept upgradeAbort upgrade Table Look Edit Column Date and Time Change Time Zone Change Date and Time Manually DateTime Set date and time manually Change Date and Time With NTP NTP Servers To Use If NTP Is EnabledSynchronize time with NTP Reboot Your 3Com VCX IP Telecommuting Module RestartRestart the SIP Module Automatic Restart of the SIP Module Administration Administration 118 Network Conﬁguration Networks and Computers Subgroup NameLower Limit Upper Limit Interface/VLANDelete Row Create Default Gateway Main Default GatewaysPriority Interface Policy For Packets From Unused Gateways Gateway Reference Hosts Physical device Interface Network Interface 1Interface name Directly Connected Networks Obtain IP Address Dynamically Alias Broadcast addressVlan Id Vlan Name Static Routing Routed network Router Vlan Named VLANs Interface Status Interface Status Dhcp Client Status PPPoE Client Status PPPoE AuthenticationKeep Alive LCP echo-request interval SurroundingsLog class for PPPoE negotiations Network Data InterfacesAdditional Negotiators Select a data interface here Network Conﬁguration 136 Logging Display LogSearch the Log Display log Support Report Packet Selection Packet Type Selection IP Address SelectionProtocol/Port Selection All IP protocols Icmp SIP Packet Selection Call-IDSIP Methods IP addresses Time Limits Export the Log Show ThisShow newest at top Log Clear form Display Load RST Packet Load Time PeriodDirection Unit Value Diagram Diagram SizeDiagram Heading View diagram Inbound Trafﬁc Log class for non-SIP packetsLog class for spoofed packets Log class for broadcast packets Log class for email errors Log class for Radius errorsLog class for Snmp errors Log class for Dhcp requests VPN Events Log class for IPsec key negotiationsLog class for IPsec key negotiation debug messages Log class for ESP packets SIP Events Other Email Address Log ClassesLocal Log Log Sending Syslog Status for Outbound Email Smtp ServerSyslog Servers Reverts the ﬁelds to the previous conﬁguration 157 Logging 158 SIP Services Administration of SIPBasic Settings SIP Module Additional SIP Signaling Ports Provisioning RelayTransport Comment Public IP address for NATed Telecommuting Module SIP Media Port RangeSIP Servers To Monitor SIP Logging Server Log class for SIP signaling Loose Routing InteroperabilityRelaxed Refer-To Remove Via Headers Translation ExceptionsSIP Server Except this from translation Force Translation Expires HeaderAlways Translate This URI Encoding Loose Username Check Signaling Order of Re-INVITEsUser Matching Accept RTP/AVP With sdescriptions Transmit RTP/AVP With sdescriptionsForce Record-Route for Outbound Requests Force Record-Route for All Requests Force Remote TLS Connection Reuse Accept TCP Marked As TLS Allow Large UDP Packets Remove Headers in 180 Responses Use Cancel Body In ACK Forward Cancel BodyPreserve RFC 2543 Hold Open Port 6891 For File Transfer Allow RFC 2069 AuthenticationConvert Escaped Whitespaces in URIs Strip ICE Attributes Keep User-Agent Header When Acting as B2BUAPorts and the maddr Attribute Session timer Timeout for SIP over TCP/TLSSessions and Media Session Conﬁguration Allowed number of concurrent sessions Media ConﬁgurationLimitation of sender of media streams Limitation of RTP Codecs Codecs TypeName This Codec Is Allowed Local Ringback Music on Hold RedirectionLocal Ringback Played at Call Transfer Ring Tone for Local Ringback Default timeout for Invite requests Maximum timeout for Invite requestsRequests SIP blacklist interval Base retransmission timeout for SIP requests Remote SIP ConnectivityMaximum number of retransmissions for Invite requests Maximum number of retransmissions for non-INVITE requests Stun Server Stun serverStun server IP addresses Stun ports Remote Clients Signaling Forwarding Remote NAT TraversalRemote NAT traversal IP Address for Remote Clients NAT timeout for UDP NAT timeout for TCPForward Signaling from IP Address NAT keepalive method SIP Trafﬁc SIP Methods Method Trafﬁc ToAllow Auth Filtering Sender IP Filter RulesFrom Network Action Content Types Default Policy For SIP RequestsContent Type Allow Header Filter Rules Local Registrar Default Header Filter PolicyLocal SIP Domains Local SIP User Database Domain Authentication Name Authentication and AccountingRegister From Authentication settings SIP User Database Asserted-Identity Use P-Asserted-IdentityTrusted Domains Network Dial Plan Radius AccountingUse Dial Plan Emergency Number Matching From Header Reg Expr Matching Request-URI PreﬁxHead Tail Forward To Min. Tail Replacement URI Subno Dial Plan Request-URI Forward ToAdd Preﬁx Enum Root Method Methods in Dial PlanRegister in Dial Plan Routing Enum Root DNS Override For SIP Requests Weight SIP Routing OrderRelay To Port Class 3xx Message Processing Routing Function Static Registrations Requests To UserAlso Forward To User Local Refer Handling Always handle Refer locallyFor clients not supporting Refer Sip/sips For clients not supporting replaces For dialogs with speciﬁed From URIFor dialogs with speciﬁed User-Agent header From URIs For Which Refer is Handled Locally Alias User RoutingRestrict Incoming Callers Send To Voice Mail ForwardAction Voice Mail Server Outbound Proxy From DomainRequest-URI Domain Domain or IP Address Tel URIs Gateway Active Sessions Registrar and Session StatusMonitored SIP Servers Registered Users Monitored SIP serverMonitored SIP server status Registered from Tools Packet CaptureNetwork Interface Selection IP Address Selection Tools Any Icmp Check Network Collect dataCheck Network Test ResultsPage Tools 222 Firewall and Client Conﬁguration DMZ typeSIP over UDP SIP over TCP/TLS DMZ/LAN type SIP clients Standalone type SIP clients Part IV Com VCX IP Telecommuting Module Serial Console Page Connecting to the serial console Basic AdministrationMain Menu Set password Command line interfaceExit admin Wipe email logs Physical device name Deactivate other interfaces Conﬁgure from a single computer Conﬁgure from multiple computers Password Wipe email logs Set password Exit admin Basic Administration 236 Command Reference Command Line ReferenceHelp and Troubleshooting Modifying Tables List-tables Load-factoryModify-row Revert-edits Table Deﬁnitions Conﬁg.allowviainterface Conﬁg.allowconﬁgConﬁg.authlogclass Conﬁg.authentication Conﬁg.httpserversConﬁg.httpsservers Conﬁg.mgmtlogclass Failover.ifacerefhosts Fent.alwaysfentFentalwaysfentexceptions Fentalwaysfentinterfaces Fent.mapsignaladdress Field Name Field Type Explanation Enabled OnOffToggleFent.fentkeepalive Fent.mediarelease ﬁrewall.defaultpolicy ﬁrewall.blindroutepolicyﬁrewall.broadcastlogclass ﬁrewall.dhcplogclass ﬁrewall.ownlogclass ﬁrewall.networkgroupsﬁrewall.pingpolicy ﬁrewall.services ﬁrewall.policylogclassﬁrewall.spooﬁnglogclass ﬁrewall.timeclasses Idsips.active Idsips.predeﬁnedipsrules Idsips.ratelimitedips Ipsec.cryptodefIpsec.espproposals Ipsec.espahlogclass Ipsec.ikelogclass Ipsec.ikeproposalsIpsec.ipsecnets Ipsec.nattkeepalive Ipsec.plutologclass Ipsec.plutoverboselogclassIpsec.radiusauthserver Field Name Field Type Ipsec.userauthlogclass Ipsec.tunnelednetsIpsec.x509cacerts Misc.conntracktimeouts Ipsec.x509certMisc.dnsservers Misc.dyndns Misc.dyndnsname Misc.fversionMisc.ntpservers Field Name Field Type Explanation DomainName Monitor.cpuloadlevelalarm Misc.unitnameMisc.usentp Monitor.emailalertlogclass Monitor.memorylevelalarm Monitor.radiuserrorslogclassMonitor.hardwarelogclass Monitor.logclasses Monitor.snmpagentaddress Monitor.siplevelalarmsMonitor.snmpagentlogclass Monitor.snmpcontactperson Monitor.snmpmanagementstationsMonitor.snmpnodelocation Monitor.snmppacketlogclass Monitor.snmpv1v2caccess Monitor.snmpv3accessMonitor.snmptrapsending Monitor.snmpv1v2cauth Network.extradefaultgateways Monitor.syslogserversMonitor.watchdogs Network.aliasaddresses Network.localnets Network.interfacesNetwork.pppoe Network.routetestservers Network.routesNetwork.vlans Field Name Field Type Explanation Server DnsIpAddress Password.adminusers Pptp.pptpenablePptp.grelogclass Pptp.pptplogclass Pptp.pptpserverip Pptp.pptpusersPptp.pptpneglogclass Field Name Field Type Explanation PPTPOwnIpReference Qos.bandwidths Qos.classes Qos.ingressdefaultqueueing Qos.egressdefaultqueueingQos.egressqueueing Qos.ingressqueueing Qos.sipcacQos.status Qos.tagging Sip.acceleratedtls Sip.activeSip.addexpireheader Sip.allowedcodecs Sip.defaultgateway Sip.authmethodsSip.b2buaofferfromtemplate Sip.codecﬁltering Sip.emergency Sip.externradiusdbSip.externalrelay Field Name Field Type Explanation DnsIpAddress Sip.forwardcancelbody Sip.ﬁxﬁletransferportSip.forcemodify Sip.forwardtoheader Sip.headerﬁlterdefault Sip.headerﬁlterrulesSip.ignoreuriportwhenmaddr Field Name Field Type Explanation Action Sipﬁlteractionsel Sip.largeudp Sip.lcscompanionSip.listen Sip.localdomains Sip.loosereferto Sip.looseusernamecheckSip.lrtrue Sip.mediaencryptionpolicy Sip.mediaencryptionsettings Sip.mediaencryptionsuiteSip.mediaports Field Name Field Type Explanation Portslower PortNumber Sip.mediatimeouts Sip.mediarestrictionSip.message Sip.mfull Sip.optiontimeout Sip.mimetypesSip.monitorserver Sip.musiconhold Field Name Field Type Explanation Timeout OptionTimeout Sip.outboundproxySip.percent20towhitespace Sip.preserve2543hold Sip.radiusacct Sip.recurseon3xxinb2buaSip.registrarlimits Sip.relayrules Sip.removevia Sip.replyconﬁgSip.rewritetoforregisterindp Sip.ringback Sip.routeusesport Sip.routingorderSip.rroutealways Sip.rrouteoutbound Sip.signaladdressfordestination Sip.siperrorslogclassSip.sessionlimits Sip.sipalias Sip.sipsignalinglogclass Sip.siplicenselogclassSip.sipmedialogclass Sip.sipmessagelogclass Sip.tcptimeout Sip.sttypeSip.stripiceattributes Sip.surroundings Sip.tlssettings Sip.tlscacertsSip.tlsclientcfg Sip.tlsservercfg Sip.transactionconﬁg Sip.trusteddomainSip.uriencoding Field Name Field Type Explanation Uriencodingsel Sip.usecancelbodyinack Sipswitch.accountsSipswitch.b2buatransferenable Sip.uaregister Sipswitch.b2buatransferfromuser Sipswitch.dialplanSipswitch.dialplanenable Field Name Field Type Explanation User AliasAlias Sipswitch.dialplanmethods Sipswitch.enumrootSipswitch.forwardto Field Name Field Type Explanation Enabled Fallbacksel Sipswitch.incomingunauth Sipswitch.requestfromSipswitch.requestto Field Name Field Type Explanation Url SipWildcardUrl Sipswitch.userrouting Sipswitch.users Sipswitch.voicemail Userdb.radiuslocalendpointUserdb.radiusservers Voipsm.voipsm AdminPassword AdminTypeSelField Types Voipsm.voipsmdomains AdminUser AliasAliasAliasIpReference AliasUser AuthData CaReference CertReferenceCryptoDefReference DepUsableVlanInterface DnsDynIpAddress DnsDynIpNetworkInterface DnsDynIpOtherHost DyndnsPassword DyndnsServiceSelEnumReference EspCryptoReference FirewallLogclassReference InterfaceSel InviteRetransmitCountIpsRuleName IpsecAuthSel IsakmpSALife LogclassReferenceMaxMessageSizeInteger MaxReg NonemptyString OnOffButtonOnOffToggle OnOffToggleOn OptDnsAutoRuntimeReachableHost OptDnsIpAddress OptCommentOptDSCPInteger OptDepOwnIpReference OptForwardToReference OptIcmpRangeListOptIpsecNetReference OptIpsecPeerReference OptPassword OptServicesReferenceOptPercent OptPercentFloat OptionTimeout OptSipUserDomainOptString OptTimeclassReference PptpPassword RegTimeoutPPTPOwnIpReference Percent SessionTimeout SipUserDomainDefaultAllSipUserPassword SIPRadiusSel SnmpPassword TimerAFloatSipWildcardUrl SubGroup Accounttypesel Accountvoicemailsel Addexpireheadersel AutonegselBlindsel Bypasstransportsel Conﬁgauthsel DpactionselFallbacksel Fentkeepalivesel Functionsel FwtypeselHitsnumber Mediaencryptionsuitesel Pingpolicysel PolicyselPqueuesel Qostypesel Rfc2782weight RegexpwithAtRestfuncsel Rfc2782priority Sipauthdirsel SipﬁlteractionselSipfunctionsel Sipsel Snmptrapversionsel Snmpv3authselSnmpv3privacysel Sttypesel Tlsclientmethods SysloglevelselTlsservermethods Tlsconfsel TrusteddomaintransportselUriencodingsel Voipsmmethodsel Add and change ﬁrewall rules CLI command examplesWindownumber Apply a conﬁguration Part V. Appendices Page Appendix A. More About SIP Why use SIP?SIP Protocol SIP and Firewalls Managing Your Own SIP DomainConﬁguring the 3Com VCX IP Telecommuting Module Page Conﬁguring the DNS Server Conﬁguring the PBXConﬁguring the SIP Clients SIP in 3Com VCX IP Telecommuting Module SIP SessionsEstablishing a SIP session SIP Packet Headers Contact Content-Type ViaRecord-Route Route Appendix A. More About SIP 328 Appendix B. Troubleshooting Network troubleshootingNo trafﬁc shown in the log Trafﬁc discarded as spoofed SIP troubleshooting SIP users can’t register on the Telecommuting ModuleSIP users can’t register through the Telecommuting Module SIP Trunking calls via SIP operator Administration troubleshooting Call is established, but there is no voice SIP errors Log MessagesSIP send failure -1 on socket -1 event number Destination IP addressport is known bad. Skipping IPsec key negotiations Starting SIP TCP server at portStarting SIP UDP server at port Stopped SIP TCP server Conﬁguration server logins List of the most important reserved ports Name Port/protocol Description WWW Cmip Krcmd Kerberos encrypted remote shell -kfall List of Icmp types Type Name Type Name Reference Icmp codesIcmp type Name Code Description Unreachable for Type Internet protocols and their numbers Protocol number Keyword IP intervals Set bits Mask IP address class Reserved IP addresses Class IP in- tervalsPage Appendix D. Deﬁnitions of terms ARP DMZ 349 Https NAT Nntp 353 PPP SIP Uucp 357 Appendix D. Deﬁnitions of terms 358 Appendix E. License Conditions Software developed by Peter ÅstrandBSD derived licenses Terms Software developed by Carnegie Mellon University Software developed by Gregory M Christy Software developed by Cisco Systems Software developed by Digital Equipment Corporation Dhcp license Software developed by Jason Downs Software developed by Brian Gladman Software developed by Google, Inc GNU General Public License GPLVersion 2, June Preamble GNU General Public License 367 368 No Warranty IBM Public License Software developed by Ingate Systems Software developed in the GIE Dyade cooperation Software developed by Tommi Komulainen GNU Library General Public License Lgpl v USA 374 GNU Library General Public License 376 377 Page 379 380 GNU Lesser General Public License Lgpl v Version 2.1, February 382 GNU Lesser General Public License 384 385 386 Page Glibc Tzdata 2006a 388 Software in the GNU C distribution Appendix E. License Conditions Appendix E. License Conditions 392 More software in the GNU C distribution 394 License exceptions for gcc/libgcc2.c License exceptions for libstdc++ License for liloLicense Disclaimer Software developed by Paul Mackerras Software developed by Pedro Roque Marques Software developed at M I T License for Net-SNMP Part 1 CMU/UCD copyright notice BSD like Part 4 Sun Microsystems, Inc. copyright notice BSD Part 5 Sparta, Inc copyright notice BSD Part 6 Cisco/BUPTNIC copyright notice BSD License for NTP License for OpenSSH 404 Appendix E. License Conditions 406 407 Snprintf replacement Copyright Patrick Powell 409 License for OpenSSL License for OpenSWAN Python license Release Derived Year Owner GPL- compatible? From Terms and Conditions for Accessing or Otherwise Using Python Beopen Python Open Source License Agreement Version Cnri License Agreement for Python License for Python Imaging Library CWI License Agreement for Python 0.9.0 Through License for Rdisc Software developed by RSA Data Security, Inc More software developed by RSA Data Security, Inc License for SSL License for stunnel Software developed by Sun Microsystems, Inc More software developed by Sun Microsystems, Inc License for Sun RPC License for termcap Software developed by Trusted Information Systems, Inc Software developed by Andrew Tridgell Software developed by Paul Vixie Software developed by Rayan S Zachariassen Vovida Software License vVovida Software License, Version License for zlib Software developed at University of California Openswan-kernel 427 Appendix E. License Conditions Appendix E. License Conditions Readlink Appendix E. License Conditions 430 Register Your Product to Gain Service Beneﬁts Solve Problems OnlinePurchase Extended Warranty Professional Services Appendix F. Obtaining Support for Your 3Com Products Access Software Downloads Contact UsTelephone Technical Support and Repair Asia, Paciﬁc Rim Telephone Technical Support and Repair Latin America Telephone Technical Support and Repair Country Telephone Number US and Canada Telephone Technical Support and Repair For administration Index Conﬁguration logins From the Telecommuting Module MIBs