Conﬁguring 3Com VCX IP Telecommuting Module | HP VCX Software

Chapter 3. Conﬁguring 3Com VCX IP Telecommuting Module

26

Image 34

HP VCX Software manual Conﬁguring 3Com VCX IP Telecommuting Module

Contents

3Com Telecommuting Module VersionPage United States Government Legend Page Table of Contents Page Part I. Introduction to 3Com VCX IP Telecommuting Module Page Introduction to 3Com VCX IP Telecommuting Module What is a Telecommuting Module?Conﬁguration alternatives DMZ Conﬁguration DMZ/LAN Conﬁguration Quick guide to 3Com VCX IP Telecommuting Module installation Standalone Conﬁguration Introduction to 3Com VCX IP Telecommuting Module About settings in 3Com VCX IP Telecommuting Module Introduction to 3Com VCX IP Telecommuting Module Installation with magic ping Installing 3Com VCX IP Telecommuting ModuleInstallation Installation with a serial cablePage Page Page Page Installation with a diskette Page Page Turning off a Telecommuting Module Remember to lock up the Telecommuting Module Installing 3Com VCX IP Telecommuting Module Logging on Conﬁguring 3Com VCX IP Telecommuting ModuleLog on again Log out NavigationSite Map Basic Conﬁguration AdministrationSIP Services Network Conﬁguration Failover Quality of ServiceOverview of conﬁguration Virtual Private Networks Preliminary and permanent conﬁguration Page IP address Mask/Bits Name queries in 3Com VCX IP Telecommuting Module No. of computers Mask BitsPage Conﬁguring 3Com VCX IP Telecommuting Module Part II. How To Page DMZ Telecommuting Module, SIP server on the WAN How To Conﬁgure SIPNetworks and Computers Surroundings Basic Settings Interoperability Filtering Routing DMZ Telecommuting Module, SIP server on the LAN Save/Load Conﬁguration Networks and Computers Basic Settings Routing Standalone Telecommuting Module, SIP server on the WAN Basic Settings Filtering Client Settings Standalone Telecommuting Module, SIP server on the LAN Basic Settings Interoperability DMZ/LAN Telecommuting Module, SIP server on the WAN Basic Settings Filtering DMZ/LAN Telecommuting Module, SIP server on the LAN Interoperability Filtering LAN Telecommuting Module Surroundings Filtering Remote SIP Connectivity Firewall How To Conﬁgure SIP How To Conﬁgure Advanced SIP Outgoing Calls Show One Number When Calling Show Different Numbers When Calling Incoming Calls Page Authentication by Accounts a.k.a SIP Trunk via SIP accounts Page Page Page Incoming Calls Page Multiple Operators Least Cost Routing Page Multiple PBXs How To Conﬁgure Advanced SIP How To Conﬁgure Advanced SIP Page Page Page Page General Basic ConﬁgurationBasic Conﬁguration Name of this Telecommuting Module DNS Servers Default domain IP PolicyPolicy For Ping To Your 3Com VCX IP Telecommuting Module Save Access ControlCancel Look up all IP addresses again Conﬁguration Allowed Via Interface User Authentication For Web Interface AccessConﬁguration Transport Conﬁguration via Http Conﬁguration via Https Conﬁguration via SSH Conﬁguration ComputersDNS Name Or Network Address Range Network addressNetmask/Bits Via IPsec Peer Radius Port Radius ServersRadius server Secret Contact IP Address IdentiﬁerStatus for Radius Servers Received replies ScoreSent requests Consecutive sends Conﬁguration of a Radius server Value Contact person Snmp v1 and v2cTelecommuting Module IP address to respond to Snmp requests Node location Snmp Access via SNMPv1 and SNMPv2cAccess via SNMPv3 Community Snmp Traps PasswordAuthentication User Trap receiver Resource MonitoringTrap sending function Version SIP User Registrations Trap Levels Download the 3Com MIBSIP Sessions Trap Levels CPU Load Trap Levels DynDNS General Conﬁguration Dynamic DNS updateDynDNS service Use DynDNS Wildcard hostnames Ofﬂine URL redirection IP address for updatesUser, Smtp Server Username Smtp server DNS Names to Update at DynDNSSmtp server is backup DNS Name Name CertiﬁcatesPrivate Certiﬁcates Certiﬁcate Create certiﬁcate or certiﬁcate request CA Certiﬁcates Advanced TimeoutsCA Certiﬁcate Timeout for established TCP connections Timeout for one-way UDP connectionsTimeout for two-way UDP connections Timeout for Icmp connections DMZ/LAN Conﬁguration Current Telecommuting Module Type Telecommuting Module Type conﬁgurationChange Telecommuting Module Type to Change type Save/Load Conﬁguration AdministrationDuration of limited test mode Test Preliminary Conﬁguration Show Message About Unapplied Changes BackupApply conﬁguration Save/Load CLI Command File Abort All Edits Show ConﬁgurationRevert to Old Conﬁgurations Reload Factory Conﬁguration Password For the ’admin’ Account User AdministrationOld password Other Accounts New password, Conﬁrm passwordChange administration password Account Type Currently Logged In Administrators Log Out UpgradeUpgrade Step Abort upgrade Try the upgradeAccept upgrade Table Look Edit Column Date and Time Change Time Zone Time Change Date and Time ManuallyDate Set date and time manually Change Date and Time With NTP NTP Servers To Use If NTP Is EnabledSynchronize time with NTP Restart the SIP Module Reboot Your 3Com VCX IP Telecommuting ModuleRestart Automatic Restart of the SIP Module Administration Administration 118 Network Conﬁguration Networks and Computers Subgroup NameLower Limit Delete Row Upper LimitInterface/VLAN Create Priority Default GatewayMain Default Gateways Interface Policy For Packets From Unused Gateways Gateway Reference Hosts Physical device Interface Network Interface 1Interface name Directly Connected Networks Obtain IP Address Dynamically Vlan Id AliasBroadcast address Vlan Name Static Routing Routed network Router Vlan Named VLANs Interface Status Interface Status Dhcp Client Status PPPoE Client Status PPPoE AuthenticationKeep Alive LCP echo-request interval SurroundingsLog class for PPPoE negotiations Network Data InterfacesAdditional Negotiators Select a data interface here Network Conﬁguration 136 Search the Log LoggingDisplay Log Display log Support Report Packet Selection Protocol/Port Selection Packet Type SelectionIP Address Selection All IP protocols Icmp SIP Methods SIP Packet SelectionCall-ID IP addresses Time Limits Export the Log Show ThisShow newest at top Log Clear form Display Load RST Direction Packet LoadTime Period Unit Value Diagram Heading DiagramDiagram Size View diagram Log class for spoofed packets Inbound TrafﬁcLog class for non-SIP packets Log class for broadcast packets Log class for Snmp errors Log class for email errorsLog class for Radius errors Log class for Dhcp requests Log class for IPsec key negotiation debug messages VPN EventsLog class for IPsec key negotiations Log class for ESP packets SIP Events Other Email Address Log ClassesLocal Log Log Sending Syslog Status for Outbound Email Smtp ServerSyslog Servers Reverts the ﬁelds to the previous conﬁguration 157 Logging 158 Basic Settings SIP ServicesAdministration of SIP SIP Module Transport Additional SIP Signaling PortsProvisioning Relay Comment Public IP address for NATed Telecommuting Module SIP Media Port RangeSIP Servers To Monitor SIP Logging Server Log class for SIP signaling Loose Routing InteroperabilityRelaxed Refer-To SIP Server Remove Via HeadersTranslation Exceptions Except this from translation Force Translation Expires HeaderAlways Translate This URI Encoding Loose Username Check Signaling Order of Re-INVITEsUser Matching Force Record-Route for Outbound Requests Accept RTP/AVP With sdescriptionsTransmit RTP/AVP With sdescriptions Force Record-Route for All Requests Force Remote TLS Connection Reuse Accept TCP Marked As TLS Allow Large UDP Packets Remove Headers in 180 Responses Use Cancel Body In ACK Forward Cancel BodyPreserve RFC 2543 Hold Open Port 6891 For File Transfer Allow RFC 2069 AuthenticationConvert Escaped Whitespaces in URIs Strip ICE Attributes Keep User-Agent Header When Acting as B2BUAPorts and the maddr Attribute Sessions and Media Session timerTimeout for SIP over TCP/TLS Session Conﬁguration Allowed number of concurrent sessions Media ConﬁgurationLimitation of sender of media streams Limitation of RTP Codecs Name CodecsType This Codec Is Allowed Local Ringback Played at Call Transfer Local RingbackMusic on Hold Redirection Ring Tone for Local Ringback Requests Default timeout for Invite requestsMaximum timeout for Invite requests SIP blacklist interval Maximum number of retransmissions for Invite requests Base retransmission timeout for SIP requestsRemote SIP Connectivity Maximum number of retransmissions for non-INVITE requests Stun server IP addresses Stun ServerStun server Stun ports Remote NAT traversal Remote Clients Signaling ForwardingRemote NAT Traversal IP Address for Remote Clients Forward Signaling from IP Address NAT timeout for UDPNAT timeout for TCP NAT keepalive method SIP Trafﬁc SIP Methods Allow MethodTrafﬁc To Auth From Network FilteringSender IP Filter Rules Action Content Type Content TypesDefault Policy For SIP Requests Allow Header Filter Rules Local Registrar Default Header Filter PolicyLocal SIP Domains Local SIP User Database Domain Authentication Name Authentication and AccountingRegister From Authentication settings SIP User Database Trusted Domains Asserted-IdentityUse P-Asserted-Identity Network Use Dial Plan Dial PlanRadius Accounting Emergency Number Matching From Header Reg Expr Head Matching Request-URIPreﬁx Tail Forward To Min. Tail Replacement URI Subno Dial Plan Add Preﬁx Request-URIForward To Enum Root Method Methods in Dial PlanRegister in Dial Plan Routing Enum Root DNS Override For SIP Requests Relay To WeightSIP Routing Order Port Class 3xx Message Processing Routing Function Also Forward To Static RegistrationsRequests To User User For clients not supporting Refer Local Refer HandlingAlways handle Refer locally Sip/sips For dialogs with speciﬁed User-Agent header For clients not supporting replacesFor dialogs with speciﬁed From URI From URIs For Which Refer is Handled Locally Alias User RoutingRestrict Incoming Callers Send To Voice Mail ForwardAction Voice Mail Server Request-URI Domain Outbound ProxyFrom Domain Domain or IP Address Tel URIs Gateway Active Sessions Registrar and Session StatusMonitored SIP Servers Monitored SIP server status Registered UsersMonitored SIP server Registered from Network Interface Selection ToolsPacket Capture IP Address Selection Tools Any Icmp Check Network Check NetworkCollect data Test ResultsPage Tools 222 SIP over UDP Firewall and Client ConﬁgurationDMZ type SIP over TCP/TLS DMZ/LAN type SIP clients Standalone type SIP clients Part IV Com VCX IP Telecommuting Module Serial Console Page Connecting to the serial console Basic AdministrationMain Menu Exit admin Set passwordCommand line interface Wipe email logs Physical device name Deactivate other interfaces Conﬁgure from a single computer Conﬁgure from multiple computers Password Wipe email logs Set password Exit admin Basic Administration 236 Command Reference Command Line ReferenceHelp and Troubleshooting Modifying Tables Modify-row List-tablesLoad-factory Revert-edits Table Deﬁnitions Conﬁg.allowviainterface Conﬁg.allowconﬁgConﬁg.authlogclass Conﬁg.httpsservers Conﬁg.authenticationConﬁg.httpservers Conﬁg.mgmtlogclass Fentalwaysfentexceptions Failover.ifacerefhostsFent.alwaysfent Fentalwaysfentinterfaces Fent.fentkeepalive Fent.mapsignaladdressField Name Field Type Explanation Enabled OnOffToggle Fent.mediarelease ﬁrewall.broadcastlogclass ﬁrewall.defaultpolicyﬁrewall.blindroutepolicy ﬁrewall.dhcplogclass ﬁrewall.ownlogclass ﬁrewall.networkgroupsﬁrewall.pingpolicy ﬁrewall.spooﬁnglogclass ﬁrewall.servicesﬁrewall.policylogclass ﬁrewall.timeclasses Idsips.active Idsips.predeﬁnedipsrules Ipsec.espproposals Idsips.ratelimitedipsIpsec.cryptodef Ipsec.espahlogclass Ipsec.ipsecnets Ipsec.ikelogclassIpsec.ikeproposals Ipsec.nattkeepalive Ipsec.radiusauthserver Ipsec.plutologclassIpsec.plutoverboselogclass Field Name Field Type Ipsec.userauthlogclass Ipsec.tunnelednetsIpsec.x509cacerts Misc.dnsservers Misc.conntracktimeoutsIpsec.x509cert Misc.dyndns Misc.ntpservers Misc.dyndnsnameMisc.fversion Field Name Field Type Explanation DomainName Misc.usentp Monitor.cpuloadlevelalarmMisc.unitname Monitor.emailalertlogclass Monitor.hardwarelogclass Monitor.memorylevelalarmMonitor.radiuserrorslogclass Monitor.logclasses Monitor.snmpagentaddress Monitor.siplevelalarmsMonitor.snmpagentlogclass Monitor.snmpnodelocation Monitor.snmpcontactpersonMonitor.snmpmanagementstations Monitor.snmppacketlogclass Monitor.snmptrapsending Monitor.snmpv1v2caccessMonitor.snmpv3access Monitor.snmpv1v2cauth Monitor.watchdogs Network.extradefaultgatewaysMonitor.syslogservers Network.aliasaddresses Network.localnets Network.interfacesNetwork.pppoe Network.vlans Network.routetestserversNetwork.routes Field Name Field Type Explanation Server DnsIpAddress Pptp.grelogclass Password.adminusersPptp.pptpenable Pptp.pptplogclass Pptp.pptpneglogclass Pptp.pptpserveripPptp.pptpusers Field Name Field Type Explanation PPTPOwnIpReference Qos.bandwidths Qos.classes Qos.ingressdefaultqueueing Qos.egressdefaultqueueingQos.egressqueueing Qos.status Qos.ingressqueueingQos.sipcac Qos.tagging Sip.addexpireheader Sip.acceleratedtlsSip.active Sip.allowedcodecs Sip.b2buaofferfromtemplate Sip.defaultgatewaySip.authmethods Sip.codecﬁltering Sip.externalrelay Sip.emergencySip.externradiusdb Field Name Field Type Explanation DnsIpAddress Sip.forcemodify Sip.forwardcancelbodySip.ﬁxﬁletransferport Sip.forwardtoheader Sip.ignoreuriportwhenmaddr Sip.headerﬁlterdefaultSip.headerﬁlterrules Field Name Field Type Explanation Action Sipﬁlteractionsel Sip.listen Sip.largeudpSip.lcscompanion Sip.localdomains Sip.lrtrue Sip.looserefertoSip.looseusernamecheck Sip.mediaencryptionpolicy Sip.mediaports Sip.mediaencryptionsettingsSip.mediaencryptionsuite Field Name Field Type Explanation Portslower PortNumber Sip.message Sip.mediatimeoutsSip.mediarestriction Sip.mfull Sip.monitorserver Sip.optiontimeoutSip.mimetypes Sip.musiconhold Sip.percent20towhitespace Field Name Field Type Explanation Timeout OptionTimeoutSip.outboundproxy Sip.preserve2543hold Sip.registrarlimits Sip.radiusacctSip.recurseon3xxinb2bua Sip.relayrules Sip.rewritetoforregisterindp Sip.removeviaSip.replyconﬁg Sip.ringback Sip.rroutealways Sip.routeusesportSip.routingorder Sip.rrouteoutbound Sip.sessionlimits Sip.signaladdressfordestinationSip.siperrorslogclass Sip.sipalias Sip.sipmedialogclass Sip.sipsignalinglogclassSip.siplicenselogclass Sip.sipmessagelogclass Sip.stripiceattributes Sip.tcptimeoutSip.sttype Sip.surroundings Sip.tlsclientcfg Sip.tlssettingsSip.tlscacerts Sip.tlsservercfg Sip.uriencoding Sip.transactionconﬁgSip.trusteddomain Field Name Field Type Explanation Uriencodingsel Sipswitch.b2buatransferenable Sip.usecancelbodyinackSipswitch.accounts Sip.uaregister Sipswitch.dialplanenable Sipswitch.b2buatransferfromuserSipswitch.dialplan Field Name Field Type Explanation User AliasAlias Sipswitch.forwardto Sipswitch.dialplanmethodsSipswitch.enumroot Field Name Field Type Explanation Enabled Fallbacksel Sipswitch.requestto Sipswitch.incomingunauthSipswitch.requestfrom Field Name Field Type Explanation Url SipWildcardUrl Sipswitch.userrouting Sipswitch.users Userdb.radiusservers Sipswitch.voicemailUserdb.radiuslocalendpoint Voipsm.voipsm Field Types AdminPasswordAdminTypeSel Voipsm.voipsmdomains AliasIpReference AliasUser AdminUserAliasAlias AuthData CryptoDefReference DepUsableVlanInterface DnsDynIpAddress CaReferenceCertReference DnsDynIpNetworkInterface DnsDynIpOtherHost EnumReference DyndnsPasswordDyndnsServiceSel EspCryptoReference FirewallLogclassReference IpsRuleName InterfaceSelInviteRetransmitCount IpsecAuthSel MaxMessageSizeInteger IsakmpSALifeLogclassReference MaxReg OnOffToggle NonemptyStringOnOffButton OnOffToggleOn OptDSCPInteger OptDnsAutoRuntimeReachableHost OptDnsIpAddressOptComment OptDepOwnIpReference OptIpsecNetReference OptForwardToReferenceOptIcmpRangeList OptIpsecPeerReference OptPercent OptPasswordOptServicesReference OptPercentFloat OptString OptionTimeoutOptSipUserDomain OptTimeclassReference PPTPOwnIpReference PptpPasswordRegTimeout Percent SipUserPassword SessionTimeoutSipUserDomainDefaultAll SIPRadiusSel SipWildcardUrl SnmpPasswordTimerAFloat SubGroup Accounttypesel Accountvoicemailsel Blindsel AddexpireheaderselAutonegsel Bypasstransportsel Fallbacksel ConﬁgauthselDpactionsel Fentkeepalivesel Hitsnumber FunctionselFwtypesel Mediaencryptionsuitesel Pqueuesel PingpolicyselPolicysel Qostypesel Restfuncsel Rfc2782weightRegexpwithAt Rfc2782priority Sipfunctionsel SipauthdirselSipﬁlteractionsel Sipsel Snmpv3privacysel SnmptrapversionselSnmpv3authsel Sttypesel Tlsclientmethods SysloglevelselTlsservermethods Uriencodingsel TlsconfselTrusteddomaintransportsel Voipsmmethodsel Add and change ﬁrewall rules CLI command examplesWindownumber Apply a conﬁguration Part V. Appendices Page Appendix A. More About SIP Why use SIP?SIP Protocol SIP and Firewalls Managing Your Own SIP DomainConﬁguring the 3Com VCX IP Telecommuting Module Page Conﬁguring the DNS Server Conﬁguring the PBXConﬁguring the SIP Clients SIP in 3Com VCX IP Telecommuting Module SIP SessionsEstablishing a SIP session SIP Packet Headers Contact Record-Route Content-TypeVia Route Appendix A. More About SIP 328 No trafﬁc shown in the log Appendix B. TroubleshootingNetwork troubleshooting Trafﬁc discarded as spoofed SIP users can’t register through the Telecommuting Module SIP troubleshootingSIP users can’t register on the Telecommuting Module SIP Trunking calls via SIP operator Administration troubleshooting Call is established, but there is no voice SIP send failure -1 on socket -1 event number SIP errorsLog Messages Destination IP addressport is known bad. Skipping Starting SIP UDP server at port IPsec key negotiationsStarting SIP TCP server at port Stopped SIP TCP server Conﬁguration server logins List of the most important reserved ports Name Port/protocol Description WWW Cmip Krcmd Kerberos encrypted remote shell -kfall List of Icmp types Type Name Type Name Reference Icmp codesIcmp type Name Code Description Unreachable for Type Internet protocols and their numbers Protocol number Keyword IP intervals Set bits Mask IP address class Reserved IP addresses Class IP in- tervalsPage Appendix D. Deﬁnitions of terms ARP DMZ 349 Https NAT Nntp 353 PPP SIP Uucp 357 Appendix D. Deﬁnitions of terms 358 BSD derived licenses Appendix E. License ConditionsSoftware developed by Peter Åstrand Terms Software developed by Carnegie Mellon University Software developed by Gregory M Christy Software developed by Cisco Systems Software developed by Digital Equipment Corporation Dhcp license Software developed by Jason Downs Software developed by Brian Gladman Version 2, June Software developed by Google, IncGNU General Public License GPL Preamble GNU General Public License 367 368 No Warranty IBM Public License Software developed by Ingate Systems Software developed in the GIE Dyade cooperation Software developed by Tommi Komulainen GNU Library General Public License Lgpl v USA 374 GNU Library General Public License 376 377 Page 379 380 GNU Lesser General Public License Lgpl v Version 2.1, February 382 GNU Lesser General Public License 384 385 386 Page Glibc Tzdata 2006a 388 Software in the GNU C distribution Appendix E. License Conditions Appendix E. License Conditions 392 More software in the GNU C distribution 394 License exceptions for gcc/libgcc2.c License License exceptions for libstdc++License for lilo Disclaimer Software developed by Paul Mackerras Software developed by Pedro Roque Marques Software developed at M I T License for Net-SNMP Part 1 CMU/UCD copyright notice BSD like Part 4 Sun Microsystems, Inc. copyright notice BSD Part 5 Sparta, Inc copyright notice BSD Part 6 Cisco/BUPTNIC copyright notice BSD License for NTP License for OpenSSH 404 Appendix E. License Conditions 406 407 Snprintf replacement Copyright Patrick Powell 409 License for OpenSSL License for OpenSWAN Python license Release Derived Year Owner GPL- compatible? From Terms and Conditions for Accessing or Otherwise Using Python Beopen Python Open Source License Agreement Version Cnri License Agreement for Python License for Python Imaging Library CWI License Agreement for Python 0.9.0 Through License for Rdisc Software developed by RSA Data Security, Inc More software developed by RSA Data Security, Inc License for SSL License for stunnel Software developed by Sun Microsystems, Inc More software developed by Sun Microsystems, Inc License for Sun RPC License for termcap Software developed by Trusted Information Systems, Inc Software developed by Andrew Tridgell Software developed by Paul Vixie Software developed by Rayan S Zachariassen Vovida Software License vVovida Software License, Version License for zlib Software developed at University of California Openswan-kernel 427 Appendix E. License Conditions Appendix E. License Conditions Readlink Appendix E. License Conditions 430 Purchase Extended Warranty Professional Services Register Your Product to Gain Service BeneﬁtsSolve Problems Online Appendix F. Obtaining Support for Your 3Com Products Telephone Technical Support and Repair Access Software DownloadsContact Us Asia, Paciﬁc Rim Telephone Technical Support and Repair Latin America Telephone Technical Support and Repair Country Telephone Number US and Canada Telephone Technical Support and Repair For administration Index Conﬁguration logins From the Telecommuting Module MIBs