TANDBERG D14049.01 manual Example With a Firewall, VCS Border Controller Subzone Configuration

Bandwidthth Controll

TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE

Bandwidth Control Examples

Example With a Firewall

If we modify the previous example deployment to include firewalls between the offices, we can use TANDBERG’s Expressway™ firewall traversal solution to maintain connectivity. We do this by adding a VCS Border Controller outside the firewalls on the public internet, which will work in conjunction with the Enterprise VCS and Home and Branch office endpoints to traverse the firewalls.

This example, the endpoints in the enterprise register with the Enterprise VCS, whilst those in the Branch and Home offices register with the VCS Border Controller.

The introduction of the firewalls means that there is no longer any direct connectivity between the Branch and Home offices. All traffic must be routed through the VCS Border Controller.

This is shown by the absence of a link between the Home and Branch subzones.

VCS Border Controller Subzone Configuration

The VCS Border Controller has subzones configured for the Home Office and Branch Office. These are linked to the VCS Border Controller’s Traversal Subzone, with pipes placed on each link. All calls from the VCS Border Controller to the Enterprise VCS must go through the Traversal Subzone and will consume bandwidth from this Subzone. Note also that calls from the Home Office to the Branch Office must also go through the Traversal Subzone, and will also consume bandwidth from this Subzone as well as the Home and Branch subzones and Home Office, Branch office and Enterprise pipes.

In this example we have assumed that there is no bottleneck on the link between the VCS Border Controller and the Enterprise network, so have not placed a pipe on this link. If you want to limit the amount of traffic flowing through your firewall, you could provision a pipe on this link.

Enterprise VCS Subzone Configuration

Because the Enterprise VCS is only managing endpoints on the LAN, its configuration is simpler. All of the endpoints in the enterprise are assigned to the Default Subzone. This is linked to the Traversal Subzone, through which all calls leaving the Enterprise must pass.

Introduction	Getting	System	System	H.323 & SIP	Registration	Zones and	Call	Firewall	Bandwidth	Maintenance	Appendices
	Started	Overview	Configuration	Configuration	Control	Neighbors	Processing	Traversal	Control
D 14049.01					121
07.2007