137 | TANDBERG D14049.01 specification

CommandText goes hereReference - xConfiguration

TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE

SIP

cont...

Introduction

D 14049.01

07.2007

Registration	ExpireDelta: <5..7200>
	Specifies the period within which a SIP endpoint must re-register with the VCS to prevent its registration expiring.
	Proxy	Mode: <Off/ProxyToKnownOnly/ProxyToAny>
		Specifies how proxied registrations should be handled.
		Off: registration requests will not be proxied.
		ProxyToKnownOnly: registration requests will be proxied to neighbors only.
		ProxyToAny: Registration requests will be proxied in accordance with the VCS’s existing call processing rules.
TCP	Mode: <On/Off>
	Determines whether incoming SIP calls using the TCP protocol will be allowed.
	On: SIP calls using the TCP protocol will be allowed.
	Off: SIP calls using the TCP protocol will not be allowed
	Port: <1024..65534>
	Specifies the listening port for incoming SIP TCP calls.
TLS	Mode: <On/Off>
	Determines whether incoming SIP calls using the TLS protocol will be allowed.
	On: SIP calls using the TLS protocol will be allowed
	Off: SIP calls using the TLS protocol will not be allowed
	Port: <1024..65534>
	Specifies the listening port for incoming SIP TLS calls.
UDP	Mode: <On/Off>
	Determines whether incoming SIP calls using the UDP protocol will be allowed.
	On: SIP calls using the UDP protocol will be allowed.
	Off: SIP calls using the UDP protocol will not be allowed.

Port: <1024..65534>

Specifies the listening port for incoming SIP UDP calls.

Getting

System

System

H.323 &

SIP

Registration

Zones and

Call

Firewall

Bandwidth

Maintenance

Appendices

Started

Overview

Configuration

Configuration

Control

Neighbors

Processing

Traversal

Control

137

Image 137

TANDBERG D14049.01 manual 137

Contents

Video Communication Server Administrator Guide Getting Started System Configuration Table of Contents Using TANDBERG’s FindMe Administrator PolicyCall Processing User Policy Calls to and from Unregistered Endpoints Enum Dialing Disconnecting callsFallback Alias Firewall Traversal DNS Configuration 79 MaintenanceLdap Configuration 80 Regular Expression Reference 78 Copyright 2007, Tandberg Trademarks and Copyright Patent Information Disclaimer, Copyrights and License AgreementsDisclaimer Approvals Safety Instructions and ApprovalsSafety Instructions Environmental Issues Environmental Issues Standard Features Main Product FeaturesOptional Features Introduction Tandberg VCS Connecting the CablesGetting Started Initial Configuration via Serial Cable Powering on the VCS System Administrator Access Supported Browsers Using the Web Interface Using the Command Line Interface CLI Understanding the Overview ViewingText goesSystemhere OverviewViewing the Overview Configuring System Settings Systemtext ConfigurationAbout Admin Access settings System Administration Configuration Ethernet Configuration Configuring Ethernet SettingsXConfiguration Ethernet About Ethernet Speed IP Configuration Configuring IP SettingsXConfiguration IP XConfiguration IPProtocol About IPv4 to IPv6 Gatewaying Configuring DNS Settings DNS ConfigurationXConfiguration IP DNS About DNS Servers Setting the Time Zone Configuring NTP SettingsNTP Configuration XConfiguration NTP Address XConfiguration TimeZone Name About Snmp Settings Configuring Snmp SettingsSnmp Configuration XConfiguration Snmp External Manager Configuration Configuring External Manager SettingsXConfiguration ExternalManager About the External Manager Backing up Configuration Settings Logging Overview Logging Event Log Viewing the Event LogEvent Log Format Message Details Field DNS Events Logged at Level Events Logged at Level 1 TCP UDP TLS Event Data FieldsSIP 225 245 Number of bytes sent/received in the message For Register requests the AOR for the Register requestRequest/granted registration expiry duration Limitations of standard syslog timestamps Overview Endpoint Registration WorkingText goeswithhereH.323 XConfiguration H323 Configuring H.323 SIP Overview WorkingText goeswithhereSIP XConfiguration SIP Configuring SIP Registrations, Protocols and Ports XCommand DomainAdd XConfiguration SIP Domains Configuring SIP Domains XConfiguration Interworking Mode Configuring InterworkingInterworkingesText here Overview RegistrationText goes hereControl MCU, Gateway and Content Server RegistrationEndpoint Registration Registration Overview 323 Finding a VCS with which to RegisterPreventing automatic registrations H323 Gatekeeper AutoDiscovery Authentication About AuthenticationConfiguring Authentication XConfiguration Authentication Alias Origin Setting Authentication using an Ldap ServerConfiguring the Ldap Server Directory Securing the Ldap Connection with TLS XConfiguration Ldap XConfiguration Authentication Configuring Ldap Server settings Configuring the Local Database Authentication using a Local DatabaseNew Create Credential About Alias Registration Attempts to Register using an Existing AliasRegistering Aliases Alias Registration About Allow and Deny Lists XConfiguration Registration RestrictionPolicyPatterns and Pattern Types Allow and Deny Lists Managing Entries in the Allow List XCommand AllowListAdd XConfiguration Registration AllowList Managing Entries in the Deny List XCommand DenyListAdd XConfiguration Registration DenyListAdd Deny List Pattern Registration Deny List Example Managing Zones, Neighbors and AlternatesAbout your Video Communications Network About the Local Zone and its Subzones Configuring the Local Zone and its SubzonesLocal Zone and Subzones Zones XCommand ZoneAdd Adding Zones Configuring ZonesXConfiguration Zones Zone Create Zone Match1 Match5 Configuring Zones All TypesHop count SIP port Configuring Neighbor Zones Retry interval Configuring Traversal Client ZonesProtocol SIP transport Configuring Traversal Server Zones Configuring DNS Zones Configuring Enum ZonesDNS suffix Determines whether H.323 calls will be allowed to this zone Alternate 1 to Alternate 5 IP address About Alternates Configuring AlternatesXConfiguration Alternates About Dial Plans Setting up a Dial PlanFlat Dial Plan Structured Dial Plan Process CallText ProcessinggoeshereLocating a Destination Endpoint Dialing by Address Types XConfiguration Zones Zone 1..200 HopCount Configuring Hop CountsAbout Hop Counts Hop Counts About Administrator Policy Administrator PolicyAdministrator Policy and Authentication Authentication Mode On To enable Administrator Policy Enabling the use of Administrator PolicyAdministrator Policy Mode Administrator Policy Mode to take effect Configuring Administrator Policy via the Web Interface Uploading a CPL Script Configuring Administrator Policy via a CPL scriptAbout CPL XSD files Downloading policy files About User Policy UserText goesPolicyhere XConfiguration Policy UserPolicy Configuring User Policy ManagerEnabling User Policy on the VCS Username Creating a New User Account About User AccountsManaging FindMe User Accounts Viewing Existing User Account Settings Changing a User Password To change delete a FindMe user account Deleting a User AccountTick the box next to the account you wish to delete Click here to delete the selected accounts FindMe User Accounts Accessing the FindMe Configuration Using TANDBERG’s FindMeAbout your FindMe User Account About FindMe Configuring your FindMe User Account AliasText goSearchingshere and Transforming XConfiguration Transform Configuring Local Alias Transforms Zone Searching and Transforming Zone searching and alias transforming configuration Configuring Zone Searches and TransformsDefault Settings Examples Combining Match Types and PrioritiesNever Query a Zone Always Query a Zone, Never Apply Transforms User@example.com User@exampleusa.com Filter Queries to a Zone Without TransformingChanging the Prefix or Suffix Before Querying Query a Zone for Two or More Transformed Aliases Query a Zone for Both Original and Transformed Alias URI Dialing Overview URITextDialinggoeshere An AlwaysMatch, or Configuring Matches for DNS ZonesURI Dialing for Outgoing Calls XCommand ZoneAdd XConfiguration Zones Zone Adding and Configuring DNS ZonesClick Create Zone Assigns a name to this zone XConfiguration IP DNS Server Configuring DNS Servers URI Dialing for Incoming Calls URI Dialing and Firewall Traversal Example DNS Record ConfigurationRecommended Configuration About Enum Dialing ENUMText goesDialinghereEnum Dialing Overview Enum Process Enum Dialing for Outgoing Calls Prerequisites Mode of PatternMatch Pattern string Pattern type of Prefix Configuring Matches for Enum ZonesConfiguring Transforms for Enum Zones For Enum zones, this will be Enum Configuring Enum Zones Configuring DNS Servers Enum Dialing for Incoming Calls Configuring DNS Naptr RecordsAbout DNS Domains for Enum Recommended Configuration for Firewall Traversal ConfigurationCallsText gtoesandherefrom Unregistered Endpoints Calls to an Unregistered Endpoint FallbackText goesAliashere XConfiguration Call Services Fallback AliasFallback Alias Example Use of a Fallback Alias Identifying a Particular Call DisconnectingText goes herecalls Disconnecting a Call via the CLI Disconnecting a Call via the Web InterfaceIssues when Disconnecting SIP Calls Disconnect Firewall Traversal Overview Firewall TraversalAbout Firewall Traversal VCS as a Firewall Traversal Client VCS as a Firewall Traversal Server Firewall Traversal Protocols and Ports 323 Ports for Connections out to the Public InternetStun Ports VCS Firewall Traversal and Authentication Adding a New Traversal Client Zone Configuring the VCS as a Traversal ClientFrom the Type drop-down menu, select TraversalClient Create Zone Alternate 1 Alternate 5 Address Configuring a Traversal Client Zone TraversalServer Create Zone Configuring the VCS as a Traversal ServerAdding a New Traversal Server Zone TCP retry count Interval Configuring a Traversal Server ZoneDemux mode XConfiguration Zones LocalZone Traversal H323 Configuring Traversal for Endpoints Assent call signaling port Configuring Traversal Server Ports323 H.460.18 call signaling port Media demultiplexing RTP port About Stun Stun ServicesStun Binding Discovery Stun Relay XConfiguration Traversal Server Configuring Stun Services Example Network Deployment Bandwidthth ControllAbout Bandwidth Control Subzones Creating a Subzone XCommand SubZoneAddBandwidthControl To configure a subzone Configuring a SubzoneXConfiguration Zones LocalZone SubZone Subnet 2 Types of Limitations Applying Bandwidth Limitations to SubzonesHow Different Bandwidth Limitations are Managed Per call inter Limits the bandwidth of any individual call About Pipes XCommand PipeAddCreating a new pipe Creating Pipes Editing Pipes XConfiguration Bandwidth PipeEditing an Existing Pipe XCommand LinkAdd Default LinksAbout Links Creating Links Creating a New Link Editing Links XConfiguration Bandwidth LinkEditing Links Applying Pipes to Links Default LinksBandwidth Control About Downspeeding About the Default Call BandwidthConfiguring the Default Call Bandwidth and Downspeeding Example Without a Firewall Bandwidth Control Examples Example With a Firewall VCS Border Controller Subzone ConfigurationEnterprise VCS Subzone Configuration Backing up the Existing Configuration Before Upgrading MaintenanceText goes hereUpgrading Using SCP/PSCP Upgrading Software Upgrading Upgrading via the Web Interface Option Keys XConfiguration Option 1..64 Key S 0About Adding Extra Options Adding Options via the CLI Add Option Click Add Option Adding Options via the Web InterfaceAdd option key Security About SecurityEnabling Security System Snapshot PasswordsAbout the System Snapshot Creating a System Snapshot Restarting XCommand BootAbout Restarting About Shutting Down Http CommandText goes hereReference xConfigurationHttps SSH AliasOrigin LDAP/Endpoint/Combined Total Mode On/OffRequest Off the call will be rejected One call Fallback Alias S 0 Far end were registered directly to the local system Port H323 Gatekeeper CallSignalingTCP NTP Option Key S 0 Off the VCS will not act as a SIP registrar Tration will not be permittedOn the VCS will act as a DIP registrar 137 CommunityName S 0 Snmp Stun RtcpRTP Between two endpoints within the Default Subzone For any one call to or from an endpoint in the DefaultTraversal Server For any one call between two endpoints within To or from an endpoint in this subzone Intra Mode None/Limited/Unlimited Name S 1 Assigns a name to this subzone Subnet Address S 0 LimitSets the total bandwidth limit in kbps of this subzone Order to keep the firewall’s NAT bindings open Zones LocalZone Traversal H323 ContRetryCount VCS will attempt to send a TCP probe to the VCS Enum 145 TLS TLS will be used Transport TCP/TLSTCP TCP will be used Off Each call will use a separate pair of ports for Plexing mode for calls from the traversal clientZones TraversalClient Zones TraversalServer TCPProbe KeepAliveInterval Cont XCommand Description Parameters CommandText goes hereReference xCommandList, the registration will be permitted PatternType Exact/Prefix/Suffix/Regex List, the registration will not be permitted XCommandDescription Parameters Status/Ethernet Event/AuthenticationFailureStatus/NTP Status/LDAP Pipe2 S 1 LinkAdd LinkDelete Locate OptionKeyAdd OptionKeyDeletePipe1 S 1 153 PerCallInterMode None/Limited/Unlimited SubZoneAdd SubZoneDeletePerCallInter To Limited Each transform TransformAdd TransformDelete ZoneAdd ZoneDelete ZoneList Option Key S 1 Description S 1 CommandText goes hereReference xStatus NTP Server Address IPv4Addr/IPv6Addr Domain S 0 Status On/Off URL S 1,255 Expression S 1,127 0..15 entries External Manager 160 161 Zones Contact S 1,255 Path URI 1..10 S 1,255 163 164 165 166 167 Status Active/Inactive/Failed Address IPv4Addr IPv4Status Active/Inactive/Failed Address IPv4Addr IPv6 Status Active/Inactive/Failed Address IPv6Addr 169 CPLText Referencgoeshere Address-switch nodeAddress Otherwise node Field Authentication Mode OnSetup Url-ID 323 ID H323-ID Dialled Digits DialedDigits SubfieldURI CPL Script Actions Location Rule-switchUnsupported CPL Elements Proxy CPL Examples Call Screening of Authenticated UsersCall Screening Based on Alias Vpengineering Change of Domain Name Call Screening Based on Domain Allow Calls from Locally Registered Endpoints Only Block Calls from Default Zone and Default Subzone Restricting Access to a Local Gateway About Regular Expressions RegularText goesExpressionhere ReferenceWill match against any sequence of characters For a detailed description of regular expression syntax see Overview Microsoft DNS Server DNSText goesConfiguhereationVerifying the SRV Record Bind 8 About the Ldap Databases Downloading the H.350 schemas LDAPText goesConfigurationhere Microsoft Active Directory Installing the H.350 SchemasAdding H.350 Objects Securing with TLS . Add the ldif file to the server using the command . Copy the OpenLDAP files to the OpenLDAP schema directoryOpenLDAP Add the H.350 Objects Reference Title Link Bibliography Term Definition Glossary LAN IRQLRQ NAT Protocol used to monitor network devices Session Initiation ProtocolFirewall NAT traversal for SIP. Defined by RFC 3489 Reliable communication protocol defined by RFC 791 187