Zones TraversalClient | TANDBERG D14049.01 specification

CommandText goes hereReference - xConfiguration

TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE

Zones	Zone [1..200]	TraversalClient	SIP	Port: <1024..65534>
cont...	cont...	cont...		Specifies the port on the traversal server to be used for SIP calls from this VCS.
				Transport: <TCP/TLS>
				Determines which transport type will be used for SIP calls to and from the traversal server.
				TCP: TCP will be used.
				TLS: TLS will be used.
		TraversalServer	Authentication	UserName: <S: 1, 128>
				If the traversal client is a VCS, this must be the VCS’s Authentication User Name. If the traversal client is a
				gatekeeper, this must be the gatekeeper’s System Name.
			H323	H46019	Demultiplexing	Mode: <On/Off>
						Determines whether the VCS will operate in Demulti-
						plexing mode for calls from the traversal client.
						On: allows use of the same two ports for all calls.
						Off: Each call will use a separate pair of ports for
						media.
				Port: <1024..65534>
				Specifies the port on the VCS being used for H.323 firewall traversal from this traversal client.
				Protocol: <Assent/H46018>
				Determines the protocol to be used for calls from the traversal client.
				Assent: the Assent protocol will be used.
				H46018: the H.460.18 protocol will be used.
			SIP	Port: <1024..65534>
				Specifies the port on the VCS being used for SIP firewall traversal from this traversal client.

Transport: <TCP/TLS>

Determines which of the two transport types will be used for SIP calls between the traversal client and VCS.

TCP: TCP will be used.

TLS: TLS will be used.

Introduction

Getting

System

System

H.323 & SIP

Registration

Zones and

Call

Firewall

Bandwidth

Maintenance

Appendices

Started

Overview

Configuration

Configuration

Control

Neighbors

Processing

Traversal

Control

D 14049.01

147

07.2007

Image 147

TANDBERG D14049.01 manual Zones TraversalClient, Plexing mode for calls from the traversal client

Contents

Video Communication Server Administrator Guide Getting Started System Configuration Table of Contents User Policy Administrator PolicyUsing TANDBERG’s FindMe Call Processing Firewall Traversal Enum Dialing Disconnecting callsCalls to and from Unregistered Endpoints Fallback Alias Regular Expression Reference 78 MaintenanceDNS Configuration 79 Ldap Configuration 80 Copyright 2007, Tandberg Trademarks and Copyright Disclaimer, Copyrights and License Agreements DisclaimerPatent Information Safety Instructions and Approvals Safety InstructionsApprovals Environmental Issues Environmental Issues Introduction Main Product FeaturesStandard Features Optional Features Connecting the Cables Getting StartedTandberg VCS Initial Configuration via Serial Cable Powering on the VCS System Administrator Access Supported Browsers Using the Web Interface Using the Command Line Interface CLI ViewingText goesSystemhere Overview Viewing the OverviewUnderstanding the Overview System Administration Configuration Systemtext ConfigurationConfiguring System Settings About Admin Access settings About Ethernet Speed Configuring Ethernet SettingsEthernet Configuration XConfiguration Ethernet About IPv4 to IPv6 Gatewaying Configuring IP SettingsIP Configuration XConfiguration IP XConfiguration IPProtocol About DNS Servers DNS ConfigurationConfiguring DNS Settings XConfiguration IP DNS XConfiguration NTP Address XConfiguration TimeZone Name Configuring NTP SettingsSetting the Time Zone NTP Configuration XConfiguration Snmp Configuring Snmp SettingsAbout Snmp Settings Snmp Configuration About the External Manager Configuring External Manager SettingsExternal Manager Configuration XConfiguration ExternalManager Backing up Configuration Settings Logging Overview Logging Message Details Field Viewing the Event LogEvent Log Event Log Format DNS Events Logged at Level Events Logged at Level 1 225 245 Event Data FieldsTCP UDP TLS SIP Limitations of standard syslog timestamps For Register requests the AOR for the Register requestNumber of bytes sent/received in the message Request/granted registration expiry duration Overview Endpoint Registration WorkingText goeswithhereH.323 XConfiguration H323 Configuring H.323 SIP Overview WorkingText goeswithhereSIP XConfiguration SIP Configuring SIP Registrations, Protocols and Ports XCommand DomainAdd XConfiguration SIP Domains Configuring SIP Domains Overview Configuring InterworkingXConfiguration Interworking Mode InterworkingesText here Registration Overview MCU, Gateway and Content Server RegistrationRegistrationText goes hereControl Endpoint Registration H323 Gatekeeper AutoDiscovery Finding a VCS with which to Register323 Preventing automatic registrations XConfiguration Authentication About AuthenticationAuthentication Configuring Authentication Securing the Ldap Connection with TLS Authentication using an Ldap ServerAlias Origin Setting Configuring the Ldap Server Directory XConfiguration Ldap XConfiguration Authentication Configuring Ldap Server settings Create Credential Authentication using a Local DatabaseConfiguring the Local Database New Alias Registration Attempts to Register using an Existing AliasAbout Alias Registration Registering Aliases Allow and Deny Lists XConfiguration Registration RestrictionPolicyAbout Allow and Deny Lists Patterns and Pattern Types Managing Entries in the Allow List XCommand AllowListAdd XConfiguration Registration AllowList Registration Deny List XCommand DenyListAdd XConfiguration Registration DenyListManaging Entries in the Deny List Add Deny List Pattern Managing Zones, Neighbors and Alternates About your Video Communications NetworkExample Configuring the Local Zone and its Subzones Local Zone and SubzonesAbout the Local Zone and its Subzones Zones Create Zone Adding Zones Configuring ZonesXCommand ZoneAdd XConfiguration Zones Zone Configuring Zones All Types Hop countMatch1 Match5 SIP port Configuring Neighbor Zones SIP transport Configuring Traversal Client ZonesRetry interval Protocol Configuring Traversal Server Zones Determines whether H.323 calls will be allowed to this zone Configuring Enum ZonesConfiguring DNS Zones DNS suffix About Alternates Configuring Alternates XConfiguration AlternatesAlternate 1 to Alternate 5 IP address Structured Dial Plan Setting up a Dial PlanAbout Dial Plans Flat Dial Plan CallText Processinggoeshere Locating a Destination EndpointProcess Dialing by Address Types Hop Counts Configuring Hop CountsXConfiguration Zones Zone 1..200 HopCount About Hop Counts Authentication Mode On Administrator PolicyAbout Administrator Policy Administrator Policy and Authentication Administrator Policy Mode to take effect Enabling the use of Administrator PolicyTo enable Administrator Policy Administrator Policy Mode Configuring Administrator Policy via the Web Interface Downloading policy files Configuring Administrator Policy via a CPL scriptUploading a CPL Script About CPL XSD files About User Policy UserText goesPolicyhere Username Configuring User Policy ManagerXConfiguration Policy UserPolicy Enabling User Policy on the VCS About User Accounts Managing FindMe User AccountsCreating a New User Account Viewing Existing User Account Settings Changing a User Password Click here to delete the selected accounts Deleting a User AccountTo change delete a FindMe user account Tick the box next to the account you wish to delete About FindMe Using TANDBERG’s FindMeFindMe User Accounts Accessing the FindMe Configuration About your FindMe User Account Configuring your FindMe User Account AliasText goSearchingshere and Transforming XConfiguration Transform Configuring Local Alias Transforms Zone Searching and Transforming Configuring Zone Searches and Transforms Default SettingsZone searching and alias transforming configuration Always Query a Zone, Never Apply Transforms Combining Match Types and PrioritiesExamples Never Query a Zone Filter Queries to a Zone Without Transforming Changing the Prefix or Suffix Before QueryingUser@example.com User@exampleusa.com Query a Zone for Two or More Transformed Aliases Query a Zone for Both Original and Transformed Alias URI Dialing Overview URITextDialinggoeshere Configuring Matches for DNS Zones URI Dialing for Outgoing CallsAn AlwaysMatch, or Assigns a name to this zone Adding and Configuring DNS ZonesXCommand ZoneAdd XConfiguration Zones Zone Click Create Zone XConfiguration IP DNS Server Configuring DNS Servers URI Dialing for Incoming Calls Example DNS Record Configuration Recommended ConfigurationURI Dialing and Firewall Traversal Enum Process ENUMText goesDialinghereAbout Enum Dialing Enum Dialing Overview Enum Dialing for Outgoing Calls Prerequisites Configuring Matches for Enum Zones Configuring Transforms for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix For Enum zones, this will be Enum Configuring Enum Zones Configuring DNS Servers Configuring DNS Naptr Records About DNS Domains for EnumEnum Dialing for Incoming Calls Calls to an Unregistered Endpoint ConfigurationRecommended Configuration for Firewall Traversal CallsText gtoesandherefrom Unregistered Endpoints Example Use of a Fallback Alias XConfiguration Call Services Fallback AliasFallbackText goesAliashere Fallback Alias Identifying a Particular Call DisconnectingText goes herecalls Disconnect Disconnecting a Call via the Web InterfaceDisconnecting a Call via the CLI Issues when Disconnecting SIP Calls VCS as a Firewall Traversal Server Firewall TraversalFirewall Traversal Overview About Firewall Traversal VCS as a Firewall Traversal Client Firewall Traversal Protocols and Ports Ports for Connections out to the Public Internet Stun Ports323 VCS Firewall Traversal and Authentication TraversalClient Create Zone Configuring the VCS as a Traversal ClientAdding a New Traversal Client Zone From the Type drop-down menu, select Alternate 1 Alternate 5 Address Configuring a Traversal Client Zone Configuring the VCS as a Traversal Server Adding a New Traversal Server ZoneTraversalServer Create Zone Configuring a Traversal Server Zone Demux modeTCP retry count Interval XConfiguration Zones LocalZone Traversal H323 Configuring Traversal for Endpoints Media demultiplexing RTP port Configuring Traversal Server PortsAssent call signaling port 323 H.460.18 call signaling port Stun Relay Stun ServicesAbout Stun Stun Binding Discovery XConfiguration Traversal Server Configuring Stun Services Bandwidthth Controll About Bandwidth ControlExample Network Deployment Subzones XCommand SubZoneAdd BandwidthControlCreating a Subzone Subnet 2 Configuring a SubzoneTo configure a subzone XConfiguration Zones LocalZone SubZone Per call inter Limits the bandwidth of any individual call Applying Bandwidth Limitations to SubzonesTypes of Limitations How Different Bandwidth Limitations are Managed Creating Pipes XCommand PipeAddAbout Pipes Creating a new pipe XConfiguration Bandwidth Pipe Editing an Existing PipeEditing Pipes Creating a New Link Default LinksXCommand LinkAdd About Links Creating Links XConfiguration Bandwidth Link Editing LinksEditing Links Default Links Bandwidth ControlApplying Pipes to Links About the Default Call Bandwidth Configuring the Default Call Bandwidth and DownspeedingAbout Downspeeding Example Without a Firewall Bandwidth Control Examples VCS Border Controller Subzone Configuration Enterprise VCS Subzone ConfigurationExample With a Firewall Upgrading Software MaintenanceText goes hereBacking up the Existing Configuration Before Upgrading Upgrading Using SCP/PSCP Upgrading Upgrading via the Web Interface Adding Options via the CLI XConfiguration Option 1..64 Key S 0Option Keys About Adding Extra Options Adding Options via the Web Interface Add option keyAdd Option Click Add Option About Security Enabling SecuritySecurity Creating a System Snapshot PasswordsSystem Snapshot About the System Snapshot About Shutting Down XCommand BootRestarting About Restarting SSH CommandText goes hereReference xConfigurationHttp Https Off the call will be rejected Total Mode On/OffAliasOrigin LDAP/Endpoint/Combined Request One call Fallback Alias S 0 Far end were registered directly to the local system H323 Gatekeeper CallSignaling TCPPort NTP Option Key S 0 Tration will not be permitted On the VCS will act as a DIP registrarOff the VCS will not act as a SIP registrar 137 CommunityName S 0 Snmp Rtcp RTPStun For any one call between two endpoints within For any one call to or from an endpoint in the DefaultBetween two endpoints within the Default Subzone Traversal Server To or from an endpoint in this subzone Intra Mode None/Limited/Unlimited Limit Sets the total bandwidth limit in kbps of this subzoneName S 1 Assigns a name to this subzone Subnet Address S 0 VCS will attempt to send a TCP probe to the VCS Zones LocalZone Traversal H323 ContOrder to keep the firewall’s NAT bindings open RetryCount Enum 145 Transport TCP/TLS TCP TCP will be usedTLS TLS will be used Plexing mode for calls from the traversal client Zones TraversalClientOff Each call will use a separate pair of ports for Zones TraversalServer TCPProbe KeepAliveInterval Cont PatternType Exact/Prefix/Suffix/Regex CommandText goes hereReference xCommandXCommand Description Parameters List, the registration will be permitted XCommand Description ParametersList, the registration will not be permitted Status/LDAP Event/AuthenticationFailureStatus/Ethernet Status/NTP LinkAdd LinkDelete Locate OptionKeyAdd OptionKeyDelete Pipe1 S 1Pipe2 S 1 153 To Limited SubZoneAdd SubZoneDeletePerCallInterMode None/Limited/Unlimited PerCallInter Each transform TransformAdd TransformDelete ZoneAdd ZoneDelete ZoneList Option Key S 1 Description S 1 CommandText goes hereReference xStatus NTP Server Address IPv4Addr/IPv6Addr Domain S 0 Status On/Off URL S 1,255 Expression S 1,127 0..15 entries External Manager 160 161 Zones Contact S 1,255 Path URI 1..10 S 1,255 163 164 165 166 167 Status Active/Inactive/Failed Address IPv6Addr IPv4Status Active/Inactive/Failed Address IPv4Addr Status Active/Inactive/Failed Address IPv4Addr IPv6 169 Otherwise node Address-switch nodeCPLText Referencgoeshere Address Authentication Mode On SetupField Subfield URIUrl-ID 323 ID H323-ID Dialled Digits DialedDigits Proxy Rule-switchCPL Script Actions Location Unsupported CPL Elements Vpengineering Call Screening of Authenticated UsersCPL Examples Call Screening Based on Alias Change of Domain Name Call Screening Based on Domain Allow Calls from Locally Registered Endpoints Only Block Calls from Default Zone and Default Subzone Restricting Access to a Local Gateway For a detailed description of regular expression syntax see RegularText goesExpressionhere ReferenceAbout Regular Expressions Will match against any sequence of characters Bind 8 DNSText goesConfiguhereationOverview Microsoft DNS Server Verifying the SRV Record About the Ldap Databases Downloading the H.350 schemas LDAPText goesConfigurationhere Securing with TLS Installing the H.350 SchemasMicrosoft Active Directory Adding H.350 Objects Add the H.350 Objects . Copy the OpenLDAP files to the OpenLDAP schema directory. Add the ldif file to the server using the command OpenLDAP Reference Title Link Bibliography Term Definition Glossary NAT IRQLAN LRQ Reliable communication protocol defined by RFC 791 Session Initiation ProtocolProtocol used to monitor network devices Firewall NAT traversal for SIP. Defined by RFC 3489 187