Manuals / TANDBERG / Photography / Security Camera

TANDBERG D14049.01 External Manager, Status On/Off URL S 1,255 Expression S 1,127 0..15 entries

Models: D14049.01

1 187

Download 187 pages 62.39 Kb

Page 159

Image 159

CommandText goes hereReference - xStatus

TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE

External Manager:

Status: <Inactive/Initializing/Active/Failed>

Cause: {Visible if status is Failed} <DNS resolution failed >

Address: <IPv4Addr/IPv6Addr >

Protocol: HTTP

URL: <S: 0, 255>

Feedback [1..3]:

Status: <On/Off>

URL: <S: 1,255>

Expression: <S: 1,127> {0..15 entries}

ResourceUsage:

Calls:

Traversal:

Current: <0..150>

Maximum: <0..150>

Total: <0..4294967295>

NonTraversal:

Current: <0..750>

Maximum: <0..750>

Total: <0..4294967295>

Registrations:

Current: <0..3750>

Maximum: <0..3750>

Total: <0..4294967295>

Introduction

Getting

System

H.323 & SIP

Registration

Zones and

Call

Firewall

Bandwidth

Maintenance

Appendices

Started

Overview

Configuration

Control

Neighbors

Processing

Traversal

Control

D 14049.01

159

07.2007

Page 159

Image 159

TANDBERG D14049.01 manual External Manager, Status On/Off URL S 1,255 Expression S 1,127 0..15 entries

Contents

Video Communication Server Administrator Guide Getting Started System ConfigurationTable of Contents User Policy Administrator PolicyUsing TANDBERG’s FindMe Call ProcessingFirewall Traversal Enum Dialing Disconnecting callsCalls to and from Unregistered Endpoints Fallback AliasRegular Expression Reference 78 MaintenanceDNS Configuration 79 Ldap Configuration 80Copyright 2007, Tandberg Trademarks and CopyrightDisclaimer, Copyrights and License Agreements DisclaimerPatent Information Safety Instructions and Approvals Safety InstructionsApprovals Environmental Issues Environmental Issues Introduction Main Product FeaturesStandard Features Optional FeaturesConnecting the Cables Getting StartedTandberg VCS Initial Configuration via Serial Cable Powering on the VCSSystem Administrator Access Supported Browsers Using the Web InterfaceUsing the Command Line Interface CLI ViewingText goesSystemhere Overview Viewing the OverviewUnderstanding the Overview System Administration Configuration Systemtext ConfigurationConfiguring System Settings About Admin Access settingsAbout Ethernet Speed Configuring Ethernet SettingsEthernet Configuration XConfiguration EthernetAbout IPv4 to IPv6 Gatewaying Configuring IP SettingsIP Configuration XConfiguration IP XConfiguration IPProtocolAbout DNS Servers DNS ConfigurationConfiguring DNS Settings XConfiguration IP DNSXConfiguration NTP Address XConfiguration TimeZone Name Configuring NTP SettingsSetting the Time Zone NTP ConfigurationXConfiguration Snmp Configuring Snmp SettingsAbout Snmp Settings Snmp ConfigurationAbout the External Manager Configuring External Manager SettingsExternal Manager Configuration XConfiguration ExternalManagerBacking up Configuration Settings Logging Overview LoggingMessage Details Field Viewing the Event LogEvent Log Event Log FormatDNS Events Logged at LevelEvents Logged at Level 1 225 245 Event Data FieldsTCP UDP TLS SIPLimitations of standard syslog timestamps For Register requests the AOR for the Register requestNumber of bytes sent/received in the message Request/granted registration expiry durationOverview Endpoint Registration WorkingText goeswithhereH.323XConfiguration H323 Configuring H.323SIP Overview WorkingText goeswithhereSIPXConfiguration SIP Configuring SIP Registrations, Protocols and PortsXCommand DomainAdd XConfiguration SIP Domains Configuring SIP DomainsOverview Configuring InterworkingXConfiguration Interworking Mode InterworkingesText hereRegistration Overview MCU, Gateway and Content Server RegistrationRegistrationText goes hereControl Endpoint RegistrationH323 Gatekeeper AutoDiscovery Finding a VCS with which to Register323 Preventing automatic registrationsXConfiguration Authentication About AuthenticationAuthentication Configuring AuthenticationSecuring the Ldap Connection with TLS Authentication using an Ldap ServerAlias Origin Setting Configuring the Ldap Server DirectoryXConfiguration Ldap XConfiguration Authentication Configuring Ldap Server settingsCreate Credential Authentication using a Local DatabaseConfiguring the Local Database NewAlias Registration Attempts to Register using an Existing AliasAbout Alias Registration Registering AliasesAllow and Deny Lists XConfiguration Registration RestrictionPolicyAbout Allow and Deny Lists Patterns and Pattern TypesManaging Entries in the Allow List XCommand AllowListAdd XConfiguration Registration AllowListRegistration Deny List XCommand DenyListAdd XConfiguration Registration DenyListManaging Entries in the Deny List Add Deny List PatternManaging Zones, Neighbors and Alternates About your Video Communications NetworkExample Configuring the Local Zone and its Subzones Local Zone and SubzonesAbout the Local Zone and its Subzones Zones Create Zone Adding Zones Configuring ZonesXCommand ZoneAdd XConfiguration Zones ZoneConfiguring Zones All Types Hop countMatch1 Match5 SIP port Configuring Neighbor ZonesSIP transport Configuring Traversal Client ZonesRetry interval ProtocolConfiguring Traversal Server Zones Determines whether H.323 calls will be allowed to this zone Configuring Enum ZonesConfiguring DNS Zones DNS suffixAbout Alternates Configuring Alternates XConfiguration AlternatesAlternate 1 to Alternate 5 IP address Structured Dial Plan Setting up a Dial PlanAbout Dial Plans Flat Dial PlanCallText Processinggoeshere Locating a Destination EndpointProcess Dialing by Address Types Hop Counts Configuring Hop CountsXConfiguration Zones Zone 1..200 HopCount About Hop CountsAuthentication Mode On Administrator PolicyAbout Administrator Policy Administrator Policy and AuthenticationAdministrator Policy Mode to take effect Enabling the use of Administrator PolicyTo enable Administrator Policy Administrator Policy ModeConfiguring Administrator Policy via the Web Interface Downloading policy files Configuring Administrator Policy via a CPL scriptUploading a CPL Script About CPL XSD filesAbout User Policy UserText goesPolicyhereUsername Configuring User Policy ManagerXConfiguration Policy UserPolicy Enabling User Policy on the VCSAbout User Accounts Managing FindMe User AccountsCreating a New User Account Viewing Existing User Account Settings Changing a User PasswordClick here to delete the selected accounts Deleting a User AccountTo change delete a FindMe user account Tick the box next to the account you wish to deleteAbout FindMe Using TANDBERG’s FindMeFindMe User Accounts Accessing the FindMe Configuration About your FindMe User AccountConfiguring your FindMe User Account AliasText goSearchingshere and Transforming XConfiguration Transform Configuring Local Alias TransformsZone Searching and Transforming Configuring Zone Searches and Transforms Default SettingsZone searching and alias transforming configuration Always Query a Zone, Never Apply Transforms Combining Match Types and PrioritiesExamples Never Query a ZoneFilter Queries to a Zone Without Transforming Changing the Prefix or Suffix Before QueryingUser@example.com User@exampleusa.com Query a Zone for Two or More Transformed Aliases Query a Zone for Both Original and Transformed AliasURI Dialing Overview URITextDialinggoeshereConfiguring Matches for DNS Zones URI Dialing for Outgoing CallsAn AlwaysMatch, or Assigns a name to this zone Adding and Configuring DNS ZonesXCommand ZoneAdd XConfiguration Zones Zone Click Create ZoneXConfiguration IP DNS Server Configuring DNS ServersURI Dialing for Incoming Calls Example DNS Record Configuration Recommended ConfigurationURI Dialing and Firewall Traversal Enum Process ENUMText goesDialinghereAbout Enum Dialing Enum Dialing OverviewEnum Dialing for Outgoing Calls PrerequisitesConfiguring Matches for Enum Zones Configuring Transforms for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix For Enum zones, this will be Enum Configuring Enum ZonesConfiguring DNS Servers Configuring DNS Naptr Records About DNS Domains for EnumEnum Dialing for Incoming Calls Calls to an Unregistered Endpoint ConfigurationRecommended Configuration for Firewall Traversal CallsText gtoesandherefrom Unregistered EndpointsExample Use of a Fallback Alias XConfiguration Call Services Fallback AliasFallbackText goesAliashere Fallback AliasIdentifying a Particular Call DisconnectingText goes herecallsDisconnect Disconnecting a Call via the Web InterfaceDisconnecting a Call via the CLI Issues when Disconnecting SIP CallsVCS as a Firewall Traversal Server Firewall TraversalFirewall Traversal Overview About Firewall Traversal VCS as a Firewall Traversal ClientFirewall Traversal Protocols and Ports Ports for Connections out to the Public Internet Stun Ports323 VCS Firewall Traversal and AuthenticationTraversalClient Create Zone Configuring the VCS as a Traversal ClientAdding a New Traversal Client Zone From the Type drop-down menu, selectAlternate 1 Alternate 5 Address Configuring a Traversal Client ZoneConfiguring the VCS as a Traversal Server Adding a New Traversal Server ZoneTraversalServer Create Zone Configuring a Traversal Server Zone Demux modeTCP retry count Interval XConfiguration Zones LocalZone Traversal H323 Configuring Traversal for EndpointsMedia demultiplexing RTP port Configuring Traversal Server PortsAssent call signaling port 323 H.460.18 call signaling portStun Relay Stun ServicesAbout Stun Stun Binding DiscoveryXConfiguration Traversal Server Configuring Stun ServicesBandwidthth Controll About Bandwidth ControlExample Network Deployment Subzones XCommand SubZoneAdd BandwidthControlCreating a Subzone Subnet 2 Configuring a SubzoneTo configure a subzone XConfiguration Zones LocalZone SubZonePer call inter Limits the bandwidth of any individual call Applying Bandwidth Limitations to SubzonesTypes of Limitations How Different Bandwidth Limitations are ManagedCreating Pipes XCommand PipeAddAbout Pipes Creating a new pipeXConfiguration Bandwidth Pipe Editing an Existing PipeEditing Pipes Creating a New Link Default LinksXCommand LinkAdd About Links Creating LinksXConfiguration Bandwidth Link Editing LinksEditing Links Default Links Bandwidth ControlApplying Pipes to Links About the Default Call Bandwidth Configuring the Default Call Bandwidth and DownspeedingAbout Downspeeding Example Without a Firewall Bandwidth Control ExamplesVCS Border Controller Subzone Configuration Enterprise VCS Subzone ConfigurationExample With a Firewall Upgrading Software MaintenanceText goes hereBacking up the Existing Configuration Before Upgrading Upgrading Using SCP/PSCPUpgrading Upgrading via the Web InterfaceAdding Options via the CLI XConfiguration Option 1..64 Key S 0Option Keys About Adding Extra OptionsAdding Options via the Web Interface Add option keyAdd Option Click Add Option About Security Enabling SecuritySecurity Creating a System Snapshot PasswordsSystem Snapshot About the System SnapshotAbout Shutting Down XCommand BootRestarting About RestartingSSH CommandText goes hereReference xConfigurationHttp HttpsOff the call will be rejected Total Mode On/OffAliasOrigin LDAP/Endpoint/Combined RequestOne call Fallback Alias S 0 Far end were registered directly to the local systemH323 Gatekeeper CallSignaling TCPPort NTP Option Key S 0 Tration will not be permitted On the VCS will act as a DIP registrarOff the VCS will not act as a SIP registrar 137 CommunityName S 0 SnmpRtcp RTPStun For any one call between two endpoints within For any one call to or from an endpoint in the DefaultBetween two endpoints within the Default Subzone Traversal ServerTo or from an endpoint in this subzone Intra Mode None/Limited/UnlimitedLimit Sets the total bandwidth limit in kbps of this subzoneName S 1 Assigns a name to this subzone Subnet Address S 0 VCS will attempt to send a TCP probe to the VCS Zones LocalZone Traversal H323 ContOrder to keep the firewall’s NAT bindings open RetryCountEnum 145 Transport TCP/TLS TCP TCP will be usedTLS TLS will be used Plexing mode for calls from the traversal client Zones TraversalClientOff Each call will use a separate pair of ports for Zones TraversalServer TCPProbe KeepAliveInterval Cont PatternType Exact/Prefix/Suffix/Regex CommandText goes hereReference xCommandXCommand Description Parameters List, the registration will be permittedXCommand Description ParametersList, the registration will not be permitted Status/LDAP Event/AuthenticationFailureStatus/Ethernet Status/NTPLinkAdd LinkDelete Locate OptionKeyAdd OptionKeyDelete Pipe1 S 1Pipe2 S 1 153 To Limited SubZoneAdd SubZoneDeletePerCallInterMode None/Limited/Unlimited PerCallInterEach transform TransformAdd TransformDelete ZoneAdd ZoneDeleteZoneList Option Key S 1 Description S 1 CommandText goes hereReference xStatusNTP Server Address IPv4Addr/IPv6Addr Domain S 0Status On/Off URL S 1,255 Expression S 1,127 0..15 entries External Manager160 161 Zones Contact S 1,255 Path URI 1..10 S 1,255163 164 165 166 167 Status Active/Inactive/Failed Address IPv6Addr IPv4Status Active/Inactive/Failed Address IPv4Addr Status Active/Inactive/Failed Address IPv4Addr IPv6169 Otherwise node Address-switch nodeCPLText Referencgoeshere AddressAuthentication Mode On SetupField Subfield URIUrl-ID 323 ID H323-ID Dialled Digits DialedDigits Proxy Rule-switchCPL Script Actions Location Unsupported CPL ElementsVpengineering Call Screening of Authenticated UsersCPL Examples Call Screening Based on AliasChange of Domain Name Call Screening Based on DomainAllow Calls from Locally Registered Endpoints Only Block Calls from Default Zone and Default SubzoneRestricting Access to a Local Gateway For a detailed description of regular expression syntax see RegularText goesExpressionhere ReferenceAbout Regular Expressions Will match against any sequence of charactersBind 8 DNSText goesConfiguhereationOverview Microsoft DNS Server Verifying the SRV RecordAbout the Ldap Databases Downloading the H.350 schemas LDAPText goesConfigurationhereSecuring with TLS Installing the H.350 SchemasMicrosoft Active Directory Adding H.350 ObjectsAdd the H.350 Objects . Copy the OpenLDAP files to the OpenLDAP schema directory. Add the ldif file to the server using the command OpenLDAPReference Title Link BibliographyTerm Definition GlossaryNAT IRQLAN LRQReliable communication protocol defined by RFC 791 Session Initiation ProtocolProtocol used to monitor network devices Firewall NAT traversal for SIP. Defined by RFC 3489187