Manuals / TANDBERG / Photography / Security Camera

TANDBERG D14049.01 manual 167

Models: D14049.01

1 187

Download 187 pages 62.39 Kb

Page 167

CommandText goes hereReference - xStatus

TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE

Alternates:

Alternate [1..5]:

Status: <Active/Failed/Unknown>

Cause: {Visible if status is Failed} <No response from gatekeeper/DNS resolution failed/Invalid IP address>

Address: <IPv4Addr/IPv6Addr>

Port: <1..65534>

LastStatusChange: <Seconds since boot/Date Time>

UserPolicyManager:

Mode: <Off/Local/Remote>

Status: <Active/Inactive/Unknown> {Visible if Remote}

Address: <1..1024> {Visible if Remote}

H323:

Registration:

Status: <Active/Inactive/Failed>

IPv4: {Visible if Status=Active}

Address: <IPv4Addr>

IPv6: {Visible if Status=Active}

Address: <IPv6Addr>

CallSignaling:

Status: <Active/Inactive/Failed>

IPv4: {Visible if Status=Active}

Address: <IPv4Addr>

IPv6: {Visible if Status=Active}

Address: <IPv6Addr>

Assent:

CallSignaling:

Status: <Active/Inactive/Failed>

IPv4: {Visible if Status=Active}

Address: <IPv4Addr>

IPv6: {Visible if Status=Active}

Address: <IPv6Addr>

Introduction

Getting

System

System

H.323 & SIP

Registration

Zones and

Call

Firewall

Bandwidth

Maintenance

Appendices

Started

Overview

Configuration

Configuration

Control

Neighbors

Processing

Traversal

Control

D 14049.01

167

07.2007

Image 167

TANDBERG D14049.01 manual 167

Contents

Video Communication Server Administrator Guide Getting Started System ConfigurationTable of Contents User Policy Administrator PolicyUsing TANDBERG’s FindMe Call ProcessingFirewall Traversal Enum Dialing Disconnecting callsCalls to and from Unregistered Endpoints Fallback AliasRegular Expression Reference 78 MaintenanceDNS Configuration 79 Ldap Configuration 80Copyright 2007, Tandberg Trademarks and CopyrightPatent Information Disclaimer, Copyrights and License AgreementsDisclaimer Approvals Safety Instructions and ApprovalsSafety Instructions Environmental Issues Environmental Issues Introduction Main Product FeaturesStandard Features Optional FeaturesTandberg VCS Connecting the CablesGetting Started Initial Configuration via Serial Cable Powering on the VCSSystem Administrator Access Supported Browsers Using the Web InterfaceUsing the Command Line Interface CLI Understanding the Overview ViewingText goesSystemhere OverviewViewing the Overview System Administration Configuration Systemtext ConfigurationConfiguring System Settings About Admin Access settingsAbout Ethernet Speed Configuring Ethernet SettingsEthernet Configuration XConfiguration EthernetAbout IPv4 to IPv6 Gatewaying Configuring IP SettingsIP Configuration XConfiguration IP XConfiguration IPProtocolAbout DNS Servers DNS ConfigurationConfiguring DNS Settings XConfiguration IP DNSXConfiguration NTP Address XConfiguration TimeZone Name Configuring NTP SettingsSetting the Time Zone NTP ConfigurationXConfiguration Snmp Configuring Snmp SettingsAbout Snmp Settings Snmp ConfigurationAbout the External Manager Configuring External Manager SettingsExternal Manager Configuration XConfiguration ExternalManagerBacking up Configuration Settings Logging Overview LoggingMessage Details Field Viewing the Event LogEvent Log Event Log FormatDNS Events Logged at LevelEvents Logged at Level 1 225 245 Event Data FieldsTCP UDP TLS SIPLimitations of standard syslog timestamps For Register requests the AOR for the Register requestNumber of bytes sent/received in the message Request/granted registration expiry durationOverview Endpoint Registration WorkingText goeswithhereH.323XConfiguration H323 Configuring H.323SIP Overview WorkingText goeswithhereSIPXConfiguration SIP Configuring SIP Registrations, Protocols and PortsXCommand DomainAdd XConfiguration SIP Domains Configuring SIP DomainsOverview Configuring InterworkingXConfiguration Interworking Mode InterworkingesText hereRegistration Overview MCU, Gateway and Content Server RegistrationRegistrationText goes hereControl Endpoint RegistrationH323 Gatekeeper AutoDiscovery Finding a VCS with which to Register323 Preventing automatic registrationsXConfiguration Authentication About AuthenticationAuthentication Configuring AuthenticationSecuring the Ldap Connection with TLS Authentication using an Ldap ServerAlias Origin Setting Configuring the Ldap Server DirectoryXConfiguration Ldap XConfiguration Authentication Configuring Ldap Server settingsCreate Credential Authentication using a Local DatabaseConfiguring the Local Database NewAlias Registration Attempts to Register using an Existing AliasAbout Alias Registration Registering AliasesAllow and Deny Lists XConfiguration Registration RestrictionPolicyAbout Allow and Deny Lists Patterns and Pattern TypesManaging Entries in the Allow List XCommand AllowListAdd XConfiguration Registration AllowListRegistration Deny List XCommand DenyListAdd XConfiguration Registration DenyListManaging Entries in the Deny List Add Deny List PatternExample Managing Zones, Neighbors and AlternatesAbout your Video Communications Network About the Local Zone and its Subzones Configuring the Local Zone and its SubzonesLocal Zone and Subzones Zones Create Zone Adding Zones Configuring ZonesXCommand ZoneAdd XConfiguration Zones ZoneMatch1 Match5 Configuring Zones All TypesHop count SIP port Configuring Neighbor ZonesSIP transport Configuring Traversal Client ZonesRetry interval ProtocolConfiguring Traversal Server Zones Determines whether H.323 calls will be allowed to this zone Configuring Enum ZonesConfiguring DNS Zones DNS suffixAlternate 1 to Alternate 5 IP address About Alternates Configuring AlternatesXConfiguration Alternates Structured Dial Plan Setting up a Dial PlanAbout Dial Plans Flat Dial PlanProcess CallText ProcessinggoeshereLocating a Destination Endpoint Dialing by Address Types Hop Counts Configuring Hop CountsXConfiguration Zones Zone 1..200 HopCount About Hop CountsAuthentication Mode On Administrator PolicyAbout Administrator Policy Administrator Policy and AuthenticationAdministrator Policy Mode to take effect Enabling the use of Administrator PolicyTo enable Administrator Policy Administrator Policy ModeConfiguring Administrator Policy via the Web Interface Downloading policy files Configuring Administrator Policy via a CPL scriptUploading a CPL Script About CPL XSD filesAbout User Policy UserText goesPolicyhereUsername Configuring User Policy ManagerXConfiguration Policy UserPolicy Enabling User Policy on the VCSCreating a New User Account About User AccountsManaging FindMe User Accounts Viewing Existing User Account Settings Changing a User PasswordClick here to delete the selected accounts Deleting a User AccountTo change delete a FindMe user account Tick the box next to the account you wish to deleteAbout FindMe Using TANDBERG’s FindMeFindMe User Accounts Accessing the FindMe Configuration About your FindMe User AccountConfiguring your FindMe User Account AliasText goSearchingshere and Transforming XConfiguration Transform Configuring Local Alias TransformsZone Searching and Transforming Zone searching and alias transforming configuration Configuring Zone Searches and TransformsDefault Settings Always Query a Zone, Never Apply Transforms Combining Match Types and PrioritiesExamples Never Query a ZoneUser@example.com User@exampleusa.com Filter Queries to a Zone Without TransformingChanging the Prefix or Suffix Before Querying Query a Zone for Two or More Transformed Aliases Query a Zone for Both Original and Transformed AliasURI Dialing Overview URITextDialinggoeshereAn AlwaysMatch, or Configuring Matches for DNS ZonesURI Dialing for Outgoing Calls Assigns a name to this zone Adding and Configuring DNS ZonesXCommand ZoneAdd XConfiguration Zones Zone Click Create ZoneXConfiguration IP DNS Server Configuring DNS ServersURI Dialing for Incoming Calls URI Dialing and Firewall Traversal Example DNS Record ConfigurationRecommended Configuration Enum Process ENUMText goesDialinghereAbout Enum Dialing Enum Dialing OverviewEnum Dialing for Outgoing Calls PrerequisitesMode of PatternMatch Pattern string Pattern type of Prefix Configuring Matches for Enum ZonesConfiguring Transforms for Enum Zones For Enum zones, this will be Enum Configuring Enum ZonesConfiguring DNS Servers Enum Dialing for Incoming Calls Configuring DNS Naptr RecordsAbout DNS Domains for Enum Calls to an Unregistered Endpoint ConfigurationRecommended Configuration for Firewall Traversal CallsText gtoesandherefrom Unregistered EndpointsExample Use of a Fallback Alias XConfiguration Call Services Fallback AliasFallbackText goesAliashere Fallback AliasIdentifying a Particular Call DisconnectingText goes herecallsDisconnect Disconnecting a Call via the Web InterfaceDisconnecting a Call via the CLI Issues when Disconnecting SIP CallsVCS as a Firewall Traversal Server Firewall TraversalFirewall Traversal Overview About Firewall Traversal VCS as a Firewall Traversal ClientFirewall Traversal Protocols and Ports 323 Ports for Connections out to the Public InternetStun Ports VCS Firewall Traversal and AuthenticationTraversalClient Create Zone Configuring the VCS as a Traversal ClientAdding a New Traversal Client Zone From the Type drop-down menu, selectAlternate 1 Alternate 5 Address Configuring a Traversal Client ZoneTraversalServer Create Zone Configuring the VCS as a Traversal ServerAdding a New Traversal Server Zone TCP retry count Interval Configuring a Traversal Server ZoneDemux mode XConfiguration Zones LocalZone Traversal H323 Configuring Traversal for EndpointsMedia demultiplexing RTP port Configuring Traversal Server PortsAssent call signaling port 323 H.460.18 call signaling portStun Relay Stun ServicesAbout Stun Stun Binding DiscoveryXConfiguration Traversal Server Configuring Stun ServicesExample Network Deployment Bandwidthth ControllAbout Bandwidth Control Subzones Creating a Subzone XCommand SubZoneAddBandwidthControl Subnet 2 Configuring a SubzoneTo configure a subzone XConfiguration Zones LocalZone SubZonePer call inter Limits the bandwidth of any individual call Applying Bandwidth Limitations to SubzonesTypes of Limitations How Different Bandwidth Limitations are ManagedCreating Pipes XCommand PipeAddAbout Pipes Creating a new pipeEditing Pipes XConfiguration Bandwidth PipeEditing an Existing Pipe Creating a New Link Default LinksXCommand LinkAdd About Links Creating LinksEditing Links XConfiguration Bandwidth LinkEditing Links Applying Pipes to Links Default LinksBandwidth Control About Downspeeding About the Default Call BandwidthConfiguring the Default Call Bandwidth and Downspeeding Example Without a Firewall Bandwidth Control ExamplesExample With a Firewall VCS Border Controller Subzone ConfigurationEnterprise VCS Subzone Configuration Upgrading Software MaintenanceText goes hereBacking up the Existing Configuration Before Upgrading Upgrading Using SCP/PSCPUpgrading Upgrading via the Web InterfaceAdding Options via the CLI XConfiguration Option 1..64 Key S 0Option Keys About Adding Extra OptionsAdd Option Click Add Option Adding Options via the Web InterfaceAdd option key Security About SecurityEnabling Security Creating a System Snapshot PasswordsSystem Snapshot About the System SnapshotAbout Shutting Down XCommand BootRestarting About RestartingSSH CommandText goes hereReference xConfigurationHttp HttpsOff the call will be rejected Total Mode On/OffAliasOrigin LDAP/Endpoint/Combined RequestOne call Fallback Alias S 0 Far end were registered directly to the local systemPort H323 Gatekeeper CallSignalingTCP NTP Option Key S 0 Off the VCS will not act as a SIP registrar Tration will not be permittedOn the VCS will act as a DIP registrar 137 CommunityName S 0 SnmpStun RtcpRTP For any one call between two endpoints within For any one call to or from an endpoint in the DefaultBetween two endpoints within the Default Subzone Traversal ServerTo or from an endpoint in this subzone Intra Mode None/Limited/UnlimitedName S 1 Assigns a name to this subzone Subnet Address S 0 LimitSets the total bandwidth limit in kbps of this subzone VCS will attempt to send a TCP probe to the VCS Zones LocalZone Traversal H323 ContOrder to keep the firewall’s NAT bindings open RetryCountEnum 145 TLS TLS will be used Transport TCP/TLSTCP TCP will be used Off Each call will use a separate pair of ports for Plexing mode for calls from the traversal clientZones TraversalClient Zones TraversalServer TCPProbe KeepAliveInterval Cont PatternType Exact/Prefix/Suffix/Regex CommandText goes hereReference xCommandXCommand Description Parameters List, the registration will be permittedList, the registration will not be permitted XCommandDescription Parameters Status/LDAP Event/AuthenticationFailureStatus/Ethernet Status/NTPPipe2 S 1 LinkAdd LinkDelete Locate OptionKeyAdd OptionKeyDeletePipe1 S 1 153 To Limited SubZoneAdd SubZoneDeletePerCallInterMode None/Limited/Unlimited PerCallInterEach transform TransformAdd TransformDelete ZoneAdd ZoneDeleteZoneList Option Key S 1 Description S 1 CommandText goes hereReference xStatusNTP Server Address IPv4Addr/IPv6Addr Domain S 0Status On/Off URL S 1,255 Expression S 1,127 0..15 entries External Manager160 161 Zones Contact S 1,255 Path URI 1..10 S 1,255163 164 165 166 167 Status Active/Inactive/Failed Address IPv6Addr IPv4Status Active/Inactive/Failed Address IPv4Addr Status Active/Inactive/Failed Address IPv4Addr IPv6169 Otherwise node Address-switch nodeCPLText Referencgoeshere AddressField Authentication Mode OnSetup Url-ID 323 ID H323-ID Dialled Digits DialedDigits SubfieldURI Proxy Rule-switchCPL Script Actions Location Unsupported CPL ElementsVpengineering Call Screening of Authenticated UsersCPL Examples Call Screening Based on AliasChange of Domain Name Call Screening Based on DomainAllow Calls from Locally Registered Endpoints Only Block Calls from Default Zone and Default SubzoneRestricting Access to a Local Gateway For a detailed description of regular expression syntax see RegularText goesExpressionhere ReferenceAbout Regular Expressions Will match against any sequence of charactersBind 8 DNSText goesConfiguhereationOverview Microsoft DNS Server Verifying the SRV RecordAbout the Ldap Databases Downloading the H.350 schemas LDAPText goesConfigurationhereSecuring with TLS Installing the H.350 SchemasMicrosoft Active Directory Adding H.350 ObjectsAdd the H.350 Objects . Copy the OpenLDAP files to the OpenLDAP schema directory. Add the ldif file to the server using the command OpenLDAPReference Title Link BibliographyTerm Definition GlossaryNAT IRQLAN LRQReliable communication protocol defined by RFC 791 Session Initiation ProtocolProtocol used to monitor network devices Firewall NAT traversal for SIP. Defined by RFC 3489187