Manuals / TANDBERG / Photography / Security Camera

TANDBERG D14049.01 manual 169

Models: D14049.01

1 187

Download 187 pages 62.39 Kb

Page 169

Image 169

CommandText goes hereReference - xStatus

TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE

STUN:

Servers:

Discovery:

Status: <Active/Inactive>

Address: <IPv4Addr/IPv6Addr>

Relay:

Status: <Active/Inactive>

Address: <IPv4Addr/IPv6Addr>

Bindings:

Count: <0..800>

Binding [1..800]:

Client: <IPv4Addr/IPv6Addr>

CreationTime: <Date Time>

ExpireTime: <Date Time>

Warnings:

Warning [1..n]:

Value: <S: 1,255>

Introduction

Getting

System

H.323 & SIP

Registration

Zones and

Call

Firewall

Bandwidth

Maintenance

Appendices

Started

Overview

Configuration

Control

Neighbors

Processing

Traversal

Control

D 14049.01

169

07.2007

Page 169

Image 169

Contents

Video Communication Server Administrator Guide Getting Started System ConfigurationTable of Contents Using TANDBERG’s FindMe Administrator PolicyCall Processing User PolicyCalls to and from Unregistered Endpoints Enum Dialing Disconnecting callsFallback Alias Firewall TraversalDNS Configuration 79 MaintenanceLdap Configuration 80 Regular Expression Reference 78Copyright 2007, Tandberg Trademarks and CopyrightDisclaimer Disclaimer, Copyrights and License AgreementsPatent Information Safety Instructions Safety Instructions and ApprovalsApprovals Environmental Issues Environmental Issues Standard Features Main Product FeaturesOptional Features IntroductionGetting Started Connecting the CablesTandberg VCS Initial Configuration via Serial Cable Powering on the VCSSystem Administrator Access Supported Browsers Using the Web InterfaceUsing the Command Line Interface CLI Viewing the Overview ViewingText goesSystemhere OverviewUnderstanding the Overview Configuring System Settings Systemtext ConfigurationAbout Admin Access settings System Administration ConfigurationEthernet Configuration Configuring Ethernet SettingsXConfiguration Ethernet About Ethernet SpeedIP Configuration Configuring IP SettingsXConfiguration IP XConfiguration IPProtocol About IPv4 to IPv6 GatewayingConfiguring DNS Settings DNS ConfigurationXConfiguration IP DNS About DNS ServersSetting the Time Zone Configuring NTP SettingsNTP Configuration XConfiguration NTP Address XConfiguration TimeZone NameAbout Snmp Settings Configuring Snmp SettingsSnmp Configuration XConfiguration SnmpExternal Manager Configuration Configuring External Manager SettingsXConfiguration ExternalManager About the External ManagerBacking up Configuration Settings Logging Overview LoggingEvent Log Viewing the Event LogEvent Log Format Message Details FieldDNS Events Logged at LevelEvents Logged at Level 1 TCP UDP TLS Event Data FieldsSIP 225 245Number of bytes sent/received in the message For Register requests the AOR for the Register requestRequest/granted registration expiry duration Limitations of standard syslog timestampsOverview Endpoint Registration WorkingText goeswithhereH.323XConfiguration H323 Configuring H.323SIP Overview WorkingText goeswithhereSIPXConfiguration SIP Configuring SIP Registrations, Protocols and PortsXCommand DomainAdd XConfiguration SIP Domains Configuring SIP DomainsXConfiguration Interworking Mode Configuring InterworkingInterworkingesText here OverviewRegistrationText goes hereControl MCU, Gateway and Content Server RegistrationEndpoint Registration Registration Overview323 Finding a VCS with which to RegisterPreventing automatic registrations H323 Gatekeeper AutoDiscoveryAuthentication About AuthenticationConfiguring Authentication XConfiguration AuthenticationAlias Origin Setting Authentication using an Ldap ServerConfiguring the Ldap Server Directory Securing the Ldap Connection with TLSXConfiguration Ldap XConfiguration Authentication Configuring Ldap Server settingsConfiguring the Local Database Authentication using a Local DatabaseNew Create CredentialAbout Alias Registration Attempts to Register using an Existing AliasRegistering Aliases Alias RegistrationAbout Allow and Deny Lists XConfiguration Registration RestrictionPolicyPatterns and Pattern Types Allow and Deny ListsManaging Entries in the Allow List XCommand AllowListAdd XConfiguration Registration AllowListManaging Entries in the Deny List XCommand DenyListAdd XConfiguration Registration DenyListAdd Deny List Pattern Registration Deny ListAbout your Video Communications Network Managing Zones, Neighbors and AlternatesExample Local Zone and Subzones Configuring the Local Zone and its SubzonesAbout the Local Zone and its Subzones Zones XCommand ZoneAdd Adding Zones Configuring ZonesXConfiguration Zones Zone Create ZoneHop count Configuring Zones All TypesMatch1 Match5 SIP port Configuring Neighbor ZonesRetry interval Configuring Traversal Client ZonesProtocol SIP transportConfiguring Traversal Server Zones Configuring DNS Zones Configuring Enum ZonesDNS suffix Determines whether H.323 calls will be allowed to this zoneXConfiguration Alternates About Alternates Configuring AlternatesAlternate 1 to Alternate 5 IP address About Dial Plans Setting up a Dial PlanFlat Dial Plan Structured Dial PlanLocating a Destination Endpoint CallText ProcessinggoeshereProcess Dialing by Address Types XConfiguration Zones Zone 1..200 HopCount Configuring Hop CountsAbout Hop Counts Hop CountsAbout Administrator Policy Administrator PolicyAdministrator Policy and Authentication Authentication Mode OnTo enable Administrator Policy Enabling the use of Administrator PolicyAdministrator Policy Mode Administrator Policy Mode to take effectConfiguring Administrator Policy via the Web Interface Uploading a CPL Script Configuring Administrator Policy via a CPL scriptAbout CPL XSD files Downloading policy filesAbout User Policy UserText goesPolicyhereXConfiguration Policy UserPolicy Configuring User Policy ManagerEnabling User Policy on the VCS UsernameManaging FindMe User Accounts About User AccountsCreating a New User Account Viewing Existing User Account Settings Changing a User PasswordTo change delete a FindMe user account Deleting a User AccountTick the box next to the account you wish to delete Click here to delete the selected accountsFindMe User Accounts Accessing the FindMe Configuration Using TANDBERG’s FindMeAbout your FindMe User Account About FindMeConfiguring your FindMe User Account AliasText goSearchingshere and Transforming XConfiguration Transform Configuring Local Alias TransformsZone Searching and Transforming Default Settings Configuring Zone Searches and TransformsZone searching and alias transforming configuration Examples Combining Match Types and PrioritiesNever Query a Zone Always Query a Zone, Never Apply TransformsChanging the Prefix or Suffix Before Querying Filter Queries to a Zone Without TransformingUser@example.com User@exampleusa.com Query a Zone for Two or More Transformed Aliases Query a Zone for Both Original and Transformed AliasURI Dialing Overview URITextDialinggoeshereURI Dialing for Outgoing Calls Configuring Matches for DNS ZonesAn AlwaysMatch, or XCommand ZoneAdd XConfiguration Zones Zone Adding and Configuring DNS ZonesClick Create Zone Assigns a name to this zoneXConfiguration IP DNS Server Configuring DNS ServersURI Dialing for Incoming Calls Recommended Configuration Example DNS Record ConfigurationURI Dialing and Firewall Traversal About Enum Dialing ENUMText goesDialinghereEnum Dialing Overview Enum ProcessEnum Dialing for Outgoing Calls PrerequisitesConfiguring Transforms for Enum Zones Configuring Matches for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix For Enum zones, this will be Enum Configuring Enum ZonesConfiguring DNS Servers About DNS Domains for Enum Configuring DNS Naptr RecordsEnum Dialing for Incoming Calls Recommended Configuration for Firewall Traversal ConfigurationCallsText gtoesandherefrom Unregistered Endpoints Calls to an Unregistered EndpointFallbackText goesAliashere XConfiguration Call Services Fallback AliasFallback Alias Example Use of a Fallback AliasIdentifying a Particular Call DisconnectingText goes herecallsDisconnecting a Call via the CLI Disconnecting a Call via the Web InterfaceIssues when Disconnecting SIP Calls DisconnectFirewall Traversal Overview Firewall TraversalAbout Firewall Traversal VCS as a Firewall Traversal Client VCS as a Firewall Traversal ServerFirewall Traversal Protocols and Ports Stun Ports Ports for Connections out to the Public Internet323 VCS Firewall Traversal and AuthenticationAdding a New Traversal Client Zone Configuring the VCS as a Traversal ClientFrom the Type drop-down menu, select TraversalClient Create ZoneAlternate 1 Alternate 5 Address Configuring a Traversal Client ZoneAdding a New Traversal Server Zone Configuring the VCS as a Traversal ServerTraversalServer Create Zone Demux mode Configuring a Traversal Server ZoneTCP retry count Interval XConfiguration Zones LocalZone Traversal H323 Configuring Traversal for EndpointsAssent call signaling port Configuring Traversal Server Ports323 H.460.18 call signaling port Media demultiplexing RTP portAbout Stun Stun ServicesStun Binding Discovery Stun RelayXConfiguration Traversal Server Configuring Stun ServicesAbout Bandwidth Control Bandwidthth ControllExample Network Deployment Subzones BandwidthControl XCommand SubZoneAddCreating a Subzone To configure a subzone Configuring a SubzoneXConfiguration Zones LocalZone SubZone Subnet 2Types of Limitations Applying Bandwidth Limitations to SubzonesHow Different Bandwidth Limitations are Managed Per call inter Limits the bandwidth of any individual callAbout Pipes XCommand PipeAddCreating a new pipe Creating PipesEditing an Existing Pipe XConfiguration Bandwidth PipeEditing Pipes XCommand LinkAdd Default LinksAbout Links Creating Links Creating a New LinkEditing Links XConfiguration Bandwidth LinkEditing Links Bandwidth Control Default LinksApplying Pipes to Links Configuring the Default Call Bandwidth and Downspeeding About the Default Call BandwidthAbout Downspeeding Example Without a Firewall Bandwidth Control ExamplesEnterprise VCS Subzone Configuration VCS Border Controller Subzone ConfigurationExample With a Firewall Backing up the Existing Configuration Before Upgrading MaintenanceText goes hereUpgrading Using SCP/PSCP Upgrading SoftwareUpgrading Upgrading via the Web InterfaceOption Keys XConfiguration Option 1..64 Key S 0About Adding Extra Options Adding Options via the CLIAdd option key Adding Options via the Web InterfaceAdd Option Click Add Option Enabling Security About SecuritySecurity System Snapshot PasswordsAbout the System Snapshot Creating a System SnapshotRestarting XCommand BootAbout Restarting About Shutting DownHttp CommandText goes hereReference xConfigurationHttps SSHAliasOrigin LDAP/Endpoint/Combined Total Mode On/OffRequest Off the call will be rejectedOne call Fallback Alias S 0 Far end were registered directly to the local systemTCP H323 Gatekeeper CallSignalingPort NTP Option Key S 0 On the VCS will act as a DIP registrar Tration will not be permittedOff the VCS will not act as a SIP registrar 137 CommunityName S 0 SnmpRTP RtcpStun Between two endpoints within the Default Subzone For any one call to or from an endpoint in the DefaultTraversal Server For any one call between two endpoints withinTo or from an endpoint in this subzone Intra Mode None/Limited/UnlimitedSets the total bandwidth limit in kbps of this subzone LimitName S 1 Assigns a name to this subzone Subnet Address S 0 Order to keep the firewall’s NAT bindings open Zones LocalZone Traversal H323 ContRetryCount VCS will attempt to send a TCP probe to the VCSEnum 145 TCP TCP will be used Transport TCP/TLSTLS TLS will be used Zones TraversalClient Plexing mode for calls from the traversal clientOff Each call will use a separate pair of ports for Zones TraversalServer TCPProbe KeepAliveInterval Cont XCommand Description Parameters CommandText goes hereReference xCommandList, the registration will be permitted PatternType Exact/Prefix/Suffix/RegexDescription Parameters XCommandList, the registration will not be permitted Status/Ethernet Event/AuthenticationFailureStatus/NTP Status/LDAPPipe1 S 1 LinkAdd LinkDelete Locate OptionKeyAdd OptionKeyDeletePipe2 S 1 153 PerCallInterMode None/Limited/Unlimited SubZoneAdd SubZoneDeletePerCallInter To LimitedEach transform TransformAdd TransformDelete ZoneAdd ZoneDeleteZoneList Option Key S 1 Description S 1 CommandText goes hereReference xStatusNTP Server Address IPv4Addr/IPv6Addr Domain S 0Status On/Off URL S 1,255 Expression S 1,127 0..15 entries External Manager160 161 Zones Contact S 1,255 Path URI 1..10 S 1,255163 164 165 166 167 Status Active/Inactive/Failed Address IPv4Addr IPv4Status Active/Inactive/Failed Address IPv4Addr IPv6 Status Active/Inactive/Failed Address IPv6Addr169 CPLText Referencgoeshere Address-switch nodeAddress Otherwise nodeSetup Authentication Mode OnField URI SubfieldUrl-ID 323 ID H323-ID Dialled Digits DialedDigits CPL Script Actions Location Rule-switchUnsupported CPL Elements ProxyCPL Examples Call Screening of Authenticated UsersCall Screening Based on Alias VpengineeringChange of Domain Name Call Screening Based on DomainAllow Calls from Locally Registered Endpoints Only Block Calls from Default Zone and Default SubzoneRestricting Access to a Local Gateway About Regular Expressions RegularText goesExpressionhere ReferenceWill match against any sequence of characters For a detailed description of regular expression syntax seeOverview Microsoft DNS Server DNSText goesConfiguhereationVerifying the SRV Record Bind 8About the Ldap Databases Downloading the H.350 schemas LDAPText goesConfigurationhereMicrosoft Active Directory Installing the H.350 SchemasAdding H.350 Objects Securing with TLS. Add the ldif file to the server using the command . Copy the OpenLDAP files to the OpenLDAP schema directoryOpenLDAP Add the H.350 ObjectsReference Title Link BibliographyTerm Definition GlossaryLAN IRQLRQ NATProtocol used to monitor network devices Session Initiation ProtocolFirewall NAT traversal for SIP. Defined by RFC 3489 Reliable communication protocol defined by RFC 791187