Manuals / TANDBERG / Photography / Security Camera

TANDBERG D14049.01 manual LDAPText goesConfigurationhere

Models: D14049.01

1 187

Download 187 pages 62.39 Kb

Page 180

LDAPText goesConfigurationhere

TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE

About the LDAP Databases

Downloading the H.350 schemas

The VCS can be configured to use a database on an LDAP Directory Server to store authentication credential information (usernames, passwords, and other relevant information)

This section describes how to download the schemas that must be installed on the LDAP server, and how to install and configure two common types of LDAP servers, Microsoft Active Directory and OpenLDAP, for use with the VCS.

The following ITU specification describes the schemas which are required to be installed on the LDAP server:

H.350 Directory services architecture for multimedia conferencing - An LDAP schema to represent endpoints on the network. H.350.1 Directory services architecture for H.323 - An LDAP schema to represent H.323 endpoints.

H.350.2 Directory services architecture for H.235 - An LDAP schema to represent H.235 elements.

The schemas can be downloaded in ldif format from the web interface on the VCS. To do this:

. Navigate to VCS Configuration > Authentication > LDAP > Schemas. You will see a list of downloadable schemas. . Click on the Download button next to each file to open it.

Introduction

Getting

System

System

H.323 & SIP

Registration

Zones and

Call

Firewall

Bandwidth

Maintenance

Appendices

Started

Overview

Configuration

Configuration

Control

Neighbors

Processing

Traversal

Control

D 14049.01

180

07.2007

Image 180

TANDBERG D14049.01 manual LDAPText goesConfigurationhere, About the Ldap Databases Downloading the H.350 schemas

Contents

Video Communication Server Administrator Guide System Configuration Getting StartedTable of Contents Administrator Policy Using TANDBERG’s FindMeCall Processing User PolicyEnum Dialing Disconnecting calls Calls to and from Unregistered EndpointsFallback Alias Firewall TraversalMaintenance DNS Configuration 79Ldap Configuration 80 Regular Expression Reference 78Trademarks and Copyright Copyright 2007, TandbergDisclaimer, Copyrights and License Agreements DisclaimerPatent Information Safety Instructions and Approvals Safety InstructionsApprovals Environmental Issues Environmental Issues Main Product Features Standard FeaturesOptional Features IntroductionConnecting the Cables Getting StartedTandberg VCS Powering on the VCS Initial Configuration via Serial CableSystem Administrator Access Using the Web Interface Supported BrowsersUsing the Command Line Interface CLI ViewingText goesSystemhere Overview Viewing the OverviewUnderstanding the Overview Systemtext Configuration Configuring System SettingsAbout Admin Access settings System Administration ConfigurationConfiguring Ethernet Settings Ethernet ConfigurationXConfiguration Ethernet About Ethernet SpeedConfiguring IP Settings IP ConfigurationXConfiguration IP XConfiguration IPProtocol About IPv4 to IPv6 GatewayingDNS Configuration Configuring DNS SettingsXConfiguration IP DNS About DNS ServersConfiguring NTP Settings Setting the Time ZoneNTP Configuration XConfiguration NTP Address XConfiguration TimeZone NameConfiguring Snmp Settings About Snmp SettingsSnmp Configuration XConfiguration SnmpConfiguring External Manager Settings External Manager ConfigurationXConfiguration ExternalManager About the External ManagerBacking up Configuration Settings Logging Logging OverviewViewing the Event Log Event LogEvent Log Format Message Details FieldEvents Logged at Level DNSEvents Logged at Level 1 Event Data Fields TCP UDP TLSSIP 225 245For Register requests the AOR for the Register request Number of bytes sent/received in the messageRequest/granted registration expiry duration Limitations of standard syslog timestampsWorkingText goeswithhereH.323 Overview Endpoint RegistrationConfiguring H.323 XConfiguration H323WorkingText goeswithhereSIP SIP OverviewConfiguring SIP Registrations, Protocols and Ports XConfiguration SIPConfiguring SIP Domains XCommand DomainAdd XConfiguration SIP DomainsConfiguring Interworking XConfiguration Interworking ModeInterworkingesText here OverviewMCU, Gateway and Content Server Registration RegistrationText goes hereControlEndpoint Registration Registration OverviewFinding a VCS with which to Register 323Preventing automatic registrations H323 Gatekeeper AutoDiscoveryAbout Authentication AuthenticationConfiguring Authentication XConfiguration AuthenticationAuthentication using an Ldap Server Alias Origin SettingConfiguring the Ldap Server Directory Securing the Ldap Connection with TLSConfiguring Ldap Server settings XConfiguration Ldap XConfiguration AuthenticationAuthentication using a Local Database Configuring the Local DatabaseNew Create CredentialAttempts to Register using an Existing Alias About Alias RegistrationRegistering Aliases Alias RegistrationXConfiguration Registration RestrictionPolicy About Allow and Deny ListsPatterns and Pattern Types Allow and Deny ListsXCommand AllowListAdd XConfiguration Registration AllowList Managing Entries in the Allow ListXCommand DenyListAdd XConfiguration Registration DenyList Managing Entries in the Deny ListAdd Deny List Pattern Registration Deny ListManaging Zones, Neighbors and Alternates About your Video Communications NetworkExample Configuring the Local Zone and its Subzones Local Zone and SubzonesAbout the Local Zone and its Subzones Zones Adding Zones Configuring Zones XCommand ZoneAddXConfiguration Zones Zone Create ZoneConfiguring Zones All Types Hop countMatch1 Match5 Configuring Neighbor Zones SIP portConfiguring Traversal Client Zones Retry intervalProtocol SIP transportConfiguring Traversal Server Zones Configuring Enum Zones Configuring DNS ZonesDNS suffix Determines whether H.323 calls will be allowed to this zoneAbout Alternates Configuring Alternates XConfiguration AlternatesAlternate 1 to Alternate 5 IP address Setting up a Dial Plan About Dial PlansFlat Dial Plan Structured Dial PlanCallText Processinggoeshere Locating a Destination EndpointProcess Dialing by Address Types Configuring Hop Counts XConfiguration Zones Zone 1..200 HopCountAbout Hop Counts Hop CountsAdministrator Policy About Administrator PolicyAdministrator Policy and Authentication Authentication Mode OnEnabling the use of Administrator Policy To enable Administrator PolicyAdministrator Policy Mode Administrator Policy Mode to take effectConfiguring Administrator Policy via the Web Interface Configuring Administrator Policy via a CPL script Uploading a CPL ScriptAbout CPL XSD files Downloading policy filesUserText goesPolicyhere About User PolicyConfiguring User Policy Manager XConfiguration Policy UserPolicyEnabling User Policy on the VCS UsernameAbout User Accounts Managing FindMe User AccountsCreating a New User Account Changing a User Password Viewing Existing User Account SettingsDeleting a User Account To change delete a FindMe user accountTick the box next to the account you wish to delete Click here to delete the selected accountsUsing TANDBERG’s FindMe FindMe User Accounts Accessing the FindMe ConfigurationAbout your FindMe User Account About FindMeConfiguring your FindMe User Account AliasText goSearchingshere and Transforming Configuring Local Alias Transforms XConfiguration TransformZone Searching and Transforming Configuring Zone Searches and Transforms Default SettingsZone searching and alias transforming configuration Combining Match Types and Priorities ExamplesNever Query a Zone Always Query a Zone, Never Apply TransformsFilter Queries to a Zone Without Transforming Changing the Prefix or Suffix Before QueryingUser@example.com User@exampleusa.com Query a Zone for Both Original and Transformed Alias Query a Zone for Two or More Transformed AliasesURITextDialinggoeshere URI Dialing OverviewConfiguring Matches for DNS Zones URI Dialing for Outgoing CallsAn AlwaysMatch, or Adding and Configuring DNS Zones XCommand ZoneAdd XConfiguration Zones ZoneClick Create Zone Assigns a name to this zoneConfiguring DNS Servers XConfiguration IP DNS ServerURI Dialing for Incoming Calls Example DNS Record Configuration Recommended ConfigurationURI Dialing and Firewall Traversal ENUMText goesDialinghere About Enum DialingEnum Dialing Overview Enum ProcessPrerequisites Enum Dialing for Outgoing CallsConfiguring Matches for Enum Zones Configuring Transforms for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix Configuring Enum Zones For Enum zones, this will be EnumConfiguring DNS Servers Configuring DNS Naptr Records About DNS Domains for EnumEnum Dialing for Incoming Calls Configuration Recommended Configuration for Firewall TraversalCallsText gtoesandherefrom Unregistered Endpoints Calls to an Unregistered EndpointXConfiguration Call Services Fallback Alias FallbackText goesAliashereFallback Alias Example Use of a Fallback AliasDisconnectingText goes herecalls Identifying a Particular CallDisconnecting a Call via the Web Interface Disconnecting a Call via the CLIIssues when Disconnecting SIP Calls DisconnectFirewall Traversal Firewall Traversal OverviewAbout Firewall Traversal VCS as a Firewall Traversal Client VCS as a Firewall Traversal ServerFirewall Traversal Protocols and Ports Ports for Connections out to the Public Internet Stun Ports323 Firewall Traversal and Authentication VCSConfiguring the VCS as a Traversal Client Adding a New Traversal Client ZoneFrom the Type drop-down menu, select TraversalClient Create ZoneConfiguring a Traversal Client Zone Alternate 1 Alternate 5 AddressConfiguring the VCS as a Traversal Server Adding a New Traversal Server ZoneTraversalServer Create Zone Configuring a Traversal Server Zone Demux modeTCP retry count Interval Configuring Traversal for Endpoints XConfiguration Zones LocalZone Traversal H323Configuring Traversal Server Ports Assent call signaling port323 H.460.18 call signaling port Media demultiplexing RTP portStun Services About StunStun Binding Discovery Stun RelayConfiguring Stun Services XConfiguration Traversal ServerBandwidthth Controll About Bandwidth ControlExample Network Deployment Subzones XCommand SubZoneAdd BandwidthControlCreating a Subzone Configuring a Subzone To configure a subzoneXConfiguration Zones LocalZone SubZone Subnet 2Applying Bandwidth Limitations to Subzones Types of LimitationsHow Different Bandwidth Limitations are Managed Per call inter Limits the bandwidth of any individual callXCommand PipeAdd About PipesCreating a new pipe Creating PipesXConfiguration Bandwidth Pipe Editing an Existing PipeEditing Pipes Default Links XCommand LinkAddAbout Links Creating Links Creating a New LinkXConfiguration Bandwidth Link Editing LinksEditing Links Default Links Bandwidth ControlApplying Pipes to Links About the Default Call Bandwidth Configuring the Default Call Bandwidth and DownspeedingAbout Downspeeding Bandwidth Control Examples Example Without a FirewallVCS Border Controller Subzone Configuration Enterprise VCS Subzone ConfigurationExample With a Firewall MaintenanceText goes here Backing up the Existing Configuration Before UpgradingUpgrading Using SCP/PSCP Upgrading SoftwareUpgrading via the Web Interface UpgradingXConfiguration Option 1..64 Key S 0 Option KeysAbout Adding Extra Options Adding Options via the CLIAdding Options via the Web Interface Add option keyAdd Option Click Add Option About Security Enabling SecuritySecurity Passwords System SnapshotAbout the System Snapshot Creating a System SnapshotXCommand Boot RestartingAbout Restarting About Shutting DownCommandText goes hereReference xConfiguration HttpHttps SSHTotal Mode On/Off AliasOrigin LDAP/Endpoint/CombinedRequest Off the call will be rejectedOne call Far end were registered directly to the local system Fallback Alias S 0H323 Gatekeeper CallSignaling TCPPort NTP Option Key S 0 Tration will not be permitted On the VCS will act as a DIP registrarOff the VCS will not act as a SIP registrar 137 Snmp CommunityName S 0Rtcp RTPStun For any one call to or from an endpoint in the Default Between two endpoints within the Default SubzoneTraversal Server For any one call between two endpoints withinIntra Mode None/Limited/Unlimited To or from an endpoint in this subzoneLimit Sets the total bandwidth limit in kbps of this subzoneName S 1 Assigns a name to this subzone Subnet Address S 0 Zones LocalZone Traversal H323 Cont Order to keep the firewall’s NAT bindings openRetryCount VCS will attempt to send a TCP probe to the VCSEnum 145 Transport TCP/TLS TCP TCP will be usedTLS TLS will be used Plexing mode for calls from the traversal client Zones TraversalClientOff Each call will use a separate pair of ports for Zones TraversalServer TCPProbe KeepAliveInterval Cont CommandText goes hereReference xCommand XCommand Description ParametersList, the registration will be permitted PatternType Exact/Prefix/Suffix/RegexXCommand Description ParametersList, the registration will not be permitted Event/AuthenticationFailure Status/EthernetStatus/NTP Status/LDAPLinkAdd LinkDelete Locate OptionKeyAdd OptionKeyDelete Pipe1 S 1Pipe2 S 1 153 SubZoneAdd SubZoneDelete PerCallInterMode None/Limited/UnlimitedPerCallInter To LimitedTransformAdd TransformDelete ZoneAdd ZoneDelete Each transformZoneList CommandText goes hereReference xStatus Option Key S 1 Description S 1Server Address IPv4Addr/IPv6Addr Domain S 0 NTPExternal Manager Status On/Off URL S 1,255 Expression S 1,127 0..15 entries160 161 Contact S 1,255 Path URI 1..10 S 1,255 Zones163 164 165 166 167 IPv4 Status Active/Inactive/Failed Address IPv4AddrStatus Active/Inactive/Failed Address IPv4Addr IPv6 Status Active/Inactive/Failed Address IPv6Addr169 Address-switch node CPLText ReferencgoeshereAddress Otherwise nodeAuthentication Mode On SetupField Subfield URIUrl-ID 323 ID H323-ID Dialled Digits DialedDigits Rule-switch CPL Script Actions LocationUnsupported CPL Elements ProxyCall Screening of Authenticated Users CPL ExamplesCall Screening Based on Alias VpengineeringCall Screening Based on Domain Change of Domain NameBlock Calls from Default Zone and Default Subzone Allow Calls from Locally Registered Endpoints OnlyRestricting Access to a Local Gateway RegularText goesExpressionhere Reference About Regular ExpressionsWill match against any sequence of characters For a detailed description of regular expression syntax seeDNSText goesConfiguhereation Overview Microsoft DNS ServerVerifying the SRV Record Bind 8LDAPText goesConfigurationhere About the Ldap Databases Downloading the H.350 schemasInstalling the H.350 Schemas Microsoft Active DirectoryAdding H.350 Objects Securing with TLS. Copy the OpenLDAP files to the OpenLDAP schema directory . Add the ldif file to the server using the commandOpenLDAP Add the H.350 ObjectsBibliography Reference Title LinkGlossary Term DefinitionIRQ LANLRQ NATSession Initiation Protocol Protocol used to monitor network devicesFirewall NAT traversal for SIP. Defined by RFC 3489 Reliable communication protocol defined by RFC 791187