Getting Started, System Configuration | TANDBERG D14049.01 specification

TANDBERG VIDEO COMMUNICATION SERVER

ADMINISTRATOR GUIDE

Disclaimer, Copyrights and License Agreements

8 Viewing System Overview

8

VIDEO COMMUNICATION SERVER

What’s in this

ADMINISTRATOR GUIDE?

Safety Instructions and Approvals	9
Environmental Issues	0
Introduction	2
About the TANDBERG Video Communication Server	................12
Main Product Features	12
Standard Features	12
Optional Features	12
About this Administrator Guide	12
Getting Started	3
What’s in the Box?	13
Connecting the Cables	13
Installation Site Preparations	13
General Installation Precautions	13
Powering on the VCS	14
Initial Configuration via Serial Cable	14
System Administrator Access	15
About Administrator Access	15
Configuring Administrator Access	15
Security Considerations	15
Administrator Account Password	15
Default Administrator Password	15
Changing the Administrator Password	15
Resetting the Administrator Password	15
Session Timeout	15
Root Account	15
Using the Web Interface	16
Supported Browsers	16
Using the Command Line Interface (CLI)	17

Viewing the Overview Page	18
Understanding the Overview Page	18
System Configuration	9
System Administration Configuration	19
Configuring System Settings	19
About the System Name	19
About Admin Access settings	19
Ethernet Configuration	20
Configuring Ethernet Settings	20
About Ethernet Speed	20
IP Configuration	21
Configuring IP Settings	21
About IPv4 to IPv6 Gatewaying	21
DNS Configuration	22
Configuring DNS Settings	22
About DNS Servers	22
About the DNS Domain Name	22
NTP Configuration	23
Configuring NTP Settings	23
About the NTP Server	23
Setting the Time Zone	23
SNMP Configuration	24
Configuring SNMP Settings	24
About SNMP Settings	24
External Manager Configuration	25
Configuring External Manager Settings	25
About the External Manager	25
Backing up Configuration Settings	26

Introduction

Getting

System

System

H.323 & SIP

Registration

Zones and

Call

Firewall

Bandwidth

Maintenance

Appendices

Started

Overview

Configuration

Configuration

Control

Neighbors

Processing

Traversal

Control

D 14049.01

07.2007

Image 2

TANDBERG D14049.01 manual Getting Started, System Configuration

Contents

Video Communication Server Administrator Guide System Configuration Getting Started Table of Contents Call Processing Administrator PolicyUsing TANDBERG’s FindMe User Policy Fallback Alias Enum Dialing Disconnecting callsCalls to and from Unregistered Endpoints Firewall Traversal Ldap Configuration 80 MaintenanceDNS Configuration 79 Regular Expression Reference 78 Trademarks and Copyright Copyright 2007, Tandberg Patent Information Disclaimer, Copyrights and License AgreementsDisclaimer Approvals Safety Instructions and ApprovalsSafety Instructions Environmental Issues Environmental Issues Optional Features Main Product FeaturesStandard Features Introduction Tandberg VCS Connecting the CablesGetting Started Powering on the VCS Initial Configuration via Serial Cable System Administrator Access Using the Web Interface Supported Browsers Using the Command Line Interface CLI Understanding the Overview ViewingText goesSystemhere OverviewViewing the Overview About Admin Access settings Systemtext ConfigurationConfiguring System Settings System Administration Configuration XConfiguration Ethernet Configuring Ethernet SettingsEthernet Configuration About Ethernet Speed XConfiguration IP XConfiguration IPProtocol Configuring IP SettingsIP Configuration About IPv4 to IPv6 Gatewaying XConfiguration IP DNS DNS ConfigurationConfiguring DNS Settings About DNS Servers NTP Configuration Configuring NTP SettingsSetting the Time Zone XConfiguration NTP Address XConfiguration TimeZone Name Snmp Configuration Configuring Snmp SettingsAbout Snmp Settings XConfiguration Snmp XConfiguration ExternalManager Configuring External Manager SettingsExternal Manager Configuration About the External Manager Backing up Configuration Settings Logging Logging Overview Event Log Format Viewing the Event LogEvent Log Message Details Field Events Logged at Level DNS Events Logged at Level 1 SIP Event Data FieldsTCP UDP TLS 225 245 Request/granted registration expiry duration For Register requests the AOR for the Register requestNumber of bytes sent/received in the message Limitations of standard syslog timestamps WorkingText goeswithhereH.323 Overview Endpoint Registration Configuring H.323 XConfiguration H323 WorkingText goeswithhereSIP SIP Overview Configuring SIP Registrations, Protocols and Ports XConfiguration SIP Configuring SIP Domains XCommand DomainAdd XConfiguration SIP Domains InterworkingesText here Configuring InterworkingXConfiguration Interworking Mode Overview Endpoint Registration MCU, Gateway and Content Server RegistrationRegistrationText goes hereControl Registration Overview Preventing automatic registrations Finding a VCS with which to Register323 H323 Gatekeeper AutoDiscovery Configuring Authentication About AuthenticationAuthentication XConfiguration Authentication Configuring the Ldap Server Directory Authentication using an Ldap ServerAlias Origin Setting Securing the Ldap Connection with TLS Configuring Ldap Server settings XConfiguration Ldap XConfiguration Authentication New Authentication using a Local DatabaseConfiguring the Local Database Create Credential Registering Aliases Attempts to Register using an Existing AliasAbout Alias Registration Alias Registration Patterns and Pattern Types XConfiguration Registration RestrictionPolicyAbout Allow and Deny Lists Allow and Deny Lists XCommand AllowListAdd XConfiguration Registration AllowList Managing Entries in the Allow List Add Deny List Pattern XCommand DenyListAdd XConfiguration Registration DenyListManaging Entries in the Deny List Registration Deny List Example Managing Zones, Neighbors and AlternatesAbout your Video Communications Network About the Local Zone and its Subzones Configuring the Local Zone and its SubzonesLocal Zone and Subzones Zones XConfiguration Zones Zone Adding Zones Configuring ZonesXCommand ZoneAdd Create Zone Match1 Match5 Configuring Zones All TypesHop count Configuring Neighbor Zones SIP port Protocol Configuring Traversal Client ZonesRetry interval SIP transport Configuring Traversal Server Zones DNS suffix Configuring Enum ZonesConfiguring DNS Zones Determines whether H.323 calls will be allowed to this zone Alternate 1 to Alternate 5 IP address About Alternates Configuring AlternatesXConfiguration Alternates Flat Dial Plan Setting up a Dial PlanAbout Dial Plans Structured Dial Plan Process CallText ProcessinggoeshereLocating a Destination Endpoint Dialing by Address Types About Hop Counts Configuring Hop CountsXConfiguration Zones Zone 1..200 HopCount Hop Counts Administrator Policy and Authentication Administrator PolicyAbout Administrator Policy Authentication Mode On Administrator Policy Mode Enabling the use of Administrator PolicyTo enable Administrator Policy Administrator Policy Mode to take effect Configuring Administrator Policy via the Web Interface About CPL XSD files Configuring Administrator Policy via a CPL scriptUploading a CPL Script Downloading policy files UserText goesPolicyhere About User Policy Enabling User Policy on the VCS Configuring User Policy ManagerXConfiguration Policy UserPolicy Username Creating a New User Account About User AccountsManaging FindMe User Accounts Changing a User Password Viewing Existing User Account Settings Tick the box next to the account you wish to delete Deleting a User AccountTo change delete a FindMe user account Click here to delete the selected accounts About your FindMe User Account Using TANDBERG’s FindMeFindMe User Accounts Accessing the FindMe Configuration About FindMe Configuring your FindMe User Account AliasText goSearchingshere and Transforming Configuring Local Alias Transforms XConfiguration Transform Zone Searching and Transforming Zone searching and alias transforming configuration Configuring Zone Searches and TransformsDefault Settings Never Query a Zone Combining Match Types and PrioritiesExamples Always Query a Zone, Never Apply Transforms User@example.com User@exampleusa.com Filter Queries to a Zone Without TransformingChanging the Prefix or Suffix Before Querying Query a Zone for Both Original and Transformed Alias Query a Zone for Two or More Transformed Aliases URITextDialinggoeshere URI Dialing Overview An AlwaysMatch, or Configuring Matches for DNS ZonesURI Dialing for Outgoing Calls Click Create Zone Adding and Configuring DNS ZonesXCommand ZoneAdd XConfiguration Zones Zone Assigns a name to this zone Configuring DNS Servers XConfiguration IP DNS Server URI Dialing for Incoming Calls URI Dialing and Firewall Traversal Example DNS Record ConfigurationRecommended Configuration Enum Dialing Overview ENUMText goesDialinghereAbout Enum Dialing Enum Process Prerequisites Enum Dialing for Outgoing Calls Mode of PatternMatch Pattern string Pattern type of Prefix Configuring Matches for Enum ZonesConfiguring Transforms for Enum Zones Configuring Enum Zones For Enum zones, this will be Enum Configuring DNS Servers Enum Dialing for Incoming Calls Configuring DNS Naptr RecordsAbout DNS Domains for Enum CallsText gtoesandherefrom Unregistered Endpoints ConfigurationRecommended Configuration for Firewall Traversal Calls to an Unregistered Endpoint Fallback Alias XConfiguration Call Services Fallback AliasFallbackText goesAliashere Example Use of a Fallback Alias DisconnectingText goes herecalls Identifying a Particular Call Issues when Disconnecting SIP Calls Disconnecting a Call via the Web InterfaceDisconnecting a Call via the CLI Disconnect About Firewall Traversal VCS as a Firewall Traversal Client Firewall TraversalFirewall Traversal Overview VCS as a Firewall Traversal Server Firewall Traversal Protocols and Ports 323 Ports for Connections out to the Public InternetStun Ports Firewall Traversal and Authentication VCS From the Type drop-down menu, select Configuring the VCS as a Traversal ClientAdding a New Traversal Client Zone TraversalClient Create Zone Configuring a Traversal Client Zone Alternate 1 Alternate 5 Address TraversalServer Create Zone Configuring the VCS as a Traversal ServerAdding a New Traversal Server Zone TCP retry count Interval Configuring a Traversal Server ZoneDemux mode Configuring Traversal for Endpoints XConfiguration Zones LocalZone Traversal H323 323 H.460.18 call signaling port Configuring Traversal Server PortsAssent call signaling port Media demultiplexing RTP port Stun Binding Discovery Stun ServicesAbout Stun Stun Relay Configuring Stun Services XConfiguration Traversal Server Example Network Deployment Bandwidthth ControllAbout Bandwidth Control Subzones Creating a Subzone XCommand SubZoneAddBandwidthControl XConfiguration Zones LocalZone SubZone Configuring a SubzoneTo configure a subzone Subnet 2 How Different Bandwidth Limitations are Managed Applying Bandwidth Limitations to SubzonesTypes of Limitations Per call inter Limits the bandwidth of any individual call Creating a new pipe XCommand PipeAddAbout Pipes Creating Pipes Editing Pipes XConfiguration Bandwidth PipeEditing an Existing Pipe About Links Creating Links Default LinksXCommand LinkAdd Creating a New Link Editing Links XConfiguration Bandwidth LinkEditing Links Applying Pipes to Links Default LinksBandwidth Control About Downspeeding About the Default Call BandwidthConfiguring the Default Call Bandwidth and Downspeeding Bandwidth Control Examples Example Without a Firewall Example With a Firewall VCS Border Controller Subzone ConfigurationEnterprise VCS Subzone Configuration Upgrading Using SCP/PSCP MaintenanceText goes hereBacking up the Existing Configuration Before Upgrading Upgrading Software Upgrading via the Web Interface Upgrading About Adding Extra Options XConfiguration Option 1..64 Key S 0Option Keys Adding Options via the CLI Add Option Click Add Option Adding Options via the Web InterfaceAdd option key Security About SecurityEnabling Security About the System Snapshot PasswordsSystem Snapshot Creating a System Snapshot About Restarting XCommand BootRestarting About Shutting Down Https CommandText goes hereReference xConfigurationHttp SSH Request Total Mode On/OffAliasOrigin LDAP/Endpoint/Combined Off the call will be rejected One call Far end were registered directly to the local system Fallback Alias S 0 Port H323 Gatekeeper CallSignalingTCP NTP Option Key S 0 Off the VCS will not act as a SIP registrar Tration will not be permittedOn the VCS will act as a DIP registrar 137 Snmp CommunityName S 0 Stun RtcpRTP Traversal Server For any one call to or from an endpoint in the DefaultBetween two endpoints within the Default Subzone For any one call between two endpoints within Intra Mode None/Limited/Unlimited To or from an endpoint in this subzone Name S 1 Assigns a name to this subzone Subnet Address S 0 LimitSets the total bandwidth limit in kbps of this subzone RetryCount Zones LocalZone Traversal H323 ContOrder to keep the firewall’s NAT bindings open VCS will attempt to send a TCP probe to the VCS Enum 145 TLS TLS will be used Transport TCP/TLSTCP TCP will be used Off Each call will use a separate pair of ports for Plexing mode for calls from the traversal clientZones TraversalClient Zones TraversalServer TCPProbe KeepAliveInterval Cont List, the registration will be permitted CommandText goes hereReference xCommandXCommand Description Parameters PatternType Exact/Prefix/Suffix/Regex List, the registration will not be permitted XCommandDescription Parameters Status/NTP Event/AuthenticationFailureStatus/Ethernet Status/LDAP Pipe2 S 1 LinkAdd LinkDelete Locate OptionKeyAdd OptionKeyDeletePipe1 S 1 153 PerCallInter SubZoneAdd SubZoneDeletePerCallInterMode None/Limited/Unlimited To Limited TransformAdd TransformDelete ZoneAdd ZoneDelete Each transform ZoneList CommandText goes hereReference xStatus Option Key S 1 Description S 1 Server Address IPv4Addr/IPv6Addr Domain S 0 NTP External Manager Status On/Off URL S 1,255 Expression S 1,127 0..15 entries 160 161 Contact S 1,255 Path URI 1..10 S 1,255 Zones 163 164 165 166 167 Status Active/Inactive/Failed Address IPv4Addr IPv6 IPv4Status Active/Inactive/Failed Address IPv4Addr Status Active/Inactive/Failed Address IPv6Addr 169 Address Address-switch nodeCPLText Referencgoeshere Otherwise node Field Authentication Mode OnSetup Url-ID 323 ID H323-ID Dialled Digits DialedDigits SubfieldURI Unsupported CPL Elements Rule-switchCPL Script Actions Location Proxy Call Screening Based on Alias Call Screening of Authenticated UsersCPL Examples Vpengineering Call Screening Based on Domain Change of Domain Name Block Calls from Default Zone and Default Subzone Allow Calls from Locally Registered Endpoints Only Restricting Access to a Local Gateway Will match against any sequence of characters RegularText goesExpressionhere ReferenceAbout Regular Expressions For a detailed description of regular expression syntax see Verifying the SRV Record DNSText goesConfiguhereationOverview Microsoft DNS Server Bind 8 LDAPText goesConfigurationhere About the Ldap Databases Downloading the H.350 schemas Adding H.350 Objects Installing the H.350 SchemasMicrosoft Active Directory Securing with TLS OpenLDAP . Copy the OpenLDAP files to the OpenLDAP schema directory. Add the ldif file to the server using the command Add the H.350 Objects Bibliography Reference Title Link Glossary Term Definition LRQ IRQLAN NAT Firewall NAT traversal for SIP. Defined by RFC 3489 Session Initiation ProtocolProtocol used to monitor network devices Reliable communication protocol defined by RFC 791 187