Manuals / TANDBERG / Photography / Security Camera

TANDBERG D14049.01 manual Trademarks and Copyright, Copyright 2007, Tandberg

Models: D14049.01

1 187

Download 187 pages 62.39 Kb

Page 7

Image 7

TANDBERG VIDEO COMMUNICATION SERVER

ADMINISTRATOR GUIDE

Trademarks and Copyright

All rights reserved. This document contains information that is proprietary to TANDBERG. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form, or by any means, electronically, mechanically, by photocopying, or otherwise, without the prior written permission of TANDBERG. Nationally and internationally recognized trademarks and trade names are the property of their respective holders and are hereby acknowledged.

COPYRIGHT © 2007, TANDBERG

Philip Pedersens vei 22 1366 Lysaker, Norway

Tel:	+47	67 125 125
Fax:	+47	67 125 234

e-mail: tandberg@tandberg.com

Introduction

Getting

System

H.323 &

SIP

Registration

Zones and

Call

Firewall

Bandwidth

Maintenance

Appendices

Started

Overview

Configuration

Control

Neighbors

Processing

Traversal

Control

D 14049.01

07.2007

Page 7

Image 7

TANDBERG D14049.01 manual Trademarks and Copyright, Copyright 2007, Tandberg

Contents

Video Communication Server Administrator Guide Getting Started System ConfigurationTable of Contents User Policy Administrator PolicyUsing TANDBERG’s FindMe Call ProcessingFirewall Traversal Enum Dialing Disconnecting callsCalls to and from Unregistered Endpoints Fallback AliasRegular Expression Reference 78 MaintenanceDNS Configuration 79 Ldap Configuration 80Copyright 2007, Tandberg Trademarks and CopyrightDisclaimer Disclaimer, Copyrights and License AgreementsPatent Information Safety Instructions Safety Instructions and ApprovalsApprovals Environmental Issues Environmental Issues Introduction Main Product FeaturesStandard Features Optional FeaturesGetting Started Connecting the CablesTandberg VCS Initial Configuration via Serial Cable Powering on the VCSSystem Administrator Access Supported Browsers Using the Web InterfaceUsing the Command Line Interface CLI Viewing the Overview ViewingText goesSystemhere OverviewUnderstanding the Overview System Administration Configuration Systemtext ConfigurationConfiguring System Settings About Admin Access settingsAbout Ethernet Speed Configuring Ethernet SettingsEthernet Configuration XConfiguration EthernetAbout IPv4 to IPv6 Gatewaying Configuring IP SettingsIP Configuration XConfiguration IP XConfiguration IPProtocolAbout DNS Servers DNS ConfigurationConfiguring DNS Settings XConfiguration IP DNSXConfiguration NTP Address XConfiguration TimeZone Name Configuring NTP SettingsSetting the Time Zone NTP ConfigurationXConfiguration Snmp Configuring Snmp SettingsAbout Snmp Settings Snmp ConfigurationAbout the External Manager Configuring External Manager SettingsExternal Manager Configuration XConfiguration ExternalManagerBacking up Configuration Settings Logging Overview LoggingMessage Details Field Viewing the Event LogEvent Log Event Log FormatDNS Events Logged at LevelEvents Logged at Level 1 225 245 Event Data FieldsTCP UDP TLS SIPLimitations of standard syslog timestamps For Register requests the AOR for the Register requestNumber of bytes sent/received in the message Request/granted registration expiry durationOverview Endpoint Registration WorkingText goeswithhereH.323XConfiguration H323 Configuring H.323SIP Overview WorkingText goeswithhereSIPXConfiguration SIP Configuring SIP Registrations, Protocols and PortsXCommand DomainAdd XConfiguration SIP Domains Configuring SIP DomainsOverview Configuring InterworkingXConfiguration Interworking Mode InterworkingesText hereRegistration Overview MCU, Gateway and Content Server RegistrationRegistrationText goes hereControl Endpoint RegistrationH323 Gatekeeper AutoDiscovery Finding a VCS with which to Register323 Preventing automatic registrationsXConfiguration Authentication About AuthenticationAuthentication Configuring AuthenticationSecuring the Ldap Connection with TLS Authentication using an Ldap ServerAlias Origin Setting Configuring the Ldap Server DirectoryXConfiguration Ldap XConfiguration Authentication Configuring Ldap Server settingsCreate Credential Authentication using a Local DatabaseConfiguring the Local Database NewAlias Registration Attempts to Register using an Existing AliasAbout Alias Registration Registering AliasesAllow and Deny Lists XConfiguration Registration RestrictionPolicyAbout Allow and Deny Lists Patterns and Pattern TypesManaging Entries in the Allow List XCommand AllowListAdd XConfiguration Registration AllowListRegistration Deny List XCommand DenyListAdd XConfiguration Registration DenyListManaging Entries in the Deny List Add Deny List PatternAbout your Video Communications Network Managing Zones, Neighbors and AlternatesExample Local Zone and Subzones Configuring the Local Zone and its SubzonesAbout the Local Zone and its Subzones Zones Create Zone Adding Zones Configuring ZonesXCommand ZoneAdd XConfiguration Zones ZoneHop count Configuring Zones All TypesMatch1 Match5 SIP port Configuring Neighbor ZonesSIP transport Configuring Traversal Client ZonesRetry interval ProtocolConfiguring Traversal Server Zones Determines whether H.323 calls will be allowed to this zone Configuring Enum ZonesConfiguring DNS Zones DNS suffixXConfiguration Alternates About Alternates Configuring AlternatesAlternate 1 to Alternate 5 IP address Structured Dial Plan Setting up a Dial PlanAbout Dial Plans Flat Dial PlanLocating a Destination Endpoint CallText ProcessinggoeshereProcess Dialing by Address Types Hop Counts Configuring Hop CountsXConfiguration Zones Zone 1..200 HopCount About Hop CountsAuthentication Mode On Administrator PolicyAbout Administrator Policy Administrator Policy and AuthenticationAdministrator Policy Mode to take effect Enabling the use of Administrator PolicyTo enable Administrator Policy Administrator Policy ModeConfiguring Administrator Policy via the Web Interface Downloading policy files Configuring Administrator Policy via a CPL scriptUploading a CPL Script About CPL XSD filesAbout User Policy UserText goesPolicyhereUsername Configuring User Policy ManagerXConfiguration Policy UserPolicy Enabling User Policy on the VCSManaging FindMe User Accounts About User AccountsCreating a New User Account Viewing Existing User Account Settings Changing a User PasswordClick here to delete the selected accounts Deleting a User AccountTo change delete a FindMe user account Tick the box next to the account you wish to deleteAbout FindMe Using TANDBERG’s FindMeFindMe User Accounts Accessing the FindMe Configuration About your FindMe User AccountConfiguring your FindMe User Account AliasText goSearchingshere and Transforming XConfiguration Transform Configuring Local Alias TransformsZone Searching and Transforming Default Settings Configuring Zone Searches and TransformsZone searching and alias transforming configuration Always Query a Zone, Never Apply Transforms Combining Match Types and PrioritiesExamples Never Query a ZoneChanging the Prefix or Suffix Before Querying Filter Queries to a Zone Without TransformingUser@example.com User@exampleusa.com Query a Zone for Two or More Transformed Aliases Query a Zone for Both Original and Transformed AliasURI Dialing Overview URITextDialinggoeshereURI Dialing for Outgoing Calls Configuring Matches for DNS ZonesAn AlwaysMatch, or Assigns a name to this zone Adding and Configuring DNS ZonesXCommand ZoneAdd XConfiguration Zones Zone Click Create ZoneXConfiguration IP DNS Server Configuring DNS ServersURI Dialing for Incoming Calls Recommended Configuration Example DNS Record ConfigurationURI Dialing and Firewall Traversal Enum Process ENUMText goesDialinghereAbout Enum Dialing Enum Dialing OverviewEnum Dialing for Outgoing Calls PrerequisitesConfiguring Transforms for Enum Zones Configuring Matches for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix For Enum zones, this will be Enum Configuring Enum ZonesConfiguring DNS Servers About DNS Domains for Enum Configuring DNS Naptr RecordsEnum Dialing for Incoming Calls Calls to an Unregistered Endpoint ConfigurationRecommended Configuration for Firewall Traversal CallsText gtoesandherefrom Unregistered EndpointsExample Use of a Fallback Alias XConfiguration Call Services Fallback AliasFallbackText goesAliashere Fallback AliasIdentifying a Particular Call DisconnectingText goes herecallsDisconnect Disconnecting a Call via the Web InterfaceDisconnecting a Call via the CLI Issues when Disconnecting SIP CallsVCS as a Firewall Traversal Server Firewall TraversalFirewall Traversal Overview About Firewall Traversal VCS as a Firewall Traversal ClientFirewall Traversal Protocols and Ports Stun Ports Ports for Connections out to the Public Internet323 VCS Firewall Traversal and AuthenticationTraversalClient Create Zone Configuring the VCS as a Traversal ClientAdding a New Traversal Client Zone From the Type drop-down menu, selectAlternate 1 Alternate 5 Address Configuring a Traversal Client ZoneAdding a New Traversal Server Zone Configuring the VCS as a Traversal ServerTraversalServer Create Zone Demux mode Configuring a Traversal Server ZoneTCP retry count Interval XConfiguration Zones LocalZone Traversal H323 Configuring Traversal for EndpointsMedia demultiplexing RTP port Configuring Traversal Server PortsAssent call signaling port 323 H.460.18 call signaling portStun Relay Stun ServicesAbout Stun Stun Binding DiscoveryXConfiguration Traversal Server Configuring Stun ServicesAbout Bandwidth Control Bandwidthth ControllExample Network Deployment Subzones BandwidthControl XCommand SubZoneAddCreating a Subzone Subnet 2 Configuring a SubzoneTo configure a subzone XConfiguration Zones LocalZone SubZonePer call inter Limits the bandwidth of any individual call Applying Bandwidth Limitations to SubzonesTypes of Limitations How Different Bandwidth Limitations are ManagedCreating Pipes XCommand PipeAddAbout Pipes Creating a new pipeEditing an Existing Pipe XConfiguration Bandwidth PipeEditing Pipes Creating a New Link Default LinksXCommand LinkAdd About Links Creating LinksEditing Links XConfiguration Bandwidth LinkEditing Links Bandwidth Control Default LinksApplying Pipes to Links Configuring the Default Call Bandwidth and Downspeeding About the Default Call BandwidthAbout Downspeeding Example Without a Firewall Bandwidth Control ExamplesEnterprise VCS Subzone Configuration VCS Border Controller Subzone ConfigurationExample With a Firewall Upgrading Software MaintenanceText goes hereBacking up the Existing Configuration Before Upgrading Upgrading Using SCP/PSCPUpgrading Upgrading via the Web InterfaceAdding Options via the CLI XConfiguration Option 1..64 Key S 0Option Keys About Adding Extra OptionsAdd option key Adding Options via the Web InterfaceAdd Option Click Add Option Enabling Security About SecuritySecurity Creating a System Snapshot PasswordsSystem Snapshot About the System SnapshotAbout Shutting Down XCommand BootRestarting About RestartingSSH CommandText goes hereReference xConfigurationHttp HttpsOff the call will be rejected Total Mode On/OffAliasOrigin LDAP/Endpoint/Combined RequestOne call Fallback Alias S 0 Far end were registered directly to the local systemTCP H323 Gatekeeper CallSignalingPort NTP Option Key S 0 On the VCS will act as a DIP registrar Tration will not be permittedOff the VCS will not act as a SIP registrar 137 CommunityName S 0 SnmpRTP RtcpStun For any one call between two endpoints within For any one call to or from an endpoint in the DefaultBetween two endpoints within the Default Subzone Traversal ServerTo or from an endpoint in this subzone Intra Mode None/Limited/UnlimitedSets the total bandwidth limit in kbps of this subzone LimitName S 1 Assigns a name to this subzone Subnet Address S 0 VCS will attempt to send a TCP probe to the VCS Zones LocalZone Traversal H323 ContOrder to keep the firewall’s NAT bindings open RetryCountEnum 145 TCP TCP will be used Transport TCP/TLSTLS TLS will be used Zones TraversalClient Plexing mode for calls from the traversal clientOff Each call will use a separate pair of ports for Zones TraversalServer TCPProbe KeepAliveInterval Cont PatternType Exact/Prefix/Suffix/Regex CommandText goes hereReference xCommandXCommand Description Parameters List, the registration will be permittedDescription Parameters XCommandList, the registration will not be permitted Status/LDAP Event/AuthenticationFailureStatus/Ethernet Status/NTPPipe1 S 1 LinkAdd LinkDelete Locate OptionKeyAdd OptionKeyDeletePipe2 S 1 153 To Limited SubZoneAdd SubZoneDeletePerCallInterMode None/Limited/Unlimited PerCallInterEach transform TransformAdd TransformDelete ZoneAdd ZoneDeleteZoneList Option Key S 1 Description S 1 CommandText goes hereReference xStatusNTP Server Address IPv4Addr/IPv6Addr Domain S 0Status On/Off URL S 1,255 Expression S 1,127 0..15 entries External Manager160 161 Zones Contact S 1,255 Path URI 1..10 S 1,255163 164 165 166 167 Status Active/Inactive/Failed Address IPv6Addr IPv4Status Active/Inactive/Failed Address IPv4Addr Status Active/Inactive/Failed Address IPv4Addr IPv6169 Otherwise node Address-switch nodeCPLText Referencgoeshere AddressSetup Authentication Mode OnField URI SubfieldUrl-ID 323 ID H323-ID Dialled Digits DialedDigits Proxy Rule-switchCPL Script Actions Location Unsupported CPL ElementsVpengineering Call Screening of Authenticated UsersCPL Examples Call Screening Based on AliasChange of Domain Name Call Screening Based on DomainAllow Calls from Locally Registered Endpoints Only Block Calls from Default Zone and Default SubzoneRestricting Access to a Local Gateway For a detailed description of regular expression syntax see RegularText goesExpressionhere ReferenceAbout Regular Expressions Will match against any sequence of charactersBind 8 DNSText goesConfiguhereationOverview Microsoft DNS Server Verifying the SRV RecordAbout the Ldap Databases Downloading the H.350 schemas LDAPText goesConfigurationhereSecuring with TLS Installing the H.350 SchemasMicrosoft Active Directory Adding H.350 ObjectsAdd the H.350 Objects . Copy the OpenLDAP files to the OpenLDAP schema directory. Add the ldif file to the server using the command OpenLDAPReference Title Link BibliographyTerm Definition GlossaryNAT IRQLAN LRQReliable communication protocol defined by RFC 791 Session Initiation ProtocolProtocol used to monitor network devices Firewall NAT traversal for SIP. Defined by RFC 3489187