VCS Base Applications, VCS Control | TANDBERG D14049.04 manual

Grey Headline (continued)

The TANDBERG VCS

TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE

VCS Base Applications

VCS Control

The VCS Control provides internal video control and administration for all SIP and H.323 devices. It is normally deployed within your wide area network with endpoints that are behind the same firewalls or NAT devices.

The VCS Control replaces the need to have separate H.323 gatekeeper, SIP registrar and H.323 - SIP gateway servers.

VCS Expressway™

The VCS Expressway provides standards-based firewall traversal for SIP and H.323 devices allowing secure firewall traversal of any firewall or NAT device. As well as all the functionality of a VCS Control, it also provides registration of traversal-enabled devices and STUN Discovery and STUN Relay services.

The VCS Expressway is normally deployed outside of your firewall or within the DMZ.

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Applications

Maintenance

Appendices

Status

Configuration

Configuration

Neighbors

Processing

Control

Traversal

D14049.04

15

JULY 2008

Image 15

TANDBERG D14049.04 manual VCS Base Applications, VCS Control, VCS Expressway

Contents

Guide Getting Started What’s in this Manual?Preamble Introduction DNS Overview and Status NTP VCS Configuration Call Processing Zones and Neighbors Bandwidth Control 151 Applications Maintenance Appendices Copyright 2008, Tandberg Legal Notices Safety Instructions and Approvals Safety InstructionsApprovals Environmental Issues TANDBERG’s Environmental PolicyWaste Handling Digital User Guides Environmental Issues Tandberg VCS Overview VCS and the Tandberg Total Solution VCS Base Applications VCS ControlVCS Expressway Standard Features Optional Features Dual Network InterfacesUser Policy FindMe What’s New in this Version? Typographical conventions Administrator GuideUsing this Administrator Guide Command Line Interface Getting Started Connecting the Cables InstallationInstallation Site Preparations General Installation Precautions Powering on the VCS Initial Configuration via Serial Cable Initial Configuration Initial Configuration via Front Panel UP keyDown key Overview System Administrator Access Supported Browsers Using the Web InterfaceSelect Administrator Login Web Interface General page features How Command are Shown in this Guide Command Line Interface Supported CharactersUsing the Command Line Interface CLI Types of Commands Overview and Status Viewing the Overview Understanding the Overview Overview System Information Ethernet Status System Ethernet MAC addressSpeed Viewing the IP Status Understanding the IP Status IP Status Resource Usage Viewing the Resource Usage Understanding the Resource UsageStatus System Resource Usage Traversal calls Viewing the Registrations Understanding the Registrations Registrations End Time Registration HistoryReason Duration Presence Viewing the Presence Status PagesPublishers Presentities Subscribers Viewing the Calls Understanding the Calls Calls Call History Viewing the Call History Understanding the Call HistoryStatus Call History Filter Status Search History Search HistoryViewing the Search History Understanding the Search History About Searches Viewing the Local Zone Understanding the Local Zone Local Zone Zones Viewing the Zones Understanding the ZonesStatus Zones Links Viewing the Links Understanding the LinksStatus Links Status Pipes PipesViewing the Pipes Understanding the Pipes Viewing the Stun Relays Understanding the Stun Relays Stun Relays Applications Viewing the Applications Understanding the ApplicationsStatus Applications Status Warnings Viewing the Warnings Understanding the Warnings Event Log Levels Event LogViewing the Event Log Understanding the Event Log Event Log Color Coding Event Log Format Interpreting the Event Log Event Message Details Field Events and Levels Registration Accepted Message ReceivedMessage Rejected Message Sent User session Login failure System Backup errorSystem Restore error TLS Negotiation Error Types of Configuration Events Configuration LogViewing the Configuration Log Understanding the Configuration Log System Configuration About the System Name System AdministrationOverview Configuration About Administrator Access settings Ethernet speed System Configuration EthernetXConfiguration Ethernet About Ethernet Speed About IPv4 to IPv6 Gatewaying Overview IP ConfigurationXConfiguration IP XConfiguration IPProtocol XConfiguration IP Route XCommand RouteAdd IPv4 subnet mask Overview LAN ConfigurationAbout LAN Configuration About Dual Network Interfaces XConfiguration IP DNS About DNS ServersAbout the DNS Domain Name About the Time Zone System Configuration NTPXConfiguration NTP Address XConfiguration TimeZone Name About the NTP Server About Snmp XConfiguration Snmp Address XConfiguration ExternalManagerExternal Manager About the External Manager Remote Logging LoggingAbout Logging About Remote Logging About Event Log Levels Setting the Event Log LevelXConfiguration Log Level Log Levels VCS Configuration Overview Endpoint Registration 323 XConfiguration H323 Configuring H.323 SIP Registration Expiry Using the VCS as a SIP RegistrarSIP Overview About SIP on the VCS Using the VCS as a SIP Proxy Server Using the VCS as a SIP Presence ServerSIP protocols and ports XConfiguration SIP Configuring SIP Registrations, Protocols and Ports View/Edit Configuring SIP DomainsVCS Configuration Protocols SIP Domains Cancel Interworking Configuring InterworkingXConfiguration Interworking Mode Save SIP interworking mode Endpoint Registration MCU, Gateway and Content Server RegistrationRegistration Control Registration Overview H323 Gatekeeper AutoDiscovery Finding a VCS with which to Register323 Preventing automatic registrations Authentication for Local Registrations AuthenticationAuthentication Mode Configuring Authentication About External Registration Credentials Configuring External Registration Credentials Authentication Databases Alias Origin SettingAuthentication using an Ldap Server XConfiguration Ldap XConfiguration Authentication Ldap Configuring Ldap Server settings Configuring the Local Database Authentication using a Local Database Alias Registration Attempts to Register using an Existing AliasRegistering Aliases About Alias Registration Removing existing registrations Allow and Deny ListsAbout Allow and Deny Lists Activating use of Allow or Deny Lists Managing Entries in the Allow List XCommand AllowListAdd XConfigurationAllowList Registration Add Deny List Pattern VCS Configuration Registration Deny ListXCommand DenyListAdd XConfigurationDenyList Registration Managing Entries in the Deny List Zones and Neighbors Example Network Diagram IntroductionAbout your Video Communications Network Local Zone Matches Overview Configuring the Local Zone and its SubzonesLocal Zone and Subzones Bandwidth Management What are traversal calls? Configuring the Traversal Subzone PortsVCS Configuration Local Zone Traversal Subzone Traversal Subzone Neighbor Zone About Zones Traversal Client Zone Traversal Server Zone XCommand DefaultLinksAdd Enum Zone DNS Zone Default Zone XConfiguration Zones Zone Adding Zones Configuring ZonesVCS Configuration Zones XCommand ZoneAdd Configuring Zones All Types Hop countMatch1 Match5 Configuring Neighbor Zones Configuring Traversal Client Zones Authentication usernameRetry interval Configuring Traversal Server Zones DNS suffix Configuring Enum Zones Configuring DNS Zones Clustering, Peers and Alternates About ClusteringCluster Subzone System Name Administration Accounts IP configurationDNS Configuration Prerequisites Upgrading to Backup and RestoreRegistrations SIP Registrations Enabling the Replication of FindMe Information ConfigurationClustering and FindMe Viewing Peers Clustering and Presence 100 Neighboring the Local VCS to a ClusterPeer 1...Peer 6 address Dial Plans 101 Call Processing 102 Call Processing Diagram 103Search Process Dialing by Enum 104Dialing by Address Types Dialing by IP Address Dialing by H.323 or SIP URI Hop Counts About Hop Counts Configuring Hop CountsXConfiguration Zones Zone 1..200 HopCount 105 Pre-Search Transforms 106Searches and Transforms Overview of Searches and Transforms Configuring Pre-Search Transforms XConfiguration Transform107 Zone Searching and Transforming 108 Local Zone Configuring Zone Searches and TransformsDefault Settings 109 Never Query a Zone 110Examples Combining Match Types and Priorities Filter Queries to a Zone Without Transforming 111 Query a Zone for Original and Transformed Alias 112 Query a Zone for Two or More Transformed Aliases 113 114 About Call Policy Administrator Policy and AuthenticationAuthentication Mode On Authentication Mode Off Administrator Policy Mode Administrator PolicyEnabling the use of Administrator Policy VCS Configuration Call Policy 116 Configuring Administrator Policy via the Web Interface 117 Uploading a CPL ScriptAbout CPL XSD files 118 URI DialingH323 Process Configuring Matches for DNS Zones119 URI Dialing for Outgoing Calls Advanced Adding and Configuring DNS ZonesXCommand ZoneAdd XConfiguration Zones Zone 120 Configuring DNS Servers XConfiguration IP DNS Server121 URI Dialing for Incoming Calls 122 URI Dialing and Firewall Traversal Example DNS Record ConfigurationRecommended Configuration 123 124 Enum DialingOverview Process Enabling Enum Dialing 7.6.5.4.3.2.1.4.4 125Enum Dialing for Outgoing Calls Example 126 Configuring Matches for Enum ZonesConfiguring Transforms for Enum Zones Mode of PatternMatch Pattern string Pattern type of Prefix Configuring Enum Zones 127Click Create Zone 128 About DNS Domains for Enum Configuring DNS Naptr Records129 Enum Dialing for Incoming Calls Unregistered Endpoints Recommended Configuration for Firewall TraversalXConfiguration Call Services 130 Fallback Alias Overview Configuration Example UsageXConfiguration Call Services Fallback Alias 131 132 Call IDs, Serial Numbers and TagsIdentifying a Particular Call 133 Disconnecting CallsDisconnecting a Call via the Web Interface Issues when Disconnecting SIP Calls Bandwidth Control 134 135 Bandwidth Control OverviewBandwidth Control on the VCS Example Network Deployment Specifying the Subzone IP Addresses Subzone Links About the Default Subzone136 Subzones XCommand SubZoneAdd 137Creating a Subzone Configuring a Subzone XConfiguration Zones LocalZone SubZone138 How Different Bandwidth Limitations are Managed 139Applying Bandwidth Limitations to Subzones Types of Limitations About Links Creating Links Default LinksXCommand LinkAdd 140 XConfiguration Bandwidth Link 141Editing Links 142 Default LinksAbout Default Links Pre-Configured Links XCommand PipeAdd 143About Pipes Creating Pipes Editing an Existing Pipe XConfiguration Bandwidth Pipe144 Editing Pipes One Pipe, Two or More Links 145Applying Pipes to Links One Pipe, One Link 146 Default Bandwidth and DownspeedingAbout the Default Call Bandwidth Configuring Default Call Bandwidth and Downspeeding 147 Bandwidth Control ExamplesExample Without a Firewall Example With a Firewall VCS Expressway Subzone ConfigurationVCS Control Subzone Configuration 148 Firewall Traversal 149 How does it work? 150Firewall Traversal Overview About Expressway VCS as a Firewall Traversal Client Quick Guide to VCS Traversal Client Server Configuration 151VCS Expressway Server SIP Firewall Traversal Protocols 152Firewall Traversal Protocols and Ports Overview Expressway Process Firewall Traversal Protocols SIP Ports Call signaling153 Media 154 Firewall Traversal and AuthenticationAuthentication and NTP Configuration Zones Edit Zone, in the Configuration section 155 Other Issues TraversalClient Create Zone Configuring the VCS as a Traversal Client156 Adding a New Traversal Client Zone 157 Configuring a Traversal Client Zone TraversalServer Create Zone Configuring the VCS as a Traversal Server158 Adding a New Traversal Server Zone 159 Configuring a Traversal Server ZoneClient authentication username Demux mode Configuring Traversal for Endpoints XConfiguration Zones LocalZone Traversal H323160 161 Configuring Traversal Server Ports 162 Stun Services 163 Configuring Stun Services 164 FindMe User Policy 165 Enabling FindMe on the VCS Configuring User Policy ManagerXConfiguration Policy UserPolicy 166 167 Managing FindMe User AccountsAbout User Accounts Creating a New User Account Changing a User Password Viewing Existing User Account Settings168 169 Deleting a User AccountAre you sure...? About your FindMe User Account Using TANDBERG’s FindMeAccessing the FindMe Configuration 170 171 Configuring your FindMe User Account Overview Presence Server 172 Registration refresh period 173Presence User Agent PUA Aggregation of Presence Information 174 Enabling and Disabling Presence ServicesEnabled Disabled Presentities 175Viewing Presence Status Publishers 176 Maintenance Upgrading Software Overview Upgrading Using SCP/PSCPInstalling and Restarting 177 Upgrading via the Web Interface 178 Restart system Software upgrade in progressSoftware successfully upgraded 179 Downgrade Procedure Impact on features introduced 180Downgrading Software Overview Adding Options via the CLI XConfiguration Option 1..64 Key181 Option Keys Add option key Maintenance Option Keys182 Adding Options via the Web Interface 183 SecurityOverview Enabling Security Administration Accounts Adding an Administration Account184 Editing an Administration Account Account Disabled This account can not be used185 Limitations Backup and RestoreOverview Creating a Backup of your VCS Configuration 186 187 Restoring a Previous Backup Overview Creating a System Snapshot Error Reports188 System Snapshot Restarting Maintenance RestartXCommand Boot 189 Overview Shutting Down Maintenance Shutdown190 Shutting Down 191 Restoring Default ConfigurationOverview DefaultValuesSet Level XCommand DefaultValuesSet Level 3 must be 192 Password EncryptionOverview Maximum length of Passwords Command Line Interface Appendices 193 Overview of CPL on the VCS Address-switch194 CPL Reference Field 195 196 SubfieldOtherwise Not-present Reject Rule-switch197 Location Call Screening Based on Alias Call Screening of Authenticated Users198 CPL Examples Dont accept calls from this source 199Call Screening Based on Domain Change of Domain Name Allow Calls from Locally Registered Endpoints Only Block Calls from Default Zone and Default SubzoneAddress Address is=DefaultSubZone 200 201 Restricting Access to a Local GatewayUsing the address-switch node Using the rule-switch node Matches 0 or more repetitions of the previous match 202Regular Expression Reference Overview Common Regular Expressions Pattern Variable Reference 203 VCS Ports VCS Configuration Protocols H.323204 VCS Port Reference XConfiguration H323 Gatekeeper CallSignaling PortRange End XConfiguration Traversal Server Stun Relay PortXConfiguration SIP TCP Port XConfiguration SIP TLS Port 206 XConfiguration SIP TCP Outbound Port StartXConfiguration SIP TCP Outbound Port End XConfiguration Traversal Media Port Start Verifying the SRV Record DNS Configuration207 Overview Microsoft DNS Server About the Ldap Databases Ldap ConfigurationDownloading the Ldap schemas 208 Create the Organizational Hierarchy 209Adding H.350 Objects Securing with TLS Include /etc/openldap/schemas/sipidentity.ldif 210OpenLDAP 211 # MeetingRoom1 endpointSlapadd -l ldif file 212 Command Reference xConfiguration 213 214 Example Configuration Applications Presence Server Mode On 215 216 Example xConfiguration Bandwidth Downspeed PerCall Mode OnExample xConfiguration Bandwidth Downspeed Total Mode On Example xConfiguration Bandwidth Link 1 Node1 Name HQ Example xConfiguration Bandwidth Pipe 1 Name 512Kb Asdl Example xConfiguration Error Reports Mode Off217 Example xConfiguration ExternalManager Address Example xConfiguration Ethernet 1 IP V4 AddressExample xConfiguration Ethernet 1 IP V4 SubnetMask Example xConfiguration Ethernet 1 Speed Auto Example xConfiguration H323 Gatekeeper CallTimeToLive Example xConfiguration H323 Gatekeeper TimeToLive219 220 221 222 223 Example xConfiguration Policy UserPolicy Mode Local Example xConfiguration Registration RestrictionPolicy None Example Configuration SIP Loop Detect Mode On224 225 226 Example xConfiguration Transform 1 Pattern Behavior Replace Example xConfiguration SystemUnit Name Oslo HQ VCSExample xConfiguration SystemUnit Password password123 Example xConfiguration TimeZone Name GMT 228 Example Traversal Server Stun Relay Port Example xConfiguration Traversal Server Stun Discovery PortExample xConfiguration Traversal Server Stun Relay Mode On 229 230 231 Example xConfiguration Zones LocalZone Match 1..5 Priority 232 233 234 235 Example xConfiguration Zones Zone 1 H323 Mode On 236 Example xConfiguration Zones Zone 1 HopCount 237 Example xConfiguration Zones Zone 1 Match 1 PriorityExample xConfiguration Zones Zone 1 Name UK Sales Office Example xConfiguration Zones Zone 1 Neighbor H323 Port Example xConfiguration Zones Zone 1 Neighbor Peer 1 Address Example xConfiguration Zones Zone 1 Neighbor SIP Port238 239 Example xConfiguration Zones Zone 1 SIP Mode On 240 Example xConfiguration Zones Zone 3 TraversalServer SIP Port 241 Example xConfiguration Zones Zone 1 Type Neighbor 242 Command Reference xCommand 243 Example xCommand AdminAccountDelete AdminAccountIdExample xCommand AllowListDelete AllowListId Example xCommand boot 244 Example xCommand DenyListDelete DenyListId Example xCommand CredentialDelete CredentialIdExample xCommand DefaultLinksAdd Example xCommand DefaultValuesSet Level 246 Example xCommand DomainAdd DomainName example.comExample xCommand DomainDelete DomainId Example xCommand FeedbackDeregister ID 247 248 Example xCommand LinkDelete LinkId Example xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD Example xCommand OptionKeyDelete OptionKeyId249 Example xCommand PipeDelete PipeId Example xCommand RouteDelete RouteId250 251 Example xCommand SubZoneDelete SubZoneId2 Example xCommand TransformDelete TransformId Example xCommand ZoneDelete ZoneId252 253 Example xCommand ZoneList Alias john.smith@example.com 254 Command Reference xStatus SystemUnit 255 Ethernet 256 NTP 257 Calls 258 259 Registrations 260 Zones 261 262 263 Links 264 Alternates 265 SIP 266 Stun 267 268 269 Bibliography 270 Glossary 271 Fqdn 272 Term Definition Local VCS 273 RTP 274 VCS 275 Contact Information 276