158, Configuring the VCS as a Traversal Server | TANDBERG D14049.04

Grey Headline (continued)

Configuring the VCS as a Traversal Server

TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE

Overview

The VCS Expressway can act as a firewall traversal server. This feature means you can:

•Allow your VCS to act as a traversal server for other VCSs and TANDBERG Gatekeepers. You do this by adding a new traversal server zone on the VCS, and configuring it with details of the traversal client.

•Provide firewall traversal for any traversal- enabled endpoints (i.e. TANDBERG MXP endpoints and any other endpoints that support the ITU H.460.18 and H.460.19 standards) registered directly with it. You can configure the protocols and ports that will be used.

•Enable and configure STUN services.

•Configure the ports used specifically for firewall traversal services.

The following sections describe how to configure each of the above options.

Adding a New Traversal Server Zone

•VCS Configuration > Zones.

You will be taken to the Zones page. Select New.

You will be taken to the Create Zone page.

•xCommand ZoneAdd

Name

Enter the name you wish to give to this zone. The name acts as a unique identifier, allowing you to distinguish between zones.

Type

From the Type drop-down menu, select

TraversalServer.

Create Zone

Click here to create the zone. You will be taken directly to the Edit Zone page, where you can configure the traversal server zone as required.

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Applications

Maintenance

Appendices

Status

Configuration

Configuration

Neighbors

Processing

Control

Traversal

D14049.04

158

JULY 2008

Image 158

TANDBERG D14049.04 manual 158, Configuring the VCS as a Traversal Server, Adding a New Traversal Server Zone

Contents

Guide Introduction What’s in this Manual?Preamble Getting Started Overview and Status DNS VCS Configuration NTP Zones and Neighbors Call Processing Bandwidth Control 151 Maintenance Applications Appendices Legal Notices Copyright 2008, Tandberg Approvals Safety Instructions and ApprovalsSafety Instructions Waste Handling Digital User Guides Environmental IssuesTANDBERG’s Environmental Policy Environmental Issues Overview VCS and the Tandberg Total Solution Tandberg VCS VCS Expressway VCS Base ApplicationsVCS Control User Policy FindMe Standard Features Optional FeaturesDual Network Interfaces What’s New in this Version? Command Line Interface Administrator GuideUsing this Administrator Guide Typographical conventions Getting Started General Installation Precautions InstallationInstallation Site Preparations Connecting the Cables Initial Configuration Powering on the VCS Initial Configuration via Serial Cable Down key Initial Configuration via Front PanelUP key System Administrator Access Overview Web Interface Using the Web InterfaceSelect Administrator Login Supported Browsers General page features Types of Commands Command Line Interface Supported CharactersUsing the Command Line Interface CLI How Command are Shown in this Guide Overview and Status Overview Viewing the Overview Understanding the Overview System Information Speed EthernetStatus System Ethernet MAC address IP Status Viewing the IP Status Understanding the IP Status Status System Resource Usage Traversal calls Resource UsageViewing the Resource Usage Understanding the Resource Usage Registrations Viewing the Registrations Understanding the Registrations Duration Registration HistoryReason End Time Publishers Presentities Subscribers PresenceViewing the Presence Status Pages Calls Viewing the Calls Understanding the Calls Status Call History Filter Call HistoryViewing the Call History Understanding the Call History About Searches Search HistoryViewing the Search History Understanding the Search History Status Search History Local Zone Viewing the Local Zone Understanding the Local Zone Status Zones ZonesViewing the Zones Understanding the Zones Status Links LinksViewing the Links Understanding the Links Understanding the Pipes PipesViewing the Pipes Status Pipes Stun Relays Viewing the Stun Relays Understanding the Stun Relays Status Applications ApplicationsViewing the Applications Understanding the Applications Viewing the Warnings Understanding the Warnings Status Warnings Event Log Color Coding Event LogViewing the Event Log Understanding the Event Log Event Log Levels Interpreting the Event Log Event Log Format Message Details Field Event Events and Levels Message Sent Message ReceivedMessage Rejected Registration Accepted TLS Negotiation Error System Backup errorSystem Restore error User session Login failure Understanding the Configuration Log Configuration LogViewing the Configuration Log Types of Configuration Events System Configuration About Administrator Access settings System AdministrationOverview Configuration About the System Name About Ethernet Speed System Configuration EthernetXConfiguration Ethernet Ethernet speed XConfiguration IP Route XCommand RouteAdd Overview IP ConfigurationXConfiguration IP XConfiguration IPProtocol About IPv4 to IPv6 Gatewaying About Dual Network Interfaces Overview LAN ConfigurationAbout LAN Configuration IPv4 subnet mask About the DNS Domain Name XConfiguration IP DNSAbout DNS Servers About the NTP Server System Configuration NTPXConfiguration NTP Address XConfiguration TimeZone Name About the Time Zone XConfiguration Snmp About Snmp About the External Manager XConfiguration ExternalManagerExternal Manager Address About Remote Logging LoggingAbout Logging Remote Logging Log Levels Setting the Event Log LevelXConfiguration Log Level About Event Log Levels VCS Configuration 323 Overview Endpoint Registration Configuring H.323 XConfiguration H323 About SIP on the VCS Using the VCS as a SIP RegistrarSIP Overview SIP Registration Expiry SIP protocols and ports Using the VCS as a SIP Proxy ServerUsing the VCS as a SIP Presence Server Configuring SIP Registrations, Protocols and Ports XConfiguration SIP Cancel Configuring SIP DomainsVCS Configuration Protocols SIP Domains View/Edit Save SIP interworking mode Configuring InterworkingXConfiguration Interworking Mode Interworking Registration Overview MCU, Gateway and Content Server RegistrationRegistration Control Endpoint Registration Preventing automatic registrations Finding a VCS with which to Register323 H323 Gatekeeper AutoDiscovery Configuring Authentication AuthenticationAuthentication Mode Authentication for Local Registrations Configuring External Registration Credentials About External Registration Credentials Authentication using an Ldap Server Authentication DatabasesAlias Origin Setting Configuring Ldap Server settings XConfiguration Ldap XConfiguration Authentication Ldap Authentication using a Local Database Configuring the Local Database About Alias Registration Attempts to Register using an Existing AliasRegistering Aliases Alias Registration Activating use of Allow or Deny Lists Allow and Deny ListsAbout Allow and Deny Lists Removing existing registrations XCommand AllowListAdd XConfigurationAllowList Registration Managing Entries in the Allow List Managing Entries in the Deny List VCS Configuration Registration Deny ListXCommand DenyListAdd XConfigurationDenyList Registration Add Deny List Pattern Zones and Neighbors About your Video Communications Network Example Network DiagramIntroduction Bandwidth Management Overview Configuring the Local Zone and its SubzonesLocal Zone and Subzones Local Zone Matches Traversal Subzone Configuring the Traversal Subzone PortsVCS Configuration Local Zone Traversal Subzone What are traversal calls? About Zones Traversal Client Zone Traversal Server Zone Neighbor Zone Enum Zone DNS Zone Default Zone XCommand DefaultLinksAdd XCommand ZoneAdd Adding Zones Configuring ZonesVCS Configuration Zones XConfiguration Zones Zone Match1 Match5 Configuring Zones All TypesHop count Configuring Neighbor Zones Retry interval Configuring Traversal Client ZonesAuthentication username Configuring Traversal Server Zones Configuring Enum Zones DNS suffix Configuring DNS Zones Cluster Subzone Clustering, Peers and AlternatesAbout Clustering Prerequisites Administration Accounts IP configurationDNS Configuration System Name SIP Registrations Backup and RestoreRegistrations Upgrading to Clustering and Presence ConfigurationClustering and FindMe Viewing Peers Enabling the Replication of FindMe Information Peer 1...Peer 6 address 100Neighboring the Local VCS to a Cluster 101 Dial Plans 102 Call Processing Search Process Call Processing Diagram103 Dialing by IP Address Dialing by H.323 or SIP URI 104Dialing by Address Types Dialing by Enum 105 About Hop Counts Configuring Hop CountsXConfiguration Zones Zone 1..200 HopCount Hop Counts Overview of Searches and Transforms 106Searches and Transforms Pre-Search Transforms 107 Configuring Pre-Search TransformsXConfiguration Transform 108 Zone Searching and Transforming 109 Configuring Zone Searches and TransformsDefault Settings Local Zone Combining Match Types and Priorities 110Examples Never Query a Zone 111 Filter Queries to a Zone Without Transforming 112 Query a Zone for Original and Transformed Alias 113 Query a Zone for Two or More Transformed Aliases Authentication Mode Off About Call Policy Administrator Policy and AuthenticationAuthentication Mode On 114 VCS Configuration Call Policy Administrator PolicyEnabling the use of Administrator Policy Administrator Policy Mode Configuring Administrator Policy via the Web Interface 116 About CPL XSD files 117Uploading a CPL Script H323 118URI Dialing URI Dialing for Outgoing Calls Configuring Matches for DNS Zones119 Process 120 Adding and Configuring DNS ZonesXCommand ZoneAdd XConfiguration Zones Zone Advanced 121 Configuring DNS ServersXConfiguration IP DNS Server 122 URI Dialing for Incoming Calls 123 Example DNS Record ConfigurationRecommended Configuration URI Dialing and Firewall Traversal Overview Process Enabling Enum Dialing 124Enum Dialing Example 125Enum Dialing for Outgoing Calls 7.6.5.4.3.2.1.4.4 Mode of PatternMatch Pattern string Pattern type of Prefix Configuring Matches for Enum ZonesConfiguring Transforms for Enum Zones 126 Click Create Zone Configuring Enum Zones127 128 Enum Dialing for Incoming Calls Configuring DNS Naptr Records129 About DNS Domains for Enum 130 Recommended Configuration for Firewall TraversalXConfiguration Call Services Unregistered Endpoints 131 Overview Configuration Example UsageXConfiguration Call Services Fallback Alias Fallback Alias Identifying a Particular Call 132Call IDs, Serial Numbers and Tags Issues when Disconnecting SIP Calls Disconnecting CallsDisconnecting a Call via the Web Interface 133 134 Bandwidth Control Bandwidth Control on the VCS Example Network Deployment 135Bandwidth Control Overview Subzones About the Default Subzone136 Specifying the Subzone IP Addresses Subzone Links Creating a Subzone XCommand SubZoneAdd137 138 Configuring a SubzoneXConfiguration Zones LocalZone SubZone Types of Limitations 139Applying Bandwidth Limitations to Subzones How Different Bandwidth Limitations are Managed 140 Default LinksXCommand LinkAdd About Links Creating Links Editing Links XConfiguration Bandwidth Link141 Pre-Configured Links Default LinksAbout Default Links 142 About Pipes Creating Pipes XCommand PipeAdd143 Editing Pipes XConfiguration Bandwidth Pipe144 Editing an Existing Pipe One Pipe, One Link 145Applying Pipes to Links One Pipe, Two or More Links Configuring Default Call Bandwidth and Downspeeding Default Bandwidth and DownspeedingAbout the Default Call Bandwidth 146 Example Without a Firewall 147Bandwidth Control Examples 148 VCS Expressway Subzone ConfigurationVCS Control Subzone Configuration Example With a Firewall 149 Firewall Traversal About Expressway VCS as a Firewall Traversal Client 150Firewall Traversal Overview How does it work? VCS Expressway Server Quick Guide to VCS Traversal Client Server Configuration151 Overview Expressway Process Firewall Traversal Protocols 152Firewall Traversal Protocols and Ports SIP Firewall Traversal Protocols Media Call signaling153 SIP Ports Configuration Zones Edit Zone, in the Configuration section Firewall Traversal and AuthenticationAuthentication and NTP 154 Other Issues 155 Adding a New Traversal Client Zone Configuring the VCS as a Traversal Client156 TraversalClient Create Zone Configuring a Traversal Client Zone 157 Adding a New Traversal Server Zone Configuring the VCS as a Traversal Server158 TraversalServer Create Zone Demux mode Configuring a Traversal Server ZoneClient authentication username 159 160 Configuring Traversal for EndpointsXConfiguration Zones LocalZone Traversal H323 Configuring Traversal Server Ports 161 Stun Services 162 Configuring Stun Services 163 164 165 FindMe User Policy 166 Configuring User Policy ManagerXConfiguration Policy UserPolicy Enabling FindMe on the VCS About User Accounts Creating a New User Account 167Managing FindMe User Accounts 168 Changing a User PasswordViewing Existing User Account Settings Are you sure...? 169Deleting a User Account 170 Using TANDBERG’s FindMeAccessing the FindMe Configuration About your FindMe User Account Configuring your FindMe User Account 171 172 Overview Presence Server Aggregation of Presence Information 173Presence User Agent PUA Registration refresh period Disabled Enabling and Disabling Presence ServicesEnabled 174 Publishers 175Viewing Presence Status Presentities Maintenance 176 177 Overview Upgrading Using SCP/PSCPInstalling and Restarting Upgrading Software 178 Upgrading via the Web Interface 179 Software upgrade in progressSoftware successfully upgraded Restart system Downgrading Software Downgrade Procedure Impact on features introduced180 Option Keys XConfiguration Option 1..64 Key181 Overview Adding Options via the CLI Adding Options via the Web Interface Maintenance Option Keys182 Add option key Overview Enabling Security 183Security 184 Administration AccountsAdding an Administration Account 185 Editing an Administration AccountAccount Disabled This account can not be used 186 Backup and RestoreOverview Creating a Backup of your VCS Configuration Limitations Restoring a Previous Backup 187 System Snapshot Error Reports188 Overview Creating a System Snapshot 189 Maintenance RestartXCommand Boot Restarting Shutting Down Maintenance Shutdown190 Overview Shutting Down XCommand DefaultValuesSet Level 3 must be Restoring Default ConfigurationOverview DefaultValuesSet Level 191 Command Line Interface Password EncryptionOverview Maximum length of Passwords 192 193 Appendices CPL Reference Address-switch194 Overview of CPL on the VCS 195 Field Otherwise Not-present 196Subfield Location Rule-switch197 Reject CPL Examples Call Screening of Authenticated Users198 Call Screening Based on Alias Change of Domain Name 199Call Screening Based on Domain Dont accept calls from this source 200 Block Calls from Default Zone and Default SubzoneAddress Address is=DefaultSubZone Allow Calls from Locally Registered Endpoints Only Using the rule-switch node Restricting Access to a Local GatewayUsing the address-switch node 201 Overview Common Regular Expressions 202Regular Expression Reference Matches 0 or more repetitions of the previous match 203 Pattern Variable Reference VCS Port Reference VCS Configuration Protocols H.323204 VCS Ports XConfiguration SIP TLS Port XConfiguration Traversal Server Stun Relay PortXConfiguration SIP TCP Port XConfiguration H323 Gatekeeper CallSignaling PortRange End XConfiguration Traversal Media Port Start XConfiguration SIP TCP Outbound Port StartXConfiguration SIP TCP Outbound Port End 206 Overview Microsoft DNS Server DNS Configuration207 Verifying the SRV Record 208 Ldap ConfigurationDownloading the Ldap schemas About the Ldap Databases Securing with TLS 209Adding H.350 Objects Create the Organizational Hierarchy OpenLDAP Include /etc/openldap/schemas/sipidentity.ldif210 Slapadd -l ldif file 211# MeetingRoom1 endpoint Command Reference xConfiguration 212 213 Example Configuration Applications Presence Server Mode On 214 215 Example xConfiguration Bandwidth Link 1 Node1 Name HQ Example xConfiguration Bandwidth Downspeed PerCall Mode OnExample xConfiguration Bandwidth Downspeed Total Mode On 216 217 Example xConfiguration Bandwidth Pipe 1 Name 512Kb AsdlExample xConfiguration Error Reports Mode Off Example xConfiguration Ethernet 1 Speed Auto Example xConfiguration Ethernet 1 IP V4 AddressExample xConfiguration Ethernet 1 IP V4 SubnetMask Example xConfiguration ExternalManager Address 219 Example xConfiguration H323 Gatekeeper CallTimeToLiveExample xConfiguration H323 Gatekeeper TimeToLive 220 221 222 Example xConfiguration Policy UserPolicy Mode Local 223 224 Example xConfiguration Registration RestrictionPolicy NoneExample Configuration SIP Loop Detect Mode On 225 226 Example xConfiguration TimeZone Name GMT Example xConfiguration SystemUnit Name Oslo HQ VCSExample xConfiguration SystemUnit Password password123 Example xConfiguration Transform 1 Pattern Behavior Replace 228 229 Example xConfiguration Traversal Server Stun Discovery PortExample xConfiguration Traversal Server Stun Relay Mode On Example Traversal Server Stun Relay Port 230 Example xConfiguration Zones LocalZone Match 1..5 Priority 231 232 233 234 Example xConfiguration Zones Zone 1 H323 Mode On 235 Example xConfiguration Zones Zone 1 HopCount 236 Example xConfiguration Zones Zone 1 Neighbor H323 Port Example xConfiguration Zones Zone 1 Match 1 PriorityExample xConfiguration Zones Zone 1 Name UK Sales Office 237 238 Example xConfiguration Zones Zone 1 Neighbor Peer 1 AddressExample xConfiguration Zones Zone 1 Neighbor SIP Port Example xConfiguration Zones Zone 1 SIP Mode On 239 Example xConfiguration Zones Zone 3 TraversalServer SIP Port 240 Example xConfiguration Zones Zone 1 Type Neighbor 241 Command Reference xCommand 242 Example xCommand boot Example xCommand AdminAccountDelete AdminAccountIdExample xCommand AllowListDelete AllowListId 243 244 Example xCommand DefaultValuesSet Level Example xCommand CredentialDelete CredentialIdExample xCommand DefaultLinksAdd Example xCommand DenyListDelete DenyListId Example xCommand FeedbackDeregister ID Example xCommand DomainAdd DomainName example.comExample xCommand DomainDelete DomainId 246 247 Example xCommand LinkDelete LinkId 248 249 Example xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CDExample xCommand OptionKeyDelete OptionKeyId 250 Example xCommand PipeDelete PipeIdExample xCommand RouteDelete RouteId Example xCommand SubZoneDelete SubZoneId2 251 252 Example xCommand TransformDelete TransformIdExample xCommand ZoneDelete ZoneId Example xCommand ZoneList Alias john.smith@example.com 253 Command Reference xStatus 254 255 SystemUnit 256 Ethernet 257 NTP 258 Calls 259 260 Registrations 261 Zones 262 263 264 Links 265 Alternates 266 SIP 267 Stun 268 269 270 Bibliography 271 Glossary 272 Fqdn 273 Term Definition Local VCS 274 RTP 275 VCS 276 Contact Information