166, Enabling FindMe on the VCS | TANDBERG D14049.04 instruction

Grey Headline (continued)

FindMe™ (User Policy)

TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE

Enabling FindMe on the VCS

Configuring User Policy Manager

FindMe requires a User Policy Manager. The VCS has its own User Policy Manager, but there is also the ability to connect to a User Policy Manager located on another system.

To configure the User Policy Manager:

• Applications > FindMe > Configuration. You will be taken to the User Policy page.

•xConfiguration Policy UserPolicy

Administrator Policy will always be applied regardless of the User Policy mode.

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Status

Configuration

Configuration

Neighbors

Processing

Control

Traversal

D14049.04

166

JULY 2008

Mode

Determines whether or not User Policy will be enabled, and if so, the location of the User Policy Manager.

Off: User Policy is not enabled.

Local: User Policy is enabled and the VCS’s own User Policy Manager is used.

Remote: User Policy is enabled and a third- party User Policy Manager located on another system is used (this feature is intended for future third-party integration). If you select this option, further configuration options will appear (see below).

Protocol

The protocol used to connect to the remote User Policy Manager.

Address

The IP address or domain name of the remote User Policy Manager.

Path

The URL of the remote User Policy Manager.

Username

The username used by the VCS to log in and query the remote User Policy Manager.

Password

The password used by the VCS to log in and query the remote User Policy Manager.

Save

Click here to save your changes.

Applications Maintenance Appendices

Image 166

TANDBERG D14049.04 166, Enabling FindMe on the VCS, Configuring User Policy Manager, XConfiguration Policy UserPolicy

Contents

Guide Introduction What’s in this Manual?Preamble Getting Started Overview and Status DNS VCS Configuration NTP Zones and Neighbors Call Processing Bandwidth Control 151 Maintenance Applications Appendices Legal Notices Copyright 2008, Tandberg Safety Instructions Safety Instructions and ApprovalsApprovals TANDBERG’s Environmental Policy Environmental IssuesWaste Handling Digital User Guides Environmental Issues Overview VCS and the Tandberg Total Solution Tandberg VCS VCS Control VCS Base ApplicationsVCS Expressway Dual Network Interfaces Standard Features Optional FeaturesUser Policy FindMe What’s New in this Version? Command Line Interface Administrator GuideUsing this Administrator Guide Typographical conventions Getting Started General Installation Precautions InstallationInstallation Site Preparations Connecting the Cables Initial Configuration Powering on the VCS Initial Configuration via Serial Cable UP key Initial Configuration via Front PanelDown key System Administrator Access Overview Web Interface Using the Web InterfaceSelect Administrator Login Supported Browsers General page features Types of Commands Command Line Interface Supported CharactersUsing the Command Line Interface CLI How Command are Shown in this Guide Overview and Status Overview Viewing the Overview Understanding the Overview System Information Status System Ethernet MAC address EthernetSpeed IP Status Viewing the IP Status Understanding the IP Status Viewing the Resource Usage Understanding the Resource Usage Resource UsageStatus System Resource Usage Traversal calls Registrations Viewing the Registrations Understanding the Registrations Duration Registration HistoryReason End Time Viewing the Presence Status Pages PresencePublishers Presentities Subscribers Calls Viewing the Calls Understanding the Calls Viewing the Call History Understanding the Call History Call HistoryStatus Call History Filter About Searches Search HistoryViewing the Search History Understanding the Search History Status Search History Local Zone Viewing the Local Zone Understanding the Local Zone Viewing the Zones Understanding the Zones ZonesStatus Zones Viewing the Links Understanding the Links LinksStatus Links Understanding the Pipes PipesViewing the Pipes Status Pipes Stun Relays Viewing the Stun Relays Understanding the Stun Relays Viewing the Applications Understanding the Applications ApplicationsStatus Applications Viewing the Warnings Understanding the Warnings Status Warnings Event Log Color Coding Event LogViewing the Event Log Understanding the Event Log Event Log Levels Interpreting the Event Log Event Log Format Message Details Field Event Events and Levels Message Sent Message ReceivedMessage Rejected Registration Accepted TLS Negotiation Error System Backup errorSystem Restore error User session Login failure Understanding the Configuration Log Configuration LogViewing the Configuration Log Types of Configuration Events System Configuration About Administrator Access settings System AdministrationOverview Configuration About the System Name About Ethernet Speed System Configuration EthernetXConfiguration Ethernet Ethernet speed XConfiguration IP Route XCommand RouteAdd Overview IP ConfigurationXConfiguration IP XConfiguration IPProtocol About IPv4 to IPv6 Gatewaying About Dual Network Interfaces Overview LAN ConfigurationAbout LAN Configuration IPv4 subnet mask About DNS Servers XConfiguration IP DNSAbout the DNS Domain Name About the NTP Server System Configuration NTPXConfiguration NTP Address XConfiguration TimeZone Name About the Time Zone XConfiguration Snmp About Snmp About the External Manager XConfiguration ExternalManagerExternal Manager Address About Remote Logging LoggingAbout Logging Remote Logging Log Levels Setting the Event Log LevelXConfiguration Log Level About Event Log Levels VCS Configuration 323 Overview Endpoint Registration Configuring H.323 XConfiguration H323 About SIP on the VCS Using the VCS as a SIP RegistrarSIP Overview SIP Registration Expiry Using the VCS as a SIP Presence Server Using the VCS as a SIP Proxy ServerSIP protocols and ports Configuring SIP Registrations, Protocols and Ports XConfiguration SIP Cancel Configuring SIP DomainsVCS Configuration Protocols SIP Domains View/Edit Save SIP interworking mode Configuring InterworkingXConfiguration Interworking Mode Interworking Registration Overview MCU, Gateway and Content Server RegistrationRegistration Control Endpoint Registration Preventing automatic registrations Finding a VCS with which to Register323 H323 Gatekeeper AutoDiscovery Configuring Authentication AuthenticationAuthentication Mode Authentication for Local Registrations Configuring External Registration Credentials About External Registration Credentials Alias Origin Setting Authentication DatabasesAuthentication using an Ldap Server Configuring Ldap Server settings XConfiguration Ldap XConfiguration Authentication Ldap Authentication using a Local Database Configuring the Local Database About Alias Registration Attempts to Register using an Existing AliasRegistering Aliases Alias Registration Activating use of Allow or Deny Lists Allow and Deny ListsAbout Allow and Deny Lists Removing existing registrations XCommand AllowListAdd XConfigurationAllowList Registration Managing Entries in the Allow List Managing Entries in the Deny List VCS Configuration Registration Deny ListXCommand DenyListAdd XConfigurationDenyList Registration Add Deny List Pattern Zones and Neighbors Introduction Example Network DiagramAbout your Video Communications Network Bandwidth Management Overview Configuring the Local Zone and its SubzonesLocal Zone and Subzones Local Zone Matches Traversal Subzone Configuring the Traversal Subzone PortsVCS Configuration Local Zone Traversal Subzone What are traversal calls? About Zones Traversal Client Zone Traversal Server Zone Neighbor Zone Enum Zone DNS Zone Default Zone XCommand DefaultLinksAdd XCommand ZoneAdd Adding Zones Configuring ZonesVCS Configuration Zones XConfiguration Zones Zone Hop count Configuring Zones All TypesMatch1 Match5 Configuring Neighbor Zones Authentication username Configuring Traversal Client ZonesRetry interval Configuring Traversal Server Zones Configuring Enum Zones DNS suffix Configuring DNS Zones About Clustering Clustering, Peers and AlternatesCluster Subzone Prerequisites Administration Accounts IP configurationDNS Configuration System Name SIP Registrations Backup and RestoreRegistrations Upgrading to Clustering and Presence ConfigurationClustering and FindMe Viewing Peers Enabling the Replication of FindMe Information Neighboring the Local VCS to a Cluster 100Peer 1...Peer 6 address 101 Dial Plans 102 Call Processing 103 Call Processing DiagramSearch Process Dialing by IP Address Dialing by H.323 or SIP URI 104Dialing by Address Types Dialing by Enum 105 About Hop Counts Configuring Hop CountsXConfiguration Zones Zone 1..200 HopCount Hop Counts Overview of Searches and Transforms 106Searches and Transforms Pre-Search Transforms XConfiguration Transform Configuring Pre-Search Transforms107 108 Zone Searching and Transforming 109 Configuring Zone Searches and TransformsDefault Settings Local Zone Combining Match Types and Priorities 110Examples Never Query a Zone 111 Filter Queries to a Zone Without Transforming 112 Query a Zone for Original and Transformed Alias 113 Query a Zone for Two or More Transformed Aliases Authentication Mode Off About Call Policy Administrator Policy and AuthenticationAuthentication Mode On 114 VCS Configuration Call Policy Administrator PolicyEnabling the use of Administrator Policy Administrator Policy Mode Configuring Administrator Policy via the Web Interface 116 Uploading a CPL Script 117About CPL XSD files URI Dialing 118H323 URI Dialing for Outgoing Calls Configuring Matches for DNS Zones119 Process 120 Adding and Configuring DNS ZonesXCommand ZoneAdd XConfiguration Zones Zone Advanced XConfiguration IP DNS Server Configuring DNS Servers121 122 URI Dialing for Incoming Calls 123 Example DNS Record ConfigurationRecommended Configuration URI Dialing and Firewall Traversal Enum Dialing 124Overview Process Enabling Enum Dialing Example 125Enum Dialing for Outgoing Calls 7.6.5.4.3.2.1.4.4 Mode of PatternMatch Pattern string Pattern type of Prefix Configuring Matches for Enum ZonesConfiguring Transforms for Enum Zones 126 127 Configuring Enum ZonesClick Create Zone 128 Enum Dialing for Incoming Calls Configuring DNS Naptr Records129 About DNS Domains for Enum 130 Recommended Configuration for Firewall TraversalXConfiguration Call Services Unregistered Endpoints 131 Overview Configuration Example UsageXConfiguration Call Services Fallback Alias Fallback Alias Call IDs, Serial Numbers and Tags 132Identifying a Particular Call Issues when Disconnecting SIP Calls Disconnecting CallsDisconnecting a Call via the Web Interface 133 134 Bandwidth Control Bandwidth Control Overview 135Bandwidth Control on the VCS Example Network Deployment Subzones About the Default Subzone136 Specifying the Subzone IP Addresses Subzone Links 137 XCommand SubZoneAddCreating a Subzone XConfiguration Zones LocalZone SubZone Configuring a Subzone138 Types of Limitations 139Applying Bandwidth Limitations to Subzones How Different Bandwidth Limitations are Managed 140 Default LinksXCommand LinkAdd About Links Creating Links 141 XConfiguration Bandwidth LinkEditing Links Pre-Configured Links Default LinksAbout Default Links 142 143 XCommand PipeAddAbout Pipes Creating Pipes Editing Pipes XConfiguration Bandwidth Pipe144 Editing an Existing Pipe One Pipe, One Link 145Applying Pipes to Links One Pipe, Two or More Links Configuring Default Call Bandwidth and Downspeeding Default Bandwidth and DownspeedingAbout the Default Call Bandwidth 146 Bandwidth Control Examples 147Example Without a Firewall 148 VCS Expressway Subzone ConfigurationVCS Control Subzone Configuration Example With a Firewall 149 Firewall Traversal About Expressway VCS as a Firewall Traversal Client 150Firewall Traversal Overview How does it work? 151 Quick Guide to VCS Traversal Client Server ConfigurationVCS Expressway Server Overview Expressway Process Firewall Traversal Protocols 152Firewall Traversal Protocols and Ports SIP Firewall Traversal Protocols Media Call signaling153 SIP Ports Configuration Zones Edit Zone, in the Configuration section Firewall Traversal and AuthenticationAuthentication and NTP 154 Other Issues 155 Adding a New Traversal Client Zone Configuring the VCS as a Traversal Client156 TraversalClient Create Zone Configuring a Traversal Client Zone 157 Adding a New Traversal Server Zone Configuring the VCS as a Traversal Server158 TraversalServer Create Zone Demux mode Configuring a Traversal Server ZoneClient authentication username 159 XConfiguration Zones LocalZone Traversal H323 Configuring Traversal for Endpoints160 Configuring Traversal Server Ports 161 Stun Services 162 Configuring Stun Services 163 164 165 FindMe User Policy 166 Configuring User Policy ManagerXConfiguration Policy UserPolicy Enabling FindMe on the VCS Managing FindMe User Accounts 167About User Accounts Creating a New User Account Viewing Existing User Account Settings Changing a User Password168 Deleting a User Account 169Are you sure...? 170 Using TANDBERG’s FindMeAccessing the FindMe Configuration About your FindMe User Account Configuring your FindMe User Account 171 172 Overview Presence Server Aggregation of Presence Information 173Presence User Agent PUA Registration refresh period Disabled Enabling and Disabling Presence ServicesEnabled 174 Publishers 175Viewing Presence Status Presentities Maintenance 176 177 Overview Upgrading Using SCP/PSCPInstalling and Restarting Upgrading Software 178 Upgrading via the Web Interface 179 Software upgrade in progressSoftware successfully upgraded Restart system 180 Downgrade Procedure Impact on features introducedDowngrading Software Option Keys XConfiguration Option 1..64 Key181 Overview Adding Options via the CLI Adding Options via the Web Interface Maintenance Option Keys182 Add option key Security 183Overview Enabling Security Adding an Administration Account Administration Accounts184 Account Disabled This account can not be used Editing an Administration Account185 186 Backup and RestoreOverview Creating a Backup of your VCS Configuration Limitations Restoring a Previous Backup 187 System Snapshot Error Reports188 Overview Creating a System Snapshot 189 Maintenance RestartXCommand Boot Restarting Shutting Down Maintenance Shutdown190 Overview Shutting Down XCommand DefaultValuesSet Level 3 must be Restoring Default ConfigurationOverview DefaultValuesSet Level 191 Command Line Interface Password EncryptionOverview Maximum length of Passwords 192 193 Appendices CPL Reference Address-switch194 Overview of CPL on the VCS 195 Field Subfield 196Otherwise Not-present Location Rule-switch197 Reject CPL Examples Call Screening of Authenticated Users198 Call Screening Based on Alias Change of Domain Name 199Call Screening Based on Domain Dont accept calls from this source 200 Block Calls from Default Zone and Default SubzoneAddress Address is=DefaultSubZone Allow Calls from Locally Registered Endpoints Only Using the rule-switch node Restricting Access to a Local GatewayUsing the address-switch node 201 Overview Common Regular Expressions 202Regular Expression Reference Matches 0 or more repetitions of the previous match 203 Pattern Variable Reference VCS Port Reference VCS Configuration Protocols H.323204 VCS Ports XConfiguration SIP TLS Port XConfiguration Traversal Server Stun Relay PortXConfiguration SIP TCP Port XConfiguration H323 Gatekeeper CallSignaling PortRange End XConfiguration Traversal Media Port Start XConfiguration SIP TCP Outbound Port StartXConfiguration SIP TCP Outbound Port End 206 Overview Microsoft DNS Server DNS Configuration207 Verifying the SRV Record 208 Ldap ConfigurationDownloading the Ldap schemas About the Ldap Databases Securing with TLS 209Adding H.350 Objects Create the Organizational Hierarchy 210 Include /etc/openldap/schemas/sipidentity.ldifOpenLDAP # MeetingRoom1 endpoint 211Slapadd -l ldif file Command Reference xConfiguration 212 213 Example Configuration Applications Presence Server Mode On 214 215 Example xConfiguration Bandwidth Link 1 Node1 Name HQ Example xConfiguration Bandwidth Downspeed PerCall Mode OnExample xConfiguration Bandwidth Downspeed Total Mode On 216 Example xConfiguration Error Reports Mode Off Example xConfiguration Bandwidth Pipe 1 Name 512Kb Asdl217 Example xConfiguration Ethernet 1 Speed Auto Example xConfiguration Ethernet 1 IP V4 AddressExample xConfiguration Ethernet 1 IP V4 SubnetMask Example xConfiguration ExternalManager Address Example xConfiguration H323 Gatekeeper TimeToLive Example xConfiguration H323 Gatekeeper CallTimeToLive219 220 221 222 Example xConfiguration Policy UserPolicy Mode Local 223 Example Configuration SIP Loop Detect Mode On Example xConfiguration Registration RestrictionPolicy None224 225 226 Example xConfiguration TimeZone Name GMT Example xConfiguration SystemUnit Name Oslo HQ VCSExample xConfiguration SystemUnit Password password123 Example xConfiguration Transform 1 Pattern Behavior Replace 228 229 Example xConfiguration Traversal Server Stun Discovery PortExample xConfiguration Traversal Server Stun Relay Mode On Example Traversal Server Stun Relay Port 230 Example xConfiguration Zones LocalZone Match 1..5 Priority 231 232 233 234 Example xConfiguration Zones Zone 1 H323 Mode On 235 Example xConfiguration Zones Zone 1 HopCount 236 Example xConfiguration Zones Zone 1 Neighbor H323 Port Example xConfiguration Zones Zone 1 Match 1 PriorityExample xConfiguration Zones Zone 1 Name UK Sales Office 237 Example xConfiguration Zones Zone 1 Neighbor SIP Port Example xConfiguration Zones Zone 1 Neighbor Peer 1 Address238 Example xConfiguration Zones Zone 1 SIP Mode On 239 Example xConfiguration Zones Zone 3 TraversalServer SIP Port 240 Example xConfiguration Zones Zone 1 Type Neighbor 241 Command Reference xCommand 242 Example xCommand boot Example xCommand AdminAccountDelete AdminAccountIdExample xCommand AllowListDelete AllowListId 243 244 Example xCommand DefaultValuesSet Level Example xCommand CredentialDelete CredentialIdExample xCommand DefaultLinksAdd Example xCommand DenyListDelete DenyListId Example xCommand FeedbackDeregister ID Example xCommand DomainAdd DomainName example.comExample xCommand DomainDelete DomainId 246 247 Example xCommand LinkDelete LinkId 248 Example xCommand OptionKeyDelete OptionKeyId Example xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD249 Example xCommand RouteDelete RouteId Example xCommand PipeDelete PipeId250 Example xCommand SubZoneDelete SubZoneId2 251 Example xCommand ZoneDelete ZoneId Example xCommand TransformDelete TransformId252 Example xCommand ZoneList Alias john.smith@example.com 253 Command Reference xStatus 254 255 SystemUnit 256 Ethernet 257 NTP 258 Calls 259 260 Registrations 261 Zones 262 263 264 Links 265 Alternates 266 SIP 267 Stun 268 269 270 Bibliography 271 Glossary 272 Fqdn 273 Term Definition Local VCS 274 RTP 275 VCS 276 Contact Information