TANDBERG D14049.04 manual 200, Allow Calls from Locally Registered Endpoints Only

Grey Headline (continued)

CPL Reference

TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE

CPL Examples

Allow Calls from Locally Registered Endpoints Only

In this example, the administrator only wants to allow calls that originate from locally registered endpoints.

<?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl"

xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd">

<taa:routed>

<address-switch field="registered-origin"> <not-present>

<reject status="403" reason="Only local endpoints can use this Tandberg VCS"/>

</not-present> </address-switch>

</taa:routed>

</cpl>

Block Calls from Default Zone and Default Subzone

The same script can be extended to also allow calls from configured zones but not from the Default Zone or Default Subzone.

<?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl"

xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd">

<taa:routed>

<address-switch field="registered-origin"> <not-present>

<address-switch field="originating-zone"> <address is="DefaultZone">

<!-- Reject call with a status code of 403 (Forbidden) --> <reject status="403" reason="Denied by policy"/>

</address>

<address is="DefaultSubZone">

<!-- Reject call with a status code of 403 (Forbidden) --> <reject status="403" reason="Denied by policy"/>

</address>

<otherwise>

<proxy/>

</otherwise> </address-switch>

</not-present> </address-switch>

</taa:routed>

</cpl>

Introduction	Getting Started	Overview and	System	VCS	Zones and	Call	Bandwidth	Firewall	Applications	Maintenance	Appendices
		Status	Configuration	Configuration	Neighbors	Processing	Control	Traversal
D14049.04					200
JULY 2008