VCS Configuration

Grey Headline (continued)

TANDBERG VIDEO COMMUNICATIONS SERVER

ADMINISTRATOR GUIDE

This section provides information on the pages that appear under the Protocols, Registrations and Authentication sub-menus of the VCS Configuration menu. These pages allow you to configure the functionality of the VCS in each of these areas.

This section includes the following information:

•an overview of H.323 and the H.323 configuration options available on the VCS

•an overview of SIP and the SIP configuration options available on the VCS

•how to configure the VCS to act as a SIP to H.323 gateway

•how to control registrations on the VCS using authentication and Allow Lists and Deny Lists.

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Applications

Maintenance

Appendices

Status

Configuration

Neighbors

Processing

Control

Traversal

D14049.04

JULY 2008

Page 64

Image 64

TANDBERG D14049.04 manual VCS Configuration

Contents

Guide What’s in this Manual? PreambleIntroduction Getting Started Overview and Status DNS VCS Configuration NTP Zones and Neighbors Call Processing Bandwidth Control 151 Maintenance Applications Appendices Legal Notices Copyright 2008, Tandberg Safety Instructions Safety Instructions and ApprovalsApprovals TANDBERG’s Environmental Policy Environmental IssuesWaste Handling Digital User Guides Environmental Issues Overview VCS and the Tandberg Total Solution Tandberg VCS VCS Control VCS Base ApplicationsVCS Expressway Dual Network Interfaces Standard Features Optional FeaturesUser Policy FindMe What’s New in this Version? Administrator Guide Using this Administrator GuideCommand Line Interface Typographical conventions Getting Started Installation Installation Site PreparationsGeneral Installation Precautions Connecting the Cables Initial Configuration Powering on the VCS Initial Configuration via Serial Cable UP key Initial Configuration via Front PanelDown key System Administrator Access Overview Using the Web Interface Select Administrator LoginWeb Interface Supported Browsers General page features Command Line Interface Supported Characters Using the Command Line Interface CLITypes of Commands How Command are Shown in this Guide Overview and Status Overview Viewing the Overview Understanding the Overview System Information Status System Ethernet MAC address EthernetSpeed IP Status Viewing the IP Status Understanding the IP Status Viewing the Resource Usage Understanding the Resource Usage Resource UsageStatus System Resource Usage Traversal calls Registrations Viewing the Registrations Understanding the Registrations Registration History ReasonDuration End Time Viewing the Presence Status Pages PresencePublishers Presentities Subscribers Calls Viewing the Calls Understanding the Calls Viewing the Call History Understanding the Call History Call HistoryStatus Call History Filter Search History Viewing the Search History Understanding the Search HistoryAbout Searches Status Search History Local Zone Viewing the Local Zone Understanding the Local Zone Viewing the Zones Understanding the Zones ZonesStatus Zones Viewing the Links Understanding the Links LinksStatus Links Pipes Viewing the PipesUnderstanding the Pipes Status Pipes Stun Relays Viewing the Stun Relays Understanding the Stun Relays Viewing the Applications Understanding the Applications ApplicationsStatus Applications Viewing the Warnings Understanding the Warnings Status Warnings Event Log Viewing the Event Log Understanding the Event LogEvent Log Color Coding Event Log Levels Interpreting the Event Log Event Log Format Message Details Field Event Events and Levels Message Received Message RejectedMessage Sent Registration Accepted System Backup error System Restore errorTLS Negotiation Error User session Login failure Configuration Log Viewing the Configuration LogUnderstanding the Configuration Log Types of Configuration Events System Configuration System Administration Overview ConfigurationAbout Administrator Access settings About the System Name System Configuration Ethernet XConfiguration EthernetAbout Ethernet Speed Ethernet speed Overview IP Configuration XConfiguration IP XConfiguration IPProtocolXConfiguration IP Route XCommand RouteAdd About IPv4 to IPv6 Gatewaying Overview LAN Configuration About LAN ConfigurationAbout Dual Network Interfaces IPv4 subnet mask About DNS Servers XConfiguration IP DNSAbout the DNS Domain Name System Configuration NTP XConfiguration NTP Address XConfiguration TimeZone NameAbout the NTP Server About the Time Zone XConfiguration Snmp About Snmp XConfiguration ExternalManager External ManagerAbout the External Manager Address Logging About LoggingAbout Remote Logging Remote Logging Setting the Event Log Level XConfiguration Log LevelLog Levels About Event Log Levels VCS Configuration 323 Overview Endpoint Registration Configuring H.323 XConfiguration H323 Using the VCS as a SIP Registrar SIP OverviewAbout SIP on the VCS SIP Registration Expiry Using the VCS as a SIP Presence Server Using the VCS as a SIP Proxy ServerSIP protocols and ports Configuring SIP Registrations, Protocols and Ports XConfiguration SIP Configuring SIP Domains VCS Configuration Protocols SIP DomainsCancel View/Edit Configuring Interworking XConfiguration Interworking ModeSave SIP interworking mode Interworking MCU, Gateway and Content Server Registration Registration ControlRegistration Overview Endpoint Registration Finding a VCS with which to Register 323Preventing automatic registrations H323 Gatekeeper AutoDiscovery Authentication Authentication ModeConfiguring Authentication Authentication for Local Registrations Configuring External Registration Credentials About External Registration Credentials Alias Origin Setting Authentication DatabasesAuthentication using an Ldap Server Configuring Ldap Server settings XConfiguration Ldap XConfiguration Authentication Ldap Authentication using a Local Database Configuring the Local Database Attempts to Register using an Existing Alias Registering AliasesAbout Alias Registration Alias Registration Allow and Deny Lists About Allow and Deny ListsActivating use of Allow or Deny Lists Removing existing registrations XCommand AllowListAdd XConfigurationAllowList Registration Managing Entries in the Allow List VCS Configuration Registration Deny List XCommand DenyListAdd XConfigurationDenyList RegistrationManaging Entries in the Deny List Add Deny List Pattern Zones and Neighbors Introduction Example Network DiagramAbout your Video Communications Network Overview Configuring the Local Zone and its Subzones Local Zone and SubzonesBandwidth Management Local Zone Matches Configuring the Traversal Subzone Ports VCS Configuration Local Zone Traversal SubzoneTraversal Subzone What are traversal calls? About Zones Traversal Client Zone Traversal Server Zone Neighbor Zone Enum Zone DNS Zone Default Zone XCommand DefaultLinksAdd Adding Zones Configuring Zones VCS Configuration ZonesXCommand ZoneAdd XConfiguration Zones Zone Hop count Configuring Zones All TypesMatch1 Match5 Configuring Neighbor Zones Authentication username Configuring Traversal Client ZonesRetry interval Configuring Traversal Server Zones Configuring Enum Zones DNS suffix Configuring DNS Zones About Clustering Clustering, Peers and AlternatesCluster Subzone Administration Accounts IP configuration DNS ConfigurationPrerequisites System Name Backup and Restore RegistrationsSIP Registrations Upgrading to Configuration Clustering and FindMe Viewing PeersClustering and Presence Enabling the Replication of FindMe Information Neighboring the Local VCS to a Cluster 100Peer 1...Peer 6 address 101 Dial Plans 102 Call Processing 103 Call Processing DiagramSearch Process 104 Dialing by Address TypesDialing by IP Address Dialing by H.323 or SIP URI Dialing by Enum About Hop Counts Configuring Hop Counts XConfiguration Zones Zone 1..200 HopCount105 Hop Counts 106 Searches and TransformsOverview of Searches and Transforms Pre-Search Transforms XConfiguration Transform Configuring Pre-Search Transforms107 108 Zone Searching and Transforming Configuring Zone Searches and Transforms Default Settings109 Local Zone 110 ExamplesCombining Match Types and Priorities Never Query a Zone 111 Filter Queries to a Zone Without Transforming 112 Query a Zone for Original and Transformed Alias 113 Query a Zone for Two or More Transformed Aliases About Call Policy Administrator Policy and Authentication Authentication Mode OnAuthentication Mode Off 114 Administrator Policy Enabling the use of Administrator PolicyVCS Configuration Call Policy Administrator Policy Mode Configuring Administrator Policy via the Web Interface 116 Uploading a CPL Script 117About CPL XSD files URI Dialing 118H323 Configuring Matches for DNS Zones 119URI Dialing for Outgoing Calls Process Adding and Configuring DNS Zones XCommand ZoneAdd XConfiguration Zones Zone120 Advanced XConfiguration IP DNS Server Configuring DNS Servers121 122 URI Dialing for Incoming Calls Example DNS Record Configuration Recommended Configuration123 URI Dialing and Firewall Traversal Enum Dialing 124Overview Process Enabling Enum Dialing 125 Enum Dialing for Outgoing CallsExample 7.6.5.4.3.2.1.4.4 Configuring Matches for Enum Zones Configuring Transforms for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix 126 127 Configuring Enum ZonesClick Create Zone 128 Configuring DNS Naptr Records 129Enum Dialing for Incoming Calls About DNS Domains for Enum Recommended Configuration for Firewall Traversal XConfiguration Call Services130 Unregistered Endpoints Overview Configuration Example Usage XConfiguration Call Services Fallback Alias131 Fallback Alias Call IDs, Serial Numbers and Tags 132Identifying a Particular Call Disconnecting Calls Disconnecting a Call via the Web InterfaceIssues when Disconnecting SIP Calls 133 134 Bandwidth Control Bandwidth Control Overview 135Bandwidth Control on the VCS Example Network Deployment About the Default Subzone 136Subzones Specifying the Subzone IP Addresses Subzone Links 137 XCommand SubZoneAddCreating a Subzone XConfiguration Zones LocalZone SubZone Configuring a Subzone138 139 Applying Bandwidth Limitations to SubzonesTypes of Limitations How Different Bandwidth Limitations are Managed Default Links XCommand LinkAdd140 About Links Creating Links 141 XConfiguration Bandwidth LinkEditing Links Default Links About Default LinksPre-Configured Links 142 143 XCommand PipeAddAbout Pipes Creating Pipes XConfiguration Bandwidth Pipe 144Editing Pipes Editing an Existing Pipe 145 Applying Pipes to LinksOne Pipe, One Link One Pipe, Two or More Links Default Bandwidth and Downspeeding About the Default Call BandwidthConfiguring Default Call Bandwidth and Downspeeding 146 Bandwidth Control Examples 147Example Without a Firewall VCS Expressway Subzone Configuration VCS Control Subzone Configuration148 Example With a Firewall 149 Firewall Traversal 150 Firewall Traversal OverviewAbout Expressway VCS as a Firewall Traversal Client How does it work? 151 Quick Guide to VCS Traversal Client Server ConfigurationVCS Expressway Server 152 Firewall Traversal Protocols and PortsOverview Expressway Process Firewall Traversal Protocols SIP Firewall Traversal Protocols Call signaling 153Media SIP Ports Firewall Traversal and Authentication Authentication and NTPConfiguration Zones Edit Zone, in the Configuration section 154 Other Issues 155 Configuring the VCS as a Traversal Client 156Adding a New Traversal Client Zone TraversalClient Create Zone Configuring a Traversal Client Zone 157 Configuring the VCS as a Traversal Server 158Adding a New Traversal Server Zone TraversalServer Create Zone Configuring a Traversal Server Zone Client authentication usernameDemux mode 159 XConfiguration Zones LocalZone Traversal H323 Configuring Traversal for Endpoints160 Configuring Traversal Server Ports 161 Stun Services 162 Configuring Stun Services 163 164 165 FindMe User Policy Configuring User Policy Manager XConfiguration Policy UserPolicy166 Enabling FindMe on the VCS Managing FindMe User Accounts 167About User Accounts Creating a New User Account Viewing Existing User Account Settings Changing a User Password168 Deleting a User Account 169Are you sure...? Using TANDBERG’s FindMe Accessing the FindMe Configuration170 About your FindMe User Account Configuring your FindMe User Account 171 172 Overview Presence Server 173 Presence User Agent PUAAggregation of Presence Information Registration refresh period Enabling and Disabling Presence Services EnabledDisabled 174 175 Viewing Presence StatusPublishers Presentities Maintenance 176 Overview Upgrading Using SCP/PSCP Installing and Restarting177 Upgrading Software 178 Upgrading via the Web Interface Software upgrade in progress Software successfully upgraded179 Restart system 180 Downgrade Procedure Impact on features introducedDowngrading Software XConfiguration Option 1..64 Key 181Option Keys Overview Adding Options via the CLI Maintenance Option Keys 182Adding Options via the Web Interface Add option key Security 183Overview Enabling Security Adding an Administration Account Administration Accounts184 Account Disabled This account can not be used Editing an Administration Account185 Backup and Restore Overview Creating a Backup of your VCS Configuration186 Limitations Restoring a Previous Backup 187 Error Reports 188System Snapshot Overview Creating a System Snapshot Maintenance Restart XCommand Boot189 Restarting Maintenance Shutdown 190Shutting Down Overview Shutting Down Restoring Default Configuration Overview DefaultValuesSet LevelXCommand DefaultValuesSet Level 3 must be 191 Password Encryption Overview Maximum length of PasswordsCommand Line Interface 192 193 Appendices Address-switch 194CPL Reference Overview of CPL on the VCS 195 Field Subfield 196Otherwise Not-present Rule-switch 197Location Reject Call Screening of Authenticated Users 198CPL Examples Call Screening Based on Alias 199 Call Screening Based on DomainChange of Domain Name Dont accept calls from this source Block Calls from Default Zone and Default Subzone Address Address is=DefaultSubZone200 Allow Calls from Locally Registered Endpoints Only Restricting Access to a Local Gateway Using the address-switch nodeUsing the rule-switch node 201 202 Regular Expression ReferenceOverview Common Regular Expressions Matches 0 or more repetitions of the previous match 203 Pattern Variable Reference VCS Configuration Protocols H.323 204VCS Port Reference VCS Ports XConfiguration Traversal Server Stun Relay Port XConfiguration SIP TCP PortXConfiguration SIP TLS Port XConfiguration H323 Gatekeeper CallSignaling PortRange End XConfiguration SIP TCP Outbound Port Start XConfiguration SIP TCP Outbound Port EndXConfiguration Traversal Media Port Start 206 DNS Configuration 207Overview Microsoft DNS Server Verifying the SRV Record Ldap Configuration Downloading the Ldap schemas208 About the Ldap Databases 209 Adding H.350 ObjectsSecuring with TLS Create the Organizational Hierarchy 210 Include /etc/openldap/schemas/sipidentity.ldifOpenLDAP # MeetingRoom1 endpoint 211Slapadd -l ldif file Command Reference xConfiguration 212 213 Example Configuration Applications Presence Server Mode On 214 215 Example xConfiguration Bandwidth Downspeed PerCall Mode On Example xConfiguration Bandwidth Downspeed Total Mode OnExample xConfiguration Bandwidth Link 1 Node1 Name HQ 216 Example xConfiguration Error Reports Mode Off Example xConfiguration Bandwidth Pipe 1 Name 512Kb Asdl217 Example xConfiguration Ethernet 1 IP V4 Address Example xConfiguration Ethernet 1 IP V4 SubnetMaskExample xConfiguration Ethernet 1 Speed Auto Example xConfiguration ExternalManager Address Example xConfiguration H323 Gatekeeper TimeToLive Example xConfiguration H323 Gatekeeper CallTimeToLive219 220 221 222 Example xConfiguration Policy UserPolicy Mode Local 223 Example Configuration SIP Loop Detect Mode On Example xConfiguration Registration RestrictionPolicy None224 225 226 Example xConfiguration SystemUnit Name Oslo HQ VCS Example xConfiguration SystemUnit Password password123Example xConfiguration TimeZone Name GMT Example xConfiguration Transform 1 Pattern Behavior Replace 228 Example xConfiguration Traversal Server Stun Discovery Port Example xConfiguration Traversal Server Stun Relay Mode On229 Example Traversal Server Stun Relay Port 230 Example xConfiguration Zones LocalZone Match 1..5 Priority 231 232 233 234 Example xConfiguration Zones Zone 1 H323 Mode On 235 Example xConfiguration Zones Zone 1 HopCount 236 Example xConfiguration Zones Zone 1 Match 1 Priority Example xConfiguration Zones Zone 1 Name UK Sales OfficeExample xConfiguration Zones Zone 1 Neighbor H323 Port 237 Example xConfiguration Zones Zone 1 Neighbor SIP Port Example xConfiguration Zones Zone 1 Neighbor Peer 1 Address238 Example xConfiguration Zones Zone 1 SIP Mode On 239 Example xConfiguration Zones Zone 3 TraversalServer SIP Port 240 Example xConfiguration Zones Zone 1 Type Neighbor 241 Command Reference xCommand 242 Example xCommand AdminAccountDelete AdminAccountId Example xCommand AllowListDelete AllowListIdExample xCommand boot 243 244 Example xCommand CredentialDelete CredentialId Example xCommand DefaultLinksAddExample xCommand DefaultValuesSet Level Example xCommand DenyListDelete DenyListId Example xCommand DomainAdd DomainName example.com Example xCommand DomainDelete DomainIdExample xCommand FeedbackDeregister ID 246 247 Example xCommand LinkDelete LinkId 248 Example xCommand OptionKeyDelete OptionKeyId Example xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD249 Example xCommand RouteDelete RouteId Example xCommand PipeDelete PipeId250 Example xCommand SubZoneDelete SubZoneId2 251 Example xCommand ZoneDelete ZoneId Example xCommand TransformDelete TransformId252 Example xCommand ZoneList Alias john.smith@example.com 253 Command Reference xStatus 254 255 SystemUnit 256 Ethernet 257 NTP 258 Calls 259 260 Registrations 261 Zones 262 263 264 Links 265 Alternates 266 SIP 267 Stun 268 269 270 Bibliography 271 Glossary 272 Fqdn 273 Term Definition Local VCS 274 RTP 275 VCS 276 Contact Information