Appendices | TANDBERG D14049.04 guide

Grey Headline (continued)

What’s in this Manual?

TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE

Password Encryption	192
Overview	192
Web Interface	192
Command Line Interface	192
Maximum length of Passwords	192
Appendices
CPL Reference	194
Overview of CPL on the VCS	194
address-switch	194
Overview	194
address	194
field	195
subfield	196
otherwise	196
not-present	196
location	197
rule-switch	197
proxy	197
reject	197
Unsupported CPL Elements	197
CPL Examples	198
Call Screening of Authenticated Users	198
Call Screening Based on Alias	198
Call Screening Based on Domain	199
Change of Domain Name	199
Allow Calls from Locally Registered Endpoints Only...	200
Block Calls from Default Zone and Default Subzone.. 200
Restricting Access to a Local Gateway	201
Using the address-switch node	201
Using the rule-switch node	201

Regular Expression Reference	202		...................................Command Reference - xConfiguration	212
Overview	202		Command Reference - xCommand	242
Common Regular Expressions	202		Command Reference - xStatus	254
Pattern Variable Reference	203		Bibliography	270
Overview	203		Glossary	271
Valid Variable Strings	203		Contact Information	276
VCS Port Reference	204
Overview	204
VCS Ports	204
DNS Configuration	207
Overview	207
Verifying the SRV Record	207
Microsoft DNS Server	207
BIND 8 & 9	207
LDAP Configuration	208
About the LDAP Databases	208
Downloading the LDAP schemas	208
Microsoft Active Directory	208
Prerequisites	208
Installing the H.350 Schemas	208
Adding H.350 Objects	209
Create the Organizational Hierarchy	209
Add the H.350 Objects	209
Securing with TLS	209
OpenLDAP	210
Prerequisites	210
Installing the H.350 Schemas	210
Adding H.350 Objects	211
Create the Organizational Hierarchy	211
Add the H.350 Objects	211
Securing with TLS	211

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Applications

Maintenance

Appendices

Status

Configuration

Configuration

Neighbors

Processing

Control

Traversal

D14049.04

9

JULY 2008

Image 9

TANDBERG D14049.04 manual Appendices

Contents

Guide Preamble What’s in this Manual?Introduction Getting Started DNS Overview and Status NTP VCS Configuration Call Processing Zones and Neighbors Bandwidth Control 151 Applications Maintenance Appendices Copyright 2008, Tandberg Legal Notices Safety Instructions and Approvals Safety InstructionsApprovals Environmental Issues TANDBERG’s Environmental PolicyWaste Handling Digital User Guides Environmental Issues Tandberg VCS Overview VCS and the Tandberg Total Solution VCS Base Applications VCS ControlVCS Expressway Standard Features Optional Features Dual Network InterfacesUser Policy FindMe What’s New in this Version? Using this Administrator Guide Administrator GuideCommand Line Interface Typographical conventions Getting Started Installation Site Preparations InstallationGeneral Installation Precautions Connecting the Cables Powering on the VCS Initial Configuration via Serial Cable Initial Configuration Initial Configuration via Front Panel UP keyDown key Overview System Administrator Access Select Administrator Login Using the Web InterfaceWeb Interface Supported Browsers General page features Using the Command Line Interface CLI Command Line Interface Supported CharactersTypes of Commands How Command are Shown in this Guide Overview and Status Viewing the Overview Understanding the Overview Overview System Information Ethernet Status System Ethernet MAC addressSpeed Viewing the IP Status Understanding the IP Status IP Status Resource Usage Viewing the Resource Usage Understanding the Resource UsageStatus System Resource Usage Traversal calls Viewing the Registrations Understanding the Registrations Registrations Reason Registration HistoryDuration End Time Presence Viewing the Presence Status PagesPublishers Presentities Subscribers Viewing the Calls Understanding the Calls Calls Call History Viewing the Call History Understanding the Call HistoryStatus Call History Filter Viewing the Search History Understanding the Search History Search HistoryAbout Searches Status Search History Viewing the Local Zone Understanding the Local Zone Local Zone Zones Viewing the Zones Understanding the ZonesStatus Zones Links Viewing the Links Understanding the LinksStatus Links Viewing the Pipes PipesUnderstanding the Pipes Status Pipes Viewing the Stun Relays Understanding the Stun Relays Stun Relays Applications Viewing the Applications Understanding the ApplicationsStatus Applications Status Warnings Viewing the Warnings Understanding the Warnings Viewing the Event Log Understanding the Event Log Event LogEvent Log Color Coding Event Log Levels Event Log Format Interpreting the Event Log Event Message Details Field Events and Levels Message Rejected Message ReceivedMessage Sent Registration Accepted System Restore error System Backup errorTLS Negotiation Error User session Login failure Viewing the Configuration Log Configuration LogUnderstanding the Configuration Log Types of Configuration Events System Configuration Overview Configuration System AdministrationAbout Administrator Access settings About the System Name XConfiguration Ethernet System Configuration EthernetAbout Ethernet Speed Ethernet speed XConfiguration IP XConfiguration IPProtocol Overview IP ConfigurationXConfiguration IP Route XCommand RouteAdd About IPv4 to IPv6 Gatewaying About LAN Configuration Overview LAN ConfigurationAbout Dual Network Interfaces IPv4 subnet mask XConfiguration IP DNS About DNS ServersAbout the DNS Domain Name XConfiguration NTP Address XConfiguration TimeZone Name System Configuration NTPAbout the NTP Server About the Time Zone About Snmp XConfiguration Snmp External Manager XConfiguration ExternalManagerAbout the External Manager Address About Logging LoggingAbout Remote Logging Remote Logging XConfiguration Log Level Setting the Event Log LevelLog Levels About Event Log Levels VCS Configuration Overview Endpoint Registration 323 XConfiguration H323 Configuring H.323 SIP Overview Using the VCS as a SIP RegistrarAbout SIP on the VCS SIP Registration Expiry Using the VCS as a SIP Proxy Server Using the VCS as a SIP Presence ServerSIP protocols and ports XConfiguration SIP Configuring SIP Registrations, Protocols and Ports VCS Configuration Protocols SIP Domains Configuring SIP DomainsCancel View/Edit XConfiguration Interworking Mode Configuring InterworkingSave SIP interworking mode Interworking Registration Control MCU, Gateway and Content Server RegistrationRegistration Overview Endpoint Registration 323 Finding a VCS with which to RegisterPreventing automatic registrations H323 Gatekeeper AutoDiscovery Authentication Mode AuthenticationConfiguring Authentication Authentication for Local Registrations About External Registration Credentials Configuring External Registration Credentials Authentication Databases Alias Origin SettingAuthentication using an Ldap Server XConfiguration Ldap XConfiguration Authentication Ldap Configuring Ldap Server settings Configuring the Local Database Authentication using a Local Database Registering Aliases Attempts to Register using an Existing AliasAbout Alias Registration Alias Registration About Allow and Deny Lists Allow and Deny ListsActivating use of Allow or Deny Lists Removing existing registrations Managing Entries in the Allow List XCommand AllowListAdd XConfigurationAllowList Registration XCommand DenyListAdd XConfigurationDenyList Registration VCS Configuration Registration Deny ListManaging Entries in the Deny List Add Deny List Pattern Zones and Neighbors Example Network Diagram IntroductionAbout your Video Communications Network Local Zone and Subzones Overview Configuring the Local Zone and its SubzonesBandwidth Management Local Zone Matches VCS Configuration Local Zone Traversal Subzone Configuring the Traversal Subzone PortsTraversal Subzone What are traversal calls? Neighbor Zone About Zones Traversal Client Zone Traversal Server Zone XCommand DefaultLinksAdd Enum Zone DNS Zone Default Zone VCS Configuration Zones Adding Zones Configuring ZonesXCommand ZoneAdd XConfiguration Zones Zone Configuring Zones All Types Hop countMatch1 Match5 Configuring Neighbor Zones Configuring Traversal Client Zones Authentication usernameRetry interval Configuring Traversal Server Zones DNS suffix Configuring Enum Zones Configuring DNS Zones Clustering, Peers and Alternates About ClusteringCluster Subzone DNS Configuration Administration Accounts IP configurationPrerequisites System Name Registrations Backup and RestoreSIP Registrations Upgrading to Clustering and FindMe Viewing Peers ConfigurationClustering and Presence Enabling the Replication of FindMe Information 100 Neighboring the Local VCS to a ClusterPeer 1...Peer 6 address Dial Plans 101 Call Processing 102 Call Processing Diagram 103Search Process Dialing by Address Types 104Dialing by IP Address Dialing by H.323 or SIP URI Dialing by Enum XConfiguration Zones Zone 1..200 HopCount About Hop Counts Configuring Hop Counts105 Hop Counts Searches and Transforms 106Overview of Searches and Transforms Pre-Search Transforms Configuring Pre-Search Transforms XConfiguration Transform107 Zone Searching and Transforming 108 Default Settings Configuring Zone Searches and Transforms109 Local Zone Examples 110Combining Match Types and Priorities Never Query a Zone Filter Queries to a Zone Without Transforming 111 Query a Zone for Original and Transformed Alias 112 Query a Zone for Two or More Transformed Aliases 113 Authentication Mode On About Call Policy Administrator Policy and AuthenticationAuthentication Mode Off 114 Enabling the use of Administrator Policy Administrator PolicyVCS Configuration Call Policy Administrator Policy Mode 116 Configuring Administrator Policy via the Web Interface 117 Uploading a CPL ScriptAbout CPL XSD files 118 URI DialingH323 119 Configuring Matches for DNS ZonesURI Dialing for Outgoing Calls Process XCommand ZoneAdd XConfiguration Zones Zone Adding and Configuring DNS Zones120 Advanced Configuring DNS Servers XConfiguration IP DNS Server121 URI Dialing for Incoming Calls 122 Recommended Configuration Example DNS Record Configuration123 URI Dialing and Firewall Traversal 124 Enum DialingOverview Process Enabling Enum Dialing Enum Dialing for Outgoing Calls 125Example 7.6.5.4.3.2.1.4.4 Configuring Transforms for Enum Zones Configuring Matches for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix 126 Configuring Enum Zones 127Click Create Zone 128 129 Configuring DNS Naptr RecordsEnum Dialing for Incoming Calls About DNS Domains for Enum XConfiguration Call Services Recommended Configuration for Firewall Traversal130 Unregistered Endpoints XConfiguration Call Services Fallback Alias Overview Configuration Example Usage131 Fallback Alias 132 Call IDs, Serial Numbers and TagsIdentifying a Particular Call Disconnecting a Call via the Web Interface Disconnecting CallsIssues when Disconnecting SIP Calls 133 Bandwidth Control 134 135 Bandwidth Control OverviewBandwidth Control on the VCS Example Network Deployment 136 About the Default SubzoneSubzones Specifying the Subzone IP Addresses Subzone Links XCommand SubZoneAdd 137Creating a Subzone Configuring a Subzone XConfiguration Zones LocalZone SubZone138 Applying Bandwidth Limitations to Subzones 139Types of Limitations How Different Bandwidth Limitations are Managed XCommand LinkAdd Default Links140 About Links Creating Links XConfiguration Bandwidth Link 141Editing Links About Default Links Default LinksPre-Configured Links 142 XCommand PipeAdd 143About Pipes Creating Pipes 144 XConfiguration Bandwidth PipeEditing Pipes Editing an Existing Pipe Applying Pipes to Links 145One Pipe, One Link One Pipe, Two or More Links About the Default Call Bandwidth Default Bandwidth and DownspeedingConfiguring Default Call Bandwidth and Downspeeding 146 147 Bandwidth Control ExamplesExample Without a Firewall VCS Control Subzone Configuration VCS Expressway Subzone Configuration148 Example With a Firewall Firewall Traversal 149 Firewall Traversal Overview 150About Expressway VCS as a Firewall Traversal Client How does it work? Quick Guide to VCS Traversal Client Server Configuration 151VCS Expressway Server Firewall Traversal Protocols and Ports 152Overview Expressway Process Firewall Traversal Protocols SIP Firewall Traversal Protocols 153 Call signalingMedia SIP Ports Authentication and NTP Firewall Traversal and AuthenticationConfiguration Zones Edit Zone, in the Configuration section 154 155 Other Issues 156 Configuring the VCS as a Traversal ClientAdding a New Traversal Client Zone TraversalClient Create Zone 157 Configuring a Traversal Client Zone 158 Configuring the VCS as a Traversal ServerAdding a New Traversal Server Zone TraversalServer Create Zone Client authentication username Configuring a Traversal Server ZoneDemux mode 159 Configuring Traversal for Endpoints XConfiguration Zones LocalZone Traversal H323160 161 Configuring Traversal Server Ports 162 Stun Services 163 Configuring Stun Services 164 FindMe User Policy 165 XConfiguration Policy UserPolicy Configuring User Policy Manager166 Enabling FindMe on the VCS 167 Managing FindMe User AccountsAbout User Accounts Creating a New User Account Changing a User Password Viewing Existing User Account Settings168 169 Deleting a User AccountAre you sure...? Accessing the FindMe Configuration Using TANDBERG’s FindMe170 About your FindMe User Account 171 Configuring your FindMe User Account Overview Presence Server 172 Presence User Agent PUA 173Aggregation of Presence Information Registration refresh period Enabled Enabling and Disabling Presence ServicesDisabled 174 Viewing Presence Status 175Publishers Presentities 176 Maintenance Installing and Restarting Overview Upgrading Using SCP/PSCP177 Upgrading Software Upgrading via the Web Interface 178 Software successfully upgraded Software upgrade in progress179 Restart system Downgrade Procedure Impact on features introduced 180Downgrading Software 181 XConfiguration Option 1..64 KeyOption Keys Overview Adding Options via the CLI 182 Maintenance Option KeysAdding Options via the Web Interface Add option key 183 SecurityOverview Enabling Security Administration Accounts Adding an Administration Account184 Editing an Administration Account Account Disabled This account can not be used185 Overview Creating a Backup of your VCS Configuration Backup and Restore186 Limitations 187 Restoring a Previous Backup 188 Error ReportsSystem Snapshot Overview Creating a System Snapshot XCommand Boot Maintenance Restart189 Restarting 190 Maintenance ShutdownShutting Down Overview Shutting Down Overview DefaultValuesSet Level Restoring Default ConfigurationXCommand DefaultValuesSet Level 3 must be 191 Overview Maximum length of Passwords Password EncryptionCommand Line Interface 192 Appendices 193 194 Address-switchCPL Reference Overview of CPL on the VCS Field 195 196 SubfieldOtherwise Not-present 197 Rule-switchLocation Reject 198 Call Screening of Authenticated UsersCPL Examples Call Screening Based on Alias Call Screening Based on Domain 199Change of Domain Name Dont accept calls from this source Address Address is=DefaultSubZone Block Calls from Default Zone and Default Subzone200 Allow Calls from Locally Registered Endpoints Only Using the address-switch node Restricting Access to a Local GatewayUsing the rule-switch node 201 Regular Expression Reference 202Overview Common Regular Expressions Matches 0 or more repetitions of the previous match Pattern Variable Reference 203 204 VCS Configuration Protocols H.323VCS Port Reference VCS Ports XConfiguration SIP TCP Port XConfiguration Traversal Server Stun Relay PortXConfiguration SIP TLS Port XConfiguration H323 Gatekeeper CallSignaling PortRange End XConfiguration SIP TCP Outbound Port End XConfiguration SIP TCP Outbound Port StartXConfiguration Traversal Media Port Start 206 207 DNS ConfigurationOverview Microsoft DNS Server Verifying the SRV Record Downloading the Ldap schemas Ldap Configuration208 About the Ldap Databases Adding H.350 Objects 209Securing with TLS Create the Organizational Hierarchy Include /etc/openldap/schemas/sipidentity.ldif 210OpenLDAP 211 # MeetingRoom1 endpointSlapadd -l ldif file 212 Command Reference xConfiguration 213 214 Example Configuration Applications Presence Server Mode On 215 Example xConfiguration Bandwidth Downspeed Total Mode On Example xConfiguration Bandwidth Downspeed PerCall Mode OnExample xConfiguration Bandwidth Link 1 Node1 Name HQ 216 Example xConfiguration Bandwidth Pipe 1 Name 512Kb Asdl Example xConfiguration Error Reports Mode Off217 Example xConfiguration Ethernet 1 IP V4 SubnetMask Example xConfiguration Ethernet 1 IP V4 AddressExample xConfiguration Ethernet 1 Speed Auto Example xConfiguration ExternalManager Address Example xConfiguration H323 Gatekeeper CallTimeToLive Example xConfiguration H323 Gatekeeper TimeToLive219 220 221 222 223 Example xConfiguration Policy UserPolicy Mode Local Example xConfiguration Registration RestrictionPolicy None Example Configuration SIP Loop Detect Mode On224 225 226 Example xConfiguration SystemUnit Password password123 Example xConfiguration SystemUnit Name Oslo HQ VCSExample xConfiguration TimeZone Name GMT Example xConfiguration Transform 1 Pattern Behavior Replace 228 Example xConfiguration Traversal Server Stun Relay Mode On Example xConfiguration Traversal Server Stun Discovery Port229 Example Traversal Server Stun Relay Port 230 231 Example xConfiguration Zones LocalZone Match 1..5 Priority 232 233 234 235 Example xConfiguration Zones Zone 1 H323 Mode On 236 Example xConfiguration Zones Zone 1 HopCount Example xConfiguration Zones Zone 1 Name UK Sales Office Example xConfiguration Zones Zone 1 Match 1 PriorityExample xConfiguration Zones Zone 1 Neighbor H323 Port 237 Example xConfiguration Zones Zone 1 Neighbor Peer 1 Address Example xConfiguration Zones Zone 1 Neighbor SIP Port238 239 Example xConfiguration Zones Zone 1 SIP Mode On 240 Example xConfiguration Zones Zone 3 TraversalServer SIP Port 241 Example xConfiguration Zones Zone 1 Type Neighbor 242 Command Reference xCommand Example xCommand AllowListDelete AllowListId Example xCommand AdminAccountDelete AdminAccountIdExample xCommand boot 243 244 Example xCommand DefaultLinksAdd Example xCommand CredentialDelete CredentialIdExample xCommand DefaultValuesSet Level Example xCommand DenyListDelete DenyListId Example xCommand DomainDelete DomainId Example xCommand DomainAdd DomainName example.comExample xCommand FeedbackDeregister ID 246 247 248 Example xCommand LinkDelete LinkId Example xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD Example xCommand OptionKeyDelete OptionKeyId249 Example xCommand PipeDelete PipeId Example xCommand RouteDelete RouteId250 251 Example xCommand SubZoneDelete SubZoneId2 Example xCommand TransformDelete TransformId Example xCommand ZoneDelete ZoneId252 253 Example xCommand ZoneList Alias john.smith@example.com 254 Command Reference xStatus SystemUnit 255 Ethernet 256 NTP 257 Calls 258 259 Registrations 260 Zones 261 262 263 Links 264 Alternates 265 SIP 266 Stun 267 268 269 Bibliography 270 Glossary 271 Fqdn 272 Term Definition Local VCS 273 RTP 274 VCS 275 Contact Information 276