Manuals / TANDBERG / Photography / Security Camera

TANDBERG Security Camera manual

Models: Security Camera

1 247

Download 247 pages 11.75 Kb

Page 145

Image 145

Grey Headline (continued)

TANDBERG VIDEO COMMUNICATIONS SERVER

ADMINISTRATOR GUIDE

Firewall Traversal

This section describes how to configure your VCS Control and VCS Expressway in order to traverse firewalls. It also describes how to configure the additional firewall traversal server functions of a VCS Expressway, including STUN services.

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Maintenance

Appendices

Status

Configuration

Neighbors

Processing

Control

Traversal

D14049.03

145

MAY 2008

Page 145

Image 145

Contents

Guide Preamble What’s in this Manual?Introduction Overview and StatusLAN Call Processing Zones and NeighborsMaintenance Appendices Bandwidth Control Maintenance What’s in this Manual? Copyright 2008, Tandberg Legal NoticesSafety Instructions Safety Instructions and ApprovalsApprovals Waste Handling Digital User Guides Environmental IssuesEnvironmental Issues Overview VCS Base Applications Tandberg VCSVCS Control VCS ExpresswayOptional Features Standard Features What’s New in this Version?Dual Network Interfaces User Policy FindMeUsing this Administrator Guide Administrator GuideCommand Line Interface Typographical conventionsGetting Started Installation Site Preparations InstallationGeneral Installation Precautions Connecting the CablesPowering on the VCS Initial Configuration via Serial Cable Initial ConfigurationUP key Initial Configuration via Front PanelDown key Overview System Administrator AccessSelect Administrator Login Using the Web InterfaceWeb Interface Supported BrowsersGeneral page features Using the Command Line Interface CLI Command Line InterfaceTypes of Commands How Command are Shown in this GuideOverview and Status Viewing the Overview Understanding the Overview OverviewSystem Information Status System Ethernet MAC address EthernetSpeed Viewing the IP Status Understanding the IP Status IP StatusViewing the Resource Usage Understanding the Resource Usage Resource UsageStatus System Resource Usage Traversal calls Viewing the Registrations Understanding the Registrations RegistrationsReason Registration HistoryDuration End TimeViewing the Calls Understanding the Calls CallsViewing the Call History Understanding the Call History Call HistoryStatus Call History Filter Viewing the Search History Understanding the Search History Search HistoryAbout Searches Status Search HistoryViewing the Local Zone Understanding the Local Zone Local ZoneViewing the Zones Understanding the Zones ZonesStatus Zones Viewing the Links Understanding the Links LinksStatus Links Viewing the Pipes PipesUnderstanding the Pipes Status PipesViewing the Stun Relays Understanding the Stun Relays Stun RelaysStatus Warnings Viewing the Warnings Understanding the WarningsViewing the Event Log Understanding the Event Log Event LogEvent Log Color Coding GreenEvent Log Format Interpreting the Event LogMessage Details Field Events Logged at Level TLS Negotiation Error System Configuration ChangedUser session Login failure Policy ChangeMessage Sent Message ReceivedRegistration Refresh Accepted Registration Refresh RequestSystem Configuration Overview Configuration System AdministrationAbout Administrator Access settings About the System NameXConfiguration Ethernet System Configuration EthernetAbout Ethernet Speed Ethernet speedXConfiguration IP XConfiguration IPProtocol Overview IP ConfigurationXConfiguration IP Route XCommand RouteAdd About IPv4 to IPv6 GatewayingAbout LAN Configuration Overview LAN ConfigurationAbout Dual Network Interfaces About DNS Servers XConfiguration IP DNSAbout the DNS Domain Name XConfiguration NTP Address XConfiguration TimeZone Name System Configuration NTPAbout the NTP Server About the Time ZoneAbout Snmp XConfiguration SnmpExternal Manager XConfiguration ExternalManagerAbout the External Manager AddressBacking up Configuration Settings BackupsOverview Remote Logging LoggingAbout Logging About Remote LoggingXConfiguration Log Level Setting the Event Log LevelLog Levels About Event Log LevelsVCS Configuration Overview Endpoint Registration 323XConfiguration H323 Configuring H.323SIP Overview Using the VCS as a SIP RegistrarAbout SIP on the VCS SIP Registration ExpirySIP protocols and ports Using the VCS as a SIP Proxy ServerXConfiguration SIP Configuring SIP Registrations, Protocols and PortsVCS Configuration Protocols SIP Domains Configuring SIP DomainsCancel View/EditXConfiguration Interworking Mode Configuring InterworkingSave SIP interworking mode InterworkingRegistration Control MCU, Gateway and Content Server RegistrationRegistration Overview Endpoint Registration323 Finding a VCS with which to RegisterPreventing automatic registrations H323 Gatekeeper AutoDiscoveryAbout Authentication for Local Registrations AuthenticationConfiguring Authentication for Local Registrations XConfiguration AuthenticationAbout External Registration Credentials Configuring External Registration CredentialsAlias Origin Setting Authentication DatabasesAuthentication using an Ldap Server XConfiguration Ldap XConfiguration Authentication Ldap Configuring Ldap Server settingsConfiguring the Local Database Authentication using a Local DatabaseRegistering Aliases Attempts to Register using an Existing AliasAbout Alias Registration Alias RegistrationAllow and Deny Lists XConfiguration Registration RestrictionPolicyAbout Allow and Deny Lists Activating use of Allow or Deny ListsManaging Entries in the Allow List XCommand AllowListAdd XConfigurationAllowList RegistrationXCommand DenyListAdd XConfigurationDenyList Registration VCS Configuration Registration Deny ListManaging Entries in the Deny List Add Deny List PatternZones and Neighbors Introduction Example Network DiagramAbout your Video Communications Network Configuring the Traversal Subzone Ports Overview Configuring the Local Zone and its SubzonesLocal Zone and Subzones Traversal SubzoneNeighbor Zone About Zones Traversal Client Zone Traversal Server ZoneXCommand DefaultLinksAdd Enum Zone DNS Zone Default ZoneVCS Configuration Zones Adding Zones Configuring ZonesXCommand ZoneAdd XConfiguration Zones ZoneHop count Configuring Zones All TypesMatch1 Match5 SIP port Configuring Neighbor ZonesSIP transport Primary address Alternate 1 to Alternate 5 addressAuthentication username Configuring Traversal Client ZonesRetry interval Primary addressConfiguring Traversal Server Zones Configuring DNS Zones Configuring Enum ZonesDNS suffix VCS Configuration Alternates About Alternates Configuring AlternatesXConfiguration Alternates AlternatesDial Plans Call Processing Search Process Call Processing DiagramDialing by IP Address Dialing by H.323 or SIP URI Dialing by Address TypesDialing by Enum Endpoints registered to a VCS ExpresswayXConfiguration Zones Zone 1..200 HopCount About Hop Counts Configuring Hop CountsHop Counts Authentication Mode On Administrator PolicyAuthentication Mode Off Administrator Policy Mode Enabling the use of Administrator PolicyConfiguring Administrator Policy via the Web Interface About CPL XSD files Uploading a CPL ScriptUser Policy FindMe VCS Configuration Policy User Configuring User Policy ManagerXConfiguration Policy UserPolicy 100Managing FindMe User Accounts 101About User Accounts Creating a New User AccountViewing Existing User Account Settings Changing a User Password102 Deleting a User Account 103Are you sure...? Accessing the FindMe Configuration Using TANDBERG’s FindMe104 About your FindMe User Account105 Configuring your FindMe User AccountSearches and Transforms 106XConfiguration Transform Configuring Local Alias Transforms107 Zone Searching and Transforming 108Default Settings Configuring Zone Searches TransformsXConfiguration Zones Zone 1..200 Match 109Examples 110Combining Match Types and Priorities Never Query a ZoneFilter Queries to a Zone Without Transforming 111Query a Zone for Original and Transformed Alias 112Query a Zone for Two or More Transformed Aliases 113URI Dialing 114H323 115 Configuring Matches for DNS ZonesURI Dialing for Outgoing Calls ProcessXCommand ZoneAdd XConfiguration Zones Zone Adding and Configuring DNS Zones116 Click Create ZoneXConfiguration IP DNS Server Configuring DNS Servers117 URI Dialing for Incoming Calls 118Recommended Configuration Example DNS Record Configuration119 URI Dialing and Firewall TraversalEnum Dialing 120Overview Process Enabling Enum Dialing Enum Dialing for Outgoing Calls 121Prerequisites ExampleConfiguring Transforms for Enum Zones Configuring Matches for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix 122123 Configuring Enum Zones124 125 Configuring DNS Naptr RecordsEnum Dialing for Incoming Calls About DNS Domains for EnumXConfiguration Call Services Recommended Configuration for Firewall Traversal126 Unregistered EndpointsXConfiguration Call Services Fallback Alias Overview Configuration Example Usage127 Fallback Alias128 Disconnecting CallsIdentifying a Particular Call Disconnecting a Call via the CLI Disconnecting a Call via the Web InterfaceIssues when Disconnecting SIP Calls 129Bandwidth Control 130Bandwidth Control Overview 131Bandwidth Control on the VCS Example Network Deployment 132 About the Default SubzoneSubzones Specifying the Subzone IP Addresses Subzone Links133 XCommand SubZoneAddCreating a Subzone XConfiguration Zones LocalZone SubZone Configuring a Subzone134 Applying Bandwidth Limitations to Subzones 135Types of Limitations How Different Bandwidth Limitations are ManagedXCommand LinkAdd Default Links136 About Links Creating Links137 XConfiguration Bandwidth LinkEditing Links About Default Links Default LinksPre-Configured Links 138139 XCommand PipeAddAbout Pipes Creating Pipes 140 XConfiguration Bandwidth PipeEditing Pipes Editing an Existing PipeApplying Pipes to Links 141One Pipe, One Link One Pipe, Two or More LinksAbout the Default Call Bandwidth Default Bandwidth and DownspeedingConfiguring Default Call Bandwidth and Downspeeding 142Bandwidth Control Examples 143Example Without a Firewall VCS Control Subzone Configuration VCS Expressway Subzone Configuration144 Example With a FirewallFirewall Traversal 145Firewall Traversal Overview 146About Expressway VCS as a Firewall Traversal Client How does it work?147 Quick Guide to VCS Traversal Client Server ConfigurationVCS Expressway Server Firewall Traversal Protocols and Ports 148Overview Expressway Process Firewall Traversal Protocols SIP Firewall Traversal Protocols149 Call signalingMedia SIP PortsAuthentication and NTP Firewall Traversal and AuthenticationConfiguration Zones Edit Zone, in the Configuration section 150151 Other Issues152 Configuring the VCS as a Traversal ClientAdding a New Traversal Client Zone TraversalClient Create Zone153 Configuring a Traversal Client ZoneAlternate 1..5 Address 154 Configuring the VCS as a Traversal ServerAdding a New Traversal Server Zone TraversalServer Create ZoneClient authentication username Configuring a Traversal Server ZoneDemux mode 155XConfiguration Zones LocalZone Traversal H323 Configuring Traversal for Endpoints156 157 Configuring Traversal Server Ports158 Stun Services159 Configuring Stun Services160 Maintenance161 Overview Upgrading Using SCP/PSCPUpgrading Software Upgrading via the Web Interface 162163 XConfiguration Option 1..64 KeyOption Keys Overview Adding Options via the CLI164 Maintenance Option KeysAdding Options via the Web Interface Add option keySecurity 165Overview Enabling Security Overview Configuring Administrator Password PasswordsXConfiguration SystemUnitPassword 166167 Error ReportsSystem Snapshot Overview Creating a System Snapshot168 XCommand BootRestarting Overview Restarting the VCS169 Maintenance ShutdownShutting Down Overview Shutting DownOverview DefaultValuesSet Level Restoring Default ConfigurationXCommand DefaultValuesSet Level 3 must be 170Appendices 171172 Address-switchCPL Reference Overview of CPL on the VCSField 173Subfield 174Otherwise Not-present 175 Rule-switchLocation Reject176 Call Screening of Authenticated UsersCPL Examples Call Screening Based on AliasCall Screening Based on Domain 177Change of Domain Name Dont accept calls from this sourceAddress Address is=DefaultSubZone Block Calls from Default Zone and Default Subzone178 Allow Calls from Locally Registered Endpoints OnlyUsing the address-switch node Restricting Access to a Local GatewayUsing the rule-switch node 179Regular Expression Reference 180Overview Common Regular Expressions Matches 0 or more repetitions of the previous matchPattern Variable Reference 181XConfiguration H323 Gatekeeper CallSignaling TCP Port XConfiguration H323 Gatekeeper Registration UDP Port182 VCS Port Reference183 184 XConfiguration Traversal Media Port Start185 DNS ConfigurationOverview Microsoft DNS Server Verifying the SRV RecordDownloading the Ldap schemas Ldap Configuration186 About the Ldap DatabasesAdding H.350 Objects 187Securing with TLS Create the Organizational Hierarchy188 Include /etc/openldap/schemas/sipidentity.ldifOpenLDAP # MeetingRoom1 endpoint 189Slapadd -l ldif file 190 Command Reference xConfiguration191 192 Example xConfiguration Bandwidth Downspeed Total Mode On Example xConfiguration Bandwidth Downspeed PerCall Mode OnExample xConfiguration Bandwidth Link 1 Node1 Name HQ 193Example xConfiguration Error Reports Mode Off Example xConfiguration Bandwidth Pipe 1 Name 512Kb Asdl194 Example xConfiguration Ethernet 1 IP V4 SubnetMask Example xConfiguration Ethernet 1 IP V4 AddressExample xConfiguration Ethernet 1 Speed Auto Example xConfiguration ExternalManager AddressExample xConfiguration H323 Gatekeeper TimeToLive Example xConfiguration H323 Gatekeeper CallTimeToLive196 197 198 199 200 Example xConfiguration Registration RestrictionPolicy None201 202 203 Example xConfiguration Traversal Media Port End Example xConfiguration Transform 1 PriorityExample xConfiguration Traversal Media Port Start Example Traversal Server H323 H46018 CallSignaling PortExample xConfiguration Traversal Server Stun Relay Mode On Example xConfiguration Traversal Server Stun Discovery Port205 Example Traversal Server Stun Relay Port206 207 208 209 Example xConfiguration Zones Zone 1 H323 Mode On210 Example xConfiguration Zones Zone 1 HopCount211 212 CommandHeadline TextReferenceGoes Here- xConfiguration213 Example xConfiguration Zones Zone 3 TraversalServer SIP Port214 Example xConfiguration Zones Zone 1 Type Neighbor215 Command Reference xCommandExample xCommand boot Example xCommand AllowListDelete AllowListId216 Example xCommand DefaultLinksAdd Example xCommand CredentialDelete CredentialId217 Example xCommand DenyListDelete DenyListId Example xCommand DefaultValuesSet LevelExample xCommand DomainAdd DomainName example.com 218Example xCommand FeedbackDeregister ID Example xCommand DomainDelete DomainId219 220 Example xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD Example xCommand LinkDelete LinkId221 Example xCommand PipeDelete PipeId Example xCommand OptionKeyDelete OptionKeyId222 223 Example xCommand TransformDelete TransformId Example xCommand SubZoneDelete SubZoneId2224 Example xCommand ZoneList Alias john.smith@example.com Example xCommand ZoneDelete ZoneId225 226 Command Reference xStatus227 CommandHeadline TextReferenceGoes Here- xStatusEthernet 228NTP 229Calls 230231 Registrations 232Zones 233234 235 236 Links 237Alternates 238H323 239SIP 240Stun 241Bibliography 242Glossary 243Secure Socket Layer Hop count 244PEM 245VCS 246Contact Information 247