157, Configuring Traversal Server Ports | TANDBERG Security Camera

Grey Headline (continued)

Configuring the VCS as a Traversal Server

TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE

Configuring Traversal Server Ports

Overview

The VCS Expressway has specific listening ports used for firewall traversal. Rules must be set on your firewall to allow connections to these ports. In most cases the default ports should be used. However, you have the option to change these ports if necessary.

To configure the VCS Expressway ports:

•VCS Configuration > Expressway > Ports

You will be taken to the Ports page.

•xConfiguration Traversal Server Media Demultiplexing

•xConfigurationH.323 Traversal Server

Media demultiplexing RTP port

Specifies the port on the VCS to be used for demultiplexing RTP media.

Media demultiplexing RTCP port

Specifies the port on the VCS to be used for demultiplexing RTCP media.

H.323 Assent call signaling port

Specifies the port on the VCS to be used for Assent signaling.

H.323 H.460.18 call signaling port

Specifies the port on the VCS to be used for H.460.18 signaling.

Save

Click here to save your settings.

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Maintenance

Appendices

Status

Configuration

Configuration

Neighbors

Processing

Control

Traversal

D14049.03

157

MAY 2008

Image 157

TANDBERG Security Camera manual 157, Configuring Traversal Server Ports

Contents

Guide Preamble What’s in this Manual?Introduction Overview and Status LAN Call Processing Zones and Neighbors Maintenance Appendices Bandwidth Control Maintenance What’s in this Manual? Copyright 2008, Tandberg Legal Notices Safety Instructions Safety Instructions and ApprovalsApprovals Waste Handling Digital User Guides Environmental Issues Environmental Issues Overview VCS Base Applications Tandberg VCSVCS Control VCS Expressway Optional Features Standard Features What’s New in this Version?Dual Network Interfaces User Policy FindMe Using this Administrator Guide Administrator GuideCommand Line Interface Typographical conventions Getting Started Installation Site Preparations InstallationGeneral Installation Precautions Connecting the Cables Powering on the VCS Initial Configuration via Serial Cable Initial Configuration UP key Initial Configuration via Front PanelDown key Overview System Administrator Access Select Administrator Login Using the Web InterfaceWeb Interface Supported Browsers General page features Using the Command Line Interface CLI Command Line InterfaceTypes of Commands How Command are Shown in this Guide Overview and Status Viewing the Overview Understanding the Overview Overview System Information Status System Ethernet MAC address EthernetSpeed Viewing the IP Status Understanding the IP Status IP Status Viewing the Resource Usage Understanding the Resource Usage Resource UsageStatus System Resource Usage Traversal calls Viewing the Registrations Understanding the Registrations Registrations Reason Registration HistoryDuration End Time Viewing the Calls Understanding the Calls Calls Viewing the Call History Understanding the Call History Call HistoryStatus Call History Filter Viewing the Search History Understanding the Search History Search HistoryAbout Searches Status Search History Viewing the Local Zone Understanding the Local Zone Local Zone Viewing the Zones Understanding the Zones ZonesStatus Zones Viewing the Links Understanding the Links LinksStatus Links Viewing the Pipes PipesUnderstanding the Pipes Status Pipes Viewing the Stun Relays Understanding the Stun Relays Stun Relays Status Warnings Viewing the Warnings Understanding the Warnings Viewing the Event Log Understanding the Event Log Event LogEvent Log Color Coding Green Event Log Format Interpreting the Event Log Message Details Field Events Logged at Level TLS Negotiation Error System Configuration ChangedUser session Login failure Policy Change Message Sent Message ReceivedRegistration Refresh Accepted Registration Refresh Request System Configuration Overview Configuration System AdministrationAbout Administrator Access settings About the System Name XConfiguration Ethernet System Configuration EthernetAbout Ethernet Speed Ethernet speed XConfiguration IP XConfiguration IPProtocol Overview IP ConfigurationXConfiguration IP Route XCommand RouteAdd About IPv4 to IPv6 Gatewaying About LAN Configuration Overview LAN ConfigurationAbout Dual Network Interfaces About DNS Servers XConfiguration IP DNSAbout the DNS Domain Name XConfiguration NTP Address XConfiguration TimeZone Name System Configuration NTPAbout the NTP Server About the Time Zone About Snmp XConfiguration Snmp External Manager XConfiguration ExternalManagerAbout the External Manager Address Backing up Configuration Settings Backups Overview Remote Logging LoggingAbout Logging About Remote Logging XConfiguration Log Level Setting the Event Log LevelLog Levels About Event Log Levels VCS Configuration Overview Endpoint Registration 323 XConfiguration H323 Configuring H.323 SIP Overview Using the VCS as a SIP RegistrarAbout SIP on the VCS SIP Registration Expiry SIP protocols and ports Using the VCS as a SIP Proxy Server XConfiguration SIP Configuring SIP Registrations, Protocols and Ports VCS Configuration Protocols SIP Domains Configuring SIP DomainsCancel View/Edit XConfiguration Interworking Mode Configuring InterworkingSave SIP interworking mode Interworking Registration Control MCU, Gateway and Content Server RegistrationRegistration Overview Endpoint Registration 323 Finding a VCS with which to RegisterPreventing automatic registrations H323 Gatekeeper AutoDiscovery About Authentication for Local Registrations AuthenticationConfiguring Authentication for Local Registrations XConfiguration Authentication About External Registration Credentials Configuring External Registration Credentials Alias Origin Setting Authentication DatabasesAuthentication using an Ldap Server XConfiguration Ldap XConfiguration Authentication Ldap Configuring Ldap Server settings Configuring the Local Database Authentication using a Local Database Registering Aliases Attempts to Register using an Existing AliasAbout Alias Registration Alias Registration Allow and Deny Lists XConfiguration Registration RestrictionPolicyAbout Allow and Deny Lists Activating use of Allow or Deny Lists Managing Entries in the Allow List XCommand AllowListAdd XConfigurationAllowList Registration XCommand DenyListAdd XConfigurationDenyList Registration VCS Configuration Registration Deny ListManaging Entries in the Deny List Add Deny List Pattern Zones and Neighbors Introduction Example Network DiagramAbout your Video Communications Network Configuring the Traversal Subzone Ports Overview Configuring the Local Zone and its SubzonesLocal Zone and Subzones Traversal Subzone Neighbor Zone About Zones Traversal Client Zone Traversal Server Zone XCommand DefaultLinksAdd Enum Zone DNS Zone Default Zone VCS Configuration Zones Adding Zones Configuring ZonesXCommand ZoneAdd XConfiguration Zones Zone Hop count Configuring Zones All TypesMatch1 Match5 SIP port Configuring Neighbor ZonesSIP transport Primary address Alternate 1 to Alternate 5 address Authentication username Configuring Traversal Client ZonesRetry interval Primary address Configuring Traversal Server Zones Configuring DNS Zones Configuring Enum ZonesDNS suffix VCS Configuration Alternates About Alternates Configuring AlternatesXConfiguration Alternates Alternates Dial Plans Call Processing Search Process Call Processing Diagram Dialing by IP Address Dialing by H.323 or SIP URI Dialing by Address TypesDialing by Enum Endpoints registered to a VCS Expressway XConfiguration Zones Zone 1..200 HopCount About Hop Counts Configuring Hop CountsHop Counts Authentication Mode On Administrator PolicyAuthentication Mode Off Administrator Policy Mode Enabling the use of Administrator Policy Configuring Administrator Policy via the Web Interface About CPL XSD files Uploading a CPL Script User Policy FindMe VCS Configuration Policy User Configuring User Policy ManagerXConfiguration Policy UserPolicy 100 Managing FindMe User Accounts 101About User Accounts Creating a New User Account Viewing Existing User Account Settings Changing a User Password102 Deleting a User Account 103Are you sure...? Accessing the FindMe Configuration Using TANDBERG’s FindMe104 About your FindMe User Account 105 Configuring your FindMe User Account Searches and Transforms 106 XConfiguration Transform Configuring Local Alias Transforms107 Zone Searching and Transforming 108 Default Settings Configuring Zone Searches TransformsXConfiguration Zones Zone 1..200 Match 109 Examples 110Combining Match Types and Priorities Never Query a Zone Filter Queries to a Zone Without Transforming 111 Query a Zone for Original and Transformed Alias 112 Query a Zone for Two or More Transformed Aliases 113 URI Dialing 114H323 115 Configuring Matches for DNS ZonesURI Dialing for Outgoing Calls Process XCommand ZoneAdd XConfiguration Zones Zone Adding and Configuring DNS Zones116 Click Create Zone XConfiguration IP DNS Server Configuring DNS Servers117 URI Dialing for Incoming Calls 118 Recommended Configuration Example DNS Record Configuration119 URI Dialing and Firewall Traversal Enum Dialing 120Overview Process Enabling Enum Dialing Enum Dialing for Outgoing Calls 121Prerequisites Example Configuring Transforms for Enum Zones Configuring Matches for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix 122 123 Configuring Enum Zones 124 125 Configuring DNS Naptr RecordsEnum Dialing for Incoming Calls About DNS Domains for Enum XConfiguration Call Services Recommended Configuration for Firewall Traversal126 Unregistered Endpoints XConfiguration Call Services Fallback Alias Overview Configuration Example Usage127 Fallback Alias 128 Disconnecting CallsIdentifying a Particular Call Disconnecting a Call via the CLI Disconnecting a Call via the Web InterfaceIssues when Disconnecting SIP Calls 129 Bandwidth Control 130 Bandwidth Control Overview 131Bandwidth Control on the VCS Example Network Deployment 132 About the Default SubzoneSubzones Specifying the Subzone IP Addresses Subzone Links 133 XCommand SubZoneAddCreating a Subzone XConfiguration Zones LocalZone SubZone Configuring a Subzone134 Applying Bandwidth Limitations to Subzones 135Types of Limitations How Different Bandwidth Limitations are Managed XCommand LinkAdd Default Links136 About Links Creating Links 137 XConfiguration Bandwidth LinkEditing Links About Default Links Default LinksPre-Configured Links 138 139 XCommand PipeAddAbout Pipes Creating Pipes 140 XConfiguration Bandwidth PipeEditing Pipes Editing an Existing Pipe Applying Pipes to Links 141One Pipe, One Link One Pipe, Two or More Links About the Default Call Bandwidth Default Bandwidth and DownspeedingConfiguring Default Call Bandwidth and Downspeeding 142 Bandwidth Control Examples 143Example Without a Firewall VCS Control Subzone Configuration VCS Expressway Subzone Configuration144 Example With a Firewall Firewall Traversal 145 Firewall Traversal Overview 146About Expressway VCS as a Firewall Traversal Client How does it work? 147 Quick Guide to VCS Traversal Client Server ConfigurationVCS Expressway Server Firewall Traversal Protocols and Ports 148Overview Expressway Process Firewall Traversal Protocols SIP Firewall Traversal Protocols 149 Call signalingMedia SIP Ports Authentication and NTP Firewall Traversal and AuthenticationConfiguration Zones Edit Zone, in the Configuration section 150 151 Other Issues 152 Configuring the VCS as a Traversal ClientAdding a New Traversal Client Zone TraversalClient Create Zone 153 Configuring a Traversal Client ZoneAlternate 1..5 Address 154 Configuring the VCS as a Traversal ServerAdding a New Traversal Server Zone TraversalServer Create Zone Client authentication username Configuring a Traversal Server ZoneDemux mode 155 XConfiguration Zones LocalZone Traversal H323 Configuring Traversal for Endpoints156 157 Configuring Traversal Server Ports 158 Stun Services 159 Configuring Stun Services 160 Maintenance 161 Overview Upgrading Using SCP/PSCPUpgrading Software Upgrading via the Web Interface 162 163 XConfiguration Option 1..64 KeyOption Keys Overview Adding Options via the CLI 164 Maintenance Option KeysAdding Options via the Web Interface Add option key Security 165Overview Enabling Security Overview Configuring Administrator Password PasswordsXConfiguration SystemUnitPassword 166 167 Error ReportsSystem Snapshot Overview Creating a System Snapshot 168 XCommand BootRestarting Overview Restarting the VCS 169 Maintenance ShutdownShutting Down Overview Shutting Down Overview DefaultValuesSet Level Restoring Default ConfigurationXCommand DefaultValuesSet Level 3 must be 170 Appendices 171 172 Address-switchCPL Reference Overview of CPL on the VCS Field 173 Subfield 174Otherwise Not-present 175 Rule-switchLocation Reject 176 Call Screening of Authenticated UsersCPL Examples Call Screening Based on Alias Call Screening Based on Domain 177Change of Domain Name Dont accept calls from this source Address Address is=DefaultSubZone Block Calls from Default Zone and Default Subzone178 Allow Calls from Locally Registered Endpoints Only Using the address-switch node Restricting Access to a Local GatewayUsing the rule-switch node 179 Regular Expression Reference 180Overview Common Regular Expressions Matches 0 or more repetitions of the previous match Pattern Variable Reference 181 XConfiguration H323 Gatekeeper CallSignaling TCP Port XConfiguration H323 Gatekeeper Registration UDP Port182 VCS Port Reference 183 184 XConfiguration Traversal Media Port Start 185 DNS ConfigurationOverview Microsoft DNS Server Verifying the SRV Record Downloading the Ldap schemas Ldap Configuration186 About the Ldap Databases Adding H.350 Objects 187Securing with TLS Create the Organizational Hierarchy 188 Include /etc/openldap/schemas/sipidentity.ldifOpenLDAP # MeetingRoom1 endpoint 189Slapadd -l ldif file 190 Command Reference xConfiguration 191 192 Example xConfiguration Bandwidth Downspeed Total Mode On Example xConfiguration Bandwidth Downspeed PerCall Mode OnExample xConfiguration Bandwidth Link 1 Node1 Name HQ 193 Example xConfiguration Error Reports Mode Off Example xConfiguration Bandwidth Pipe 1 Name 512Kb Asdl194 Example xConfiguration Ethernet 1 IP V4 SubnetMask Example xConfiguration Ethernet 1 IP V4 AddressExample xConfiguration Ethernet 1 Speed Auto Example xConfiguration ExternalManager Address Example xConfiguration H323 Gatekeeper TimeToLive Example xConfiguration H323 Gatekeeper CallTimeToLive196 197 198 199 200 Example xConfiguration Registration RestrictionPolicy None 201 202 203 Example xConfiguration Traversal Media Port End Example xConfiguration Transform 1 PriorityExample xConfiguration Traversal Media Port Start Example Traversal Server H323 H46018 CallSignaling Port Example xConfiguration Traversal Server Stun Relay Mode On Example xConfiguration Traversal Server Stun Discovery Port205 Example Traversal Server Stun Relay Port 206 207 208 209 Example xConfiguration Zones Zone 1 H323 Mode On 210 Example xConfiguration Zones Zone 1 HopCount 211 212 CommandHeadline TextReferenceGoes Here- xConfiguration 213 Example xConfiguration Zones Zone 3 TraversalServer SIP Port 214 Example xConfiguration Zones Zone 1 Type Neighbor 215 Command Reference xCommand Example xCommand boot Example xCommand AllowListDelete AllowListId216 Example xCommand DefaultLinksAdd Example xCommand CredentialDelete CredentialId217 Example xCommand DenyListDelete DenyListId Example xCommand DefaultValuesSet LevelExample xCommand DomainAdd DomainName example.com 218 Example xCommand FeedbackDeregister ID Example xCommand DomainDelete DomainId219 220 Example xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD Example xCommand LinkDelete LinkId221 Example xCommand PipeDelete PipeId Example xCommand OptionKeyDelete OptionKeyId222 223 Example xCommand TransformDelete TransformId Example xCommand SubZoneDelete SubZoneId2224 Example xCommand ZoneList Alias john.smith@example.com Example xCommand ZoneDelete ZoneId225 226 Command Reference xStatus 227 CommandHeadline TextReferenceGoes Here- xStatus Ethernet 228 NTP 229 Calls 230 231 Registrations 232 Zones 233 234 235 236 Links 237 Alternates 238 H323 239 SIP 240 Stun 241 Bibliography 242 Glossary 243 Secure Socket Layer Hop count 244 PEM 245 VCS 246 Contact Information 247