159, Configuring Stun Services | TANDBERG Security Camera guide

Grey Headline (continued)

Configuring the VCS as a Traversal Server

TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE

STUN Services

Configuring STUN Services

To configure the STUN Binding Discovery and STUN Relay services:

•VCS Configuration > Expressway > STUN.

You will be taken to the STUN page.

•xConfiguration Traversal Server

STUN

STUN discovery mode

Determines whether the VCS will offer STUN Discovery services to traversal clients.

STUN discovery port

Specifies the port on the VCS on which it will be listening for STUN Discovery requests.

STUN relay mode

Determines whether the VCS will offer STUN Relay services to traversal clients.

STUN relay port

Specifies the port on the VCS on which it will be listening for STUN relay requests.

STUN relay media port start

Specifies the lower port in the range to be used for STUN media relay.

STUN relay media port end

Specifies the upper port in the range to be used for STUN media relay.

Save

Click here to save your changes.

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Maintenance

Appendices

Status

Configuration

Configuration

Neighbors

Processing

Control

Traversal

D14049.03

159

MAY 2008

Image 159

TANDBERG Security Camera manual 159, Configuring Stun Services

Contents

Guide Overview and Status What’s in this Manual?Preamble Introduction LAN Call Processing Zones and Neighbors Maintenance Appendices Bandwidth Control Maintenance What’s in this Manual? Copyright 2008, Tandberg Legal Notices Safety Instructions and Approvals Safety InstructionsApprovals Waste Handling Digital User Guides Environmental Issues Environmental Issues VCS Expressway Tandberg VCSOverview VCS Base Applications VCS Control User Policy FindMe Standard Features What’s New in this Version?Optional Features Dual Network Interfaces Typographical conventions Administrator GuideUsing this Administrator Guide Command Line Interface Getting Started Connecting the Cables InstallationInstallation Site Preparations General Installation Precautions Powering on the VCS Initial Configuration via Serial Cable Initial Configuration Initial Configuration via Front Panel UP keyDown key Overview System Administrator Access Supported Browsers Using the Web InterfaceSelect Administrator Login Web Interface General page features How Command are Shown in this Guide Command Line InterfaceUsing the Command Line Interface CLI Types of Commands Overview and Status Viewing the Overview Understanding the Overview Overview System Information Ethernet Status System Ethernet MAC addressSpeed Viewing the IP Status Understanding the IP Status IP Status Resource Usage Viewing the Resource Usage Understanding the Resource UsageStatus System Resource Usage Traversal calls Viewing the Registrations Understanding the Registrations Registrations End Time Registration HistoryReason Duration Viewing the Calls Understanding the Calls Calls Call History Viewing the Call History Understanding the Call HistoryStatus Call History Filter Status Search History Search HistoryViewing the Search History Understanding the Search History About Searches Viewing the Local Zone Understanding the Local Zone Local Zone Zones Viewing the Zones Understanding the ZonesStatus Zones Links Viewing the Links Understanding the LinksStatus Links Status Pipes PipesViewing the Pipes Understanding the Pipes Viewing the Stun Relays Understanding the Stun Relays Stun Relays Status Warnings Viewing the Warnings Understanding the Warnings Green Event LogViewing the Event Log Understanding the Event Log Event Log Color Coding Event Log Format Interpreting the Event Log Message Details Field Events Logged at Level Policy Change System Configuration ChangedTLS Negotiation Error User session Login failure Registration Refresh Request Message ReceivedMessage Sent Registration Refresh Accepted System Configuration About the System Name System AdministrationOverview Configuration About Administrator Access settings Ethernet speed System Configuration EthernetXConfiguration Ethernet About Ethernet Speed About IPv4 to IPv6 Gatewaying Overview IP ConfigurationXConfiguration IP XConfiguration IPProtocol XConfiguration IP Route XCommand RouteAdd Overview LAN Configuration About LAN ConfigurationAbout Dual Network Interfaces XConfiguration IP DNS About DNS ServersAbout the DNS Domain Name About the Time Zone System Configuration NTPXConfiguration NTP Address XConfiguration TimeZone Name About the NTP Server About Snmp XConfiguration Snmp Address XConfiguration ExternalManagerExternal Manager About the External Manager Backing up Configuration Settings Backups About Remote Logging LoggingOverview Remote Logging About Logging About Event Log Levels Setting the Event Log LevelXConfiguration Log Level Log Levels VCS Configuration Overview Endpoint Registration 323 XConfiguration H323 Configuring H.323 SIP Registration Expiry Using the VCS as a SIP RegistrarSIP Overview About SIP on the VCS SIP protocols and ports Using the VCS as a SIP Proxy Server XConfiguration SIP Configuring SIP Registrations, Protocols and Ports View/Edit Configuring SIP DomainsVCS Configuration Protocols SIP Domains Cancel Interworking Configuring InterworkingXConfiguration Interworking Mode Save SIP interworking mode Endpoint Registration MCU, Gateway and Content Server RegistrationRegistration Control Registration Overview H323 Gatekeeper AutoDiscovery Finding a VCS with which to Register323 Preventing automatic registrations XConfiguration Authentication AuthenticationAbout Authentication for Local Registrations Configuring Authentication for Local Registrations About External Registration Credentials Configuring External Registration Credentials Authentication Databases Alias Origin SettingAuthentication using an Ldap Server XConfiguration Ldap XConfiguration Authentication Ldap Configuring Ldap Server settings Configuring the Local Database Authentication using a Local Database Alias Registration Attempts to Register using an Existing AliasRegistering Aliases About Alias Registration Activating use of Allow or Deny Lists XConfiguration Registration RestrictionPolicyAllow and Deny Lists About Allow and Deny Lists Managing Entries in the Allow List XCommand AllowListAdd XConfigurationAllowList Registration Add Deny List Pattern VCS Configuration Registration Deny ListXCommand DenyListAdd XConfigurationDenyList Registration Managing Entries in the Deny List Zones and Neighbors Example Network Diagram IntroductionAbout your Video Communications Network Traversal Subzone Overview Configuring the Local Zone and its SubzonesConfiguring the Traversal Subzone Ports Local Zone and Subzones Neighbor Zone About Zones Traversal Client Zone Traversal Server Zone XCommand DefaultLinksAdd Enum Zone DNS Zone Default Zone XConfiguration Zones Zone Adding Zones Configuring ZonesVCS Configuration Zones XCommand ZoneAdd Configuring Zones All Types Hop countMatch1 Match5 Primary address Alternate 1 to Alternate 5 address Configuring Neighbor ZonesSIP port SIP transport Primary address Configuring Traversal Client ZonesAuthentication username Retry interval Configuring Traversal Server Zones Configuring Enum Zones Configuring DNS ZonesDNS suffix Alternates About Alternates Configuring AlternatesVCS Configuration Alternates XConfiguration Alternates Dial Plans Call Processing Search Process Call Processing Diagram Endpoints registered to a VCS Expressway Dialing by Address TypesDialing by IP Address Dialing by H.323 or SIP URI Dialing by Enum About Hop Counts Configuring Hop Counts XConfiguration Zones Zone 1..200 HopCountHop Counts Administrator Policy Authentication Mode OnAuthentication Mode Off Administrator Policy Mode Enabling the use of Administrator Policy Configuring Administrator Policy via the Web Interface About CPL XSD files Uploading a CPL Script User Policy FindMe 100 Configuring User Policy ManagerVCS Configuration Policy User XConfiguration Policy UserPolicy Creating a New User Account 101Managing FindMe User Accounts About User Accounts Changing a User Password Viewing Existing User Account Settings102 103 Deleting a User AccountAre you sure...? About your FindMe User Account Using TANDBERG’s FindMeAccessing the FindMe Configuration 104 105 Configuring your FindMe User Account Searches and Transforms 106 Configuring Local Alias Transforms XConfiguration Transform107 Zone Searching and Transforming 108 109 Configuring Zone Searches TransformsDefault Settings XConfiguration Zones Zone 1..200 Match Never Query a Zone 110Examples Combining Match Types and Priorities Filter Queries to a Zone Without Transforming 111 Query a Zone for Original and Transformed Alias 112 Query a Zone for Two or More Transformed Aliases 113 114 URI DialingH323 Process Configuring Matches for DNS Zones115 URI Dialing for Outgoing Calls Click Create Zone Adding and Configuring DNS ZonesXCommand ZoneAdd XConfiguration Zones Zone 116 Configuring DNS Servers XConfiguration IP DNS Server117 URI Dialing for Incoming Calls 118 URI Dialing and Firewall Traversal Example DNS Record ConfigurationRecommended Configuration 119 120 Enum DialingOverview Process Enabling Enum Dialing Example 121Enum Dialing for Outgoing Calls Prerequisites 122 Configuring Matches for Enum ZonesConfiguring Transforms for Enum Zones Mode of PatternMatch Pattern string Pattern type of Prefix 123 Configuring Enum Zones 124 About DNS Domains for Enum Configuring DNS Naptr Records125 Enum Dialing for Incoming Calls Unregistered Endpoints Recommended Configuration for Firewall TraversalXConfiguration Call Services 126 Fallback Alias Overview Configuration Example UsageXConfiguration Call Services Fallback Alias 127 Disconnecting Calls 128Identifying a Particular Call 129 Disconnecting a Call via the Web InterfaceDisconnecting a Call via the CLI Issues when Disconnecting SIP Calls Bandwidth Control 130 131 Bandwidth Control OverviewBandwidth Control on the VCS Example Network Deployment Specifying the Subzone IP Addresses Subzone Links About the Default Subzone132 Subzones XCommand SubZoneAdd 133Creating a Subzone Configuring a Subzone XConfiguration Zones LocalZone SubZone134 How Different Bandwidth Limitations are Managed 135Applying Bandwidth Limitations to Subzones Types of Limitations About Links Creating Links Default LinksXCommand LinkAdd 136 XConfiguration Bandwidth Link 137Editing Links 138 Default LinksAbout Default Links Pre-Configured Links XCommand PipeAdd 139About Pipes Creating Pipes Editing an Existing Pipe XConfiguration Bandwidth Pipe140 Editing Pipes One Pipe, Two or More Links 141Applying Pipes to Links One Pipe, One Link 142 Default Bandwidth and DownspeedingAbout the Default Call Bandwidth Configuring Default Call Bandwidth and Downspeeding 143 Bandwidth Control ExamplesExample Without a Firewall Example With a Firewall VCS Expressway Subzone ConfigurationVCS Control Subzone Configuration 144 Firewall Traversal 145 How does it work? 146Firewall Traversal Overview About Expressway VCS as a Firewall Traversal Client Quick Guide to VCS Traversal Client Server Configuration 147VCS Expressway Server SIP Firewall Traversal Protocols 148Firewall Traversal Protocols and Ports Overview Expressway Process Firewall Traversal Protocols SIP Ports Call signaling149 Media 150 Firewall Traversal and AuthenticationAuthentication and NTP Configuration Zones Edit Zone, in the Configuration section 151 Other Issues TraversalClient Create Zone Configuring the VCS as a Traversal Client152 Adding a New Traversal Client Zone Configuring a Traversal Client Zone 153Alternate 1..5 Address TraversalServer Create Zone Configuring the VCS as a Traversal Server154 Adding a New Traversal Server Zone 155 Configuring a Traversal Server ZoneClient authentication username Demux mode Configuring Traversal for Endpoints XConfiguration Zones LocalZone Traversal H323156 157 Configuring Traversal Server Ports 158 Stun Services 159 Configuring Stun Services 160 Maintenance Overview Upgrading Using SCP/PSCP 161Upgrading Software Upgrading via the Web Interface 162 Overview Adding Options via the CLI XConfiguration Option 1..64 Key163 Option Keys Add option key Maintenance Option Keys164 Adding Options via the Web Interface 165 SecurityOverview Enabling Security 166 PasswordsOverview Configuring Administrator Password XConfiguration SystemUnitPassword Overview Creating a System Snapshot Error Reports167 System Snapshot Overview Restarting the VCS XCommand Boot168 Restarting Overview Shutting Down Maintenance Shutdown169 Shutting Down 170 Restoring Default ConfigurationOverview DefaultValuesSet Level XCommand DefaultValuesSet Level 3 must be Appendices 171 Overview of CPL on the VCS Address-switch172 CPL Reference Field 173 174 SubfieldOtherwise Not-present Reject Rule-switch175 Location Call Screening Based on Alias Call Screening of Authenticated Users176 CPL Examples Dont accept calls from this source 177Call Screening Based on Domain Change of Domain Name Allow Calls from Locally Registered Endpoints Only Block Calls from Default Zone and Default SubzoneAddress Address is=DefaultSubZone 178 179 Restricting Access to a Local GatewayUsing the address-switch node Using the rule-switch node Matches 0 or more repetitions of the previous match 180Regular Expression Reference Overview Common Regular Expressions Pattern Variable Reference 181 VCS Port Reference XConfiguration H323 Gatekeeper Registration UDP PortXConfiguration H323 Gatekeeper CallSignaling TCP Port 182 183 184 XConfiguration Traversal Media Port Start Verifying the SRV Record DNS Configuration185 Overview Microsoft DNS Server About the Ldap Databases Ldap ConfigurationDownloading the Ldap schemas 186 Create the Organizational Hierarchy 187Adding H.350 Objects Securing with TLS Include /etc/openldap/schemas/sipidentity.ldif 188OpenLDAP 189 # MeetingRoom1 endpointSlapadd -l ldif file 190 Command Reference xConfiguration 191 192 193 Example xConfiguration Bandwidth Downspeed PerCall Mode OnExample xConfiguration Bandwidth Downspeed Total Mode On Example xConfiguration Bandwidth Link 1 Node1 Name HQ Example xConfiguration Bandwidth Pipe 1 Name 512Kb Asdl Example xConfiguration Error Reports Mode Off194 Example xConfiguration ExternalManager Address Example xConfiguration Ethernet 1 IP V4 AddressExample xConfiguration Ethernet 1 IP V4 SubnetMask Example xConfiguration Ethernet 1 Speed Auto Example xConfiguration H323 Gatekeeper CallTimeToLive Example xConfiguration H323 Gatekeeper TimeToLive196 197 198 199 200 Example xConfiguration Registration RestrictionPolicy None 201 202 203 Example Traversal Server H323 H46018 CallSignaling Port Example xConfiguration Transform 1 PriorityExample xConfiguration Traversal Media Port End Example xConfiguration Traversal Media Port Start Example Traversal Server Stun Relay Port Example xConfiguration Traversal Server Stun Discovery PortExample xConfiguration Traversal Server Stun Relay Mode On 205 206 207 208 209 Example xConfiguration Zones Zone 1 H323 Mode On 210 Example xConfiguration Zones Zone 1 HopCount 211 212 CommandHeadline TextReferenceGoes Here- xConfiguration 213 Example xConfiguration Zones Zone 3 TraversalServer SIP Port 214 Example xConfiguration Zones Zone 1 Type Neighbor 215 Command Reference xCommand Example xCommand AllowListDelete AllowListId Example xCommand boot216 Example xCommand CredentialDelete CredentialId Example xCommand DefaultLinksAdd217 218 Example xCommand DefaultValuesSet LevelExample xCommand DenyListDelete DenyListId Example xCommand DomainAdd DomainName example.com Example xCommand DomainDelete DomainId Example xCommand FeedbackDeregister ID219 220 Example xCommand LinkDelete LinkId Example xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD221 Example xCommand OptionKeyDelete OptionKeyId Example xCommand PipeDelete PipeId222 223 Example xCommand SubZoneDelete SubZoneId2 Example xCommand TransformDelete TransformId224 Example xCommand ZoneDelete ZoneId Example xCommand ZoneList Alias john.smith@example.com225 226 Command Reference xStatus 227 CommandHeadline TextReferenceGoes Here- xStatus Ethernet 228 NTP 229 Calls 230 231 Registrations 232 Zones 233 234 235 236 Links 237 Alternates 238 H323 239 SIP 240 Stun 241 Bibliography 242 Glossary 243 Secure Socket Layer Hop count 244 PEM 245 VCS 246 Contact Information 247