Manuals / TANDBERG / Photography / Security Camera

TANDBERG Security Camera manual 176, CPL Examples, Call Screening of Authenticated Users

Models: Security Camera

1 247

Download 247 pages 11.75 Kb

Page 176

Grey Headline (continued)

CPL Reference

TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE

CPL Examples

Call Screening of Authenticated Users

In this example, only calls from users with authenticated source addresses are allowed.

See the section on Authentication for details on how to enable authentication.

<?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl"

xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd">

<taa:routed> <address-switch field="origin">

<not-present>

<reject status="403" reason="Denied by policy"/>

</not-present> </address-switch>

</taa:routed>

</cpl>

Call Screening Based on Alias

In this example, user ceo will only accept calls from users vpsales, vpmarketing or vpengineering.

<?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl"

xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd">

<taa:routed>

<address-switch field="destination"> <address is="ceo">

<address-switch field="origin">

<address regex="vpsalesvpmarketingvpengineering">

<proxy/>

</address> <not-present>

<reject status="403" reason="Denied by policy"/>

</not-present> <otherwise>

<reject status="403" reason="Denied by policy"/>

</otherwise> </address-switch>

</address> </address-switch>

</taa:routed>

</cpl>

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Maintenance

Appendices

Status

Configuration

Configuration

Neighbors

Processing

Control

Traversal

D14049.03

176

MAY 2008

Image 176

TANDBERG Security Camera manual 176, CPL Examples, Call Screening of Authenticated Users, Call Screening Based on Alias

Contents

Guide What’s in this Manual? PreambleIntroduction Overview and StatusLAN Zones and Neighbors Call ProcessingMaintenance Appendices Bandwidth Control Maintenance What’s in this Manual? Legal Notices Copyright 2008, TandbergApprovals Safety Instructions and ApprovalsSafety Instructions Environmental Issues Waste Handling Digital User GuidesEnvironmental Issues Tandberg VCS Overview VCS Base ApplicationsVCS Control VCS ExpresswayStandard Features What’s New in this Version? Optional FeaturesDual Network Interfaces User Policy FindMeAdministrator Guide Using this Administrator GuideCommand Line Interface Typographical conventionsGetting Started Installation Installation Site PreparationsGeneral Installation Precautions Connecting the CablesInitial Configuration Powering on the VCS Initial Configuration via Serial CableDown key Initial Configuration via Front PanelUP key System Administrator Access OverviewUsing the Web Interface Select Administrator LoginWeb Interface Supported BrowsersGeneral page features Command Line Interface Using the Command Line Interface CLITypes of Commands How Command are Shown in this GuideOverview and Status Overview Viewing the Overview Understanding the OverviewSystem Information Speed EthernetStatus System Ethernet MAC address IP Status Viewing the IP Status Understanding the IP StatusStatus System Resource Usage Traversal calls Resource UsageViewing the Resource Usage Understanding the Resource Usage Registrations Viewing the Registrations Understanding the RegistrationsRegistration History ReasonDuration End TimeCalls Viewing the Calls Understanding the CallsStatus Call History Filter Call HistoryViewing the Call History Understanding the Call History Search History Viewing the Search History Understanding the Search HistoryAbout Searches Status Search HistoryLocal Zone Viewing the Local Zone Understanding the Local ZoneStatus Zones ZonesViewing the Zones Understanding the Zones Status Links LinksViewing the Links Understanding the Links Pipes Viewing the PipesUnderstanding the Pipes Status PipesStun Relays Viewing the Stun Relays Understanding the Stun RelaysViewing the Warnings Understanding the Warnings Status WarningsEvent Log Viewing the Event Log Understanding the Event LogEvent Log Color Coding GreenInterpreting the Event Log Event Log FormatMessage Details Field Events Logged at Level System Configuration Changed TLS Negotiation ErrorUser session Login failure Policy ChangeMessage Received Message SentRegistration Refresh Accepted Registration Refresh RequestSystem Configuration System Administration Overview ConfigurationAbout Administrator Access settings About the System NameSystem Configuration Ethernet XConfiguration EthernetAbout Ethernet Speed Ethernet speedOverview IP Configuration XConfiguration IP XConfiguration IPProtocolXConfiguration IP Route XCommand RouteAdd About IPv4 to IPv6 GatewayingAbout Dual Network Interfaces Overview LAN ConfigurationAbout LAN Configuration About the DNS Domain Name XConfiguration IP DNSAbout DNS Servers System Configuration NTP XConfiguration NTP Address XConfiguration TimeZone NameAbout the NTP Server About the Time ZoneXConfiguration Snmp About SnmpXConfiguration ExternalManager External ManagerAbout the External Manager AddressBackups Backing up Configuration SettingsLogging Overview Remote LoggingAbout Logging About Remote LoggingSetting the Event Log Level XConfiguration Log LevelLog Levels About Event Log LevelsVCS Configuration 323 Overview Endpoint RegistrationConfiguring H.323 XConfiguration H323Using the VCS as a SIP Registrar SIP OverviewAbout SIP on the VCS SIP Registration ExpiryUsing the VCS as a SIP Proxy Server SIP protocols and portsConfiguring SIP Registrations, Protocols and Ports XConfiguration SIPConfiguring SIP Domains VCS Configuration Protocols SIP DomainsCancel View/EditConfiguring Interworking XConfiguration Interworking ModeSave SIP interworking mode InterworkingMCU, Gateway and Content Server Registration Registration ControlRegistration Overview Endpoint RegistrationFinding a VCS with which to Register 323Preventing automatic registrations H323 Gatekeeper AutoDiscoveryAuthentication About Authentication for Local RegistrationsConfiguring Authentication for Local Registrations XConfiguration AuthenticationConfiguring External Registration Credentials About External Registration CredentialsAuthentication using an Ldap Server Authentication DatabasesAlias Origin Setting Configuring Ldap Server settings XConfiguration Ldap XConfiguration Authentication LdapAuthentication using a Local Database Configuring the Local DatabaseAttempts to Register using an Existing Alias Registering AliasesAbout Alias Registration Alias RegistrationXConfiguration Registration RestrictionPolicy Allow and Deny ListsAbout Allow and Deny Lists Activating use of Allow or Deny ListsXCommand AllowListAdd XConfigurationAllowList Registration Managing Entries in the Allow ListVCS Configuration Registration Deny List XCommand DenyListAdd XConfigurationDenyList RegistrationManaging Entries in the Deny List Add Deny List PatternZones and Neighbors About your Video Communications Network Example Network DiagramIntroduction Overview Configuring the Local Zone and its Subzones Configuring the Traversal Subzone PortsLocal Zone and Subzones Traversal SubzoneAbout Zones Traversal Client Zone Traversal Server Zone Neighbor ZoneEnum Zone DNS Zone Default Zone XCommand DefaultLinksAddAdding Zones Configuring Zones VCS Configuration ZonesXCommand ZoneAdd XConfiguration Zones ZoneMatch1 Match5 Configuring Zones All TypesHop count Configuring Neighbor Zones SIP portSIP transport Primary address Alternate 1 to Alternate 5 addressConfiguring Traversal Client Zones Authentication usernameRetry interval Primary addressConfiguring Traversal Server Zones DNS suffix Configuring Enum ZonesConfiguring DNS Zones About Alternates Configuring Alternates VCS Configuration AlternatesXConfiguration Alternates AlternatesDial Plans Call Processing Call Processing Diagram Search ProcessDialing by Address Types Dialing by IP Address Dialing by H.323 or SIP URIDialing by Enum Endpoints registered to a VCS ExpresswayHop Counts About Hop Counts Configuring Hop CountsXConfiguration Zones Zone 1..200 HopCount Authentication Mode Off Administrator PolicyAuthentication Mode On Enabling the use of Administrator Policy Administrator Policy ModeConfiguring Administrator Policy via the Web Interface Uploading a CPL Script About CPL XSD filesUser Policy FindMe Configuring User Policy Manager VCS Configuration Policy UserXConfiguration Policy UserPolicy 100101 Managing FindMe User AccountsAbout User Accounts Creating a New User Account102 Changing a User PasswordViewing Existing User Account Settings Are you sure...? 103Deleting a User Account Using TANDBERG’s FindMe Accessing the FindMe Configuration104 About your FindMe User AccountConfiguring your FindMe User Account 105106 Searches and Transforms107 Configuring Local Alias TransformsXConfiguration Transform 108 Zone Searching and TransformingConfiguring Zone Searches Transforms Default SettingsXConfiguration Zones Zone 1..200 Match 109110 ExamplesCombining Match Types and Priorities Never Query a Zone111 Filter Queries to a Zone Without Transforming112 Query a Zone for Original and Transformed Alias113 Query a Zone for Two or More Transformed AliasesH323 114URI Dialing Configuring Matches for DNS Zones 115URI Dialing for Outgoing Calls ProcessAdding and Configuring DNS Zones XCommand ZoneAdd XConfiguration Zones Zone116 Click Create Zone117 Configuring DNS ServersXConfiguration IP DNS Server 118 URI Dialing for Incoming CallsExample DNS Record Configuration Recommended Configuration119 URI Dialing and Firewall TraversalOverview Process Enabling Enum Dialing 120Enum Dialing 121 Enum Dialing for Outgoing CallsPrerequisites ExampleConfiguring Matches for Enum Zones Configuring Transforms for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix 122Configuring Enum Zones 123124 Configuring DNS Naptr Records 125Enum Dialing for Incoming Calls About DNS Domains for EnumRecommended Configuration for Firewall Traversal XConfiguration Call Services126 Unregistered EndpointsOverview Configuration Example Usage XConfiguration Call Services Fallback Alias127 Fallback AliasIdentifying a Particular Call Disconnecting Calls128 Disconnecting a Call via the Web Interface Disconnecting a Call via the CLIIssues when Disconnecting SIP Calls 129130 Bandwidth ControlBandwidth Control on the VCS Example Network Deployment 131Bandwidth Control Overview About the Default Subzone 132Subzones Specifying the Subzone IP Addresses Subzone LinksCreating a Subzone XCommand SubZoneAdd133 134 Configuring a SubzoneXConfiguration Zones LocalZone SubZone 135 Applying Bandwidth Limitations to SubzonesTypes of Limitations How Different Bandwidth Limitations are ManagedDefault Links XCommand LinkAdd136 About Links Creating LinksEditing Links XConfiguration Bandwidth Link137 Default Links About Default LinksPre-Configured Links 138About Pipes Creating Pipes XCommand PipeAdd139 XConfiguration Bandwidth Pipe 140Editing Pipes Editing an Existing Pipe141 Applying Pipes to LinksOne Pipe, One Link One Pipe, Two or More LinksDefault Bandwidth and Downspeeding About the Default Call BandwidthConfiguring Default Call Bandwidth and Downspeeding 142Example Without a Firewall 143Bandwidth Control Examples VCS Expressway Subzone Configuration VCS Control Subzone Configuration144 Example With a Firewall145 Firewall Traversal146 Firewall Traversal OverviewAbout Expressway VCS as a Firewall Traversal Client How does it work?VCS Expressway Server Quick Guide to VCS Traversal Client Server Configuration147 148 Firewall Traversal Protocols and PortsOverview Expressway Process Firewall Traversal Protocols SIP Firewall Traversal ProtocolsCall signaling 149Media SIP PortsFirewall Traversal and Authentication Authentication and NTPConfiguration Zones Edit Zone, in the Configuration section 150Other Issues 151Configuring the VCS as a Traversal Client 152Adding a New Traversal Client Zone TraversalClient Create ZoneAlternate 1..5 Address Configuring a Traversal Client Zone153 Configuring the VCS as a Traversal Server 154Adding a New Traversal Server Zone TraversalServer Create ZoneConfiguring a Traversal Server Zone Client authentication usernameDemux mode 155156 Configuring Traversal for EndpointsXConfiguration Zones LocalZone Traversal H323 Configuring Traversal Server Ports 157Stun Services 158Configuring Stun Services 159Maintenance 160Upgrading Software Overview Upgrading Using SCP/PSCP161 162 Upgrading via the Web InterfaceXConfiguration Option 1..64 Key 163Option Keys Overview Adding Options via the CLIMaintenance Option Keys 164Adding Options via the Web Interface Add option keyOverview Enabling Security 165Security Passwords Overview Configuring Administrator PasswordXConfiguration SystemUnitPassword 166Error Reports 167System Snapshot Overview Creating a System SnapshotXCommand Boot 168Restarting Overview Restarting the VCSMaintenance Shutdown 169Shutting Down Overview Shutting DownRestoring Default Configuration Overview DefaultValuesSet LevelXCommand DefaultValuesSet Level 3 must be 170171 AppendicesAddress-switch 172CPL Reference Overview of CPL on the VCS173 FieldOtherwise Not-present 174Subfield Rule-switch 175Location RejectCall Screening of Authenticated Users 176CPL Examples Call Screening Based on Alias177 Call Screening Based on DomainChange of Domain Name Dont accept calls from this sourceBlock Calls from Default Zone and Default Subzone Address Address is=DefaultSubZone178 Allow Calls from Locally Registered Endpoints OnlyRestricting Access to a Local Gateway Using the address-switch nodeUsing the rule-switch node 179180 Regular Expression ReferenceOverview Common Regular Expressions Matches 0 or more repetitions of the previous match181 Pattern Variable ReferenceXConfiguration H323 Gatekeeper Registration UDP Port XConfiguration H323 Gatekeeper CallSignaling TCP Port182 VCS Port Reference183 XConfiguration Traversal Media Port Start 184DNS Configuration 185Overview Microsoft DNS Server Verifying the SRV RecordLdap Configuration Downloading the Ldap schemas186 About the Ldap Databases187 Adding H.350 ObjectsSecuring with TLS Create the Organizational HierarchyOpenLDAP Include /etc/openldap/schemas/sipidentity.ldif188 Slapadd -l ldif file 189# MeetingRoom1 endpoint Command Reference xConfiguration 190191 192 Example xConfiguration Bandwidth Downspeed PerCall Mode On Example xConfiguration Bandwidth Downspeed Total Mode OnExample xConfiguration Bandwidth Link 1 Node1 Name HQ 193194 Example xConfiguration Bandwidth Pipe 1 Name 512Kb AsdlExample xConfiguration Error Reports Mode Off Example xConfiguration Ethernet 1 IP V4 Address Example xConfiguration Ethernet 1 IP V4 SubnetMaskExample xConfiguration Ethernet 1 Speed Auto Example xConfiguration ExternalManager Address196 Example xConfiguration H323 Gatekeeper CallTimeToLiveExample xConfiguration H323 Gatekeeper TimeToLive 197 198 199 Example xConfiguration Registration RestrictionPolicy None 200201 202 203 Example xConfiguration Transform 1 Priority Example xConfiguration Traversal Media Port EndExample xConfiguration Traversal Media Port Start Example Traversal Server H323 H46018 CallSignaling PortExample xConfiguration Traversal Server Stun Discovery Port Example xConfiguration Traversal Server Stun Relay Mode On205 Example Traversal Server Stun Relay Port206 207 208 Example xConfiguration Zones Zone 1 H323 Mode On 209Example xConfiguration Zones Zone 1 HopCount 210211 CommandHeadline TextReferenceGoes Here- xConfiguration 212Example xConfiguration Zones Zone 3 TraversalServer SIP Port 213Example xConfiguration Zones Zone 1 Type Neighbor 214Command Reference xCommand 215216 Example xCommand AllowListDelete AllowListIdExample xCommand boot 217 Example xCommand CredentialDelete CredentialIdExample xCommand DefaultLinksAdd Example xCommand DefaultValuesSet Level Example xCommand DenyListDelete DenyListIdExample xCommand DomainAdd DomainName example.com 218219 Example xCommand DomainDelete DomainIdExample xCommand FeedbackDeregister ID 220 221 Example xCommand LinkDelete LinkIdExample xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD 222 Example xCommand OptionKeyDelete OptionKeyIdExample xCommand PipeDelete PipeId 223 224 Example xCommand SubZoneDelete SubZoneId2Example xCommand TransformDelete TransformId 225 Example xCommand ZoneDelete ZoneIdExample xCommand ZoneList Alias john.smith@example.com Command Reference xStatus 226CommandHeadline TextReferenceGoes Here- xStatus 227228 Ethernet229 NTP230 Calls231 232 Registrations233 Zones234 235 236 237 Links238 Alternates239 H323240 SIP241 Stun242 Bibliography243 Glossary244 Secure Socket Layer Hop count245 PEM246 VCS247 Contact Information