184 | TANDBERG Security Camera guide

Grey Headline (continued)

VCS Port Reference

TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE

VCS Ports

Service/Function	Description	Default	Available Range	Configurable via
Traversal media port range	For traversal calls (i.e. where the VCS is taking	50000 - 51199	1024 - 65533	VCS Configuration > Local Zone > Traversal Subzone
	the media as well as the signaling), the range	UDP		xConfiguration Traversal Media Port Start
	of ports to be used for the media. Ports are			xConfiguration Traversal Media Port Start
	of ports to be used for the media. Ports are			xConfiguration Traversal Media Port End
	allocated from this range in pairs, the first of			xConfiguration Traversal Media Port End
	each being even. Therefore the range must
	start with an even number. See Configuring the
	Traversal Subzone Ports for more information.
STUN Relay media port	The range of ports to be used for STUN media	60000 - 61200	1024 - 65534	VCS Configuration > Expressway > STUN
range	relay.	UDP		xConfiguration Traversal Server STUN Relay Media Port Start
				xConfiguration Traversal Server STUN Relay Media Port Start
				xConfiguration Traversal Server STUN Relay Media Port End
LDAP	used for outbound connection to an LDAP server	a random TCP source port is used
TMS	used for outbound connection to TMS	a random source port in the range 32768 - 65535 is used
User Policy Server	used for outbound connection to a User Policy	a random source port in the range 32768 - 65535 is used
	Server

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Maintenance

Appendices

Status

Configuration

Configuration

Neighbors

Processing

Control

Traversal

D14049.03

184

MAY 2008

Image 184

TANDBERG Security Camera manual 184, XConfiguration Traversal Media Port Start

Contents

Guide What’s in this Manual? PreambleIntroduction Overview and Status LAN Zones and Neighbors Call Processing Maintenance Appendices Bandwidth Control Maintenance What’s in this Manual? Legal Notices Copyright 2008, Tandberg Safety Instructions Safety Instructions and ApprovalsApprovals Environmental Issues Waste Handling Digital User Guides Environmental Issues Tandberg VCS Overview VCS Base ApplicationsVCS Control VCS Expressway Standard Features What’s New in this Version? Optional FeaturesDual Network Interfaces User Policy FindMe Administrator Guide Using this Administrator GuideCommand Line Interface Typographical conventions Getting Started Installation Installation Site PreparationsGeneral Installation Precautions Connecting the Cables Initial Configuration Powering on the VCS Initial Configuration via Serial Cable UP key Initial Configuration via Front PanelDown key System Administrator Access Overview Using the Web Interface Select Administrator LoginWeb Interface Supported Browsers General page features Command Line Interface Using the Command Line Interface CLITypes of Commands How Command are Shown in this Guide Overview and Status Overview Viewing the Overview Understanding the Overview System Information Status System Ethernet MAC address EthernetSpeed IP Status Viewing the IP Status Understanding the IP Status Viewing the Resource Usage Understanding the Resource Usage Resource UsageStatus System Resource Usage Traversal calls Registrations Viewing the Registrations Understanding the Registrations Registration History ReasonDuration End Time Calls Viewing the Calls Understanding the Calls Viewing the Call History Understanding the Call History Call HistoryStatus Call History Filter Search History Viewing the Search History Understanding the Search HistoryAbout Searches Status Search History Local Zone Viewing the Local Zone Understanding the Local Zone Viewing the Zones Understanding the Zones ZonesStatus Zones Viewing the Links Understanding the Links LinksStatus Links Pipes Viewing the PipesUnderstanding the Pipes Status Pipes Stun Relays Viewing the Stun Relays Understanding the Stun Relays Viewing the Warnings Understanding the Warnings Status Warnings Event Log Viewing the Event Log Understanding the Event LogEvent Log Color Coding Green Interpreting the Event Log Event Log Format Message Details Field Events Logged at Level System Configuration Changed TLS Negotiation ErrorUser session Login failure Policy Change Message Received Message SentRegistration Refresh Accepted Registration Refresh Request System Configuration System Administration Overview ConfigurationAbout Administrator Access settings About the System Name System Configuration Ethernet XConfiguration EthernetAbout Ethernet Speed Ethernet speed Overview IP Configuration XConfiguration IP XConfiguration IPProtocolXConfiguration IP Route XCommand RouteAdd About IPv4 to IPv6 Gatewaying About LAN Configuration Overview LAN ConfigurationAbout Dual Network Interfaces About DNS Servers XConfiguration IP DNSAbout the DNS Domain Name System Configuration NTP XConfiguration NTP Address XConfiguration TimeZone NameAbout the NTP Server About the Time Zone XConfiguration Snmp About Snmp XConfiguration ExternalManager External ManagerAbout the External Manager Address Backups Backing up Configuration Settings Logging Overview Remote LoggingAbout Logging About Remote Logging Setting the Event Log Level XConfiguration Log LevelLog Levels About Event Log Levels VCS Configuration 323 Overview Endpoint Registration Configuring H.323 XConfiguration H323 Using the VCS as a SIP Registrar SIP OverviewAbout SIP on the VCS SIP Registration Expiry Using the VCS as a SIP Proxy Server SIP protocols and ports Configuring SIP Registrations, Protocols and Ports XConfiguration SIP Configuring SIP Domains VCS Configuration Protocols SIP DomainsCancel View/Edit Configuring Interworking XConfiguration Interworking ModeSave SIP interworking mode Interworking MCU, Gateway and Content Server Registration Registration ControlRegistration Overview Endpoint Registration Finding a VCS with which to Register 323Preventing automatic registrations H323 Gatekeeper AutoDiscovery Authentication About Authentication for Local RegistrationsConfiguring Authentication for Local Registrations XConfiguration Authentication Configuring External Registration Credentials About External Registration Credentials Alias Origin Setting Authentication DatabasesAuthentication using an Ldap Server Configuring Ldap Server settings XConfiguration Ldap XConfiguration Authentication Ldap Authentication using a Local Database Configuring the Local Database Attempts to Register using an Existing Alias Registering AliasesAbout Alias Registration Alias Registration XConfiguration Registration RestrictionPolicy Allow and Deny ListsAbout Allow and Deny Lists Activating use of Allow or Deny Lists XCommand AllowListAdd XConfigurationAllowList Registration Managing Entries in the Allow List VCS Configuration Registration Deny List XCommand DenyListAdd XConfigurationDenyList RegistrationManaging Entries in the Deny List Add Deny List Pattern Zones and Neighbors Introduction Example Network DiagramAbout your Video Communications Network Overview Configuring the Local Zone and its Subzones Configuring the Traversal Subzone PortsLocal Zone and Subzones Traversal Subzone About Zones Traversal Client Zone Traversal Server Zone Neighbor Zone Enum Zone DNS Zone Default Zone XCommand DefaultLinksAdd Adding Zones Configuring Zones VCS Configuration ZonesXCommand ZoneAdd XConfiguration Zones Zone Hop count Configuring Zones All TypesMatch1 Match5 Configuring Neighbor Zones SIP portSIP transport Primary address Alternate 1 to Alternate 5 address Configuring Traversal Client Zones Authentication usernameRetry interval Primary address Configuring Traversal Server Zones Configuring DNS Zones Configuring Enum ZonesDNS suffix About Alternates Configuring Alternates VCS Configuration AlternatesXConfiguration Alternates Alternates Dial Plans Call Processing Call Processing Diagram Search Process Dialing by Address Types Dialing by IP Address Dialing by H.323 or SIP URIDialing by Enum Endpoints registered to a VCS Expressway XConfiguration Zones Zone 1..200 HopCount About Hop Counts Configuring Hop CountsHop Counts Authentication Mode On Administrator PolicyAuthentication Mode Off Enabling the use of Administrator Policy Administrator Policy Mode Configuring Administrator Policy via the Web Interface Uploading a CPL Script About CPL XSD files User Policy FindMe Configuring User Policy Manager VCS Configuration Policy UserXConfiguration Policy UserPolicy 100 101 Managing FindMe User AccountsAbout User Accounts Creating a New User Account Viewing Existing User Account Settings Changing a User Password102 Deleting a User Account 103Are you sure...? Using TANDBERG’s FindMe Accessing the FindMe Configuration104 About your FindMe User Account Configuring your FindMe User Account 105 106 Searches and Transforms XConfiguration Transform Configuring Local Alias Transforms107 108 Zone Searching and Transforming Configuring Zone Searches Transforms Default SettingsXConfiguration Zones Zone 1..200 Match 109 110 ExamplesCombining Match Types and Priorities Never Query a Zone 111 Filter Queries to a Zone Without Transforming 112 Query a Zone for Original and Transformed Alias 113 Query a Zone for Two or More Transformed Aliases URI Dialing 114H323 Configuring Matches for DNS Zones 115URI Dialing for Outgoing Calls Process Adding and Configuring DNS Zones XCommand ZoneAdd XConfiguration Zones Zone116 Click Create Zone XConfiguration IP DNS Server Configuring DNS Servers117 118 URI Dialing for Incoming Calls Example DNS Record Configuration Recommended Configuration119 URI Dialing and Firewall Traversal Enum Dialing 120Overview Process Enabling Enum Dialing 121 Enum Dialing for Outgoing CallsPrerequisites Example Configuring Matches for Enum Zones Configuring Transforms for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix 122 Configuring Enum Zones 123 124 Configuring DNS Naptr Records 125Enum Dialing for Incoming Calls About DNS Domains for Enum Recommended Configuration for Firewall Traversal XConfiguration Call Services126 Unregistered Endpoints Overview Configuration Example Usage XConfiguration Call Services Fallback Alias127 Fallback Alias 128 Disconnecting CallsIdentifying a Particular Call Disconnecting a Call via the Web Interface Disconnecting a Call via the CLIIssues when Disconnecting SIP Calls 129 130 Bandwidth Control Bandwidth Control Overview 131Bandwidth Control on the VCS Example Network Deployment About the Default Subzone 132Subzones Specifying the Subzone IP Addresses Subzone Links 133 XCommand SubZoneAddCreating a Subzone XConfiguration Zones LocalZone SubZone Configuring a Subzone134 135 Applying Bandwidth Limitations to SubzonesTypes of Limitations How Different Bandwidth Limitations are Managed Default Links XCommand LinkAdd136 About Links Creating Links 137 XConfiguration Bandwidth LinkEditing Links Default Links About Default LinksPre-Configured Links 138 139 XCommand PipeAddAbout Pipes Creating Pipes XConfiguration Bandwidth Pipe 140Editing Pipes Editing an Existing Pipe 141 Applying Pipes to LinksOne Pipe, One Link One Pipe, Two or More Links Default Bandwidth and Downspeeding About the Default Call BandwidthConfiguring Default Call Bandwidth and Downspeeding 142 Bandwidth Control Examples 143Example Without a Firewall VCS Expressway Subzone Configuration VCS Control Subzone Configuration144 Example With a Firewall 145 Firewall Traversal 146 Firewall Traversal OverviewAbout Expressway VCS as a Firewall Traversal Client How does it work? 147 Quick Guide to VCS Traversal Client Server ConfigurationVCS Expressway Server 148 Firewall Traversal Protocols and PortsOverview Expressway Process Firewall Traversal Protocols SIP Firewall Traversal Protocols Call signaling 149Media SIP Ports Firewall Traversal and Authentication Authentication and NTPConfiguration Zones Edit Zone, in the Configuration section 150 Other Issues 151 Configuring the VCS as a Traversal Client 152Adding a New Traversal Client Zone TraversalClient Create Zone 153 Configuring a Traversal Client ZoneAlternate 1..5 Address Configuring the VCS as a Traversal Server 154Adding a New Traversal Server Zone TraversalServer Create Zone Configuring a Traversal Server Zone Client authentication usernameDemux mode 155 XConfiguration Zones LocalZone Traversal H323 Configuring Traversal for Endpoints156 Configuring Traversal Server Ports 157 Stun Services 158 Configuring Stun Services 159 Maintenance 160 161 Overview Upgrading Using SCP/PSCPUpgrading Software 162 Upgrading via the Web Interface XConfiguration Option 1..64 Key 163Option Keys Overview Adding Options via the CLI Maintenance Option Keys 164Adding Options via the Web Interface Add option key Security 165Overview Enabling Security Passwords Overview Configuring Administrator PasswordXConfiguration SystemUnitPassword 166 Error Reports 167System Snapshot Overview Creating a System Snapshot XCommand Boot 168Restarting Overview Restarting the VCS Maintenance Shutdown 169Shutting Down Overview Shutting Down Restoring Default Configuration Overview DefaultValuesSet LevelXCommand DefaultValuesSet Level 3 must be 170 171 Appendices Address-switch 172CPL Reference Overview of CPL on the VCS 173 Field Subfield 174Otherwise Not-present Rule-switch 175Location Reject Call Screening of Authenticated Users 176CPL Examples Call Screening Based on Alias 177 Call Screening Based on DomainChange of Domain Name Dont accept calls from this source Block Calls from Default Zone and Default Subzone Address Address is=DefaultSubZone178 Allow Calls from Locally Registered Endpoints Only Restricting Access to a Local Gateway Using the address-switch nodeUsing the rule-switch node 179 180 Regular Expression ReferenceOverview Common Regular Expressions Matches 0 or more repetitions of the previous match 181 Pattern Variable Reference XConfiguration H323 Gatekeeper Registration UDP Port XConfiguration H323 Gatekeeper CallSignaling TCP Port182 VCS Port Reference 183 XConfiguration Traversal Media Port Start 184 DNS Configuration 185Overview Microsoft DNS Server Verifying the SRV Record Ldap Configuration Downloading the Ldap schemas186 About the Ldap Databases 187 Adding H.350 ObjectsSecuring with TLS Create the Organizational Hierarchy 188 Include /etc/openldap/schemas/sipidentity.ldifOpenLDAP # MeetingRoom1 endpoint 189Slapadd -l ldif file Command Reference xConfiguration 190 191 192 Example xConfiguration Bandwidth Downspeed PerCall Mode On Example xConfiguration Bandwidth Downspeed Total Mode OnExample xConfiguration Bandwidth Link 1 Node1 Name HQ 193 Example xConfiguration Error Reports Mode Off Example xConfiguration Bandwidth Pipe 1 Name 512Kb Asdl194 Example xConfiguration Ethernet 1 IP V4 Address Example xConfiguration Ethernet 1 IP V4 SubnetMaskExample xConfiguration Ethernet 1 Speed Auto Example xConfiguration ExternalManager Address Example xConfiguration H323 Gatekeeper TimeToLive Example xConfiguration H323 Gatekeeper CallTimeToLive196 197 198 199 Example xConfiguration Registration RestrictionPolicy None 200 201 202 203 Example xConfiguration Transform 1 Priority Example xConfiguration Traversal Media Port EndExample xConfiguration Traversal Media Port Start Example Traversal Server H323 H46018 CallSignaling Port Example xConfiguration Traversal Server Stun Discovery Port Example xConfiguration Traversal Server Stun Relay Mode On205 Example Traversal Server Stun Relay Port 206 207 208 Example xConfiguration Zones Zone 1 H323 Mode On 209 Example xConfiguration Zones Zone 1 HopCount 210 211 CommandHeadline TextReferenceGoes Here- xConfiguration 212 Example xConfiguration Zones Zone 3 TraversalServer SIP Port 213 Example xConfiguration Zones Zone 1 Type Neighbor 214 Command Reference xCommand 215 Example xCommand boot Example xCommand AllowListDelete AllowListId216 Example xCommand DefaultLinksAdd Example xCommand CredentialDelete CredentialId217 Example xCommand DefaultValuesSet Level Example xCommand DenyListDelete DenyListIdExample xCommand DomainAdd DomainName example.com 218 Example xCommand FeedbackDeregister ID Example xCommand DomainDelete DomainId219 220 Example xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD Example xCommand LinkDelete LinkId221 Example xCommand PipeDelete PipeId Example xCommand OptionKeyDelete OptionKeyId222 223 Example xCommand TransformDelete TransformId Example xCommand SubZoneDelete SubZoneId2224 Example xCommand ZoneList Alias john.smith@example.com Example xCommand ZoneDelete ZoneId225 Command Reference xStatus 226 CommandHeadline TextReferenceGoes Here- xStatus 227 228 Ethernet 229 NTP 230 Calls 231 232 Registrations 233 Zones 234 235 236 237 Links 238 Alternates 239 H323 240 SIP 241 Stun 242 Bibliography 243 Glossary 244 Secure Socket Layer Hop count 245 PEM 246 VCS 247 Contact Information