Zones and Neighbors

Grey Headline (continued)

TANDBERG VIDEO COMMUNICATIONS SERVER

ADMINISTRATOR GUIDE

This section provides information on the pages that appear under the Local Zone,

Zones and Alternates sub-menus of the VCS Configuration menu.

These pages allow you to configure the VCS’s Local Zone (which is made up of subzones, including the Traversal Subzone and Default Subzone) and also create and configure relationships with other systems (including other VCSs, Gatekeepers, Border Controllers or SIP devices) via the use of zones. You can also configure up to 5 Alternates for resiliency.

This section includes an overview on all the different types of subzones and zones and how these fit into the overall structure of your video communication network.

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Maintenance

Appendices

Status

Configuration

Neighbors

Processing

Control

Traversal

D14049.03

MAY 2008

Page 78

Image 78

TANDBERG Security Camera manual Zones and Neighbors

Contents

Guide Introduction What’s in this Manual?Preamble Overview and Status LAN Zones and Neighbors Call Processing Maintenance Appendices Bandwidth Control Maintenance What’s in this Manual? Legal Notices Copyright 2008, Tandberg Safety Instructions and Approvals Safety InstructionsApprovals Environmental Issues Waste Handling Digital User Guides Environmental Issues VCS Control Tandberg VCSOverview VCS Base Applications VCS Expressway Dual Network Interfaces Standard Features What’s New in this Version?Optional Features User Policy FindMe Command Line Interface Administrator GuideUsing this Administrator Guide Typographical conventions Getting Started General Installation Precautions InstallationInstallation Site Preparations Connecting the Cables Initial Configuration Powering on the VCS Initial Configuration via Serial Cable Initial Configuration via Front Panel UP keyDown key System Administrator Access Overview Web Interface Using the Web InterfaceSelect Administrator Login Supported Browsers General page features Types of Commands Command Line InterfaceUsing the Command Line Interface CLI How Command are Shown in this Guide Overview and Status Overview Viewing the Overview Understanding the Overview System Information Ethernet Status System Ethernet MAC addressSpeed IP Status Viewing the IP Status Understanding the IP Status Resource Usage Viewing the Resource Usage Understanding the Resource UsageStatus System Resource Usage Traversal calls Registrations Viewing the Registrations Understanding the Registrations Duration Registration HistoryReason End Time Calls Viewing the Calls Understanding the Calls Call History Viewing the Call History Understanding the Call HistoryStatus Call History Filter About Searches Search HistoryViewing the Search History Understanding the Search History Status Search History Local Zone Viewing the Local Zone Understanding the Local Zone Zones Viewing the Zones Understanding the ZonesStatus Zones Links Viewing the Links Understanding the LinksStatus Links Understanding the Pipes PipesViewing the Pipes Status Pipes Stun Relays Viewing the Stun Relays Understanding the Stun Relays Viewing the Warnings Understanding the Warnings Status Warnings Event Log Color Coding Event LogViewing the Event Log Understanding the Event Log Green Interpreting the Event Log Event Log Format Message Details Field Events Logged at Level User session Login failure System Configuration ChangedTLS Negotiation Error Policy Change Registration Refresh Accepted Message ReceivedMessage Sent Registration Refresh Request System Configuration About Administrator Access settings System AdministrationOverview Configuration About the System Name About Ethernet Speed System Configuration EthernetXConfiguration Ethernet Ethernet speed XConfiguration IP Route XCommand RouteAdd Overview IP ConfigurationXConfiguration IP XConfiguration IPProtocol About IPv4 to IPv6 Gatewaying Overview LAN Configuration About LAN ConfigurationAbout Dual Network Interfaces XConfiguration IP DNS About DNS ServersAbout the DNS Domain Name About the NTP Server System Configuration NTPXConfiguration NTP Address XConfiguration TimeZone Name About the Time Zone XConfiguration Snmp About Snmp About the External Manager XConfiguration ExternalManagerExternal Manager Address Backups Backing up Configuration Settings About Logging LoggingOverview Remote Logging About Remote Logging Log Levels Setting the Event Log LevelXConfiguration Log Level About Event Log Levels VCS Configuration 323 Overview Endpoint Registration Configuring H.323 XConfiguration H323 About SIP on the VCS Using the VCS as a SIP RegistrarSIP Overview SIP Registration Expiry Using the VCS as a SIP Proxy Server SIP protocols and ports Configuring SIP Registrations, Protocols and Ports XConfiguration SIP Cancel Configuring SIP DomainsVCS Configuration Protocols SIP Domains View/Edit Save SIP interworking mode Configuring InterworkingXConfiguration Interworking Mode Interworking Registration Overview MCU, Gateway and Content Server RegistrationRegistration Control Endpoint Registration Preventing automatic registrations Finding a VCS with which to Register323 H323 Gatekeeper AutoDiscovery Configuring Authentication for Local Registrations AuthenticationAbout Authentication for Local Registrations XConfiguration Authentication Configuring External Registration Credentials About External Registration Credentials Authentication Databases Alias Origin SettingAuthentication using an Ldap Server Configuring Ldap Server settings XConfiguration Ldap XConfiguration Authentication Ldap Authentication using a Local Database Configuring the Local Database About Alias Registration Attempts to Register using an Existing AliasRegistering Aliases Alias Registration About Allow and Deny Lists XConfiguration Registration RestrictionPolicyAllow and Deny Lists Activating use of Allow or Deny Lists XCommand AllowListAdd XConfigurationAllowList Registration Managing Entries in the Allow List Managing Entries in the Deny List VCS Configuration Registration Deny ListXCommand DenyListAdd XConfigurationDenyList Registration Add Deny List Pattern Zones and Neighbors Example Network Diagram IntroductionAbout your Video Communications Network Local Zone and Subzones Overview Configuring the Local Zone and its SubzonesConfiguring the Traversal Subzone Ports Traversal Subzone About Zones Traversal Client Zone Traversal Server Zone Neighbor Zone Enum Zone DNS Zone Default Zone XCommand DefaultLinksAdd XCommand ZoneAdd Adding Zones Configuring ZonesVCS Configuration Zones XConfiguration Zones Zone Configuring Zones All Types Hop countMatch1 Match5 SIP transport Configuring Neighbor ZonesSIP port Primary address Alternate 1 to Alternate 5 address Retry interval Configuring Traversal Client ZonesAuthentication username Primary address Configuring Traversal Server Zones Configuring Enum Zones Configuring DNS ZonesDNS suffix XConfiguration Alternates About Alternates Configuring AlternatesVCS Configuration Alternates Alternates Dial Plans Call Processing Call Processing Diagram Search Process Dialing by Enum Dialing by Address TypesDialing by IP Address Dialing by H.323 or SIP URI Endpoints registered to a VCS Expressway About Hop Counts Configuring Hop Counts XConfiguration Zones Zone 1..200 HopCountHop Counts Administrator Policy Authentication Mode OnAuthentication Mode Off Enabling the use of Administrator Policy Administrator Policy Mode Configuring Administrator Policy via the Web Interface Uploading a CPL Script About CPL XSD files User Policy FindMe XConfiguration Policy UserPolicy Configuring User Policy ManagerVCS Configuration Policy User 100 About User Accounts 101Managing FindMe User Accounts Creating a New User Account Changing a User Password Viewing Existing User Account Settings102 103 Deleting a User AccountAre you sure...? 104 Using TANDBERG’s FindMeAccessing the FindMe Configuration About your FindMe User Account Configuring your FindMe User Account 105 106 Searches and Transforms Configuring Local Alias Transforms XConfiguration Transform107 108 Zone Searching and Transforming XConfiguration Zones Zone 1..200 Match Configuring Zone Searches TransformsDefault Settings 109 Combining Match Types and Priorities 110Examples Never Query a Zone 111 Filter Queries to a Zone Without Transforming 112 Query a Zone for Original and Transformed Alias 113 Query a Zone for Two or More Transformed Aliases 114 URI DialingH323 URI Dialing for Outgoing Calls Configuring Matches for DNS Zones115 Process 116 Adding and Configuring DNS ZonesXCommand ZoneAdd XConfiguration Zones Zone Click Create Zone Configuring DNS Servers XConfiguration IP DNS Server117 118 URI Dialing for Incoming Calls 119 Example DNS Record ConfigurationRecommended Configuration URI Dialing and Firewall Traversal 120 Enum DialingOverview Process Enabling Enum Dialing Prerequisites 121Enum Dialing for Outgoing Calls Example Mode of PatternMatch Pattern string Pattern type of Prefix Configuring Matches for Enum ZonesConfiguring Transforms for Enum Zones 122 Configuring Enum Zones 123 124 Enum Dialing for Incoming Calls Configuring DNS Naptr Records125 About DNS Domains for Enum 126 Recommended Configuration for Firewall TraversalXConfiguration Call Services Unregistered Endpoints 127 Overview Configuration Example UsageXConfiguration Call Services Fallback Alias Fallback Alias Disconnecting Calls 128Identifying a Particular Call Issues when Disconnecting SIP Calls Disconnecting a Call via the Web InterfaceDisconnecting a Call via the CLI 129 130 Bandwidth Control 131 Bandwidth Control OverviewBandwidth Control on the VCS Example Network Deployment Subzones About the Default Subzone132 Specifying the Subzone IP Addresses Subzone Links XCommand SubZoneAdd 133Creating a Subzone Configuring a Subzone XConfiguration Zones LocalZone SubZone134 Types of Limitations 135Applying Bandwidth Limitations to Subzones How Different Bandwidth Limitations are Managed 136 Default LinksXCommand LinkAdd About Links Creating Links XConfiguration Bandwidth Link 137Editing Links Pre-Configured Links Default LinksAbout Default Links 138 XCommand PipeAdd 139About Pipes Creating Pipes Editing Pipes XConfiguration Bandwidth Pipe140 Editing an Existing Pipe One Pipe, One Link 141Applying Pipes to Links One Pipe, Two or More Links Configuring Default Call Bandwidth and Downspeeding Default Bandwidth and DownspeedingAbout the Default Call Bandwidth 142 143 Bandwidth Control ExamplesExample Without a Firewall 144 VCS Expressway Subzone ConfigurationVCS Control Subzone Configuration Example With a Firewall 145 Firewall Traversal About Expressway VCS as a Firewall Traversal Client 146Firewall Traversal Overview How does it work? Quick Guide to VCS Traversal Client Server Configuration 147VCS Expressway Server Overview Expressway Process Firewall Traversal Protocols 148Firewall Traversal Protocols and Ports SIP Firewall Traversal Protocols Media Call signaling149 SIP Ports Configuration Zones Edit Zone, in the Configuration section Firewall Traversal and AuthenticationAuthentication and NTP 150 Other Issues 151 Adding a New Traversal Client Zone Configuring the VCS as a Traversal Client152 TraversalClient Create Zone Configuring a Traversal Client Zone 153Alternate 1..5 Address Adding a New Traversal Server Zone Configuring the VCS as a Traversal Server154 TraversalServer Create Zone Demux mode Configuring a Traversal Server ZoneClient authentication username 155 Configuring Traversal for Endpoints XConfiguration Zones LocalZone Traversal H323156 Configuring Traversal Server Ports 157 Stun Services 158 Configuring Stun Services 159 Maintenance 160 Overview Upgrading Using SCP/PSCP 161Upgrading Software 162 Upgrading via the Web Interface Option Keys XConfiguration Option 1..64 Key163 Overview Adding Options via the CLI Adding Options via the Web Interface Maintenance Option Keys164 Add option key 165 SecurityOverview Enabling Security XConfiguration SystemUnitPassword PasswordsOverview Configuring Administrator Password 166 System Snapshot Error Reports167 Overview Creating a System Snapshot Restarting XCommand Boot168 Overview Restarting the VCS Shutting Down Maintenance Shutdown169 Overview Shutting Down XCommand DefaultValuesSet Level 3 must be Restoring Default ConfigurationOverview DefaultValuesSet Level 170 171 Appendices CPL Reference Address-switch172 Overview of CPL on the VCS 173 Field 174 SubfieldOtherwise Not-present Location Rule-switch175 Reject CPL Examples Call Screening of Authenticated Users176 Call Screening Based on Alias Change of Domain Name 177Call Screening Based on Domain Dont accept calls from this source 178 Block Calls from Default Zone and Default SubzoneAddress Address is=DefaultSubZone Allow Calls from Locally Registered Endpoints Only Using the rule-switch node Restricting Access to a Local GatewayUsing the address-switch node 179 Overview Common Regular Expressions 180Regular Expression Reference Matches 0 or more repetitions of the previous match 181 Pattern Variable Reference 182 XConfiguration H323 Gatekeeper Registration UDP PortXConfiguration H323 Gatekeeper CallSignaling TCP Port VCS Port Reference 183 XConfiguration Traversal Media Port Start 184 Overview Microsoft DNS Server DNS Configuration185 Verifying the SRV Record 186 Ldap ConfigurationDownloading the Ldap schemas About the Ldap Databases Securing with TLS 187Adding H.350 Objects Create the Organizational Hierarchy Include /etc/openldap/schemas/sipidentity.ldif 188OpenLDAP 189 # MeetingRoom1 endpointSlapadd -l ldif file Command Reference xConfiguration 190 191 192 Example xConfiguration Bandwidth Link 1 Node1 Name HQ Example xConfiguration Bandwidth Downspeed PerCall Mode OnExample xConfiguration Bandwidth Downspeed Total Mode On 193 Example xConfiguration Bandwidth Pipe 1 Name 512Kb Asdl Example xConfiguration Error Reports Mode Off194 Example xConfiguration Ethernet 1 Speed Auto Example xConfiguration Ethernet 1 IP V4 AddressExample xConfiguration Ethernet 1 IP V4 SubnetMask Example xConfiguration ExternalManager Address Example xConfiguration H323 Gatekeeper CallTimeToLive Example xConfiguration H323 Gatekeeper TimeToLive196 197 198 199 Example xConfiguration Registration RestrictionPolicy None 200 201 202 203 Example xConfiguration Traversal Media Port Start Example xConfiguration Transform 1 PriorityExample xConfiguration Traversal Media Port End Example Traversal Server H323 H46018 CallSignaling Port 205 Example xConfiguration Traversal Server Stun Discovery PortExample xConfiguration Traversal Server Stun Relay Mode On Example Traversal Server Stun Relay Port 206 207 208 Example xConfiguration Zones Zone 1 H323 Mode On 209 Example xConfiguration Zones Zone 1 HopCount 210 211 CommandHeadline TextReferenceGoes Here- xConfiguration 212 Example xConfiguration Zones Zone 3 TraversalServer SIP Port 213 Example xConfiguration Zones Zone 1 Type Neighbor 214 Command Reference xCommand 215 Example xCommand AllowListDelete AllowListId Example xCommand boot216 Example xCommand CredentialDelete CredentialId Example xCommand DefaultLinksAdd217 Example xCommand DomainAdd DomainName example.com Example xCommand DefaultValuesSet LevelExample xCommand DenyListDelete DenyListId 218 Example xCommand DomainDelete DomainId Example xCommand FeedbackDeregister ID219 220 Example xCommand LinkDelete LinkId Example xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD221 Example xCommand OptionKeyDelete OptionKeyId Example xCommand PipeDelete PipeId222 223 Example xCommand SubZoneDelete SubZoneId2 Example xCommand TransformDelete TransformId224 Example xCommand ZoneDelete ZoneId Example xCommand ZoneList Alias john.smith@example.com225 Command Reference xStatus 226 CommandHeadline TextReferenceGoes Here- xStatus 227 228 Ethernet 229 NTP 230 Calls 231 232 Registrations 233 Zones 234 235 236 237 Links 238 Alternates 239 H323 240 SIP 241 Stun 242 Bibliography 243 Glossary 244 Secure Socket Layer Hop count 245 PEM 246 VCS 247 Contact Information