Tandberg Data N3 - page 24

TANDBERG Gatekeeper User Manual

18

In Figure , the endpoints in the enterprise register with the Gatekeeper, whilst those in the

branch and home office register with the Border Controller.

Border

Controller

Branch

Office

Home

Office

Traversal

sub-zone

Home

sub-zone

Branch

sub-zone

Enterprise

Pipe Home

Pipe

Branch

Pipe

Enterprise

Traversal

Zone

Figure 11 Border Controller example configuration

Figure 11 shows how the Border Controller could be configured for the deployment in Figure

10. The introduction of the firewalls means that there is no longer any direct connectivity

between the Branch and Home offices. All traffic must be routed through the Border

Controller. This is shown by the absence of a link between the Home and Branch subzones.

The Traversal Zone in Figure 11 represents the Enterprise Gatekeeper. The Border Controller

will consume bandwidth from the Traversal Zone for all calls placed to endpoints managed by

the Enterprise Gatekeeper. In this example we have assumed that there is no bottleneck on

the link between the Border Controller and the Enterprise network, so have not placed a pipe

on this link. If you want to limit the amount of traffic flowing through your firewall, you could

provision a pipe on this link.

The traversal subzone in Figure 11 may be used to control the amount of traffic flowing

through the Border Controller itself.

Because the Gatekeeper is only managing endpoints on the LAN, its configuration is simpler

as shown in Figure 12.

Contents

Main Trademarks and copyright Environmental Issues TANDBERGs Environmental Policy Environmental Considerations Operator Safety Summary Table Of Contents Page 1 Introduction Page 2 Installation 2.1 Unpacking 2.2 Mounting 2.3 Connecting Cables 2.4 Switching on the System 2.5 Gatekeeper Initial Configuration Page 3 Using the Gatekeeper 3.1 System Administration 3.2 Registration 3.3 Neighbor Gatekeepers 3.4 Alternate Gatekeepers Page 3.5 Call Control Page Page 3.6 Bandwidth Control IP Page 3.6.1 Bandwidth Control and Firewall Traversal 3.6.2 Bandwidth Control Examples Enterprise Branch Office Home Office Home sub-zone Page 3.7 Registration Control 3.7.1 Registration Restriction Policy 3.7.2 Authentication 3.8 H.235 Authentication 3.8.1 Authentication using a local database 3.8.2 Authentication using an LDAP server Securing the LDAP connection with TLS 3.9 URI Dialing 3.9.1 URI Dialing and firewall traversal 3.9.2 Creating DNS SRV records 3.10 Firewall traversal 3.10.1 Calling unregistered endpoints 3.11 Call Policy 3.11.1 Making Decisions Based on Addresses address-switch address otherwise not-present 3.11.2 CPL Script Actions location proxy reject Selective Call Screening 3.11.3 Unsupported CPL Elements 3.11.4 CPL Examples Call screening Call Redirection 4 Software Upgrade 4.1 Upgrading Using HTTP(S) 4.2 Upgrading Using SCP Page 5 Configuring the Gatekeeper 5.1 Status xstatus ? xstatus TANDBERG Gatekeeper User Manual 5.2 Configuration xconfiguration ? xconfiguration xconfiguration <name> xconfiguration <name> ? xconfiguration <name> <param1>: value1 <param2>: value2 Page Page Page Page TANDBERG Gatekeeper User Manual 40 Configuration commands Description 5.3 Command xcommand ? To get usage information for a specific command, type xcommand <commandname> ? Command Usage Description Page 5.4 History xhistory ? xhistory xhistory <name> 5.5 Feedback 5.6 Other commands Page 6 Appendix: Configuring DNS Servers 6.1 Microsoft DNS Server 6.2 BIND 8 & 9 6.3 Verifying the SRV record 7 Appendix: Configuring LDAP Servers 7.1 Microsoft Active Directory 7.1.1 Prerequisites 7.1.2 Adding H.350 objects Create the organizational hierarchy Add the H.350 objects 7.2 OpenLDAP 7.2.1 Prerequisites 7.2.2 Installing the H.350 schemas 7.2.3 Adding H.350 objects Create the organizational hierarchy Add the H.350 objects 7.2.4 Securing with TLS 8 Approvals EMC Emission - Radiated Electromagnetic Interference EMC Immunity Electrical Safety 9 Technical Specifications 10 Index