Tandberg Data N3 3.10 Firewall traversal

TANDBERG Gatekeeper User Manual

24

Figure 17 IP Configuration Screen

3.9.1 URI Dialing and firewall traversal

If URI dialing is being used in conjunction with firewall traversal, DNSResolutionMode should

only be enabled on the Border Controller. The DNS records should be updated with the

address of the Border Controller as the authoritative Gatekeeper for the enterprise. This

ensures that calls placed using URI dialing enter and leave the enterprise through the Border

Controller, allowing successful traversal of the firewall.

The LocalDomain DomainName should be set on both the Gatekeeper and the Border

Controller. Any Alternates should also have the same LocalDomain Domain Name.

3.9.2 Creating DNS SRV records

URI dialing relies on the presence of SRV Record in the DNS information for the zone. The

SRV record specifies the location of a server for a particular protocol and domain. Its format is

defined by an Internet standard RFC 27824 as

_Service._Proto.Name TTL Class SRV Priority Weight Port Target

In our case _Service is defined by the H.323 protocol suite to be _h323ls and _Proto is

_udp. Name corresponds to the host part of the H.323 URI.

How you add the SRV record depends on the type of DNS server you are using. Instructions

for setting up two common DNS servers are given in Appendix: Configuring DNS Servers.

3.10 Firewall traversal

When used with a TANDBERG Border Controller, your Gatekeeper can assist you in making

and receiving calls through firewalls and NAT devices.

Install the Gatekeeper on the private side of your firewall and the Border Controller on the

public side.

4 http://www.ietf.org/rfc/rfc2782.txt

Contents

Main Trademarks and copyright Environmental Issues TANDBERGs Environmental Policy Environmental Considerations Operator Safety Summary Table Of Contents Page 1 Introduction Page 2 Installation 2.1 Unpacking 2.2 Mounting 2.3 Connecting Cables 2.4 Switching on the System 2.5 Gatekeeper Initial Configuration Page 3 Using the Gatekeeper 3.1 System Administration 3.2 Registration 3.3 Neighbor Gatekeepers 3.4 Alternate Gatekeepers Page 3.5 Call Control Page Page 3.6 Bandwidth Control IP Page 3.6.1 Bandwidth Control and Firewall Traversal 3.6.2 Bandwidth Control Examples Enterprise Branch Office Home Office Home sub-zone Page 3.7 Registration Control 3.7.1 Registration Restriction Policy 3.7.2 Authentication 3.8 H.235 Authentication 3.8.1 Authentication using a local database 3.8.2 Authentication using an LDAP server Securing the LDAP connection with TLS 3.9 URI Dialing 3.9.1 URI Dialing and firewall traversal 3.9.2 Creating DNS SRV records 3.10 Firewall traversal 3.10.1 Calling unregistered endpoints 3.11 Call Policy 3.11.1 Making Decisions Based on Addresses address-switch address otherwise not-present 3.11.2 CPL Script Actions location proxy reject Selective Call Screening 3.11.3 Unsupported CPL Elements 3.11.4 CPL Examples Call screening Call Redirection 4 Software Upgrade 4.1 Upgrading Using HTTP(S) 4.2 Upgrading Using SCP Page 5 Configuring the Gatekeeper 5.1 Status xstatus ? xstatus TANDBERG Gatekeeper User Manual 5.2 Configuration xconfiguration ? xconfiguration xconfiguration <name> xconfiguration <name> ? xconfiguration <name> <param1>: value1 <param2>: value2 Page Page Page Page TANDBERG Gatekeeper User Manual 40 Configuration commands Description 5.3 Command xcommand ? To get usage information for a specific command, type xcommand <commandname> ? Command Usage Description Page 5.4 History xhistory ? xhistory xhistory <name> 5.5 Feedback 5.6 Other commands Page 6 Appendix: Configuring DNS Servers 6.1 Microsoft DNS Server 6.2 BIND 8 & 9 6.3 Verifying the SRV record 7 Appendix: Configuring LDAP Servers 7.1 Microsoft Active Directory 7.1.1 Prerequisites 7.1.2 Adding H.350 objects Create the organizational hierarchy Add the H.350 objects 7.2 OpenLDAP 7.2.1 Prerequisites 7.2.2 Installing the H.350 schemas 7.2.3 Adding H.350 objects Create the organizational hierarchy Add the H.350 objects 7.2.4 Securing with TLS 8 Approvals EMC Emission - Radiated Electromagnetic Interference EMC Immunity Electrical Safety 9 Technical Specifications 10 Index