Comrex LiveShot Portable, Manual

Page: 82 / 98

80
MakIng cRoSSLock connectIonS WIthout uSIng SWItchboaRd
about cRoSSLock SecuRIty
LiveShot’s default mode is to use CrossLock, which has many advantages in media stability on poor
networks. CrossLock does more than add an enhanced media layer - It creates an actual VPN between
your LiveShots, capable exchanging lots of different data. At the same time, LiveShot is connected to
your LAN - possibly your station’s main corporate LAN. This may raise security concerns.
While no path is explicitly provided to allow connection between the CrossLock VPN and the physical
network it’s connected to, it’s wise to take security precautions in this type of situation. We do this
several ways:
1 Only Comrex products with the proper certificate can make CrossLock
connections
2 We limit the list of devices that can connect to your LiveShot via CrossLock. Units
that are not in a LiveShot’s Switchboard
Peer List will be rejected.
The default Switchboard Peer List is downloaded from the Switchboard Server, and contains only those
LiveShots that are in the unit’s Contact List (this may be, by default, all LiveShots in the account, or
may be edited to be a subset). It will also contain any LiveShots added via the Switchboard “ Shares ”
function. Unless you take special steps, only these LiveShots can connect to you (and vice versa).
You may need to make connections on closed networks where Switchboard is not accessible. In this
case, you will need to make special configurations to each LiveShot.
addIng SWItchboaRd PeeRS ManuaLLy
You have the option of adding manual Switchboard peers, which gives permission for the LiveShot to
connect to them via CrossLock. To make a CrossLock connection this way, the respective peer must be
added to *each* LiveShot Switchboard
Peer List . In other words, both LiveShots must have the other as
a manual Switchboard Peer .
You will need to know the Unit ID (Ethernet MAC address) of both LiveShots in the link, know the public
IP address of the LiveShot that will receive the connection, and have access to both unit’s web-based
config pages.