TANDBERG Border Controller User Guide
Page 41 of 118
9.2.
Authentication
The TANDBERG Border Controller can use a user name and password based challenge-response
scheme to permit registrations. For details of how to configure your endpoint with the appropriate
information, please consult your endpoint manual.
The Border Controller supports the ITU H.235 specification [1] for authenticating the identity of network
devices with which the Border Controller communicates.
In order to verify the identity of a device, the Border Controller needs access to the password
information. This credential information may be stored in a local database on the Border Controller or
obtained from an LDAP Directory Server.
Additionally, the Border Controller can be configured with its own username and password which it uses
when authenticating with other systems, such as other TANDBERG Border Controllers, Gatekeepers or
VCS systems.
9.2.1.
Authentication and NTP
In order for an endpoint or other device to successfully authenticate with the Border Controller, the date
and time on both systems must be synchronized. Accurate timestamps play an important part in
authentication, helping to guard against replay attacks.
We recommend that all systems are synchronized through the use of an NTP server.
To configure the Border Controller with the details of an NTP server, either use the command line
interface and issue the following command:
xconfiguration NTP Address: <Address>
or use the web interface via
System Configuration
>
IP
, and in the
Date and Time Settings
section, enter
the IP Address or name of the NTP server you wish to use.
9.2.2.
Authentication using a local database
To configure the Border Controller to use the local database of credentials during authentication, either
use the command line interface and issue the following commands:
xConfiguration Authentication Mode: On
xConfiguration Authentication Database: LocalDatabase
or use the web interface via
Border Controller Configuration
>
Authentication
, setting
Authentication
mode
to
On
and the
Authentication database
to
LocalDatabase
.
Viewing credentials
To show the credentials in the local database, either use the command line interface and issue the
following command:
xConfiguration Authentication Credential
or use the web interface via
Border Controller Configuration
>
Credentials.
Managing credentials
Each credential in the local database has a username and a password. To manage the credentials in the
local database, either use the command line interface to issue the following commands:
xcommand CredentialAdd <user name> <password>
xcommand CredentialDelete <credential index>
or use the web interface via
Border Controller Configuration
>
Credentials
. From here you can either add
a new credential by selecting
Add New Credential
, or manage an existing credential by highlighting it and
selecting
Edit
or
Delete
.
9.2.3.
Authentication using an LDAP server
Authentication information can be obtained from an LDAP server. The directory on the LDAP server
should be configured to implement the ITU H.350 specification [2] to store H.235 credentials for devices
