TANDBERG VCS Administration Manual Download Page 130

Page: 130 / 187

D 14049.01
07.2007

TANDBERG

VIDEO COMMUNICATION SERVER

ADMINISTRATOR GUIDE

Text goes here

Introduction

Getting

Started

System

Overview

System

Configuration

H.323 & SIP

Configuration

Registration

Control

Zones and

Neighbors

Call

Processing

Firewall

Traversal

Bandwidth

Control

Maintenance

Appendices

TANDBERG

VIDEO COMMUNICATION SERVER

ADMINISTRATOR GUIDE

Appendices

TANDBERG

VIDEO COMMUNICATION SERVER

ADMINISTRATOR GUIDE

Appendices

Command Reference - xConfiguration

Authentication
cont...

LDAP

AliasOrigin: <LDAP/Endpoint/Combined>

Determines which aliases (i.e. from the endpoint or the database) should be used to register the endpoint.

LDAP

: the alias(es) presented by the endpoint will be used as long as they are listed in the LDAP database for the endpoint’s username.

Endpoint

: the alias(es) presented by the endpoint will be used; any in the LDAP database will be ignored.

Combined

: the alias(es) presented by the endpoint will be used in addition to any that are listed in the LDAP database for the endpoint’s username.

BaseDN: <S: 0, 55>

Specifies the Distinguished Name to use when connecting to an LDAP server.

Mode: <On/Off>

Determines whether or not to enforce authentication for H.323 and SIP registrations.

: authentication is required.

Off

: authentication is not required.

Password: <S: 0, 50>

Specifies the password to be used by the VCS when authenticating with another system.

UserName: <S: 0, 55>

Specifies the username to be used by the VCS when authenticating with another system.

Bandwidth

Default: <64..048>

Sets the bandwidth (in kbps) to be used on calls managed by the VCS in cases where no bandwidth has been specified by the endpoint.

Downspeed

PerCall

Mode: <On/Off>

Determines whether or not the system will attempt to downspeed a call if there is insufficient per-call bandwidth available to fulfil the

request.

: the system will attempt to place the call at a lower bandwidth.

Off

: the call will be rejected.

Total

Mode: <On/Off>

Determines whether or not the system will attempt to downspeed a call if there is insufficient total bandwidth available to fulfill the

request.

: the system will attempt to place the call at a lower bandwidth.

Off

: the call will be rejected.

Summary of Contents for VCS

Page 1: ...tion H 323 SIP Configuration Registration Control Zones and Neighbors Call Processing Firewall Traversal Bandwidth Control Maintenance Appendices Software version X1 0 D14049 01 July 2007 VIDEO COMMUN...

Page 2: ...nistrator Password 15 Changing the Administrator Password 15 Resetting the Administrator Password 15 Session Timeout 15 Root Account 15 Using the Web Interface 16 Supported Browsers 16 Using the Comma...

Page 3: ...39 Finding a VCS with which to Register 40 SIP 40 H 323 40 Authentication 41 About Authentication 41 Configuring Authentication 41 Authentication using an LDAP Server 42 Configuring the LDAP Server Di...

Page 4: ...Accessing the FindMe Configuration Page 72 Configuring your FindMe User Account 73 Alias Searching and Transforming 74 Overview of Searches and Transforms 74 About Searches 74 About Transforms 74 Tran...

Page 5: ...l Traversal Client 97 VCS as a Firewall Traversal Server 97 Firewall Traversal Protocols and Ports 98 Overview 98 Process 98 Ports for Initial Connections from Traversal Clients 98 H 323 Firewall Trav...

Page 6: ...ce 125 Security 126 About Security 126 Enabling Security 126 Passwords 127 Changing the Administrator Password 127 System Snapshot 127 About the System Snapshot 127 Creating a System Snapshot 127 Rest...

Page 7: ...d stored in a retrieval system or transmitted in any form or by any means electronically mechanically by photocopying or otherwise without the prior written permission of TANDBERG Nationally and inter...

Page 8: ...cribed in this manual is protected by one or more of the following U S Patent Nos 5 600 646 5 768 263 5 838 664 5 991 277 6 584 077 6 590 603 7 010 119 7 034 860 U S Patent Application Nos 10 332 785...

Page 9: ...e power cord to the product power supply serves as the main disconnect device for this equipment The power cord must always be easily accessible Route the power cord so as to avoid it being walked on...

Page 10: ...al impact of WEEE which is landfilled or incinerated TANDBERG has implemented necessary process changes to comply with the European RoHS Directive 2002 95 EC and the European WEEE Directive 2002 96 EC...

Page 11: ...Control Maintenance Appendices Introduction 12 TANDBERG CONTENT S USER Table of ontents What s New in this Version Trademark Licenses Safety Environmental Introduction Installation Quick Setup Operati...

Page 12: ...gatewaying for locally registered endpoints IPv4 and IPv6 support including IPv4 IPv6 gatewaying Bandwidth management on both a per call and a total usage basis configurable separately for calls withi...

Page 13: ...4 inches in front of the front panel The room in which you install the VCS should have an ambient temperature between 0 C and 35 C 32 F and 95 F and between 10 and 90 non condensing relative humidity...

Page 14: ...administer the system Whether you want to use Telnet to administer the system Once the wizard is finished you will be prompted to log in again Login with the username admin and your new password You...

Page 15: ...ll be taken to the Passwords page In the Administrator Password section enter and then retype the new password xConfiguration SystemUnit Password To set an empty password type xConfiguration SystemUni...

Page 16: ...Enter the Username admin and your system password and select Login You will be presented with the Overview page 3 Supported Browsers The VCS web interface is designed for use with Internet Explorer 6...

Page 17: ...al port To use the command line interface Start a SSH or Telnet session Enter the IP address or FQDN of the VCS Login with a username of admin and your system password Commands are divided into differ...

Page 18: ...andled by the VCS since it was last restarted Total The total number of traversal calls handled by the VCS since it was last restarted Non traversal calls Current The number of non traversal calls goi...

Page 19: ...identify it Session time out minutes Sets the number of minutes that an administration session HTTPS Telnet or SSH may be inactive before the session is timed out A value of 0 turns session time outs...

Page 20: ...will be taken to the Ethernet page xConfiguration Ethernet Ethernet Configuration About Ethernet Speed The Ethernet speed setting determines the speed of the connection between the VCS and the ethern...

Page 21: ...nly Both The VCS will accept registrations from endpoints using either an IPv4 or IPv6 address and will take calls using either protocol If a call is between an IPv4 only and an IPv6 only endpoint the...

Page 22: ...hen attempting to resolve server addresses configured on the VCS that are not fully qualified It applies only to the following LDAP server NTP server External Manager server The DNS Domain Name is app...

Page 23: ...n helping to guard against replay attacks For this reason we recommend that you use an NTP server to synchronize the system time Setting the Time Zone All events are recorded using the local date and...

Page 24: ...he name of the SNMP community within which it resides You may optionally provide the name of a System contact and the physical Location of the system for reference by administrators when following up...

Page 25: ...ts connections and disconnections The use of an External Manager is optional In order to use an External Manager you must configure the VCS with the IP address or host name and path of the External Ma...

Page 26: ...ON SERVER ADMINISTRATOR GUIDE System Configuration You are recommended to maintain a backup of your VCS configuration To do this Use the command line interface to log on to the VCS Issue the command x...

Page 27: ...vel 1 events considered the most important The table below gives an overview of the levels assigned to different events See Events Logged at Level 1 Events Logged at Level 2 and Events Logged at Level...

Page 28: ...of the UNIX syslog format date time host _ name facility _ name PID message _ details where Field Description date the local date on which the message was logged time the local time at which the mess...

Page 29: ...Detail event parameter may contain a textual representation of the H 225 additional cause code Registration Removed A registration has been removed by the VCS The Reason event parameter specifies the...

Page 30: ...s concerned Possible values for the detail field are Non Traversal Call Limit Reached Traversal Call Limit Reached Decode Error A syntax error was encountered when decoding a SIP message TLS Negotiati...

Page 31: ...device attempting to establish communications The source IP is recorded in the dotted decimal format number number number number or the IPv6 colon separated format Dst ip Specifies the destination IP...

Page 32: ...quests the AOR for the REGISTER request RequestURI The SIP or SIPS URI indicating the user or service to which this request is being addressed NumBytes The number of bytes sent received in the message...

Page 33: ...will send an IRQ to the endpoint to verify that it is still functioning The system will poll endpoints in a call regardless of whether the call type is traversal or non traversal H 323 Endpoint Regist...

Page 34: ...e port that listens for H 323 call signaling Registration conflict mode Determines how the system will behave if an endpoint attempts to register an alias currently registered from another IP address...

Page 35: ...ts exact behavior when proxying requests is determined by the SIP Registration Proxy Mode setting This in turn depends on the presence of Route Set information in the request header and whether or not...

Page 36: ...will be rejected Proxy to known only Registration requests will be proxied and invite requests will be proxied only if the Route Set contains the URI s of Neighbors Proxy to any Registration requests...

Page 37: ...Domains page To add a new domain click New You will be taken to the Create Domain page Enter the domain in the Name field and click Create Domain The new domain will be added and you will be returned...

Page 38: ...call and will therefore consume one traversal licence for the duration of the call Interworking Overview Configuring Interworking Interworking is enabled via VCS Configuration Protocols Interworking...

Page 39: ...tems such as gateways MCUs and Content Servers can also register with a VCS They are known as locally registered services These systems are configured with their own prefix which they provide to the V...

Page 40: ...he user must specify the IP address of the Registrar with which they wish to register and the endpoint will attempt to register with that Registrar only The VCS is a SIP Server for endpoints in its lo...

Page 41: ...he VCS before registering Off no authentication is required for endpoints The default is Off Authentication database Determines which database the VCS will use during authentication LocalDatabase the...

Page 42: ...ore than one alias but none are listed in the LDAP database it will not be allowed to register If no aliases are presented by the endpoint it will be registered with all the aliases listed in the LDAP...

Page 43: ...ects reside Alias origin Determines the source of the alias es with which the endpoint will be registered LDAP The aliases listed in the LDAP database for the endpoint s username will be used those pr...

Page 44: ...Select Create Credential to add the new entry to the Local Database and return to the Credentials page Save Saves the changes you have made Delete Removes the entry from the Local Database and returns...

Page 45: ...eature is known as forking Registration conflict mode Determines what will happen when an H 323 endpoint attempts to register using an alias that has already been registered from another IP address Re...

Page 46: ...stration will be denied Likewise if the Registration Restriction policy is set to AllowList only one of the endpoint s aliases needs to match a pattern on the Allow list for it to be allowed to regist...

Page 47: ...the pattern you wish to add to the Allow List Add Allow List Pattern Click here to save the entry and return to the Registration Allow List page Type Select the way in which the Pattern must match the...

Page 48: ...changes Registration Deny List This page shows all the existing entries in the Deny List View Edit Select View Edit to make changes to an existing entry You will be taken to the Edit Deny Pattern page...

Page 49: ...etwork of endpoints other VCSs and other network infrastructure devices with one or more firewalls between it and the internet In addition you may wish to apply restrictions to the amount of bandwidth...

Page 50: ...ones you can apply bandwidth limits to individual calls between two endpoints within the subzone individual calls between an endpoint within the subzone and another endpoint outside of the subzone the...

Page 51: ...ther system by adding it as a neighbor zone on your local VCS Once you have added it you can query the neighbor about its endpoints apply transforms to any queries before they are sent to the neighbor...

Page 52: ...at follow describe the configuration options available for each zone type Adding Zones Name Enter the name you wish to give to this zone The name acts as a unique identifier allowing you to distinguis...

Page 53: ...alias search request to this particular zone Name Assigns a name to the zone The name acts as a unique identifier allowing you to distinguish between zones of the same type Type Determines the nature...

Page 54: ...H 323 port Specifies the port on the neighbor system to be used for H 323 calls to and from the local VCS SIP transport Determines which transport type will be used for SIP calls to and from the neig...

Page 55: ...onds with which a failed attempt to establish a connection to the traversal server should be retried Primary address Specifies the IP address or FQDN of the traversal server Alternate 1 to Alternate 5...

Page 56: ...erse the firewall NAT See Firewall Traversal Protocols for more information H 460 19 demultiplexing Mode Determines whether or not the same two ports can be used for media by two or more calls On all...

Page 57: ...e is queried Configuring ENUM Zones Configuring DNS Zones SIP mode Determines whether SIP records will be looked up for this zone H 323 mode Determines whether H 323 records will be looked up for this...

Page 58: ...rnates You will be taken to the Alternates page xConfiguration Alternates Alternate 1 to Alternate 5 IP address To configure another VCS as an Alternate enter its IP address Up to 5 Alternates may be...

Page 59: ...em they are registering with If you are using E 164 aliases each VCS would be assigned an area code When the VCSs are neighbored together each neighbor zone is configured with its corresponding area c...

Page 60: ...ser Policy to the alias If the alias is a FindMe name the process will start again all the resulting aliases will be checked against Local Zone transforms and Administrator Policy The VCS then checks...

Page 61: ...s registered to a VCS Border Controller Calls made by dialing the IP address of an endpoint registered directly with a VCS Border Controller will be forced to route through the VCS Border Controller T...

Page 62: ...y time the request is forwarded to another neighbor gatekeeper or proxy the hop count value is decreased by a value of 1 When the hop count reaches 0 it will not be forwarded on any further The hop co...

Page 63: ...henticate with it before calls will be accepted In this situation the VCS acts as follows An endpoint is considered to be authenticated when it is a locally registered endpoint Because Authentication...

Page 64: ...rator Policy page xConfiguration Policy AdministratorPolicy Mode Administrator Policy Mode On Administrator Policy is enabled If a CPL script has been uploaded this policy will be used Otherwise the p...

Page 65: ...tor Policy via the Web Interface Delete To remove one or more line items from the list check the box to the left of the item and then click Delete Add New Click to add the new item to the Policy A new...

Page 66: ...cript if Administrator Policy has been configured using a CPL script this will show you the script that was uploaded if Administrator Policy has been configured using the web interface this will show...

Page 67: ...User Policy has been enabled If so the VCS queries the User Policy Manager to see whether that alias is listed as a FindMe name If so the call is forwarded to the endpoints according to the User Polic...

Page 68: ...er Policy Manager is used Remote User Policy is enabled and a User Policy Manager located on another system is used If you select this option further configuration options will appear see below Config...

Page 69: ...ew You will be taken to the Create User Account page Initial password The password to be used along with the Username when logging into this account FindMe name The FindMe name on which the user can b...

Page 70: ...to the Edit User Account page New password Type the new password to be used along with the Username when logging into this account Cancel Click here to return to the User Accounts page without changi...

Page 71: ...sing TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Call Processing User Policy Managing FindMe User Accounts Deleting a User Account To change delete a FindMe user account VCS Configuration...

Page 72: ...t up by your system administrator Once this has been done you can log in to your account via a web interface and configure it with details of the device s on which you want to be contacted when a call...

Page 73: ...vices List the all the device s that will ring when your FindMe name is first dialled If more than one device is listed here they will all ring at the same time Busy Devices For an individual list all...

Page 74: ...eighboring VCSs It does not apply to search requests from Alternates Each local alias transform defines a string against which an alias is compared and the changes to make to the alias if it matches t...

Page 75: ...be treated as a regular expression Pattern string Specifies the pattern against which the alias is compared Priority Assigns a priority to this transform Transforms are applied in order of priority an...

Page 76: ...specify the pattern that the alias to be transformed must match specify the way in which the alias will be transformed All searches sent to that zone that match the specified pattern will then be tran...

Page 77: ...ernMatch Determines if and how the matched part of the alias will be modified Options are Leave the alias will not be modified Strip the matching prefix or suffix will be removed from the alias Replac...

Page 78: ...orities to each match you will have a great deal of flexibility in determining if and when the zone will be queried and whether any transforms will be applied Some example configurations are given her...

Page 79: ...for your head office VCS to query the sales office VCS only when it receives a search request for an alias with a suffix of sales example com Sending any other search requests to this particular VCS w...

Page 80: ...In this situation the VCS will query that zone for each of the new aliases simultaneously Any duplicate aliases produced by the transforms will be removed prior to the search requests being sent out...

Page 81: ...nable endpoints registered to your VCS to receive calls directly using URI dialing you must ensure all endpoints are registered with a URI address configure appropriate DNS records depending on the pr...

Page 82: ...e domain part of the URI address was resolved successfully using an H 323 Location SRV record i e for _ h323ls then the address returned is queried via an LRQ for the full URI address If the domain pa...

Page 83: ...igure at least one DNS zone To do this VCS Configuration Zones You will be taken to the Zones page Click New You will be taken to the Create Zone page Enter a Name for the zone and select a Type of DN...

Page 84: ...the IP address es of up to 5 DNS servers that the VCS will query when attempting to locate a domain In order for endpoints registered to the VCS to make outgoing calls using URI dialing you must confi...

Page 85: ...RV record should be as follows _ Service is _ h323cs _ Proto is _ tcp Port is the port number that has been configured via VCS Configuration Protocols H 323 as the Call signaling TCP port SRV Record F...

Page 86: ...om SRV record for _ sip _ tls example com returns vcs example com A record for vcs example com returns the IPv4 address of the VCS AAAA record for vcs example com returns the IPv6 address of the VCS H...

Page 87: ...ng your endpoints E 164 numbers to their SIP H 323 URIs See the section Configuring ENUM dialing for incoming calls for instructions on how to do this ENUM Dialing Overview The VCS supports outward EN...

Page 88: ...on the VCS is queried the E 164 number is transformed into an ENUM domain as follows the digits are reversed and separated by a dot the DNS Suffix configured for that ENUM zone is appended DNS is the...

Page 89: ...and Pattern type fields to define the aliases that will trigger an ENUM lookup Example For example you want to enable ENUM dialing from your network to a remote office in the UK where the endpoints E...

Page 90: ...NUM zones may be configured on the VCS You should configure at least one ENUM zone for each DNS suffix that your endpoints may use Normal zone pattern matching and prioritization rules will apply to E...

Page 91: ...he IP address es of up to 5 DNS servers that the VCS will query when attempting to locate a domain In order for endpoints registered to the VCS to make outgoing calls using ENUM dialing you must confi...

Page 92: ...E 164 numbers and their SIP H 323 URIs RFC 3761 8 which is part of a suite of documents that define the ENUM standard specifies that the domain for ENUM where the NAPTR records should be located for p...

Page 93: ...call from an unregistered endpoint Calls to an Unregistered Endpoint Recommended Configuration for Firewall Traversal When the VCS Border Controller is neighbored with an internal VCS for firewall tr...

Page 94: ...e Fallback Alias Example Use of a Fallback Alias You may wish to configure your Fallback Alias to be that of your receptionist so that all calls that do not specify an alias will still be answered per...

Page 95: ...there is already a call in progress with an ID of 1 the next call will be assigned an ID of 2 If call 1 is then disconnected the third call to be made will be assigned an ID of 1 The call ID number is...

Page 96: ...igned to a new call For this reason the VCS also allows you to reference the call using the longer but unique call serial number Disconnecting a Call via the CLI The call disconnection API works diffe...

Page 97: ...aversal enabled endpoints that are registered directly to it It can also provide STUN Discovery and STUN relay services to endpoints with STUN clients To enable server side firewall traversal for othe...

Page 98: ...will not support connections to ports other than UDP 1719 We therefore recommend that this be left as the default Ports for Initial Connections from Traversal Clients Each traversal server zone specif...

Page 99: ...60 default signaling UDP 50 000 51200 media TCP a temporary port is allocated STUN Ports The VCS Border Controller can be enabled to provide STUN services STUN Relay and STUN Binding Discovery that ca...

Page 100: ...VCS client provides its Authentication Username and Authentication Password These are set on the client via VCS Configuration Authentication Configuration If the Border Controller is in Assent mode t...

Page 101: ...ng you to distinguish between zones of the same type Type From the Type drop down menu select TraversalClient Create Zone Click here to create the zone You will be taken directly to the Edit Zone page...

Page 102: ...mode Determines whether H 323 calls will be allowed to and from this zone H 323 port Specifies the port on the traversal server to be used for H 323 firewall traversal calls H 323 protocol Determines...

Page 103: ...oints registered directly with it You can configure the protocols and ports that will be used Enable and configure STUN services Configure the ports used specifically for firewall traversal services T...

Page 104: ...client Authentication username If the traversal client is a VCS this must be the VCS s Authentication Username If the traversal client is a gatekeeper this must be the gatekeeper s System Name H 460...

Page 105: ...same two ports for all calls Off Each call will use a separate pair of ports for media H 323 preference If an endpoint supports both Assent and H 460 18 protocols this setting determines which the VC...

Page 106: ...ssary To configure the VCS traversal server ports VCS Configuration Border Controller Ports You will be taken to the Ports page xConfiguration Traversal Server Media xConfiguration Traversal Server H...

Page 107: ...e binding allocated by the NAT firewall being traversed How it works A client behind a NAT firewall sends a STUN discovery request via the firewall to the VCS Border Controller which has been configur...

Page 108: ...etermines whether the VCS will offer STUN Discovery services to traversal clients Save Click here to save your changes STUN relay port Specifies the port on the VCS on which it will be listening for S...

Page 109: ...create a new subzone for each pool of endpoints so that you can apply suitable limitations to the bandwidth used within and between each subzone About Bandwidth Control The TANDBERG VCS allows you to...

Page 110: ...ndpoint registers with the VCS its IP address is checked and it is assigned to the appropriate subzone If no subzones have been created or the endpoint s IP address does not match any of the specified...

Page 111: ...prefix length of 16 255 255 255 0 is equivalent to a prefix length of 24 Prefix Enter the number of bits of the Subnet IP Address which must match for an IP address to belong in this subzone Create Su...

Page 112: ...fer to this name when creating Links and Pipes Subnet 1 Enter the subnet IP Address and Prefix This will define the range of IP addresses that will belong to this subzone Subnet 2 5 Use these fields t...

Page 113: ...ific subzone and another specific subzone or zone If your bandwidth configuration is such that multiple types of bandwidth restrictions are placed on a call for example if there are both subzone bandw...

Page 114: ...e you wish to give to this pipe You will refer to this name when creating links Create Pipe Click here to create the pipe and return to the Pipes page About Pipes Creating a new pipe To create a pipe...

Page 115: ...to give to this pipe You will refer to this name when creating links Save Click here to save the changes Total bandwidth mode Determines whether there is a limit on the total concurrent bandwidth of...

Page 116: ...lable If multiple routes are possible your VCS will perform the bandwidth calculations using the one with the fewest links Creating Links Name Enter the name you wish to assign to this link Node 1 Nod...

Page 117: ...ode 1 Node 2 Select the names of the two subzones or the subzone and zone between which you wish to create a link Pipe 1 Pipe 2 If you wish to apply bandwidth limitations to this link select the pipe...

Page 118: ...xample two sites that each have their own broadband connection to the Internet Each connection should have its own pipe meaning that a link between the two nodes should be subject to the bandwidth res...

Page 119: ...andwidth would mean that the total bandwidth limits for that subzone or pipe s would be exceeded Default Call Bandwidth Insufficient Bandwidth and Downspeeding Configuring the Default Call Bandwidth a...

Page 120: ...and Branch is represented as a separate subzone on the VCS with bandwidth configured according to local policy The enterprise s leased line connection to the Internet and the DSL connections to the re...

Page 121: ...the VCS Border Controller This is shown by the absence of a link between the Home and Branch subzones VCS Border Controller Subzone Configuration The VCS Border Controller has subzones configured for...

Page 122: ...key Enter password when prompted Copy the software image using SCP PSCP The target name must be tmp tandberg image tar gz e g scp s42100x11 tar gz root 10 0 0 1 tmp tandberg image tar gz or pscp s4210...

Page 123: ...tware You will be taken to a new page Select the software file Enter the path of the software image file or click Browse to locate it on the network Install Click here to upload the image file System...

Page 124: ...he number of non traversal calls allowed the number of registrations allowed To add any of these extra options you need to obtain a valid Option Key and install it on your system Contact your TANDBERG...

Page 125: ...GUIDE Maintenance This section lists the keys that are already installed on your system along with a description of the options they provide Add option key Enter the 20 character Option Key that has b...

Page 126: ...sted by the VCS The VCS will only accept certificates signed by a CA on this list If you are connecting to an LDAP database using TLS encryption the certificate used by the LDAP database must be signe...

Page 127: ...our system support representative at their request to assist them in troubleshooting issues you may be experiencing Creating a System Snapshot To create a system snapshot file Maintenance System Snaps...

Page 128: ...eeds to be restarted Restarting will cause any active calls to be terminated There are two ways to restart the system Maintenance Restart You will be taken to the Restart page xCommand Boot Restart Sy...

Page 129: ...s whether the VCS can be accessed via SSH and SCP On SSH SCP access is enabled Off SSH SCP access is disabled Telnet Mode On Off Determines whether the VCS can be accessed via Telnet On Telnet access...

Page 130: ...atabase for the endpoint s username BaseDN S 0 255 Specifies the Distinguished Name to use when connecting to an LDAP server Mode On Off Determines whether or not to enforce authentication for H 323 a...

Page 131: ...s the first pipe to be associated with this link Pipe2 Name S 0 50 Specifies the second pipe to be associated with this link Pipe 1 100 Bandwidth PerCall Mode None Limited Unlimited Determines whether...

Page 132: ...ow any endpoint registered directly to the VCS to call an IP address of any system not also registered directly to that VCS Fallback Alias S 0 60 Specifies the alias to which incoming calls are placed...

Page 133: ...seconds at which an H 323 endpoint must re register with the VCS in order to confirm that it is still functioning Mode On Off Determines whether or not the VCS will provide H 323 gatekeeper functiona...

Page 134: ...oth IPv4 IPv6 Selects the IP protocol s supported by the VCS Both the VCS will support both IPv4 and IPv6 IPv4 the VCS will support IPv4 only IPv6 the VCS will support IPv6 only Note You must restart...

Page 135: ...ormation Policy AdministratorPolicy Mode On Off Enables and disables use of Administrator Policy On Administrator Policy is in use Off Administrator Policy is not in use UserPolicy Mode Off Local Remo...

Page 136: ...If one of an endpoint s aliases matches one of the patterns in the Deny List the regis tration will not be permitted Type Exact Prefix Suffix Regex Determines the way in which the entry in the Deny L...

Page 137: ...egistration requests will be proxied to neighbors only ProxyToAny Registration requests will be proxied in accordance with the VCS s existing call processing rules TCP Mode On Off Determines whether i...

Page 138: ...on of the VCS SystemUnit Name S 0 50 Defines the name of the VCS Choose a name that uniquely identifies the system Password S 0 16 Defines the password of the VCS The password is used to login with Te...

Page 139: ...e the VCS is taking the media as well as the signaling specifies the lower port in the range to be used for the media End 1024 65534 For traversal calls i e where the VCS is taking the media as well a...

Page 140: ...media relay End 1024 65534 Specifies the upper port in the range to be used for STUN media relay Zones LocalZone DefaultSubZone Bandwidth PerCall Inter Mode None Limited Unlimited Determines whether...

Page 141: ...Limit 1 100000000 applies only if Mode is set to Limited Sets the total bandwidth limit in kbps of the Default Subzone SubZone 1 100 Bandwidth PerCall Inter Mode None Limited Unlimited Determines whe...

Page 142: ...to this subzone Subnet 1 5 IP Address S 0 39 Specifies an IP address used in conjunction with the IP Prefix Length to identify a subnet to be assigned to this subzone PrefixLength 0 128 Specifies the...

Page 143: ...which a traversal enabled endpoint registered directly with the VCS will send a TCP probe to the VCS once a call is established in order to keep the firewall s NAT bindings open RetryCount 1 65534 Set...

Page 144: ...dwidth limit in kbps applied to any one traversal call being handled by the VCS Total Mode None Limited Unlimited Determines whether or not there is a limit to the total bandwidth of all traversal cal...

Page 145: ...ct Prefix Suffix Regex applies only if the Match mode is Pattern Match Determines the way in which the string must match the alias Exact the string must match the alias character for character Prefix...

Page 146: ...or to be used for SIP calls to and from this VCS Transport TCP TLS Determines which transport type will be used for SIP calls to and from this neighbor TCP TCP will be used TLS TLS will be used SIP Mo...

Page 147: ...UserName S 1 128 If the traversal client is a VCS this must be the VCS s Authentication User Name If the traversal client is a gatekeeper this must be the gatekeeper s System Name H323 H46019 Demulti...

Page 148: ...e frequency in seconds with which the traversal client will send a TCP probe to the VCS UDPProbe KeepAliveInterval 1 65534 Sets the interval in seconds with which the traversal client will send a UDP...

Page 149: ...the VCS none CheckBandwidth A diagnostic tool that returns the status and route as a list of nodes and links that a call of the specified type and band width would take between two nodes Note that th...

Page 150: ...fault Zone none DefaultValuesSet Resets system parameters to default values Level r 1 3 The level of system parameters to be reset 1 Resets most parameters 2 There are currently no level 2 parameters...

Page 151: ...tions are sent in XML format to the specified URL Up to 15 Expressions may be registered for each of 3 feedback IDs ID 1 3 The ID of this particular feedback request URL r S 1 256 The URL to which not...

Page 152: ...pe to be associated with this link Pipe2 S 1 50 Specifies the second pipe to be associated with this link LinkDelete Deletes a link LinkId r 1 600 The index of the link to be deleted Locate Runs the V...

Page 153: ...ited Determines whether or not this pipe is enforcing total bandwidth restrictions None no bandwidth available Total 1 100000000 If this pipe has limited bandwidth sets the maximum bandwidth in kbps a...

Page 154: ...ss which must match for an IP address to belong in this subzone TotalMode None Limited Unlimited Determines whether this subzone has a limit on the total bandwidth of calls being used by its endpoints...

Page 155: ...suffix will removed from the alias Replace the matching part of the alias will be substituted with the text in the Replace string Replace S 1 60 Applies only if pattern behavior is set to Replace Spec...

Page 156: ...pendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices Command Reference xCommand xCommand Description Parameter...

Page 157: ...and Reference xStatus Command Reference xStatus SystemUnit Product the product name Uptime Time in seconds SystemTime Time not set date time TimeZone GMT or one of 300 other timezones LocalTime local...

Page 158: ...v4 Address IPv4Addr SubnetMask IPv4Addr Gateway IPv4Addr IPv6 Address IPv6Addr Gateway IPv6Addr DNS Server 1 5 Address IPv4Addr IPv6Addr Domain S 0 128 NTP Status Inactive Active Failed Cause Visible...

Page 159: ...GUIDE Appendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices Command Reference xStatus External Manager Status Inactive Initializing Active Failed Cause Visible if status is Fa...

Page 160: ...all 1 900 SerialNumber S 1 255 State Connecting Connected Disconnecting StartTime Seconds since boot Date Time Duration Time in seconds precision in seconds Legs Leg 1 300 Protocol H323 SIP H323 visib...

Page 161: ...kbps Route Zone Link S 1 50 Node name 0 150 entries Registrations Registration 1 3750 Protocol H323 SIP Node S 1 50 Node name SerialNumber S 1 255 CreationTime Date Time SecondsSinceLastRefresh 1 6553...

Page 162: ...RVER ADMINISTRATOR GUIDE Appendices Command Reference xStatus Registrations continued Contact S 1 255 Path URI 1 10 S 1 255 Zones DefaultZone Name DefaultZone Bandwidth Used 0 100000000 Calls Call 0 9...

Page 163: ...s Current Total Dropped Zone 1 200 Name S 1 50 Node name Status Active Failed Warning Cause Visible if status is Failed or Warning No gatekeeper reachable Gatekeepers unreachable Type Neighbor Travers...

Page 164: ...us is Failed No response from neighbor DNS resolution failed Address IPv4Addr IPv6Addr One Address line per address from DNS lookup Port 1 65534 LastStatusChange Time not set Date Time TraversalClient...

Page 165: ...Time not set Date Time TraversalServer Visible if Type is TraversalServer SIP Port Active Inactive H323 Port Active Inactive Primary H323 Visible if H323 Mode On for Zone Status Unknown Active Failed...

Page 166: ...Appendices Command Reference xStatus Zones continued SIP Visible if SIP Mode On for Zone Status Unknown Active Failed Cause Visible if Status is Failed No response from neighbor DNS resolution failed...

Page 167: ...ble if status is Failed No response from gatekeeper DNS resolution failed Invalid IP address Address IPv4Addr IPv6Addr Port 1 65534 LastStatusChange Seconds since boot Date Time UserPolicyManager Mode...

Page 168: ...DBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices Command Reference xStatus H323 continued H46018 CallSignaling Status Active Inactive Failed IPv4 Visible if Status Active Address IPv4Ad...

Page 169: ...width Control Maintenance Appendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices Command Reference xStatus STU...

Page 170: ...red freD etc CPL Reference This Appendix gives details of the VCS s implementation of the CPL language and should be read in conjunction with the CPL standard RFC 3880 5 The VCS supports most of the C...

Page 171: ...origin is taken from the SETUP The From and ReplyTo fields of the incoming message The source aliases from the original LRQ or ARQ that started the call If a SETUP is received without a preceding RAS...

Page 172: ...If a subfield is not specified for the alias type being matched then the not present action will be taken address type Either h323 or sip based on the type of endpoint that originated the call user Fo...

Page 173: ...string can specify a URL e g user domain com H 323 ID or an E 164 number priority 0 0 1 0 random Specified either as a floating point number in the range 0 0 to 1 0 or random which assigns a random nu...

Page 174: ...t cpl extensions xmlns xsi http www w3 org 2001 XMLSchema instance xsi schemaLocation urn ietf params xml ns cpl cpl xsd taa routed address switch field origin not present reject not present address s...

Page 175: ...ions xmlns xsi http www w3 org 2001 XMLSchema instance xsi schemaLocation urn ietf params xml ns cpl cpl xsd taa routed address switch field destination address regex example com proxy failure locatio...

Page 176: ...MLSchema instance xsi schemaLocation urn ietf params xml ns cpl cpl xsd taa routed address switch field registered origin not present reject reason Only local endpoints can use this Tandberg VCS not p...

Page 177: ...Local Gateway In this example a gateway is registered to the VCS with a prefix of 9 and the administrator wants to stop calls from outside the organization being routed through it xml version 1 0 enc...

Page 178: ...by the character and then the last character in the range You can not use special characters within the they will be taken literally a z will match against any lower case alphabetical character a zA Z...

Page 179: ...23ls _ udp SRV 1 0 1719 vcs example com Verifying the SRV Record There are a range of tools available to investigate DNS records One commonly found on Microsoft Windows and UNIX platforms is nslookup...

Page 180: ...r and how to install and configure two common types of LDAP servers Microsoft Active Directory and OpenLDAP for use with the VCS About the LDAP Databases The following ITU specification describes the...

Page 181: ...requisites These step by step instructions assume that Active Directory has already been installed For details on installing Active Directory please consult your Windows documentation The following in...

Page 182: ...t will form the BaseDN to which the VCS will issue searches In this example the BaseDN will be ou h350 dc my domain dc com It is good practice to keep the H 350 directory in its own organizational uni...

Page 183: ...em DDDS Application ENUM http www ietf org rfc rfc3761 txt 9 Mastering Regular Expressions Jeffrey E F Friedl O Reilly and Associates ISBN 1 56592 257 3 10 RFC 3327 Session Initiation Protocol SIP Ext...

Page 184: ...ber consists of a country code area code and subscriber number For example TANDBERG s European Headquarters phone number is 47 67 125125 corresponding to a country code of 47 for Norway area code of 6...

Page 185: ...clocks Pipe In relation to the VCS a means of controlling the bandwidth used on a link Proxy Proxy Server In SIP an intermediary entity that acts as both a server and a client for the purpose of maki...

Page 186: ...ayer Security A protocol that provides secure communications over the internet Transform In relation to the VCS the process of changing the alias being searched for Traversal call Any call where both...

Page 187: ...n Registration Control Zones and Neighbors Call Processing Firewall Traversal Bandwidth Control Maintenance Appendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Philip Pedersens vei 22 1...

Search results

Summary of Contents for VCS

Reviews:

Related manuals for VCS

Brands by name

Popular brands

TANDBERG VCS, Administration Manual

Search results

Summary of Contents for VCS

Reviews:

Related manuals for VCS

Brands by name

Popular brands