background image

Fortinet Technologies Inc.

Page 31

FortiVoice Gateway  5.3.6 Administration Guide

Packet sniffing tells you what is happening on the network at a low level. This can be very useful 
for troubleshooting problems, such as:

• finding missing traffic

• seeing if sessions are setting up properly

• locating ARP problems such as broadcast storm sources and causes

• confirming which address a computer is using on the network if they have multiple 

addresses or are on multiple networks

• confirming routing is working as you expect

• intermittent missing PING packets.

If you are running a constant traffic application such as ping, packet sniffing can tell you if the 
traffic is reaching the destination, how the port enters and exits the FortiVoice Gateway, if the 
ARP resolution is correct, and if the traffic is returning to the source as expected. You can also 
use packet switching to verify that NAT or other configuration is translating addresses or routing 
traffic the way that you want it to.

Before you start sniffing packets, you need to have a good idea of what you are looking for. 
Sniffing is used to confirm or deny your ideas about what is happening on the network. If you try 
sniffing without a plan to narrow your search, you could end up with too much data to effectively 
analyze. On the other hand, you need to sniff enough packets to really understand all of the 
patterns and behavior that you are looking for.

To capture voice and fax packets

1.

Go to 

System > Network > Traffic Capture.

Figure 10:

Traffic capture list

2.

Click 

New

.

3.

Enter a prefix for the file generated from the captured traffic. This will make it easier to 
recognize the files.

4.

Enter the time period for performing the packet capture.

5.

If you choose 

SIP

 or 

Use protocol

 for 

Filter

, from the 

Available peers

 field, select the 

extension or trunk of which you want to capture the voice packets and click -> to move them 
into the 

Selected peers

 field. You can select up to 3 peers.

GUI field

Description

Stop

Click to stop the packet capture.

Download

When the capture is complete, click 

Download

 to save the packet 

capture file to your hard disk for further analysis.

Name

The name of the packet capture file.

Status 

The status of the packet capture process, 

Complete

 or 

Running

.

Size

The size of the packet capture file.

Содержание FortiVoice GO08

Страница 1: ...FortiVoice Gateway GO08 5 3 6 Administration Guide...

Страница 2: ...l with a purchaser that expressly warrants that the identified product will perform according to certain expressly identified performance metrics and in such event only the specific performance metric...

Страница 3: ...the web based manager 12 Connecting to the CLI 13 Monitoring the FortiVoice Gateway System 16 Viewing overall system status 16 Viewing the dashboard 16 Viewing the Call Statistics 18 Using the CLI Co...

Страница 4: ...ile 42 Configuring FortiVoice Gateway 43 Creating SIP peer for IP PBX 43 Testing SIP trunks 47 Configuring SIP profiles 47 Modifying analog trunks 48 Mapping a SIP peer with the FortiVoice Gateway 50...

Страница 5: ...are updates and technical support require product registration For more information see the Fortinet Knowledge Base article Registration Frequently Asked Questions Customer service technical support F...

Страница 6: ...such as troubleshooting and how to articles examples FAQs technical notes a glossary and more Visit the Fortinet Knowledge Base at http kb fortinet com Comments on Fortinet technical documentation Pl...

Страница 7: ...place activity Table 1 Typographical conventions in Fortinet technical documentation Convention Example Button menu text box field or check box label From Minimum log level select Notification CLI inp...

Страница 8: ...straint notations such as address_ipv4 indicate which data types or string patterns are acceptable value input Navigation Go to Monitor Status DHCP Publication For details see the FortiGate Administra...

Страница 9: ...n mail example com xxx_url A uniform resource locator URL and its associated protocol and host name prefix which together form a uniform resource identifier URI such as http www fortinet com xxx_ipv4...

Страница 10: ...must enter either enable or disable but must not enter both Options delimited by spaces Non mutually exclusive options For example http https ping snmp ssh telnet indicates that you may enter all or...

Страница 11: ...guration to its default state you have just restored the firmware In these cases you must access either interface using the default settings After you connect you can use the web based manager or CLI...

Страница 12: ...signed certificates cannot be verified with a proper CA and therefore might be fraudulent You must manually indicate whether or not to trust the certificate The certificate might belong to another web...

Страница 13: ...omputer s serial communications COM port to the FortiVoice s console port 2 Verify that the FortiVoice is powered on 3 On your management computer start HyperTerminal 4 On Connection Description enter...

Страница 14: ...FortiVoice s port1 3 Verify that the FortiVoice is powered on 4 On your management computer start your SSH client 5 In Host Name or IP Address type 192 168 1 99 6 In Port type 22 7 From Connection ty...

Страница 15: ...FortiVoice Gateway 5 3 6 Administration Guide 10 Type admin and press Enter twice In its default state there is no password for this account The CLI displays the following text Type for a list of com...

Страница 16: ...Console Viewing the dashboard Status Dashboard displays first after you log in to the web based manager It contains a dashboard with widgets that each indicates performance level or other statistics...

Страница 17: ...s and device connection status To view the widget go to Status Dashboard If the widget is not currently shown click Add Content and mark the check box for the widget Following is the connection status...

Страница 18: ...ou want to continue configuring the FortiVoice Gateway refresh your browser and log in again Viewing the Call Statistics The Call Statistics tab contains summaries of the number of calls by time and d...

Страница 19: ...Detail Records CDR displays all the phone calls made during a certain time period including time of the call caller and receiver call duration call status and call direction Double clicking a record...

Страница 20: ...ab To download the table click and drag to select the whole table then copy and paste it into a rich text editor such as Microsoft Word or OpenOffice Writer Log messages can appear in either raw or fo...

Страница 21: ...olumn is being used to sort the page a small upwards or downwards pointing arrow may appear in the column heading next to its name to indicate the current sort order To display or hide columns 1 Go to...

Страница 22: ...rch all log files click Search 3 To search one of the log files first double click the name of a log file to display the contents of the log file then click Search Select All Select to select all log...

Страница 23: ...ight enter GUI session to locate all log messages containing that exact phrase in any log field Message Enter all or part of the Message log field Log ID Enter all or part of the log ID in the log mes...

Страница 24: ...n addition to the physical interfaces you can create the following types of logical interfaces on the FortiVoice Gateway VLAN subinterfaces Redundant interfaces Loopback interfaces VLAN subinterfaces...

Страница 25: ...page You cannot configure the interface anymore For information about adding redundant interfaces see Configuring the network interfaces on page 25 Loopback interfaces A loopback interface is a logic...

Страница 26: ...sical network interfaces to change their IP addresses netmasks administrative access protocols and other settings You can also create or edit logical interfaces such as VLANs redundant interfaces and...

Страница 27: ...Edit Interface dialog Figure 9 Creating logical interfaces GUI field Description Interface Name If you are editing an existing interface this field displays the name such as port2 and media access con...

Страница 28: ...network interface should accept for connections to the FortiVoice Gateway itself These options do not affect connections that will travel through the FortiVoice Gateway HTTPS Enable to allow secure H...

Страница 29: ...e prefix match When you add a static route through the web based manager the FortiVoice Gateway evaluates the route to determine if it represents a different route compared to any other route already...

Страница 30: ...r features such as reverse DNS lookups Your ISP may supply IP addresses of DNS servers or you may want to use the IP addresses of your own DNS servers The DNS tab lets you configure the DNS servers th...

Страница 31: ...ood idea of what you are looking for Sniffing is used to confirm or deny your ideas about what is happening on the network If you try sniffing without a plan to narrow your search you could end up wit...

Страница 32: ...tor accounts The Administrators tab displays a list of the FortiVoice Gateway s administrator accounts and the trusted host IP addresses administrators use to log in if configured By default FortiVoic...

Страница 33: ...address and netmask in dotted decimal format For example you might permit the administrator to log in to the FortiVoice Gateway from your private network by typing 192 168 1 0 255 255 255 0 Note For a...

Страница 34: ...cluding scheduling logging and certificate dependent features the FortiVoice Gateway system time must be accurate FortiVoice Gateway supports daylight savings time DST including recent changes in the...

Страница 35: ...ing on your network traffic it may take some time for the FortiVoice Gateway to synchronize its time with the NTP server Set date Select this option to manually set the date and time of the FortiVoice...

Страница 36: ...GMT 1 00 Amsterdam Berlia Bern Rome Stockholm Vienna 28 GMT 1 00 Belgrade Bratislava Budapest Ljubljana Prague 29 GMT 1 00 Brussels Copenhagen Madrid Paris 30 GMT 1 00 Sarajevo Skopje Sofija Vilnius...

Страница 37: ...7 00 Krasnoyarsk 56 GMT 8 00 Beijing Chong Qing Hong Kong Urumgi 57 GMT 8 00 Irkutsk Ulaan Bataar 58 GMT 8 00 Kuala Lumpur Singapore 59 GMT 8 00 Perth 60 GMT 8 00 Taipei 61 GMT 9 00 Osaka Sapporo Tok...

Страница 38: ...GUI appearance 1 Go to System Configuration Appearance 2 Click the arrow to expand Administration interface 3 Configure the following to change appearance GUI field Description Idle timeout Enter the...

Страница 39: ...blend with the underlying theme graphic resulting in a visible rectangle around your logo graphic Note Uploading a graphic overwrites the current graphic The FortiVoice Gateway does not retain previo...

Страница 40: ...r Enter the main number of the FortiVoice Gateway This number is provided by your PSTN service provider Default prompt language Select a new default prompt language for the FortiVoice Gateway The defa...

Страница 41: ...you can also configure a schedule to back up the configuration automatically to the FortiVoice Gateway local hard drive or a remote FTP SFTP server To back up the configuration file 1 Go to System Mai...

Страница 42: ...guration you can restore the backup FortiVoice Gateway configuration from your local PC For details see Restoring the configuration on page 59 Restoring the firmware In the Restore Firmware area under...

Страница 43: ...IP GUI field Description Test Select to test if the trunk is created successfully For more information see Testing SIP trunks on page 47 Enabled Select to activate this trunk Name The name of the VoIP...

Страница 44: ...tion if your VoIP provider uses the same setting User name Enter the user name provided by the VoIP service provider for the FortiVoice Gateway to register with the SIP server Password Enter the passw...

Страница 45: ...maximum of channels that you can set to limit the number of concurrent calls For example if you want to allow six calls at a time enter 6 Max outgoing channel With known max channels if you need to re...

Страница 46: ...nter the port number Transport protocol Select the transport protocol used for the registration Registration URI Enter the registration string provided by the VoIP service provider in the Registration...

Страница 47: ...the test Test Click to start the dry run test and check the Test result Reset Click to remove the test result in order to start a new test Test Call Test the SIP trunk by making a real phone call Dest...

Страница 48: ...rts fax over VoIP network Monitor Keep alive SIP notify interval Enter the time interval in seconds for the FortiVoice Gateway to talk to the SIP server of your service provider to keep the connectivi...

Страница 49: ...name of this trunk This is view only Display name Enter your caller ID that will appear on the called phone such as Example Company Number Enter the phone number that will appear on the called phone...

Страница 50: ...r The name of the SIP trunk being mapped to the PSTN trunk Status Displays whether the mapping rule is enabled A check mark means enabled an X means disabled To add a mapping rule 1 Go to Gateway Mapp...

Страница 51: ...n logout phone call events You can select which severity level an activity or event must meet in order to be recorded in the logs For more information see Log message severity levels on page 52 A Fort...

Страница 52: ...ace to store new log messages and that it does not overwrite existing logs you should regularly download backup copies of the oldest log files to your management computer or other storage and then del...

Страница 53: ...current log file For example if you set the log time to 10 days at hour 23 the log file will be rotated at 23 o clock of the 10th day 6 From Log level select the severity level that a log message must...

Страница 54: ...t your management computer to the FortiVoice Gateway console port using an RJ 45 to DB 9 serial cable or a null modem cable 2 Initiate a connection from your management computer to the CLI of the Fort...

Страница 55: ...ay to connect to the TFTP server The following message appears Enter File Name image out 10 Type the firmware image file name and press Enter The FortiVoice Gateway downloads the firmware image file f...

Страница 56: ...ort web site https support fortinet com 2 Download the firmware image file to your management computer 3 Log in to the web based manger as the admin administrator or an administrator account that has...

Страница 57: ...ng messages appears This operation will replace the current firmware version Do you want to continue y n or Get image from tftp server OK Check image OK This operation will downgrade the current firmw...

Страница 58: ...connection and click OK 3 Configure HyperTerminal to connect directly to the communications COM port on your computer and click OK 4 Select the following port settings and click OK 5 Press Enter to c...

Страница 59: ...acking up configuration on page 41 If you have just downgraded or restored the firmware of the FortiVoice Gateway restoring the configuration file can be used to reconfigure the FortiVoice Gateway fro...

Страница 60: ...has been lost In addition to verifying successful conversion verifying the configuration also provides familiarity with new and changed features To verify the configuration upgrade 1 Clear your browse...

Страница 61: ...inistrator or an administrator account that has system configuration read and write privileges 4 Connect port1 of the FortiVoice Gateway directly to the same subnet as a TFTP server 5 Copy the new fir...

Страница 62: ...image out 14 Type the firmware image file name and press Enter The FortiVoice Gateway downloads the firmware image file from the TFTP server and displays a message similar to the following Save as De...

Страница 63: ...efault administrator account 12 13 56 57 59 60 61 certificate 12 gateway 29 password 12 13 14 15 route 29 settings 13 DHCP 28 DNS server 30 documentation 6 conventions 6 Release Notes 61 domain name c...

Страница 64: ...r 33 _pattern 9 pattern 9 ping 28 port1 13 product registration 5 protocol administrative access 33 R reachable 29 read write administrator 33 reconnecting to the FortiMail unit 58 registering with Fo...

Страница 65: ...es Inc Page 65 FortiVoice Gateway 5 3 6 Administration Guide value parse error 9 W web browser 11 12 warnings 12 web UI 12 web based manager customizing appearance 38 HTTP 28 HTTPS 28 language 39 widg...

Страница 66: ......

Отзывы: