background image

D 14049.01
07.2007

43

TANDBERG 

VIDEO COMMUNICATION SERVER 

ADMINISTRATOR GUIDE

Text goes here

Introduction

Getting 

Started

System  

Overview

System 

Configuration

H.323 & SIP 

Configuration

Registration 

Control

Zones and 

Neighbors

Call 

 Processing

Firewall  

Traversal

Bandwidth 

Control

Maintenance

Appendices

TANDBERG 

VIDEO COMMUNICATION SERVER 

ADMINISTRATOR GUIDE

Registration 

Control

Authentication

Server IP address

The IP address or FQDN of the LDAP server.

Port

The IP port of the LDAP server.

UserDN

The user distinguished name to be used by 
the VCS when binding to the LDAP server.

Password

The password to be used by the VCS when 
binding to the LDAP server.

Base DN

The area of the directory on the LDAP server 
to be searched for the credential information.
This should be specified as the Distinguished 
Name (DN) in the LDAP directory under which 
the H.350 objects reside.

Alias origin

Determines the source of the alias(es) with 
which the endpoint will be registered.  

LDAP

: The aliases listed in the LDAP database 

for the endpoint’s username will be used; 
those presented by the endpoint will be 
ignored.

Endpoint

: The aliases presented by the 

endpoint will be used; any in the LDAP 
database will be ignored.

Combined

: The endpoint will be registered 

both with the aliases which it has presented 
and with those configured in the LDAP 
database. 
The default is 

LDAP

.

Encryption

Determines whether the connection to the 
LDAP server will be encrypted.  (For more 
information on configuring encryption, see 

Securing the LDAP connection with TLS

.) 

TLS

: TLS Encryption will be used for the 

connection with the LDAP server.

Off

: No encryption will be used. 

The default is 

Off

.

Registration Control

Configuring LDAP Server settings

To configure the settings for accessing the 
LDAP server:

VCS Configuration > Authentication > LDAP 
> Configuration. 

You will be taken to the 

LDAP Configuration 

page.

xConfiguration LDAP
xConfiguration Authentication 

LDAP


Содержание VCS

Страница 1: ...tion H 323 SIP Configuration Registration Control Zones and Neighbors Call Processing Firewall Traversal Bandwidth Control Maintenance Appendices Software version X1 0 D14049 01 July 2007 VIDEO COMMUN...

Страница 2: ...nistrator Password 15 Changing the Administrator Password 15 Resetting the Administrator Password 15 Session Timeout 15 Root Account 15 Using the Web Interface 16 Supported Browsers 16 Using the Comma...

Страница 3: ...39 Finding a VCS with which to Register 40 SIP 40 H 323 40 Authentication 41 About Authentication 41 Configuring Authentication 41 Authentication using an LDAP Server 42 Configuring the LDAP Server Di...

Страница 4: ...Accessing the FindMe Configuration Page 72 Configuring your FindMe User Account 73 Alias Searching and Transforming 74 Overview of Searches and Transforms 74 About Searches 74 About Transforms 74 Tran...

Страница 5: ...l Traversal Client 97 VCS as a Firewall Traversal Server 97 Firewall Traversal Protocols and Ports 98 Overview 98 Process 98 Ports for Initial Connections from Traversal Clients 98 H 323 Firewall Trav...

Страница 6: ...ce 125 Security 126 About Security 126 Enabling Security 126 Passwords 127 Changing the Administrator Password 127 System Snapshot 127 About the System Snapshot 127 Creating a System Snapshot 127 Rest...

Страница 7: ...d stored in a retrieval system or transmitted in any form or by any means electronically mechanically by photocopying or otherwise without the prior written permission of TANDBERG Nationally and inter...

Страница 8: ...cribed in this manual is protected by one or more of the following U S Patent Nos 5 600 646 5 768 263 5 838 664 5 991 277 6 584 077 6 590 603 7 010 119 7 034 860 U S Patent Application Nos 10 332 785...

Страница 9: ...e power cord to the product power supply serves as the main disconnect device for this equipment The power cord must always be easily accessible Route the power cord so as to avoid it being walked on...

Страница 10: ...al impact of WEEE which is landfilled or incinerated TANDBERG has implemented necessary process changes to comply with the European RoHS Directive 2002 95 EC and the European WEEE Directive 2002 96 EC...

Страница 11: ...Control Maintenance Appendices Introduction 12 TANDBERG CONTENT S USER Table of ontents What s New in this Version Trademark Licenses Safety Environmental Introduction Installation Quick Setup Operati...

Страница 12: ...gatewaying for locally registered endpoints IPv4 and IPv6 support including IPv4 IPv6 gatewaying Bandwidth management on both a per call and a total usage basis configurable separately for calls withi...

Страница 13: ...4 inches in front of the front panel The room in which you install the VCS should have an ambient temperature between 0 C and 35 C 32 F and 95 F and between 10 and 90 non condensing relative humidity...

Страница 14: ...administer the system Whether you want to use Telnet to administer the system Once the wizard is finished you will be prompted to log in again Login with the username admin and your new password You...

Страница 15: ...ll be taken to the Passwords page In the Administrator Password section enter and then retype the new password xConfiguration SystemUnit Password To set an empty password type xConfiguration SystemUni...

Страница 16: ...Enter the Username admin and your system password and select Login You will be presented with the Overview page 3 Supported Browsers The VCS web interface is designed for use with Internet Explorer 6...

Страница 17: ...al port To use the command line interface Start a SSH or Telnet session Enter the IP address or FQDN of the VCS Login with a username of admin and your system password Commands are divided into differ...

Страница 18: ...andled by the VCS since it was last restarted Total The total number of traversal calls handled by the VCS since it was last restarted Non traversal calls Current The number of non traversal calls goi...

Страница 19: ...identify it Session time out minutes Sets the number of minutes that an administration session HTTPS Telnet or SSH may be inactive before the session is timed out A value of 0 turns session time outs...

Страница 20: ...will be taken to the Ethernet page xConfiguration Ethernet Ethernet Configuration About Ethernet Speed The Ethernet speed setting determines the speed of the connection between the VCS and the ethern...

Страница 21: ...nly Both The VCS will accept registrations from endpoints using either an IPv4 or IPv6 address and will take calls using either protocol If a call is between an IPv4 only and an IPv6 only endpoint the...

Страница 22: ...hen attempting to resolve server addresses configured on the VCS that are not fully qualified It applies only to the following LDAP server NTP server External Manager server The DNS Domain Name is app...

Страница 23: ...n helping to guard against replay attacks For this reason we recommend that you use an NTP server to synchronize the system time Setting the Time Zone All events are recorded using the local date and...

Страница 24: ...he name of the SNMP community within which it resides You may optionally provide the name of a System contact and the physical Location of the system for reference by administrators when following up...

Страница 25: ...ts connections and disconnections The use of an External Manager is optional In order to use an External Manager you must configure the VCS with the IP address or host name and path of the External Ma...

Страница 26: ...ON SERVER ADMINISTRATOR GUIDE System Configuration You are recommended to maintain a backup of your VCS configuration To do this Use the command line interface to log on to the VCS Issue the command x...

Страница 27: ...vel 1 events considered the most important The table below gives an overview of the levels assigned to different events See Events Logged at Level 1 Events Logged at Level 2 and Events Logged at Level...

Страница 28: ...of the UNIX syslog format date time host _ name facility _ name PID message _ details where Field Description date the local date on which the message was logged time the local time at which the mess...

Страница 29: ...Detail event parameter may contain a textual representation of the H 225 additional cause code Registration Removed A registration has been removed by the VCS The Reason event parameter specifies the...

Страница 30: ...s concerned Possible values for the detail field are Non Traversal Call Limit Reached Traversal Call Limit Reached Decode Error A syntax error was encountered when decoding a SIP message TLS Negotiati...

Страница 31: ...device attempting to establish communications The source IP is recorded in the dotted decimal format number number number number or the IPv6 colon separated format Dst ip Specifies the destination IP...

Страница 32: ...quests the AOR for the REGISTER request RequestURI The SIP or SIPS URI indicating the user or service to which this request is being addressed NumBytes The number of bytes sent received in the message...

Страница 33: ...will send an IRQ to the endpoint to verify that it is still functioning The system will poll endpoints in a call regardless of whether the call type is traversal or non traversal H 323 Endpoint Regist...

Страница 34: ...e port that listens for H 323 call signaling Registration conflict mode Determines how the system will behave if an endpoint attempts to register an alias currently registered from another IP address...

Страница 35: ...ts exact behavior when proxying requests is determined by the SIP Registration Proxy Mode setting This in turn depends on the presence of Route Set information in the request header and whether or not...

Страница 36: ...will be rejected Proxy to known only Registration requests will be proxied and invite requests will be proxied only if the Route Set contains the URI s of Neighbors Proxy to any Registration requests...

Страница 37: ...Domains page To add a new domain click New You will be taken to the Create Domain page Enter the domain in the Name field and click Create Domain The new domain will be added and you will be returned...

Страница 38: ...call and will therefore consume one traversal licence for the duration of the call Interworking Overview Configuring Interworking Interworking is enabled via VCS Configuration Protocols Interworking...

Страница 39: ...tems such as gateways MCUs and Content Servers can also register with a VCS They are known as locally registered services These systems are configured with their own prefix which they provide to the V...

Страница 40: ...he user must specify the IP address of the Registrar with which they wish to register and the endpoint will attempt to register with that Registrar only The VCS is a SIP Server for endpoints in its lo...

Страница 41: ...he VCS before registering Off no authentication is required for endpoints The default is Off Authentication database Determines which database the VCS will use during authentication LocalDatabase the...

Страница 42: ...ore than one alias but none are listed in the LDAP database it will not be allowed to register If no aliases are presented by the endpoint it will be registered with all the aliases listed in the LDAP...

Страница 43: ...ects reside Alias origin Determines the source of the alias es with which the endpoint will be registered LDAP The aliases listed in the LDAP database for the endpoint s username will be used those pr...

Страница 44: ...Select Create Credential to add the new entry to the Local Database and return to the Credentials page Save Saves the changes you have made Delete Removes the entry from the Local Database and returns...

Страница 45: ...eature is known as forking Registration conflict mode Determines what will happen when an H 323 endpoint attempts to register using an alias that has already been registered from another IP address Re...

Страница 46: ...stration will be denied Likewise if the Registration Restriction policy is set to AllowList only one of the endpoint s aliases needs to match a pattern on the Allow list for it to be allowed to regist...

Страница 47: ...the pattern you wish to add to the Allow List Add Allow List Pattern Click here to save the entry and return to the Registration Allow List page Type Select the way in which the Pattern must match the...

Страница 48: ...changes Registration Deny List This page shows all the existing entries in the Deny List View Edit Select View Edit to make changes to an existing entry You will be taken to the Edit Deny Pattern page...

Страница 49: ...etwork of endpoints other VCSs and other network infrastructure devices with one or more firewalls between it and the internet In addition you may wish to apply restrictions to the amount of bandwidth...

Страница 50: ...ones you can apply bandwidth limits to individual calls between two endpoints within the subzone individual calls between an endpoint within the subzone and another endpoint outside of the subzone the...

Страница 51: ...ther system by adding it as a neighbor zone on your local VCS Once you have added it you can query the neighbor about its endpoints apply transforms to any queries before they are sent to the neighbor...

Страница 52: ...at follow describe the configuration options available for each zone type Adding Zones Name Enter the name you wish to give to this zone The name acts as a unique identifier allowing you to distinguis...

Страница 53: ...alias search request to this particular zone Name Assigns a name to the zone The name acts as a unique identifier allowing you to distinguish between zones of the same type Type Determines the nature...

Страница 54: ...H 323 port Specifies the port on the neighbor system to be used for H 323 calls to and from the local VCS SIP transport Determines which transport type will be used for SIP calls to and from the neig...

Страница 55: ...onds with which a failed attempt to establish a connection to the traversal server should be retried Primary address Specifies the IP address or FQDN of the traversal server Alternate 1 to Alternate 5...

Страница 56: ...erse the firewall NAT See Firewall Traversal Protocols for more information H 460 19 demultiplexing Mode Determines whether or not the same two ports can be used for media by two or more calls On all...

Страница 57: ...e is queried Configuring ENUM Zones Configuring DNS Zones SIP mode Determines whether SIP records will be looked up for this zone H 323 mode Determines whether H 323 records will be looked up for this...

Страница 58: ...rnates You will be taken to the Alternates page xConfiguration Alternates Alternate 1 to Alternate 5 IP address To configure another VCS as an Alternate enter its IP address Up to 5 Alternates may be...

Страница 59: ...em they are registering with If you are using E 164 aliases each VCS would be assigned an area code When the VCSs are neighbored together each neighbor zone is configured with its corresponding area c...

Страница 60: ...ser Policy to the alias If the alias is a FindMe name the process will start again all the resulting aliases will be checked against Local Zone transforms and Administrator Policy The VCS then checks...

Страница 61: ...s registered to a VCS Border Controller Calls made by dialing the IP address of an endpoint registered directly with a VCS Border Controller will be forced to route through the VCS Border Controller T...

Страница 62: ...y time the request is forwarded to another neighbor gatekeeper or proxy the hop count value is decreased by a value of 1 When the hop count reaches 0 it will not be forwarded on any further The hop co...

Страница 63: ...henticate with it before calls will be accepted In this situation the VCS acts as follows An endpoint is considered to be authenticated when it is a locally registered endpoint Because Authentication...

Страница 64: ...rator Policy page xConfiguration Policy AdministratorPolicy Mode Administrator Policy Mode On Administrator Policy is enabled If a CPL script has been uploaded this policy will be used Otherwise the p...

Страница 65: ...tor Policy via the Web Interface Delete To remove one or more line items from the list check the box to the left of the item and then click Delete Add New Click to add the new item to the Policy A new...

Страница 66: ...cript if Administrator Policy has been configured using a CPL script this will show you the script that was uploaded if Administrator Policy has been configured using the web interface this will show...

Страница 67: ...User Policy has been enabled If so the VCS queries the User Policy Manager to see whether that alias is listed as a FindMe name If so the call is forwarded to the endpoints according to the User Polic...

Страница 68: ...er Policy Manager is used Remote User Policy is enabled and a User Policy Manager located on another system is used If you select this option further configuration options will appear see below Config...

Страница 69: ...ew You will be taken to the Create User Account page Initial password The password to be used along with the Username when logging into this account FindMe name The FindMe name on which the user can b...

Страница 70: ...to the Edit User Account page New password Type the new password to be used along with the Username when logging into this account Cancel Click here to return to the User Accounts page without changi...

Страница 71: ...sing TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Call Processing User Policy Managing FindMe User Accounts Deleting a User Account To change delete a FindMe user account VCS Configuration...

Страница 72: ...t up by your system administrator Once this has been done you can log in to your account via a web interface and configure it with details of the device s on which you want to be contacted when a call...

Страница 73: ...vices List the all the device s that will ring when your FindMe name is first dialled If more than one device is listed here they will all ring at the same time Busy Devices For an individual list all...

Страница 74: ...eighboring VCSs It does not apply to search requests from Alternates Each local alias transform defines a string against which an alias is compared and the changes to make to the alias if it matches t...

Страница 75: ...be treated as a regular expression Pattern string Specifies the pattern against which the alias is compared Priority Assigns a priority to this transform Transforms are applied in order of priority an...

Страница 76: ...specify the pattern that the alias to be transformed must match specify the way in which the alias will be transformed All searches sent to that zone that match the specified pattern will then be tran...

Страница 77: ...ernMatch Determines if and how the matched part of the alias will be modified Options are Leave the alias will not be modified Strip the matching prefix or suffix will be removed from the alias Replac...

Страница 78: ...orities to each match you will have a great deal of flexibility in determining if and when the zone will be queried and whether any transforms will be applied Some example configurations are given her...

Страница 79: ...for your head office VCS to query the sales office VCS only when it receives a search request for an alias with a suffix of sales example com Sending any other search requests to this particular VCS w...

Страница 80: ...In this situation the VCS will query that zone for each of the new aliases simultaneously Any duplicate aliases produced by the transforms will be removed prior to the search requests being sent out...

Страница 81: ...nable endpoints registered to your VCS to receive calls directly using URI dialing you must ensure all endpoints are registered with a URI address configure appropriate DNS records depending on the pr...

Страница 82: ...e domain part of the URI address was resolved successfully using an H 323 Location SRV record i e for _ h323ls then the address returned is queried via an LRQ for the full URI address If the domain pa...

Страница 83: ...igure at least one DNS zone To do this VCS Configuration Zones You will be taken to the Zones page Click New You will be taken to the Create Zone page Enter a Name for the zone and select a Type of DN...

Страница 84: ...the IP address es of up to 5 DNS servers that the VCS will query when attempting to locate a domain In order for endpoints registered to the VCS to make outgoing calls using URI dialing you must confi...

Страница 85: ...RV record should be as follows _ Service is _ h323cs _ Proto is _ tcp Port is the port number that has been configured via VCS Configuration Protocols H 323 as the Call signaling TCP port SRV Record F...

Страница 86: ...om SRV record for _ sip _ tls example com returns vcs example com A record for vcs example com returns the IPv4 address of the VCS AAAA record for vcs example com returns the IPv6 address of the VCS H...

Страница 87: ...ng your endpoints E 164 numbers to their SIP H 323 URIs See the section Configuring ENUM dialing for incoming calls for instructions on how to do this ENUM Dialing Overview The VCS supports outward EN...

Страница 88: ...on the VCS is queried the E 164 number is transformed into an ENUM domain as follows the digits are reversed and separated by a dot the DNS Suffix configured for that ENUM zone is appended DNS is the...

Страница 89: ...and Pattern type fields to define the aliases that will trigger an ENUM lookup Example For example you want to enable ENUM dialing from your network to a remote office in the UK where the endpoints E...

Страница 90: ...NUM zones may be configured on the VCS You should configure at least one ENUM zone for each DNS suffix that your endpoints may use Normal zone pattern matching and prioritization rules will apply to E...

Страница 91: ...he IP address es of up to 5 DNS servers that the VCS will query when attempting to locate a domain In order for endpoints registered to the VCS to make outgoing calls using ENUM dialing you must confi...

Страница 92: ...E 164 numbers and their SIP H 323 URIs RFC 3761 8 which is part of a suite of documents that define the ENUM standard specifies that the domain for ENUM where the NAPTR records should be located for p...

Страница 93: ...call from an unregistered endpoint Calls to an Unregistered Endpoint Recommended Configuration for Firewall Traversal When the VCS Border Controller is neighbored with an internal VCS for firewall tr...

Страница 94: ...e Fallback Alias Example Use of a Fallback Alias You may wish to configure your Fallback Alias to be that of your receptionist so that all calls that do not specify an alias will still be answered per...

Страница 95: ...there is already a call in progress with an ID of 1 the next call will be assigned an ID of 2 If call 1 is then disconnected the third call to be made will be assigned an ID of 1 The call ID number is...

Страница 96: ...igned to a new call For this reason the VCS also allows you to reference the call using the longer but unique call serial number Disconnecting a Call via the CLI The call disconnection API works diffe...

Страница 97: ...aversal enabled endpoints that are registered directly to it It can also provide STUN Discovery and STUN relay services to endpoints with STUN clients To enable server side firewall traversal for othe...

Страница 98: ...will not support connections to ports other than UDP 1719 We therefore recommend that this be left as the default Ports for Initial Connections from Traversal Clients Each traversal server zone specif...

Страница 99: ...60 default signaling UDP 50 000 51200 media TCP a temporary port is allocated STUN Ports The VCS Border Controller can be enabled to provide STUN services STUN Relay and STUN Binding Discovery that ca...

Страница 100: ...VCS client provides its Authentication Username and Authentication Password These are set on the client via VCS Configuration Authentication Configuration If the Border Controller is in Assent mode t...

Страница 101: ...ng you to distinguish between zones of the same type Type From the Type drop down menu select TraversalClient Create Zone Click here to create the zone You will be taken directly to the Edit Zone page...

Страница 102: ...mode Determines whether H 323 calls will be allowed to and from this zone H 323 port Specifies the port on the traversal server to be used for H 323 firewall traversal calls H 323 protocol Determines...

Страница 103: ...oints registered directly with it You can configure the protocols and ports that will be used Enable and configure STUN services Configure the ports used specifically for firewall traversal services T...

Страница 104: ...client Authentication username If the traversal client is a VCS this must be the VCS s Authentication Username If the traversal client is a gatekeeper this must be the gatekeeper s System Name H 460...

Страница 105: ...same two ports for all calls Off Each call will use a separate pair of ports for media H 323 preference If an endpoint supports both Assent and H 460 18 protocols this setting determines which the VC...

Страница 106: ...ssary To configure the VCS traversal server ports VCS Configuration Border Controller Ports You will be taken to the Ports page xConfiguration Traversal Server Media xConfiguration Traversal Server H...

Страница 107: ...e binding allocated by the NAT firewall being traversed How it works A client behind a NAT firewall sends a STUN discovery request via the firewall to the VCS Border Controller which has been configur...

Страница 108: ...etermines whether the VCS will offer STUN Discovery services to traversal clients Save Click here to save your changes STUN relay port Specifies the port on the VCS on which it will be listening for S...

Страница 109: ...create a new subzone for each pool of endpoints so that you can apply suitable limitations to the bandwidth used within and between each subzone About Bandwidth Control The TANDBERG VCS allows you to...

Страница 110: ...ndpoint registers with the VCS its IP address is checked and it is assigned to the appropriate subzone If no subzones have been created or the endpoint s IP address does not match any of the specified...

Страница 111: ...prefix length of 16 255 255 255 0 is equivalent to a prefix length of 24 Prefix Enter the number of bits of the Subnet IP Address which must match for an IP address to belong in this subzone Create Su...

Страница 112: ...fer to this name when creating Links and Pipes Subnet 1 Enter the subnet IP Address and Prefix This will define the range of IP addresses that will belong to this subzone Subnet 2 5 Use these fields t...

Страница 113: ...ific subzone and another specific subzone or zone If your bandwidth configuration is such that multiple types of bandwidth restrictions are placed on a call for example if there are both subzone bandw...

Страница 114: ...e you wish to give to this pipe You will refer to this name when creating links Create Pipe Click here to create the pipe and return to the Pipes page About Pipes Creating a new pipe To create a pipe...

Страница 115: ...to give to this pipe You will refer to this name when creating links Save Click here to save the changes Total bandwidth mode Determines whether there is a limit on the total concurrent bandwidth of...

Страница 116: ...lable If multiple routes are possible your VCS will perform the bandwidth calculations using the one with the fewest links Creating Links Name Enter the name you wish to assign to this link Node 1 Nod...

Страница 117: ...ode 1 Node 2 Select the names of the two subzones or the subzone and zone between which you wish to create a link Pipe 1 Pipe 2 If you wish to apply bandwidth limitations to this link select the pipe...

Страница 118: ...xample two sites that each have their own broadband connection to the Internet Each connection should have its own pipe meaning that a link between the two nodes should be subject to the bandwidth res...

Страница 119: ...andwidth would mean that the total bandwidth limits for that subzone or pipe s would be exceeded Default Call Bandwidth Insufficient Bandwidth and Downspeeding Configuring the Default Call Bandwidth a...

Страница 120: ...and Branch is represented as a separate subzone on the VCS with bandwidth configured according to local policy The enterprise s leased line connection to the Internet and the DSL connections to the re...

Страница 121: ...the VCS Border Controller This is shown by the absence of a link between the Home and Branch subzones VCS Border Controller Subzone Configuration The VCS Border Controller has subzones configured for...

Страница 122: ...key Enter password when prompted Copy the software image using SCP PSCP The target name must be tmp tandberg image tar gz e g scp s42100x11 tar gz root 10 0 0 1 tmp tandberg image tar gz or pscp s4210...

Страница 123: ...tware You will be taken to a new page Select the software file Enter the path of the software image file or click Browse to locate it on the network Install Click here to upload the image file System...

Страница 124: ...he number of non traversal calls allowed the number of registrations allowed To add any of these extra options you need to obtain a valid Option Key and install it on your system Contact your TANDBERG...

Страница 125: ...GUIDE Maintenance This section lists the keys that are already installed on your system along with a description of the options they provide Add option key Enter the 20 character Option Key that has b...

Страница 126: ...sted by the VCS The VCS will only accept certificates signed by a CA on this list If you are connecting to an LDAP database using TLS encryption the certificate used by the LDAP database must be signe...

Страница 127: ...our system support representative at their request to assist them in troubleshooting issues you may be experiencing Creating a System Snapshot To create a system snapshot file Maintenance System Snaps...

Страница 128: ...eeds to be restarted Restarting will cause any active calls to be terminated There are two ways to restart the system Maintenance Restart You will be taken to the Restart page xCommand Boot Restart Sy...

Страница 129: ...s whether the VCS can be accessed via SSH and SCP On SSH SCP access is enabled Off SSH SCP access is disabled Telnet Mode On Off Determines whether the VCS can be accessed via Telnet On Telnet access...

Страница 130: ...atabase for the endpoint s username BaseDN S 0 255 Specifies the Distinguished Name to use when connecting to an LDAP server Mode On Off Determines whether or not to enforce authentication for H 323 a...

Страница 131: ...s the first pipe to be associated with this link Pipe2 Name S 0 50 Specifies the second pipe to be associated with this link Pipe 1 100 Bandwidth PerCall Mode None Limited Unlimited Determines whether...

Страница 132: ...ow any endpoint registered directly to the VCS to call an IP address of any system not also registered directly to that VCS Fallback Alias S 0 60 Specifies the alias to which incoming calls are placed...

Страница 133: ...seconds at which an H 323 endpoint must re register with the VCS in order to confirm that it is still functioning Mode On Off Determines whether or not the VCS will provide H 323 gatekeeper functiona...

Страница 134: ...oth IPv4 IPv6 Selects the IP protocol s supported by the VCS Both the VCS will support both IPv4 and IPv6 IPv4 the VCS will support IPv4 only IPv6 the VCS will support IPv6 only Note You must restart...

Страница 135: ...ormation Policy AdministratorPolicy Mode On Off Enables and disables use of Administrator Policy On Administrator Policy is in use Off Administrator Policy is not in use UserPolicy Mode Off Local Remo...

Страница 136: ...If one of an endpoint s aliases matches one of the patterns in the Deny List the regis tration will not be permitted Type Exact Prefix Suffix Regex Determines the way in which the entry in the Deny L...

Страница 137: ...egistration requests will be proxied to neighbors only ProxyToAny Registration requests will be proxied in accordance with the VCS s existing call processing rules TCP Mode On Off Determines whether i...

Страница 138: ...on of the VCS SystemUnit Name S 0 50 Defines the name of the VCS Choose a name that uniquely identifies the system Password S 0 16 Defines the password of the VCS The password is used to login with Te...

Страница 139: ...e the VCS is taking the media as well as the signaling specifies the lower port in the range to be used for the media End 1024 65534 For traversal calls i e where the VCS is taking the media as well a...

Страница 140: ...media relay End 1024 65534 Specifies the upper port in the range to be used for STUN media relay Zones LocalZone DefaultSubZone Bandwidth PerCall Inter Mode None Limited Unlimited Determines whether...

Страница 141: ...Limit 1 100000000 applies only if Mode is set to Limited Sets the total bandwidth limit in kbps of the Default Subzone SubZone 1 100 Bandwidth PerCall Inter Mode None Limited Unlimited Determines whe...

Страница 142: ...to this subzone Subnet 1 5 IP Address S 0 39 Specifies an IP address used in conjunction with the IP Prefix Length to identify a subnet to be assigned to this subzone PrefixLength 0 128 Specifies the...

Страница 143: ...which a traversal enabled endpoint registered directly with the VCS will send a TCP probe to the VCS once a call is established in order to keep the firewall s NAT bindings open RetryCount 1 65534 Set...

Страница 144: ...dwidth limit in kbps applied to any one traversal call being handled by the VCS Total Mode None Limited Unlimited Determines whether or not there is a limit to the total bandwidth of all traversal cal...

Страница 145: ...ct Prefix Suffix Regex applies only if the Match mode is Pattern Match Determines the way in which the string must match the alias Exact the string must match the alias character for character Prefix...

Страница 146: ...or to be used for SIP calls to and from this VCS Transport TCP TLS Determines which transport type will be used for SIP calls to and from this neighbor TCP TCP will be used TLS TLS will be used SIP Mo...

Страница 147: ...UserName S 1 128 If the traversal client is a VCS this must be the VCS s Authentication User Name If the traversal client is a gatekeeper this must be the gatekeeper s System Name H323 H46019 Demulti...

Страница 148: ...e frequency in seconds with which the traversal client will send a TCP probe to the VCS UDPProbe KeepAliveInterval 1 65534 Sets the interval in seconds with which the traversal client will send a UDP...

Страница 149: ...the VCS none CheckBandwidth A diagnostic tool that returns the status and route as a list of nodes and links that a call of the specified type and band width would take between two nodes Note that th...

Страница 150: ...fault Zone none DefaultValuesSet Resets system parameters to default values Level r 1 3 The level of system parameters to be reset 1 Resets most parameters 2 There are currently no level 2 parameters...

Страница 151: ...tions are sent in XML format to the specified URL Up to 15 Expressions may be registered for each of 3 feedback IDs ID 1 3 The ID of this particular feedback request URL r S 1 256 The URL to which not...

Страница 152: ...pe to be associated with this link Pipe2 S 1 50 Specifies the second pipe to be associated with this link LinkDelete Deletes a link LinkId r 1 600 The index of the link to be deleted Locate Runs the V...

Страница 153: ...ited Determines whether or not this pipe is enforcing total bandwidth restrictions None no bandwidth available Total 1 100000000 If this pipe has limited bandwidth sets the maximum bandwidth in kbps a...

Страница 154: ...ss which must match for an IP address to belong in this subzone TotalMode None Limited Unlimited Determines whether this subzone has a limit on the total bandwidth of calls being used by its endpoints...

Страница 155: ...suffix will removed from the alias Replace the matching part of the alias will be substituted with the text in the Replace string Replace S 1 60 Applies only if pattern behavior is set to Replace Spec...

Страница 156: ...pendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices Command Reference xCommand xCommand Description Parameter...

Страница 157: ...and Reference xStatus Command Reference xStatus SystemUnit Product the product name Uptime Time in seconds SystemTime Time not set date time TimeZone GMT or one of 300 other timezones LocalTime local...

Страница 158: ...v4 Address IPv4Addr SubnetMask IPv4Addr Gateway IPv4Addr IPv6 Address IPv6Addr Gateway IPv6Addr DNS Server 1 5 Address IPv4Addr IPv6Addr Domain S 0 128 NTP Status Inactive Active Failed Cause Visible...

Страница 159: ...GUIDE Appendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices Command Reference xStatus External Manager Status Inactive Initializing Active Failed Cause Visible if status is Fa...

Страница 160: ...all 1 900 SerialNumber S 1 255 State Connecting Connected Disconnecting StartTime Seconds since boot Date Time Duration Time in seconds precision in seconds Legs Leg 1 300 Protocol H323 SIP H323 visib...

Страница 161: ...kbps Route Zone Link S 1 50 Node name 0 150 entries Registrations Registration 1 3750 Protocol H323 SIP Node S 1 50 Node name SerialNumber S 1 255 CreationTime Date Time SecondsSinceLastRefresh 1 6553...

Страница 162: ...RVER ADMINISTRATOR GUIDE Appendices Command Reference xStatus Registrations continued Contact S 1 255 Path URI 1 10 S 1 255 Zones DefaultZone Name DefaultZone Bandwidth Used 0 100000000 Calls Call 0 9...

Страница 163: ...s Current Total Dropped Zone 1 200 Name S 1 50 Node name Status Active Failed Warning Cause Visible if status is Failed or Warning No gatekeeper reachable Gatekeepers unreachable Type Neighbor Travers...

Страница 164: ...us is Failed No response from neighbor DNS resolution failed Address IPv4Addr IPv6Addr One Address line per address from DNS lookup Port 1 65534 LastStatusChange Time not set Date Time TraversalClient...

Страница 165: ...Time not set Date Time TraversalServer Visible if Type is TraversalServer SIP Port Active Inactive H323 Port Active Inactive Primary H323 Visible if H323 Mode On for Zone Status Unknown Active Failed...

Страница 166: ...Appendices Command Reference xStatus Zones continued SIP Visible if SIP Mode On for Zone Status Unknown Active Failed Cause Visible if Status is Failed No response from neighbor DNS resolution failed...

Страница 167: ...ble if status is Failed No response from gatekeeper DNS resolution failed Invalid IP address Address IPv4Addr IPv6Addr Port 1 65534 LastStatusChange Seconds since boot Date Time UserPolicyManager Mode...

Страница 168: ...DBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices Command Reference xStatus H323 continued H46018 CallSignaling Status Active Inactive Failed IPv4 Visible if Status Active Address IPv4Ad...

Страница 169: ...width Control Maintenance Appendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Appendices Command Reference xStatus STU...

Страница 170: ...red freD etc CPL Reference This Appendix gives details of the VCS s implementation of the CPL language and should be read in conjunction with the CPL standard RFC 3880 5 The VCS supports most of the C...

Страница 171: ...origin is taken from the SETUP The From and ReplyTo fields of the incoming message The source aliases from the original LRQ or ARQ that started the call If a SETUP is received without a preceding RAS...

Страница 172: ...If a subfield is not specified for the alias type being matched then the not present action will be taken address type Either h323 or sip based on the type of endpoint that originated the call user Fo...

Страница 173: ...string can specify a URL e g user domain com H 323 ID or an E 164 number priority 0 0 1 0 random Specified either as a floating point number in the range 0 0 to 1 0 or random which assigns a random nu...

Страница 174: ...t cpl extensions xmlns xsi http www w3 org 2001 XMLSchema instance xsi schemaLocation urn ietf params xml ns cpl cpl xsd taa routed address switch field origin not present reject not present address s...

Страница 175: ...ions xmlns xsi http www w3 org 2001 XMLSchema instance xsi schemaLocation urn ietf params xml ns cpl cpl xsd taa routed address switch field destination address regex example com proxy failure locatio...

Страница 176: ...MLSchema instance xsi schemaLocation urn ietf params xml ns cpl cpl xsd taa routed address switch field registered origin not present reject reason Only local endpoints can use this Tandberg VCS not p...

Страница 177: ...Local Gateway In this example a gateway is registered to the VCS with a prefix of 9 and the administrator wants to stop calls from outside the organization being routed through it xml version 1 0 enc...

Страница 178: ...by the character and then the last character in the range You can not use special characters within the they will be taken literally a z will match against any lower case alphabetical character a zA Z...

Страница 179: ...23ls _ udp SRV 1 0 1719 vcs example com Verifying the SRV Record There are a range of tools available to investigate DNS records One commonly found on Microsoft Windows and UNIX platforms is nslookup...

Страница 180: ...r and how to install and configure two common types of LDAP servers Microsoft Active Directory and OpenLDAP for use with the VCS About the LDAP Databases The following ITU specification describes the...

Страница 181: ...requisites These step by step instructions assume that Active Directory has already been installed For details on installing Active Directory please consult your Windows documentation The following in...

Страница 182: ...t will form the BaseDN to which the VCS will issue searches In this example the BaseDN will be ou h350 dc my domain dc com It is good practice to keep the H 350 directory in its own organizational uni...

Страница 183: ...em DDDS Application ENUM http www ietf org rfc rfc3761 txt 9 Mastering Regular Expressions Jeffrey E F Friedl O Reilly and Associates ISBN 1 56592 257 3 10 RFC 3327 Session Initiation Protocol SIP Ext...

Страница 184: ...ber consists of a country code area code and subscriber number For example TANDBERG s European Headquarters phone number is 47 67 125125 corresponding to a country code of 47 for Norway area code of 6...

Страница 185: ...clocks Pipe In relation to the VCS a means of controlling the bandwidth used on a link Proxy Proxy Server In SIP an intermediary entity that acts as both a server and a client for the purpose of maki...

Страница 186: ...ayer Security A protocol that provides secure communications over the internet Transform In relation to the VCS the process of changing the alias being searched for Traversal call Any call where both...

Страница 187: ...n Registration Control Zones and Neighbors Call Processing Firewall Traversal Bandwidth Control Maintenance Appendices TANDBERG VIDEO COMMUNICATION SERVER ADMINISTRATOR GUIDE Philip Pedersens vei 22 1...

Отзывы: