Allow Calls From Locally Registered Endpoints Only; Block Calls From Default Zone And Default Subzone - TANDBERG Video Communication Server Administrator's Manual

Grey Headline (continued)
CPL reference

Allow calls from locally registered endpoints only

In this example, the administrator only wants to allow calls that originate from locally registered
endpoints.
<?xml version="1.0" encoding="UTF-8" ?>
<cpl xmlns="urn:ietf:params:xml:ns:cpl"
xmlns:taa="http://www.tandberg.net/cpl-extensions"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd">
<taa:routed>
<address-switch field="registered-origin">
<not-present>
<reject status="403" reason="Only local endpoints can use this
Tandberg VCS"/>
</not-present>
</address-switch>
</taa:routed>
</cpl>
Overview and
Introduction Getting started
status
D14049.05
February 2009
CPL examples
System VCS Zones and
configuration configuration neighbors

Block calls from Default Zone and Default Subzone

The same script can be extended to also allow calls from configured zones but not from the Default
Zone or Default Subzone.
<?xml version="1.0" encoding="UTF-8" ?>
<cpl xmlns="urn:ietf:params:xml:ns:cpl"
xmlns:taa="http://www.tandberg.net/cpl-extensions"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd">
<taa:routed>
<address-switch field="registered-origin">
<not-present>
<address-switch field="originating-zone">
<address is="DefaultZone">
<!-- Reject call with a status code of 403 (Forbidden) -->
<reject status="403" reason="Denied by policy"/>
</address>
<address is="DefaultSubZone">
<!-- Reject call with a status code of 403 (Forbidden) -->
<reject status="403" reason="Denied by policy"/>
</address>
<otherwise>
<proxy/>
</otherwise>
</address-switch>
</not-present>
</address-switch>
</taa:routed>
</cpl>
Call Bandwidth
processing control
179
TANDBERG VIDEO COMMUNICATIONS SERVER
Firewall
Applications Maintenance
traversal
ADMINISTRATOR GUIDE
Appendices