Restricting Access To A Local Gateway; Using The Address-Switch Node; Using The Rule-Switch Node - TANDBERG Video Communication Server Administrator's Manual

Grey Headline (continued)
CPL reference

Restricting access to a local gateway

In these examples, a gateway is registered to the VCS with a prefix of
to stop calls from outside the organization being routed through it.
address-switch
We can do this in two ways: using the
Examples of each are shown below.

Using the address-switch node

<?xml version="1.0" encoding="UTF-8" ?>
<cpl xmlns="urn:ietf:params:xml:ns:cpl"
xmlns:taa="http://www.tandberg.net/cpl-extensions"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd">
<taa:routed>
<address-switch field="destination">
<address regex="9(.*)">
<address-switch field="originating-zone">
<!-- Calls coming from the traversal zone are not allowed to use
this gateway -->
<address is="TraversalZone">
<!-- Reject call with a status code of 403 (Forbidden) -->
<reject status="403" reason="Denied by policy"/>
</address>
</address-switch>
</address>
</address-switch>
</taa:routed>
</cpl>
Overview and
Introduction Getting started
status
D14049.05
February 2009
CPL examples
9
and the administrator wants
rule-switch
node or the node.
System VCS Zones and
configuration configuration neighbors

Using the rule-switch node

<?xml version="1.0" encoding="UTF-8" ?>
<cpl xmlns="urn:ietf:params:xml:ns:cpl"
xmlns:taa="http://www.tandberg.net/cpl-extensions"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd">
<taa:routed>
<taa:rule-switch>
<taa:rule originating-zone="TraversalZone" destination="9(.*)">
<!-- Calls coming from the traversal zone are not allowed to use
this gateway -->
<!-- Reject call with a status code of 403 (Forbidden) -->
<reject status="403" reason="Denied by policy"/>
</taa:rule>
<taa:rule origin="(.*)" destination="(.*)">
<!-- All other calls allowed -->
<proxy/>
</taa:rule>
</taa:rule-switch>
</taa:routed>
</cpl>
Call Bandwidth
processing control
180
TANDBERG VIDEO COMMUNICATIONS SERVER
Firewall
Applications Maintenance
traversal
ADMINISTRATOR GUIDE
Appendices