Table of Contents

Advertisement

VidyoGateway™
Administrator Guide
Product Version 3.2
Document Version E
October, 2015

Advertisement

Table of Contents
loading

Summary of Contents for Vidyo VidyoGateway

  • Page 1 VidyoGateway™ Administrator Guide Product Version 3.2 Document Version E October, 2015...
  • Page 2: Table Of Contents

    Configuring an SNMP Notification ....................29 © 2015 Vidyo, Inc. all rights reserved. Vidyo’s technology is covered by one or more issued or pending United States patents, as more fully detailed on the Patent Notice page of Vidyo's website http://www.vidyo.com/about/patent-notices/, as well as issued and pending international patents.
  • Page 3 Importing a Pre-shared Key ......................39 Selecting the Default Pre-shared Key ..................40 Logging in to the Admin Portal ......................41 Setting the Language for the VidyoGateway Admin Pages ............43 4. Configuring RADIUS ........................45 Disabling FIPS Mode ........................45 Enabling RADIUS ..........................
  • Page 4 SIP Incoming Call Using a Prefix Example .................. 91 SIP Incoming URI Dialing Example ..................... 91 Dialing From a Legacy H.323 Endpoint into a Vidyo PIN Protected Room ....... 92 TCS4 Delimiters..........................93 Configuring Integrated Voice Response (IVR) Settings ..............93 Enabling Your IVR Settings ......................
  • Page 5 Capturing and Downloading Single Application Logs .............. 108 Viewing Single Application Logs ....................110 Viewing Call Statistics ........................ 112 Configuring a Public IP Address and Viewing Your VidyoGateway Network Settings ....114 Configuring a Public IP Address ....................114 Viewing Your VidyoGateway Network Settings ................. 115 Understanding VidyoGateway Security ..................
  • Page 6 Understanding VidyoGateway VE Requirements ................. 156 Virtual Machine Provisioning Requirements ................. 157 Example Configurations ......................158 Understanding VidyoGateway VE Support of VMware Features ..........158 Installing VidyoGateway VE ......................159 Appendix A. Definitions ......................... 167 Appendix B. Legacy TCS4 Delimiters ................... 169 Appendix C.
  • Page 7: Overview

    Legacy systems. It is written for system administrators who must set up and maintain a VidyoConferencing system. The VidyoGateway is also available as the VidyoGateway Virtual Edition, and can be run as a virtual appliance. For more information, see Using VidyoGateway Virtual Edition (VE).
  • Page 8: Vidyogateway Server Models And Capacities

    Identifying Your VidyoGateway Model VidyoGateway is available in Standard and XL platforms. The previously offered VidyoGateway MKII has been discontinued and replaced with the VidyoGateway XL model. The XL model is a higher capacity, more powerful system for more demanding applications.
  • Page 9: Capacity Of The Vidyogateway Models

    1. VidyoGateway Server Models and Capacities Capacity of the VidyoGateway Models The following tables show the maximum number of concurrent calls allowable for different scenarios including: calls of the same type, different types, and different types and resolutions. All capacity data is based on software version 2.1.3.22 and later.
  • Page 10: Maximum Number Concurrent Calls Of Different Types

    3 HD + 1 SD + 4 CIF 4 HD + 3 SD Note When a Legacy device attempts to join a conference whose VidyoGateway is operating at full capacity, the call fails to connect. Discontinued VidyoGateway Model Capacities These tables show the maximum number of calls the previous VidyoGateway models running 2.1.3.20 or later software version can handle simultaneously when all calls are of the same type...
  • Page 11: Vidyogateway Physical Setup Guidelines

    Locate the VidyoGateway as close as possible to your Legacy system(s), preferably on the same LAN.  If the Legacy systems are in dispersed locations, install the VidyoGateway on the same LAN as your VidyoRouter™.  If the VidyoGateway is on a QoS network, give high priority to the traffic between the VidyoGateway and the Legacy system(s).
  • Page 12: Understanding The Vidyogateway Configuration Procedure

    The overall procedure for configuring your VidyoGateway requires cumulative steps performed on both the VidyoPortal and the VidyoGateway as described in the following procedures. Complete all of the following steps on your VidyoGateway and VidyoPortal in the order they appear.
  • Page 13: Making Additional Vidyogateway Configurations

    For more information, refer to the “Adding a VidyoGateway to Your VidyoPortal” section in VidyoConferencing Administrator Guide Assign the VidyoGateway to a tenant. If you are running a multi‑tenant system, assign it to the appropriate tenant. For more information, refer to “Making the VidyoGateway Components Available” in the...
  • Page 14: Configuring Your Server

    Vidyo utilizes SSH to provide remote access to the System Administrator Console on your Vidyo server over port 22 or 2222. In addition, Vidyo Customer Support may request access to your Vidyo server over this same port in order to assist in troubleshooting any of your customer issues.
  • Page 15: Logging In To The System Console Of Your Server And Changing The Default Password

    Logging in to the System Console of Your Server and Changing the Default Password The very first time you log into your VidyoGateway server, you are required to change the default System Console password to one that is more secure. This System Console account is also the same one used when accessing the VidyoGateway Admin Portal.
  • Page 16: Configuring Network Settings At The System Console

    When you need to reset the password, use 13. Set 'admin' password. Configuring Network Settings at the System Console Your Vidyo server default IP is 192.168.1.110 and should be changed to align with your local area network. A network setup must be performed for each of your Vidyo servers.
  • Page 17 Enter 1 for PRODUCTION INTERFACE or 2 for MANAGEMENT INTERFACE depending on which one contains the IP you want to configure. Note The Management Interface should not be used to transfer any media. For more information, see Configuring Your Vidyo Server’s Management Interface and Port.
  • Page 18 3. Configuring Your Server Enter 1 to select IPv4 (Static) as the address format. The VidyoGateway system supports IPv4 only or IPv6 only mode. Dual stack mode is not supported. Enter the server IP address, subnet mask, default gateway, MAC addresses, hostname, domain name, and FQDN.
  • Page 19 3. Configuring Your Server Once you have entered the required information, enter y and press Enter. Enter 2 to configure the DNS Nameserver to set the fully qualified domain name (if it exists) for the VidyoPortal and the IP addresses of the DNS servers: Enter two DNS server IP addresses.
  • Page 20: Supporting Multiple System Console Accounts

    Supporting Multiple System Console Accounts System Console accounts can be used on the VidyoPortal, the VidyoRouter, and the VidyoGateway. The System Console menu allows for the creation of up to ten System Console accounts. These accounts are created from the System Console.
  • Page 21: Understanding System Administrator Console Menu Options

    The current user is also shown on the User Maintenance menu. Note In addition to accessing the System Console menu, the ten System Console accounts can also access the VidyoGateway Admin Pages. Each new System Console account has a default password of password, which is case sensitive.
  • Page 22 Domain Name: examplecompany.com Native FQDN: examplegateway.examplecompany.com For more information, see Configuring Network Settings at the System Console Configuring Your Vidyo Server’s Management Interface and Port. Configure DNS Nameserver – Enter 2 to specify the Domain Nameserver. Examples: Primary DNS Server for Host: 192.168.1.10 Secondary DNS Server for Host: 192.168.1.11...
  • Page 23: Default Gateway

    IP address you specified.  If you provide an IP address and also provide the port, the system will check if any ports in the firewall are blocking access to your Vidyo server, and then display them.
  • Page 24: Understanding The More Options System Administrator Console Menu

    Restore HTTP(S) settings to default – Enter 16 to return HTTP settings to their default values (HTTP and port 80). This option is not available on the VidyoGateway and VidyoReplay System Console menu..(more options) – Select m for a submenu containing additional options.
  • Page 25: Configuring Fips On Your Vidyogateway Server

    Exit Advanced Options – Enter X to return to the More Options menu from Advanced Options. Configuring FIPS on Your VidyoGateway Server FIPS is the Federal Information Processing Standard 140-2. By default, FIPS mode is enabled on your Vidyo server.
  • Page 26: Managing Network Routes

    When your system comes back online, FIPS is then disabled (or enabled) on your Vidyo server. Note When FIPS is enabled, the SIP tab in the VidyoGateway Admin Portal contains Address and Port fields. However, when FIPS is disabled, the tab contains Address, Port, Username, Password, and Confirm Password fields.
  • Page 27: Adding A Network Route

    3. Configuring Your Server Enter m for more options. Enter A for Advanced Options. Enter 2 for Network Route Management. Route Management screen displays. Use this screen to Add, Remove, or Remove All Route Management (routes); navigate routes using Next or Previous; and exit the screen.
  • Page 28: Removing A Network Route

    3. Configuring Your Server Note If you want to cancel adding your Network Route, press enter while providing no Destination, Gateway, or Interface information. The system tells you that you must provide valid Route Management information and to press any key. Press any key to return to the screen.
  • Page 29: Removing All Of Your Network Routes

    3. Configuring Your Server Enter the corresponding number of the network route you want to remove. Enter y to confirm removing the selected Network Route. Enter X to return to the Advanced Options menu. Removing all of Your Network Routes To remove all of your network routes: Log in to the System Console.
  • Page 30: Configuring Snmp

    This trap provides an indication that a new VidyoGateway has joined the cluster.  When a VidyoGateway node is added to the cluster, this trap can be turned on and off by setting the notification from the System Console. ...
  • Page 31: Enabling Snmp

    If your VidyoGateway system uses the Hot Standby option and you are not using your management interface, your SNMP notifications will source from the shared IP address. Vidyo recommends configuring your VidyoGateways using a management interface so your SNMP notifications can be sourced from unique management interface IP addresses.
  • Page 32: Configuring An Snmpv2 Community String

    3. Configuring Your Server Select y to confirm the change and enable or disable SNMP. Select X to exit. Select X to exit Advanced Options. Select 14 to reboot system. When your system comes back online, SNMP is then enabled (or disabled). Configuring an SNMPv2 Community String You can create two SNMPv2 community strings on your system that can access your network management server.
  • Page 33: Configuring Local Snmpv3 User (User-Based Security Model)

    3. Configuring Your Server Deleting an SNMP Community String To delete an SNMP community string: Log in to the System Console. For more information, see Logging in to the System Console of Your Server and Changing the Default Password. Enter m for more options. Enter A for Advanced Options.
  • Page 34  This password uses SHA authentication, and must be at least eight characters. Note Vidyo does not currently support MD5 authentication. Enter and verify a second authentication password of your choice.  This password uses AES encryption, and must be at least eight characters.
  • Page 35: Configuring An Snmp Notification

    3. Configuring Your Server Enter m for more options. Enter A for Advanced Options. Enter 4 for SNMP Administration. Enter C to configure Local SNMPv3 User (User-based Security Model). Select from the menu based on the SNMPv3 User type desired. ...
  • Page 36 3. Configuring Your Server Enter 1 for SNMPv2 Notification. Enter the IP or FQDN address of your network management server. Enter I or T to configure an Inform or Trap notification type. The system asks for the values in the remaining steps if your notification type is Inform or Trap.
  • Page 37 This password uses SHA authentication, and must be at least eight characters. Note Vidyo does not currently support MD5 authentication. Enter and verify a second authentication password of your choice. This password uses AES encryption, and must be at least eight characters.
  • Page 38: Managing Hostnames

    IP addresses to a specific Hostname or FQDN. Note Vidyo recommends this feature not replace adding proper records to your internal and external DNS servers. It should only be used to support DMZ deployments where there is no DNS server access from the DMZ and allowing the different servers to properly locate each other.
  • Page 39: Adding A Hostname

    3. Configuring Your Server Enter m for more options. Enter A for Advanced Options. Enter 5 for Hostname Management. Host Entries screen displays. Use this screen to Add, Remove, or Remove All Host Entries (hostnames); navigate hostnames using Next or Previous; and exit the screen.
  • Page 40: Removing A Hostname

    3. Configuring Your Server Enter y to confirm the change and add your Hostname. Host Entries Your Hostname is then listed and numbered on the top of the screen. Enter X to return to the Advanced Options menu. Removing a Hostname To remove a hostname: Log in to the System Console.
  • Page 41: Removing All Of Your Hostnames

    3. Configuring Your Server Enter y to confirm removing the selected Hostname. Enter X to return to the Advanced Options menu. Removing all of Your Hostnames To remove all of your hostnames: Log in to the System Console. For more information, see Logging in to the System Console of Your Server and Changing the Default Password.
  • Page 42: Maintaining Pre-Shared Keys

    Pre-shared keys are only used when configuring your VidyoGateways as a cluster. For more information, see Understanding VidyoGateway Clusters. A pre-shared key from Active Controller authenticates the cluster communication channel shared among Standby Controller and Cluster Nodes.
  • Page 43: Generating A Pre-Shared Key

    VidyoGateway. Generating a Pre-shared Key When initially setting up your system, you must generate the pre-shared key from your Active Controller when using a VidyoGateway cluster configuration. For more information about clusters, Understanding VidyoGateway Clusters. To generate a pre-shared key: Log in to the System Console.
  • Page 44: Exporting A Pre-Shared Key

    After generating your own pre-shared key, the key hash is displayed at the top of the menu. Otherwise, it displays as DEFAULT. Exporting a Pre-shared Key After generating the pre-shared key on the Active Controller in your VidyoGateway cluster configuration, you then export the key from the same server. For more information about clusters, Understanding VidyoGateway Clusters.
  • Page 45: Importing A Pre-Shared Key

    Enter x to exit Advanced Options. Importing a Pre-shared Key After generating and exporting the pre-shared key from the Active Controller in your VidyoGateway cluster configuration, you then import the key to your Standby Controller and Cluster Nodes. For more information about clusters, see Understanding VidyoGateway Clusters.
  • Page 46: Selecting The Default Pre-Shared Key

    3. Configuring Your Server Enter K for Pre-shared Key Maintenance. The Pre-shared Key Maintenance menu displays. Under the menu title, the Current PSK field indicates the pre-shared key currently being used on your server. Enter 2 to import a new pre-shared key. Instructions display telling you to paste the encrypted pre-shared key and then enter the passphrase that was used to encrypt the pre-shared key.
  • Page 47: Logging In To The Admin Portal

    Select x to exit Advanced Options. Logging in to the Admin Portal Now that you have connected your VidyoGateway server to the network, you must log in to its Admin portal using the System Console account and configure your VidyoGateway so it can function within your VidyoConferencing system.
  • Page 48 3. Configuring Your Server Log in to the Admin portal using your System Console account. Note If you do not enter information on this page, you will be logged out from inactivity. Login History Prior to logging in, the dialog box shows the last five login attempts made to the Admin portal.
  • Page 49: Setting The Language For The Vidyogateway Admin Pages

    3. Configuring Your Server Click Continue. Setting the Language for the VidyoGateway Admin Pages The VidyoGateway Admin pages are available in these 15 languages:  English  Korean   Chinese (Simplified) Polish  Chinese (Traditional)  Portuguese  ...
  • Page 50 3. Configuring Your Server To set your preferred language:  Select your desired language using the language drop-down on the upper right corner of the VidyoGateway Admin Login page.
  • Page 51: Configuring Radius

    RADIUS. Disabling FIPS Mode RADIUS configuration is allowed only when the Vidyo server has FIPS disabled. If FIPS is enabled, follow the procedures in this section to disable it. If FIPS is already disabled, then proceed to the Enabling RADIUS section.
  • Page 52: Enabling Radius

    4. Configuring RADIUS Enter y to verify disabling FIPS mode. Press the Enter key on your keyboard to return to the Advanced Options menu. Enabling RADIUS To enable RADIUS: Log in to the System Console. Enter 19 to access the User Maintenance menu. Enter D.
  • Page 53: Viewing The Current Radius Configuration

    4. Configuring RADIUS Enter the preshared key for the RADIUS server. Enter the IP or FQDN for additional RADIUS servers or leave blank to finish. Note A maximum of 10 RADIUS servers is supported. Enter the preshared key for the additional RADIUS server. Enter the IP or FQDN for additional RADIUS server or leave blank to finish.
  • Page 54: Modifying The Radius Configuration

    4. Configuring RADIUS Note Enter y for the change settings prompt if the configuration needs to be modified, and proceed to step 4 in the Modifying the RADIUS Configuration section. Modifying the RADIUS Configuration To modify the RADIUS configuration: Log in to the System Console. Enter D.
  • Page 55: Creating A Radius-Enabled Account

    4. Configuring RADIUS Note In the following screenshot, two RADIUS servers were configured causing this prompt to display. This prompt will only display if two or more RADIUS servers are being configured. If you do not have additional RADIUS servers to configure, leave blank to finish. RADIUS is enabled.
  • Page 56: Viewing A Radius-Enabled Account

    4. Configuring RADIUS Note Enter n if you do not want the user to be authenticated via RADIUS, and proceed to the Creating a Local System Console Account section. Viewing a RADIUS-Enabled Account You should always review the new RADIUS-enabled account for accuracy. To view a RADIUS-enabled account: Log in to the System Console.
  • Page 57: Removing A Radius-Enabled Account

    4. Configuring RADIUS Removing a RADIUS-Enabled Account To remove a RADIUS-enabled account: Log in to the System Console. Enter B. Enter the username to be removed. Enter y for the confirm changes prompt. Disabling RADIUS Authentication To disable RADIUS authentication: Log in to the System Console.
  • Page 58: Creating A Local System Console Account

    4. Configuring RADIUS Press any key on your keyboard to return to the User Maintenance menu. Creating a Local System Console Account To create a local System Console account: Log in to the System Console. Enter A for Advanced Options. Enter a unique username.
  • Page 59 4. Configuring RADIUS  The password should not be a case change of the old password or should not be the reverse of the old password. Re-enter your new password for the retype new UNIX password prompt. If the passwords don’t match, you’ll be prompted to try again. If the passwords match, the System Console menu opens immediately.
  • Page 60 4. Configuring RADIUS In addition, when using the emergency user functionality with a RADIUS-enabled account, the account will be converted back to a local System Console account as well.
  • Page 61: Configuring Your System

    5. Configuring Your System Tabs shown along the top of your VidyoGateway Admin pages for General, Cluster, Services, IVR, Maintenance, and Logout are used to configure different areas of your system. The following sections cover these tabs in more detail.
  • Page 62 For more information, see Logging in to the Admin Portal. Enter the IP or FQDN address of the VidyoPortal tenant to which your VidyoGateway will be connected. Select None, HTTPS, or HTTPS + Media Encryption from the Security drop-down. HTTPS or HTTPS + Media Encryption must be selected for TLS protocol fields to display General >...
  • Page 63: Configuring Sip Settings

    Settings made while only clicking Save accrue and are applied when you subsequently click Save and Apply or reboot your VidyoGateway server. Configuring SIP Settings Use the SIP tab to configure your VidyoGateway session initiation protocol (SIP) settings. Note Values you provide in the fields on the tab are automatically propagated to your Cluster Nodes.
  • Page 64 Click the tab. When using the TLS protocol, provide the following information: Select the TLS checkbox to encrypt the SIP signaling between the VidyoGateway and a proxy server. When this checkbox is selected, all outbound SIP calls will use TLS.
  • Page 65 TLS to TCP to UDP. For example, if you select all three (TLS, TCP, UDP), the VidyoGateway will be listening to inbound traffic on three protocols. For outbound traffic, the VidyoGateway will only attempt TLS.
  • Page 66: Configuring H.323 Settings

    Node servers. To make configurations on the tabs, you must access them from your Active Controller. Configuring H.323 Settings When Using a Standalone VidyoGateway When your VidyoGateway is configured as a Standalone VidyoGateway, the following settings are H.323 available in the tab.
  • Page 67 Settings made while only clicking Save accrue and are applied when you subsequently click Save and Apply or reboot your VidyoGateway server. Configuring H.323 Settings When Clustering Your VidyoGateways When you configure your VidyoGateway as a cluster, the following settings are available in the H.323 tab.
  • Page 68: Configuring Audio Settings

    5. Configuring Your System The following screenshot shows the fields that appear when the VidyoGateway has been Cluster configured as a cluster VidyoGateway using the tab described in Configuring Clusters. In the Primary Gatekeeper field, enter the hostname or IP address of your primary gatekeeper.
  • Page 69 Select the Participant Event Tone checkbox to sound a tone whenever conference participants join or leave conferences. Select the Recording Notification checkbox to sound an alert to Vidyo server for Microsoft Lync users whenever the conference is being recorded. Select the .wav files as follows: ...
  • Page 70: Configuring Video Loopback Settings

     Settings made while only clicking Save accrue and are applied when you subsequently click Save and Apply or reboot your VidyoGateway server. Configuring Video Loopback Settings Video loopback is not available if IVR is enabled. For more information, see...
  • Page 71: Configuring Quality Of Service (Qos) Settings

    You can choose between IP Precedence or Differentiated Services Code Point (DSCP) service types. Depending on the service type selected, you can assign specific values to packets coming from your VidyoGateway to your VidyoRouter and your Legacy device for video, audio, content data, and signaling services set on this screen.
  • Page 72  Settings made while only clicking Save accrue and are applied when you subsequently click Save and Apply or reboot your VidyoGateway server. Quality of Service Settings with DSCP Selected as the Type of Service To configure quality of service settings with DSCP selected as the type of service: Log in to the Admin portal using your System Console account.
  • Page 73: Configuring The Waiting Room Prompts

     Settings made while only clicking Save accrue and are applied when you subsequently click Save and Apply or reboot your VidyoGateway server. Configuring the Waiting Room Prompts You can use the Prompts tab to configure a background screen image and a sound file which is presented to participants while they are in Waiting Room mode.
  • Page 74 A system notification displays indicating that the system has applied the default waiting room WAV. Click Save or Save and Apply as desired.  When you click Save and Apply, a dialog box informs you that the change drops all of the active conference calls on your VidyoGateway server.
  • Page 75: Configuring Advanced Settings

    In the Media Max UDP Port field, enter the upper limit of the port range. The default (recommended and maximum) value is 65535. In the H.245 Min TCP Port and H.245 Max TCP Port fields, enter the number of TCP ports used for media transport between the VidyoGateway and the Legacy device and between...
  • Page 76 CDR data on your VidyoPortal. Select the Call Notification API checkbox if you want to enable VidyoGateway to convey to the external application the details of an incoming call (including the extension dialed,...
  • Page 77: Understanding Vidyogateway Clusters

    Understanding VidyoGateway Clusters A VidyoGateway can be configured as a single Standalone VidyoGateway (a single component acting as both Controller and VidyoGateway) or as a cluster setup with an Active Controller, Standby Controller, and Cluster Node VidyoGateway. This section explains various VidyoGateway cluster configurations used to support as many H.323...
  • Page 78: Clustering Benefits

    VidyoGateways as Controller 2 and/or Cluster Node. Any VidyoGateway can be a Controller 1, Controller 2, or Cluster Node in your VidyoGateway cluster. The Active and Standby Controller roles will be automatically assigned by the system to the two controllers (Controller 1 and Controller 2).
  • Page 79: Deploying Multiple Vidyogateway Clusters

    If you deploy large-scale, geographically diverse networks serving multiple tenants, you can provision multiple VidyoGateway clusters in a single VidyoPortal. In such cases, you may want to dedicate scalable VidyoGateway clusters to certain locations or tenants as shown in the following...
  • Page 80: Configuring Clusters

    A public IP addresses must be used. This means none of the VidyoGateway servers in your cluster can be NATed.  If they are behind a firewall, it must permit Legacy ports for each VidyoGateway server in your Cluster. This is usually configured as a set range of IP addresses in your firewall. ...
  • Page 81: Understanding The Clustering Procedure

     VidyoGateway high availability relies on the address resolution protocol (ARP) request to determine whether the floating IP address is up. If it is not up, the VidyoGateway (active or standby) takes possession of the shared IP address. Cluster Configuration screen allows you to specifically designate your machine as a Standalone, Controller 1, Controller 2, or Cluster Node VidyoGateway.
  • Page 82: Returning A Repaired Controller To Your System Setup

    Standby Controller. Replacing an Irreparable Controller to Your System Setup Vidyo recommends you replace the original Controller 1 with a Cluster Node (if you have one in your system setup). The Cluster Node VidyoGateway is then recognized as a Standby Controller, but is mislabeled as the Cluster Node.
  • Page 83: Configuring Controller 1

     Any modifications you make to your Clusters accrue until you click Save and Reboot, when all of your Cluster changes are applied to your VidyoGateway server.  When you click Save and Reboot, a dialog box informs you that the change drops all of the active conference calls on your VidyoGateway server.
  • Page 84  Any modifications you make to your Clusters accrue until you click Save and Reboot, when all of your Cluster changes are applied to your VidyoGateway server.  When you click Save and Reboot, a dialog box informs you that the change drops all of...
  • Page 85: Configuring Controller 2

    Understanding the Clustering Procedure.  When using VidyoGateway version 3.2 and later, your Services automatically propagate from Services your Active Controller to the Standby Controller and Cluster Nodes. Therefore, the does not display when accessed from your Standby Controller. To make configurations on the tabs, you must access them from your Active Controller.
  • Page 86: Configuring Your Cluster Node

     Before configuring clusters, be sure to review Understanding the Clustering Procedure.  When using VidyoGateway version 3.2 and later, your services and VidyoPortal, SIP, H.323 configurations automatically propagate from your Active Controller to the Cluster Nodes. Services VidyoPortal H.323...
  • Page 87: Managing Services

    Adding a Service. VidyoGateway services specify the type of call, the direction (to and from), and specific profile details. Prefixes are used when creating a dialing plan (if required) or when isolating a call through a specific VidyoGateway is necessary.
  • Page 88: Adding A Service

    When clustering your VidyoGateways, your Services are centralized; meaning, the ones configured on your Active controller are used on all servers in your cluster. For more information about Clustering, see Understanding VidyoGateway Clusters.  For information about specific call types and services, see...
  • Page 89 In the Support H.235 drop-down, select one of the following security options: Select No to not have your H.235 transmissions secured.  Select Optional to have H.235 calls secured between your VidyoGateway and  Legacy devices that support encryption for the protocol.
  • Page 90 VidyoGateway server, see Maximum Number Concurrent Calls of the Same Type. For example, you should select HD1080 only if you have a VidyoGateway XL and for not more than two concurrent calls. (Not applicable for audio-only calls.) When you select a Resolution value, the Bandwidth is changed accordingly in the ...
  • Page 91 5. Configuring Your System Select Gallery View to display participants in a filmstrip-type layout.  Select Active Speaker to display the most recent speaker in a larger window than  other users. Select Continuous Presence to display all participants in equal-sized windows. ...
  • Page 92: Activating And Deactivating Services

     Any services you Edit, Delete, Activate, and Deactivate accrue until you click Apply Changes, when all of your Service changes are applied to your VidyoGateway server.  When clicked, a dialog box informs you that the change drops all of the active conference calls on your VidyoGateway server.
  • Page 93: Deleting A Service

     Any services you edit, delete, activate, and deactivate accrue until you click Apply Changes, when all of your Service changes are applied to your VidyoGateway server.  When clicked, a dialog box informs you that the change drops all of the active conference calls on your VidyoGateway server.
  • Page 94: Editing A Service

     Any services you edit, delete, activate, and deactivate accrue until you click Apply Changes, when all of your service changes are applied to your VidyoGateway server.  When clicked, a dialog box informs you that the change drops all of the active conference calls on your VidyoGateway server.
  • Page 95  Any services you Edit, Delete, Activate, and Deactivate accrue until you click Apply Changes, when all of your Service changes are applied to your VidyoGateway server.  When clicked, a dialog box informs you that the change drops all of the active...
  • Page 96: Understanding Call Types And Service Examples

    Services. H.323 Outgoing Call Examples Note All outgoing H.323 calls are P2P connections if dialed from a Vidyo user’s homepage. For conferences or multipoint connections, you must be added via invitation from the Control Meeting or Admin Page functions. ...
  • Page 97: Sip Incoming Call Using A Prefix Example

    [VidyoGateway IP Address]![VidyoGateway incoming service prefix] + [Vidyo username or extension] Example: 192.168.1.110!035001  An incoming VidyoGateway call (without a gatekeeper) from a Legacy H.323 endpoint: [VidyoGateway IP Address] + [TCS4 delimiter] + [VidyoGateway incoming service prefix] + [Vidyo extension] Example: 192.168.1.110##035001...
  • Page 98: Dialing From A Legacy H.323 Endpoint Into A Vidyo Pin Protected Room

    Dialing From a Legacy H.323 Endpoint into a Vidyo PIN Protected Room [VidyoGateway IP Address ] + [TCS4 delimiter] + [VidyoGateway service prefix] + [Vidyo extension] + [VidyoGateway PIN delimiter] + [Vidyo Users Room PIN] Example: 192.168.1.110##035001*1234 (This is a Polycom Lifesize call string coming into a...
  • Page 99: Tcs4 Delimiters

    Loopback Settings. When you dial into VidyoGateway from a Legacy device, a system of menus complete with text and voice prompts guide you through the IVR interfaces. You can configure these IVR interfaces using settings for Parameters, Prompts, and Import/Export IVR Media and Prompt Settings on the corresponding tabs.
  • Page 100: Enabling Your Ivr Settings

    Active Controller, Standby Controller, and all of your Cluster Nodes. Moreover, if you choose to customize the IVR settings, you must configure those on all of the VidyoGateway servers in the cluster (Active Controller, Standby Controller, Cluster Nodes). For more information about clusters, Understanding VidyoGateway Clusters.
  • Page 101 VidyoGateway IVR Screen Prompt Types. In the Display Name field, enter the name of your VidyoGateway to be shown when calling in from Legacy devices. In the Voice Repeat Interval (seconds) field, enter a numeric time value (in seconds) to elapse between repeated voice responses.
  • Page 102: Configuring Appearance Ivr Settings

    In the Disconnect Prompt Duration (seconds) field, enter a numeric time value (in seconds) to elapse from when a Legacy endpoint is disconnected from your VidyoGateway due to inactivity until being returned to the VidyoGateway screen. Select or clear the Jump to IVR if wrong extension is entered checkbox: Select the checkbox to show the IVR when an incorrect extension or PIN is entered ...
  • Page 103 Use the following two buttons to select a custom image or use the default for your VidyoGateway IVR background image:  Click Upload BMP to select a custom image for use on your VidyoGateway IVR. Your .bmp file must be 704 x 576 and not exceed 10MB. ...
  • Page 104 5. Configuring Your System Click the Font Color field and select from the palate of swatch colors that displays. Note You can enter a standard color name or hexadecimal value directly in the field. Hexadecimal color values are shown as you mouse-over swatches on the palate. A swatch of the selected color is shown to the right of the field.
  • Page 105 5. Configuring Your System Enter a number value (in pixels) for the Font Size you want used for your VidyoGateway IVR screens. Enter a number value (in pixels) for the Text Left Offset (the margin between the left of the screen and the start of your text) you want used for your VidyoGateway IVR.
  • Page 106: Configuring Vidyogateway Ivr Screen Instruction Settings

    5. Configuring Your System The following screenshot shows the line space on the VidyoGateway screen: To join a conference, please press 1. 13. Text Line Space To make a direct call, please press 2. Click Save or Save and Apply as desired.
  • Page 107 5. Configuring Your System Instructions Click the tab. Enter custom text for the Entering Instruction you want used for your VidyoGateway IVR screens. Entering Instruction is the announcement used when participants dialing from a Legacy device join VidyoConferences. Note Click Default at any time to restore the original system text for the corresponding instruction.
  • Page 108 5. Configuring Your System Enter custom text for the Backspace Instruction you want used for your VidyoGateway IVR screens. The Backspace Instruction is what participants dialing from Legacy devices are told in order to move backward through menu selections. Note Click Default at any time to restore the original system text for the corresponding instruction.
  • Page 109: Configuring Vidyogateway Ivr Screen Prompt Settings

    5. Configuring Your System The following screenshot shows the cancel call instruction for the VidyoGateway IVR screen: Ringing… To cancel the call, please use the * key. Click Save or Save and Apply as desired.  When you click Save and Apply, a dialog box informs you that the change drops all of the active conference calls on your VidyoGateway server.
  • Page 110 Click Default Text to use the original system text for the corresponding VidyoGateway screen prompt type.  Click Upload WAV to select a custom sound file for use on your VidyoGateway screen prompt type. You must upload a 16-bit, mono .wav file.
  • Page 111: Vidyogateway Ivr Screen Prompt Types

    5. Configuring Your System  Click Apply Default WAV to use the original system sound file as your VidyoGateway IVR screen prompt type. For a complete list of IVR prompt types and descriptions, see VidyoGateway IVR Screen Prompt Types. Click Save or Save and Apply as desired.
  • Page 112 The Enter Conference Extension prompt type. If configured as the First Screen Option selection Configuring Appearance IVR Settings, you first dial in to VidyoGateway and receive this prompt asking you to enter the room extension followed by the # key.
  • Page 113: Importing And Exporting Vidyogateway Ivr Media And Prompt Settings

    You can apply or restore IVR media and prompt settings that have been already saved by importing an existing .tar.gz file to your VidyoGateway server. You can also save exported settings to a .tar.gz file for applying to a different VidyoGateway server or just keep it as a backup. Note Imported and exported settings only apply to media files and prompts.
  • Page 114: Enabling And Disabling Vidyogateway Ivr Settings

    Checking the Status of Your VidyoGateway Status page allows you to capture logs of calls occurring on your VidyoGateway. You can download and view logs for debugging analysis and view the statistics of a single call. You can also view the data directly on the VidyoGateway, if desired.
  • Page 115 Click Start Capture. Note Logs of calls taking place on your VidyoGateway are recorded into a file only after you click Start Capture. If the capture is started, a system notification displays indicating it was started successfully.
  • Page 116: Viewing Single Application Logs

    5. Configuring Your System Stop Capture dialog box displays. Click Stop Capture. If the capture is stopped, a system notification displays indicating it was stopped successfully. Click Download Logs. Download Logs dialog box displays. Click Download Logs. Your browser downloads a .tar.gz file containing your log file for debugging analysis. Viewing Single Application Logs To view single application logs file for debugging purposes: Log in to the Admin portal using your System Console account.
  • Page 117 The individual log file is downloaded in text format through your browser. Click Refresh to reload the list of log files available on View Logs. Note Download Logs and View Logs shows the detail of calls occurring on your VidyoGateway, whereas Download Audit Logs provides specific user activity audit log files.
  • Page 118: Viewing Call Statistics

    If the VidyoGateway is not currently processing calls, no results display like the screenshot previously shown.  If your VidyoGateway is processing calls, the main area of the screen is populated with call information such as Resolution, Legacy Device, Conference, Number of Participants, and Call Duration as follows.
  • Page 119 The following information is available on the Call Statistics dialog box:  The Legacy ← → Vidyo label is shown along with the encryption status, codec, and call direction.  The Legacy device shaded table heading displays the name of your device along with the following data between the VidyoGateway and the Legacy device: Audio codec protocols being used for both transmitting and receiving messages.
  • Page 120: Configuring A Public Ip Address And Viewing Your Vidyogateway Network Settings

    Only configure the public IP address on your Controller nodes if you want to dial in to your VidyoGateway using your FQDN. Note Public IP address configuration is intended for use on a cluster VidyoGateway using the H.323 protocol. The public IP address should be the address returned by your DNS when looking up the FQDN for your cluster.
  • Page 121: Viewing Your Vidyogateway Network Settings

     Any modifications you make to your Clusters accrue until you click Save and Reboot, when all of your Cluster changes are applied to your VidyoGateway server.  When you click Save and Reboot, a dialog box informs you that the change drops all of the active conference calls on your VidyoGateway server.
  • Page 122: Understanding Vidyogateway Security

    Click the tab. Understanding VidyoGateway Security This section of the guide shows you how to secure your VidyoGateway. For more information about securing your entire VidyoConferencing system, refer to the security section in the VidyoConferencing Administrator Guide. Before we secure the VidyoGateway, it’s important to understand there are two security layers available for your VidyoConferencing system: ...
  • Page 123: Securing Your Vidyogateway System With Ssl And Https

    Securing Your VidyoGateway System with SSL and HTTPS To secure your VidyoGateway system by Enabling HTTPS, you must complete specific configurations done on six sequential tabs from left to right in the Security section of the Admin Pages. The tabs include: Private Key tab for Generating or Uploading an SSL Private Key.
  • Page 124 Changes made to an SSL Private Key require a CSR and SSL Server Certificate. This includes importing existing keys, editing existing keys, exporting existing keys and regenerating new keys. Private Keys are replaced if you choose to import from .p7b, .pfx, or .vidyo bundle formats. For more information, see Importing Certificates from a Certificate Bundle.
  • Page 125 If the upload completes, a system notification displays indicating the private key installed successfully. Exporting an SSL Private Key Private keys can be exported from your server. Vidyo recommends carefully backing up your existing SSL Private Key in its entirety before starting SSL Private Key procedures. Note Changes made to an SSL Private Key require a CSR and SSL Server Certificate.
  • Page 126 5. Configuring Your System Click Export. Export Private Key dialog box displays. Enter and confirm your password. Click Export. Your browser downloads the .key file. Regenerating an SSL Private Key This system uses an asymmetrical (private key and public key) cryptosystem for security. Choose the key size you desire and click the Regenerate button to create your private key.
  • Page 127: Generating And Viewing An Ssl Csr

    5. Configuring Your System Click Regenerate. Regenerate Private Key dialog box displays. Select 1024, 2048, or 4096 as your Private Key Size. Note Some countries or CAs limit the key size. Observe the limitations in effect in your country. Check with your CA for Key Size requirements. Click Regenerate.
  • Page 128 5. Configuring Your System Click the tab. Check with your CA and carefully enter correct values for the following:  Country Code (the 2 character ISO 3166 country code)  State or Province Name  Locality/City  Organization  Organization Unit ...
  • Page 129: Certificates Received From Your Certificate Authority

    5. Configuring Your System Maintenance > Security Click the tab. Click the tab. Click View. Certificate Signing Request dialog box displays. Click Done. Certificates Received from Your Certificate Authority Most CAs instantly send certificates and returns at least a domain (server) certificate and may return a root and one or more intermediate certificates in separate files.
  • Page 130 CA’s website. If the root and/or intermediate certificates were not provided to you, your Vidyo server includes a default bundle of common CA root and intermediate certificates. If you are using a mainstream CA, the root and intermediate certificates may not be needed.
  • Page 131: Uploading Or Editing Your Server Certificate

    Root, Intermediate, and Server Certificate content. Check with your CA to find out exactly where each certificate is located. Your Vidyo server accepts the .pem, .crt, .cer, .der, .p7b, and .pfx formats. The .pfx format additionally includes the private key which may be password protected.
  • Page 132 5. Configuring Your System Maintenance > Security Click the tab. Server Cert Click the tab. Click Choose File to locate the private key file. Click Upload. Confirmation dialog box displays. Click Yes. If the upload completes, a system notification is shown indicating the private key installed successfully.
  • Page 133 5. Configuring Your System Editing Your Server Certificate Note Changes made to an SSL Private Key require a CSR and SSL Server Certificate. This includes uploading existing keys, editing existing keys, and regenerating new keys. To edit a server certificate: Log in to the Admin portal using your System Console account.
  • Page 134 5. Configuring Your System Click Edit. Server Certificate dialog box displays. Modify certificate data in the scrollable text region on the dialog box as desired. Click Apply. If the edit completes, a system notification displays indicating the change was successful. Generating a Self-Signed Certificate Note Changes made to an SSL Private Key require a CSR and SSL Server Certificate.
  • Page 135: Deploying Your Server Ca Certificates (Intermediates)

    5. Configuring Your System Server Cert Click the tab. Click Generate Self-Signed. Confirmation dialog box displays. Click Yes. If the generation completes, a system notification displays indicating the self-signed certificate was created. Deploying Your Server CA Certificates (Intermediates) In addition to issuing SSL Certificates, a Trusted Root CA certificate can also be used to create another certificate, which in turn can be used to issue SSL Certificates.
  • Page 136 5. Configuring Your System Certificate is issued by the Trusted Root CA, any SSL Certificates issued by the Intermediate Certificate inherits the trust of the Trusted Root – effectively creating a certification chain of trust. In many cases the chaining is not limited to a single intermediate. More than one intermediate certificate may be part of a Certificates Bundle.
  • Page 137: Configuring Https Port Settings For Your Admin Pages

    Note The Applications tab is also used for Management Interface settings. For more information, Configuring Your Vidyo Server’s Management Interface and Port. If you set the HTTPS Port to anything other than 443, users have to manually add the port to their URL requests in their browsers.
  • Page 138: Importing Client Root Ca Certificates From The Advanced Tab

    OCSP. For more information, see Configuring OCSP. Importing a Client CA Certificate Vidyo servers ship with a default trusted Certificate Authority (CA) list and is enabled by default. Advanced This tab function allows you to enable or disable the use of this list.
  • Page 139 5. Configuring Your System Advanced Click the tab. Click Choose File to locate the client CA cert. Select your desired client CA cert action from the Action drop-down. Click Import CA Cert File. Confirmation dialog box displays.
  • Page 140 5. Configuring Your System Click Yes. If the changes are applied to your Vidyo server, a system notification displays indicating the settings saved successfully. Configuring Client CA Certificates Advanced Vidyo servers ship with a default trusted CA list and is enabled by default. This function allows you to enable or disable the use of this list.
  • Page 141 Select whether or not to enable or disable your default trusted CA list. Click Apply. Note Any active calls going through your specific Vidyo server are dropped when you click Apply. If the changes are applied to your Vidyo server, a system notification displays indicating the settings saved successfully.
  • Page 142 Click Choose File to locate the bundle. If using the .pfx format, enter the password. Click Import Bundle. Confirmation dialog box displays. Click Yes. If the changes are applied to your Vidyo server, a system notification displays indicating the settings saved successfully.
  • Page 143 Click the tab. Click Export All. Your browser downloads a .vidyo file containing your current security configuration. Resetting Your Security Configuration to Factory Defaults To reset your security configuration to the factory defaults: Log in to the Admin portal using your System Console account.
  • Page 144 5. Configuring Your System Advanced Click the tab. Click Reset All. Confirmation dialog box displays. Click Yes. If the changes are applied to your Vidyo server, a system notification displays indicating the security settings have been successfully reset.
  • Page 145: Enabling Https On Your Vidyo Server

    If your browser generates a root certificate error, first check that your operating system has the latest root certificates update applied. If you are successful browsing to your Vidyo server using HTTPS and you do not receive any browser errors, continue with the next procedure.
  • Page 146 HTTPS Only is now enabled. Recovering from an HTTPS Failure If HTTP is disabled, and you can no longer browse to the Vidyo server using HTTPS, you can disable HTTPS and re-enable HTTP browsing using the System Console menu and selecting Option 16.
  • Page 147: Configuring Your Vidyo Server's Management Interface And Port

    5. Configuring Your System Configuring Your Vidyo Server’s Management Interface and Port Your Vidyo server allows for the configuration of a secondary Ethernet interface that can be used to access the management capabilities of the system. The secondary Ethernet interface is typically on a segregated network from the main production interface allowing for increased security and firewall protection.
  • Page 148 Management Interface as soon as the Management Interface is enabled on the VidyoPortal. To move your VidyoGateway Admin Page to the Management Interface: Log in to your VidyoGateway using your system console account. For more information, see...
  • Page 149: Configuring Ocsp

    5. Configuring Your System Select MANAGEMENT from the Interface drop-down. Optionally, you can also change the Port to which your VidyoGateway is bound. In the preceding screenshot, the VidyoGateway is bound to port 443. Click Save and Apply. Note After clicking Save and Apply, your changes are applied immediately; therefore, if your...
  • Page 150 Override Responder drop-down and enter the IP or FQDN address of the new responder in Default Responder. Click Save. For VidyoRouter and VidyoGateway, this will immediately require OCSP certificate verification for the vr2conf, vp2conf, and VidyoGateway Admin pages. Note The server must have access to the OCSP Responders specified in the certificates or the overridden Responder.
  • Page 151: Disabling Ocsp From The System Console

    5. Configuring Your System Disabling OCSP from the System Console Only when at least one application (VidyoGateway, VidyoPortal, or VidyoRouter) is enabled for OCSP are you then able to globally disable OCSP from the System Console. Otherwise, the menu option only shows 3. OCSP Information allowing you to view configuration data.
  • Page 152: Upgrading Your Vidyogateway

    OCSP can be disabled using the System Console option O if it was not set up correctly. Upgrading Your VidyoGateway Upgrade When you receive a software update from Vidyo, you install it using the tab. Note Once the VidyoGateway is upgraded, a downgrade is not possible.
  • Page 153: Shutting Down Or Rebooting Your Vidyogateway

    Shutting Down or Rebooting Your VidyoGateway Shutdown / You can either shutdown or reboot your VidyoGateway server manually using the Reboot tab. Shutting Down Your VidyoGateway Server To shut down your VidyoGateway server: Log in to the Admin portal using your System Console account.
  • Page 154 VidyoGateway server up again. Shutting down certainly drops all of the active conference calls on your VidyoGateway server as well.
  • Page 155: Logging Out Of Your Vidyogateway

    5. Configuring Your System Logging Out of Your VidyoGateway Logout You can manually log out of your VidyoGateway server using the tab. To log out of your VidyoGateway server: Log in to the Admin portal using your System Console account.
  • Page 156: Auditing

    6. Auditing Your VidyoGateway can capture audit log information showing specific user activity on your server. The audit log information is downloaded in plain text format in a .tar.gz file. For more information about downloading and viewing logs for debugging analysis and viewing the...
  • Page 157: Understanding Audit Log Content

    Shutdown Sample Audit Log Content This is how an Audit log for the VidyoRouter, VidyoGateway, and VidyoManager in .txt format looks as viewed in a text editor after being decompressed. From left to right the data logged are: Timestamp, User ID, IP Address, and Description.
  • Page 158: Integrating Voip Phones And Ip Pbxs

    The VidyoGateway supports G.711 and G.722 (narrowband and wideband) audio codecs commonly used by VoIP systems, and the SPEEX codec used on the Vidyo side. The VidyoGateway supports H.323 and SIP signaling as well as Vidyo’s signaling format, which is based on SIP but enhanced to enable additional capabilities.
  • Page 159: Network Topology

    7. Integrating VoIP Phones and IP PBXs Network Topology The diagram below illustrates a typical network topology for VoIP integration with VidyoConferencing. Elements include VidyoPortal, VidyoRouter, VidyoGateway, an IP PBX, analog POTS phones, VoIP soft phones, dedicated IP phones, VidyoDesktop, and VidyoRoom endpoints. DMZ IP Space...
  • Page 160: Connecting To Vidyoconferences Via An Ip Pbx

    IP PBX prepends the VidyoGateway voice-only prefix.  Connecting to an IP PBX with an Extension Dial: A second method is to treat each Vidyo user as another extension—similar to a desk phone extension. You do this by assigning a block of extensions to the VidyoGateway trunk.
  • Page 161: Integrating Direct Phone Calls With Ivr Functionality

    The following diagrams provide examples of each setup using when using the IVR functionality with a VoIP provider.  This first setup shows a configuration to your VidyoGateway using SIP invites coming directly from your VoIP provider. Vidyo Conference IVR ANSWERS...
  • Page 162: Using Vidyogateway Virtual Edition (Ve)

    9. Using VidyoGateway Virtual Edition (VE) The VidyoGateway Virtual Edition (VE) allows you to enjoy the benefits of the VidyoGateway within a virtual environment. The advantages of using virtual appliances include:  All the features and functionality of the physical appliance.
  • Page 163: Virtual Machine Provisioning Requirements

      The overall CPU utilization should not exceed that of a typical production server, e.g., 70% utilization; add CPU resources or move one or more VidyoGateway VE machines if host CPU utilization exceeds the recommended threshold  Leave at least 1 vCPU with 2 GHz and 2 GB of RAM idle for the Hypervisor Virtual Machine Provisioning Requirements VidyoGateway version 3.2 or later is available as a single Virtual Edition that dynamically enforces...
  • Page 164: Example Configurations

    Lab or Demonstration Configuration: One Dell® R220, Intel® Xeon® E3-1286 v3 3.7 GHz 4Core, 16 GB RAM.  1 VidyoPortal (1,000 user) + 1 VidyoRouter (25 port) + 1 VidyoGateway (1 HD, 2 SD, 10  voice). Small Business Configuration: 2 Dell R220, Intel Xeon E3-1286 v3 3.7 GHz 4-Core, 16 GB RAM each with the following...
  • Page 165: Installing Vidyogateway Ve

    9. Using VidyoGateway Virtual Edition (VE) While your VidyoGateway VE appliance is powered off, it may be moved (cold migration) or  copied (cloned) from one host (or storage location) to another. You can resize your virtual machine and add vCPUs and vRAM; however, vNIC and ...
  • Page 166 9. Using VidyoGateway Virtual Edition (VE) From the File menu, select Deploy OVF Template. Source dialog box opens:...
  • Page 167 9. Using VidyoGateway Virtual Edition (VE) Click Browse and select the OVA file from your file system. Click Next. OVF Template Details The dialog box changes to This screen is read-only. If you need to change anything, click Back.
  • Page 168 9. Using VidyoGateway Virtual Edition (VE) Click Next. Name and Location The dialog box changes to The name displayed is a copy of the .ova filename as the vSphere default. Type in a more descriptive name if desired.
  • Page 169 9. Using VidyoGateway Virtual Edition (VE) Click Next. Disk Format The dialog box changes to Be sure to select Thin Provision. Click Next. Network Mapping The dialog box changes to Select the one network available for the VidyoGateway VE to use. Click Next.
  • Page 170 9. Using VidyoGateway Virtual Edition (VE) Ready to Complete The dialog box changes to Select the Power on after deployment checkbox to start your VidyoGateway immediately after you take the next step. Click Finish. Deploying VidyoGatewayVE dialog box displays. The Deployment Completed Successfully dialog box displays.
  • Page 171 9. Using VidyoGateway Virtual Edition (VE) Click Close. vSphere Client window displays. Click the + sign to the left of the ESXi host name. VidyoGateway VE Click in the left-side pane. The tabs change.
  • Page 172 If you haven’t changed your password yet, use the default password we have provided for you. You can now configure your VidyoGateway VE network settings as described in Configuring Network Settings at the System Console and in the “Adding VidyoGateways”...
  • Page 173: Appendix A. Definitions

    Controller. In addition to handling calls itself, the Controller also controls a number of Standby VidyoGateways.  Controller – A VidyoGateway that, in addition to handling calls, allocates capacity for a number of Standby VidyoGateways.  Firewall – A system designed to prevent unauthorized access to or from a private network.
  • Page 174 (Traditional broadcast television SD has a different format. The definition given here is the one referred to in this document.) Starting with version 2.2, VidyoGateway provides a better SD experience by supporting an adaptive aspect ratio for SD calls. With this feature, the aspect ratio automatically changes as needed when you are in an SD call.
  • Page 175: Appendix B. Legacy Tcs4 Delimiters

    The Tandberg MXP platform doesn’t support TCS4 delimiters when dialing over IP. To dial from a Tandberg MXP into a VidyoConference, dial the VidyoGateway service prefix followed by the Vidyo user’s extension then @ and the IP address of the VidyoGateway as shown in the Tandberg MXP Dialing String entry shown previously.
  • Page 176: Appendix C. Deployment Examples

    Deployment Example 2: Legacy MCU calling into a VidyoConferencing room OR a VidyoConferencing room is calling into an MCU-hosted conference. Note There is a single stream between the MCU and VidyoGateway. Calls made “From Legacy” MCU to Vidyo Vidyo Conference MCU dial: 192.168.1.110!037001...
  • Page 177 Appendix C. Deployment Examples Deployment Example 3: Multiple Legacy users calling into an MCU-hosted VidyoConference. Note the three separate video streams between the VidyoGateway and VidyoRouter. This deployment (where the call is hosted on the VidyoRouter rather than on the MCU) is the recommended deployment.
  • Page 178 Appendix C. Deployment Examples Deployment Example 5: Integrating Vidyo with VoIP/mobile devices/landlines in a deployment that includes an IP PBX. A Route Pattern is created in Number Dialed: Vidyo Conference the IP PBX and it route calls through a configured SIP Trunk.
  • Page 179: Appendix D. Nat/Firewall Traversal

    Appendix D. NAT/Firewall Traversal There are two possibilities in which a call must traverse a firewall: when the VidyoGateway is behind a NAT/firewall and when the Legacy device is behind a firewall.  When the VidyoGateway resides on the public network with a native public IP address and when the Legacy device is behind a NAT/firewall, the Legacy device must open the required H.323 or SIP ports (whichever are being used).
  • Page 180 Appendix D. NAT/Firewall Traversal The VidyoGateway sends a connect message to the Legacy device. Capabilities are exchanged between both devices. Video and audio is negotiated and sent between the two systems. The following diagram illustrates an H.323 firewall configured with a STATIC NAT.
  • Page 181 50 calls, plan so that the Min Port is at least 1,000 less than the Max Port. The following diagram illustrates the call flow of Legacy and Vidyo desktop users when a VidyoGateway and VidyoPortal/VidyoRouter are deployed in a DMZ environment. Internet Private 200.100.50.25/24...
  • Page 182 Min Port is at least 2,500 less than the Max Port. For information on specifying ports in the VidyoGateway, see “Configuring HTTPS Port Settings for Your VidyoGateway Admin Pages” on page 126. The following diagram illustrates the port requirements between VidyoGateway cluster nodes.
  • Page 183 Port(s) Type Description Direction 1719 H.323 gatekeeper registration 1720 H.323 call setup 5060 SIP call signaling for the VidyoGateway nodes 17190 H.323 call signaling for the active controller 17200 H.323 call signaling for the active controller 49999 VidyoGateway inter-cluster secure...
  • Page 184: Appendix E. Reliability

    STRICTLY "AS IS", WITHOUT WARRANTY, AND VIDYO EXPRESSLY DISCLAIMS ANY IMPLIED WARRANTIES OF MERCHANTABILITY, TITLE OR FITNESS FOR A PARTICULAR PURPOSE REGARDING SAID INFORMATION OR DATA, EVEN IN THE EVENT VIDYO HAS KNOWLEDGE OF DEFICIENCIES IN SAID INFORMATION OR DATA. VIDYO DOES NOT ENSURE OR GUARANTEE...
  • Page 185: Electronic Equipment Procedure

     Supplier data is provided as is to VIDYO, and VIDYO generally does not verify the accuracy of Supplier data. Subsystem MTBF Data Release Policy VIDYO does not release MTBF data below the system level.
  • Page 186 Appendix E. Reliability Product Part Number MTBF HD-230 DEV-RM-HD230-NTPM-SA-0A & DEV-RM- 80,520 hours HD230-SA-0A VidyoGateway DEV-SRV-GW-N2-0B 29,900 hours VidyoGateway XL DEV-SRV-GW-XL-N3-0A 121,400 hours VidyoH20 for DEV-SRV-H20-XL-N3-0A 121,400 hours Google+ Hangouts VidyoOne DEV-SRV-ONE-N2-0B 29,900 hours VidyoPanorama 600 DEV-SRV-PAN600-N2-0A 109,186 hours VidyoPortal...

Table of Contents