3Com BETA Getting Started Manual
3Com BETA Getting Started Manual

3Com BETA Getting Started Manual

Vcx ip telecommuting module

Advertisement

Quick Links

3Com VCX IP Telecommuting
Module
Getting started Guide

Advertisement

Table of Contents
loading

Summary of Contents for 3Com BETA

  • Page 1 3Com VCX IP Telecommuting Module Getting started Guide...
  • Page 3 3Com Corporation. 3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
  • Page 5: Table Of Contents

    Table of Contents Part I. Installation of the 3Com VCX IP Telecommuting Module ........i 1. Introduction........................ 1 2. Overview of the Installation..................3 3. Installing 3Com VCX IP Telecommuting Module ............ 5 Part II. Configuring 3Com VCX IP Telecommuting Module ........15 4.
  • Page 7: Part I. Installation Of The 3Com Vcx Ip Telecommuting Module

    Part I. Installation of the 3Com VCX IP Telecommuting Module This document will help you to get started with your 3Com VCX IP Telecommuting Module. It contains the necessary information to configure your Telecommuting Module. Additional information about managing your 3Com VCX IP Telecommuting Module can be found in the Reference Guide.
  • Page 9: Introduction

    firewall, transmitting only SIP-based communications. Configuration alternatives The 3Com VCX IP Telecommuting Module can be connected to your network in three different ways, depending on your needs. Note that if the Standalone type is used, the interface which should receive traffic from the outside must have a public IP address (no NAT).
  • Page 10 Chapter 1. Introduction Fig 1. Telecommuting Module in DMZ configuration. DMZ/LAN Configuration Using this configuration, the Telecommuting Module is located on the DMZ of your firewall, and connected to it with one of the interfaces. The other interfaces are connected to your internal networks.
  • Page 11: Overview Of The Installation

    Chapter 2. Overview of the Installation Now you can see the main page of 3Com VCX IP Telecommuting Module. Click on the • Telecommuting Module Type link and select the configuration for your Telecommuting Module. The types are described on the corresponding help page.
  • Page 12 According to 3b) of the license, we are entitled to charge for the distribution of the source code. 3Com Corporation offer the source code for all third party software included in 3Com VCX IP Telecommuting Module and licensed under GPL. This offer is valid for this version of 3Com VCX IP Telecommuting Module and is valid for three years after deliverance of your 3Com VCX IP Telecommuting Module unit.
  • Page 13: Installing 3Com Vcx Ip Telecommuting Module

    Telecommuting Module Installation There are three ways to install an 3Com VCX IP Telecommuting Module: using a serial cable, using a diskette or perform a magic ping. Installation with a serial cable or a diskette requires being at the same place as the Telecom- muting Module, but will give more options for the start configuration.
  • Page 14 Enter the IP address of the Telecommuting Module on this interface and the network mask for the network. A network mask can be written in two ways in 3Com VCX IP Telecommuting Module: The first looks just like an IP address, for example 255.255.192.0 or 255.255.254.0.
  • Page 15 6. Set password 7. Command line interface a. About q. Exit admin ==> Select 1 to install your 3Com VCX IP Telecommuting Module. Basic unit installation program version 4.6.5 Press return to keep the default value Network configuration inside: Physical device name[eth0]: IP address [0.0.0.0]: 10.47.2.242...
  • Page 16 Chapter 3. Installing 3Com VCX IP Telecommuting Module If you choose to allow only one computer to configure the Telecommuting Module, you are asked for the IP address (the mask is set automatically). IP address [0.0.0.0]: 10.47.2.240 If this IP address is not on the same network as the IP address of the Telecommuting Mod- ule, you are asked for the router.
  • Page 17 Chapter 3. Installing 3Com VCX IP Telecommuting Module Password []: Finally, you are asked if you want to reset other configuration. Other configuration Do you want to reset the rest of the configuration? (y/n) [n] If you answer n, nothing is removed. If you answer y, you have three alternatives to select from: 1.
  • Page 18 Enter the IP address of the Telecommuting Module on this interface and the network mask for the network. A network mask can be written in two ways in 3Com VCX IP Telecommuting Module: The first looks just like an IP address, for example 255.255.192.0 or 255.255.254.0.
  • Page 19 Chapter 3. Installing 3Com VCX IP Telecommuting Module Basic unit installation program version 4.6.5 Press return to keep the default value Network configuration inside: Physical device name[eth0]: IP address [0.0.0.0]: 10.47.2.242 Netmask/bits [255.255.255.0]: 255.255.0.0 Deactivate other interfaces? (y/n) [n] Computers from which configuration is allowed: You can select either a single computer or a network.
  • Page 20 Chapter 3. Installing 3Com VCX IP Telecommuting Module If the network or partial network is not directly connected to the Telecommuting Module, you must enter the IP address of the router leading to that network. Then enter the network’s address and mask.
  • Page 21 You do this on the Save/Load Configuration page under Administration. Once this is done, just turn the computer off. The computer that runs 3Com VCX IP Telecommuting Module is specially designed so that you can switch it off without causing any problems in the file structure.
  • Page 22 Chapter 3. Installing 3Com VCX IP Telecommuting Module...
  • Page 23: Part Ii. Configuring 3Com Vcx Ip Telecommuting Module

    Part II. Configuring 3Com VCX IP Telecommuting Module These chapters contain information about how to configure your 3Com VCX IP Telecom- muting Module, once it has been installed. All configuration is made through the web inter- face of the Telecommuting Module.
  • Page 25: Network Configuration

    Chapter 4. Network Configuration First, the Telecommuting Module must be configured to be aware of the network in which it operates. This is performed on the Network Configuration pages. The important pages for getting started are Telecommuting Module Type, Interface (Network Interface 1 and 2), Default Gateway, Networks and Computers and (for the DMZ Telecommuting Module Type) Surroundings.
  • Page 26 Chapter 4. Network Configuration DMZ/LAN Configuration Using this configuration, the Telecommuting Module is located on the DMZ of your firewall, and connected to it with one of the interfaces. The other interfaces are connected to your internal networks. The Telecommuting Module can handle several networks on the internal interface even if they are hidden behind routers.
  • Page 27 Chapter 4. Network Configuration The Telecommuting Module derives information about your network topology from the in- terface configuration. Telecommuting Module Type configuration Current Telecommuting Module Type Shows which type is currently active. Change Telecommuting Module Type to Select a new Telecommuting Module Type here. Change type Press the Change type button to set the new Telecommuting Module Type.
  • Page 28 Chapter 4. Network Configuration Physical device Physical device tells the physical device name of the network interface. Status Specify if this network interface is On or Off. If the interface is off, all configuration on this page is ignored, and the Telecommuting Module will behave as if this interface wasn’t present.
  • Page 29 Chapter 4. Network Configuration Name A name for this IP address. You can use this name when configuring VPN. This name is only used internally in the Telecommuting Module. DNS Name Or IP Address The name/IP address of the Telecommuting Module on this network interface on this directly connected network.
  • Page 30 Chapter 4. Network Configuration Alias 3Com VCX IP Telecommuting Module can use extra IP addresses, aliases, on its interfaces. All alias IP addresses must belong to one of the Directly Connected Networks you have specified. Aliases are necessary for setting up a STUN server.
  • Page 31 Chapter 4. Network Configuration Delete Row If you select this box, the row is deleted when you click on Create new rows, Save, or Look up all IP addresses again. Create Enter the number of new rows you want to add to the table, and then click on Create. Static Routing If there is a router between the Telecommuting Module and a computer network which the Telecommuting Module is serving, you must name the router and the network here.
  • Page 32 Chapter 4. Network Configuration Create Enter the number of new rows you want to add to the table, and then click on Create. Save Saves all Interface configuration to the preliminary configuration. Cancel Clears and resets all fields in new rows and resets changes in old rows. Look up all IP addresses again Looks up the IP addresses for all DNS names on this page in the DNS servers you entered on the Basic Configuration page.
  • Page 33 Chapter 4. Network Configuration Dynamic If an interface will receive its IP address from a DHCP server, the Telecommuting Module will get its default gateway from the server. In this case, select the corresponding IP address here. DNS Name Or IP Address Enter the DNS name or IP address for the default gateway.
  • Page 34 Chapter 4. Network Configuration DNS Name Or IP Address Enter the DNS name or IP address for the reference host. The reference host must be located on the other side of the default gateway. IP address Shows the IP address of the DNS Name Or IP Address you entered in the previous field. Delete Row If you select this box, the row is deleted when you click on Create new rows, Save, or Look up all IP addresses again.
  • Page 35 Chapter 4. Network Configuration Name Enter a name for the group of computers. You can use this name when you change config- uration on the pages mentioned above. A group can consist of several rows of IP addresses or series of IP addresses. By clicking on the plus sign beside the name, you add more rows where you can specify more IP addresses for this group.
  • Page 36 Chapter 4. Network Configuration Upper Limit DNS Name Or IP Address Here, enter the last DNS name/IP address of the network or group. For computers in an IP range that you want to give a network name, enter the last IP address in the seriesrange. The IP address in Upper Limit must be at least as high as the one in Lower Limit.
  • Page 37 Chapter 4. Network Configuration Surroundings State the topology around the Telecommuting Module on this page. Which type of topology is needed depends on which Telecommuting Module Type was selected. Surroundings Settings in the Surroundings table are only required when the Telecommuting Module has been made the DMZ (or LAN) type.
  • Page 38 Chapter 4. Network Configuration Delete Row If you select this box, the row is deleted when you click on Create new rows or Save. Create Enter the number of new rows you want to add to the table, and then click on Create. Data Interfaces Settings in the Data Interfaces table are only required when the Telecommuting Module has been made the WAN type.
  • Page 39 General Name of this Telecommuting Module Here, you can give your 3Com VCX IP Telecommuting Module a name. The name of the Telecommuting Module is displayed in the title bar of your web browser. This can be a good idea if you administer several Telecommuting Modules. The name is also used if you use SNMP and when you export log files into the WELF format.
  • Page 40 Chapter 4. Network Configuration Ping is a way of finding out whether a computer is working. See appendix C of the User Manual for further information on ping. DNS Servers Here, you configure DNS servers for the Telecommuting Module. The servers are used in the order they appear in this table, which means that the Telecommuting Module uses the top server to resolve DNS records until it doesn’t reply.
  • Page 41 Chapter 4. Network Configuration Save Saves the Basic Configuration configuration to the preliminary configuration. Cancel Reverts all the above fields to their previous configuration. Look up all IP addresses again Looks up the IP addresses for all DNS names on this page in the DNS servers you entered above.
  • Page 42 Chapter 4. Network Configuration...
  • Page 43: Sip Configuration

    Chapter 5. SIP Configuration SIP (Session Initiation Protocol) is a protocol for creating and terminating various media stream sessions over an IP network. It is for example used for Internet telephone calls and distribution of video streams. SIP takes care of the initiation, modification and termination of a session with one or more participants.
  • Page 44 Chapter 5. SIP Configuration Transport Select which SIP signaling transports should be allowed on this port. Comment Enter a comment to remind yourself why you added the port. Delete Row If you select this box, the row is deleted when you click on Create new rows or Save. Create Enter the number of new rows you want to add to the table, and then click on Create.
  • Page 45 Chapter 5. SIP Configuration Public IP address for NATed Telecommuting Module Sometimes, the Telecommuting Module is located behind a NAT box that is not SIP-aware. This will make signaling go awry, with the result that in many cases there will be voice in only one direction.
  • Page 46 Chapter 5. SIP Configuration Transport Select the transport to be monitored on that host. This should be the transport to use for SIP signaling. Delete Row If you select this box, the row is deleted when you click on Create new rows or Save. Create Enter the number of new rows you want to add to the table, and then click on Create.
  • Page 47 Chapter 5. SIP Configuration Log class for SIP errors The Telecommuting Module sends a message if there are any SIP errors. Select a log class for these log messages. Log class for SIP media messages The Telecommuting Module creates log messages about when media streams are set up and torn down.
  • Page 48 Chapter 5. SIP Configuration Domain Enter the domain name of the SIP domain. This domain is compared to the domain in the Request-URI of the incoming SIP packet. You can’t enter a domain that was entered in the Local SIP Domains table. Relay To DNS Name Or IP Address Enter the IP address for the SIP server handling the domain.
  • Page 49 Chapter 5. SIP Configuration Delete Row If you select this box, the row is deleted when you click on Create new rows, Save, or Look up all IP addresses again. Create Enter the number of new groups and rows you want to add to the table, and then click on Create.
  • Page 50 Chapter 5. SIP Configuration Delete Row If you select this box, the row is deleted when you click on Create new rows or Save. Create Enter the number of new rows you want to add to the table, and then click on Create. Default Policy For SIP Requests Select what to do with SIP requests that do not match any of the Proxy Rules.
  • Page 51 Chapter 5. SIP Configuration Allow Select if the Telecommuting Module should allow (On) or reject (Off) this content type in SIP signaling. Delete Row If you select this box, the row is deleted when you click on Create new rows or Save. Create Enter the number of new rows you want to add to the table, and then click on Create.
  • Page 52 Chapter 5. SIP Configuration When you select this, the Telecommuting Module makes no checks of incoming SIP URIs. It becomes possible in theory to trick the Telecommuting Module to send SIP packets any- where, so security is drastically reduced. Keep username in URIs will make the Telecommuting Module keep the original username pare of the Contact URI, and only replace the domain part.
  • Page 53 Chapter 5. SIP Configuration You also specify which IP address the Telecommuting Module will use when it forwards this SIP signaling to the server on the LAN. In this way, the trunk signaling and remote client signaling will be separated for the PBX. IP Address for Remote Clients Select which IP address remote clients connect to.
  • Page 54 Chapter 5. SIP Configuration Media Route Usually, media is always sent via the Telecommuting Module when the Remote NAT Traver- sal feature is used. For clients behind the same NAT, media can be made to go directly between the clients, to lower the Telecommuting Module and network load.
  • Page 55: Administration Of The Telecommuting Module

    Chapter 6. Administration of the Telecommuting Module You also need to configure who can access the Telecommuting Module web interface. This is done on the Access Control page under Basic Configuration. Remember that the configuration you see in the web interface (preliminary configuration) isn’t necessarily the work configuration (permanent configuration) of the Telecommuting Module.
  • Page 56 Chapter 6. Administration of the Telecommuting Module User Authentication For Web Interface Access Select the mode of administrator authentication for logins via the web interface: Local users, via a RADIUS database, or a choice between the two alternatives at login (Local users or RADIUS database).
  • Page 57 Chapter 6. Administration of the Telecommuting Module Configuration via HTTP Select which IP address and port the Telecommuting Module administrator should direct her web browser to when HTTP is used for Telecommuting Module configuration. You can select from the Telecommuting Module IP addresses configured on the Interface pages under Network Configuration.
  • Page 58 Chapter 6. Administration of the Telecommuting Module The No. field determines the order of the lines. The order is important in deciding what is logged and warned for. The Telecommuting Module uses the first line that matches the configuration traffic. Perhaps you want to configure the Telecommuting Module so that configuration traffic from one specific computer is simply logged while traffic from the rest of that computer’s network is both logged and generates alarms.
  • Page 59 Chapter 6. Administration of the Telecommuting Module Check the check box if this computer/network should be allowed to configure the Telecom- muting Module via SSH. HTTP Check the check box if this computer/network should be allowed to configure the Telecom- muting Module via HTTP.
  • Page 60 Chapter 6. Administration of the Telecommuting Module Cancel Reverts all the above fields to their previous configuration. Look up all IP addresses again Looks up the IP addresses for all DNS names on this page in the DNS servers you entered on the Basic Configuration page.
  • Page 61 Chapter 6. Administration of the Telecommuting Module Save configuration saves your preliminary configuration to the permanent configuration and puts it into use. Continue testing shows a new page with only the other two buttons. Revert cancels this test of the preliminary configuration without saving. If you do not press any button within the time limit, the Telecommuting Module will revert to the old permanent configuration, just as if you had pressed Revert.
  • Page 62 Chapter 6. Administration of the Telecommuting Module Load from diskette Insert the diskette with the saved configuration into the Telecommuting Module’s floppy drive and press Load from diskette. Do not remove the diskette until the light on the floppy drive goes out. The contents of the diskette are now loaded in the preliminary configuration. Save to local file Press Save to local file to save the preliminary configuration to the file you have selected.
  • Page 63 Chapter 6. Administration of the Telecommuting Module Revert to Old Configurations You can revert to old configurations of the Telecommuting Module, either back to the last configuration successfully applied, or to the configuration delivered with your Telecommut- ing Module from the factory. Abort All Edits Abort all edits copies the permanent configuration to the preliminary configuration.
  • Page 64 Chapter 6. Administration of the Telecommuting Module...
  • Page 65: Firewall And Client Configuration

    Chapter 7. Firewall and Client Configuration Additional configuration for the firewall and the SIP clients is required to make the Telecom- muting Module work properly. The amount and nature of the configuration depends on which Telecommuting Module Type was selected. The DMZ type Using the DMZ type, the network configuration should look like this: The Firewall...
  • Page 66 Chapter 7. Firewall and Client Configuration Let through TCP traffic between the Internet (all high ports) and the Telecommuting Mod- • ule (ports 1024-32767). You must allow traffic in both directions. Let through TCP traffic between the internal networks (all high ports) and the Telecom- •...
  • Page 67 Chapter 7. Firewall and Client Configuration The Firewall The firewall to which the Telecommuting Module is connected should have the following configuration: SIP over UDP Let through UDP traffic between the Internet (all high ports) and the Telecommuting • Module (port 5060). You must allow traffic in both directions. Let through UDP traffic between the Internet (all high ports) and the Telecommuting •...
  • Page 68 Chapter 7. Firewall and Client Configuration The SIP clients SIP clients will use the Telecommuting Module as their outgoing SIP proxy and as their registrar (if they can’t be configured with the domain only). If you don’t want to use the Telecommuting Module as the registrar, you should point the clients to the SIP registrar you want to use.
  • Page 69: Index

    DMZ/LAN, 18 factory configuration, 54 standalone, 18 gateway, 24 test mode, 52 HTTPS for configuration, 49 turn off the 3Com VCX IP Telecommuting Module, 13 installing 3Com VCX IP Telecommuting VPN peer, 50 Module, 5 interface, 19 interface name, 20...

Table of Contents