Enforced Dial Plans - TANDBERG Gatekeeper User Manual

Configuring LDAP base DN
The Gatekeeper needs to be configured with the area of the directory which will be searched for the
communication device information. This should be specified as the Distinguished Name (DN) in the
directory under which the H.350 objects reside. To do this, either issue the following command:
xConfiguration Authentication LDAP BaseDN: "Your base DN"
or navigate to Gatekeeper Configuration
LDAP base DN field.
Configuring LDAP server access
The Gatekeeper must also be configured with the location of the LDAP server and the security
credentials required to gain access to the LDAP server.
To configure the LDAP server access, either issue the following commands:
xConfiguration LDAP Server Address: "ldap server address"
xConfiguration LDAP Server Port: 389
xConfiguration LDAP UserDN: "Your user DN"
xConfiguration LDAP Password: "password"
or navigate to Gatekeeper Configuration
Viewing LDAP server connection status
To view the status of the connection between the Gatekeeper and the LDAP server, either issue the
following command:
xstatus LDAP
or navigate to Gatekeeper Configuration
the right-hand side of the screen.
8.2.3.

Enforced dial plans

If LDAP authentication is in use, you may control what aliases an endpoint is allowed to register with.
This allows you centralized control of your dial plan.
When an endpoint registers, it presents a list of aliases it wishes to use. You can control whether these
aliases are used, replaced by those in the H.350 directory, or combined with those in the directory.
To set which aliases are used, either issue the following command:
xConfiguration Authentication LDAP AliasOrigin: <LDAP/Endpoint/Combined>
or navigate to Gatekeeper Configuration
alias origin drop-down menu.
The settings are as follows:
The LDAP aliases will be used and those presented by the endpoint ignored.
LDAP
(default setting) If no aliases are present in the LDAP database for the endpoint which is
registering, then the endpoint's aliases will be used.
The endpoint's aliases will be used, and any in the LDAP database will be
Endpoint
ignored.
The endpoint will be registered with both the aliases which it has presented and
Combined
those configured in the LDAP database.
> Authentication and enter the name of the directory in the
> Authentication and complete the relevant fields.
> Authentication. The server status will be shown in a panel on
> Authentication and select the desired option from the
TANDBERG Gatekeeper User Guide
Page 39 of 105
LDAP