Page 1 Video Communication Server ADMINISTRATOR GUIDE Software version X5.1 March 2010 Overview and System Zones and Clustering and Call Bandwidth Firewall Introduction Applications Maintenance Appendices status configuration configuration neighbors peers processing control traversal D14049.07 March 2010...
Page 2: Table Of Contents
Grey Headline (continued) What’s in this manual? Introduction The TANDBERG VCS ... 8 Overview ... 8 VCS and the TANDBERG Total Solution... 8 VCS base applications ... 9 VCS Control ... 9 VCS Expressway™ ... 9 Standard features ... 10 Optional features ...
Page 3 Using the Allow and Deny Lists ... 60 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Zones and neighbors Introduction ... 62 Local Zone and subzones ... 63 Configuring the Local Zone and its subzones ... 63 Bandwidth management ... 63 Local Zone searches ...
Page 4 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Configuring Call Policy using a CPL script ... 102 Viewing existing CPL script ... 102 About CPL XSD files ... 102 Uploading a CPL script ... 102 Deleting an existing CPL script ... 102 Routing calls via the Advanced Media Gateway ...
Page 5 Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Configuring the VCS as a traversal client ... 135 Configuring the VCS as a traversal server ... 136 Adding and configuring a traversal server zone ... 136 Configuring traversal for endpoints ... 136 Configuring traversal server ports ...
Page 6 Caller ID ...147 Device creation message ...147 Searching for FindMe accounts ...147 Principal devices ...147 TANDBERG FindMe™ user guide ... 148 About FindMe ... 148 FindMe user accounts ... 148 Individual versus group FindMe ... 148 Accessing the FindMe home page ... 148 Configuring your FindMe user account ...
Page 7 Command reference - xStatus ... 265 Warnings ... 284 Bibliography ... 287 Glossary... 289 Legal notices ... 295 Contact information ... 296 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 8: Introduction The Tandberg Vcs
Provisioning. The TANDBERG Total Solution TANDBERG delivers the most comprehensive and reliable total solution of video products in the industry - including telepresence and high definition video, a full portfolio of infrastructure products and MCUs, and the best video management TANDBERG delivers the most comprehensive and reliable total platform available.
Page 9: Vcs Base Applications
Grey Headline (continued) The TANDBERG VCS VCS Control The VCS Control provides internal video control and administration for all SIP and H.323 devices. It is normally deployed within your wide area network with endpoints that are behind the same firewalls or NAT devices.
Page 10: Standard Features
Control over which endpoints are allowed to register • Call Policy (also known as Administrator Policy) including support for CPL • Can be managed with TANDBERG Management Suite 12.5 or later • AD authentication for administrators of the VCS •...
Page 11: Optional Features
The Device Provisioning option key allows VCS to provision endpoints with configuration information on request and to supply endpoints with phone book information. (Endpoints including TANDBERG Movi v2.0 or later, and E20 v2.1 or later can request to be provisioned.) All configuration and phone book information is managed in TMS, and distributed to the clients through the TMS Agent running on the VCS.
Page 12: What's New In This Version
The Advanced Media Gateway (AM gateway) provides support for transcoding between standard codecs (such as H.264) and Microsoft RT Video to allow high definition calls between Microsoft Office Communicator (MOC) clients and TANDBERG endpoints. • Advanced Media Gateway zone profile: automatically configures the VCS with the zone settings required for connection to an AM gateway.
Page 13: Far End Camera Control Interworking
Advanced account security option key enables advanced security features and restrictions for high-security installations. Contact your TANDBERG support representative for more information about this feature. CRL checking for TLS connections to LDAP servers Certificate revocation lists (CRLs) can be uploaded and used to verify certificates presented by an LDAP server to the VCS when forming a TLS connection.
Page 14: Using This Guide
Grey Headline (continued) Using this guide This Administrator Guide is provided to help you make the best use of your TANDBERG VCS. Your approach to this documentation depends on what you want to do and how much you already know.
Page 15: Using The Vcs
Installation and initial configuration Full installation and initial configuration instructions for the VCS are contained in the TANDBERG VCS Getting Started Guide Using the web interface To use the web interface: 1. Open a browser window and in the address bar type either: •...
Page 16: Page Features And Layout
This icon appears on the top right corner of every page. Clicking on this icon takes you directly to the latest version of the VCS Administrator Guide on the TANDBERG web site. Information box An information box appears on the configuration pages whenever you either click on the Information icon or click inside a field.
Page 17: Command Line Interface (Cli)
Installation and initial configuration Full installation and initial configuration instructions for the VCS are contained in the TANDBERG VCS Getting Started Guide Using the CLI The command line interface (CLI) is available by default over SSH and through the serial port. Access using Telnet can also be enabled.
Page 18: Overview And Status
These pages provide information on the current status and configuration of the VCS. Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 19: Overview Page
March 2010 Overview page option keys. This section shows all the options that are currently installed on the VCS. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 20: Status
The date on which this version of the software was released. date Software name The internal TANDBERG reference number for this software release. Software options The maximum number of calls, and the availability of additional VCS features such as FindMe™, Device Provisioning and Dual Network Interfaces, are controlled through the use of shows all the optional features currently installed on the VCS.
Page 21: Ip Status
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Resource usage Current: The number of traversal calls going through the VCS at this moment. Max (peak): The highest number of concurrent traversal calls handled by the VCS since it was last restarted.
Page 22: Registrations By Device
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Registrations by alias The H.323 alias, E.164 number, prefix or SIP AOR registered by a device. Shows whether the alias is an H.323 ID, E.164 number, prefix or SIP AOR.
Page 23: Registration History
View previous calls involving this registration Click to go to the Call history page, filtered for this particular registration. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Registration details use an Allow List or Deny activated.) Bandwidth Firewall Applications...
Page 24: Calls
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Call history Call summary The Call summary page (Status > Calls > Calls or Status > Calls > History, then click View for a particular call) provides overview statistics about a call, including information about the most relevant legs.
Page 25: Searches
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Search details The Search details page (Status > Search history, then click View for a particular search) lists full information about either an individual search, or all searches associated with a single call (depending on how you reached the page).
Page 26: Local Zone
Status Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Zones The names of each zone currently configured on this VCS. The type of zone. See the About zones section for a full description of each zone type.
Page 27: Links
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Pipes The name of each pipe. The number of calls currently traversing the pipe. Note that a single call may traverse more than one pipe, depending on how your system is configured.
Page 28: Turn Relays
These pages provide information about endpoints and presentities using the the VCS. Refer to the pages. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Presence Viewing presence status section for a full explanation of the information on these Bandwidth Firewall Applications Maintenance control...
Page 29: Ocs Relay
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Provisioning The state of the provisioning server. A summary of the subscription requests received by the server since the VCS was last restarted. It shows counts of: •...
Page 30: Warnings
Do not attempt to service the apparatus yourself as opening or removing covers may expose you to dangerous voltages or other hazards, and will void the warranty. Refer all servicing to qualified service personnel. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Hardware Bandwidth Firewall Applications Maintenance control traversal...
Page 31: Eventlog
External Server Communications Failure • Application Failed • Request Failed • System Backup Error • System Restore Error • Authorization Failure Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 32 _ name The name of the program generating the log message. This could include: tvcs for all messages originating from TANDBERG VCS processes findme for FindMe account data migration events web for all web login and configuration events tprovisioning for all events associated with the TMS Agent but will differ for messages from other applications running on the VCS.
Page 33 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER In addition to the events described below, a syslog.info event containing the string MARK is logged after each hour of inactivity to provide confirmation that logging is still active.
Page 34 The TMS Agent database has started. Started Overview and System Introduction status configuration configuration D14049.07 March 2010 Event Log Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Level Appendices...
Page 35 FindMe user accounts have been migrated across clusters. The Detail event parameter provides additional details. Hardware Failure There is an issue with the VCS hardware. If the problem persists, contact your TANDBERG support representative. License Limit Reached Licensing limits for a given feature have been reached. The Detail event parameter specifies the facility/limits concerned. Possible values for the detail field are: •...
Page 36 A TURN server relay has been deleted. Overview and System Introduction status configuration configuration D14049.07 March 2010 Event Log Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Level Appendices...
Page 37 The system restore process has completed. Overview and System Introduction status configuration configuration D14049.07 March 2010 Event Log Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Level Appendices...
Page 38 The VCS has detected an issue and raised a warning. The Detail event parameter provides information about the nature of the issue. Overview and System Introduction status configuration configuration D14049.07 March 2010 Event Log Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Level Appendices...
Page 39: Configuration Log
IP address • the date and time that the change was made Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE...
Page 40 VCS (e.g. DNS, NTP and SNMP). Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 41: System Configuration
D14049.07 March 2010 About administration access settings While it is possible to administer the TANDBERG VCS by using a PC connected directly to the unit via a serial cable, you may want to access the system remotely over IP. You can do this using either or both: •...
Page 42: About Ip Protocols
VCS. To enable this feature you must purchase and install the appropriate option key. Contact your TANDBERG representative for information. You should configure the LAN 1 port and restart the VCS before configuring the LAN 2 port.
Page 43: Quality Of Service (Qos)
It must be unique for each peer in a cluster. • It is used to identify the VCS on a remote log server (a default name of "TANDBERG" is used if the Local host name is not specified). Domain name The Domain name is used when attempting to resolve unqualified server addresses (for example "ldap"...
Page 44: Time
Name has also been configured) of the NTP server to be used when synchronizing system time. • The NTP server field defaults to one of four NTP servers provided by TANDBERG, either: 0.ntp.tandberg.com, 1.ntp. tandberg.com, 2.ntp.tandberg.com or 3.ntp.tandberg.com. • The connection status to the NTP server is shown in the Status area.
Page 45: Snmp
March 2010 About external managers An external manager is a remote system, such as the TANDBERG Management Suite (TMS), used to monitor events occurring on the VCS, for example call attempts, connections and disconnections. The use of an external manager is optional.
Page 46: Logging
Log Level • TANDBERG does not usually recommend logging at Level 3 or Level 4 as the Event Log holds a maximum of 2GB of data and logging at these levels on a busy system could cause the Event Log to be recycled too quickly.
Page 47 VCS using Deny Lists. Overview and System Introduction status configuration configuration D14049.07 March 2010 authentication Allow Lists and Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 48: Vcs Configuration
If the mode is set to manual, you must specify the IP address of the VCS with which you wish your endpoint to register, and the endpoint will attempt to register with that VCS only. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER H.323 endpoint registration Bandwidth Firewall Applications Maintenance control...
Page 49: Configuring H.323
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Auto discover The VCS has an Auto discover setting which determines whether it will respond to Gatekeeper Discovery Requests endpoints. The default is On.
Page 50: Sip
Movi v2.0 (or later) clients As for any other SIP endpoint, the VCS acts as a SIP registrar and SIP proxy for TANDBERG Movi™ v2.0 (or later) clients - no other special support or configuration is required on the VCS.
Page 51: Configuring Sip
SIP device interoperability You can configure the following device interoperability settings: Require UDP BFCP mode Controls whether the VCS requires the use of the com.tandberg. udp.bfcp extension for endpoints that support it. Require Duo Video mode Controls whether the VCS requires the use of the com.tandberg.
Page 52: Interworking
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Configuring interworking Pre-search transforms section for information on how to configure pre-search Stripping @domain for dialing to H.323 numbers Bandwidth Firewall...
Page 53: Registration Control
Grey Headline (continued) Registration control Endpoint registration For an endpoint to use the TANDBERG VCS as its H.323 gatekeeper or SIP registrar, the endpoint must first register with the VCS. The VCS can be configured to control which devices are allowed to register with it. Two separate mechanisms are provided: •...
Page 54: Finding A Vcs With Which To Register
VCS only if their Gatekeeper Discovery setting is Manual and they have entered the IP address of the VCS. section for more section for more information. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 55: Device Authentication
When Authentication mode is On, endpoints must authenticate with the VCS before they can register. In order to authenticate successfully, the endpoint must supply the VCS with a username. For TANDBERG endpoints using H.323, the username is the endpoint’s Authentication ID; for TANDBERG endpoints using SIP it is the endpoint’s Authentication username.
Page 56: Device Authentication Using Ldap
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Alias origin This setting determines the aliases with which the endpoint will attempt to register. The options are: LDAP: for SIP registrations the AOR presented by the endpoint is registered providing it is listed in the LDAP database for the endpoint's username.
Page 57: Authentication Using A Local Database
To configure authentication using the CLI: xConfiguration Authentication Password • xConfiguration Authentication UserName • Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Authenticating with external systems traversal client zone. Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE...
Page 58: Registering Aliases
This will add all the aliases used by that endpoint to the Deny List. Zones and Clustering and Call neighbors peers processing TANDBERG List, from the Registration details page (Status > Registrations > by Device and click a Bandwidth Firewall Applications control traversal...
Page 59: Allow And Deny Lists
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Removing existing registrations After an Allow List or Deny List has been activated, it controls all registration requests from that point forward. However, any existing registrations may remain in place, even if the new list would otherwise block them.
Page 60: Using The Allow And Deny Lists
After configuring the Allow or Deny List, you must set the restriction policy (VCS configuration > Registration > Configuration) to either Allow List or Deny List for it to be activated. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Regular expression reference Bandwidth Firewall Applications Maintenance control traversal...
Page 61: Zones And Neighbors
DNS or ENUM dialing • design a dial plan Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 62: Introduction
Grey Headline (continued) Introduction The most basic implementation of a TANDBERG video communications network is a single VCS connected to the internet with one or more endpoints registered to it. However, depending on the size and complexity of your enterprise...
Page 63: Local Zone And Subzones
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Local Zone searches One of the functions of the VCS is to route a call received from a locally registered endpoint or external zone to its appropriate destination. Calls are routed based on the address or alias of the destination endpoint.
Page 64: Traversal Subzone
100. If you add extra traversal calls to your system, you must also ensure that the range of ports available is sufficient. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal...
Page 65: Zones
Neighbor zone To traverse a firewall, the VCS must be connected with a traversal server (for example a TANDBERG VCS Expressway or a TANDBERG Border Controller). In this situation your local VCS is a traversal client, so you create a connection with the traversal server by creating a traversal client zone on your local VCS.
Page 66: Enum Zone
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Default Zone Any incoming calls from endpoints or other devices that are not recognized as belonging to any of the existing configured zones are deemed to be coming from the Default Zone.
Page 67: Zone Configuration
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER SIP authentication trust If a VCS is configured to use device authentication authenticate incoming SIP registration and INVITE requests. If the VCS then forwards the request on to a neighbor zone such as another VCS, that receiving system will also authenticate the request.
Page 68: Configuring Zones
Neighboring the local VCS to another VCS cluster more information. Advanced See the Zone configuration: advanced settings on the Advanced settings. Do not use the Custom option or configure the individual Advanced settings except on the advice of TANDBERG customer support. Bandwidth Firewall Applications Maintenance control...
Page 69: Configuring Traversal Client Zones
If the traversal server is a VCS Expressway cluster, this should include all of its peers. See Neighboring the local VCS to another VCS cluster section for more information. If the traversal server is a TANDBERG Border Controller, this should include all its Alternates. requests). Bandwidth Firewall...
Page 70: Configuring Traversal Server Zones
If the traversal client is a VCS, this must be its Authentication Username. • If the traversal client is a TANDBERG Gatekeeper, this is its System Name. There must also be an entry in the VCS Expressway's local authentication database for the client’s authentication username and...
Page 71: Configuring Enum Zones
This setting only applies if the DNS lookup specifies TLS as required protocol. If TLS is not required then the setting is ignored. TLS certificate verification of neighbor systems Advanced See the Zone configuration: advanced settings Do not configure the individual Advanced settings except on the advice of TANDBERG customer support. Zones and Clustering and Call neighbors...
Page 72: Zone Configuration: Advanced Settings
Zones The table below describes the Advanced and Custom zone configuration options. Some of these settings only apply to specific zone types. You should only use the Custom zone profile settings on the advice of TANDBERG customer support. Setting Description Zone profile Determines the configuration of the Advanced settings for this zone.
Page 73 D14049.07 March 2010 Zone configuration: advanced settings Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Default Applicable to Neighbor zones Traversal client zones Traversal server zones DNS zones Auto Neighbor zones Neighbor zones DNS zones...
Page 74 D14049.07 March 2010 Zone configuration: advanced settings Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Default Applicable to Neighbor zones DNS zones Neighbor zones DNS zones Neighbor zones DNS zones None Neighbor zones...
Page 75: Zone Configuration: Pre-Configured Profile Settings
Cisco Unified Communications Server 2007 Manager Options <blank> Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Nortel Communication Server TANDBERG Advanced Media 1000 Gateway Options Options "com.nortelnetworks.firewall" <blank> Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE...
Page 76: Dial Plans
Source is Any (because in SIP the search and call setup is combined into one message). Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Clustering for increased resilience. call routing is enabled you must ensure that all search rules are Bandwidth Firewall...
Page 77: Clustering And Peers
VCS or cluster to a remote VCS cluster Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 78: Clustering Overview
System Introduction status configuration configuration D14049.07 March 2010 About clustering Zones and Clustering and Call neighbors peers processing TANDBERG VCS Cluster North Peer 1 Peer 2 Peer 3 Peer 4 Peer 5 Cluster Subzone Subzone Traversal Subzone Default Subzone LOCAL...
Page 79: Cluster Configuration
Clustering and Call neighbors peers processing TANDBERG Cluster name The Cluster name is used to identify one cluster of VCSs from another. Set it to the fully qualified domain name used in SRV records that address this VCS cluster, for example "cluster1.example.com".
Page 80: Which Configuration Is Not Replicated
3 minutes. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Troubleshooting cluster replication problems Unable to reach the cluster configuration master peer The VCS operating as the master peer could be unreachable for many reasons, including: •...
Page 81: Managing Clusters And Peers
The SIP standard currently has no direct were registered with a single VCS. equivalent, but some SIP UAs including TANDBERG Movi™ v2.0 (or later) clients support Peers are periodically queried to ensure similar functionality. If you configure such they are still functioning. To prevent...
Page 82: Clustering And Findme
TANDBERG VIDEO COMMUNICATION SERVER Clustering and TMS Clusters can be monitored from TANDBERG Management Suite (TMS). For full information, refer to the TMS documentation. • TMS version 12.5 or later is required when setting up a cluster. •...
Page 83: Cluster Subzone
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Configuration To neighbor your local VCS (or VCS cluster) to a remote VCS cluster, you create a single zone to represent the cluster and configure it with the details of all the peers in that cluster: 1.
Page 84: Call Processing
• how to disconnect calls Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 85: Introduction
8. If the alias is not found, the VCS responds with a message to say that the call has failed. Overview and System Introduction status configuration configuration D14049.07 March 2010 Search process dial different address types. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 86: Dialing By Address Types
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Dialing by H.323 ID or E.164 alias search process, applying any transforms and then searching the Local Zone and Dialing by H.323 or SIP URI URI dialing section.
Page 87: Hop Counts
To configure the hop count using the CLI: • xConfiguration Zones Zone [1..1000] HopCount For full details on other zone options, see the Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Configuring hop counts Zone configuration section. Bandwidth Firewall Applications Maintenance control...
Page 88: Searches And Transforms
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Zone searching and transform process Zone searching takes place after all pre-search transforms, Call Policy and User Policy have been applied. The search rules and zone transform process is as follows: 1.
Page 89: Pre-Search Transforms
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER search process. Call Policy (also known as Administrator Policy) or User Policy (if is enabled). If this is the case, the pre-search transforms are re-applied to the new search process diagram for more information.
Page 90: Configuring Pre-Search Transforms
Note that the transforms also apply to any Publication, Subscription or Notify URIs handled by the Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Regular expression reference Check pattern tool (Maintenance > Tools > Check pattern). Presence Services. Bandwidth...
Page 91: Search Configuration
An unregistered endpoint is any device that is not registered with an H.323 gatekeeper or SIP registrar (e.g. VCS, gatekeeper or TANDBERG Border Controller). Although most calls are made between endpoints that are registered with such systems, it is sometimes necessary to place a call to an unregistered endpoint.
Page 92: Zone Searching And Zone Transforms
Any Alias: queries the zone for any alias (but not IP address). Any IP Address: queries the zone for any given IP address (but not alias). Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal...
Page 93 You can test whether the VCS can find an endpoint identified by a given alias, without actually placing a call to that endpoint by using the Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Check pattern tool. Locate tool. Bandwidth Firewall...
Page 94: Examples
Overview and System Introduction status configuration configuration D14049.07 March 2010 Examples Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 95: Examples
Overview and System Introduction status configuration configuration D14049.07 March 2010 Examples Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 96: Combining Match Types And Priorities
In this scenario, when viewing the zone, you can ignore the warning that no search rules exist. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal...
Page 97: Filter Queries To A Zone Without Transforming
Local Zone. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE...
Page 98: Query A Zone For Original And Transformed Alias
VCS as shown. Overview and System Introduction status configuration configuration D14049.07 March 2010 Examples Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 99: Query A Zone For Two Or More Transformed Aliases
Overview and System Introduction status configuration configuration D14049.07 March 2010 Examples Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 100: Call Policy
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER is set to On, for the When Authentication mode the purposes of Call Policy a SIP endpoint is considered to be authenticated when: •...
Page 101: Enabling Call Policy
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Action Whether or not a call that matches the source and destination is permitted. Allow: if both the Source and Destination aliases match those listed, call processing will continue.
Page 102: Configuring Call Policy Using A Cpl Script
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Uploading a CPL script To upload a new CPL file: 1. Go to the Call Policy configuration page (VCS configuration > Call Policy > Configuration). The CPL script cannot be uploaded using the command line interface.
Page 103: Routing Calls Via The Advanced Media Gateway
AM gateway via the VCS to the OCS which will always be a local call. • Bandwidth controls can be applied to the leg of the call between the TANDBERG endpoint and the AM gateway zone, but cannot be applied to the AM gateway zone to OCS zone leg of the call.
Page 104: Configuring Am Gateway Policy Rules
You can test whether a pattern will match a particular alias and be transformed in the expected way by using the Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Regular expression reference Appendix for more information. Check pattern tool (Maintenance > Tools > Check pattern). Bandwidth Firewall...
Page 105: Uri Dialing
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Enabling URI dialing via DNS URI dialing via DNS is enabled separately for outgoing and incoming calls. Outgoing calls To enable your VCS to locate endpoints using URI dialing via DNS, you must: •...
Page 106: Uri Resolution Process Using Dns
A and AAAA records and instead will continue with the search, querying the remaining lower priority zones. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER RFC 3263 [16]. An example of how the Bandwidth Firewall Applications Maintenance...
Page 107: Uri Dialing Via Dns For Outgoing Calls
(SIP or H.323) or use different hop counts. TANDBERG does not recommend configuring search rules with a Mode of Any Alias for DNS zones. This will result in...
Page 108: Uri Dialing Via Dns For Incoming Calls
Zones and Clustering and Call neighbors peers processing TANDBERG H.323 [15] defines the procedures for using DNS to locate gatekeepers and endpoints describes the DNS procedures used to resolve a SIP URI into the IP address, port, Bandwidth Firewall Applications...
Page 109: Example Dns Record Configuration
VCS Expressway, allowing successful traversal of the firewall. Appendix. Stripping @domain for dialing to that would strip the IP_address Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER URI dialing and firewall traversal Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE...
Page 110: Enum Dialing
Call Policy will therefore apply. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Enabling ENUM dialing ENUM dialing is enabled separately for incoming and outgoing calls. Outgoing Calls To allow locally registered endpoints to dial out to other endpoints using ENUM, you must •...
Page 111: Enum Dialing For Outgoing Calls
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Example In this example, we want to call Fred at Example Corp. Fred’s endpoint is actually registered with the URI fred@example.com, but to make it easier to contact him his system administrator has configured a DNS NAPTR record mapping this alias to his E.164 number: +44123456789.
Page 112: Enum Dialing For Outgoing Calls
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Example For example, you want to enable ENUM dialing from your network to endpoints at a remote site using a prefix of 8 followed by the last 4 digits of the remote endpoints’ E.164 number. You would...
Page 113: Enum Dialing For Incoming Calls
2.4.1 of RFC 3761 [8], Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Example For example, the record: IN NAPTR 10 100 "u" "E2U+h323" "!^(.*)$!h323:\1@ • example.com!" . would be interpreted as follows: 10 is the order •...
Page 114: Call Configuration
The loop detection feature was introduced in VCS version X4. It is only supported in deployments where all VCSs are running on X4 software or later. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Call loop detection mode structured dial plan, where all systems hop counts Bandwidth Firewall...
Page 115: Call Ids, Serial Numbers And Tags
Call Serial Number, and the third will list the Call Tag. Call loop Call ID Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Call serial number Bandwidth Firewall Applications Maintenance control traversal...
Page 116: Disconnecting Calls
SIP endpoints involved have also cleared their resources. Endpoints that support RFC 4028 [14] timer which should cause them to clear the resources of any hung SIP calls after a certain period of time. This includes all TANDBERG endpoints. Bandwidth Firewall Applications Maintenance...
Page 117: Bandwidth Control
Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 118: Bandwidth Control Overview
Grey Headline (continued) Bandwidth control overview Bandwidth control on the VCS The TANDBERG VCS allows you to control The diagram below shows a typical network deployment: the amount of bandwidth used by endpoints • a broadband LAN between the Enterprise and the internet, where high bandwidth calls are acceptable on your network.
Page 119: Subzones
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER About the Default Subzone When an endpoint registers with the VCS, its IP address and alias is checked against the subzone membership rules and it is assigned to the appropriate subzone. If no subzones have been created, or the endpoint’s IP address or alias do not match any...
Page 120: Configuring Subzones And Membership Rules
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Pattern type How the pattern string must match the alias for the rule to be applied. (Applies only if the Type is Alias Pattern Match.) Exact: the entire string must exactly match the alias character for character.
Page 121: Applying Bandwidth Limitations To Subzones
In addition, as this call passes through the Traversal Subzone, it will consume an amount of bandwidth from the Traversal Subzone equal to that of the call. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal...
Page 122: Links
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Default links Automatically created links Whenever a new subzone or zone is created, links are automatically created as follows: New zone/subzone type...
Page 123: Pipes
• Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Creating and editing pipes Pipe configuration options Name Enter the name you want to give to this pipe. You will refer to this name when creating links.
Page 124: Applying Pipes To Links
D14049.07 March 2010 Applying pipes to links HEAD OFFICE Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER VCS CONTROL INTERNET Pipe A Pipe B Default Subzone Pipe C BRANCH OFFICE Branch Office Subzone Bandwidth...
Page 125: Default Bandwidth And Downspeeding
On: the call will be downspeeded. Off: the call will not be placed. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Configuring default call bandwidth and downspeeding Bandwidth Firewall Applications Maintenance control traversal...
Page 126: Bandwidth Control Examples
D14049.07 March 2010 Example without a firewall HEAD OFFICE Default Subzone Zones and Clustering and Call neighbors peers processing TANDBERG VCS CONTROL HOME OFFICE INTERNET Pipe A Pipe B Pipe C BRANCH OFFICE Branch Office Subzone Bandwidth Firewall Applications...
Page 127: Example With A Firewall
Grey Headline (continued) Bandwidth control examples If we modify the previous example deployment to include firewalls between the offices, we can use TANDBERG’s Expressway™ firewall traversal solution to maintain connectivity. We do this by adding a VCS Expressway outside the firewall on...
Page 128: Firewall Traversal
VCS Expressway, including TURN services. Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 129: Firewall Traversal Overview
In most cases, you will use a VCS Control as a firewall traversal client. However, a VCS Expressway can also act as a firewall traversal client. The firewall traversal server used by the VCS client can be a TANDBERG VCS Expressway, or (for H.323 only) a TANDBERG Border Controller.
Page 130: Quick Guide To Vcs Traversal Client - Server Configuration
Overview and System Introduction status configuration configuration D14049.07 March 2010 VCS Expressway (server) Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER VCS Control (client)    Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 131: Firewall Traversal Protocols And Ports
H.323 firewall traversal protocols The VCS supports two different firewall traversal protocols for H.323: Assent and H.460.18/H.460.19. • Assent is TANDBERG’s proprietary protocol. • H.460.18 and H.460.19 are ITU standards which define protocols for the firewall traversal of signaling and media respectively.
Page 132: Ports For Initial Connections From Traversal Clients
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER H.460.18/19 ports Ports for connections out to the public In situations where the VCS Expressway is attempting to connect to an endpoint on the public internet, you will not know the exact ports on the endpoint to which the connection will be made.
Page 133: Firewall Traversal And Authentication
Expressway’s Authentication mode setting. However, endpoint clients are only required to authenticate if the VCS Expressway’s Authentication mode is On. TANDBERG Gatekeeper (version 6.0 or later; 6.1 or later is the recommended version) • The Gatekeeper provides its Authentication Username and Authentication Password.
Page 134: Other Issues
VCS Expressway back to the originating client TANDBERG offers a downloadable tool, the Expressway Port Tester, that allows you to test your firewall configuration for compatibility issues with your network and endpoints. It will advise if necessary which ports may need to be opened on your firewall in order for the Expressway™...
Page 135: Configuring The Vcs As A Traversal Client
Configuring the VCS as a traversal client To enable your VCS to act as a traversal client on behalf of its endpoints and neighbor gatekeepers, you must create a connection between it and a traversal server (e.g. a TANDBERG VCS Expressway or Border Controller).
Page 136: Configuring The Vcs As A Traversal Server
• traversal server for a traversal client (e.g. a Allow your VCS to act as a traversal server TANDBERG VCS Control or Gatekeeper) you for other VCSs and TANDBERG Gatekeepers. must create a connection between it and the You do this by adding a new traversal server client system.
Page 137: Configuring Traversal Server Ports
Specifies the port on the VCS Expressway used for Assent signaling. H.323 H.460.18 call signaling port Specifies the port on the VCS Expressway used for H.460.18 signaling. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE...
Page 138: Configuring The Vcs As A Turn Server
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Configuring TURN services TURN relay services are only available on a VCS Expressway. To use TURN services you also need the TURN Relay option key (this controls the number of TURN relays that can be simultaneously allocated by the VCS).
Page 139 This section also provides information on: • TMS Agent Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 140: Applications Conference Factory
Multiway enables endpoint users to create a conference while in a call even if their endpoint does not have this functionality built in. Multiway is supported in TANDBERG endpoints including the E20 (software version TE1.0 or later) and MXP range (software version F8.0 or later).
Page 141: Presence
Presentities publish information about their own presence status, and also subscribe to the information being published by other presentities and FindMe users. Endpoints that support presence, such as TANDBERG Movi™ v2.0 (or later) clients, can publish their own status information. The VCS can also provide basic presence information on behalf of endpoints that do not support presence, including H.323 endpoints, as long as they have...
Page 142: Presence User Agent (Pua)
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Registration refresh period The PUA will update and publish presence information on receipt • a registration request (for new registrations) •...
Page 143: Configuring Presence
Clustering and Call neighbors peers processing TANDBERG Presence Server expiration times Subscription expiration time This is the maximum time (in seconds) within which a subscriber must refresh its subscription. If the subscriber does not send a refresh within this period, the Presence Server will stop sending NOTIFY messages to it.
Page 144: Viewing Presence Status
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Subscribers Status > Applications > Presence > Subscribers This page lists each endpoint that has requested information about one or more presentities whose information is managed by (i.e. published to) the local presence server. Endpoints requesting this information are listed here regardless of whether they are registered locally or to a remote server.
Page 145: Ocs Relay
• configuring Presence As this is a complex procedure beyond the scope of this Administrator Guide, TANDBERG has published a separate document describing in detail all the steps required: OCS 2007 (R1 and R2) and VCS Control Deployment Guide Zones and...
Page 146: Findme
FindMe is a form of User Policy, which is the set of rules that determines what happens to a call for a particular user or group when it is received by the TANDBERG VCS. The FindMe feature lets you assign a single FindMe ID to individuals or teams in your enterprise.
Page 147: Enabling Findme On The Vcs
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Searching for FindMe accounts The User search page lets you search for user accounts by their related FindMe details such as a FindMe ID or device alias. This search feature is useful if, for example, you have a device alias but do not know to whom it belongs, or you have a URI and are not sure if it is a FindMe ID or a device alias.
Page 148: Tandberg Findme™ User Guide
Grey Headline (continued) TANDBERG FindMe™ user guide About FindMe FindMe lets you control how you are contacted: on any device, at any location, through a single FindMe ID. You can set up a list of locations such as "at home" or "in the office"...
Page 149: Configuring Your Findme User Account
Grey Headline (continued) TANDBERG FindMe™ user guide FindMe home page This page summarizes your FindMe account. It shows your configured devices and locations, and your currently Active location. From here you can change your Active location or use the Add, Edit and Delete buttons to modify your device and location details.
Page 150: Defining Device Details
Grey Headline (continued) TANDBERG FindMe™ user guide Defining device details This page is used to define a new device such as an endpoint, Movi client or telephone, or to change the details of an existing device. To get here from the FindMe home page, click Add new device to define a new device, or click Edit against the device whose details you want to modify.
Page 151: Defining Location Details
Grey Headline (continued) TANDBERG FindMe™ user guide Defining location details This page is used to define the details of a new location, or to change the devices associated with an existing location. To get here from the FindMe home page, click Add new FindMe location to define a new location or click Edit against the location whose details you want to modify.
Page 152: Provisioning (Starter Pack)
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Configuration Provisioning status Maintaining user accounts for more information. TANDBERG Deployment Guide - VCS Expressway Starter Pack [34] Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE page. for full details Appendices...
Page 153: Tms Agent
Instructions for this are contained in the online help; follow the link associated with the VCS's TMS Agent password warning message. Note that if your VCS is subsequently reconfigured to use TMS, the password must first be reset to the default value of TANDBERG. Overview and...
Page 154: Maintenance
• password encryption. Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 155: Upgrading Software Components
All existing option keys are retained through the upgrade from one version of the VCS platform to the next, including upgrades to the next major release. However, TANDBERG recommends that you take note of your existing option keys before performing the upgrade.
Page 156: Upgrade Procedure
VCS. After about five minutes the system will be ready to use. If you make any further configuration changes before rebooting, those changes will be lost when the system restarts, so TANDBERG recommends rebooting your system immediately. Zones and Clustering and...
Page 157: Option Keys
• Advanced account security: enables advanced security features and restrictions for high-security installations. Contact your TANDBERG representative for more information on how to purchase these features. After the appropriate option key has been purchased, it must be installed. You can do this through the web interface or through the CLI.
Page 158: Security Certificates
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Enabling security HTTPS client certificate validation The Client certificate validation setting controls whether client systems (typically web browsers) that communicate with the VCS over HTTPS have to present a valid client certificate before the connection can be established.
Page 159: Advanced Account Security
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Enabling advanced account security To enable advanced account security using the web interface: • Maintenance > Advanced account security. You are taken to the Advanced account security page.
Page 160: Login Accounts
Use TMS if you need to provision a large number of user accounts. See the TANDBERG Deployment Guide - FindMe [29] more details on configuring FindMe and user accounts. Root accounts The VCS provides a root account which can be used to log in to the VCS operating system.
Page 161: Administrator Accounts
This account is used to log in to the VCS using the web interface or the CLI. The username for this account is admin (all lower case) and the default password is TANDBERG (all upper case). You cannot delete the default administrator account or change its admin username, but you should change the password as soon as possible.
Page 162: Maintaining User Accounts
The credential name must be the same as account username and the credential password must be the TANDBERG same as the password configured on the provisioned device. Zones and...
Page 163: Managing User Accounts
This feature is useful if a user forgets their password. If remote authentication is enabled, passwords are managed through your remote directory server instead. for more information about Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Principal devices: Bandwidth Firewall Applications Maintenance control traversal...
Page 164: Administrator And User Groups
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Group name limitations Administrator and user group names cannot contain any of the following characters: / \ [ ] : ; | = , + * ? > < @ "...
Page 165: Account Authentication Using Ldap
The CA certificate file should also contain any required CRL data. See the Security certificates information. See the TANDBERG Deployment Guide - Authenticating VCS accounts using LDAP [30] for more details on configuring an LDAP server, including help on specifying distinguished names for searching the database.
Page 166: Root Account
The VCS provides a root account which can be used to log in to the VCS operating system. This account has a username of root (all lower case) and a default password of TANDBERG (all upper case). For security reasons you must change the password as soon as possible.
Page 167: System Administration Access
Grey Headline (continued) System administration access About administration access While you can administer the TANDBERG VCS by using a PC connected directly to the unit via a serial cable, you may want to access the system remotely over IP. You can do this using either or both: •...
Page 168: Backup And Restore
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Restoring a previous backup System data You are recommended to take the VCS unit out of service before performing a restore. To restore the VCS to a previous configuration of System data: 1.
Page 169: System Snapshot
Clicking this button starts the download of the system snapshot file. You will then be asked whether and where you would like to save the file. Select a location from which you can easily send the file to your TANDBERG support representative. Zones and...
Page 170: Incident Reporting
TANDBERG personnel for the sole purpose of issue diagnosis and problem resolution. This feature is only intended for use at the request of TANDBERG customer support in exceptional situations, and is off by default. Warning: privacy-protected personal data IN NO EVENT SHOULD PRIVACY-PROTECTED PERSONAL DATA BE INCLUDED IN ANY REPORTS TO TANDBERG.
Page 171: Viewing Incident Reports
Download incident report button. If you wish to edit the report before sending it to TANDBERG (for example, if you wish to remove any potentially sensitive...
Page 172: Tools
The Locate tool performs the search as though the VCS received a call request from the selected Source zone. For more information, see the section. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Locate Zone searching and transform process Bandwidth Firewall Applications Maintenance control...
Page 173: Port Usage
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Remote listening ports This page shows the destination IP addresses and IP ports of remote systems with which the VCS communicates. Your firewall must be configured to allow traffic...
Page 174: Restarting, Rebooting And Shutting Down
Do not restart the VCS while the red ALM LED on the front of the box is on. This indicates a hardware fault. Contact your TANDBERG representative. The restart function shuts down and restarts the VCS application software, but not the operating system or hardware.
Page 175: Restoring Default Configuration
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER table shows a full list of all configuration items and where applicable between the Default Subzone, Traversal Subzone and Default Zone. Without after xCommand DefaultValuesSet Level: 3. These links Creating and editing links...
Page 176: Configuration Items Reset By Defaultvaluesset Level 2
Default value after xCommand DefaultValuesSet Level: 3 <blank> Auto <blank> <blank> <all option keys are deleted> ReadWrite <blank> <blank> <blank> TANDBERG Configuration items reset by DefaultValuesSet level 2 Default value after xCommand DefaultValuesSet Level: 2 <blank> ReadWrite <blank> Local <blank> <blank> ActiveDirectory...
Page 177 Configuration items reset by DefaultValuesSet level 2 (cont.) Default value after xCommand DefaultValuesSet Level: 2 <blank> <blank> <blank> <blank> LDAP ReadWrite <blank> Local Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 178: Password Encryption
Administrator accounts Local Database authentication credentials Outbound connection credentials LDAP server FindMe accounts Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Maximum length of passwords Maximum plain text Maximum displayed characters encrypted characters Bandwidth Firewall Applications Maintenance...
Page 179: Appendices
VCS warnings • Bibliography • Glossary • Legal notices Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 180: Cpl Reference
The VCS has many powerful inbuilt transform features so CPL should be required only if advanced call handling rules are required. The VCS supports most of the CPL standard along with some TANDBERG-defined extensions. It does not support the top level actions <incoming> and <outgoing> as described in RFC 3880.
Page 181: Field
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Authentication mode: Off H.323 The "From" and "ReplyTo" fields of the The source aliases from the original LRQ incoming message. or ARQ that started the call. If a SETUP...
Page 182: Subfield
(see the example Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER not-present Call screening of authenticated users). Bandwidth Firewall Applications...
Page 183: Location
Specifies the way in which a location matching the regular expression is to be changed. rule-switch field section. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Appendix for further information). Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 184: Proxy
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Unsupported CPL elements The VCS does not currently support some elements that are described in the CPL RFC. If an attempt is made to upload a script containing any of the following elements an error message will be generated and the VCS will continue to use its existing policy.
Page 185: Cpl Examples
In this example, only calls from users with authenticated source addresses are allowed. See the Device authentication section for details on how to enable authentication. <?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl" xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd"> <taa:routed> <address-switch field="origin"> <not-present> ...
Page 186: Call Screening Based On Domain
Call screening based on domain In this example, user fred will not accept calls from anyone at annoying.com, or from any unauthenticated users. All other users will allow any calls. <?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl" xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd"> <taa:routed> <address-switch field="destination">...
Page 187: Allow Calls From Locally Registered Endpoints Only
In this example, the administrator only wants to allow calls that originate from locally registered endpoints. <?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl" xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd"> <taa:routed> <address-switch field="registered-origin"> <not-present> <reject status="403" reason="Only local endpoints can use this Tandberg VCS"/> </not-present> </address-switch> </taa:routed> </cpl> Overview and System Introduction status configuration configuration D14049.07...
Page 188: Restricting Access To A Local Gateway
This can be done in two ways: using the address-switch node or the taa:rule-switch node. Examples of each are shown below. Using the address-switch node <?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl" xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd"> <taa:routed> <address-switch field="destination"> <address regex="9(.*)">...
Page 189: Redirecting Failed Calls Based On Status Code
(e.g. different recorded messages) based on the exact reason for call failure. For example: <?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl" xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd"> <taa:routed> ...
Page 190: Reject Attempts To Subscribe To A Presentity
Grey Headline (continued) CPL reference Reject attempts to subscribe to a presentity In this example, attempts to subscribe the presence of user@example.com are rejected. <?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl" xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd"> <taa:routed> <taa:rule-switch> <taa:rule origin=".*" destination="user@example.com" message-regex="^SUBSCRIBE.*">...
Page 191: Regular Expression Reference
[^abc] matches any single character that is NOT one of a, b or c. ^\d\d\d$ will match any string that is exactly 3 digits long. (?!.*@tandberg.net$).* will match any string that does not end with @ tandberg.net. Bandwidth...
Page 192: Pattern Variable Reference
SystemUnit Name Zones and Clustering and Call neighbors peers processing TANDBERG Valid variable strings When used in a Pattern field When used in a Replace field Matches all IPv4 and IPv6 addresses not applicable currently configured on the VCS.
Page 193: Vcs Port Reference
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Two services or functions cannot share the same port and protocol; if you attempt to change an existing port or range and it conflicts with another service, you will get a warning message.
Page 194 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Configurable via VCS configuration > Expressway > Ports xConfiguration Traversal Server Media Demultiplexing RTP Port VCS configuration > Expressway > Ports xConfiguration Traversal Server H323 Assent CallSignaling Port VCS configuration >...
Page 195 TCP source port from the ephemeral range Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Configurable via VCS configuration > Protocols > H.323 xConfiguration H323 Gatekeeper CallSignaling PortRange Start xConfiguration H323 Gatekeeper CallSignaling PortRange End VCS configuration >...
Page 196: Dns Configuration
For more details of how to configure BIND servers and the DNS system in general see the publication Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Microsoft DNS server RFC 2782 [3] RFC 2782 [3] BIND 8 & 9 Bandwidth...
Page 197: Ldap Configuration For Device Authentication
<ldap _ base> is the base DN for your Active Directory server. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Microsoft Active Directory downloaded the H.350 schemas, install them as follows: Bandwidth Firewall Applications Maintenance...
Page 198: Adding H.350 Objects
Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Securing with TLS To enable Active Directory to use TLS, you must request and install a certificate on the Active Directory server. The certificate must meet the following requirements: •...
Page 199: Openldap
/etc/openldap/schemas/h323identity.ldif include /etc/openldap/schemas/h235identity.ldif include /etc/openldap/schemas/sipidentity.ldif The OpenLDAP daemon (slapd) must be restarted for the new schemas to take effect. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 200: Adding H.350 Objects
Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Securing with TLS The connection to the LDAP server can be encrypted by enabling Transport Level Security (TLS) on the connection. To do this you must create an X.509 certificate for the LDAP server to allow the VCS to verify the server’s identity.
Page 201: Command Reference - Xconfiguration
Each item is assigned an index within the range shown. Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 202 Sets the number of minutes that an administration session (HTTPS, Telnet or SSH) may be inactive before the session is timed out. A value of 0 turns session time outs off. Default: 0 Example: xConfiguration Administration TimeOut: 0 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 203 Note: this alias must route to the MCU as a fully-qualified SIP alias Example: Applications ConferenceFactory Template: "563%%@example.com" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 204 Default: 300 Example: xConfiguration Applications Presence Server Subscription ExpireDelta: 300 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 205 Specifies the Distinguished Name to use when connecting to an LDAP server. Example: xConfiguration Authentication LDAP BaseDN: "dc=example,dc=company,dc=com" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 206 Example: xConfiguration Bandwidth Link 1 Name: "HQ to BranchOffice" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 207 Example: xConfiguration Bandwidth Pipe 1 Bandwidth Total Mode: Limited Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 208 Controls whether application core dumps are enabled. Note: you must restart the system for any changes to take effect. Default: Off Example: xConfiguration Core Dump Mode: Off Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 209 The URL of the web service to which error reports are sent. Default: http://vcser.tandberg.com/submitapplicationerror/ Example: xConfiguration Error Reports URL: "http://vcser.tandberg.com/submitapplicationerror/" Ethernet [1..2] IP V4 Address: <S: 7..15> Specifies the IPv4 address of the specified LAN port. Note: you must restart the system for any changes to take effect.
Page 210 Specifies the interval (in seconds) at which the VCS polls the endpoints in a call to verify that they are still in the call. Default: 120 Example: xConfiguration H323 Gatekeeper CallTimeToLive: 120 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 211 Auto: interworked calls will be encrypted if the endpoints request it. Default: Auto Example: xConfiguration Interworking Encryption Mode: Auto Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 212 Defines which LAN interface is externally facing. Default: LAN1 Example: xConfiguration IP External Interface: LAN1 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 213 Specifies the IPv6 gateway of the VCS. Note: you must restart the system for any changes to take effect. Example: xConfiguration IP V6 Gateway: "3dda:80bb:6::9:144" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 214 Specifies the IP address or Fully Qualified Domain Name (FQDN) of the remote syslog server to which the log will be written. This server must support the BSD syslog protocol. It cannot be another VCS. Example: xConfiguration Log Server Address: "syslog.server.example.com" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 215 Default: None. Example: xConfiguration Login Remote LDAP CRLCheck: Peer Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 216 Sets the user distinguished name to use when binding to the LDAP server. Example: xConfiguration Login Remote LDAP VCS BindDN: "VCSmanager" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 217 Example: xConfiguration NTP Address: "ntp.server.example.com" Option [1..64] Key: <S: 0, 90> Specifies the option key of your software option. These are added to the VCS in order to add extra functionality, such as increasing the VCS’s capacity. Contact your TANDBERG representative for further information.
Page 218 Default: HTTP Example: xConfiguration Policy FindMe Server Protocol: HTTP Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 219 Default: Exact Example: xConfiguration Registration DenyList 1 Pattern Type: Exact Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 220 Example: xConfiguration Services AdvancedMediaGateway Policy Rules Rule 1 Pattern String: ".branch@example.com" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 221 Specifies the period (in seconds) within which a SIP endpoint must re-register with the VCS to prevent its registration expiring. Default: 60 Example: xConfiguration SIP Registration ExpireDelta: 60 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 222 Example: xConfiguration SIP Registration Proxy Mode: Off SIP Require Duo Video Mode: <On/Off> Controls whether the VCS will require the use of the com.tandberg.sdp.duo.enable extension for endpoints that support it. Default: On Example: xConfiguration SIP Require Duo Video Mode: On SIP Require UDP BFCP Mode: <On/Off>...
Page 223 Default: 500 Example: xConfiguration SIP Session Refresh Minimum: 500 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER 4028. Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 224 Default: On Example: xConfiguration SIP UDP Mode: On Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER 4028. Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 225 Defines the password of an administrator user who can login to the VCS web interface. The maximum plaintext length is 16 characters, which will then be encrypted. Example: xConfiguration SystemUnit AdminAccount 1 Password: "password123" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 226 The text string to use in conjunction with the selected Pattern behavior. Example: xConfiguration Transform 1 Pattern Replace: "example.com" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 227 Example: xConfiguration Traversal Server H323 Assent CallSignaling Port: 2777 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 228 Traversal Server TURN Authentication Realm: <S: 1..128> The realm sent by the server in its authentication challenges. Default: TANDBERG Example: xConfiguration Traversal Server TURN Authentication Realm: "TANDBERG" Traversal Server TURN Media Port End: <1024..65534> The upper port in the range used for TURN relays.
Page 229 Default: Allow Example: xConfiguration Zones LocalZone DefaultSubZone Registrations: Allow Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 230 Example: xConfiguration Zones LocalZone SubZones MembershipRules Rule 1 Subnet PrefixLength: 32 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 231 Example: xConfiguration Zones LocalZone SubZones SubZone 1 Bandwidth Total Mode: Limited Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 232 Example: xConfiguration Zones LocalZone Traversal H323 TCPProbe KeepAliveInterval: 20 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 233 Example: xConfiguration Zones LocalZone TraversalSubZone Bandwidth PerCall Mode: Limited Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 234 Example: xConfiguration Zones Policy SearchRules Rule 1 Pattern Replace: "@example.net" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 235 Example: xConfiguration Zones Policy SearchRules Rule 1 State: Enabled Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 236 Example: xConfiguration Zones Zone 1 DNS Interworking SIP Video DefaultResolution: CIF Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 237 Example: xConfiguration Zones Zone 1 DNS SIP SearchAutoResponse: Off Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 238 Example: xConfiguration Zones Zone 3 Name: "UK Sales Office" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 239 Example: xConfiguration Zones Zone 3 Neighbor Interworking SIP Video DefaultCodec: H263 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 240 Example: xConfiguration Zones Zone 3 Neighbor SIP MIME Strip Mode: Off Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 241 Example: xConfiguration Zones Zone 3 Neighbor SIP SDP Attribute Line Limit Length: 130 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 242 Example: xConfiguration Zones Zone 3 Neighbor SIP UPDATE Strip Mode: Off Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 243 Default: Allow Example: xConfiguration Zones Zone 4 TraversalClient Registrations: Allow Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 244 Example: xConfiguration Zones Zone 5 TraversalServer H323 H46019 Demultiplexing Mode: Off Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 245 Example: xConfiguration Zones Zone 5 TraversalServer SIP TLS Verify Subject Name: "myclientname" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 246 Example: xConfiguration Zones Zone 5 TraversalServer UDPProbe RetryInterval: 2 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 247 DNS: the new zone contains endpoints discoverable by DNS lookup. Example: xConfiguration Zones Zone 3 Type: Neighbor Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 248: Command Reference - Xcommand
The (r) is not part of the command. Overview and System Introduction status configuration configuration D14049.07 March 2010 Overview Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 249 The index of the administrator account to be deleted. Example: xCommand AdminAccountDelete AdminAccountId: 1 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 250 Reboots the VCS. This command has no parameters. Example: xCommand boot Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 251 Defines the password for this entry in the local authentication database. Example: xCommand CredentialAdd CredentialName: "John Smith" CredentialPassword: "password123" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 252 Example: xCommand DenyListDelete DenyListId: 2 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Restoring default configuration section for full details. Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 253 XML file containing status that is to be attached for an external application. Example: xCommand ExtAppStatusAdd Name: "foo" Filename: "foo.xml" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 254 D14049.07 March 2010 Status/Calls Event/CallDisconnected Status/Registrations Event/CallFailure Status/Zones Event/RegistrationAdded Event/CallAttempt Event/RegistrationRemoved Event/CallConnected Event/RegistrationFailure Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Event/ Event/Bandwidth Event/Locate Event/ResourceUsage Event/AuthenticationFailure Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 255 The URI of the presentity being watched. Example: xCommand ListSubscribers Presentity: "mary.jones@example.com" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 256 Example: xCommand LogPersist OptionKeyAdd Adds a new option key to the VCS. These are added to the VCS in order to add extra functionality, such as increasing the VCS's capacity. Contact your TANDBERG representative for further information. Key(r): <S: 0, 90>...
Page 257 Restarts the VCS without a full system reboot. This command has no parameters. Example: xCommand Restart Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 258 The index of the search rule to be deleted. Example: xCommand SearchRuleDelete SearchRuleId: 1 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 259 (.*)" Authenticated: On Address: "127.0.0.1" Port: 22400 Transport: TCP Tag: "Tag1" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 260 Example: xCommand SubZoneAdd SubZoneName: "BranchOffice" TotalMode: Limited Total: 1024 PerCallInterMode: Limited PerCallInter: 512 PerCallIntraMode: Limited PerCallIntra: 512 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 261 The index of the membership rule to be deleted. Example: xCommand SubZoneMembershipRuleDelete SubZoneMembershipRuleId: 1 Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 262 Default: ReadWrite Example: xCommand UserLoginGroupAdd Name: "FindMeAccounts" Access: ReadWrite Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 263 Example: xCommand ZoneAdd ZoneName: "UK Sales Office" Type: Neighbor Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 264 The alias to be searched for. Example: xCommand ZoneList Alias: "john.smith@example.com" Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 265: Command Reference - Xstatus
? to return a list of all elements available under the xStatus command. • Overview and System Introduction status configuration configuration D14049.07 March 2010 Overview Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 266 Max: <0..10000> Presentity [1..10000]: URI: <S: 1,255> Document: Count: <1..10> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 267 External Status: Relay: Registrations: Count: <1..2500> Subscriptions: Count: <1..2500> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 268 Protocol: <H323/SIP> H323: {visible if Protocol = H323} CallSignalAddress: <IPv4Addr/[IPv6Addr]>:<1..65534> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 269 MediaRouted: <True/False> CallRouted: <True/False> Participants: Leg: <1..300> {2 entries} Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 270 Speed: <10half/10full/100half/100full/1000full/down> IPv4: Address: <IPv4Addr> SubnetMask: <IPv4Addr> IPv6: Address: <IPv6Addr> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 271 Address: <IPv4Addr> {1..2 entries} IPv6: {Visible if Status=Active} Address: <IPv6Addr> {1..2 entries} Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 272 DNS: Server [1-5]: Address: <IPv4Addr/IPv6Addr> Domain: <S: 0, 128> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 273 Last Update: <date-time> Last Correction: <Time in seconds, precision in seconds> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 274 H323: {Visible if Protocol is H323} Type: <Endpoint/MCU/Gateway/Gatekeeper/MCUGateway>: CallSignalAddresses: Address: <IPv4Addr/[IPv6Addr]>:<1..65534> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 275 Total: <0..4294967295> Registrations: Current: <0..3750> Max: <0..3750> Total: <0..4294967295> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 276 Status: <Active/Inactive/Failed> Address: <IPv6Addr> TLS: Status: <Active/Inactive/Failed> Address: <IPv6Addr> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 277 Grey Headline (continued) Command reference - xStatus SystemUnit: Product: TANDBERG VCS Uptime: <Time in seconds> SystemTime: <Time not set/date-time> TimeZone: <GMT or one of 300 other timezones> LocalTime: <local-date-time> Software: Version: X5.1 Build: <Number/Uncontrolled> Name: “Release” ReleaseDate: <Date> ReleaseKey <ReleaseKey>...
Page 278 Address: <IPv4Addr/IPv6Addr> CreationTime: <Date Time> ExpireTime: <Date Time> Counters: Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 279 From: NoChannel: <0..65535> NoPermission: <0..65535> InvalidType: <0..65535> FilterFailure: <0..65535> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 280 Registrations: {0..3750 entries } {Section visible only if there are registrations} Registration: <1..3750> SerialNumber: <S: 1,255> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 281 Calls: {Section visible only if there are calls} Call [0..900]: {0..900 entries} CallId: <S: 1,255> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 282 Cause: {Visible if Status is Failed} <No response from gatekeeper/DNS resolution failed/Invalid alias/Authentication Failed/Invalid IP address> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 283 LastStatusChange: <Time not set/Date Time> Calls: {0..900 entries} Call [0..900]: CallID: <S: 1,255> Overview and System Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE Appendices...
Page 284: Warnings
Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Resolution Configure Ethernet parameters Contact your TANDBERG representative Contact your TANDBERG representative Contact your TANDBERG representative Configure the cluster name Wait until the upgrade has completed View cluster replication troubleshooting instructions View...
Page 285 System Introduction status configuration configuration D14049.07 March 2010 Warnings list Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER Resolution Configure default links Configure H.323 and/or modes Reconfigure Interworking mode or reinstall the Configure IP settings Configure...
Page 286 Restart required: the Dual Network Interfaces option key has been changed, however a restart is required for this to take effect Restart required: the TMS Agent service has stopped unexpectedly. If the problem persists, contact your TANDBERG support representative Security alert: one or more administrators has a password that does not meet strictness requirements...
Page 287: Bibliography
XML and Writing CPL for TANDBERG Infrastructure products Rev 1.2 Management Information Base for Network Management of TCP/IP-based internets: MIB-II TANDBERG Deployment Guide - Microsoft OCS 2007 (R1 and R2) and VCS Control (document no. D14269) TANDBERG Multiway Deployment Guide (document number D14366)
Page 288 TANDBERG Deployment Guide - Authenticating VCS accounts using LDAP (document number D14526) TANDBERG Deployment Guide - VCS and ENUM dialing (document number D14465) TANDBERG Deployment Guide - Certificate Creation and use with VCS (document number D14548) TANDBERG Deployment Guide - Basic Configuration - Single VCS Control (document number D14524)
Page 289: Glossary
A collection of between two and six VCSs that have been configured to work together as a single Local Zone, in order to provide scalability and redundancy. Conference Factory An application that allows the VCS to support TANDBERG's Multiway feature. Multiway enables endpoint users to create a conference while in a call even if their endpoint does not have this functionality built in. See the An XML-based language for defining call handling.
Page 290 The act of crossing a firewall or NAT device. FindMe™ A TANDBERG User Policy feature that allows users to have a single alias on which they can be reached regardless of the endpoint(s) they are currently using. FQDN A domain name that specifies the node’s position in the DNS tree absolutely, uniquely identifying the system or device. Note that in order to use FQDNs instead of Fully Qualified Domain Name IP addresses when configuring the VCS, you must have at least one DNS server configured.
Page 291 Introduction status configuration configuration D14049.07 March 2010 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER What are traversal calls? What are traversal calls? section for more Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE section for...
Page 292 D14049.07 March 2010 RFC 3550 [17]. RFC 3261 Zones and Clustering and Call neighbors peers processing TANDBERG VIDEO COMMUNICATION SERVER OCS Relay section for more information. RFC 3550 [17]. [20]. Bandwidth Firewall Applications Maintenance control traversal ADMINISTRATOR GUIDE...
Page 293 A zone on a VCS traversal client that has been used to configure a connection to a particular traversal server. Traversal server A traversal entity on the public side of a firewall. Examples are the TANDBERG Border Controller and the TANDBERG VCS Expressway. Traversal server zone A zone on a VCS Expressway that has been used to configure a connection to a particular traversal client.
Page 294 Glossary Term Definition A generic term for the TANDBERG product which acts as a gatekeeper and SIP proxy/server. Video Communications Server VCS Control A VCS whose main function is to act as a gatekeeper, SIP proxy and firewall traversal client. This system will generally be located within the firewall.
Page 295: Legal Notices
Guide may be reproduced, information in this Guide are subject to change stored in a retrieval system, or transmitted, at any time, without notice, by TANDBERG. in any form, or by any means, electronically, Every effort has been made to supply complete mechanically, by photocopying, or otherwise, and accurate information in this Guide;...
Page 296: Contact Information
Philip Pedersens vei 20, 1366 Lysaker, Norway Telephone: +47 67 125 125 Fax: +47 67 125 234 Video: +47 67 126 126 Email: tandberg@tandberg.com U.S. HEADQUARTERS Telephone: +1 212 692 6500 Fax: +1 212 692 6501 Video: +1 212 692 6535 Email: tandberg@tandberg.com...

TANDBERG D14049.04 Administrator's Manual

Quick Links

Related Manuals for TANDBERG D14049.04

Summary of Contents for TANDBERG D14049.04