Page 1 Video Communication Server ADMINISTRATOR GUIDE Version X2.1 May 2008 Overview and System Zones and Call Bandwidth Firewall Introduction Getting Started Maintenance Appendices Status Configuration Configuration Neighbors Processing Control Traversal D14049.03 MAY 2008...
Page 2: Table Of Contents
Electromagnetic Compatibility (EMC) ... 10 EC Declaration of Conformity ... 10 JATE Approval (Japan only) ... 10 Environmental Issues... 11 TANDBERG’s Environmental Policy ... 11 European Environmental Directives ... 11 Waste Handling ... 11 TANDBERG’s Environmental Policy ... 11 Digital User Guides ... 11 Introduction The TANDBERG VCS ...
Page 3 About the Time Zone ... 53 Configuration ... 53 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SNMP ... 54 Overview ... 54 About SNMP ... 54 Configuration ... 54 External Manager ... 55 Overview ... 55 About the External Manager ...
Page 4 Traversal Client Zone ... 81 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Traversal Server Zone ... 81 ENUM Zone ... 82 DNS Zone ... 82 Default Zone... 82 Adding Zones ... 83 Configuring Zones ... 83 Configuring Zones - All Types ...
Page 5 Getting Started Status Configuration D14049.03 MAY 2008 Using TANDBERG’s FindMe™ ... 104 About your FindMe User Account ... 104 About FindMe™... 104 FindMe User Accounts ... 104 Individual versus Group FindMe ... 104 Accessing the FindMe Configuration Page ... 104 Configuring your FindMe User Account ...
Page 6 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Default Bandwidth and Downspeeding ... 142 About the Default Call Bandwidth ... 142 About Downspeeding ... 142 Configuring Default Call Bandwidth and Downspeeding ... 142 Bandwidth Control Examples ... 143 Example Without a Firewall ...
Page 7 Overview ... 169 Shutting Down ... 169 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Restoring Default Configuration ...170 Overview ...170 DefaultValuesSet Level 3 ...170 Appendices CPL Reference ...172 Overview of CPL on the VCS ...172 address-switch ...172...
Page 8 Command Reference - xStatus ... 226 Bibliography ... 242 Glossary... 243 Contact Information ...247 Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 9: Legal Notices
This Administrator Guide and the product to information in this Administrator Guide are which it relates contain information that is subject to change at any time, without notice, proprietary to TANDBERG and its licensors. by TANDBERG. Information regarding the product is found adjacent in the...
Page 10: Safety Instructions And Approvals
This is a Class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures. EC Declaration of Conformity Manufacturer: TANDBERG Telecom AS Product Name: TANDBERG Video Communication Server Type Number: TTC2-04...
Page 11: Environmental Issues
User Guides with a digital CD version. Instead of a range of different user manuals, there is now one CD – which can be used with all TANDBERG products – in a variety of languages. The environmental benefits of this are significant.
Page 12 Getting Started Status Configuration D 13898.04 DECEMBER 2006 D14049.03 MAY 2008 Safety/ Introduction Installation Quick Setup Zones and Call Configuration Neighbors Processing TANDBERG TANDBERG VIDEO COMMUNICATIONS SERVER Administrator Conference View Operation Settings Setup Conferences Bandwidth Firewall Maintenance Appendices Control Traversal...
Page 13: Overview
Introduction Grey Headline (continued) The TANDBERG VCS Overview The TANDBERG Video Communication Server (VCS) is an industry unique multi-application device that enhances the video experience with new functionality and provides transparent communication between SIP and H.323 endpoints. It allows you to manage endpoint registrations and calls, and control the bandwidth being used within your network.
Page 14: Standard Features
• System administration via a web interface or RS-232, Telnet, SSH, and HTTPS • Can be managed with TANDBERG Management Suite 11.8 or newer User Policy (FindMe™) A unique industry solution that gives individual video users a single alias on which they can be contacted regardless of location.
Page 15: The Administrator Guide
Grey Headline (continued) The Administrator Guide This Administrator Guide is provided to help you make the best use of your TANDBERG VCS. Your approach to this documentation depends on what you want to do and how much you already know.
Page 16: D14049.03
Command Line Interface (CLI) or the web interface. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 17: What's In The Box
Grey Headline (continued) Installation What’s in the Box? To avoid damage to the unit during transportation, the TANDBERG VCS is delivered in a special shipping box, which should contain the following components: • TANDBERG VCS • CD containing VCS Administrator Guide and other documentation •...
Page 18: Initial Configuration
We recommend that you now configure the following: • The system name of the VCS. This is used by the TANDBERG Management Suite (TMS) to identify the system. See Name for more information. admin and your new password.
Page 19: Initial Configuration Via Front Panel
ENTER to confirm. menu. UP key ENTER key DOWN key ESC key Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER  Use the UP/DOWN ENTER to access the IP Settings IP Address and press this option.  When you reach a digit you wish to...
Page 20: System Administrator Access
Grey Headline (continued) System Administrator Access About Administrator Access While it is possible to administer the TANDBERG VCS via a PC connected directly to the unit via a serial cable, you may wish to access the system remotely over IP.
Page 21: Web Interface
Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Web Interface Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 22: General Page Features
This icon appears on the top right corner of every page. Clicking on this icon will take you directly to the latest version of the VCS Administrator Guide on the TANDBERG website. Information box A yellow information box will appear on the...
Page 23: Command Line Interface
• xCommand Typing the given command into the CLI with or without a will return information about the usage of that command. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 24: D14049.03
These pages provide information on the current status and configuration of the VCS. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Overview page and all the Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 25: Viewing The Overview
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Options The maximum number of calls and registrations, and the availability of additional VCS features such as User Policy and Dual Network Interfaces, are controlled through the use of Option Keys.
Page 26: System Information
The build number of this software version. Software release date The date on which this version of the software was released. Software name The internal TANDBERG reference number for this software release. Software options All the extra features installed on the VCS via option keys.
Page 27: Ethernet
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE MAC address The MAC address of the VCS’s ethernet device. If the Dual Network Interfaces option key has been installed, this will show the MAC addresses of the ethernet cards for both the LAN1 port and the LAN2 port.
Page 28: Ip Status
Understanding the IP Status Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE IPv4 gateway The IPv4 gateway used by VCS. IPv6 gateway The IPv6 gateway used by VCS. IPv4 address The IPv4 address configured on the VCS.
Page 29: Resource Usage
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Traversal calls Current: The number of traversal calls going through the VCS at this moment. (peak): The highest number of concurrent traversal calls handled by the VCS since it was last restarted.
Page 30: Registrations
Understanding the Registrations Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Name The H.323 alias or SIP AOR that the device registered. Clicking on an individual name will take you to the Registrations Details page for that registration.
Page 31: Registration History
Understanding the Registration History Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Name The H.323 alias or SIP AOR that the device registered. Clicking on an individual name will take you to the...
Page 32: Calls
Understanding the Calls Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Start time The date and time at which the call was placed. Source The alias of the device that placed the call. Destination The alias to which the call was placed.
Page 33: Call History
Understanding the Call History Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Start time The date and time at which the call was placed. Source The alias of the device that placed the call. Destination The alias to which the call was placed.
Page 34: Search History
Understanding the Search History Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Start time The date and time at which the search was initiated. Search Type The type of message being sent. Actions...
Page 35: Local Zone
Understanding the Local Zone Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Subzone Name The names of each subzone currently configured on this VCS. Registrations The number of devices currently registered within each subzone.
Page 36: Zones
MAY 2008 Understanding the Zones Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Name The names of each zone currently configured on this VCS. Type The type of zone. About Zones for a full description of each zone type.
Page 37: Links
MAY 2008 Understanding the Links Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Name The name of each link. Calls The total number of calls currently traversing each link. Note that a single call...
Page 38: Pipes
MAY 2008 Understanding the Pipes Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Name The name of each pipe. Clicking on the name will take you to the Edit Pipe page, where you can configure the pipe.
Page 39: Stun Relays
Understanding the STUN Relays Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Client The IP address and port on the NAT (or the client if there is no NAT) from which the STUN Relay request has come.
Page 40: Warnings
Getting Started Status Configuration D14049.03 MAY 2008 Understanding the Warnings Page Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Warnings Each warning, and where relevant its proposed resolution, is listed here. Firewall Maintenance Appendices Traversal...
Page 41: Event Log
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Search for This field allows you to filter the event log. Enter the text you wish to search for and click Filter. Only those events that contain the text you entered will then be shown.
Page 42: Interpreting The Event Log
Introduction Getting Started Status Configuration D14049.03 MAY 2008 Interpreting the Event Log tvcs for all messages originating from TANDBERG VCS processes, but will differ for messages from third party for further information) Zones and Call Bandwidth Configuration Neighbors Processing Control...
Page 43: Message Details Field
Time Level Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER In addition to the events described below, a syslog.info event containing the string logged after each hour of inactivity to provide confirmation that logging is still active. Description Specifies the destination port: the IP port of the destination for a communication attempt.
Page 44: Events Logged At Level 1
• NTP servers Hardware Failure There is an issue with the VCS hardware. If the problem persists, contact your TANDBERG support representative. License Limit Reached Licensing limits for a given feature have been reached. The event detail field specifies the facility/limits concerned. Possible values for the detail field are: •...
Page 45: D14049.03
H.225 cause code. Optionally, the event parameter specifies the reason why the registration was removed. This is one of: Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Detail event parameter may contain a textual representation of the H.225 Bandwidth Firewall Maintenance...
Page 46: Events Logged At Level 2
(SIP) An outgoing message has been sent. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Events Logged at Level 2 Events Logged at Level 3 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 47: D14049.03
VCS (e.g. DNS, NTP and SNMP). Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 System Configuration Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 48: System Configuration System Administration
(so that you can identify it when it is in a rack with other systems). The system name is also used by TANDBERG’s TMS. If no system name is specified, the LAN1 IPv4 address will be shown instead.
Page 49: Ethernet
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Ethernet speed Sets the speed of the connection between the VCS and the ethernet switch. If you have the Dual Network Interfaces option key installed, you will be able to configure this for both LAN1 and LAN2.
Page 50: Overview
SIP to H.323 gateway. They will therefore require a traversal call licence. Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER IP Configuration IP protocol You can configure the VCS to use IPv4, Both protocols. The default is Both. IPv4:...
Page 51: Lan
LAN Configuration Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE IPv4 address Specifies the IPv4 IP address of the VCS’s LAN1 port.. IPv4 subnet mask Specifies the IPv4 subnet mask of the VCS’s LAN1 port.
Page 52: Dns
IP DN Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuration Address 1 to Address 5 Sets the IP address of a DNS server to be queried when resolving domain names. Domain name...
Page 53: Ntp
Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuration NTP server Sets the IP address or FQDN of the NTP server to be used when synchronizing system time. Time zone Sets the local time zone of the VCS.
Page 54: Snmp
SNMP page. • xConfiguration SNM About SNMP Tools such as TANDBERG Management Suite (TMS) or HP OpenView may act as SNMP Network Management Systems (NMS). They allow you to monitor your network devices, including the VCS, for conditions that might require administrative attention.
Page 55: External Manager
• xConfiguration ExternalManage About the External Manager An External Manager is a remote system, such as the TANDBERG Management Suite (TMS), used to monitor events occurring on the VCS, for example call attempts, connections and disconnections. The use of an External Manager is optional.
Page 56: Backups
Paste this information back in to the command line interface. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 57: Logging
Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Remote Logging Enabling Remote Logging To enable remote logging, you must configure the VCS with the address of the central log server to which the event log will be copied. To do this: •...
Page 58: Log Levels
Logging page. • xConfiguration Log Leve Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Log level Select the level of logging you require. The default is 1. Save Click here to save your changes. View the Event Log...
Page 59: Vcs Configuration
VCS to require endpoints to authenticate with it. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 VCS Configuration menu. These Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 60: H.323
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Auto Discover The VCS has an Auto Discover setting which determines whether it will respond to the Gatekeeper Discovery Requests sent out by endpoints.
Page 61: Configuring H.323
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Registration conflict mode Determines how the system will behave if an endpoint attempts to register an alias currently registered from another IP address. Reject: denies the registration.
Page 62: Sip
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SIP Registration Expiry SIP endpoints must periodically re-register with the SIP Registrar in order to prevent their registration expiring. You can configure the interval with which SIP endpoints must register with the VCS.
Page 63: Using The Vcs As A Sip Proxy Server
At least one of the UDP, TCP or TLS transport protocols must be set to a order for SIP functionality to be supported. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Mode Firewall Maintenance Appendices Traversal...
Page 64: Configuring Sip - Registrations, Protocols And Ports
Click here to save your changes. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE UDP mode Determines whether or not incoming SIP calls using the UDP protocol will be allowed. The default is On. UDP port Specifies the listening port for incoming SIP calls over UDP.
Page 65: Configuring Sip - Domains
Configuring SIP - Domains Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE View/Edit Click here to change the domain name or delete the domain. Name Specifies a domain for which the VCS is authoritative.
Page 66: Interworking
RegisteredOnly: the VCS will act as a SIP-H.323 gateway but only if at least one of the endpoints is locally registered. On: the VCS will act as SIP-H.323 gateway regardless of whether the endpoints are locally registered. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 67: Registration Control
Grey Headline (continued) Registration Control Endpoint Registration In order for an endpoint to use the TANDBERG VCS as its H.323 gatekeeper or SIP Registrar, the endpoint must first register with the VCS. The VCS can be configured to control which devices are allowed to register with it.
Page 68: Finding A Vcs With Which To Register
Manual and they have entered the IP address of the VCS. Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Gatekeeper Discovery on the VCS. The Auto Discovery setting determines whether the VCS responds to H.323 page. setting Bandwidth...
Page 69: Authentication
In order to authenticate with the VCS, the endpoint must supply it with a username. For TANDBERG endpoints using H.323, the username is the endpoint’s Authentication for TANDBERG endpoints using SIP it is the endpoint’s Authentication Username. For details of how to configure...
Page 70: About External Registration Credentials
Authentication Configuration page (shown below). Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Authentication username Authentication Username is the name that the VCS uses when authenticating with other systems. Authentication password Specifies the password to be used by the...
Page 71: Authentication Databases
If no aliases are presented by the endpoint, it will be registered with all the aliases listed in the LDAP database for its username. (This is to allow for MCUs which additively register aliases for conferences, for example the TANDBERG MPS (J4.0 and later) which registers ad-hoc conferences.) (This applies to H.323 only).
Page 72: Configuring Ldap Server Settings
Authentication Databases Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE LDAP Server The IP address or FQDN of the LDAP server. Port The IP port of the LDAP server. The default is 389. Encryption Determines whether the connection to the LDAP server will be encrypted.
Page 73: Authentication Using A Local Database
MAY 2008 Authentication Databases Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Credentials Credentials page shows all the existing entries in the Local Database. You can sort these entries by clicking on the Name column heading.
Page 74: Registering Aliases
Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE A SIP endpoint will always be allowed to register using an alias that is already in use from another IP address. When a call is received for this alias, all endpoints registered using that alias will be called simultaneously.
Page 75: Allow And Deny Lists
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Save Click here to save your changes. Allow Lists and Deny Lists are mutually exclusive: only one may be in use at any given time.
Page 76: Managing Entries In The Allow List
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Registration Allow List This page shows all the existing entries in the Allow List. You can sort these entries by clicking on the relevant column heading.
Page 77: Managing Entries In The Deny List
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Registration Deny List This page shows all the existing entries in the Deny List. You can sort these entries by clicking on the relevant column heading.
Page 78: Zones And Neighbors
Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Local Zone, Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 79: Introduction
Grey Headline (continued) Introduction The most basic implementation of a TANDBERG video communications network is a single VCS connected to the internet with one or more endpoints registered to it. However, depending on the size and complexity of your enterprise...
Page 80: Local Zone And Subzones
100. If you add extra traversal calls to your system, you must also ensure that the range of ports available is sufficient. Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Configuring the Local Zone and its Subzones Bandwidth Firewall Maintenance Appendices...
Page 81: Zones
Traversal Client Zone In order to be able to traverse a firewall, the VCS must be neighbored with a traversal server (for example a TANDBERG VCS Expressway or a TANDBERG Border Controller). In this situation your local VCS is a traversal client, so you neighbor with the traversal server by creating a traversal client zone on your local VCS.
Page 82: Enum Zone
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Default Zone Any incoming calls from endpoints that are not recognized as belonging to any of the existing configured zones are deemed to be coming from the Default Zone.
Page 83: Adding Zones
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring Zones Once you have created a new zone on the local VCS you must configure it appropriately. For traversal server zones, traversal client zones and neighbor zones this will include providing information about the neighbor system such as IP address and ports.
Page 84: Configuring Zones - All Types
These features are described in full in the section searching and alias transforming. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Configuring Zones - All Types Zone Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Bandwidth Firewall Maintenance Appendices Control Traversal ADMINISTRATOR GUIDE...
Page 85: Configuring Neighbor Zones
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Alternate 1 to Alternate 5 address Enter the IP addresses or FQDNs of all Alternates configured on the neighbor system. Firewall Maintenance...
Page 86: Configuring Traversal Client Zones
Configuring Traversal Client Zones Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SIP mode Determines whether SIP calls will be allowed to and from this zone. SIP port Specifies the port on the traversal server to be used for SIP calls to and from the VCS.
Page 87: Configuring Traversal Server Zones
Authentication its Authentication database for this Username. If the username. See traversal client Authentication is a TANDBERG more information. Gatekeeper, this is its System Name. H.323 mode Determines whether H.323 calls will be allowed to and from the traversal client.
Page 88: Configuring Enum Zones
Full details of how to use and configure DNS zones is given in Dialing. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Configuring ENUM Zones Configuring DNS Zones Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 89: Alternates
H.323 re-registrations only. SIP currently has no equivalent. Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Configuring Alternates Alternates page. Alternate 1 to Alternate 5 IP address To configure another VCS as an Alternate, enter its IP address.
Page 90: Dial Plans
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Hierarchical Dial Plan In this type of structure one VCS is nominated as the Directory for the deployment, and all other VCSs are neighbored with it alone. Each...
Page 91: D14049.03
ENUM and URI dialing • how to disconnect calls. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 92: Introduction
Has the alias been found? Place call Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Apply Local Zone Transform Apply Administrator Has the alias been Policy amended? Route call to new Is the alias a FindMe...
Page 93: Dialing By Address Types
Full instructions on how to configure the VCS to support ENUM dialing (both outbound and inbound) are given in ENUM Dialing. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Dialing by H.323 ID or E.164 alias Dialing by H.323 or SIP URI Dialing by ENUM Firewall Maintenance Appendices Traversal...
Page 94: Hop Counts
• xConfiguration Zones Zone [1..200] HopCoun Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE For full details on other zone options, Configuring Zones. Firewall Maintenance Appendices Traversal...
Page 95: Administrator Policy
VCS, calls will be accepted from any endpoint or neighbor. The assumption is that the source alias is trusted, so authentication is not required. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Authentication From Reply-To addresses are not compatible with the alias Firewall Maintenance...
Page 96: Enabling The Use Of Administrator Policy
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Administrator Policy Mode On: Administrator Policy is enabled. If a CPL script has been uploaded, this policy will be used. Otherwise, the policy configured via the Administrator Policy section will be used.
Page 97: Configuring Administrator Policy Via The Web Interface
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Each combination of Source Destination is compared, in the order shown, with the details of the call being made until a match is found. To move a particular item to higher or...
Page 98: Configuring Administrator Policy Via A Cpl Script
MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Downloading policy files Show Policy file Click here to download the Administrator Policy that is currently in place, as an XML-based CPL script. •...
Page 99: User Policy (Findme™)
TANDBERG VCS. The VCS’s User Policy is also known as TANDBERG FindMe™. This feature lets you assign a single “FindMe” name to individuals or groups in your enterprise. Users can determine...
Page 100: Enabling User Policy On The Vcs
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Mode Determines whether or not User Policy will be enabled, and if so, the location of the User Policy Manager. Off: User Policy is not enabled.
Page 101: Managing Findme User Accounts
Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Username The name of the user for whom you are creating an account. This is the name they will use to log in when configuring their FindMe options.
Page 102: Changing A User Password
Managing FindMe User Accounts Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE New password Type the new password to be used along with Username when logging into this account. Confirm password Retype the new password.
Page 103: Deleting A User Account
MAY 2008 Managing FindMe User Accounts Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Tick the box next to the account you wish to delete. To select all the accounts, click on Select All. Delete Click here to delete the selected accounts.
Page 104: Using Tandberg's Findme
Grey Headline (continued) Using TANDBERG’s FindMe™ About your FindMe User Account About FindMe™ The FindMe feature allows you as an individual or part of a group to have a single name on which you can always be called, and you chose where calls to that name will be routed. You can also determine what happens if your first choices are either busy or unanswered after a certain period of time.
Page 105: Configuring Your Findme User Account
Grey Headline (continued) Using TANDBERG’s FindMe™ If no devices are configured for a FindMe name, all calls to that name will be rejected. Username The username for this FindMe account. FindMe name The FindMe name being configured. Type Select whether this FindMe name is to apply...
Page 106: Searches And Transforms
The neighbor’s configuration may also be such that it will transform the alias before searching for it locally. Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Transforming an Alias Before Searching Locally possible CPL modification and Zone transforms. These alias transforms will not have any effect on aliases presented in GRQ or RRQ messages.
Page 107: Configuring Local Alias Transforms
Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Pattern string Specifies the pattern against which the alias is compared. Priority Assigns a priority to this transform. Transforms are applied in order of priority, and the priority must be unique for each transform.
Page 108: Zone Searching And Transforming
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zone Search and Transform Process Zones are queried when an alias has not been found locally. The search and transform process is as follows: The VCS looks at all matches for all zones to find all those with either: •...
Page 109: Configuring Zone Searches And Transforms
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Mode Determines if and when a query will be sent to this zone. Options are: AlwaysMatch: the zone will always be queried. PatternMatch: the zone will only be queried...
Page 110: Examples
To configure the zone so that it is always sent search requests using the original alias, set Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Match 1 AlwaysMatch with a Priority of 1: Firewall...
Page 111: Filter Queries To A Zone Without Transforming
To achieve this, on your local VCS create and configure the zone representing the sales office VCS as shown: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Examples Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 112: Query A Zone For Original And Transformed Alias
To achieve this, on your local VCS configure the zone representing the neighbor VCS as shown: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Examples Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 113: Query A Zone For Two Or More Transformed Aliases
Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Examples Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 114: Uri Dialing
DNS. Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Enabling URI Dialing URI dialing is enabled separately for outgoing and incoming calls. Outgoing Calls To enable endpoints registered to your VCS to place calls to non- locally registered endpoints directly using URI dialing, you must: •...
Page 115: Uri Dialing For Outgoing Calls
DNS resolution process. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Mode of AlwaysMatch. This will result in Mode PatternMatch Pattern type fields to define the aliases that will trigger a DNS query. Pattern string...
Page 116: Adding And Configuring Dns Zones
URI Dialing for Outgoing Calls Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Name Assigns a name to this zone. Type For DNS zones, this will be DNS. Hop count Specifies the hop count to be used when sending an alias search request to this zone.
Page 117: Configuring Dns Servers
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Address 1 to Address 5 Enter the IP address(es) of up to 5 DNS servers that the VCS will query when attempting to locate a domain.
Page 118: Uri Dialing For Incoming Calls
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring SIP SRV Records RFC 3263 [16] describes the DNS procedures used to resolve a SIP URI into the IP address, port, and transport protocol of the next hop to contact.
Page 119: Example Dns Record Configuration
This ensures that incoming calls placed using URI dialing enter the enterprise through the VCS Expressway, allowing successful traversal of the firewall. vcs.example.com Configuration. Local Zone Transform that would Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER URI Dialing and Firewall Traversal Bandwidth Firewall Maintenance Appendices Control Traversal ADMINISTRATOR GUIDE Configuration).
Page 120: Enum Dialing
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Enabling ENUM Dialing ENUM dialing is enabled separately for incoming and outgoing calls. Outgoing Calls To allow locally registered endpoints to dial out to other endpoints using ENUM, you must •...
Page 121: Enum Dialing For Outgoing Calls
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Example In this example, we wish to call Fred at Example Corp. Fred’s endpoint is actually registered with the URI fred@example.com, but to make it easier to contact him his system administrator has configured a DNS NAPTR record mapping this alias to his E.164 number: +44123456789.
Page 122: Configuring Matches For Enum Zones
To verify that you have configured your outward ENUM dialing correctly, use the xCommand Locate Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE for full information). command to try and resolve an E.164 alias. Firewall Maintenance Appendices Traversal...
Page 123: Configuring Enum Zones
ENUM Dialing for Outgoing Calls Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Name Assigns a name to this zone. Type For ENUM zones, this will be ENUM. Hop count Specifies the hop count to be used when sending an alias search request to this zone.
Page 124: Configuring Dns Servers
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Address 1 to Address 5 Enter the IP address(es) of up to 5 DNS servers that the VCS will query when attempting to locate a domain.
Page 125: Enum Dialing For Incoming Calls
2.4.1 of RFC 3761 [8], Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Example For example, the record: • IN NAPTR 10 100 "u" "E2U+h323" "!^(.*)$!h323:\1@ example.com!" . would be interpreted as follows: •...
Page 126: Unregistered Endpoints
Calls to unknown IP addresses Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER To configure how the VCS will behave when receiving a call for an IP address that is not registered locally: • VCS Configuration > Calls You will be taken to the •...
Page 127: Fallback Alias
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Example Usage You may wish to configure your Fallback Alias to be that of your receptionist, so that all calls that do not specify an alias will still be answered personally and can then be redirected appropriately.
Page 128: Disconnecting Calls
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Obtaining the Call ID/Serial Number To control calls using the CLI, you must reference the call using either its call ID or serial number. These can be obtained using the command: •...
Page 129: Disconnecting A Call Via The Web Interface
(depending on the type of call being made). The call will not actually disconnect until the SIP endpoints involved have also cleared their resources. Endpoints that support clear the resources of any hung SIP calls after a certain period of time. This includes all TANDBERG endpoints. Zones and Call Bandwidth...
Page 130: Bandwidth Control
Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Local Zone Bandwidth Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 131: Bandwidth Control Overview
Grey Headline (continued) Bandwidth Control Overview Bandwidth Control on the VCS The TANDBERG VCS allows you to control The diagram below shows a typical network deployment: the amount of bandwidth used by endpoints • a broadband LAN between the Enterprise and the internet, where high bandwidth calls are acceptable on your network.
Page 132: Subzones
In addition, since this call passes through the Traversal Subzone, it will consume an amount of for instructions on how to do bandwidth from the Traversal Subzone equal to that of the call. Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER About the Traversal Subzone traversal Bandwidth Firewall Maintenance Appendices...
Page 133: Creating A Subzone
Click here to create the subzone and return to the subzones page. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Creating a Subzone Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 134: Configuring A Subzone
Save Click here to save your changes. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Configuring a Subzone Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 135: Applying Bandwidth Limitations To Subzones
In addition, since this call passes through the Traversal Subzone, it will consume an amount of bandwidth from the Traversal Subzone equal to that of the call. Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER between two endpoints within the same subzone would consume from traversal call between two endpoints Bandwidth Firewall...
Page 136: Links
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Name Enter the name you wish to assign to this link. Node 1, Node 2 Select the names of the two subzones, or the subzone and zone between which you wish to create a link.
Page 137: Editing Links
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Name Enter the name you wish to assign to this link. Node 1, Node 2 Select the names of the two subzones, or the subzone and zone between which you wish to create a link.
Page 138: Default Links
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Automatically Created Links Whenever a new subzone or zone is created, links are automatically created as follows: New zone/subzone type Default links are created to...
Page 139: Pipes
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Name Enter the name you wish to give to this pipe. You will refer to this name when creating links. Bandwidth restriction Determines whether there is a limit on the total concurrent bandwidth of this pipe.
Page 140: Editing Pipes
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Name Enter the name you wish to give to this pipe. You will refer to this name when creating links. Bandwidth restriction Determines whether there is a limit on the total concurrent bandwidth of this pipe.
Page 141: Applying Pipes To Links
MAY 2008 Applying Pipes to Links HEAD OFFICE Default Subzone Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE VCS CONTROL HOME OFFICE INTERNET Pipe A Pipe B Home Office Subzone Pipe C BRANCH OFFICE...
Page 142: Default Bandwidth And Downspeeding
Off: the call will not be placed. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Default call bandwidth (kbps) Enter the bandwidth value to be used for calls for which no bandwidth value has been specified by the system that initiated the call.
Page 143: Bandwidth Control Examples
Example Without a Firewall HEAD OFFICE Pipe A Default Subzone Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE VCS CONTROL HOME OFFICE INTERNET Pipe B Home Office Subzone Pipe C BRANCH OFFICE Branch Office...
Page 144: Example With A Firewall
Grey Headline (continued) Bandwidth Control Examples If we modify the previous example deployment to include firewalls between the offices, we can use TANDBERG’s Expressway™ firewall traversal solution to maintain connectivity. We do this by adding a VCS Expressway outside the firewall on...
Page 145: Firewall Traversal
It also describes how to configure the additional firewall traversal server functions of a VCS Expressway, including STUN services. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 146: Firewall Traversal Overview
• In order for the VCS Expressway to act as a firewall traversal server for TANDBERG systems, you must create and configure a new traversal server zone on the VCS Expressway for every system that is its traversal client. See Server for full instructions.
Page 147: Quick Guide To Vcs Traversal Client - Server Configuration
Server Zone on the VCS Expressway. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 VCS Control (Client)   Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE VCS Expressway (Server)   Firewall Maintenance Appendices Traversal...
Page 148: Firewall Traversal Protocols And Ports
H.323 Firewall Traversal Protocols The VCS supports two different firewall traversal protocols for H.323: Assent and H.460.18/H.460.19. • Assent is TANDBERG’s proprietary protocol. • H.460.18 and H.460.19 are ITU standards which define protocols for the firewall traversal of signaling and media respectively.
Page 149: Ports For Initial Connections From Traversal Clients
SRV records in DNS or by direct configuration. Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER H.460.18/19 Ports Ports for Connections out to the Public Internet protocols, the default ports In situations where the VCS Expressway is...
Page 150: Firewall Traversal And Authentication
The endpoint client provides its the VCS Expressway will accept the request Password. from the client. TANDBERG Gatekeeper (version 5.2 and earlier) The settings used for authentication depend on the combination of client and server being • The Gatekeeper looks up its used.
Page 151: Other Issues
VCS Expressway back to the originating client. TANDBERG offers a downloadable tool, the Expressway Port Tester, that allows you to test your firewall configuration for compatibility issues with your network and endpoints. It will advise if necessary which ports may need to be opened on your firewall in order for the Expressway™...
Page 152: Configuring The Vcs As A Traversal Client
(e.g. You will be taken to the • xCommand ZoneAd a TANDBERG VCS Expressway or Border Controller). You do this by adding a new traversal client zone on the VCS client and configuring it with the details of the traversal server.
Page 153: Configuring A Traversal Client Zone
Configuring a Traversal Client Zone Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SIP mode Determines whether SIP calls will be allowed to and from this zone. SIP port Specifies the port on the traversal server to be used for SIP calls from this VCS.
Page 154: Configuring The Vcs As A Traversal Server
Select New. • Allow your VCS to act as a traversal server You will be taken to the for other VCSs and TANDBERG Gatekeepers. • xCommand ZoneAd You do this by adding a new traversal server zone on the VCS, and configuring it with details of the traversal client.
Page 155: Configuring A Traversal Server Zone
Expressway. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SIP mode Determines whether SIP calls will be allowed to and from the traversal client. SIP port Specifies the port on the VCS Expressway to be used for SIP calls from the traversal client.
Page 156: Configuring Traversal For Endpoints
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE UDP probe retry interval Sets the frequency (in seconds) with which locally registered endpoints will send a UDP probe to the VCS Expressway. UDP probe retry count...
Page 157: Configuring Traversal Server Ports
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Media demultiplexing RTP port Specifies the port on the VCS to be used for demultiplexing RTP media. Media demultiplexing RTCP port Specifies the port on the VCS to be used for demultiplexing RTCP media.
Page 158: Stun Services
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE STUN Relay The STUN Relay service (formerly known as TURN) allows a client to ask for data to be relayed to it from specific remote peers via the relay server and through a single connection between the client and the relay server.
Page 159: Configuring Stun Services
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE STUN discovery mode Determines whether the VCS will offer STUN Discovery services to traversal clients. STUN discovery port Specifies the port on the VCS on which it will be listening for STUN Discovery requests.
Page 160: D14049.03
Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Maintenance menu of the Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Bandwidth Firewall Maintenance Appendices Control Traversal ADMINISTRATOR GUIDE...
Page 161: Upgrading Software
X1.2 to X2.0; it is not required for dot releases, e.g. X2.0 to X2.1) • a software image file. Contact your TANDBERG representative for more information on how to obtain these. Installing and Restarting Upgrading software is a two-stage process. Firstly, the new software image is uploaded onto the VCS.
Page 162: Upgrading Via The Web Interface
Upgrading via the Web Interface Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE System Information This section tells you about the software and hardware that currently make up your system. Release key Enter the 16-character Release Key that has been provided to you.
Page 163: Option Keys
Your system may have come with one or more of these options pre-configured. Further options can be installed by obtaining a valid Option Key and installing it on your system. Contact your TANDBERG representative for more information on how to obtain Option Keys. Options can be installed in either of two ways: •...
Page 164: Adding Options Via The Web Interface
Adding Options via the Web Interface Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE This section lists the keys that are already installed on your system along with a description of the options they provide. System Information...
Page 165: Security
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Select the file containing... Allows you to upload a PEM file that identifies the list of Certificate Authorities trusted by the VCS. The VCS will only accept certificates signed by a CA on this list.
Page 166: Passwords
The username is always admin (all lower case); this can not be changed. The default password is TANDBERG (all upper case). You should change this as soon as possible. We recommend that you choose a strong password, particularly if administration over IP is enabled.
Page 167: System Snapshot
The information contained in these reports can then be used by TANDBERG technical support to diagnose the cause of the failures. This feature is only intended for use at the request of TANDBERG technical support in exceptional situations, and is OFF by default.
Page 168: Restarting
Do not restart the system while the red ALM LED on the front of the box is on. This indicates a hardware fault. Contact your TANDBERG representative. To restart the VCS: • Maintenance > Restart...
Page 169: Shutting Down
Do not shutdown the system while the red ALM LED on the front of the box is on. This indicates a hardware fault. Contact your TANDBERG representative. To shut down the VCS: • Maintenance > Shutdown...
Page 170: Restoring Default Configuration
Configuration D14049.03 MAY 2008 DefaultValuesSet Level 3 Default value after xCommand DefaultValuesSet Level: 3 Configuration item SystemUnit Name <blank field> SystemUnit Password TANDBERG Option [1..64] Key <all option keys are deleted> IPProtocol IPv4 IP Gateway 127.0.0.1 IP V6 Gateway <blank>...
Page 171: D14049.03
Command Referenc • xStatus Command Referenc • Bibliograph • Glossar Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 172: Cpl Reference
This Appendix gives details of the VCS’s implementation of the CPL language and should be read in conjunction with the CPL standard RFC 3880 [5] and the The VCS supports most of the CPL standard along with some TANDBERG-defined extensions. It <incoming> does not support the top level actions <routed>...
Page 173: Field
Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE H.323 The source aliases from the original LRQ or ARQ that started the call. If a SETUP is received without a preceding RAS message then the origin is taken from the SETUP.
Page 174: Subfield
(see the example Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE not-present address-switch was not Call Screening of Unauthenticated Users). Firewall...
Page 175: Location
Field section. Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER proxy On executing a proxy node the VCS will attempt to forward the call to the locations specified in the current location set. If multiple entries are in the location set then this results in a forked call.
Page 176: Cpl Examples
In this example, only calls from users with authenticated source addresses are allowed. See the section on Authentication for details on how to enable authentication. <?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl" xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd"> <taa:routed> <address-switch field="origin"> <not-present> ...
Page 177: Call Screening Based On Domain
In this example, user fred will not accept calls from anyone at annoying.com, or from any unauthenticated users. All other users will allow any calls. <?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl" xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd"> <taa:routed> <address-switch field="destination"> <address is="fred">...
Page 178: Allow Calls From Locally Registered Endpoints Only
In this example, the administrator only wants to allow calls that originate from locally registered endpoints. <?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl" xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd"> <taa:routed> <address-switch field="registered-origin"> <not-present> <reject status="403" reason="Only local endpoints can use this Tandberg VCS"/> </not-present> </address-switch> </taa:routed> </cpl> Overview and System Introduction Getting Started Status Configuration D14049.03...
Page 179: Restricting Access To A Local Gateway
We can do this in two ways: using the Examples of each are shown below. Using the address-switch node <?xml version="1.0" encoding="UTF-8" ?> <cpl xmlns="urn:ietf:params:xml:ns:cpl" xmlns:taa="http://www.tandberg.net/cpl-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:cpl cpl.xsd"> <taa:routed> <address-switch field="destination"> <address regex="9(.*)"> <address-switch field="originating-zone">...
Page 180: Regular Expression Reference
When used immediately after an opening brace, negates the character set inside the brace. ^\d\d\d$ Signifies the end of a line. (?!.*@tandberg.net$).* Negative lookahead. Defines a subexpression that must tandberg.net. be present in order for there to be a match.
Page 181: Pattern Variable Reference
Matches the VCS’s System Name. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE When used in a Replace field not applicable not applicable Replaces the string with the LAN 1 IPv4 address. Replaces the string with the LAN 2 IPv4 address.
Page 182: Vcs Port Reference
Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Two services or functions cannot share the same port and protocol; if you attempt to change an existing port or range and it conflicts with another service, you will get a warning message.
Page 183: D14049.03
VCS Configuration > Protocols > SIP > Configuration TCP/TLS xConfiguration SIP TCP Outbound Port Start xConfiguration SIP TCP Outbound Port End Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SIP TCP Port SIP TLS Port Firewall Maintenance Appendices Traversal...
Page 184: D14049.03
32768 - 65535 is used a random source port in the range 32768 - 65535 is used Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Bandwidth Firewall Maintenance Appendices Control Traversal...
Page 185: Dns Configuration
For more details of how to configure BIND servers and the DNS system in general see the publication Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE BIND 8 & 9 option, then the path following that is DNS and BIND Firewall Maintenance...
Page 186: Ldap Configuration
<ldap _ base> Schemas. You will see a list of Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Microsoft Active Directory downloaded the H.350 schemas, install them as follows: is the base DN for your Active Directory server. Bandwidth...
Page 187: Adding H.350 Objects
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Securing with TLS To enable Active Directory to use TLS, you must request and install a certificate on the Active Directory server. The certificate must meet the following requirements: •...
Page 188: Openldap
/etc/openldap/schemas/commobject.ldif include /etc/openldap/schemas/h323identity.ldif include /etc/openldap/schemas/h235identity.ldif include /etc/openldap/schemas/sipidentity.ldif The OpenLDAP daemon (slapd) must be restarted for the new schemas to take effect. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 189: Adding H.350 Objects
Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Securing with TLS The connection to the LDAP server can be encrypted by enabling Transport Level Security (TLS) on the connection. To do this you must create an X.509 certificate for the LDAP server to allow the VCS to verify the server’s identity.
Page 190: Command Reference - Xconfiguration
Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Overview Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 191: D14049.03
System Introduction Getting Started Status Configuration D14049.03 MAY 2008 to enable both web interface and TMS access. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE turns session time outs off. Firewall Maintenance Appendices Traversal...
Page 192: D14049.03
Sets the bandwidth (in kbps) to be used on calls managed by the VCS in cases where no bandwidth has been specified by the endpoint. Default: 384 xConfiguration Bandwidth Default: 384 Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 193: D14049.03
Default: 1920 xConfiguration Bandwidth Pipe 1 Bandwidth PerCall Limit: 256 Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 194: D14049.03
Note: You must restart the system for any changes to take effect. xConfiguration Error Reports Mode: Off Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 195: D14049.03
H323 Gatekeeper AutoDiscovery Mode: On Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Auto to automatically configure the speed. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 196: D14049.03
Specifies the interval (in seconds) at which an H.323 endpoint must re-register with the VCS in order to confirm that it is still functioning. Default: 1800 xConfiguration H323 Gatekeeper TimeToLive: 1800 Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 197: D14049.03
Specifies an IP Address used in conjunction with the Prefix Length to determine the network to which this route applies. xConfiguration IP Route 1 Address: "128.168.0.0" Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 198: D14049.03
Sets the IP port of the LDAP server to be used when making LDAP queries. Default: 389 xConfiguration LDAP Server Port: 389 Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 199: D14049.03
Example: Option [1..64] Key: <S: 0, 90> Specifies the option key of your software option. These are added to the VCS in order to add extra functionality, such as increasing the VCS’s capacity. Contact your TANDBERG representative for further information.
Page 200: D14049.03
Specifies the policy to be used when determining which endpoints may register with the system. Default: None xConfiguration Registration RestrictionPolicy: None Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 201: D14049.03
Specifies the lower port in the range to be used by outbound TCP/TLS SIP connections. Default: 25000 xConfiguration SIP TCP Outbound Port Start: 25000 Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 202: D14049.03
Specifies the name of the person who can be contacted regarding issues with the VCS. xConfiguration SNMP SystemContact: "John Smith" Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 203: D14049.03
Regex: the string will be treated as a regular expression. xConfiguration Transform 1 Pattern Type: Suffix Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 204: D14049.03
Determines whether the VCS will offer STUN discovery services to traversal clients. Default: On xConfiguration Traversal Server STUN Discovery Mode: On Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 205: D14049.03
Default: 1920 xConfiguration Zones LocalZone DefaultSubZone Bandwidth PerCall Intra Limit: 1920 Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 206: D14049.03
Zones LocalZone SubZone 1 Bandwidth PerCall Intra Mode: Limited Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 207: D14049.03
Default: On xConfiguration Zones LocalZone Traversal H323 H46018 Mode: On Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 208: D14049.03
Default: 5 xConfiguration Zones LocalZone Traversal H323 UDPProbe RetryCount: 5 Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 209: D14049.03
Determines whether H.323 calls will be allowed to and from this zone. Default: On xConfiguration Zones Zone 1 H323 Mode: On Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 210: D14049.03
Default: Prefix xConfiguration Zones Zone 1 Match 1 Pattern Type: Suffix Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 211: D14049.03
Specifies the IP Address or Fully Qualified Domain Name (FQDN) of any Alternates of the traversal server. xConfiguration Zones Zone 2 TraversalClient Alternate 1 Address: "10.192.168.2" Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 212: D14049.03
System Name. xConfiguration Zones Zone 3 TraversalServer Authentication UserName: "User123" Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 213: D14049.03
Default: 5 xConfiguration Zones Zone 3 TraversalServer TCPProbe RetryCount: 5 Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 214: D14049.03
DNS: the new zone contains endpoints discoverable by DNS lookup. xConfiguration Zones Zone 1 Type: Neighbor Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 215: Command Reference - Xcommand
Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Overview indicates that this is a Zones and Call Configuration Neighbors Processing TANDBERG VIDEO COMMUNICATIONS SERVER Bandwidth Firewall Maintenance Appendices Control Traversal ADMINISTRATOR GUIDE...
Page 216: D14049.03
CheckBandwidth Node1: "DefaultSubzone" Node2: "UK Sales Office" Bandwidth: 512 CallType: nontraversal Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 217: D14049.03
Restores links between the Default Subzone, Traversal Subzone and the Default Zone. This command has no parameters. xCommand DefaultLinksAdd Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 218: D14049.03
DomainAdd DomainName: "example.com" Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Restoring Default Configuration Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE for full details. Firewall Maintenance Appendices Traversal...
Page 219: D14049.03
The ID of the feedback request to be deactivated. xCommand FeedbackDeregister ID: 1 Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 220: D14049.03
The alias that you wish to find out about. xCommand FindRegistration Alias: "john.smith@example.com" Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 221: D14049.03
Locate Alias: "john.smith@example.com" HopCount: 15 Protocol: SIP Example: OptionKeyAdd Adds a new option key to the VCS. These are added to the VCS in order to add extra functionality, such as increasing the VCS's capacity. Contact your TANDBERG representative for further information. Key(r): <S: 0, 90>...
Page 222: D14049.03
The serial number of the registration to be removed. xCommand RemoveRegistration RegistrationSerialNumber: "a761c4bc-25c9-11b2-a37f-0010f30f521c" Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 223: D14049.03
SubZoneAdd SubZoneName: "BranchOffice" Address: "10.13.0.0" PrefixLength: 28 TotalMode: Limited Total: 1024 PerCallInterMode: Example: Limited PerCallInter: 512 PerCallIntraMode: Limited PerCallIntra: 512 Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 224: D14049.03
ENUM: the new zone contains endpoints discoverable by ENUM lookup. DNS: the new zone contains endpoints discoverable by DNS lookup. xCommand ZoneAdd ZoneName: "UK Sales Office" Type: Neighbor Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 225: D14049.03
The alias to be searched for. xCommand ZoneList Alias: "john.smith@example.com" Example: Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 226: Command Reference - Xstatus
Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Overview xStatus element returns information about one or more sub-elements. xStatus command. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 227: D14049.03
Grey Headline (continued) Headline Text Goes Here Command Reference - xStatus SystemUnit: Product: TANDBERG VCS Uptime: <Time in seconds> SystemTime: <Time not set/date-time> TimeZone: <GMT or one of 300 other timezones> LocalTime: <local-date-time> Software: Version: X2.0 Build: <Number/Uncontrolled> Name: “Release”...
Page 228: D14049.03
Gateway: <IPv6Addr> DNS: Server [1-5]: Address: <IPv4Addr/IPv6Addr> Domain: <S: 0, 128> Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 229: D14049.03
Feedback [1..3]: Status: <On/Off> URL: <S: 1,255> Expression: <S: 1,127> {0..15 entries} Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 230: D14049.03
H323: {visible if Protocol = H323} CallSignalAddress: <IPv4Addr/[IPv6Addr]>:<1..65534> Aliases: Alias [1..50]: Type: <E164/H323Id> Value: <S: 1,60> Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 231: D14049.03
Allocated: <0..100000000> kbps Route: Zone/Link: <S: 1,50 Node name> {0..150 entries} Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 232: D14049.03
AOR: <S: 1,128> Contact: <S: 1,255> Path: URI [1..10]: <S: 1,255> Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 233: D14049.03
CallId: <S: 1,255> SubZone: [0..100] Name: <S: 1,50 Node name> Bandwidth: Used: <0..100000000> Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 234: D14049.03
Address: <IPv4Addr/IPv6Addr> {One Address line per address from DNS lookup} Port: <1..65534> LastStatusChange: <Time not set/Date Time> Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 235: D14049.03
Address: <IPv4Addr/IPv6Addr> {One Address line per address from DNS lookup} Port: <1..65534> LastStatusChange: <Time not set/Date Time> Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 236: D14049.03
Address: <IPv4Addr/IPv6Addr> {One Address line per address from DNS lookup} Port: <1..65534> LastStatusChange: <Time not set/Date Time> Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 237: D14049.03
Bandwidth: Used: <0..100000000> Calls: Call [0..900]: {0..900 entries} CallSerialNumber: <S: 1,255> Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 238: D14049.03
Mode: <Off/Local/Remote> Status: <Active/Inactive/Unknown> {Visible if Remote} Address: <1..1024> {Visible if Remote} Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 239: D14049.03
Address: <IPv4Addr> {1..2 entries} IPv6: {Visible if Status=Active} Address: <IPv6Addr> {1..2 entries} Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 240: D14049.03
Address: <IPv6Addr> TCP: Status: <Active/Inactive/Failed> Address: <IPv6Addr> TLS: Status: <Active/Inactive/Failed> Address: <IPv6Addr> Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 241: D14049.03
CreationTime: <Date Time> ExpireTime: <Date Time> Warnings: Warning [1..n]: Value: <S: 1,255> Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 242: Bibliography
RFC 2460: Internet Protocol, Version 6 (IPv6) Specification RFC 3261: SIP: Session Initiation Protocol RFC 3489: STUN - Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATs) XML and Writing CPL for TANDBERG Infrastructure products Rev 1.2 Overview and System...
Page 243: Glossary
Crossing a firewall or NAT device. FindMe™ A TANDBERG feature that allows users to have a single alias on which they can be reached regardless of the endpoint(s) they are currently using. FQDN A domain name that specifies the node’s position in the DNS tree absolutely, uniquely identifying the system or device. Note that in order to use FQDNs instead of Fully Qualified Domain Name IP Addresses when configuring the VCS, you must have at least one DNS server configured.
Page 244: D14049.03
In relation to the VCS, a node is one end of a link. A node can be a local subzone or a zone. Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 RFC 791 [18]. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Maintenance Appendices Traversal...
Page 245: D14049.03
Overview and System Introduction Getting Started Status Configuration D14049.03 MAY 2008 RFC 3550 [17]. RFC 3550 RFC 3261 [20]. RFC 3489 [21]. Zones and Call Bandwidth Configuration Neighbors Processing Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE [17]. Firewall Maintenance Appendices Traversal...
Page 246: D14049.03
A traversal entity on the private side of a firewall. Examples are a TANDBERG Gatekeeper or TANDBERG VCS Control. Traversal Server A traversal entity on the public side of a firewall. Examples are the TANDBERG Border Controller and the TANDBERG VCS Expressway. Traversal-enabled endpoint Any endpoint that supports the Assent and/or ITU H.460.18 and H.460.19 standards for firewall traversal.
Page 247: Contact Information
Philip Pedersens vei 20, 1366 Lysaker, Norway Telephone: +47 67 125 125 Fax: +47 67 125 234 Video: +47 67 126 126 E-mail: tandberg@tandberg.com U.S. HEADQUARTERS Telephone: +1 212 692 6500 Fax: +1 212 692 6501 Video: +1 212 692 6535 E-mail: tandberg@tandberg.com...

TANDBERG Security Camera Administrator's Manual

Quick Links

Related Manuals for TANDBERG Security Camera

Summary of Contents for TANDBERG Security Camera