Firewall Traversal And Authentication; Overview; Client Type And Client Settings; Server Type And Server Settings - TANDBERG VCS Administration Manual

Firewall Traversal

Overview

In order to control usage of the VCS as a
traversal server, each VCS or Gatekeeper that
wishes to be its client must first authenticate
with it.
Upon receiving the initial connection request
from the traversal client, the VCS Border
Controller asks the client to authenticate
itself by providing a username and password.
The server then looks up the username and
password in its own authentication database.
If a match is found, the VCS server will accept
the request from the client.
The settings used for authentication depend
on the combination of client and server
being used. These are detailed in the table
opposite.
When acting as a VCS Border
Controller, authentication is required
from all VCS and Gatekeeper clients
regardless of the VCS's Authentication Mode
setting. This setting will however still
determine whether or not endpoint clients are
required to authenticate.
Getting System
Introduction
Started Overview
D 14049.01
07.2007

Firewall Traversal and Authentication

Client Type and Client Settings

VCS
•
The VCS client provides its Authentication Username
Authentication Password. These are set on the client via
Configuration > Authentication > Configuration.
Endpoint Client
•
The endpoint client provides its Authentication ID
Password.
Gatekeeper Client
•
The Gatekeeper client looks up its System Name
authentication database and retrieves the password for that name.
It then provides this name and password.
VCS
•
If Authentication is On on the Border Controller, the VCS client
provides its Authentication Username
These are set on the client via
VCS Configuration > Authentication >
Configuration.
•
If the Border Controller is in Assent mode, the VCS client provides
its Authentication Username. This is set on the client via
Configuration > Authentication > Configuration.
System H.323 & SIP Registration
Configuration Configuration Control

Server Type and Server Settings

VCS Border Controller
•
and The traversal server zone for that client must be configured with the
VCS client's
Zones > Edit
•
There must also an entry in the server's authentication database
with the corresponding username and password.
VCS Border Controller
•
and Authentication There must be an entry in the server's authentication database with
the corresponding username and password.
VCS Border Controller
•
in its own The traversal server zone for the Gatekeeper client must
be configured with the Gatekeeper's
in the
VCS Configuration > Zones > Edit
•
There must be an entry in the server's authentication database with
the corresponding username and password.
Border Controller
•
If Authentication is On on the Border Controller, there must be
and Authentication Password. an entry in the Border Controller's authentication database
that matches the VCS client's
Authentication
•
If the Border Controller is in Assent mode, the traversal zone
configured on the Border Controller to represent the VCS client must
VCS
use the client's
name
Assent > Account
Zones and Call
Neighbors Processing
00 00
TANDBERG VIDEO COMMUNICATION SERVER
Authentication Username. This is set via
Zone.
System Name
Authentication Username field. This is set via
Zone.
Authentication Username
Password.
Authentication Username in the Assent
field. This is set on the Border Controller via
name.
Firewall Firewall Bandwidth
Maintenance
Traversal Traversal Control
ADMINISTRATOR GUIDE
VCS Configuration >
and
Account
TraversalZone >
Appendices