Allow And Deny Lists; About Allow And Deny Lists; Patterns And Pattern Types; Activating Use Of Allow Or Deny Lists - TANDBERG VCS Administration Manual

Registration Control Text goes here

About Allow and Deny Lists

When an endpoint attempts to register with
the VCS it presents a list of aliases. You can
control which endpoints are allowed to register
by setting the Restriction Policy to AllowList
or DenyList and then including any one of the
endpoint's aliases on the Allow List or the
Deny list as appropriate. Each list can contain
up to 2,500 entries. When an endpoint
attempts to register, each of its aliases is
compared with the patterns in the relevant list
to see if it matches. Only one of the aliases
needs to appear in the Allow List or the Deny
List for the registration to be allowed or
denied.
For example, If the Registration Restriction
policy is set to DenyList and an endpoint
attempts to register using three aliases, one
of which matches a pattern on the Deny list,
that endpoint's registration will be denied.
Likewise, if the Registration Restriction policy
is set to AllowList, only one of the endpoint's
aliases needs to match a pattern on the Allow
list for it to be allowed to register using all its
aliases.

Patterns and Pattern Types

Entries on the Allow List and Deny List are a
combination of Pattern and Type. The Pattern
specifies the string to be matched; the Type
determines whether that string;
•
must match the Pattern exactly (Exact)
•
must appear at the start of the alias
(Prefix)
•
must appear at the end of the alias (Suffix)
•
is in the form of a Regular Expression
(Regex).
Getting System
Introduction
Started Overview
D 14049.01
07.2007

Allow and Deny Lists

Activating use of Allow or Deny Lists

To activate the use of Allow or Deny lists to determine which aliases are allowed to register with the VCS:
•
VCS Configuration > Registration > Configuration.
You will be taken to the Registration Configuration
•
xConfiguration Registration RestrictionPolicy
Restriction policy
Specifies the policy to be used when determining which endpoints may register with the VCS.
None: Any endpoint may register.
AllowList: Only those endpoints with an alias that matches an entry in the Allow List may register.
DenyList: All endpoints may register, unless they match an entry on the Deny List.
The default is None.
System H.323 & SIP Registration Registration
Configuration Configuration Control Control
page.
Zones and Call
Neighbors Processing
46
TANDBERG TANDBERG VIDEO COMMUNICATION SERVER VIDEO COMMUNICATION SERVER
ADMINISTRATOR GUIDE ADMINISTRATOR GUIDE
Save
Click here to save your changes.
Allow Lists and Deny Lists are mutually
exclusive: only one may be in use at
any given time.
Firewall Bandwidth
Maintenance
Traversal Control
Appendices