Video Communication Server ADMINISTRATOR GUIDE Version X3.0 July 2008 Introduction D14049.
Grey Headline (continued) What’s in this Manual? TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Preamble Introduction Getting Started Legal Notices........................................................................ 10 The TANDBERG VCS............................................................... 14 Installation............................................................................ 20 Disclaimer....................................................................... 10 Overview.
Grey Headline (continued) What’s in this Manual? TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview and Status Local Zone............................................................................ 39 Configuration Log................................................................... 52 Overview............................................................................... 28 Viewing the Local Zone Page............................................
Grey Headline (continued) What’s in this Manual? TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE NTP....................................................................................... 59 H.323 Endpoint Registration............................................ 65 Authentication..................................................................74 Overview......................................................................... 59 Overview......................................................
Grey Headline (continued) What’s in this Manual? TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones and Neighbors TMS.......................................................................... 97 Call Processing Introduction........................................................................... 84 What Configuration is and isn’t Replicated?...................... 97 Introduction.........................................................................
Grey Headline (continued) What’s in this Manual? TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Examples...................................................................... 110 URI Dialing for Incoming Calls......................................... 122 Unregistered Endpoints........................................................ 130 Combining Match Types and Priorities....................... 110 Types of DNS Records Required...............................
Grey Headline (continued) What’s in this Manual? TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About the Traversal Subzone.......................................... 136 Bandwidth Control Examples.................................................147 Firewall Traversal and Authentication.................................... 154 Traversal Calls......................................................... 136 Example Without a Firewall..............................................147 Overview......
Grey Headline (continued) What’s in this Manual? TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Applications Enabling and Disabling Presence Services.......................174 Option Keys......................................................................... 181 FindMe™ (User Policy).......................................................... 165 PUA . .......................................................................174 Overview........................................................
Grey Headline (continued) What’s in this Manual? TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Password Encryption............................................................ 192 Regular Expression Reference.............................................. 202 Command Reference - xConfiguration................................... 212 Overview....................................................................... 192 Overview......................................................................
Preamble Legal Notices Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Disclaimer Intellectual Property Rights The specifications for the product and the information in this Administrator Guide are subject to change at any time, without notice, by TANDBERG.
Grey Headline (continued) Safety Instructions and Approvals TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Safety Instructions For your protection please read these safety instructions completely before you connect the equipment to the power source. Carefully observe all warnings, precautions and instructions both on the apparatus and in these operating instructions. Retain this manual for future reference.
Grey Headline (continued) Environmental Issues TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Thank you for buying a product which contributes to a reduction in pollution, and thereby helps save the environment. Our products reduce the need for travel and transport and thereby reduce pollution. Our products have either none or few consumable parts (chemicals, toner, gas, paper). Our products are low energy consuming products.
TANDBERG CONTENT SERVER USER GUIDE TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Grey Headline (continued) Environmental Issues Table of What’s New in Contents this Version? Introduction Getting Started D 13898.04 DECEMBER 2006 D14049.
Introduction Grey Headline (continued) The TANDBERG VCS TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview VCS and the TANDBERG Total Solution The TANDBERG Video Communication Server (VCS) enhances the video experience and provides seamless communication between SIP and H.323 devices utilizing IETF and ITU standards. The VCS is the center of the video communication network, and connects all H.323 and SIP endpoints, infrastructure, and management devices.
Grey Headline (continued) The TANDBERG VCS TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE VCS Base Applications VCS Control VCS Expressway™ The VCS Control provides internal video control and administration for all SIP and H.323 devices. It is normally deployed within your wide area network with endpoints that are behind the same firewalls or NAT devices. The VCS Expressway provides standards-based firewall traversal for SIP and H.
Grey Headline (continued) The TANDBERG VCS TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Standard Features • H.323 gatekeeper • SIP Proxy/Registrar • SIP Presence Server • SIP Presence User Agent • SIP and H.323 support, including SIP/H.
Grey Headline (continued) The TANDBERG VCS TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE What’s New in this Version? The following features have been introduced in version X3.0 of the VCS software: Presence Two new presence services are now supported: Presence Server and Presence User Agent.
Grey Headline (continued) The Administrator Guide TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Using this Administrator Guide This Administrator Guide is provided to help you make the best use of your TANDBERG VCS. Typographical conventions Your approach to this documentation depends on what you want to do and how much you already know. Most configuration tasks on the VCS can be performed via either the web interface or a command line interface.
Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Getting Started This section describes how to install the VCS and carry out its initial configuration. It also gives an overview of the VCS’s Administrator settings and describes how to access the VCS via either the Command Line Interface (CLI) or the web interface. Introduction D14049.
Grey Headline (continued) Installation TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Installation Site Preparations What’s in the Box? To avoid damage to the unit during transportation, the TANDBERG VCS is delivered in a special shipping box, which should contain the following components: • TANDBERG VCS • CD containing VCS Administrator Guide and other General Installation Precautions • Make sure that the VCS is accessible and that all cables can • The socket outlet shall be installed nea
Grey Headline (continued) Initial Configuration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Powering on the VCS To start the VCS: 1. Ensure the power cable is connected. 2. Ensure the LAN cable is connected to the LAN1 port. 3. Turn on the power switch on the back right of the unit (adjacent to the power cable). 4. Press the soft power button on the back left of the unit. The system will power up.
Grey Headline (continued) Initial Configuration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Initial Configuration via Front Panel The LCD panel makes it possible to configure and check the IP settings as well as to reboot the system. By default, during normal operation the front panel will show the system name (if configured) and the LAN 1 IPv4 Address. To access the front panel menu options, press ENTER. Press ENTER to produce the Main Menu.
Grey Headline (continued) System Administrator Access TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview About Administrator Access Administration Accounts Administrator Session Timeout While it is possible to administer the TANDBERG VCS via a PC connected directly to the unit via a serial cable, you may wish to access the system remotely over IP. The VCS has a default administrator account with full read/write access. This account is used to log into the VCS via the web UI or the CLI.
Grey Headline (continued) System Administrator Access TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Web Interface Using the Web Interface To use the web interface: 1. Open a browser window and in the address line type either: • the IP address of the system • the FQDN of the system. 2. Select Administrator Login. 3. Enter a valid administration username and password and select Login. You will be presented with the Overview page.
Grey Headline (continued) System Administrator Access TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Web Interface General page features Page name and Location These are the features that can be found on some or all of the web UI pages. Note that you will not be able to change settings if your admin account is read only. User System Warning Every page shows the page name and the menu path that you took to get there.
Grey Headline (continued) System Administrator Access TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Command Line Interface Supported Characters Using the Command Line Interface (CLI) How Command are Shown in this Guide The command line interface is available over SSH, Telnet and through the serial port.
Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview and Status This section describes the information that appears on the Overview page and all the pages under the Status menu of the web interface. These pages provide information on the current status and configuration of the VCS. Introduction D14049.
Grey Headline (continued) Overview TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Overview Page Understanding the Overview Page The Overview page summarizes the current configuration and status of your VCS. Options The maximum number of calls and registrations, and the availability of additional VCS features such as User Policy and Dual Network Interfaces, are controlled through the use of Option Keys. This section shows all the Options that are currently installed on the VCS.
Grey Headline (continued) System Information TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the System Information Page Understanding the System Information Page The System Information page provides details of the software, hardware, and time settings of the VCS. System name The name that has been assigned to the VCS. To view the System Information page: Product • Status > System > Information This will be TANDBERG VCS.
Grey Headline (continued) Ethernet TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Ethernet Status Page Understanding the Ethernet Status Page The Ethernet page provides details of the MAC address and ethernet speed settings of the VCS. MAC address The MAC address of the VCS’s ethernet device. If the Dual Network Interfaces option key has been installed, this will show the MAC addresses of the ethernet cards for both the LAN1 port and the LAN2 port.
Grey Headline (continued) IP Status TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the IP Status Page Understanding the IP Status Page The IP Status page provides details of the IP and DNS settings of the VCS. IPv4 gateway The IPv4 gateway used by VCS. To view the IP Status page: • Status > System > IP Protocol IPv6 gateway Indicates the IP protocol supported by the VCS. The IPv6 gateway used by VCS.
Grey Headline (continued) Resource Usage TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Resource Usage Page Understanding the Resource Usage Page Traversal calls The Resource Usage page provides statistics about the numbers of current and cumulative calls and registrations on the VCS. This page automatically refreshes every 5 seconds. Current: The number of traversal calls going through the VCS at this moment.
Grey Headline (continued) Registrations TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Registrations Page Understanding the Registrations Page The Registrations page lists all the devices that are currently registered with the VCS. Name The H.323 alias or SIP AOR that the device registered. Devices that are configured for both SIP and H.323 will register twice; once as an H.323 endpoint and once as a SIP UA.
Grey Headline (continued) Registration History TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Registration History Page Understanding the Registration History Page The Registration History page lists all the registrations that are no longer current. It lists the most recent historical registrations since the last reboot, up to a maximum of 255. Name The H.323 alias or SIP AOR that the device registered.
Grey Headline (continued) Presence TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Presence Status Pages The Status > Presence menu has three sub-menus: • Publishers • Presentities • Subscribers. These pages provide information about endpoints and presentities using the Presence services on the VCS. Refer to the Viewing Presence Status section for a full explanation of the information on these pages. Introduction D14049.
Grey Headline (continued) Calls TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Calls Page Understanding the Calls Page The Calls page lists all the calls currently taking place to or from devices registered with the VCS, or that are passing through the VCS. Start time The date and time at which the call was placed. To view the Calls page: • Status > Calls Source The alias of the device that placed the call. Disconnect Click here to disconnect the selected calls.
Grey Headline (continued) Call History TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Call History Page Understanding the Call History Page The Call History page lists all the calls that are no longer active that have taken place since the VCS was last restarted. Start time The date and time at which the call was placed. To view the Call History page: • Status > Call History Source The alias of the device that placed the call.
Grey Headline (continued) Search History TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Search History Page Understanding the Search History Page The Search History page lists all the searches that have taken place since the VCS was last restarted. Start time The date and time at which the search was initiated. To view the Search History page: • Status > Search History Search Type The type of message being sent.
Grey Headline (continued) Local Zone TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Local Zone Page Understanding the Local Zone Page The Local Zone page lists all the subzones that together make up the Local Zone. This will always include the Default Subzone and the Traversal Subzone, plus any other subzones that you have created. Subzone Name The names of each subzone currently configured on this VCS.
Grey Headline (continued) Zones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Zones Page Understanding the Zones Page The Zones status page lists all the zones that are currently configured on your VCS, the number of calls and amount of bandwidth being used by each, and their current status. Name The names of each zone currently configured on this VCS. The list of zones will always include the Default Zone, plus any other zones that you have created.
Grey Headline (continued) Links TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Links Page Understanding the Links Page The Links status page gives you an overview of all the links currently configured on your VCS, along with the number of calls and the bandwidth being used by each link. Name The name of each link. To view the Links status page: • Status > Links Calls The total number of calls currently traversing each link.
Grey Headline (continued) Pipes TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Pipes Page Understanding the Pipes Page The Pipes page provides a list of all the pipes currently configured on your VCS, along with the number of calls and the bandwidth being used by each pipe. Name The name of each pipe. Clicking on the name will take you to the Edit Pipe page, where you can configure the pipe.
Grey Headline (continued) STUN Relays TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the STUN Relays Page Understanding the STUN Relays Page Client The STUN Relays page provides a list of all the currently active STUN Relays on the VCS. For each Relay, it shows the requesting client address and port and the corresponding VCS address and port. The IP address and port on the NAT (or the client if there is no NAT) from which the STUN Relay request has come.
Grey Headline (continued) Applications TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Applications Page Understanding the Applications Page Applications The Applications page shows the status of all external applications running on the VCS. Currently this includes: All Applications that are installed on the VCS are shown on the left. Their current status is shown on the right. • Presence • FindMe To view the Applications page: • Status > Applications Introduction D14049.
Grey Headline (continued) Warnings TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Warnings Page Understanding the Warnings Page The Warnings page provides a list of all the warnings currently in place on your system. Warnings Each warning (and, where relevant, its proposed resolution), is listed here. Warnings occur when an event or configuration change has taken place on the VCS that requires some manual Administrator intervention, such as a reboot.
Grey Headline (continued) Event Log TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Event Log Page Understanding the Event Log Page The Event Log page allows you to view and search the event log, which is a list of all the events that have occurred on your system since the last upgrade. The event log visible on the web UI holds a maximum 40 MB of data; once this size is reached, the oldest entries will be overwritten.
Grey Headline (continued) Event Log TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Interpreting the Event Log Event Log Format The event log is displayed in an extension of the UNIX syslog format: date time process _ name: message _ details where: Field Description date the local date on which the message was logged time the local time at which the message was logged process _ name the name of the program generating the log message.
Grey Headline (continued) Event Log TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Interpreting the Event Log Message Details Field For all messages logged from the tvcs process, the message _ details field, which contains the body of the message, consists of a number of human-readable name=value pairs, separated by a space. The first field within the message _ details field is always Event and the last field is always Level.
Grey Headline (continued) Event Log TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Events and Levels Event Description Admin Session Finish An administrator has logged off the system. Level 1 Admin Session Login Failure An unsuccessful attempt has been made to log in as an administrator. This could be because an incorrect username or password (or both) was entered. 1 Admin Session Start An administrator has logged onto the system.
Grey Headline (continued) Event Log TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Events and Levels Event Description Message Received An incoming RAS message has been received. Level 2 Message Received An incoming RAS NSM Keepalive, H.225 or H.245 message has been received. 3 Message Received (SIP) An incoming message has been received. 4 Message Rejected This could be for one of two reasons: 1 1.
Grey Headline (continued) Event Log TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Events and Levels Event Description Request Sent A call-related SIP request has been sent. Level 2 Request Sent A non-call-related SIP request has been sent. 3 Response Received A call-related SIP response has been received. 2 Response Received A non-call-related SIP response has been received. 3 Response Sent A call-related SIP response has been sent.
Grey Headline (continued) Configuration Log TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing the Configuration Log Page Understanding the Configuration Log Page Types of Configuration Events The Configuration Log page allows you to view and search login and configuration activities triggered via the VCS web interface. It shows all web login attempts for administrators and Findme users (both failed and successful), and all changes to the VCS configuration made via the web UI.
Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE System Configuration This section describes all the options that appear under the System Configuration menu of the web interface. These options enable you to configure the VCS in relation to the network in which it is located, for example its IP settings and the external services used by the VCS (e.g. DNS, NTP and SNMP). Introduction D14049.
Grey Headline (continued) System Administration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuration Overview System name To configure the VCS’s system administration settings: Defines the name of the VCS. Choose a name that uniquely identifies the system. • System Configuration > System. You will be taken to the System Administration page.
Grey Headline (continued) Ethernet TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuration Overview To configure the VCS’s Ethernet settings: Ethernet speed • Sets the speed of the connection between the VCS and the ethernet switch. System Configuration >Ethernet. You will be taken to the Ethernet page. • xConfiguration Ethernet If you have the Dual Network Interfaces option key installed, you will be able to configure this for both LAN1 and LAN2.
Grey Headline (continued) IP TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE IP Configuration Overview To configure the VCS’s IP settings: IP protocol • You can configure the VCS to use IPv4, IPv6 or Both protocols. The default is Both. System Configuration > IP. You will be taken to the IP page. • xConfiguration • xConfiguration IP IPv4: The VCS will only accept registrations from endpoints using an IPv4 address, and will only take calls between two endpoints communicating via IPv4.
Grey Headline (continued) LAN TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE LAN Configuration Overview IPv4 address To configure the VCS’s LAN 1 and LAN 2 ethernet port settings: Specifies the IPv4 IP address of the VCS’s LAN1 port. • System Configuration > IP. You will be taken to the IP page. • xConfiguration Ethernet The VCS is shipped with a default IP address for LAN 1 of 192.168.0.100.
Grey Headline (continued) DNS TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuration Overview About DNS Servers To configure the VCS’s DNS settings: You must specify at least one DNS server to be queried for address resolution if you wish to either: • use FQDNs (Fully Qualified Domain Names) instead of IP • System Configuration > DNS. You will be taken to the DNS page.
Grey Headline (continued) NTP TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuration Overview To configure the VCS’s NTP settings: NTP server • Sets the IP address or FQDN (or server address, if a DNS Domain Name has also been configured) of the NTP server to be used when synchronizing system time. System Configuration > NTP You will be taken to the NTP page.
Grey Headline (continued) SNMP TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuration Overview About SNMP Tools such as TANDBERG Management Suite (TMS) or HP OpenView may act as SNMP Network Management Systems (NMS). They allow you to monitor your network devices, including the VCS, for conditions that might require administrative attention. To configure the VCS’s SNMP settings: Enabled • Select On to enable SNMP support.
Grey Headline (continued) External Manager TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuration Overview To configure the VCS’s External Manager settings: Address Sets the IP address or FQDN (or server address, if a DNS Domain Name has also been configured) of the External Manager. • System Configuration > External Manager. You will be taken to the External Manager page.
Grey Headline (continued) Logging TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Remote Logging Overview About Logging About Remote Logging Enabling Remote Logging The VCS provides an event logging facility for troubleshooting and auditing purposes. The event log records information about such things as calls, registrations, and messages sent and received. The event log is always stored locally on the VCS.
Grey Headline (continued) Logging TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Log Levels About Event Log Levels Setting the Event Log Level All events have an associated level in the range 1-4, with level 1 events considered the most important. The table below gives an overview of the levels assigned to different events. You can control which events are logged by the VCS by setting the log level.
Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE VCS Configuration This section provides information on the pages that appear under the Protocols, Registrations and Authentication sub-menus of the VCS Configuration menu. These pages allow you to configure the functionality of the VCS in each of these areas. This section includes the following information: • an overview of H.323 and the H.
Grey Headline (continued) H.323 TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE H.323 Overview H.323 Endpoint Registration About H.323 on the VCS Overview Auto Discover The VCS supports the H.323 protocol: it is an H.323 gatekeeper. It will also provide interworking between H.323 and SIP, translating between the two protocols to enable endpoints that only support one of these protocols to call each other. In order to support H.323, the H.323 mode must be enabled. H.
Grey Headline (continued) H.323 TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring H.323 To configure the VCS’s H.323 settings: Registration conflict mode • Determines how the system will behave if an endpoint attempts to register an alias currently registered from another IP address. • VCS Configuration > Protocols > H.323. You will be taken to the H.323 page. xConfiguration H323 Reject: denies the registration.
Grey Headline (continued) SIP TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SIP Overview About SIP on the VCS Using the VCS as a SIP Registrar SIP Registration Expiry The VCS supports the SIP protocol. It can act as a: In order for a SIP endpoint to be contactable via its registered alias, it must register its location with a SIP Registrar. The VCS can act as a SIP Registrar for up to 20 domains.
Grey Headline (continued) SIP TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SIP Overview Using the VCS as a SIP Proxy Server Using the VCS as a SIP Presence Server When SIP mode has been enabled the VCS may act as a SIP Proxy Server. The role of a Proxy Server is to forward requests (such as REGISTER and INVITE) from endpoints or other Proxy Servers. These requests are forwarded on to other Proxy Servers or to the destination endpoint. The VCS supports the SIP-based SIMPLE protocol.
Grey Headline (continued) SIP TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring SIP - Registrations, Protocols and Ports SIP settings are configured via: UDP mode • Determines whether or not incoming SIP calls using the UDP protocol will be allowed. • VCS Configuration > Protocols > SIP > Configuration. You will be taken to the SIP page. xConfiguration SIP The default is On. UDP port SIP mode Specifies the listening port for incoming SIP calls over UDP.
Grey Headline (continued) SIP TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring SIP - Domains SIP domains are configured via: View/Edit • Click here to change the domain name or delete the domain. VCS Configuration > Protocols >SIP > Domains. You will be taken to the Domains page. • To add a new domain, click New. You will be taken to the Create Domain page. Enter the domain in the Name field and click Create Domain.
Grey Headline (continued) Interworking TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Configuring Interworking About Interworking Interworking options are configured via: The VCS is able to act as a gateway between SIP and H.323, translating calls from one protocol to the other. This is known as “interworking”. • xConfiguration • VCS Configuration > Protocols > Interworking. You will be taken to the Interworking page. Interworking Mode By default, the VCS will act as a SIP-H.
Grey Headline (continued) Registration Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Registration Overview Endpoint Registration Registrations on a VCS Expressway MCU, Gateway and Content Server Registration In order for an endpoint to use the TANDBERG VCS as its H.323 gatekeeper or SIP Registrar, the endpoint must first register with the VCS. The VCS can be configured to control which devices are allowed to register with it.
Grey Headline (continued) Registration Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Registration Overview Finding a VCS with which to Register H.323 Before an endpoint can register with a VCS, it must determine which VCS it can or should be registering with. This setting is configured on the endpoint, and the process is different for SIP and H.323. There are two ways an H.323 endpoint can locate a VCS with which to register: manually or automatically.
Grey Headline (continued) Registration Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Authentication Authentication Mode Configuring Authentication The VCS can be configured to use a username and passwordbased challenge-response scheme to determine whether it will permit communications from other systems. This process is known as authentication.
Grey Headline (continued) Registration Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Authentication About External Registration Credentials Configuring External Registration Credentials The VCS may be required to authenticate itself with another system. For example, when the VCS is forwarding an invite from an endpoint to another VCS, that other system may have authentication enabled and will therefore require your local VCS to provide it with a username and password.
Grey Headline (continued) Registration Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Authentication Databases Alias Origin Setting Authentication using an LDAP Server This setting determines the alias(es) with which the endpoint will attempt to register. The options are as follows: If the VCS is using an LDAP server for authentication, the process is as follows: 1.
Grey Headline (continued) Registration Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Authentication Databases Configuring LDAP Server settings LDAP Server To configure the settings for accessing the LDAP server: The IP address or FQDN (or server address, if a DNS Domain Name has also been configured) of the LDAP server. • VCS Configuration > Authentication > LDAP • • > Configuration. You will be taken to the LDAP Configuration page.
Grey Headline (continued) Registration Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Authentication Databases Authentication using a Local Database Credentials The Credentials page shows all the existing entries in the Local Database. The local database is included as part of your VCS system. It consists of a list of usernames and passwords, which you add via the web interface and/or the CLI. The database can hold up to 2500 entries.
Grey Headline (continued) Registration Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Registering Aliases About Alias Registration Attempts to Register using an Existing Alias SIP Once the authentication process (if required) has been completed, the endpoint will then attempt to register its alias(es) with the VCS. An endpoint may attempt to register with the VCS using an alias that is already registered to the system.
Grey Headline (continued) Registration Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Allow and Deny Lists About Allow and Deny Lists Activating use of Allow or Deny Lists When an endpoint attempts to register with the VCS it presents a list of aliases. You can control which endpoints are allowed to register by setting the Restriction Policy to AllowList or DenyList and then including any one of the endpoint’s aliases on the Allow List or the Deny list as appropriate.
Grey Headline (continued) Registration Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Allow and Deny lists Managing Entries in the Allow List Registration Allow List This page shows all the existing entries in the Allow List. To view and manage the entries in the Allow List: You can sort these entries by clicking on the relevant column heading. • VCS Configuration > Registration > Allow • • List. You will be taken to the Registration Allow List page.
Grey Headline (continued) Registration Control TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Allow and Deny lists Managing Entries in the Deny List Registration Deny List This page shows all the existing entries in the Deny List. To view and manage the entries in the Deny List: • VCS Configuration > Registration > Deny • • You can sort these entries by clicking on the relevant column heading. List. You will be taken to the Registration Deny List page.
Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones and Neighbors This section begins with an overview of all the different types of subzones and zones and how these fit into the overall structure of your video communication network. It then provides information on the pages that appear under the Local Zone, Zones and Alternates sub-menus of the VCS Configuration menu.
Grey Headline (continued) Introduction TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About your Video Communications Network The most basic implementation of a TANDBERG video communications network is a single VCS connected to the internet with one or more endpoints registered to it.
Grey Headline (continued) Local Zone and Subzones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Configuring the Local Zone and its Subzones The collection of all endpoints, gateways, MCUs and Content Servers registered with the VCS make up its Local Zone. The Local Zone is divided into subzones. These include an automatically created Default Subzone and up to 100 manually configurable subzones. Each manually configured subzone specifies a range of IP addresses.
Grey Headline (continued) Local Zone and Subzones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Traversal Subzone The Traversal Subzone is a conceptual subzone; no endpoints can be registered to it, but all traversal calls (i.e. calls for which the VCS is taking the media in addition to the signaling) will pass through it. The Traversal Subzone exists in order to allow you to control the amount of bandwidth used by traversal calls, as these can be particularly resource-intensive.
Grey Headline (continued) Zones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Traversal Client Zone About Zones A zone is a collection of endpoints, either all registered to a single system (e.g. TANDBERG VCS, gatekeeper, or TANDBERG Border Controller), or of a certain type such as ENUM or DNS.
Grey Headline (continued) Zones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE ENUM Zone DNS Zone Default Zone ENUM zones allow you to locate endpoints via an ENUM lookup. You can create one or more ENUM zones based on the ENUM DNS suffix used and/or by pattern matching of the endpoints’ aliases. DNS zones allow you to locate endpoints via a DNS lookup. You can create one or more DNS zones based on pattern matching of the endpoints’ aliases.
Grey Headline (continued) Zones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Adding Zones Configuring Zones In order to neighbor with another system (e.g. VCS, gatekeeper or Border Controller) or create an ENUM or DNS zone, you must add a new zone on the local VCS. When adding a new zone you will be asked to specify its Type; this will determine which configuration options will then be available. Once you have created a new zone on the local VCS you must configure it appropriately.
Grey Headline (continued) Zones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring Zones - All Types Name Assigns a name to the zone. The name acts as a unique identifier, allowing you to distinguish between zones of the same type. Type Determines the nature of the zone: Neighbor: the new zone will be a connection to a neighbor of the local VCS. TraversalClient: the local VCS is a traversal client of the new zone, and there is a firewall between the two.
Grey Headline (continued) Zones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring Neighbor Zones SIP mode Searches are automatically responded to Determines whether SIP calls will be allowed to and from the neighbor zone. Determines what happens when the VCS receives a SIP search that originated as an H.323 search, destined for this zone. The default is Off. SIP port Off: a SIP OPTION message will be sent to the zone.
Grey Headline (continued) Zones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring Traversal Client Zones Authentication username SIP mode Traversal clients must always authenticate with traversal servers by providing their authentication username and password. Determines whether SIP calls will be allowed to and from the traversal server. The client’s authentication username is shown here for reference, to make it easier to configure the corresponding zone on the traversal server.
Grey Headline (continued) Zones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring Traversal Server Zones There must be an entry in the traversal server’s Authentication database for this username. See Authentication for more information. SIP mode Client authentication username Determines whether SIP calls will be allowed to and from this zone. If the traversal client is a VCS, this is its Authentication Username.
Grey Headline (continued) Zones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring ENUM Zones DNS suffix Specifies the domain to be appended to the transformed E.164 number to create an ENUM domain for which this zone is queried. SIP mode Determines whether SIP records will be looked up for this zone. H.323 mode Determines whether H.323 records will be looked up for this zone. Full details of how to use and configure ENUM zones is given in ENUM Dialing. Introduction D14049.
Grey Headline (continued) Zones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring DNS Zones SIP mode Determines whether SIP calls will be allowed to this zone. H.323 mode Determines whether H.323 calls will be allowed to this zone. Full details of how to use and configure DNS zones is given in URI Dialing. Empty INVITE allowed Searches are automatically responded to Determines whether the VCS will generate a SIP INVITE messages which has no SDP to send to this zone.
Grey Headline (continued) Clustering, Peers and Alternates TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About Clustering A VCS can be part of a Cluster of up to six VCSs. Each VCS in the Cluster is a Peer of every other VCS in the Cluster. The purpose of a Cluster is twofold: • to increase the capacity of your VCS deployment compared with a single VCS • to provide redundancy in the rare case that a VCS becomes unavailable (for example, due to a network or power outage).
Grey Headline (continued) Clustering, Peers and Alternates TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE What Configuration is and isn’t Replicated? Configuring Clusters Prerequisites Most items of configuration are replicated across Peers, with the exceptions listed below. Before creating your cluster, ensure that: IP configuration Each VCS to be added to the cluster is configured with a different system name. System Name LAN configuration is not replicated across Peers.
Grey Headline (continued) Clustering, Peers and Alternates Sharing Registrations Across Peers When one VCS in a cluster receives a Location Request, it checks its own registration database along with that of each of its Peers before responding. This allows all endpoints in the cluster to be treated as if they were registered with a single VCS.
Grey Headline (continued) Clustering, Peers and Alternates TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Clustering and FindMe Viewing Peers Overview Configuration Clustering supports the use of FindMe. Each Peer has its own FindMe database containing all FindMe account information for the cluster.
Grey Headline (continued) Clustering, Peers and Alternates TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Neighboring the Local VCS to a Cluster You can neighbor your local VCS (or VCS Cluster) to a remote VCS Cluster; this could be a Neighbor, Traversal Client, or Traversal Server to your local VCS.
Grey Headline (continued) Dial Plans TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About Dial Plans Flat Dial Plan Structured Dial Plan As you start deploying more than one VCS, it is useful to neighbor the systems together so that they can query each other about their registered endpoints. Before you start, you should consider how you will structure your dial plan. This will determine the aliases assigned to the endpoints, and the way in which the VCSs are neighbored together.
Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Call Processing This section provides information on the pages that appear under the Calls, Transforms and Policy sub-menus of the VCS Configuration menu. These pages allow you to configure the way in which the VCS receives and process calls.
Grey Headline (continued) Introduction TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Call Processing Diagram One of the functions of the VCS is to route calls to their appropriate destination, based on the address or alias received from a locally registered endpoint or external zone. There are a number of steps involved in determining the destination of a call, and some of these steps can involve transforming the alias or redirecting the call to other aliases.
Grey Headline (continued) Dialing by Address Types TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About the Different Address Types Dialing by H.323 ID or E.164 alias The destination address that is entered via the caller’s endpoint can take a number of different formats, and this will affect the specific process that the VCS follows when attempting to locate the destination endpoint.
Grey Headline (continued) Hop Counts TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About Hop Counts Configuring Hop Counts Each search request is assigned a hop count value by the system that initiates the search. Every time the request is forwarded to another neighbor gatekeeper or proxy, the hop count value is decreased by a value of 1. When the hop count reaches 0, the request will not be forwarded on any further.
Grey Headline (continued) Searches and Transforms TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview of Searches and Transforms Pre-Search Transforms About Searches About Pre-Search Transforms One of the VCS’s functions is to process incoming requests to search for a particular alias. These search requests are received from The pre-search transform function allows you to modify the alias in an incoming search request.
Grey Headline (continued) Searches and Transforms TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Pre-Search Transforms Configuring Pre-Search Transforms Pattern string Specifies the pattern against which the alias is compared. To configure the way in which aliases are transformed before being searched for: • VCS Configuration > Transforms. • You will be taken to the Transforms page. Click New. You will be taken to the Create Transform page. xConfiguration Transform [1..100].
Grey Headline (continued) Searches and Transforms TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zone Searching and Transforming About Zone Searching About Zone Transforms Zone Search and Transform Process The VCS allows you to filter the search requests sent to each zone, including the Local Zone, and prioritize the order in which these zones are searched. This allows you to reduce the potential number of search requests sent out, and speed up the search process.
Grey Headline (continued) Searches and Transforms TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zone Searching and Transforming Configuring Zone Searches and Transforms Mode Determines if and when a query will be sent to this zone. Options are: To configure when a zone will be searched and any transforms that will be applied before the search request is sent: AlwaysMatch: the zone will always be queried.
Grey Headline (continued) Searches and Transforms TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Examples Combining Match Types and Priorities By using both AlwaysMatch and PatternMatch matches in the same zone, and applying the same or different priorities to each match, you will have a great deal of flexibility in determining if and when the zone will be queried and whether any transforms will be applied. Some example configurations are given here.
Grey Headline (continued) Searches and Transforms TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Examples Filter Queries to a Zone Without Transforming It is possible to filter the search requests sent to a zone so that it is only queried for aliases that match certain criteria. For example, assume all endpoints in your regional sales office are registered to their local VCS with a suffix of @sales.example.com.
Grey Headline (continued) Searches and Transforms TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Examples Query a Zone for Original and Transformed Alias You may wish to query a zone for the original alias at the same time as you query it for a transformed alias. To do this, configure one match with a mode of AlwaysMatch, and a second match with a mode of PatternMatch along with details of the transform to be applied. Both matches must be given the same Priority level.
Grey Headline (continued) Searches and Transforms TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Examples Query a Zone for Two or More Transformed Aliases Zones are queried in order of priority of the matches configured within them. It is possible to configure a single zone with up to five PatternMatch matches, each with the same Priority and with an identical Pattern String to be matched, but each with a different replacement pattern.
Grey Headline (continued) Call Policy TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About Call Policy Administrator Policy and Authentication The VCS allows you to set up a set of rules to control which calls are allowed, which calls are rejected, and which calls are to be redirected to a different destination. These rules are known as Call Policy, or Administrator Policy Administrator Policy uses the source and destination of a call to determine the action to be taken.
Grey Headline (continued) Administrator Policy TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Enabling the use of Administrator Policy To enable Administrator Policy: Administrator Policy Mode • On: Administrator Policy is enabled. If a CPL script has been uploaded, this policy will be used. Otherwise, the policy configured via the Administrator Policy section will be used. • VCS Configuration > Call Policy. You will be taken to the Call Policy page.
Grey Headline (continued) Administrator Policy TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring Administrator Policy via the Web Interface To configure Administrator Policy using the web interface: and Each combination of Source and Destination is compared, in the order shown, with the details of the call being made until a match is found. To move a particular item to higher or and icons lower in the list, click on the respectively. • VCS Configuration > Policy > Administrator.
Grey Headline (continued) Administrator Policy TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Downloading policy files Configuring Administrator Policy via a CPL script To configure Administrator Policy using a CPL script: Show Policy file Click here to download the Administrator Policy that is currently in place, as an XML-based CPL script. • VCS Configuration > Policy > Administrator. You will be taken to the Administrator Policy page.
Grey Headline (continued) URI Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview URI Resolution Process via DNS A URI address typically takes the form name@example.com, where name is the alias and example.com is the domain. URI dialing can make use of DNS to enable endpoints registered with different systems to locate and call each other.
Grey Headline (continued) URI Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE URI Dialing for Outgoing Calls Process Configuring Matches for DNS Zones When a user places a call using URI dialing, they will typically dial an address in the form name@example.com from their endpoint.
Grey Headline (continued) URI Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE URI Dialing for Outgoing Calls Adding and Configuring DNS Zones Name Assigns a name to this zone. In order for locally registered endpoints to use URI dialing through the VCS, you must configure at least one DNS zone. To do this: Type • VCS Configuration > Zones. • • For DNS zones, this will be DNS. You will be taken to the Zones page. Click New. You will be taken to the Create Zone page.
Grey Headline (continued) URI Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE URI Dialing for Outgoing Calls Configuring DNS Servers Address 1 to Address 5 To configure the DNS servers to be used by the VCS when querying DNS: Enter the IP address(es) of up to 5 DNS servers that the VCS will query when attempting to locate a domain. • System Configuration > DNS. • These fields must use an IP address, not a FQDN. You will be taken to the DNS page.
Grey Headline (continued) URI Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE URI Dialing for Incoming Calls Types of DNS Records Required SRV Record Format The ability of the VCS to receive incoming calls made via URI dialing relies on the presence of DNS records for each domain the VCS is hosting. The format of SRV records is defined by RFC 2782 [3] as: These records can be of various types including: _ Service. _ Proto.
Grey Headline (continued) URI Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE URI Dialing for Incoming Calls URI Dialing and Firewall Traversal Example DNS Record Configuration Recommended Configuration A company with the domain name example.com wants to enable incoming H.323 and SIP calls using URI addresses in the format user@example.com. The VCS hosting the domain has the FQDN vcs.example.com.
Grey Headline (continued) ENUM Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Process Enabling ENUM Dialing ENUM dialing allows an endpoint to be contacted by a caller dialing an E.164 number - a telephone number - even if that endpoint has registered using a different format of alias. When a VCS is attempting to dial a destination endpoint using ENUM, the general process is as follows: Using ENUM dialing, when an E.
Grey Headline (continued) ENUM Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE ENUM Dialing for Outgoing Calls Prerequisites Process Example In order for a local endpoint to be able to dial another endpoint using ENUM via your VCS, the following three conditions must be met: Below is the process that is followed when an ENUM (E.164) number is dialed from an endpoint registered with your VCS: 1. There must be a NAPTR record available in DNS that maps the called endpoint’s E.
Grey Headline (continued) ENUM Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE ENUM Dialing for Outgoing Calls Configuring Matches for ENUM Zones Configuring Transforms for ENUM Zones If you wish locally registered endpoints to be able to make ENUM calls via the VCS, then at a minimum you should configure an ENUM zone with: You can configure transforms for ENUM zones in the same way as any other zones (see Zone Searching and Transforming for full information).
Grey Headline (continued) ENUM Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE ENUM Dialing for Outgoing Calls Configuring ENUM Zones Name In order for locally registered endpoints to use ENUM dialing, you must configure an ENUM zone for each ENUM service used by remote endpoints. To do this: Assigns a name to this zone. Type For ENUM zones, this will be ENUM. • VCS Configuration > Zones. You will be taken to the Zones page. • Click New.
Grey Headline (continued) ENUM Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE ENUM Dialing for Outgoing Calls Configuring DNS Servers Address 1 to Address 5 To configure the DNS servers to be used by the VCS when querying DNS: Enter the IP address(es) of up to 5 DNS servers that the VCS will query when attempting to locate a domain. • System Configuration > DNS. You will be taken to the DNS page.
Grey Headline (continued) ENUM Dialing TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE ENUM Dialing for Incoming Calls Prerequisites Configuring DNS NAPTR Records Example In order for your locally registered endpoints to be reached using ENUM dialing, you must configure a DNS NAPTR record that maps your endpoints’ E.164 numbers to their SIP/H.323 URIs. This record must be located at an appropriate DNS domain where it can be found by any systems attempting to reach you via ENUM dialing.
Grey Headline (continued) Unregistered Endpoints TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About Unregistered Endpoints Calls from an Unregistered Endpoint An unregistered endpoint is any device that is not registered with an H.323 gatekeeper or SIP Registrar (e.g. VCS, gatekeeper or Border Controller). Although most calls are made between endpoints each registered with such a system, it is sometimes necessary to place a call to, or receive a call from, an unregistered endpoint.
Grey Headline (continued) Fallback Alias TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Configuration It is possible for the VCS to receive a call that is destined for it but which does not specify an alias.
Grey Headline (continued) Call IDs, Serial Numbers and Tags TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Identifying a Particular Call Obtaining Call Numbers via the CLI Each call that passes through the VCS is assigned a Call ID and a Call Serial Number. Calls also have a Call Tag assigned if this does not already exist. To control calls using the CLI, you must reference the call using either its call ID or serial number.
Grey Headline (continued) Disconnecting Calls TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Identifying a Particular Call Obtaining the Call ID via the Web UI The Calls page in the web interface lists individual calls based on their Call Serial Number. You can click on a particular call to find out more details about it, including the Call Serial Number and Call Tag. Note that one or more individual calls may have the same Call Tag.
Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Bandwidth Control This section describes the pages that appear under the Local Zone and Bandwidth sub-menus of the VCS Configuration menu in the web interface. These pages allow you to control the bandwidth that is used for calls within your local zone, as well as calls out to other zones. Introduction D14049.
Grey Headline (continued) Bandwidth Control Overview TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Bandwidth Control on the VCS Example Network Deployment The TANDBERG VCS allows you to control the amount of bandwidth used by endpoints on your network.
Grey Headline (continued) Subzones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About Subzones and Bandwidth Control About the Traversal Subzone All endpoints registered with the VCS are part of its Local Zone. The Traversal Subzone is a conceptual subzone. No endpoints can be registered to the Traversal Subzone; its sole purpose is to allow for the control of bandwidth used by traversal calls. The Local Zone is made up of two or more subzones.
Grey Headline (continued) Subzones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Creating a Subzone To add a new subzone: • VCS Configuration > Local Zone > Subzones. • You will be taken to the Subzones page. Select New. You will be taken to the Create Subzone page. xCommand SubZoneAdd Name Enter the name you wish to assign to the subzone. You will refer to this name when creating Links. Subnet 1 address Enter the IP address of the subnet.
Grey Headline (continued) Subzones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring a Subzone To configure a subzone: • VCS Configuration > Local Zone > Subzones. • You will be taken to the Subzones page. Click on the subzone you wish to configure. You will be taken to the Edit Subzone page. xConfiguration Zones LocalZone SubZone Name Enter the name you wish to assign to the subzone. You will refer to this name when creating Links and Pipes.
Grey Headline (continued) Subzones TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Applying Bandwidth Limitations to Subzones Types of Limitations How Different Bandwidth Limitations are Managed You can apply bandwidth limits to the Default Subzone, Traversal Subzone and all manually configured subzones.
Grey Headline (continued) Links TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About Links Creating Links Subzones are connected to other subzones and zones via links. For a call to take place, the endpoints involved must each reside in subzones or zones that have a link between them. The link does not need to be direct; the two endpoints may be linked via one or more intermediary subzones. Name Enter the name you wish to assign to this link.
Grey Headline (continued) Links TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Editing Links To edit a link: Name • Enter the name you wish to assign to this link. • VCS Configuration > Bandwidth > Links. You will be taken to the Links page. Click View/Edit. You will be taken to the Edit Link page. xConfiguration Bandwidth Link Node 1, Node 2 Select the names of the two subzones, or the subzone and zone between which you wish to create a link.
Grey Headline (continued) Links TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Default Links About Default Links Pre-Configured Links Automatically Created Links If a subzone has no links configured, then endpoints within the subzone will only be able to call other endpoints within the same subzone. For this reason, the VCS comes shipped with a set of pre-configured links and will also automatically create new links each time you create a new subzone.
Grey Headline (continued) Pipes TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About Pipes Creating Pipes It is possible to control the amount of bandwidth used on calls between specific subzones and zones. The limits can be applied to the total concurrent bandwidth used at any one time, or to the bandwidth used by any individual call. Name To apply these limits, you create a pipe and configure it with the required bandwidth limitations.
Grey Headline (continued) Pipes TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Editing Pipes Editing an Existing Pipe Name To configure details of a pipe: Enter the name you wish to give to this pipe. You will refer to this name when creating links. • VCS Configuration > Bandwidth > Pipes • You will be taken to the Pipes page. Click on the pipe you wish to configure. You will be taken to the Edit Pipe page.
Grey Headline (continued) Pipes TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Applying Pipes to Links Pipes are used to restrict the bandwidth of a link. When a pipe is applied to a link, it will restrict the bandwidth of calls made between the two nodes of the link - the restrictions will apply to calls in either direction. Normally a single pipe would be applied to a single link. However, one or more pipes may be applied to one or more links, depending on how you wish to model your network.
Grey Headline (continued) Default Bandwidth and Downspeeding TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring Default Call Bandwidth and Downspeeding About the Default Call Bandwidth Usually, when a call is initiated the endpoint will include in the request the amount of bandwidth it wishes to use. For those cases where the endpoint has not specified the bandwidth, you can set the VCS to apply a default bandwidth value.
Grey Headline (continued) Bandwidth Control Examples TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Example Without a Firewall An example deployment is shown opposite. In this example, there are three geographically separate offices: Enterprise, Branch and Home. All endpoints in the Enterprise office register with the VCS Control, as do those in the Branch and Home offices.
Grey Headline (continued) Bandwidth Control Examples TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Example With a Firewall If we modify the previous example deployment to include firewalls between the offices, we can use TANDBERG’s Expressway™ firewall traversal solution to maintain connectivity. We do this by adding a VCS Expressway outside the firewall on the public internet, which will work in conjunction with the VCS Control and Home and Branch office endpoints to traverse the firewalls.
Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Traversal This section describes how to configure your VCS Control and VCS Expressway in order to traverse firewalls. It also describes how to configure the additional firewall traversal server functions of a VCS Expressway, including STUN services. Introduction D14049.
Grey Headline (continued) Firewall Traversal Overview TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About Expressway™ VCS as a Firewall Traversal Client The purpose of a firewall is to control the IP traffic entering your network. Firewalls will generally block unsolicited incoming requests, meaning that any calls originating from outside your network will be prevented.
Grey Headline (continued) Quick Guide to VCS Traversal Client - Server Configuration Overview TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE VCS Control (Client) Full details of how to configure a VCS Control and VCS Expressway as traversal client and server respectively are given in the following pages.
Grey Headline (continued) Firewall Traversal Protocols and Ports Overview TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Expressway Process H.323 Firewall Traversal Protocols Ports play a vital part in firewall traversal configuration. The correct ports must be set on the VCS Expressway, traversal client and firewall in order for connections to be permitted. The Expressway™ solution works as follows: Ports are initially configured on the VCS Expressway by the VCS Expressway Administrator.
Grey Headline (continued) Firewall Traversal Protocols and Ports Ports for Initial Connections from Traversal Clients Each traversal server zone specifies an H.323 port and a SIP port to be used for the initial connection from the client. Each time you configure a new traversal server zone on the VCS Expressway, you will be allocated default port numbers for these connections: • H.
Grey Headline (continued) Firewall Traversal and Authentication TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview In order to control which systems can use the VCS Expressway as a traversal server, each VCS Control or Gatekeeper that wishes to be its client must first authenticate with it. Upon receiving the initial connection request from the traversal client, the VCS Expressway asks the client to authenticate itself by providing a username and password.
Grey Headline (continued) Other Issues TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Firewall Traversal and Dual Network Interfaces Firewall Configuration The Dual Network Interfaces option enables the LAN 2 interface on your VCS Expressway (the option is not available on a VCS Control).
Grey Headline (continued) Configuring the VCS as a Traversal Client TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Adding a New Traversal Client Zone Overview To enable your VCS to act as a traversal client on behalf of its endpoints and neighbor gatekeepers, you must create a connection between it and a traversal server (e.g. a TANDBERG VCS Expressway or Border Controller). • VCS Configuration > Zones. • You will be taken to the Zones page. Select New.
Grey Headline (continued) Configuring the VCS as a Traversal Client TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring a Traversal Client Zone • VCS Configuration > Zones. SIP mode You will be taken to the Zones page. Click on the name of the zone you wish to configure. You will be taken to the Edit Zone page. • xConfiguration • xConfiguration Determines whether SIP calls will be allowed to and from this zone. Zones Zone [1..200] SIP port Zones Zone [1..
Grey Headline (continued) Configuring the VCS as a Traversal Server TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Adding a New Traversal Server Zone The VCS Expressway can act as a firewall traversal server. This feature means you can: • VCS Configuration > Zones. • Allow your VCS to act as a traversal server for other VCSs and TANDBERG Gatekeepers. You do this by adding a new traversal server zone on the VCS, and configuring it with details of the traversal client.
Grey Headline (continued) Configuring the VCS as a Traversal Server TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring a Traversal Server Zone • VCS Configuration > Zones. SIP mode You will be taken to the Zones page. Click on the name of the zone you wish to configure. You will be taken to the Edit Zones page. • xConfiguration • xConfiguration Determines whether SIP calls will be allowed to and from the traversal client.
Grey Headline (continued) Configuring the VCS as a Traversal Server TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring Traversal for Endpoints Overview UDP probe retry interval Sets the frequency (in seconds) with which locally registered endpoints will send a UDP probe to the VCS Expressway. Traversal-enabled H.323 endpoints can register directly with the VCS Expressway and use it for firewall traversal.
Grey Headline (continued) Configuring the VCS as a Traversal Server TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring Traversal Server Ports Overview Media demultiplexing RTP port Specifies the port on the VCS to be used for demultiplexing RTP media. The VCS Expressway has specific listening ports used for firewall traversal. Rules must be set on your firewall to allow connections to these ports. In most cases the default ports should be used.
Grey Headline (continued) Configuring the VCS as a Traversal Server TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE STUN Services About STUN STUN Binding Discovery STUN Relay STUN is a network protocol that enables a SIP or H.323 client to communicate via UDP or TCP from behind a NAT firewall. The STUN Binding Discovery service provides information back to the client about the binding allocated by the NAT firewall being traversed.
Grey Headline (continued) Configuring the VCS as a Traversal Server TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE STUN Services Configuring STUN Services STUN Discovery Mode Determines whether the VCS will offer STUN Discovery services to traversal clients. To configure the STUN Binding Discovery and STUN Relay services: • VCS Configuration > Expressway > STUN. You will be taken to the STUN page.
Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Applications This section provides information on each of the additional services that are available under the Applications menu of the VCS. You must purchase the appropriate option key in order to use each of these applications. They are: • FindMe (User Policy) • Presence Services Introduction D14049.
Grey Headline (continued) FindMe™ (User Policy) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview What is FindMe? Process Overview Recommendations When Deploying FindMe FindMe is a form of User Policy, which is the set of rules that determines what happens to a call for a particular user or group when it is received by the TANDBERG VCS. When the VCS receives a call for a particular alias, it checks to see whether User Policy has been enabled.
Grey Headline (continued) FindMe™ (User Policy) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Enabling FindMe on the VCS Configuring User Policy Manager Mode Determines whether or not User Policy will be enabled, and if so, the location of the User Policy Manager. FindMe requires a User Policy Manager. The VCS has its own User Policy Manager, but there is also the ability to connect to a User Policy Manager located on another system. Off: User Policy is not enabled.
Grey Headline (continued) FindMe™ (User Policy) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Managing FindMe User Accounts About User Accounts Creating a New User Account FindMe user accounts must be created by the VCS Administrator before they can be accessed and configured by users. • Applications > FindMe > User Accounts. Each user account is accessed via a username and password associated with a specific FindMe name. You will be taken to the User Accounts page. Select New.
Grey Headline (continued) FindMe™ (User Policy) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Managing FindMe User Accounts Changing a User Password New password Type the new password to be used along with the Username when logging into this account. You can change a password on behalf of a user without knowing their existing password. This is useful when the user has forgotten their password. To change the password: • VCS Configuration > Policy > User Accounts.
Grey Headline (continued) FindMe™ (User Policy) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Managing FindMe User Accounts Deleting a User Account Tick the box next to the account you wish to delete. To delete a FindMe user account: To select all the accounts, click on Select All. • VCS Configuration > Policy > User Accounts. You will be taken to the User Accounts page. Delete Click here to delete the selected accounts. Are you sure...
Grey Headline (continued) Using TANDBERG’s FindMe™ TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About your FindMe User Account Accessing the FindMe Configuration Page About FindMe™ To configure your FindMe user account, log in via a web browser as described below: The FindMe feature allows you as an individual or part of a group to have a single name on which you can always be called, and you chose where calls to that name will be routed.
Grey Headline (continued) Using TANDBERG’s FindMe™ TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Configuring your FindMe User Account ! Primary Devices If no devices are configured for a FindMe name, all calls to that name will be rejected. List the all the device(s) that will ring when your FindMe name is first dialed. If more than one device is listed here, they will all ring at the same time. Username The username for this FindMe account.
Grey Headline (continued) Presence TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Presence Server Presence is the ability of endpoints to provide information to other users about their current status - such as whether they are offline, online, or in a call. Any entity which provides presence information, or about whom presence information can be requested, is known as a presentity.
Grey Headline (continued) Presence TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Presence User Agent (PUA) Overview Aggregation of Presence Information Registration refresh period Endpoints that do not support presence, including all H.323 endpoints, can have status published on their behalf by the VCS. The service that publishes this information is called the Presence User Agent (PUA).
Grey Headline (continued) Presence TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Enabling and Disabling Presence Services Presence Services (i.e. the Presence Server and the Presence User Agent) are both disabled by default. These services can be enabled and disabled separately from each other, depending on the nature of your deployment.
Grey Headline (continued) Presence TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Viewing Presence Status Publishers Presentities Subscribers Status > Presence > Publishers Status > Presence > Presentities Status > Presence > Subscribers This page lists each Presentity whose presence information is being managed by (i.e. published to) the local Presence Server. All Presentities are listed here regardless of whether or not anyone is requesting their presence information.
Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Maintenance This section describes the pages that appear under the Maintenance menu of the VCS web interface.
Grey Headline (continued) Upgrading Software TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview It is possible to install new releases of the VCS software on your existing hardware. Software upgrade can be done via the VCS in one of two ways: • using secure copy (SCP/PSCP) • using the web interface (HTTP/HTTPS). This section describes how both of these methods are used to perform upgrades. You can also upgrade the VCS software via TMS. See the TMS guide for more information.
Grey Headline (continued) Upgrading Software TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Upgrading via the Web Interface System Information To upgrade your software via the web interface: • Maintenance > Upgrade. You will be taken to the Upgrade page. This section tells you about the software and hardware that currently make up your system. Release key Enter the 16-character Release Key that has been provided to you. This is not required if you are upgrading to a dot release, e.g. X3.
Grey Headline (continued) Upgrading Software TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Upgrading via the Web Interface (cont.) Software upgrade in progress (Continued from previous page) This screen appears while the new version of software is being copied to your system. Software successfully upgraded This screen indicates that the software has been copied to your system successfully. You will need to restart the VCS in order for the new version to take effect.
Grey Headline (continued) Downgrading Software TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Downgrade Procedure Impact on features introduced in X3.0 The procedure for downgrading software is essentially the same for upgrading software, except for the software image being used. Prerequisites VCS software version X3.0 introduces a number of new features. Should you install this version and then subsequently downgrade to a previous version of the VCS software you must note the following.
Grey Headline (continued) Option Keys TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Adding Options via the CLI Your VCS may have been shipped with one or more optional features pre-installed. Additional VCS features can be added to your existing system by the installation of Option Keys. To return the indexes of all the Option Keys that are already installed on your system: • xStatus To view the list of options installed currently, go to Maintenance > Option Keys.
Grey Headline (continued) Option Keys TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Adding Options via the Web Interface To add options via the web interface: This section lists the keys that are already installed on your system along with a description of the options they provide. • Maintenance > Option Keys. You will be taken to the Option Keys page. System Information This section tells you about the hardware and options that currently make up your system.
Grey Headline (continued) Security TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Enabling Security Overview For extra security, you may wish to have the VCS communicate with other systems (e.g. servers such as LDAP servers, neighbor VCSs, or clients such as SIP endpoints) using TLS encryption. Select the file containing... Allows you to upload a PEM file that identifies the list of Certificate Authorities trusted by the VCS. The VCS will only accept certificates signed by a CA on this list.
Grey Headline (continued) Administration Accounts TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Adding an Administration Account Default Administration Account The VCS has a default administrator account with full read/write access. This account is used to log into the VCS via the web UI or the CLI. The username for this account is admin (all lower case) and the default password is TANDBERG (all upper case).
Grey Headline (continued) Administration Accounts TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Editing an Administration Account Account access To change the name, password or access level for an existing administration account: Determines the rights for this account. The options are: • Maintenance > Administration Accounts. You will be taken to the Administration Accounts page. Click on the name of the account you wish to edit. You will be taken to the Edit Administration Account page.
Grey Headline (continued) Backup and Restore TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Creating a Backup of your VCS Configuration The Backup and Restore feature allows you to create a file containing the configuration of your VCS at a particular date and time. You can then use this file at a later date to return the VCS to that state of configuration.
Grey Headline (continued) Backup and Restore TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Restoring a Previous Backup To restore the VCS to a previous configuration: 1. Navigate to Maintenance > Backup and Restore. You will be taken to the Backup and Restore page. 2. In the System Restore section, Browse to the backup file containing the configuration you wish to restore. 3. Click Upload System Backup File.
Grey Headline (continued) System Snapshot TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Creating a System Snapshot The system snapshot is used for diagnostic purposes. It is a file that can be sent to your TANDBERG support representative at their request to assist them in troubleshooting issues you may be experiencing. To create a system snapshot file: • Maintenance > System Snapshot. You will be taken to the System Snapshot page.
Grey Headline (continued) Restarting TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Restarting the VCS Some configuration changes will require a restart of the VCS before they take effect. There will be a Restart button at the bottom of any web pages that include such options, and clicking on this button will take you to the Restart page. If you do not restart the system after making these changes, you will receive a warning telling you the system needs to be restarted.
Grey Headline (continued) Shutting Down TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Shutting Down The system must be shut down before it is unplugged. Once the system has been shut down, the only way it can be restarted is by pressing the soft power button on the unit itself. You must therefore have physical access to the unit if you wish to be able to restart it after it has been shut down. Shutting down will cause any active calls and registrations to be terminated.
Grey Headline (continued) Restoring Default Configuration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview DefaultValuesSet Level 3 It is possible to restore the VCS to its default configuration. This is done via the CLI using xCommand DefaultValuesSet. This command is not available via the web UI.
Grey Headline (continued) Password Encryption TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Maximum length of Passwords All passwords configured on the VCS are stored in encrypted form. This applies to the following, which all have usernames and passwords associated with them: When a password is encrypted, it uses more characters than the original plain text version of the password.
Grey Headline (continued) TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Appendices This section includes the following appendices which provide supplementary information regarding the administration of the VCS: • CPL Reference • Regular Expression Reference • Pattern Variable Reference • VCS Port Reference • DNS Configuration • LDAP Configuration • xConfiguration Command Reference • xCommand Command Reference • xStatus Command Reference • Bibliography • Glossar y Introduction D14049.
Grey Headline (continued) CPL Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview of CPL on the VCS address-switch This Appendix gives details of the VCS’s implementation of the CPL language and should be read in conjunction with the CPL standard RFC 3880 [5] and the TANDBERG guide to writing CPL [22]. The VCS supports most of the CPL standard along with some TANDBERG-defined extensions.
Grey Headline (continued) CPL Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE address-switch field Within the address-switch node, the mandatory field parameter specifies which address is to be considered. The supported attributes and their interpretation are as follows: Authentication Mode: On Authentication Mode: Off Field SIP H.323 SIP H.323 origin The "From" and "ReplyTo" fields of the message if it authenticated correctly, otherwise not-present.
Grey Headline (continued) CPL Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE address-switch subfield Within the address-switch node, the optional subfield parameter specifies which part of the address is to be considered. The following table gives the definition of subfields for each alias type. If a subfield is not specified for the alias type being matched then the not-present action will be taken.
Grey Headline (continued) CPL Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE location proxy As the CPL script is evaluated it maintains a list of addresses (H.323 IDs, URLs and E.164 numbers) which will be used as the destination of the call if a proxy node is executed. The location node allows the location set to be modified so that calls can be redirected to different destinations.
Grey Headline (continued) CPL Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE CPL Examples Call Screening of Authenticated Users Call Screening Based on Alias In this example, only calls from users with authenticated source addresses are allowed. In this example, user ceo will only accept calls from users vpsales, vpmarketing or vpengineering. See the section on Authentication for details on how to enable authentication.
Grey Headline (continued) CPL Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE CPL Examples Call Screening Based on Domain Change of Domain Name In this example, user fred will not accept calls from anyone at annoying.com, or from any unauthenticated users. All other users will allow any calls. In this example, Example Inc has changed its domain from example.net to example.com. For a period of time some users are still registered at example.net.
Grey Headline (continued) CPL Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE CPL Examples Allow Calls from Locally Registered Endpoints Only Block Calls from Default Zone and Default Subzone In this example, the administrator only wants to allow calls that originate from locally registered endpoints. The same script can be extended to also allow calls from configured zones but not from the Default Zone or Default Subzone.
Grey Headline (continued) CPL Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE CPL Examples Restricting Access to a Local Gateway Using the rule-switch node In these examples, a gateway is registered to the VCS with a prefix of 9 and the administrator wants to stop calls from outside the organization being routed through it. We can do this in two ways: using the address-switch node or the rule-switch node. Examples of each are shown below.
Grey Headline (continued) Regular Expression Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Common Regular Expressions Regular expressions can be used in conjunction with a number of VCS features such as alias transformations, zone transformations, CPL policy and ENUM. The VCS uses POSIX format regular expression syntax. The table opposite provides a list of commonly used special characters in regular expression syntax.
Grey Headline (continued) Pattern Variable Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Valid Variable Strings The VCS makes use of pattern matching in a number of its features, namely Allow Lists and Deny Lists, pre-search Transforms and Zone Transforms. For each of these pattern matches, the VCS allows you to use a variable that it will replace with the current configuration value(s) before the pattern is checked.
Grey Headline (continued) VCS Port Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview The VCS uses different ports and protocols for different services and functions, and many of these are configurable. The table below shows all the ports on the VCS that are used for each of these services and functions. It shows the default port(s) and protocol used, and if the ports are configurable it shows the available range and how to configure them via the web UI or CLI.
Grey Headline (continued) VCS Port Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE VCS Ports Service/Function Description Default Available Range Configurable via Traversal Server Media Demultiplexing RTP used on the VCS Expressway for demultiplexing RTP media 2776 UDP 1024 - 65534 VCS Configuration > Expressway > Ports Assent call signaling used on the VCS Expressway for Assent signaling 2776 TCP 1024 - 65534 VCS Configuration > Expressway > Ports H.460.
Grey Headline (continued) VCS Port Reference TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE VCS Ports Service/Function Description Default Available Range Configurable via SIP TCP outbound port range The range of ports to be used by outbound TCP/ TLS SIP connections to a remote SIP device 25000 - 29999 TCP/TLS 1024 - 65533 VCS Configuration > Protocols > SIP > Configuration xConfiguration SIP TCP Outbound Port Start xConfiguration SIP TCP Outbound Port End Traversal media port range F
Grey Headline (continued) DNS Configuration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview Microsoft DNS Server This section gives examples of DNS configuration using Microsoft DNS Server and BIND 8 & 9. Using Microsoft DNS Server you can add the SRV record using either the command line or the MMC snap-in. In these examples we show how to set up an SRV record to handle H.323 URIs of the form user@example.com.
Grey Headline (continued) LDAP Configuration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE About the LDAP Databases Microsoft Active Directory The VCS can be configured to use a database on an LDAP Directory Server to store authentication credential information (usernames, passwords, and other relevant information) This section describes how to download the schemas that must be installed on the LDAP server, and how to install and configure two common types of LDAP servers, Microsoft Active D
Grey Headline (continued) LDAP Configuration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Microsoft Active Directory Adding H.350 Objects 2. Add the ldif file to the server using the command: ldifde -i -c DC=X -f filename.ldf where: Create the Organizational Hierarchy 1. Open up the Active Directory Users and Computers MMC snap-in. 2. Under your BaseDN right-click and select New Organizational Unit. 3. Create an Organizational unit called h350.
Grey Headline (continued) LDAP Configuration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE OpenLDAP Prerequisites Installing the H.350 Schemas These instructions assume that an OpenLDAP server has already been installed. For details on installing OpenLDAP see the documentation at http://www.openldap.org. 1. Copy the OpenLDAP files to the OpenLDAP schema directory: The following examples use a standard OpenLDAP installation on the Linux platform.
Grey Headline (continued) LDAP Configuration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE OpenLDAP Adding H.350 Objects Create the Organizational Hierarchy # This example creates a single # organizational unit to contain the H.350 # objects dn: ou=h350,dc=my-domain,dc=com objectClass: h323Identity • The certificate for the LDAP server. • The private key for the LDAP server. • The certificate of the Certificate Authority (CA) that was used to sign the LDAP server’s certificate.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview The xConfiguration group of commands are used to set and change individual items of configuration. Each command is made up of a main element followed by one or more subelements. The valid values for this command are one of the options shown within the angle brackets. The following pages list all the xConfiguration commands currently available on the VCS.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Administration HTTP Mode: Determines whether HTTP calls will be redirected to the HTTPS port. On: calls will be redirected to HTTPS. Off: no HTTP access will be available. Note: You must restart the system for any changes to take effect.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Applications Presence Server Mode: Enables and disables the SIMPLE Presence Server. Note: SIP Mode must also be enabled for the Presence Server to function. Default: Off Example: Configuration Applications Presence Server Mode: On Applications Presence Server Publication ExpireDelta: <30..
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Authentication Database: Selects between a local database and a remote LDAP repository for the storage of password information for authentication. Default: LocalDatabase Example: xConfiguration Authentication Database: LocalDatabase Authentication LDAP AliasOrigin: Determines which aliases (i.e.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Bandwidth Downspeed PerCall Mode: Determines whether or not the VCS will attempt to downspeed a call if there is insufficient per-call bandwidth available to fulfill the request. On: the VCS will attempt to place the call at a lower bandwidth. Off: the call will be rejected.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Bandwidth Pipe [1..100] Bandwidth PerCall Mode: Determines whether or not this pipe is limiting the bandwidth of individual calls. NoBandwidth: no bandwidth available. No calls can be made on this pipe. Default: Unlimited Example: xConfiguration Bandwidth Pipe 1 Bandwidth PerCall Mode: Limited Bandwidth Pipe [1..100] Bandwidth Total Limit: <1..
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Error Reports URL: The URL of the web service to which error reports are sent. Example: xConfiguration Error Reports URL: "http://192.168.0.200/submitapplicationerror/" Ethernet [1..2] IP V4 Address: Specifies the IPv4 address of the specified LAN port. Note: You must restart the system for any changes to take effect. Default: 192.168.0.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE H323 Gatekeeper CallSignaling PortRange End: <1024..65534> Specifies the upper port in the range to be used by calls once they are established. Default: 19999 Example: xConfiguration H323 Gatekeeper CallSignaling PortRange End: 19999 H323 Gatekeeper CallSignaling PortRange Start: <1024..65534> Specifies the lower port in the range to be used by calls once they are established.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE H323 Mode: Determines whether or not the VCS will provide H.323 gatekeeper functionality. Default: On Example: xConfiguration H323 Mode: On Interworking Encryption Mode: Determines whether or not the VCS will allow encrypted calls between SIP and H.323 endpoints. Off: interworked calls will never be encrypted.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE IP Route [1..50] Gateway: Specifies the IP Address of the Gateway for this route. Example: xConfiguration IP Route 1 Gateway: "192.168.0.0" IP Route [1..50] Interface: Specifies the LAN interface to use for this route. Auto: The VCS will select the most appropriate interface to use. Default: Auto Example: xConfiguration IP Route 1 Interface: Auto IP Route [1..
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE LDAP Server Port: <1..65534> Sets the IP port of the LDAP server to be used when making LDAP queries. Default: 389 Example: xConfiguration LDAP Server Port: 389 LDAP UserDN: Sets the user distinguished name to be used when binding to the LDAP server. Example: xConfiguration LDAP UserDN: "User123" Log Level: <1..4> Controls the granularity of event logging.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Policy UserPolicy Mode: Determines the User Policy Manager usage and location. Off: User Policy Manager is not used. Local: the on-box User Policy Manager is used. Remote: the off-box User Policy Manager is used.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Registration AllowList [1..2500] Pattern Type: Specifies whether the entry in the Allow List is a prefix, suffix, regular expression, or must be matched exactly. Exact: the string must match the alias character for character. Prefix: the string must appear at the beginning of the alias. Suffix: the string must appear at the end of the alias.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SIP Mode: Determines whether or not the VCS will provide SIP registrar and SIP proxy functionality. This mode must be enabled in order to use either the Presence Server or the Presence User Agent. Default: On Example: xConfiguration SIP Mode: On SIP Registration ExpireDelta: <30..
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SIP TLS Mode: Determines whether incoming SIP calls using the TLS protocol will be allowed. Default: On Example: xConfiguration SIP TLS Mode: On SIP TLS Port: <1024..65534> Specifies the listening port for incoming SIP TLS calls.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SystemUnit AdminAccount [1..15] Access : Defines the Access level of an administration user who can login to the VCS Web interface. The Access determines whether the user can access the VCS, and if so whether they can change the configuration or just view it. Example: xConfiguration SystemUnit AdminAccount [1..
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Transform [1..100] Pattern Type: Determines the way in which the string must match the alias. Exact: the string must match the alias character for character. Prefix: the string must appear at the beginning of the alias. Suffix: the string must appear at the end of the alias. Regex: the string will be treated as a regular expression.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Traversal Server Media Demultiplexing RTP Port: <1024..65534> Specifies the port on the VCS to be used for demultiplexing RTP media. Note: You must restart the system for any changes to take effect.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones LocalZone DefaultSubZone Bandwidth PerCall Inter Mode: Determines whether there is a limit on the bandwidth for any one call to or from an endpoint in the Default Subzone. NoBandwidth: no bandwidth available. No calls can be made to or from the Default Subzone.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones LocalZone Match [1..5] Pattern Behavior : Determines how the matched part of the alias will be modified. Strip: the matching prefix or suffix will removed from the alias. Replace: the matching part of the alias will be substituted with the text in the Replace string. Leave: the alias will not be modified. Example: xConfiguration Zones LocalZone Match [1..
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones LocalZone SubZone [1..100] Bandwidth PerCall Intra Limit: <1..100000000> Specifies the bandwidth limit (in kbps) for any one call between two endpoints within this subzone (applies only if Mode is set to Limited). Default: 1920 Example: Zones LocalZone SubZone 1 Bandwidth PerCall Intra Limit: 1920 Zones LocalZone SubZone [1..
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones LocalZone Traversal H323 H46018 Mode: Determines whether or not H.323 calls using H460.18 mode for firewall traversal will be allowed. Applies to traversal-enabled endpoints registered directly with the VCS.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones LocalZone Traversal H323 UDPProbe RetryCount: <1..65534> Sets the number of times traversal-enabled endpoints registered directly with the VCS will attempt to send a UDP probe to the VCS. Default: 5 Example: xConfiguration Zones LocalZone Traversal H323 UDPProbe RetryCount: 5 Zones LocalZone Traversal H323 UDPProbe RetryInterval: <1..
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones Zone [1..200] DNS Interworking SIP EmptyInviteAllowed : Determines whether the VCS will generate a SIP INVITE message with no SDP to send to this zone. INVITES with no SDP mean that the destination device is asked to initiate the codec selection, and are used when the call has been interworked locally from H.323.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones Zone [1..200] HopCount: <1..255> Specifies the hop count to be used when sending an alias search request to this zone. Note: if the search request was received from another zone and already has a hop count assigned, the lower of the two values will be used. Default: 15 Example: xConfiguration Zones Zone 1 HopCount: 15 Zones Zone [1..200] Match [1..
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones Zone [1..200] Match [1..5] Priority: <1..65534> Determines the order in which the zone will be sent a search request. Zones with priority 1 matches are searched first, followed by priority 2, and so on. Default: 100 Example: xConfiguration Zones Zone 1 Match 1 Priority: 100 Zones Zone [1..200] Name: Assigns a name to this zone.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones Zone [1..200] Neighbor Interworking SIP Video DefaultResolution : Specifies which video resolution to use when empty INVITEs are not allowed. Default: CIF Example: xConfiguration Zones Zone 1 Neighbor Interworking SIP Video DefaultResolution : CIF Zones Zone [1..200] Neighbor Peer [1..6] Address :
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones Zone [1..200] Neighbor SIP Transport: Determines which transport type will be used for SIP calls to and from this neighbor. Default: TCP Example: xConfiguration Zones Zone 1 Neighbor SIP Transport: TCP Zones Zone [1..200] SIP Mode: Determines whether SIP calls will be allowed to and from this zone.
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones Zone [1..200] TraversalClient SIP Transport: Determines which transport type will be used for SIP calls to and from the traversal server. Default: TCP Example: xConfiguration Zones Zone 2 TraversalClient SIP Transport: TCP Zones Zone [1..
Grey Headline (continued) Command Reference - xConfiguration TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones Zone [1..200] TraversalServer TCPProbe KeepAliveInterval: <1..65534> Sets the interval (in seconds) with which the traversal client will send a TCP probe to the VCS once a call is established, in order to keep the firewall’s NAT bindings open. Default: 20 Example: xConfiguration Zones Zone 3 TraversalServer TCPProbe KeepAliveInterval: 20 Zones Zone [1..
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview The xCommand group of commands are used to add and delete items and issue system commands. The following pages list all the xCommand commands currently available on the VCS. To issue a command, type the command as shown, followed by one or more of the given parameters and values.
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE AdminAccountAdd Creates a new administration account. Name(r): Defines the name of an administration user who can login to the VCS Web interface. Password(r): Defines the password of an administration user who can login to the VCS Web interface. The maximum plaintext length is 16 characters, which will then be encrypted.
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE CheckBandwidth A diagnostic tool that returns the status and route (as a list of nodes and links) that a call of the specified type and bandwidth would take between two nodes. Note that this command does not change any existing system configuration. Node1(r): The subzone or zone from which the call originates. Node2(r): The subzone or zone at which the call terminates.
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE CredentialDelete Deletes an entry from the local authentication database. CredentialId(r): <1..2500> The index of the credential to be deleted. Example: xCommand CredentialDelete CredentialId: 2 DefaultLinksAdd Restores links between the Default Subzone, Traversal Subzone and the Default Zone. This command has no parameters.
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE DisconnectCall Disconnects a call. Call: <1..900> The index of the call to be disconnected. CallSerialNumber: The serial number of the call to be disconnected. Note: you must specify either a call index or call serial number when using this command.
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE FeedbackRegister Activates notifications on the event or status change(s) described by the Expression(s). Notifications are sent in XML format to the specified URL. Up to 15 Expressions may be registered for each of 3 feedback IDs. ID: <1..3> The ID of this particular feedback request. URL(r): The URL to which notifications are to be sent. Expression.1..
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE LinkAdd Adds and configures a new link. LinkName(r): Assigns a name to this link. Node1: Specifies the first zone or subzone to which this link will be applied. Node2: Specifies the second zone or subzone to which this link will be applied. Pipe1: Specifies the first pipe to be associated with this link.
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Locate Runs the VCS's location algorithm to locate the endpoint identified by the given alias, searching locally, on neighbors, and on systems discovered through the DNS system, within the specified number of 'hops'. Results are reported back through the xFeedback mechanism, which must therefore be activated before issuing this command (e.g. xFeedback register event/locate).
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE PipeDelete Deletes a pipe. PipeId(r): <1..100> The index of the pipe to be deleted. Example: xCommand PipeDelete PipeId: 2 RemoveRegistration Removes a registration from the VCS. Registration: <1..3750> The index of the registration to be removed. RegistrationSerialNumber: The serial number of the registration to be removed.
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SubZoneAdd Adds and configures a new subzone. SubZoneName(r): Assigns a name to this subzone. Address: Specifies an IP Address used (in conjunction with the IP Prefix Length) to identify a subnet to be assigned to this subzone. PrefixLength: <0..128> Specifies the number of bits of the Subnet IP Address which must match for an IP Address to belong in this subzone.
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE TransformAdd Adds and configures a new transform. Pattern(r): Specifies the pattern against which the alias is compared. Type: Determines the way in which the string must match the alias. Exact: the string must match the alias character for character. Prefix: the string must appear at the beginning of the alias.
Grey Headline (continued) Command Reference - xCommand TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE ZoneList A diagnostic tool that returns the list of zones (grouped by priority) that would be queried, and any transforms that would be applied, in a search for a given alias. Note that this command does not change any existing system configuration. Alias(r): The alias to be searched for. Example: xCommand ZoneList Alias: "john.smith@example.com" Introduction D14049.
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Overview The xStatus group of commands are used to return information about the current status of the VCS. Each xStatus element returns information about one or more sub-elements. The following pages list all the xStatus commands currently available on the VCS, and the information that is returned by each.
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SystemUnit: Product: TANDBERG VCS Uptime:
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Ethernet [1..
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE NTP: Status: Cause: {Visible if status is Failed} Address: Port: <1..
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE ResourceUsage: Calls: Traversal: Current: <0..150> Max: <0..150> Total: <0..4294967295> NonTraversal: Current: <0..750> Max: <0..750> Total: <0..4294967295> Registrations: Current: <0..3750> Max: <0..3750> Total: <0..4294967295> Calls: Call <1..
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SIP: {visible if Protocol = SIP} Address: :<1..65534> Transport: Aliases: Alias [1..50]: Type: Value: EncryptionType: CheckCode: {visible if Leg = H323 and call is interworked} Targets: Target [1..1]: Type: Value: BandwidthNode: Registration: ID: <1..
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Registrations: Registration [1..3750]: Protocol: Node: SerialNumber: CreationTime: Duration:
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Zones: DefaultZone: Name: “DefaultZone” Bandwidth: LocalUsage: <0..100000000> ClusterUsage: <0..100000000> Calls: {Section visible only if there are calls } Call [0..900]: {0..900 entries} CallId: LocalZone: DefaultSubZone: Name: “DefaultSubZone” Bandwidth: LocalUsage: <0..100000000> ClusterUsage: <0..100000000> Registrations: {0..
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SubZone: [0..100] Name: Bandwidth: LocalUsage: <0..100000000> ClusterUsage: <0..100000000> Registrations: {0..3750 entries} {Section visible only if there are registrations } Registration: <1..3750> SerialNumber: Calls: {Section visible only if there are calls} Call [0..900]: {0..900 entries} CallId: Searches: Current: Total: Dropped: Zone [1..
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE SIP: {Visible if SIP Mode=On for Zone} Status: Cause: {Visible if Status is Failed} Address: {One Address line per address from DNS lookup} Port: <1..65534> LastStatusChange:
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Peer [1..6]: H323: {Visible if H323 Mode=On for Zone} Status: Active Address: {One Address line per address from DNS lookup} Port: <1..65534> LastStatusChange:
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Calls: Call [0..900]: {0..900 entries} CallID: Alternates: Peer [1..6]: {Hidden for Peer [n] when Peer [n] is self} Status: Cause: {Visible if status is Failed} Address: Port: <1..
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Assent: CallSignaling: Status: IPv4: {Visible if Status=Active} Address: {1..2 entries} IPv6: {Visible if Status=Active} Address: {1..2 entries} H46018: CallSignaling: Status: IPv4: {Visible if Status=Active} Address: {1..2 entries} IPv6: {Visible if Status=Active} Address: {1..
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE IPv6: UDP: Status: Address: TCP: Status: Address: TLS: Status: Address: STUN: Servers: Discovery: Status: Address: Relay: Status: Address: Allocations: Count: <0..800> Relay [1..
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Warnings: Warning [1..n]: Value: Applications: Presence: UserAgent: Status: Presentity: Count: <0..2500> Server: Publications: Presentities: Count: <0..10000> Max: <0..10000> Presentity [1..10000]: URI: Document: Count: <1..10> Subscriptions: Subscribers: Count: <0..n> Max: <0..n> Subscriber [1..
Grey Headline (continued) Command Reference - xStatus TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Presentities: Count: <0..10000> Max: <0..10000> Presentity [1..10000]: URI: Subscriber: Count: <1..100> Introduction D14049.
Grey Headline (continued) Bibliography TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Reference Title Link 1 ITU Specification: H.235 Security and encryption for H-Series (H.323 and other H.245-based) multimedia terminals http://www.itu.int/rec/T-REC-H.235/en 2 ITU Specification: H.350 Directory services architecture for multimedia conferencing http://www.itu.int/rec/T-REC-H.350/en 3 RFC 2782: A DNS RR for specifying the location of services (DNS SRV) http://www.ietf.org/rfc/rfc2782.
Grey Headline (continued) Glossary TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Term Definition A record A type of DNS record that maps a domain name to an IPv4 address. AAAA record A type of DNS record that maps a domain name to an IPv6 address. Administrator Policy In relation to the VCS, the set of rules configured system-wide (either via the web interface or CPL script) that determine the action(s) to be applied to calls matching a given criteria.
Grey Headline (continued) Glossary TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Term Definition External zone Any zone configured on the local VCS that connects out to a remote system or the internet. Neighbor, Traversal Server, Traversal Client, ENUM and DNS zones are all external zones. Firewall traversal Crossing a firewall or NAT device.
Grey Headline (continued) Glossary TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Term Definition Local VCS A relative term used to refer to the particular VCS that you are currently administering, as opposed to other VCSs in your network. Local Zone A relative term used to refer to the group of endpoints and other systems registered to a particular VCS.
Grey Headline (continued) Glossary TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Term Definition RTP Real-time Transport Protocol Real time protocol designed for the transmission of voice and video. Defined by RFC 3550 [17]. SSH Secure Shell An encrypted protocol used to provide a secure CLI. SIMPLE Session Initiation Protocol for Instant Messaging and Presence Leveraging Extensions An instant messaging and presence protocol based on SIP.
Grey Headline (continued) Glossary TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE Term Definition UA User Agent A SIP device used to make and receive calls. UDP User Datagram Protocol A communication protocol defined by RFC 791 [18]. It is less reliable than TCP. URI Uniform Resource Identifier A formatted string used to identify a resource, typically on the internet. User Policy The set of rules that determine the action(s) to be applied to calls for a particular user or group.
Contact Information TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE EUROPEAN HEADQUARTERS Philip Pedersens vei 20, 1366 Lysaker, Norway Telephone: +47 67 125 125 Fax: +47 67 125 234 Video: +47 67 126 126 E-mail: tandberg@tandberg.com U.S. HEADQUARTERS 1212 Avenue of the Americas 24th Floor, New York, NY 10036 Telephone: +1 212 692 6500 Fax: +1 212 692 6501 Video: +1 212 692 6535 E-mail: tandberg@tandberg.com Introduction D14049.
