Instruction/ maintenance manual of the product D13691.03 TANDBERG
Go to page of 84
T ANDBERG Bor der Contr oller User Manual Software v ersion Q3.0 D13691.03 This document is not to be reproduced in whole or in par t without permission in wr iting from:.
T ANDBERG Border Controller User Manual T rademarks and copyright Cop yr ight 1993-2006 T ANDBERG ASA. All rights reser v ed. This document contains inf or mation that is proprietar y to T ANDBERG ASA.
T ANDBERG Border Controller User Manual En vir onmental Issues Thank you f or b uying a product which contr ib utes to a reduction in pollution, and thereby helps sav e the environment. Our products reduce the need f or trav el and transpor t and thereb y reduce pollution.
T ANDBERG Border Controller User Manual Operator Safety Summary F or your protection, please read these safety instructions completely bef ore operating the equipment and keep this man ual for future ref erence. The inf or mation in this summar y is intended f or operators.
T ANDBERG Border Controller User Manual – If the apparatus has been subjected to e xcessive shoc k by being dropped, or the cabinet has been damaged – If the apparatus f ails to operate in accordance with the operating instructions.
T ANDBERG Border Controller User Manual Contents 1 Introduction 1 1.1 T ANDBERG Border Controller Overview . . . . . . . . . . . . . . . . . . . . . . . 2 2 Installation 3 2 . 1 P r e c a u t i o n s....................................... 3 2 . 2 U n p a c k i n g .
T ANDBERG Border Controller User Manual 9 . 4 L o g g e d E v e n t s ..................................... 3 5 9 . 5 R e m o t e L o g g i n g .................................... 3 9 10 Software Upgrade 40 10.1 Upgrading Using HTTP(S) . . . . . . . .
T ANDBERG Border Controller User Manual 1 Intr oduction This User Manual is provided to help y ou make the best use of y our T ANDBERG Border Controller. A Border Controller is a ke y component of T ANDBERG’ s Expressw a y TM firewall tra versal solution.
T ANDBERG Border Controller User Manual 1.1 T ANDBERG Border Contr oller Overview On the front of the Border Controller there are three LAN interfaces , a serial por t (Data 1) and an LED showing the po wer status of the system. The LAN 1 interf ace is used for connecting the system to your netw or k, LAN interf ace 2 and 3 are disab led.
T ANDBERG Border Controller User Manual 2 Installation 2.1 Precautions • Ne ver install communication equipment during a lightning storm. • Ne ver install jac ks for comm unication cables in wet locatio ns unless the jack is specifically designed f or wet locations.
T ANDBERG Border Controller User Manual 2.2.1 Installation site preparations • Make sure that the Border Controller is accessib le and that all cables can be easily connected. • F or ventilation: Leav e a space of at least 10cm (4 inches) behind the Border Controller’ s rear and 5cm (2 inches) on the sides.
T ANDBERG Border Controller User Manual Then s witch the power s witch button on the bac k of the unit to ‘1’. On the front of the chassis you will see the P ower LED being lit. 2.6 Border Contr oller Initial Configuration The T ANDBERG Border Controller requires some configuration bef ore it can be used.
T ANDBERG Border Controller User Manual Welcome to TANDBERG Border Controller Release Q3.0 SW Release Date: 2006-01-02 OK 10. Login with user name admin and your pass word. 11. Revie w other system settings. Y ou may want to set the f ollo wing: (a) The name of the Border Controller.
T ANDBERG Border Controller User Manual 3 Getting star ted 3.1 System Administration T o configure and monitor the T ANDBERG Border Controller you can either use the w eb interface or a command line interf ace. The command line interface is a vailab le ov er SSH and T elnet, or through the serial por t.
T ANDBERG Border Controller User Manual 3.1.2 Root Account The Border Controller provides a root account with the same pass word as the admin account. This account should not be used in nor mal operation, and in par ticular system configuration should not be conducted using this account: use the admin account instead.
T ANDBERG Border Controller User Manual Location Request to all the other Gatekeepers and Border Controllers on the system. Whilst conceptually simple, this sor t of flat dial plan does not scale ver.
T ANDBERG Border Controller User Manual Figure 1: Adding a new zone 3.4 Alternate Border Contr ollers Alter nate Border Controller suppor t is provided to increase the reliability of y our deplo yment. If one Border Controller becomes unav ailable , perhaps due to a network or power outage, another will be used as an Alter nate.
T ANDBERG Border Controller User Manual Figure 2: Alter nate Border Controller configuration 3.5 Call Control When an endpoint wants to call another endpoint it presents the address it w ants to call to the Border Controller using a protocol knows as RAS .
T ANDBERG Border Controller User Manual Figure 3: Location decision flow diagram 12.
T ANDBERG Border Controller User Manual 3.6 Firewall T raver sal The Border Controller works with the T ANDBERG Gatekeeper , T ANDBERG Expresswa y end- points and other endpoints which suppor t the ITU H.
T ANDBERG Border Controller User Manual 4 Bandwidth Contr ol The T ANDBE RG Border Controller allo ws you to control endpoints’ use of bandwidth on y our network.
T ANDBERG Border Controller User Manual Figure 5: Configur ing a SubZone Links ma y be configured through the web interf ace on the Border Controller Configuration → Links page, or through the command line using the f ollowing commands: xConfiguration Links Link [1.
T ANDBERG Border Controller User Manual xConfiguration Pipes Pipe [1..100] Bandwidth PerCall Mode xConfiguration Pipes Pipe [1..100] Bandwidth PerCall Limit Pipes ma y be shared between one or more links. This is used to model the situation where a site communicates with se ver al other sites ov er the same broadband connection to the Inter net.
T ANDBERG Border Controller User Manual 4.2 Bandwidth Contr ol Examples One possible configur ation for the deplo yment in Figure 4 is shown in Figure 8. Each of the offices is represented as a separate subzone , with bandwidth configured according to local policy .
T ANDBERG Border Controller User Manual Figure 9: Network Deployment with fire walls Figure 10: Border Controller example configuration The tra versal subz one in Figure 10 may be used to control the amount of tr affic flowing through the Border Controller itself .
T ANDBERG Border Controller User Manual Figure 11: Gatekeeper e xample configuration network. The default links ma y be restored by running the command: xCommand DefaultLinksAdd 19.
T ANDBERG Border Controller User Manual 5 Registration Contr ol The T ANDBERG Border Controller can control which endpoints are allow ed to register with it. T wo separate mechanisms are provided: a simple Registration Restriction P olicy and an authentication process based on user names and pass words.
T ANDBERG Border Controller User Manual 5.2 A uthentication The T ANDBERG Border Controller can use a user name and pass word based challenge-response scheme to per mit registrations . For details of ho w to configure your endpoint with the appropriate inf or mation, please consult your endpoint man ual.
T ANDBERG Border Controller User Manual T o configure the Border Controller to use the LD AP ser v er director y during authentication issue the f ollowing commands: xConfiguration Authentication Mod.
T ANDBERG Border Controller User Manual 6 URI Dialing If an alias is not located in the Border Controller’ s list of registrations , it ma y attempt to find an authoritative Gatek eeper through the DNS system. URI dialing makes it easier f or endpoints registered with diff erent Gatekeepers or Border Con- trollers to call each other .
T ANDBERG Border Controller User Manual Figure 14: Configur ing IP interf ace In our case Service is defined by the H.323 protocol suite to be h323ls and Proto is udp . Name corresponds to the host par t of the H.323 URI. How y ou add the SR V record depends on the type of DNS ser v er you are using.
T ANDBERG Border Controller User Manual 7 Example T raver sal deplo yments 7.1 Simple Enterprise deployment Figure 15: Simple enter prise deployment Figure 15 shows a typical enterpr ise deplo yment. Endpoints 1001, 1002 and a Gatekeeper are deplo yed on a private netw or k, separated from the pub lic network by a fire wall and NA T .
T ANDBERG Border Controller User Manual • Set e xample.com as the domain name you are using on both the Gatek eeper and Border Controller . • Update the DNS entr y f or example .com with an A record representing the Border Controller and an SR V record which returns the Border Controller’ s A record as described in section 6.
T ANDBERG Border Controller User Manual Figure 17: Dialing a public IP address In order to achie ve this: • Within the Gatekeeper configur ation — set ”Calls to unknown IP addresses” to Indirect.
T ANDBERG Border Controller User Manual • F rom an endpoint in enter prise A, dial the full H.323 URI. F or example , Ben@Enter priseB.com. Border Controller B is registered in DNS as responsible f or enterpr ise B and will receiv e the incoming call and route it accordingly .
T ANDBERG Border Controller User Manual 8 Call P olic y Y our T ANDBERG Border Controller allows you to set up policy to control which calls are allo wed and e ven redirect selected calls to diff erent destinations. Y ou specify this policy by uploading a script wr itten in the Call Processing Language (CPL).
T ANDBERG Border Controller User Manual subfield The f ollowing tab le gives the definition of subfields f or each alias type, if a subfield is not specified f or the alias type being matched then the not-present action will be taken.
T ANDBERG Border Controller User Manual The not-present node is e xecuted when the address specified in the address-s witch was not present in the call setup message.
T ANDBERG Border Controller User Manual 8.3 Unsupported CPL Elements The Border Controller does not currently suppor t the f ollowing elements that are described in the CPL RFC .
T ANDBERG Border Controller User Manual <address is="fred"> <address-switch field="origin" subfield="host"> <address subdomain-of="annoying.
T ANDBERG Border Controller User Manual 9 Logging The Border Controller provides logging f or troubleshooting and auditing purposes. The e vent log ma y be view ed from the command line by using the eventlog command, specifying the number of lines to displa y .
T ANDBERG Border Controller User Manual 9.3 Event Levels Events are classified by impor tance as detailed in the tab le below . Le vel 1 is considered the most impor tant. The system has a configured logging lev el. Events of le v el numerically equal to and lower than the configured logging le v el are recorded in the e vent log.
T ANDBERG Border Controller User Manual T able 2: Le vel 1 Ev ents (continued) Event Description Registration Remov ed A registration has been remov ed by the gate- keeper/border controller . The Reason ev ent parameter specifies the reason wh y the regis- tration was remo ved.
T ANDBERG Border Controller User Manual T able 3: Ev ents logged at lev el 2 Event Description Incoming Message An incoming message has been received Outgoing Message An outgoing message has been sent 9.4.1 Event data Each Event will ha v e associated data fields.
T ANDBERG Border Controller User Manual T able 4: Ev ent data (continued) Field Description Applicab le ev ents Src-ip Specifies the source IP ad- dress (the IP address of the de vice attempting to estab- lish communications). The source IP is recorded in the dotted decimal f or mat: (num- ber).
T ANDBERG Border Controller User Manual T able 4: Ev ent data (continued) Field Description Applicab le ev ents Dst-Alias • If present, the first H.
T ANDBERG Border Controller User Manual 10 Software Upgrade Software upgr ade can be done in one of two wa ys: 1. Using a web browser (HTTP/HTTPS). 2. Using secure copy (SCP). NO TE T o upgrade the Border Controller, a v alid Release ke y and software file is required.
T ANDBERG Border Controller User Manual • When the upload is completed you should see the f ollowing: • Press Restar t. Y ou should see a confir mation window: • The system will then perf or m a second reboot to restore system parameters . After 3–4 minutes, the Border Controller is ready f or use .
T ANDBERG Border Controller User Manual • Enter pass word when prompted. • W ait until the software has installed completely . This should not tak e more than two minutes. • Reboot the system. After about four minutes the system will be ready to use .
T ANDBERG Border Controller User Manual 11 Command Reference This chapter lists the basic usage of each command. The commands also suppor t more adv anced usage, which is outside the scope of this document. 11.1 Status The status root command, xstatus , returns status information from the Border Controller.
T ANDBERG Border Controller User Manual 11.1.3 externalmanager xstatus ExternalManager Returns information about the external manager . The Exter nal Manager is the remote system (such as the T andberg Management System (TMS)) used to manage the endpoints and network infrastructure.
T ANDBERG Border Controller User Manual 11.1.8 NTP xstatus NTP Repor ts the status of any connection to an NTP server . 11.1.9 Pipes xstatus Pipes xstatus Pipes Pipe n Repor ts call and bandwidth inf or mation f or all pipes on the system.
T ANDBERG Border Controller User Manual 11.1.13 SystemUnit xstatus SystemUnit Repor ts inf or mation about the system as f ollows: Product name Uptime Software v ersion Software name Release date Number of calls suppor ted Number of registered endpoints and ser vices suppor ted Hardware serial number 11.
T ANDBERG Border Controller User Manual xConfiguration Authentication Credential [1..1000] Name: <username> Specifies the username of a credential in the local authentication database.
T ANDBERG Border Controller User Manual xConfiguration Gatekeeper Alternates Alternate [1..5] Address: <IPAddr> Set the IP address of an alter nate Border Controller. Up to 5 alternates may be configured. When the Border Controller receives a Location Request, all alternates will also be queried.
T ANDBERG Border Controller User Manual Determines whether or not the CPL policy engine is active. The def ault is On . xConfiguration Gatekeeper Registration AllowList [1..1000] Pattern: <pattern> Specifies a patter n in the registration allo wed list.
T ANDBERG Border Controller User Manual The IPv4 gatew ay of the system. xConfiguration IP V6 Address: <IPAddr> The IPv6 address of the system. xConfiguration IP V6 Gateway: <IPAddr> The IPv6 gatew ay of the system. All the IP commands listed abov e require a system restar t bef ore they tak e effect.
T ANDBERG Border Controller User Manual Specifies the first node of a link. A node name may be eith er a Zone name or a SubZone name. xConfiguration Links Link [1..100] Node2 Name: <nodename> Specifies the second node of a link. A node name may be either a Zone name or a SubZone name.
T ANDBERG Border Controller User Manual Whether or not a giv en pipe is enforcing total bandwidth restrictions. None corresponds to no bandwidth av ailable . xConfiguration Pipes Pipe [1..100] Bandwidth PerCall Limit: <1..100000000> P er call bandwidth of a pipe.
T ANDBERG Border Controller User Manual 11.2.16 Subzones xConfiguration SubZones DefaultSubZone Bandwidth PerCall Limit: <1..100000000> P er call bandwidth of the def ault subzone .
T ANDBERG Border Controller User Manual xConfiguration SubZones SubZone [1..100] Bandwidth Total Mode: <None/Limited/Unlimited> Whether or not the inde xed subz one is enforcing total bandwidth restrictions . None corresponds to no bandwidth av ailable .
T ANDBERG Border Controller User Manual xConfiguration Traversal UDPProbe KeepAliveInterval: <seconds> Inter v al with which a UDP channel should be refreshed. xConfiguration Traversal TCPProbe RetryInterval: <seconds > Inter v al with which a failed attempt to estab lish a TCP channel should be repeated.
T ANDBERG Border Controller User Manual xConfiguration Zones TraversalZone [1..100] Match [1..5] Pattern Behaviour: <Strip/Leave> Determin es whether the matched pattern should be remov ed from the alias before an LRQ is sent to the indicated zone .
T ANDBERG Border Controller User Manual xcommand ? T o get usage inf or mation f or a specific command, type xcommand <commandname> ? 11.3.1 AllowListAdd xCommand AllowListAdd <allowed alias> Adds an entr y to the allow list, used b y the registration restriction policy .
T ANDBERG Border Controller User Manual 11.3.7 DefaultLinksAdd xCommand DefaultLinksAdd Restores the f actor y def ault links for bandwidth control. 11.3.8 DefaultV aluesSet xCommand DefaultValuesSet Level <level> Resets system parameters to def ault v alues.
T ANDBERG Border Controller User Manual 11.3.12 FeedbackRegister xCommand FeedbackRegister <ID> <URL> <Expression> Registers f or notifications on the ev ent or status change described by the Expression. Notifica- tions are sent in XML f or mat to the specified URL.
T ANDBERG Border Controller User Manual 11.3.17 OptionKe yAdd xCommand OptionKeyAdd <key> Adds a new option k ey . 11.3.18 OptionKe yDelete xCommand OptionKeyDelete <index> Deletes the inde xed option k ey .
T ANDBERG Border Controller User Manual 11.3.23 SubZoneDelete xCommand SubZoneDelete <index> Deletes the inde xed subz one. 11.3.24 T raversalZoneAd d xCommand TraversalZoneAdd Creates a new tr av ersal zone , allowing a T ANDBERG Gatekeeper to connect to the Border Controller .
T ANDBERG Border Controller User Manual T o show a specific set of history data, type: xhistory <name> xhistory calls xhistory calls call <n> Displa ys histor y data f or up to the last 255 calls handled by the Border Controller. Call entr ies are added to the Call Histor y on call completion.
T ANDBERG Border Controller User Manual xFeedback Register Event/<CallAttempt/Connected/Disconnected/ConnectionFailure/Registration/ Unregistration/Bandwidth/ResourceUsage> Registers f or feedbac k on the occurrence of the chosen Event, e.
T ANDBERG Border Controller User Manual 11.6.4 Relkey relkey Displa ys the release ke y that this software has been installed with. 11.6.5 Syslog syslog <level> [ipaddr] [ipaddr] Enables tr acing to the console. le vel Specifies the detail at which to trace.
T ANDBERG Border Controller User Manual A Appendix: Configuring DNS Ser ver s In the e xamples below , we set up an SR V record to handle H.323 URIs of the form user@example .com These are handled by the system with the fully qualified domain name of gatek eeper1.
T ANDBERG Border Controller User Manual as e xpected. nslookup -querytype=srv h323ls. udp.example.com and check the output. 66.
T ANDBERG Border Controller User Manual B Appendix: Configuring LD AP Servers B.1 Microsoft Active Directory B.1.1 Prerequisites These comprehensive step b y step instructions assume that Active Directory is installed. F or details on installing Active Directory please consult your Windows documentation.
T ANDBERG Border Controller User Manual objectClass: h323Identity objectClass: h235Identity commUniqueId: comm1 h323Identityh323-ID: MeetingRoom1 h323IdentitydialedDigits: 626262 h235IdentityEndpointI.
T ANDBERG Border Controller User Manual B.2.2 Installing the H.350 schemas The f ollowing ITU specification describes the schemas which are required to be installed on the LD AP ser v er : H.350 Director y services architecture for multimedia conf erencing - An LD AP schema to repre- sent endpoints on the network.
T ANDBERG Border Controller User Manual Add the H.350 objects Create an ldif file with the f ollowing contents: # MeetingRoom1 endpoint dn: commUniqueId=comm1,ou=h350,dc=my-domain,dc=com objectClass:.
T ANDBERG Border Controller User Manual C Appr ov als The product has been approv ed by v arious inter national approv al agencies, among others: UL and Nemko . According to their F ollow-Up Inspection Scheme, these agencies also perf or m production inspections at a regular basis, f or all production of T ANDBERG’ s equipment.
T ANDBERG Border Controller User Manual D T echnical Specifications System Capacity 500 registered tra versal endpoints 100 tra versal calls 100 zones Option ke ys ma y restr ict the system to a lo wer capacity than specified abov e.
T ANDBERG Border Controller User Manual Physical Dimensions Height: 4.35 cm (1.72 inches) Width: 42.6 cm (16.8 inches) Depth: 22.86 cm (9 inches) 1U rac k mounted chassis P ower suppl y 90 264V full r.
T ANDBERG Border Controller User Manual References [1] ITU Specification: H.235 Secur ity and encryption for H-Series (H.323 and other H.245- based) multimedia terminals [2] ITU Specification: H.350 Director y ser vices architecture f or multimedia conf erencing [3] http://www.
T ANDBERG Border Controller User Manual E Glossary Alias The name an endpoint registers with the Border Controller. Other endpoints can then use this name to call it. ARQ, Admission Request An endpoint RAS request to make or ans wer a call. E.164 An ITU standard f or structured telephone numbers.
Index about, 63 ActiveDirectory , see LDAP servers Admission Request, 75 alias, 8, 75 AllowList, 20, 49 AllowListAdd, 57 AllowListDelete , 57 alternate gatekeeper , 9–10, 48, 56 authentication, 21.
T ANDBERG Border Controller User Manual OpenLD AP , see LD AP ser v ers option ke y , 51, 75 pass word, 5, 54 def ault, 5, 7 recov er y , 7 pattern, 61 pipe, 15–17, 51–52 P or tRegistration, 45, 6.
An important point after buying a device TANDBERG D13691.03 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought TANDBERG D13691.03 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data TANDBERG D13691.03 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, TANDBERG D13691.03 you will learn all the available features of the product, as well as information on its operation. The information that you get TANDBERG D13691.03 will certainly help you make a decision on the purchase.
If you already are a holder of TANDBERG D13691.03, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime TANDBERG D13691.03.
However, one of the most important roles played by the user manual is to help in solving problems with TANDBERG D13691.03. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device TANDBERG D13691.03 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
