TANDBERG D13691.03 Manuale utente

TANDBERG Border Controller

User Manual

Software version Q3.0

D13691.03

This document is not to be reproduced in whole or in part without permission in writing from:

TANDBERG Border Controller User Manual

Trademarks and copyright

This document contains information that is proprietary to TANDBERG ASA. No part of this

publication may be reproduced, stored in a retrieval system, or transmitted, in any form, or

by any means, electronically, mechanically, by photocopying, or otherwise, without the prior

written permission of TANDBERG ASA. Nationally and internationally recognized trademarks

and tradenames are the property of their respective holders and are hereby acknowledged.

Portions of this software are licensed under 3rd party licenses. See the CD accompanying this

product for details.

Disclaimer

The information in this document is furnished for informational purposes only, is subject to change

without prior notice, and should not be construed as a commitment by TANDBERG ASA.

The information in this document is believed to be accurate and reliable, however TANDBERG

ASA assumes no responsibility or liability for any errors or inaccuracies that may appear in this

document, nor for any infringements of patents or other rights of third parties resulting from its

use. No license is granted under any patents or patent rights of TANDBERG ASA.

2006, TANDBERG ASA

TANDBERG Border Controller User Manual

Environmental Issues

Thank you for buying a product which contributes to a reduction in pollution, and thereby helps

save the environment. Our products reduce the need for travel and transport and thereby reduce

pollution. Our products have either none or few consumable parts (chemicals, toner, gas, paper).

Our products are low energy consuming products.

TANDBERG’s Environmental Policy

•TANDBERG’s Research and Development is continuously improving TANDBERG’s prod-

ucts towards less use of environmentally hazardous components and substances as well

as to make the products easier to recycle.

•TANDBERG’s products are Communication Solutions. The idea of these solutions is to

reduce the need for expensive, time demanding and polluting transport of people. Through

people’s use of TANDBERG’s products, the environment will beneﬁt from less use of

polluting transport.

•TANDBERG’s wide use of the concepts of outsourcing makes the company itself a company

with a low rate of emissions and effects on the environment.

•TANDBERG’s policy is to make sure our partners produce our products with minimal

inﬂuence on the environment and to demand and audit their compatibility according to

applicable agreements and laws (national and international).

Environmental Considerations

Like other electronic equipment, the TANDBERG Border Controller contains components that

may have a detrimental effect on the environment. TANDBERG works continuously towards

eliminating these substances in our products.

•Printed-wiring boards made of plastic, with ﬂame-retardants like Chloride or Bromide.

•Component soldering that contains lead.

•Smaller components containing substances with possible environmental effect.

After the product’s end of life cycle, it should be returned to authorized waste handling and should

be treated according to National and International Regulations for waste of electronic equipment.

TANDBERG Border Controller User Manual

Operator Safety Summary

For your protection, please read these safety instructions completely before operating the

equipment and keep this manual for future reference. The information in this summary is

intended for operators. Carefully observe all warnings, precautions and instructions both on the

apparatus and in the operating instructions.

Warnings

•Water and moisture - Do not operate the equipment under or near water - for example near

a bathtub, kitchen sink, or laundry tub, in a wet basement, or near a swimming pool or in

areas with high humidity.

•Cleaning - Unplug the apparatus from the wall outlet before cleaning or polishing. Do not

use liquid cleaners or aerosol cleaners. Use a lint-free cloth lightly moistened with water for

cleaning the exterior of the apparatus.

•Ventilation - Do not block any of the ventilation openings of the apparatus. Install in

accordance with the installation instructions. Never cover the slots and openings with a

cloth or other material. Never install the apparatus near heat sources such as radiators,

heat registers, stoves, or other apparatus (including ampliﬁers) that produce heat.

•Grounding or Polarization - Do not defeat the safety purpose of the polarized or grounding-

type plug. A polarized plug has two blades with one wider than the other. A grounding type

plug has two blades and a third grounding prong. The wide blade or third prong is provided

for your safety. If the provided plug does not ﬁt into your outlet, consult an electrician.

•Power-Cord Protection - Route the power cord so as to avoid it being walked on or pinched

by items placed upon or against it, paying particular attention to the plugs, receptacles, and

the point where the cord exits from the apparatus.

•Attachments - Only use attachments as recommended by the manufacturer.

•Accessories - Use only with a cart, stand, tripod, bracket, or table speciﬁed by the manu-

facturer, or sold with the apparatus. When a cart is used, use caution when moving the

cart/apparatus combination to avoid injury from tip-over.

•Lightning - Unplug this apparatus during lightning storms or when unused for long periods

of time.

•Servicing - Do not attempt to service the apparatus yourself as opening or removing covers

may expose you to dangerous voltages or other hazards, and will void the warranty. Refer

all servicing to qualiﬁed service personnel.

•Damaged Equipment - Unplug the apparatus from the outlet and refer servicing to qualiﬁed

personnel under the following conditions:

–When the power cord or plug is damaged or frayed

–If liquid has been spilled or objects have fallen into the apparatus

–If the apparatus has been exposed to rain or moisture

iii

TANDBERG Border Controller User Manual

–If the apparatus has been subjected to excessive shock by being dropped, or the

cabinet has been damaged

–If the apparatus fails to operate in accordance with the operating instructions.

TANDBERG Border Controller User Manual

Contents

1 Introduction 1

1.1 TANDBERG Border Controller Overview . . . . . . . . . . . . . . . . . . . . . . . 2

2 Installation 3

2.1 Precautions....................................... 3

2.2 Unpacking........................................ 3

2.3 Mounting ........................................ 4

2.4 ConnectingCables................................... 4

2.5 SwitchingontheSystem................................ 4

2.6 Border Controller Initial Conﬁguration . . . . . . . . . . . . . . . . . . . . . . . . 5

3 Getting started 7

3.1 SystemAdministration................................. 7

3.2 Registration....................................... 8

3.3 NeighborGatekeepers................................. 8

3.4 Alternate Border Controllers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

3.5 CallControl....................................... 11

3.6 FirewallTraversal.................................... 13

4 Bandwidth Control 14

4.1 Bandwidth Control and Firewall Traversal . . . . . . . . . . . . . . . . . . . . . . 16

4.2 Bandwidth Control Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

5 Registration Control 20

5.1 Registration Restriction Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

5.2 Authentication...................................... 21

6 URI Dialing 23

6.1 Creating DNS SRV records . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

7 Example Traversal deployments 25

7.1 Simple Enterprise deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

7.2 EnterpriseGatekeepers ................................ 26

7.3 Dialing Public IP addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

7.4 Neighboredenterprises ................................ 27

7.5 URI dialing from within the enterprise . . . . . . . . . . . . . . . . . . . . . . . . 27

8 Call Policy 29

8.1 Making Decisions Based on Addresses . . . . . . . . . . . . . . . . . . . . . . . 29

8.2 CPLScriptActions................................... 31

8.3 Unsupported CPL Elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

8.4 CPLExamples ..................................... 32

9 Logging 34

9.1 Controlling what is logged . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

9.2 Eventlogformat .................................... 34

9.3 EventLevels ...................................... 35

TANDBERG Border Controller User Manual

9.4 LoggedEvents ..................................... 35

9.5 RemoteLogging .................................... 39

10 Software Upgrade 40

10.1 Upgrading Using HTTP(S) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

10.2UpgradingUsingSCP ................................. 41

11 Command Reference 43

11.1Status.......................................... 43

11.2Conﬁguration ...................................... 46

11.3Command........................................ 56

11.4History.......................................... 61

11.5Feedback ........................................ 62

11.6Othercommands.................................... 63

A Appendix: Conﬁguring DNS Servers 65

A.1 MicrosoftDNSServer ................................. 65

A.2 VerifyingtheSRVrecord................................ 65

B Appendix: Conﬁguring LDAP Servers 67

B.1 Microsoft Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

B.2 OpenLDAP ....................................... 68

C Approvals 71

D Technical Speciﬁcations 72

E Glossary 75

TANDBERG Border Controller User Manual

1 Introduction

This User Manual is provided to help you make the best use of your TANDBERG Border

Controller.

A Border Controller is a key component of TANDBERG’s ExpresswayTMﬁrewall traversal solution.

Used in conjunction with a TANDBERG Gatekeeper or TANDBERG traversal enabled endpoints

it allows calls to be made into and out of a secured private network.

The main features of the TANDBERG Border Controller are:

•IPv4 and IPv6 support

•Registration of traversal enabled endpoints.

•Supports up to 500 registered TANDBERG traversal endpoints.

•Secure ﬁrewall traversal of any ﬁrewall or NAT.

•Up to 100 traversal calls.

•Supports up to 100 neighboring zones.

•Flexible zone conﬁguration with preﬁx and sufﬁx support.

•URI dialing with DNS enabling global connectivity.

•Can function as a standalone Border Controller or be neighbored with other Border Con-

trollers and Gatekeepers.

•Can be used to control the amount of bandwidth used both within the Border Controller

zone and to neighboring Border Controllers and Gatekeepers.

•Can limit total bandwidth usage and set maximum per call bandwidth usage with automatic

down-speeding if call exceeds per-call maximum.

•Can be managed with TANDBERG Management Suite 11.0 or newer, or as a standalone

system with RS-232, Telnet, SSH, HTTP and HTTPS.

•Embedded setup wizard on serial port for initial conﬁguration.

Note that features may vary depending on software package.

TANDBERG Border Controller User Manual

1.1 TANDBERG Border Controller Overview

On the front of the Border Controller there are three LAN interfaces, a serial port (Data 1) and

an LED showing the power status of the system. The LAN 1 interface is used for connecting

the system to your network, LAN interface 2 and 3 are disabled. The serial port (Data 1) is for

connection to a PC, and power on is indicated by the Light Emitting Diode (Power) being lit.

The back of the Border Controller has a power connector, a power switch, and a serial port (Data

2) for connecting to a PC.

TANDBERG Border Controller User Manual

2 Installation

2.1 Precautions

•Never install communication equipment during a lightning storm.

•Never install jacks for communication cables in wet locations unless the jack is speciﬁcally

designed for wet locations.

•Never touch uninstalled communication wires or terminals unless the communication line

has been disconnected at the network interface.

•Use caution when installing or modifying communication lines.

•Avoid using communication equipment (other than a cordless type) during an electrical

storm.

•There may be a remote risk of electrical shock from lightning.

•Do not use communication equipment to report a gas leak in the vicinity of the leak.

•The socket outlet shall be installed near to the equipment and shall be easily accessible.

•Never install cables without ﬁrst switching the power OFF.

•This product complies with directives: LVD 73/23/EC and EMC 89/366/EEC.

•Power must be switched off before power supplies can be removed from or installed into

the unit.

2.2 Unpacking

The TANDBERG Border Controller is delivered in a special shipping box which should contain

the following components:

•Border Controller unit

•Installation sheet

•User manual and other documentation on CD

•Rack-ears and screws

•Kit with 4 rubber feet

•Cables:

–Power cables

–One Ethernet cable

–One null-modem RS-232 cable

Indice

Altri manuali TANDBERG Controllori

TANDBERG

TANDBERG Border Controller Manuale utente

Manuali Controllori popolari di altre marche

Digiplex

Digiplex DGP-848 Istruzioni operative

YASKAWA

YASKAWA SGM series Manuale utente

Sinope

Sinope Calypso RM3500ZB Manuale utente

Isimet

Isimet DLA Series Style 2 Manuale di installazione

LSIS

LSIS sv-ip5a Manuale utente

Rockwell Automation

Rockwell Automation 1769-L31 Manuale utente

Airflow

Airflow Uno hab Manuale utente

ABB

ABB ACS580-01 drives Manuale utente

Panasonic

Panasonic GM1 Series Manuale utente

Emerson

Emerson SW93 Manuale utente

AutoAqua

AutoAqua Smart ATO micro SATO-120P Manuale utente

Panasonic

Panasonic FP? Positioning Unit RTEX Manuale utente

Samson

Samson Type 5824 Manuale di servizio

Alpha IP

Alpha IP MIOB 21001 Manuale utente

Siemens

Siemens OpenAir GMA 1 Series Manuale utente

Surecom

Surecom SR-629 Manuale utente

Fishman

Fishman TriplePlay Manuale utente

Regulus

Regulus SRS1 T Manuale utente