TANDBERG Video Communication Server User Manual (English)

To Next Page

D14049.05

February 2009

Video

Communication

Server

ADMINISTRATOR

GUIDE

Version X4.1

February 2009

Introduction Getting started

Overview and

status

System

conﬁguration

VCS

conﬁguration

Zones and

neighbors

Call

processing

Bandwidth

control

Firewall

traversal

Appendices

Applications Maintenance

Table of Contents3
Legal Notices10
Safety Instructions and Approvals11
Environmental Issues12
VCS Base Applications15
Standard Features16
Optional Features17
What's New in this Version18
The Administrator Guide19
Getting Started20
What's in the Box21
System Administration Access24
General Page Features27
Overview Page30
Status31
- System Information31
- Ethernet Status31
- IP Status32
- Resource Usage32
- Registrations by Device33
- Registrations by Alias33
- Registration History34
- Registration Details34
- Calls35
- Call History35
- Call Summary36
- Call Media36
- Call Details36
- Searches37
  - About Searches37
- Search History37
- Search Details37
- Local Zone38
- Zones38
- Links39
- Pipes39
- STUN Relays40
- Presence40
- OCS Relay41
- Warnings41
- Eventlog42
  - Event Log Color Coding42
  - Event Log Format43
  - Message Details Field44
  - Events and Levels45
- Conﬁguration Log49
  - Types of Conﬁguration Log Events49
System Conﬁguration49
System Conﬁguration51
- System Administration51
  - About the System Name51
  - About Administration Access Settings51
- Ethernet51
- Dns53
  - About DNS Servers53
  - About the DNS Domain Name53
- Time53
- Login Page54
- External Manager54
  - About External Managers54
  - Conﬁguration54
    - Tandberg Video Communications Server54
- Snmp54
  - About SNMP54
- Logging55
VCS Conﬁguration56
- H.323 Overview57
  - About H.323 on the VCS57
  - Using the VCS as an H.323 Gatekeeper57
- H.323 Endpoint Registration57
- Conﬁguring H.32358
Sip59
- SIP Overview59
- SIP Endpoint Registration60
  - Movi V2.0 Clients60
- Conﬁguring SIP61
- SIP Domains61
Interworking62
- Overview62
- Conﬁguring Interworking62
  - H.323 <-> SIP Interworking Mode62
  - Enabling SIP Endpoints to Dial H.323 Numbers62
Registration Control63
- Registration Overview63
- Authentication65
- Authentication Using LDAP66
  - Overview66
    - Conﬁguring the LDAP Server Directory66
    - Securing the LDAP Connection with TLS66
  - Alias Origin67
- Authentication Using a Local Database68
  - Overview68
  - Conﬁguring the Local Authentication Database68
- Registering Aliases69
- Allow and Deny Lists70
Zones and Neighbors72
Introduction73
- About Your Video Communications Network73
  - Example Network Diagram73
Local Zone and Subzones74
- Overview74
- Conﬁguring the Local Zone and Its Subzones74
  - Bandwidth Management74
  - Local Zone Matches74
- Traversal Subzone75
  - What Are Traversal Calls75
  - Conﬁguring the Traversal Subzone Ports75
Zones76
- About Zones76
- Neighbor Zone76
Traversal Client Zone76
Traversal Server Zone76
ENUM Zone77
DNS Zone77
Default Zone77
Adding Zones78
- Name78
- Type78
Conﬁguring Zones - Common Options78
- Hop Count78
- Match 1 - Match 578
Conﬁguring Neighbor Zones79
- Protocol79
- Location79
- Advanced79
Conﬁguring Traversal Client Zones81
- Authentication Username81
- Protocol81
- Advanced81
- Client Settings81
- Location81
Conﬁguring Traversal Server Zones82
- Client Authentication Username82
- Protocol82
- Advanced82
- UDP/TCP Probes82
Conﬁguring ENUM Zones83
- DNS Settings83
- Protocol83
Conﬁguring DNS Zones83
- Advanced83
Clustering and Peers85
- About Clustering85
  - About the Conﬁguration Master85
- Conﬁguring Clusters86
- What Conﬁguration Is and Isn't Replicated87
- Clustering and Findme88
  - Overview88
  - Conﬁguration88
    - Enabling the Replication of Findme Information88
    - Enabling SSH88
- Clustering and Presence88
- Backup and Restore88
- Upgrades and Downgrades88
  - Upgrading to X3.0 or Later88
  - Downgrading from X3.0 or Later88
- Cluster Subzone89
- Neighboring the Local VCS to Another VCS Cluster89
  - Overview89
  - Conﬁguration89
Dial Plans90
- About Dial Plans90
- Flat Dial Plan90
- Structured Dial Plan90
- Hierarchical Dial Plan90
Call Processing91
Introduction92
- Call Processing Diagram92
  - VCS Search Process92
Dialing by Address Types93
- About the Different Address Types93
- Dialing by IP Address93
- Dialing by H.323 ID or E.164 Alias93
- Dialing by H.323 or SIP URI93
- Dialing by ENUM93
  - Endpoints Registered to a VCS Expressway93
Hop Counts94
- About Hop Counts94
- Conﬁguring Hop Counts94
Searches and Transforms95
- Overview of Searches and Transforms95
  - About Searches95
  - About Transforms95
- Pre-Search Transforms96
- Zone Searching and Transforming97
- Examples99
Call Policy104
- About Call Policy104
- Call Policy and Authentication104
  - Authentication Mode off104
  - Authentication Mode on104
    - Sip104
- Enabling Call Policy105
- Conﬁguring Basic Call Policy Using the Web Interface105
- Conﬁguring Call Policy Using a CPL Script106
URI Dialing107
- Overview107
  - URI Dialing Without DNS107
  - URI Dialing Via DNS107
- Enabling URI Dialing Via DNS107
- URI Resolution Process Using DNS108
  - Sip108
- URI Dialing Via DNS for Outgoing Calls109
- URI Dialing Via DNS for Incoming Calls110
- Firewall Traversal111
  - Recommended Conﬁguration111
ENUM Dialing112
- Overview112
- Process112
- Enabling ENUM Dialing112
- ENUM Dialing for Outgoing Calls113
- ENUM Dialing for Incoming Calls115
IP Dialing116
- About Unregistered Endpoints116
- Callstounknownipaddresses116
Call Conﬁguration117
- Call Routed Mode117
- Call Loop Detection Mode117
- Fallback Alias117
  - Overview117
  - Example Usage117
Call Ids, Serial Numbers and Tags118
- Identifying a Particular Call118
Disconnecting Calls119
- Disconnecting a Call Using the Web Interface119
- Disconnecting a Call Using the CLI119
- Issues When Disconnecting SIP Calls119
- Bandwidth Control120
Bandwidth Control Overview121
- Bandwidth Control on the VCS121
- Example Network Deployment121
Subzones122
- About Subzones and Bandwidth Control122
- About the Traversal Subzone122
  - Traversal Calls122
  - Bandwidth Consumption of Traversal Calls122
- About the Default Subzone122
- Default Links between Subzones122
- Creating a Subzone123
- Conﬁguring a Subzone123
- Applying Bandwidth Limitations to Subzones124
  - Types of Limitations124
  - How Different Bandwidth Limitations Are Managed124
Links125
- About Links125
  - Default Links125
- Creating and Editing Links125
Pipes126
- About Pipes126
- Creating and Editing Pipes126
- Applying Pipes to Links127
Default Bandwidth and Downspeeding128
- About the Default Call Bandwidth128
- About Downspeeding128
- Conﬁguring Default Call Bandwidth and Downspeeding128
Bandwidth Control Examples129
- Example Without a Firewall129
- Example with a Firewall130
Firewall Traversal131
Firewall Traversal Overview132
- About Expressway132
  - How Does It Work132
- VCS as a Firewall Traversal Client132
- VCS as a Firewall Traversal Server132
Quick Guide to VCS Traversal Client - Server Conﬁguration133
- Overview133
- VCS Control (Client)133
- VCS Expressway (Server)133
Firewall Traversal Protocols and Ports134
- Overview134
- Expressway Process134
- H.323 Firewall Traversal Protocols134
- SIP Firewall Traversal Protocols134
- Ports for Initial Connections from Traversal Clients135
- Assent Ports135
  - Call Signaling135
  - Media135
- SIP Ports135
- H.460.18/19 Ports135
- STUN Ports135
- Ports for Connections out to the Public Internet135
Firewall Traversal and Authentication136
- Overview136
- Authentication and NTP136
Other Issues137
- Firewall Traversal and Dual Network Interfaces137
- Firewall Conﬁguration137
Conﬁguring the VCS as a Traversal Client138
- Adding and Conﬁguring a Traversal Client Zone138
Conﬁguring the VCS as a Traversal Server139
- Overview139
- Adding and Conﬁguring a Traversal Server Zone139
- Conﬁguring Traversal for Endpoints139
- Conﬁguring Traversal Server Ports140
  - Overview140
  - Conﬁguration140
- STUN Services141
Conference Factory143
- Overview143
  - Process143
- Conﬁguration143
Presence144
- Overview144
- Presence Server144
- Presence User Agent (PUA)145
- Conﬁguring Presence146
  - Enabling and Disabling Presence Services146
  - Presence Server Expiration Times146
- Viewing Presence Status147
OCS Relay148
- Overview148
- Conﬁguring OCS Relay148
  - VCS Conﬁguration148
  - Other Requirements148
- Viewing OCS Relay Status148
Findme™ (User Policy)149
- Overview149
- Enabling Findme on the VCS150
  - Conﬁguring the User Policy Manager150
- Managing Findme User Accounts151
TANDBERG Findme™ User Guide152
- About Findme152
- Accessing the Findme Conﬁguration Page152
  - Findme User Accounts152
  - Individual Versus Group Findme152
- Conﬁguring Your Findme User Account153
Maintenance154
Upgrading Software155
- Overview155
- Upgrading Using the Web Interface156
- Upgrading Using SCP/PSCP156
Downgrading Software157
- Downgrade Procedure157
- Impact on New Features157
Option Keys158
- Overview158
- Adding Option Keys Using the Web Interface158
- Adding Option Keys Using the CLI158
Security159
- Overview159
- Enabling Security159
  - Trusted CA Certiﬁcate159
  - Server Certiﬁcate Data159
Administrator Accounts160
- Overview160
- Adding and Editing an Administrator Account160
Backup and Restore161
- Overview161
  - Limitations161
- Creating a Backup of Your VCS Conﬁguration161
- Restoring a Previous Backup161
System Snapshot162
- Overview162
- Creating a System Snapshot162
Incident Reporting163
- Overview163
  - Warning: Privacy-Protected Personal Data163
- What Information Does the Report Contain163
- Viewing Incident Reports164
  - Viewing a List of All Incidents164
  - Viewing Details of a Particular Incident164
- Sending Incident Reports Manually164
  - Removing Sensitive Information from the Report164
- Sending Incident Reports Automatically164
Tools165
- Check Pattern165
- Locate165
- Port Usage166
Restarting and Shutting down167
- Restarting167
  - Restarting Using the Web Interface167
  - Restarting Using the CLI167
- Shutting down167
  - Shutting down Using the Web Interface167
  - Shutting down Using the CLI167
Restoring Default Conﬁguration168
- Overview168
- Defaultvaluesset Level 3168
- Applications Conference Factory168
Password Encryption171
- Overview171
  - Web Interface171
  - Command Line Interface (CLI)171
- Maximum Length of Passwords171
CPL Reference173
- Overview of CPL on the VCS173
- Address-Switch173
- Otherwise175
- Not-Present175
- Location176
- Rule-Switch176
- Proxy176
- Reject176
- Unsupported CPL Elements176
- CPL Examples177
Regular Expression Reference182
- Overview182
- Common Regular Expressions182
Pattern Variable Reference183
- Overview183
- Valid Variable Strings183
  - Tandberg Video Communications Server183
VCS Port Reference184
- Overview184
- VCS Ports184
DNS Conﬁguration187
- Overview187
  - Verifying the SRV Record187
- Microsoft DNS Server187
- Bind 8 & 9187
LDAP Conﬁguration188
- About the LDAP Databases188
- Downloading the H.350 Schemas188
- Microsoft Active Directory188
- Openldap190
Command Reference - Xconﬁguration192
Command Reference - Xcommand228
Command Reference - Xstatus242
Bibliography260
Glossary261
Contact Information266

Need help?

Do you have a question about the TANDBERG Video Communication Server and is the answer not in the manual?

TANDBERG Video Communication Server Specifications

General

Video Codecs	H.264, H.263, H.261
Model	VCS
Supported Protocols	H.323, SIP
Video Resolution	Up to 1080p
Max Participants	Depends on model and configuration
Deployment	On-premises
Integration	Microsoft Lync, Cisco
Form Factor	Rack-mountable
Audio Codecs	G.711, G.722, AAC-LD
Management	Web-based, CLI
Audio Standards	G.711, G.722, AAC-LD
Network Protocols	TCP/IP, RTP, RTCP
Maximum Calls	Varies depending on model and licensing
Encryption	AES
Management Interface	Web-based, CLI
Power Supply	Redundant power supplies available

TANDBERG Video Communication Server User Manual

Table of Contents

TANDBERG Video Communication Server Specifications