Polycom V2IU 4350 manuel d'utilisation

User Manual V 2 IU 4350 Converged Network Appliance V7.2.2 — May 2007[...]

Polycom Inc. 4750 Willow Road Pleasanton, CA 94588-2708 USA No part of this document may be reproduce d or transmitted in any form or by any means, el ectronic or mechanical, for any purpose, without the express written permission of Polycom, Inc. Under the law, reprod ucing includ es translating into another language or format. As between the part[...]

1 Contents 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1–1 The V2IU 4350 Converged Network Appliance . . . . . . . . . . . . . . . . . . . . . 1–1 T1 Wide Area Network (WAN) Access Router . . . . . . . . . . . . . . . . . . 1–1 Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

User Manual V 2 IU 4350 Converged Network Appliance 2 System Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–12 Configure the LAN Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–12 Configuring VLANs in the 4350 . . . . . . . . . . . . . . . . . . . . . . . . . . 3?[...]

Conte nts 3 Configuring Peering Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–47 Adding an H.323 Prefix Entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–48 Clients List Lock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3–49 Enabling the Clients List [...]

User Manual V 2 IU 4350 Converged Network Appliance 4 4 System Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4–1 Viewing Software Version, Hardware Platform and the LAN MAC Address 4–1 Viewing the ALG registration code . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4–2 Enter the Registration Code . . . . . .[...]

Conte nts 5 FCC PART 68 NOTICE TO USERS OF DIGITAL SERVICE Regulatory Notices–10 INDUSTRY CANADA (IC) NOTICE . . . . . . . . . . . . . Regulatory Notices–11[...]

User Manual V 2 IU 4350 Converged Network Appliance 6[...]

1 - 1 1 Introduction The V 2 IU 4350 Converged Network Appliance The V 2 IU 4350 is an intelligent, all-in-one netw orking solution for enterprises and service providers. It r educes costs by simplifying the deployment, management and security of converged voice, video and data networks. The 4350 provides the following importan t functions for conv[...]

User Manual V 2 IU 4350 Converged Network Appliance 1 - 2 • Meets FCC part 68 protection re quirements Security A stateful packet ins pection firewall i s used in combination with a VoIP application layer gat eway to provide comprehensiv e “media-aware” security. The 4350 also supports IPSec for secure site-to-site networking. Vo I P The 4350[...]

Introduction 1 - 3 — Diffserv mark ing and polici ng — Traffic shaping — VoIP call admission control preven ts oversubscription of priority queue • Security — Stateful packet inspection firewall — VoIP aware firewall dynamically provisions and closes UDP ports used for VoIP calls — IPSec: 3DES , SHA-1 — NAT/PAT server hides enterpri[...]

User Manual V 2 IU 4350 Converged Network Appliance 1 - 4 Back Panel The back panel of the 4350E cont ains the following connections: Name Description A Power Connector Accepts the plug from the suppli ed power cord to conne ct the unit to an AC power source B 10/100 Mbps LAN Ports 4 x Local Area Network (LAN) ports to connect the IP phones or an E[...]

2 - 1 2 Getting Star ted Physical Installation The V 2 IU 4350 is designed for desktop, rack or wall-mount installation. Please observe the following guidelines when installing the system: • Never assume that the AC cord is disconnected from a power source. Always check first. • Always connect the AC power cord to a properly grounded AC outlet [...]

User Manual V 2 IU 4350 Converged Network Appliance 2 - 2 • If the T1/E1 port will be used to connect to WAN: — T1 cable to connect the T1/E1 port to a T1 line. • Ethernet cables to connect the LAN port s to LAN switches or to individual IP phones. They can also be used to connect the Ethernet WAN port to a WAN router, a Cable Modem or a DSL [...]

Getting Started 2 - 3 4. Mount the 4350 on the wall as shown below. Do not mount the 4350 on the wall as shown below. 1. Connect the power and network cables to the appropriate ports on the back of the system. Rack-Mount Installation You can mount the 4350 in a shelf by us ing the ra ck-mount kit supplied with the product. 1. Attach the ear mounts [...]

User Manual V 2 IU 4350 Converged Network Appliance 2 - 4 Connecting the Power and Cables The 4350 comes with an AC power cord and power adapter for connecting the unit to the AC outlet. If you are connecting to the WAN using the T1, then connect the T1 cable to the T1/E1 port and the other end of the ca ble to the T1 line. Enable the T1 port from [...]

Getting Started 2 - 5 2. Launch a web browser on the PC and enter the URL string: 192.168.1.1. Press Return . 3. Enter the userna me root and the pas sword default to log into th e system. The 4350 main configuration menu appears. 4. Configure the system using the information provided in Chapter 3 . Note For secure management of your network, be su[...]

User Manual V 2 IU 4350 Converged Network Appliance 2 - 6[...]

3 - 1 3 Configuring the V 2 IU 4350 The V 2 IU 4350 is a flexible, easy to use converged network appliance that provides many critical networking fu nctions for IP based voice, video and data. It can be installed in several diff erent topologies: • At the custom er premis e for IP Ce ntrex and hosted video applications • At the station side of [...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 2 Configuration Guide For IP Centrex Applications A typical 4350 installation for an IP Centrex application requires no external router or firewall. The 4350 WAN port is connected directly to the T 1/E1 line and the LAN port(s) are connected di rectly to enterprise d evices and/or Ethernet swi[...]

Configuring the V2IU 4350 3 - 3 • NAT/PAT translation for IP phones and PC’s. This allows a single public IP address to be used on the WAN link to repr esent all of the private IP addresses assigned to the LAN IP phones and PC’s. • Static NAT entries. This enables th e customer to use a WAN public IP address for data servers (web, mail, ft [...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 4 Configuration Guide For Station Side IP PBX Applications Most private enterprise VoIP networ ks use an IP PBX at the corporate headquarters location to provide vo ice switching between headquarters, branch offices and the PSTN. The 4350 is used in these environments to securely connect branc[...]

Configuring the V2IU 4350 3 - 5 The IP PBX in the corporate headquarte rs location performs VoIP signaling and the 4350 acts as a proxy for the voice devices installed at the branch office. Please note that in the configuration the 4350 located at the H eadquarters location is acting as a WAN router only. The 4350s installed at the brand offices pe[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 6 Configuration Guide For T r unk Side IP PBX Applications Companies with existing IP-based WAN links for inter-office voice and da ta communications can use the 4350 as a traffi c shaper to meet the stringent jitter, latency and packet loss req uirements for toll quality voice. The 435 0 is d[...]

Configuring the V2IU 4350 3 - 7 Configuration Outline Ta s k Subt ask Configure For T runk Side IP PBX Application? System Configuration configure LAN/W AN interface Ye s set ethernet link rate Optional enable the DHCP server Not required configure SNMP Optional V oIP Configuration enable the V oIP ALG Not required configure a V oIP subnet route No[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 8 Configuration Guide For Hosted Video Applications A typical 4350 installa tion for hosted video applications is depicted in the diagram below. In this scenario, the 4350s are used to connect all of the video endpoints to the Gatekeeper. The video endpoints should be configured to point to th[...]

Configuring the V2IU 4350 3 - 9 • Traffic shaping and priority queuin g to guarantee high quality video traffic. These mechanisms protect vide o and data traffic from contending for the same network resources to guarantee l ow latency and the highest call quality possi ble for voice and video traffic. At the same time they ensure the best utiliza[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 10 Configuration Guide For Enterprise Video Applications A typical 4350 installati on for enterprise video applications is depict ed in the diagram below. In this scenario, the 4350s are used to connect all of the video endpoints to the Gatekeeper. The video endpoints should be configured to p[...]

Configuring the V2IU 4350 3 - 11 call quality possi ble for voice and video traffic. At the same time they ensure the best utilization of WAN ba ndwidth by enabling data traffic to burst up to full line rate in the ab sence of video calls. Precedence is automatically given to traffic comi ng from video endp oints and other devices using the 4350’[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 12 System Configuration This section explains how to configure th e 4350 to function in your IP network. You will configure t he T1/E1 WAN inte rface, Ethernet interfaces, network addresses, DNS setti ngs, default gate way, SNMP s ettings and change the administrative password. 1. Physically c[...]

Configuring the V2IU 4350 3 - 13 3. Press Submit. Configuring VLANs in the 4350 As depicted in the diagram below, VLAN s are used to connect the 4350 to an Ethernet switch that has been configured to use VLANs. Typically, all VoIP devices are pl aced in the same VLAN while data devices are placed in a different VLAN. This is to ensure priority trea[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 14 • 802.1p is not currently supported 1. Select the Network link. 2. Select Enable VLAN support. 3. Press Submit. 4. Select System. 5. Select VLAN Configuration. 6. Adjust LAN Port Membership drop-down boxes to specify 802.1 or 802.1q mode, as desired. Press Modify. If changing modes, the r[...]

Configuring the V2IU 4350 3 - 15 — 802.1 mod e: Assi gn the po rt to any ONE VL AN. — 802.1q mode: Assign the port to any number of VLANs Perform steps 1 through 6 above for each VLAN you wish to create. Modify an Existing VLAN Configuration 1. Select the Network link. 2. Select VLAN Sett ings. 3. Change the desired s ettings. 4. Press the Modi[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 16 Assign the 4350’ s ALG to your Priority VLAN Once you have completed your VLAN configuration you must assign the 4350 ALG to the VLAN containing your VoIP phones. 1. Select the VoIP ALG from the main configuration menu. 2. Use the drop down menu to assign the ALG to the VLAN ID containing[...]

Configuring the V2IU 4350 3 - 17 6. Enter the Default Gateway. This is usually the upstrea m router’s IP address. Packets destined for IP networks not known to the 4350 are forwarded to the default gateway for handling. 7. Enter the Primary DNS Server. The DNS server is used by the 4350 to resolve domain names to IP addresses. The value entered i[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 18 Protocol Display and set the T1 Layer 2 pr otocol. Supported protocols are: • HDLC • Cisco HDLC • PPP • ANSI (Frame Rela y) • CCITT (Frame Relay) 1. Select the desir ed T1 protocol. 2. Press Submit. Frame Relay Mode and DLCI When the Protocol is one of ANSI or CCITT, then addition[...]

Configuring the V2IU 4350 3 - 19 Timing Display and set the clock timing source for the T1/E1 interfac e. The timing can be either derived from the network (External) or provided to the T1 interface by the V 2 IU (Internal). With a carrier-pro vided T1, the t iming is usuall y derived from the network (External, the default setting). Payload Loopba[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 20 In addition the 4350 will provide its LA N IP addre ss in DHCP user options 150 and 151 for use by IP phones. Some IP phones use these values for configuration of their TFTP server and MGCP control server addresses. You can also enable or disable the 4 350 DHCP server on a per VLAN basis. 1[...]

Configuring the V2IU 4350 3 - 21 The Windows Internal Naming Service (WINS) is a service that keeps a database of computer name-to-IP address mappings so that computer names used in Windows environments can be mapped to IP addresses. The WINS Address is the IP address of th e WI N S s e rv e r i n yo u r n e tw o r k . This value will be delivered [...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 22 Configure Hostname, SNMP and Remote Logging The 4350 can be managed remotely by an SNMP network management system such as HP Openview. The 4350 supports SNMPv1 or SNMPv3 and MIB-II (RFC1213). All MIB-II variables are read only. The MIB variables sysContact and sysLocation are set by the web[...]

Configuring the V2IU 4350 3 - 23 2. Enter the System Location. This is a comment string that can be us ed to indicate t he physical locatio n of the 4350. By default, no value is set. 3. Enter the System Contact. This is the administrative contact in formation for the 4350. By default, no value is set. 4. Enter the SNMP Port. This is the port t hat[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 24 Configure a local Hostname A locally configured hostname is useful for remote management. This name can appear as the identifier string for the 4350 on a system management console. >> Enter a host name in the field provided. Enable Mean Opinion Scoring (MOS) The 4350 produces useful s[...]

Configuring the V2IU 4350 3 - 25 1. Enter the password you chose in step C again in the Confirm Password to ensure that there were no mistakes in the initial entry. 2. Press Submit. Read-onl y User This feature w orks by creating a new user with re ad-only access to the system. All information is displayed in a non-changeable fo rm. Information cha[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 26 Note: All open web br owsers must be closed whe n you change between administrative user “root ” and read-only “rouser.” 4. Enter a new password. The passwo rd must be a minimum of six characters long. 4. Re-enter the new password to confirm it. 5. Click Submit. N o w w h e n y o u [...]

Configuring the V2IU 4350 3 - 27 When viewing the Network Information pa ge, Subinter faces are desig nated in the Interface Information section with the device name and number, separated by a colon (for example, eth0:100). Configuring Subinter faces To configure subinterfaces, use the following steps: 1. Using the configuration graphical user inte[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 28 T oS Byte Setting Since the Internet itself has no direct knowledge of how to optimize the path for a particular application or user, the IP protocol provides a limite d facility for upper layer protocols to convey hint s to the Internet Layer abou t how the trade-offs should be made for th[...]

Configuring the V2IU 4350 3 - 29 3. For most situations, you should leav e this setting as it is. Only change it if your provider indicates that you should do so. If your provider indicates that you need to change the ToS byte setting, that provider should also provide the other parameters required on this screen. 4. If you have changed the values,[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 30 H.323 Configuration T o access the H.323 Settings page, select VoIP ALG > H.323 in the Configura- tion Menu.[...]

Configuring the V2IU 4350 3 - 31 The H.323 Settings pag e has the following ar eas: • Gatekeeper Mode • W AN/Provider -side gatekeeper mode settings • LAN/Subscriber -side gatekeeper mode settings • Embedded gatekeeper mode settings • LRQ Size • Default Alias • Stale T ime • Multicast Mess ages[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 32 • H.460.18 Support • Alias Restrictions In the Gatekeeper mode ar ea, select one of the following modes: If W AN/Provider -Side Gatekeeper mode is selected, you mus t configure the following parameters: Item Description None H.323 is disabled. W A N/Provider-side gatekeeper mode S pecif[...]

Configuring the V2IU 4350 3 - 33 If LAN/Subscriber-Side Gatekeeper mode is selected, you must configure the following parameters: If Embedded Gatekeeper is sel ected, you must configur e the following parameters: In the LRQ Size area, you can limit the number of sour ce aliases in a forwarded LRQ message to a maximum of two to allow interoperabilit[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 34 Some RAS messages can be multicast in order to automatically detect gate- keepers. In the Multicast Messages area, you can en able listening to multicast messages. This ar ea includes the following configurable parameter: In the H.460.18 Support area, you can co nfigure H.460.18 support. Th[...]

Configuring the V2IU 4350 3 - 35 H.323 Activity T o access the H.323 Activity page, select VoIP ALG > H.32 3 Activity in the Configuration Menu. The H.323 Activity page is a re ad-only page that s hows the following infor- mation: • Current time • W AN Gatekeeper status • Current payload bandwi dth • Estimated t otal bandwidth • Activi[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 36 T o access the H.323 Alias Manipulati on page, select VoI P ALG > H.323 >Alias Manipul ation in the Configuration Menu. This page includes the f ollowing ar eas: Item Description Destination H323-ID or E.164 Alias Modification tab le Lists alias manipulation rules. Rules are executed [...]

Configuring the V2IU 4350 3 - 37 The H.323 Alias Mani pulation page includes the following butt ons: H.323 Neighboring Neighboring and pr efix routing can be us ed to r oute calls based on a match- ing prefix in the destination alias of the call. The call decision is made follow- ing alias manipulation and acts on the modified string, similar to ot[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 38 This page includes the f ollowing ar eas: The H.323 Neighboring page include s the following buttons: Item Description Prefix Routing and Gatekeeper Neighboring tab le Lists rules for forwarding incoming calls based on their dialed alias. Rules are executed in the order in which they are li[...]

Configuring the V2IU 4350 3 - 39 Regular Expressions Alias manipulation patterns and prefixes use regular expres sions to match a string in the destination ali as. A regular expr ession can be a string of literal characters to match or a se t of special expressions. Alias manipulation patterns can match a sub-string at any location and number of ti[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 40 Forwar ding Rules Forwardin g Rules allows a system administrator to fo rwar d da ta traffic for a subnet from one inter face to another , overriding the F ire wall’s defaul t dr op rule s. Allowing a subnet to be forwar ded is commonly used when servers with public addres ses ar e placed[...]

Configuring the V2IU 4350 3 - 41 Configuring For warding Rules T o configur e address forwar ding rules, use the foll owing steps: 1. Using the configuration gra phical user interface, from the Configuration Menu on the left-hand side, click Firewall . 2. Click Forwarding Ru les . The window shown below opens.[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 42 3. On this screen, complete the following i nformation: • IP Subnet : The subnet to be forward through the firewall from the Input Interface to the Output Interface. •N e t m a s k : The network mask to apply to the IP Subnet to create the range of IP addr esses that ar e forwarded thr [...]

Configuring the V2IU 4350 3 - 43 — Any: for the specified network, allo ws all ports and protocols through the system. No ports are required because not all protocols support the concept of ports. • Port or Port Range: The port number or port range allowed thr ough the system when UDP or TCP ar e selected. A port range is specified by separatin[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 44 Note: A minimum configuration for Peering Proxy would be for inbound only prefixes, since there may be many endpoi nts to statically route calls to. There might also be a master gatekeeper to wh ich all endpoints are registered. In this case, you would only need 1 prefix pointi ng to the ma[...]

Configuring the V2IU 4350 3 - 45 Proxy provides an access point into this network and is responsible for the E.164 dial plan using NANP (North American Numbering Plans or NAP’s). The NAP’s in this case are 831 and 408. Dial plan int egrity is required to in sure proper routing of prefix's. This means that if users are to dial into your net[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 46 the Peering Proxy IP 10.10.10.1. The Peerin g Proxy applies the same rule set, in this case, NO matching pr efix is found and ANNEX O dialing i s applied. The call is now routed to Site A's V 2 IU. The call is forwarded to the LAN Side PathNavigator where the registered cl ient with th[...]

Configuring the V2IU 4350 3 - 47 Embedded Gatekeeper Mode. In this mod e , the endpoint is directly registered, an E.164 registered client match is made , and the call is routed to the called endpoint. Outbound fr om Site C to Public IP Endpo int Site C dials the public endpoint: 9@61. 10.10.4. The PathNavigator receives the call and generates a Q.[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 48 3. On this screen, check “Peering-Proxy mode”. 4. Scroll to the bottom of the window and click Submit. Adding an H.323 Prefix Entr y You can add prefixes by entering the pr efix str ing and the target address. To add an H.323 prefix entr y, use the following st eps: 1. Using the configu[...]

Configuring the V2IU 4350 3 - 49 The prefix routing tab le shows all currently configured prefixes. The prefixes ar e searched in th e order th ey are entere d. Each prefix can be moved up or down in the list. You can select and delete prefixes. 3. To strip a matching prefix, select the checkbox and click Su bmit. If you enable this, all matching p[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 50 — Manually entering all clients th at are allowed to use the system — Running the system without the Client List lockdown feature until al l desired clients have registered • Enabling this featur e. This feature is useful for li sts involved with 91 1 usage. When this feature is in ef[...]

Configuring the V2IU 4350 3 - 51 H.323 Activity Monitor The H.323 Activity Monitor shows any re cent H.323 events that may be of inter est to the administrator of t he sy stem. The information appears in three columns: • Event/T ime • Source • Destination Following this information ar e a number of lines with event specif ic informa- tion suc[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 52 T ype of Events The events that may currently be listed in the activit y monitor ar e as follows: • Bandwidth chan ge - the endpoint requested a change of the bandwidth used for its call, only sent if the bandwidt h management is enabled. • Call Setup – Only sent if the call was ‘su[...]

Configuring the V2IU 4350 3 - 53 • “Attempting to establish outgo ing Q.931 TCP conn ection” Successfully resolved the destinat ion of th e call and attempting to establish an outgoing Q.931 TCP connection to the destination. • “Q.931 signaling received and forwarded” Both Q.931 TCP connections have been successfully established and Q.9[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 54 Call T ermination The call termination ca use may also give s ome information about why t he call terminated or failed to be establishe d. • “Out of system resources” The call could not be completed beca use the system was out of system re sources. • “Client owning the call has be[...]

Configuring the V2IU 4350 3 - 55 The call could not be established becaus e the system already is at the maxi- mum allowed bandwidth. • “Received admi ssion reject” The call was terminated because an ad mi ssion r eject was received fr om the gatekeeper . • “Received disengage request” The call was terminated because the endp oint reque[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 56 V oIP Configuration The 4350 provides a VoIP application la yer gat eway (ALG) fo r the SIP, MGCP, and H.323 protocols. The ALG proxies the connection between the VoIP softswitch, IP PBX or gatekeeper and voice and video devic es such as IP phones, IADs or softphones. By acting as a proxy t[...]

Configuring the V2IU 4350 3 - 57 Configure the V oIP ALG In order to configure the VoIP ALG the 4350 must be told where to reach t he signaling servers and TFTP server on behalf of the voice devices. 1. Select VoIP ALG. 2. If using VLA Ns assign the AL G to a specific VLAN id using the drop down menu. 3. If you are using MGCP enter the MGCP Server [...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 58 7. Automatic MGCP Re-registration is us ed to re-register MGCP endpoints every time the network or system restarts. E nable this f eature to automatically synchronize the softsw itch and phones immediately after a restart. The default is Enabled. 8. The MGCP Re-registration Rate is used to [...]

Configuring the V2IU 4350 3 - 59 11. The Current payload bandwidth calcul ates the current video traffic, without IP overhead, traversing th e Appliance. The Estimated total bandwidth calculat es the total video tr affic, plus IP ov erhead, traversing the Appliance. 12. The H.323 Max Aliases limits the numb er of aliases that are allowed to registe[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 60 Enter a V oIP Subnet Route 1. Select System. 2. Select System Overview. 3. Select VoIP Subnet Routing. 4. Enter the IP Network (e.g. 10.10.12.0). This is the IP address of the remote subnet containing the voice devices. 5. Enter the Netmask (e.g. 255.255.255.0) . This is the mask of the IP [...]

Configuring the V2IU 4350 3 - 61 2. Select System Overview. 3. Select VoIP Subnet Routing. 4. Enter the IP Network (e.g. 10.10.12.0). This is the IP address of the remote subnet containing the voice devices. 5. Enter the Netmask (e.g. 255.255.255.0). This is the mask of the IP address of the subnet containing the voice devices. 6. Enter the Gateway[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 62 Data Networking Configuration The 4350 provides st atic IP rout in g and two types of Network Address Translation (NAT) functions for data traf fic. This section de scribes the use and configuration of these features. NA T for Data T raf fic NAT allows hosts on a private internal ne twork ([...]

Configuring the V2IU 4350 3 - 63 Configure Dynamic NA T Use Dynamic NAT when you have multip le PCs installed on the LAN side of the 4350 that require Internet or WAN access. Once Dynamic NAT is enabled the 4350 will automatically perform an address translation for all packets to/from the LAN side PCs. 1. From the Configuration Menu select NAT. 2. [...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 64 Delete a Static NA T entr y 1. Select NAT. 2. To delete an IP address or a range of IP addresses h ighlight the entry in the Static NAT Client Entries list and press the Delete key on your keyboard. 3. Press Submit. Static IP routing In addition to locally connected IP netw orks the 4350 ca[...]

Configuring the V2IU 4350 3 - 65 4. Select the Apply Ro ute checkbox. 5. Enter the IP Network addr ess. This address is the remote data network you would like the 4350 to forward to the gateway. The hosts portion of the IP address should be s et to “0”. For example, 10.10.20.0 6. Enter the Netmask of the remote data network. For example, 255.25[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 66 The 4350 uses a Stateful Packet Inspection (SPI) firewall to protect data devi ces installed behind the LAN interfa ce. Vo ice devices are protected by th e 4350 Application Layer Gateway (ALG) as described in VoIP Configuration . The firewall is enabled by default. The defau lt behavior of[...]

Configuring the V2IU 4350 3 - 67 Action Description Input format Allow TCP Port Allows traffic with the specified TCP port to terminate on the 4350. *V alid values range from 1 through 65535. *Multiple entries are separated by a space *Range value specified by the : character . For exam ple, 25:50 means perform the action on ports 25 through 50 All[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 68 If a given packet does not match any of the configured rules, it is dropped. 1. Select Firewall. 2. Enter the desired Advanced Settings using the table above as a guide. 3. Select Submit. Remove Advanced Setting Entries T o r e m o v e a n a d v a n c e d f i r e w a l l s e t t i n g s i m[...]

Configuring the V2IU 4350 3 - 69 • Controls the data transfer rate of far-end WAN TCP devices to l imit WAN link congestion. • Supports network-based QoS applications by setting the TOS bits for all VoIP packets sent to the WAN and the LAN. TOS bits are used so that VoIP packets can be prioritized in the network by DiffServ enabled routers. The[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 70 3. Specify the upstream an d downstream bandwidth of your WAN link 4. Enter the WAN Downstream Ba ndwidth in Kbps. 5. Enter the WAN Upst ream Bandwidth in Kbps. Optionally enable priority IP addresses VoIP traffic from devices that use the VoIP ALG function (phones, video stations, softphon[...]

Configuring the V2IU 4350 3 - 71 Determining the maximum number of concurrent calls The maximum number of concurrent call s that can be supported by the WAN access link is calculated using the following formul a: Max calls = (M aximum WAN upstrea m bandwidth * .8 5)/VoIP codec rat e where, Maximum WAN upstream bandwidth = va lue entered in step D a[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 72 applied to traffic in both the upstream (LAN to WAN) and downstream (WA N to LAN) direction. Each direction is independent of the other and can support different size priority queues. Classifying High priority voice and video traffic generated by endpoint devices is automatically identi fie[...]

Configuring the V2IU 4350 3 - 73 clocked out at the WAN link’s f ull rate LES S the bandwidth currently bein g used for high-priority (voice) data. High -priority data is clocked out at the WAN’s full link rate . Any l ong-lasting burst c ondition in low-prio rity data will cause these packets to be delaye d and, if ne cessary, dropped. Downstr[...]

User Manual V 2 IU 4350 Converged Network Appliance 3 - 74 Although RTP makes use of UDP the 4350 appliance is able to provide its own congestion avoidance mechanism for voice traffic usin g Call Admission Control (CAC).[...]

4 - 1 4 System Diagnostics The V 2 IU 4350 provides a powerfu l se t of diagnostic information, troubleshooting tools and utilities fo r system maintenance to network operators. Viewing Software V ersion, Hardware Platform and the LAN MAC Address The software version, hardware platform, and LAN MAC address are common pieces of information reques te[...]

User Manual V 2 IU 4350 Converged Network Appliance 4 - 2 Viewing the ALG registration code You will also find a link to the ALG re gistration code on the System page. The registration code enable s the ALG and is pre-installed at the factory. If the registration code is inadvertently deleted you can re-enter the code using the following steps: Ent[...]

System Diagnostics 4 - 3 To view the networking configuration and status of the 4350 proceed to the Network Information page as follows: 1. Select System. 2. Select System Overview. 3. Select Network Information. The following networking information is display ed: Routing Information The system routing table contains the stat ic routes for hosts an[...]

User Manual V 2 IU 4350 Converged Network Appliance 4 - 4 The interface statistics ca n point to areas of congestion in the network. If the errors statistic is a few percent or more of the total packets sent it may be an indication of excessive congestion on the network interface. If the congestion is not corrected the quality of voice call s will [...]

System Diagnostics 4 - 5 System Logging Mes sages Displays informat ion logged duri ng system boot and normal operation. Logging messages may indicate unauthor ized attempts to access the 4350, process restart messages, and excessive resource uti lization messages. Passive V oice Call Monitoring The 4350 monitors live voice calls an d performs obje[...]

User Manual V 2 IU 4350 Converged Network Appliance 4 - 6 V erify Registered V oice and Video Devices The 4350 maintains a list of all regist ered voice and video devices called a clients list so tha t it can properly route voice and vid eo calls. At startup, voice and video devices register their IP a ddresses with the 4350. The 4350 then register[...]

System Diagnostics 4 - 7 Performing a Ping T est A ping test is the most common test us ed to verify basic connectivity to a networking device. Successful ping test re sults indicate that both physical and virtual path connections exist between the 4350 and the test IP address. Successful ping tests do not guarantee th at all data traffic is allowe[...]

User Manual V 2 IU 4350 Converged Network Appliance 4 - 8 The Network Test Tools page will be refr eshed and the results of the traceroute test are displayed (this may take severa l seconds). The Reset button is used to clear the IP address entry used in step D above. Restar ting Networking Processes In extreme circumst ances while troublesh ooting[...]

5 - 1 5 Saving and Restoring the V 2 IU 4350 Configuration The V 2 IU 4350 stores all configuration inform ation for the system in a series of individual files that reside in local flash memory. These files are read at boot time to determine the configuration iden tity of the 4350 and then stored in RAM as “running” state. As you configure the [...]

User Manual V 2 IU 4350 Converged Network Appliance 5 - 2 1. Use a NULL modem cable to connect to serial port 1 of the 4350 2. Use a terminal emulator such as Hypert erminal set to a baud rate of 9600, 8, 1 and none (databits, stop bits and parity) Alternatively you can connect to the 4350 remotely using SSH: 1. Logon as root 2. Enter the password [...]

Saving and Restoring the V2IU 4350 Configuration 5 - 3 Delete a Backup File # ewn delete <filename> Delete the backup file specified in the filena me. Load a Backup File so that it Be comes the Runnin g Configuration # ewn load <filename> Loads the specified backup file int o RAM and makes it the active running configuration. Wa r n i n[...]

User Manual V 2 IU 4350 Converged Network Appliance 5 - 4[...]

6 - 1 6 Upgrading the V 2 IU 4350 This chapter describes how to upgrade your 4 350 to the latest software release available from Polycom. It is recommended that you reboot the 4350 prior to performing the upgrade. Th i s i s t o m a k e s u r e t he r e i s en o u g h dy n a m i c m e m o ry a v a i la b l e t o h a n d le t h e upgrade process. Up[...]

User Manual V 2 IU 4350 Converged Network Appliance 6 - 2 4. Enter the Download Server address of ftp.support. polycom.com. 5. Enter the Filename: flash.bin 6. Press Submit. You can follow the progress of the upgrade by selecting the refresh the upgrade status link. The system will automatically restart after the new image has been loaded. 7. V eri[...]

Appendix - 1 Appendix T roubleshooting Tips This section contains possible solutions to problems regarding the installation of the V 2 IU 4350. I am having trouble reaching the Internet through the 4350. We recommend connecting a PC dire ctly (or via a switch) to the LAN port of the 4350. The default LAN IP address of the 4350 is 1 92.168.1.1 so p [...]

User Manual V 2 IU 4350 Converged Network Appliance Appendix - 2 5. Select Network Test Tools. 6. Enter the softswitch address in the IP Address to Ping field. 7. Press Ping. Specifications W AN Ports 1xT1 CSU/DSU or 10/100 Ethernet LAN Ports 4x10/100 Ethernet (switched) Serial Ports 1xRS-232 Dimensions Height (1.7”), Wid t h (10”), Depth (7”[...]

Regulatory Notice s - 1 Regulatory Notices END-USER LICENSE AGREEMENT FOR POL YCOM® SOFTW ARE IMPORTANT-READ CAREFULLY BE FORE USING THE SOFTWARE PRODUCT: This End-User License Agreement (“Agr eement”) is a legal agreement between you (and/or any company you repr esent) and either Polycom (Neth- erlands) B.V . (in Eur ope, Middle East, and Afr[...]

V 2 IU 4350 Converged Netwo rk Appliance User Manual 2 The SOF TW ARE PRODUCT is pr otected by copyright laws and international copyright treaties, as well as other inte llectual property laws and treaties. The SOF TW ARE PRODUCT is license d (not sold) to you, and its use is subject to the terms of this Agreement. This is NOT a sale contract. 1.GR[...]

Regulatory Notices 3 2.6Copyright. All title and copyrights in and to the S OF TW ARE PRODUCT (including but not lim ited to any images, photographs, animations , video, audio, music, text, and “apple ts” incorporated into the SOF TW ARE PROD- UCT), the accompanying printed materials, and any copies of the SOF TW ARE PRODUCT are owned by POL YC[...]

V 2 IU 4350 Converged Netwo rk Appliance User Manual 4 may use the re sulting upgraded SOF TW ARE PRODUCT only in accor dance with the terms of this Agreement. If the SOF TW ARE PRODUCT is an upgrade of a component of a package of software programs that you licensed as a single product, the SOF TW ARE PRODUCT may be used and transferred only as par[...]

Regulatory Notices 5 RANGE OF THE INTENDED USE, OR BY ACCIDENT , FIRE, LIGHTNING, POWER CUTS OR OUT AGES, OTHE R HAZARDS, OR ACTS OF GOD. 7.LIMIT A TION OF LIABILITY . YOUR USE OF THE SOF TW ARE PRODUCT IS A T YOUR SOLE RISK. YOU WILL BE SOLEL Y RESPONSIBLE FOR ANY DAMAGE TO YOUR COMPUTER SYSTEM OR LOSS OF DA T A THA T RESUL TS FROM THE DOWNLOAD OR[...]

V 2 IU 4350 Converged Netwo rk Appliance User Manual 6 WITHIN CALIFORNIA BETWEEN CA LIFORNIA RESIDENTS, AND BY THE LA WS OF THE UNITED ST A TES. The United Nations Convention on Contracts for the Inter national Sale of Goods (1980) is her eby excluded in its entirety fr om applicat ion to this Agreement. 1 1.2Entire Agreement. This Agr eement r epr[...]

Regulatory Notices 7 translated into another language. (Her ei nafter , translation is included without limitation in th e term “modification” .) Each licensee is addressed as “you”. Activities other than copy ing, distribution and modification are not c over ed by this License; they ar e outside its sc ope. The act of r unning the Progr a [...]

V 2 IU 4350 Converged Netwo rk Appliance User Manual 8 or distribution medium does not bring the other work under the scope of this License. 3. Y ou may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided th at you also do one of the following:[...]

Regulatory Notices 9 to copy , distribute or modify the Pr ogram subject to these terms and condi- tions. Y ou may not imp ose any further re strictions on the r ecipients' exercise of the rights gr anted her ein. Y ou are not responsible for enfor cing compliance by third parties to this License. 7. If, as a consequence of a court judgme nt o[...]

V 2 IU 4350 Converged Netwo rk Appliance User Manual 10 write to the Free Softwar e Foundation; we sometimes make exceptions for this. Our decisi on will be guided by the two goals of pr eserving the free status of all derivatives of our fre e software and of promoting the sharing and r euse of software generally . NO W AR RANTY 1 1. BECAUSE THE PR[...]

Regulatory Notices 11 (3) If the unit ap pears to be malf unctioning, it should be disconnected from the telephone lines until you learn if yo ur equipment or the telephone line is the source of the trouble. If your eq uipment needs repair, it should not be reconnected until it is repaired. (4) If the telephone company finds that this equipment is [...]

V 2 IU 4350 Converged Netwo rk Appliance User Manual 12 Caution Users should not attempt to make such co nnections themselves, but should contact the appropriate electric inspection au thor ity , or electrician, as appropriate.” WARRANTY AND REPAIR SERVICE CENTER: The RAM Group Kent McDonald kent.macdonald@theramgroup.com (403) 266-5840 x 100 Thi[...]