English dropdown-ico

TANDBERG N3 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

Go to page of

Similar user manuals

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of TANDBERG N3, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of TANDBERG N3 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of TANDBERG N3. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of TANDBERG N3 should contain:
- informations concerning technical data of TANDBERG N3
- name of the manufacturer and a year of construction of the TANDBERG N3 item
- rules of operation, control and maintenance of the TANDBERG N3 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of TANDBERG N3 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of TANDBERG N3, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the TANDBERG service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of TANDBERG N3.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the TANDBERG N3 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    T ANDBERG Gatekeeper User Manual Software version N3 D13381.03 This document is not to be repro duced in whole or in part without pe rmission in w riting from:[...]

  • Page 2

    TANDBERG Gatek eeper User Manual ii Trademarks and copyright Copyright 1993-2005 TANDBERG ASA. All rights reserved. This document contains information that is proprietary to TANDBERG ASA. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form, or by any means, electronically, mechanically, by photoc[...]

  • Page 3

    TANDBERG Gatek eeper User Manual iii Environmental Issues Thank y ou for bu y ing a product which contributes to a reduction in pollution , and thereby helps save the en vironment. Our produc ts reduce the need f or travel and transpor t and thereby reduce pol lution. Our products h ave either non e or few consum able parts (chem icals, toner, gas,[...]

  • Page 4

    TANDBERG Gatek eeper User Manual iv Operator Safety Summary For your protection , please read these saf ety instructions com pletely before operating the equipment and k eep this manual for f uture reference. T he information in this summ ary is intended for opera tors. Carefull y observe all warnings, precaut ions and instructions both on the appa[...]

  • Page 5

    v Table Of Contents TANDBERG Gatek eeper User Manual .............................. ................................. ........................i Trademark s and copyright .............................. ................................. ................................ ....... ii Environm ental Issues .............................. ..................[...]

  • Page 6

    TANDBERG Gatek eeper User Manual vi 4.1 Upgrading Us ing HTTP(S) ........................................................ ................................ 30 4.2 Upgrading Us ing SCP .................................... ................................. .......................... 31 5 Configuring the G atekeeper ....................................[...]

  • Page 7

    1 1 I ntroduction This User Manu al is provided to he lp you make the best us e of your TANDBERG Gatekeeper. A Gatekeeper is a ce ntral part of an H. 323 infrastructure. It prov ides address translat ion and controls access to t he network for H.323 terminals, Gatewa y s and MCUs . The Gatekeeper also provides other s ervices to the term inals, Gat[...]

  • Page 8

    TANDBERG Gatek eeper User Manual 2 1.1 TANDBERG Gatekeeper Overview On the front of the Gatekeeper there are t hree LAN interf aces, a serial port (Data 1) and a Light Emitting Diod e (Power). T he LAN 1 interface is used f or connecting the s y stem to your local area network , LAN interfac e 2 and 3 are disabled. T he serial port (Data 1) is for [...]

  • Page 9

    3 2 I nst allation Precautions:  Never install com munication equipm ent during a lightning stor m.  Never install jack s for comm unication cables in wet loc ations unless the jack is specificall y designed f or wet locations.  Never touch uninsta lled comm unication wires or terminals u nless the comm unication line has been disc onnecte[...]

  • Page 10

    TANDBERG Gatek eeper User Manual 4  Do not place hea vy objects directl y on top of the Gatekeeper.  Do not place hot o bjects directly on top, or directly beneath the G atekeeper.  Use a grounded AC power outlet for the G atekeeper. 2.2 Mounting The Gatek eeper comes with brack ets for mounting in standard 19" racks. Before starting [...]

  • Page 11

    5 2.5 Gatekeeper Initial Configuration The TANDBERG Gat ekeeper requires s ome configuration before it can be used. This m ust be done using a PC connected to the ser ial port (Data 1). The main thing that needs to be conf igured is the IP settings of the Gatekeeper. T his includes the IP address, th e IP subnet mask , and the IP gateway. The Gatek[...]

  • Page 12

    TANDBERG Gatek eeper User Manual 6 xConfiguration Gatekeeper AutoDiscovery comm and in section 5.2 for more inf ormation. 12. Reboot the Gat ekeeper by t y ping the com mand xCommand boot to m ake your new settings take ef fect. 13. Disconnect the ser ial cable. NOTE To secure the Gatek eeper you should disab le HTTP, HTT PS, SSH and Telnet, rel yi[...]

  • Page 13

    7 3 Using t he Gatekeeper The Gatek eeper is used by H.323 term inals, Gatewa ys and MCUs. These device s register with the Gatek eeper and the Gatek eeper then provides address translation and c ontrols access to the net work. 3.1 System Administration To configure and m onitor the TANDB ERG Gatekeeper you can e ither use the web interf ace or a c[...]

  • Page 14

    TANDBERG Gatek eeper User Manual 8 NOTE Automatic disc overy is a function that a llows the Gatek eeper to reply to multicast G atekeeper discovery m essages from the endpoint. NOTE If you have probl ems registering the endpoint, try turning on au tomatic discover y. Som e endpoints require automatic registrati on to be enabled. NOTE W hen URI d ia[...]

  • Page 15

    9 Remote z ones can be conf igured through the web interface of the TANDBERG Gatek eeper by navigating to Gat ekeeper Configurat ion > Gatekeeper . See Figure 1 for a sc reenshot of the configuration. Figure 1 Screen shot of the A dding a New Zone configuration NOTE W hen u sing a local zone prefix do not start the E.164 aliases with the s ame d[...]

  • Page 16

    TANDBERG Gatek eeper User Manual 10 W hen a Gatekeeper rece ives a Location Requ est, if it cannot respond f rom its own registration database, it will quer y all of its Altern ates before respond ing. This allows the poo l of registrations to be treated as if the y were register ed with a single G atekeeper. The Alternate Gatek eepers can be c onf[...]

  • Page 17

    11 3.5 Call Control W hen a n end-point wants t o call another endpo int it presents the address it wants to call to the Gatekeeper usi ng a protocol kno ws as RAS. The Gatek eeper tries to resolve t his address and supplies the ca lling endpoint with infor mation about the cal led endpoint. T he destination address can tak e several forms : IP add[...]

  • Page 18

    TANDBERG Gatek eeper User Manual 12 Figure 3 Admiss ion Request Processing[...]

  • Page 19

    13 Figure 4 Location Req uest Processing[...]

  • Page 20

    TANDBERG Gatek eeper User Manual 14 3.6 Bandwidth Control The TANDBERG Gat ekeeper allows you to control endpoints ’ use of bandwidth on your network. Figure 5 s hows a typical deplo y ment: a broadband LAN, where high band width calls are acceptable, a pipe to the internet wi th restricte d bandwidth, an d two satellite off ices, each with their[...]

  • Page 21

    15 xConfiguration Links Link [1..100] Pipe2 Name Each subzone m ay be configured with its o wn bandwidth lim its. Calls placed between t wo endpoints in the s ame subzone cons ume resource f rom the subzone ’ s allocation . Subzone bandwidths are co nfigured on the Gat ekeeper Config uration > SubZones page (see Figure 6 for a screens hot of t[...]

  • Page 22

    TANDBERG Gatek eeper User Manual 16 Figure 6 Config uration of a SubZone th rough the web int erface Figure 7 Adding a new Pipe through t he web interface Figure 8 Config uring the dow nspeeding parameters of the Gatekeeper 3.6.1 Bandwidth Control and Firewall Traversal W hen a Border Control ler and Gatekeeper are b eing used to traverse a firewal[...]

  • Page 23

    17 3.6.2 Bandwidth Control Examples One possible conf iguration for the deplo y ment in Figure 5 is sho wn in Figure 9. Each of the offices is r epresented as a separate sub zone, with band wi dth configur ed according to loca l policy. The enterpr ise ’ s leased line connect ion to the Internet, and th e DSL connections to the remote off ices, a[...]

  • Page 24

    TANDBERG Gatek eeper User Manual 18 In Figure , the end points in the enterpr ise register with the Gat ekeeper, whilst thos e in the branch and hom e office register wi th the Border Controller. Bord er Contro ller Branch Office Home Office Traversal sub-zone Hom e sub-z one Branc h sub-z one Enterprise Pipe Home Pipe Branch Pipe Enterp rise Trave[...]

  • Page 25

    19 Figure 12 Gatek eeper example configu ration All of the endpo ints in the enterprise will be ass igned to the defau lt subzone. The T raversal subzone controls tra versal traffic f lowing through the Gatek eeper, whilst the T raversal Zone controls all traf fic traversing the enterprise f irewall and pass ing on to the Border Control ler. Both s[...]

  • Page 26

    TANDBERG Gatek eeper User Manual 20 match an entr y on the D enyList. Allow lists and De ny lists are m utually exclusive: onl y one may be in use at an y given tim e. Matching uses a sim ple form of w ild card expansi on: 12345678 Exact matc h only 1234567? First 7 characters are an exact m atch, last may be anything 123* 123 followed b y anything[...]

  • Page 27

    21 To configure the G atekeeper to use the local database of credentials during auth entication issue the follo wing commands xConfiguration Authentication Mode: On xConfiguration Authentication Database: LocalDatabase Each credential in the local database has a username and a pass word. To m anage the credentials in the local database use the f ol[...]

  • Page 28

    TANDBERG Gatek eeper User Manual 22 xConfiguration LDAP UserDN: "Your user DN" xConfiguration LDAP Password: "password" The status of the con nection betwee n the Gatekeeper and the LDAP server can b e verified using the comm and xstatus LDAP The details of the LDAP server can also be c onfigured via th e web interface on the Ga[...]

  • Page 29

    23 Figure 16 Configu ring the Gatekeeper to aut henticate w ith an LDAP server u sing TLS encryption 3.9 URI Dialing If an alias is not located in the Gatek eeper ’ s list of registrations, it m ay attempt to find an authoritative Gatek eeper through the DNS s ystem. URI dialing m akes it easier for endpoints reg istered with diff erent Gatekeepe[...]

  • Page 30

    TANDBERG Gatek eeper User Manual 24 Figure 17 IP Conf iguration Screen 3.9.1 URI Dialing and firewall traversal If URI dialing is be ing used in conju nction with firewall t raversal, DNSResolut ionMode should only be enabled on the Border Controller. T he DNS records should be updated wi th the address of the Bord er Controller as the authoritativ[...]

  • Page 31

    25 To configure the G atekeeper for firewall traversal, use the W eb or console interf ace (see Figure 18 for this configuration screen on the web interf ace). You will need to set t he IP address of the Bord er Controller xConfiguration Traversal Server Address: <ip_address> You will need to ent er the nam e of your Gatekeeper onto th e Bord[...]

  • Page 32

    TANDBERG Gatek eeper User Manual 26 xConfiguration Gatekeeper Policy Mode <On/Off> Policy interacts with authentication (sec tion 3.7.2, Authenticatio n). If authentication is enabled on the local Gatek eeper and a call rece ived from a rem ote, unauthenticated Gat ekeeper, the call ’ s source aliases will be re m oved from the call request[...]

  • Page 33

    27 “ display ” Not defined for a ny alias types address The address cons truct is used within an a ddress-switch to spec ify addresses to match. Please note that al l address com parisons ignore upper /lower case differences so <address is= “ Fred ” > will matc h “ fred ” , “ freD ” etc . is=<string> Selected field an d [...]

  • Page 34

    TANDBERG Gatek eeper User Manual 28 an E.164 num ber. proxy On executing a prox y node the Gatek eeper will attem pt to forward the cal l to the locations specified in the curr ent location set. If multiple entries are in the location set then t hey are treated as diff erent aliases for the same destination and are a ll placed in the destinati on a[...]

  • Page 35

    29 User "fred" will n ot accept calls from anyone at "annoying.com ", or from any unauthenticate d users. All other users will allow an y calls. <cpl> <incoming> <address -switch fiel d="destinat ion"> <addre ss is="fred" > <add ress-switch field="orig in" subfield ="[...]

  • Page 36

    TANDBERG Gatek eeper User Manual 30 4 Sof t w are Upg rade Software upgrade c an be done in one of two ways:  Using a web bro wser (HTTP/HTT PS).  Using secure cop y (SCP). NOTE To upgrade the G atekeeper, a valid Rel ease key and sof tware file is required. Co ntact your TANDBERG repres entative for m ore information. NOTE Configuration is r[...]

  • Page 37

    31 4. Enter the release k ey and press Install Sof tware. You will get a new screen where you can upload the sof tware image: 5. Browse to the f ile containing the sof tware and press Install. You should see a pag e indicating that up load is in progress: 6. W hen t he upload is com pleted you should see th e following: 7. Press Restart. You should[...]

  • Page 38

    TANDBERG Gatek eeper User Manual 32 NOTE Make sure y ou transfer the release key file bef ore transferring the soft ware image. Also m ake sure you name the f iles exactly as descr ibed below. NOTE The release ke y file should contain j ust the 16 character release key. To upgrade usin g SCP, do the following: 1. Connect the supp lied null-m odem R[...]

  • Page 39

    33 5 Configuri ng the Gatekeeper This chapter lists the basic usage of each command. The com mands also support more advanced usage, which is outside th e scope of this do cument. 5.1 Status The status root com mand, xstatus, returns s tatus inform ation from the Gatekeeper. To list all xstatus com mands type xstatus ? To list all status inf ormati[...]

  • Page 40

    TANDBERG Gatek eeper User Manual 34 Command Usage Description ResourceUsage xstatus Reso urceUsage Reports usage of sy stem resource s. Registration s : Number of curr ently registered endpoints. MaxRegistrat ions : Max imum number of registered endpoints since sys tem start. PortRegistra tions : Total nu mber of currently registered endpoint s and[...]

  • Page 41

    35 xconfigurati on ? To list all configur ation data, type xconfigurati on To show a specif ic configuration value, t ype xconfigurati on <name> To show usage inf ormation for a specific configuration value, t ype xconfigurati on <name> ? To set a configurat ion element type xconfigurati on <name> <p aram1>: val ue1 <para[...]

  • Page 42

    TANDBERG Gatek eeper User Manual 36 Configuration com mands Description xConfigurati on Gatekeepe r Alternate GK [1..5]: <IPA ddr> List of Alternate Ga tekeepers ’ IP addresses . xConfigurati on Gatekeepe r AutoDiscover y: <On/Off> Specifies if the Gate keeper suppor ts automatic regi stration of endpoints. The default is On. xConfigu[...]

  • Page 43

    37 Configuration com mands Description xConfigurati on HTTPS Mod e: <On/Off> Enables /disables HTTPS support. No te that HTTP must al so be enabled. You must restart the system for ch anges to take e ffect. xConfigurati on IP Addres s: <IPAddr> Specify the IP address of the system. You must restart the system for ch anges to take e ffec[...]

  • Page 44

    TANDBERG Gatek eeper User Manual 38 Configuration com mands Description xConfigurati on Pipes Pip e [1..100] Bandwidth To tal Limit: < 1..10000000 0> Bandw idth associated w ith a pipe, keye d by index . xConfigurati on Pipes Pip e [1..100] Bandwidth To tal Mode: <None/Limite d/Unlimited> Whether or not a giv en pipe is enf orcing total[...]

  • Page 45

    39 Configuration com mands Description xConfigurati on SubZones TraversalSub Zone Bandwid th Total Mo de: <None/Limite d/Unlimited> Whether or not the traversal subzo ne is enforcing total bandw idth restrictions. None correspon ds to no bandw idth available. xConfigurati on SubZones SubZone [1..100] Ban dwidth PerCa ll Limit: <1..10000000[...]

  • Page 46

    TANDBERG Gatek eeper User Manual 40 Configuration com mands Description xConfigurati on Zones Zon e [1..100] Gatekeeper I P Port: <1.. 65534> Specifies the IP port of the neighb or gatekeeper xConfigurati on Zones Zon e [1..100] Gatekeeper H opCount: <1. .255> Max imum hop count to use w hen issuing LRQs to Gatekeepers in this zone. The[...]

  • Page 47

    41 Comma nd Usage Description DenyListAdd xCommand DenyList Add <denied_alia s> Add an entry to the de ny list, used by the registration restriction policy . DenyListDelete xCommand Den yListDelete <index> Removes the pattern from the den y list at the specified index. DisconnectCall xCommand Dis connectCall <callid> Disconnects t[...]

  • Page 48

    TANDBERG Gatek eeper User Manual 42 Comma nd Usage Description SubZoneDelete xCommand Sub ZoneDelete: <index> Deletes the index ed subzone. ZoneAdd x Command Zone Add <name> <address> <p refix> Adds a new zo ne with the specifie d name, zone prefix and IP address. E.g. xCommand Zon eAdd B 65 10 .0.0.30 Note: the pa rameter o[...]

  • Page 49

    43 xfeedback li st To register a feed back expression, t y pe xfeedback re gister <expr ession> To deregister the f eedback expres sion with index <n>, type xfeedback de register <n> To deregister al l feedback expressions, t ype xfeedback de register 0 Feedback commands Description xFeedback Re gister Statu s/<Calls/Re gistrat[...]

  • Page 50

    TANDBERG Gatek eeper User Manual 44 Comma nd Usage Description relkey Relkey Displays the relea se key that this software has been installed with. syslog syslog <leve l> [ipaddr] [ipaddr] ... Enables tracing. <level> - is the log level, 0-3, 3 giv es most logging . ipaddr – specify up to 10 IP addre sses to log infor mation for, all i[...]

  • Page 51

    45 6 Appendix: Configuring DNS Servers In the exam ples below, we set up an SRV record to handle H.323 U RIs of the for m user@exam ple.com. These are handled by the Gatekeeper with t he fully qualified dom ain name of G atekeeper1.exam ple.com which is listening on port 1719, the defau lt registration port. It is assum ed that an A record alread y[...]

  • Page 52

    TANDBERG Gatek eeper User Manual 46 then instruct nam ed to reload the files kill – s SIGHUP pid 4. Check the log f iles for any discrepanc ies tail /var/log/messages For m ore detail s of ho w to configure BIND ser vers and the DNS s ystem in general see the book “ DNS and BIND ” 6 . 6.3 Verifying the SRV record There are a range of tools av[...]

  • Page 53

    47 7 Appendix: Configuring LDAP Servers 7.1 Microsoft Active Directory 7.1.1 Prerequisites These com prehensive step by step instructions assume tha t Active Director y is ins talled. For details on installing Active Directory please co nsult your W indows documentation . The following instruct ions are for W indow s Server 20 03 Enterprise Edition[...]

  • Page 54

    TANDBERG Gatek eeper User Manual 48 commUniqueId: comm1 h323Identityh323-ID: MeetingRoom1 h323IdentitydialedDigits: 626262 h235IdentityEndpointID: meetingroom1 h235IdentityPassword: mypassword Add the ldif f ile to the server using the comm and: ldifde -i -c DC=X <ldap_base> -f filename.ldf This will add a sing le H.323 endpoint with an H.323[...]

  • Page 55

    49  H.350.2 – Director y services architecture for H.235 - An LDAP schem a to represent H.235 elem ents. The schem as can be downloaded in l dif format fr om the web interface on the Gat ekeeper. To do this, navigate t o the Gatekeeper Conf iguration > Files pag e and click on the link s for the schemas. Copy the downloa ded schem as to the[...]

  • Page 56

    TANDBERG Gatek eeper User Manual 50 commUniqueId: comm1 h323Identityh323-ID: MeetingRoom1 h323IdentitydialedDigits: 626262 h235IdentityEndpointID: meetingroom1 h235IdentityPassword: mypassword Add the ldif f ile to the server using the comm and: slapadd -l <ldif _file> This will add a sing le H.323 endpoint with an H.323 Id alias of “ Meet [...]

  • Page 57

    51 8 Approvals The product has been approved b y various international appro val agencies, am ong others: UL and Nemk o. According to their Fo llow-Up Inspection Schem e, these agenci es also perform produc tion inspections at a regular basis, for all product ion of TANDBERG ’ s equipment. The test reports an d certificates issue d for the produc[...]

  • Page 58

    TANDBERG Gatek eeper User Manual 52 9 T echnical Specifications System Capacit y 100-1000 register ed endpoints 25-200 concurrent calls 0-100 traversal ca lls 100 zones (The s y stem ’ s capacit y depends on the s ystem ’ s option k ey ) Ethernet Interfac es 3 x LAN/Ethernet ( RJ-45) 10/100 Base-T X (2 disabled) System console p ort 2 x COM por[...]

  • Page 59

    53 10 Index AllowList, 19, 36, 40 Alternate, 9, 24, 36 Authentication LDAP, 35 local database, 35 Bandwidth Contro l, 37 CPL, 25, 36 examples, 28 unsupported elem ents, 28 Credentials, 21 DenyList, 19, 36, 41 DNS, 23, 24, 36 BIND, 45 Microsoft DNS Ser ver, 45 Down-speed, 15 Ethernet, 2 speed, 35 Firewall travers al, 24 media direct, 16, 19 URI dial[...]