Summary of the content on the page No. 1
TANDBERGBorderController
UserManual
Software version Q3.0
D13691.03
This document is not to be reproduced in whole or in part without permission in writing from:
Summary of the content on the page No. 2
TANDBERG Border Controller User Manual Trademarksandcopyright Copyright 1993-2006 TANDBERG ASA. All rights reserved. This document contains information that is proprietary to TANDBERG ASA. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form, or by any means, electronically, mechanically, by photocopying, or otherwise, without the prior written permission of TANDBERG ASA. Nationally and internationally recognized trademarks and tradenames are t
Summary of the content on the page No. 3
TANDBERG Border Controller User Manual EnvironmentalIssues Thankyouforbuyingaproductwhichcontributestoareductioninpollution,andtherebyhelps save the environment. Our products reduce the need for travel and transport and thereby reduce pollution. Our products have either none or few consumable parts (chemicals, toner, gas, paper). Our products are low energy consuming products. TANDBERG’sEnvironmentalPolicy • TANDBERG’s Research and Development is continuously improving TANDBERG’s prod- ucts towa
Summary of the content on the page No. 4
TANDBERG Border Controller User Manual OperatorSafetySummary For your protection, please read these safety instructions completely before operating the equipment and keep this manual for future reference. The information in this summary is intended for operators. Carefully observe all warnings, precautions and instructions both on the apparatus and in the operating instructions. Warnings • Water and moisture - Do not operate the equipment under or near water - for example near a bathtub, kitchen
Summary of the content on the page No. 5
TANDBERG Border Controller User Manual – If the apparatus has been subjected to excessive shock by being dropped, or the cabinet has been damaged – If the apparatus fails to operate in accordance with the operating instructions. iv
Summary of the content on the page No. 6
TANDBERG Border Controller User Manual Contents 1 Introduction 1 1.1 TANDBERG Border Controller Overview . . . . . . . . . . . . . . . . . . . . . . . 2 2 Installation 3 2.1 Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 2.2 Unpacking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 2.3 Mounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 2.4 Connecting Cables . . . . . . . . . . .
Summary of the content on the page No. 7
TANDBERG Border Controller User Manual 9.4 Logged Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 9.5 Remote Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 10 SoftwareUpgrade 40 10.1 Upgrading Using HTTP(S) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 10.2 Upgrading Using SCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 11 CommandReference 43 11.1 Status . . . . . . . . . . . . . .
Summary of the content on the page No. 8
TANDBERG Border Controller User Manual 1 Introduction This User Manual is provided to help you make the best use of your TANDBERG Border Controller. TM A Border Controller is a key component of TANDBERG’s Expressway firewall traversal solution. Used in conjunction with a TANDBERG Gatekeeper or TANDBERG traversal enabled endpoints it allows calls to be made into and out of a secured private network. The main features of the TANDBERG Border Controller are: • IPv4 and IPv6 support • Registration of
Summary of the content on the page No. 9
TANDBERG Border Controller User Manual 1.1 TANDBERGBorderControllerOverview On the front of theBorder Controllertherearethree LANinterfaces, aserialport (Data1) and an LED showing the power status of the system. The LAN 1 interface is used for connecting the system to your network, LAN interface 2 and 3 are disabled. The serial port (Data 1) is for connection to a PC, and power on is indicated by the Light Emitting Diode (Power) being lit. The back of the Border Controller has a power connector,
Summary of the content on the page No. 10
TANDBERG Border Controller User Manual 2 Installation 2.1 Precautions • Never install communication equipment during a lightning storm. • Never install jacks for communication cables in wet locations unless the jack is specifically designed for wet locations. • Never touch uninstalled communication wires or terminals unless the communication line has been disconnected at the network interface. • Use caution when installing or modifying communication lines. • Avoid using communication equipment (o
Summary of the content on the page No. 11
TANDBERG Border Controller User Manual 2.2.1 Installationsitepreparations • Make sure that the Border Controller is accessible and that all cables can be easily connected. • Forventilation: Leaveaspaceofatleast10cm(4inches)behindtheBorderController’s rear and 5cm (2 inches) on the sides. • The roominwhichyouinstalltheBorderControllershouldhaveanambienttemperature ◦ ◦ ◦ ◦ between 0 C and 35 C (32 F and 95 F) and between 10% and 90% non-condensing relative humidity. • Do not place heavy objects di
Summary of the content on the page No. 12
TANDBERG Border Controller User Manual Then switch the power switch button on the back of the unit to ‘1’. On the front of the chassis you will see the Power LED being lit. 2.6 BorderControllerInitialConfiguration The TANDBERG Border Controller requires some configuration before it can be used. This must bedoneusingaPCconnectedtotheserialport(Data1)orbyconnectingtothesystem’s default IP address: 192.168.0.100. TheIPaddress, subnetmaskandgatewaymustbeconfiguredbeforeuse. TheBorderController has to b
Summary of the content on the page No. 13
TANDBERG Border Controller User Manual Welcome to TANDBERG Border Controller Release Q3.0 SW Release Date: 2006-01-02 OK 10. Login with usernameadmin and your password. 11. Review other system settings. You may want to set the following: (a) ThenameoftheBorderController. ThisisusedtoidentifytheBorderControllerbythe TANDBERG Management Suite. See the xConfiguration SystemUnit command in section 11.2.17 for more information on setting the name. (b) Automatic discovery. If you have multiple Border
Summary of the content on the page No. 14
TANDBERG Border Controller User Manual 3 Gettingstarted 3.1 SystemAdministration To configure and monitor the TANDBERG Border Controller you can either use the web interface or a command line interface. The command line interface is available over SSH and Telnet, or through the serial port. The interface is the same using all three access methods. By default administration sessions remain active until you logout. Session timeouts may be enabled using the xConfiguration Session TimeOut command. To
Summary of the content on the page No. 15
TANDBERG Border Controller User Manual 3.1.2 RootAccount The Border Controller provides a root account with the same password as the admin account. This account should not be used in normal operation, and in particular system configuration should not be conducted using this account: use the admin account instead. 3.2 Registration Before an endpoint can use the Border Controller it must first register with it. There are two ways an endpoint can register: • Automatically. • Manually by specifying th
Summary of the content on the page No. 16
TANDBERG Border Controller User Manual Location Request to all the other Gatekeepers and Border Controllers on the system. Whilst conceptually simple, this sort of flat dial plan does not scale very well: adding or moving a Gatekeeper requires changing the configuration of every Gatekeeper and Border Controller; one call attempt can result in a flood of location requests. With 3 interconnected systems, an unknown alias can result in 28 LRQs, with 4 systems some 50,000 LRQs will be generated. An alt
Summary of the content on the page No. 17
TANDBERG Border Controller User Manual Figure 1: Adding a new zone 3.4 AlternateBorderControllers AlternateBorderControllersupportisprovidedtoincreasethereliabilityofyourdeployment. If one Border Controller becomes unavailable, perhaps due to a network or power outage, another will be used as an Alternate. Alternates share responsibility for their endpoint community: an individual endpoint may be registered with any one of the Alternates. You should configure Alternates identically for all regist
Summary of the content on the page No. 18
TANDBERG Border Controller User Manual Figure 2: Alternate Border Controller configuration 3.5 CallControl When an endpoint wants to call another endpoint it presents the address it wants to call to the Border Controller using a protocol knows as RAS. The Border Controller tries to resolve thisaddressandsuppliesthecallingendpointwithinformationaboutthecalledendpoint. The destination address can take several forms: IP address, H.323 ID, E.164 alias or a full H.323 URI. When anH.323IDorE.164alias i
Summary of the content on the page No. 19
TANDBERG Border Controller User Manual 12 Figure 3: Location decision flow diagram
Summary of the content on the page No. 20
TANDBERG Border Controller User Manual 3.6 FirewallTraversal The Border Controller works with the TANDBERG Gatekeeper, TANDBERG Expressway end- pointsandotherendpointswhichsupporttheITUH.460.18andH.460.19standards. Inorder tosuccessfullytraverseafirewall,thefirewallisrequiredtoallowinitialoutboundtraffictodes- ignated ports on the border controller and return traffic from those ports. The ports used are configurablea and by default are: • UDP/1719 • TCP/1720 • TCP/2776 • TCP/2777 • UDP/2776 • UDP/277