Tandberg Data N3 manuel d'utilisation

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

Aller à la page of

Un bon manuel d’utilisation

Les règles imposent au revendeur l'obligation de fournir à l'acheteur, avec des marchandises, le manuel d’utilisation Tandberg Data N3. Le manque du manuel d’utilisation ou les informations incorrectes fournies au consommateur sont à la base d'une plainte pour non-conformité du dispositif avec le contrat. Conformément à la loi, l’inclusion du manuel d’utilisation sous une forme autre que le papier est autorisée, ce qui est souvent utilisé récemment, en incluant la forme graphique ou électronique du manuel Tandberg Data N3 ou les vidéos d'instruction pour les utilisateurs. La condition est son caractère lisible et compréhensible.

Qu'est ce que le manuel d’utilisation?

Le mot vient du latin "Instructio", à savoir organiser. Ainsi, le manuel d’utilisation Tandberg Data N3 décrit les étapes de la procédure. Le but du manuel d’utilisation est d’instruire, de faciliter le démarrage, l'utilisation de l'équipement ou l'exécution des actions spécifiques. Le manuel d’utilisation est une collection d'informations sur l'objet/service, une indice.

Malheureusement, peu d'utilisateurs prennent le temps de lire le manuel d’utilisation, et un bon manuel permet non seulement d’apprendre à connaître un certain nombre de fonctionnalités supplémentaires du dispositif acheté, mais aussi éviter la majorité des défaillances.

Donc, ce qui devrait contenir le manuel parfait?

Tout d'abord, le manuel d’utilisation Tandberg Data N3 devrait contenir:
- informations sur les caractéristiques techniques du dispositif Tandberg Data N3
- nom du fabricant et année de fabrication Tandberg Data N3
- instructions d'utilisation, de réglage et d’entretien de l'équipement Tandberg Data N3
- signes de sécurité et attestations confirmant la conformité avec les normes pertinentes

Pourquoi nous ne lisons pas les manuels d’utilisation?

Habituellement, cela est dû au manque de temps et de certitude quant à la fonctionnalité spécifique de l'équipement acheté. Malheureusement, la connexion et le démarrage Tandberg Data N3 ne suffisent pas. Le manuel d’utilisation contient un certain nombre de lignes directrices concernant les fonctionnalités spécifiques, la sécurité, les méthodes d'entretien (même les moyens qui doivent être utilisés), les défauts possibles Tandberg Data N3 et les moyens de résoudre des problèmes communs lors de l'utilisation. Enfin, le manuel contient les coordonnées du service Tandberg Data en l'absence de l'efficacité des solutions proposées. Actuellement, les manuels d’utilisation sous la forme d'animations intéressantes et de vidéos pédagogiques qui sont meilleurs que la brochure, sont très populaires. Ce type de manuel permet à l'utilisateur de voir toute la vidéo d'instruction sans sauter les spécifications et les descriptions techniques compliquées Tandberg Data N3, comme c’est le cas pour la version papier.

Pourquoi lire le manuel d’utilisation?

Tout d'abord, il contient la réponse sur la structure, les possibilités du dispositif Tandberg Data N3, l'utilisation de divers accessoires et une gamme d'informations pour profiter pleinement de toutes les fonctionnalités et commodités.

Après un achat réussi de l’équipement/dispositif, prenez un moment pour vous familiariser avec toutes les parties du manuel d'utilisation Tandberg Data N3. À l'heure actuelle, ils sont soigneusement préparés et traduits pour qu'ils soient non seulement compréhensibles pour les utilisateurs, mais pour qu’ils remplissent leur fonction de base de l'information et d’aide.

Table des matières du manuel d’utilisation

  • Page 1

    T ANDBERG Gatekeeper User Manual Software version N3 D13381.03 This document is not to be repr oduced in whole or in part without pe rmission in w riting from:[...]

  • Page 2

    TANDBERG Gatek eeper User Manual ii Trademarks and copyright Copyright 1993-2005 TANDBERG ASA. All rights reserved. This document contains information that is proprietary to TANDBERG ASA. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form, or by any means, electronically, mechanically, by photoc[...]

  • Page 3

    TANDBERG Gatek eeper User Manual iii Environmental Issues Thank y ou for bu y ing a product which contributes to a reduction in pollution , and thereby helps save the en vironment. Our produc ts reduce the need f or travel and transpor t and thereby reduce p ollution. Our products h ave either non e or few consum able parts (chem icals, toner, gas,[...]

  • Page 4

    TANDBERG Gatek eeper User Manual iv Operator Safety Summary For your protect ion, please read these saf ety instructions com pletely before operating the equipment and k eep this manual for future reference. T he information in this sum mary is intended for opera tors. Carefull y observe al l warnings, precaut ions and instructions both on the appa[...]

  • Page 5

    v Table Of Conte nts TANDBERG Gatek eeper User Manual ............................. ................................ ..........................i Trademark s and copyright ............................. ................................ ................................ ......... ii Environm ental Issues ............................ ...................[...]

  • Page 6

    TANDBERG Gatek eeper User Manual vi 4.1 Upgrading Us ing HTTP(S) ....................................................... ................................ . 30 4.2 Upgrading Us ing SCP ................................... ................................ ............................ 31 5 Configuring the G atekeeper ...................................[...]

  • Page 7

    1 1 Introduction This User Manu al is provided to he lp you make the bes t use of your TANDBERG Gatekeeper. A Gatekeeper is a c entral part of an H. 323 infrastructure. It prov ides address translat ion and controls access to t he network for H.323 term inals, Gateways and MCU s. The Gatekeeper also provides other s ervices to the term inals, Gatew[...]

  • Page 8

    TANDBERG Gatek eeper User Manual 2 1.1 TANDBERG Gatekeeper Overview On the front of the Gatekeeper there are t hree LAN interf aces, a serial port (Data 1) and a Light Emitting D iode (Power). T he LAN 1 interface is used f or connecting the s y stem to your local area network , LAN interfac e 2 and 3 are disabled. T he serial port (Data 1) is for [...]

  • Page 9

    3 2 Inst allation Precautions:  Never install com munication equipm ent during a lightning st orm.  Never install jac ks for comm unication cables in wet loc ations unless the jack is specificall y designed f or wet locations.  Never touch uninsta lled comm unication wires or term inal s unles s the communication line has been d isconnecte[...]

  • Page 10

    TANDBERG Gatek eeper User Manual 4  Do not place hea vy objects directl y on top of the Gatekeeper.  Do not place hot o bjects directly on top, or directly beneath the Gatekeeper.  Use a grounded AC power outlet for the G atekeeper. 2.2 Mounting The Gatek eeper comes with brack ets for mounting in standard 19" racks . Before starting [...]

  • Page 11

    5 2.5 Gatekeeper Initial Configuration The T ANDBERG Gatekeeper requires s ome configuration before it can be used. This m ust be done using a PC connected to the ser ial port (Data 1). The main thing that needs to be conf igured is the IP settings of the Gatekeeper. T his includes the IP address, th e IP subnet mask , and the IP gateway. The Gatek[...]

  • Page 12

    TANDBERG Gatek eeper User Manual 6 xConfiguration Gatekeeper AutoDiscovery comm and in section 5.2 for mor e information. 12. Reboot the Gat ekeeper b y typing the c ommand xCommand boot to m ake your new settings tak e effect. 13. Disconnect the ser ial cable. NOTE To secur e the Gatekeeper you should disab le HTT P, HTTPS, SSH and T elnet, relyin[...]

  • Page 13

    7 3 Using the Gatekeeper The Gatek eeper is used by H.323 term inals, Gatewa ys and MCUs. These device s register with the Gatek eeper and the Gatek eeper then provides address translation and c ontrols access to the net work. 3.1 System Administration To conf igure and monitor the TANDB ERG Gatekeeper you can e ither use the web interf ace or a co[...]

  • Page 14

    TANDBERG Gatek eeper User Manual 8 NOTE Automatic disc overy is a function that a llows the Gatek eeper to reply to multicast G atekeeper discovery m essages from the endpoint. NOTE If you have probl ems registering the endpoint, try turning o n automatic discover y . Som e endpoints require automatic registrati on to be enabled. NOTE W hen URI dia[...]

  • Page 15

    9 Remote z ones can be c onfigured through t he web interface of the TANDBERG Gatek eeper by navigating to Gat ekeeper Configurat ion > Gatekeeper . See Figure 1 for a sc reenshot of the configurat ion. Figure 1 Screen shot of the A dding a New Zone configuration NOTE W hen using a local zo ne prefix do not start the E.164 aliases with the s ame[...]

  • Page 16

    TANDBERG Gatek eeper User Manual 10 W hen a Gatekeeper rece ives a Location Requ est, if it cannot respond f rom its own registration databas e, it will quer y all of its A lternates before respond ing. This allows the poo l of registrations to be treated as if the y were reg istered with a singl e Gatekeeper. The Alternate G atekeepers can be c on[...]

  • Page 17

    11 3.5 Call Control W hen an end-point wants t o call another endpo int it presents the addres s it wants to call to the Gatek eeper using a protocol kno ws as RAS. The Gatek eeper tries to resolve t his address and supplies the ca lling endpoint with inf ormation about the c alled endpoint. T he destination address can tak e several forms : IP add[...]

  • Page 18

    TANDBERG Gatek eeper User Manual 12 Figure 3 Admiss ion Request Proce ssing[...]

  • Page 19

    13 Figure 4 Location Request Processing[...]

  • Page 20

    TANDBERG Gatek eeper User Manual 14 3.6 Bandwidth Control The T ANDBERG Gatekeeper allows you to control endpoi nts ’ use of bandwidth on your network. Figure 5 s hows a typical dep loy ment: a broadband LAN, where high band wi dth ca ll s are acceptable, a pipe to the internet wi th restricte d bandwidth, an d two satellite off ices, each with t[...]

  • Page 21

    15 xConfiguration Links Link [1..100] Pipe2 Name Each subzone m ay be configured with its own bandwidth lim its. Calls placed bet ween two endpoints in the s ame subzone co nsume resource f rom the subzone ’ s allocation . Subzone bandwidths are co nfigured on the Gat ekeeper Config uration > SubZones page (see Figure 6 for a scr eenshot of th[...]

  • Page 22

    TANDBERG Gatek eeper User Manual 16 Figure 6 Config uration of a SubZone t hrough the web int erface Figure 7 Adding a new Pipe through the web interface Figure 8 Config uring the dow nspeeding parameters of the Gatekeeper 3.6.1 Bandwidth Control and Firewall Traversal W hen a Border Control ler and Gatekeeper are b eing used to traverse a firewall[...]

  • Page 23

    17 3.6.2 Bandwidth Control Examples One possible conf iguration for the deploy ment in Figure 5 is sho wn in Fig ure 9. Each of the offices is represented as a separate su bzone, with band wi dth config ured according to loca l policy. The enterpr ise ’ s leased line connect ion to the Internet, and th e DSL connections to the remote off ices, ar[...]

  • Page 24

    TANDBERG Gatek eeper User Manual 18 In Figure , the end points in the enterpr ise register with the Gat ekeeper, whilst thos e in the branch and hom e office register wi th the Border Controller. Bord er Contro ller Branch Office Home Office Traversal sub-zone Hom e sub-z one Branc h sub-z one Enterprise Pipe Home Pipe Branch Pipe Enterp rise Trave[...]

  • Page 25

    19 Figure 12 Gatek eeper example config uration All of the endpo ints in the enterprise wi ll be assigned to the def ault subzone. The T raversal subzone controls tra versal traffic f lowing through the Gatek eeper, whilst the T raversal Zone controls all traf fic traversing the enterpr ise firewall and pass ing on to the Border C ontroller. Both s[...]

  • Page 26

    TANDBERG Gatek eeper User Manual 20 matc h an ent ry on the D enyList. Allow lists an d Deny lists are m utually exclusive: onl y one may be in use at an y given tim e. Matching uses a s imple form o f wild card expansi on: 12345678 Exact m atch only 1234567? First 7 characters are an exact m atch, last may be anything 123* 123 followed b y anythin[...]

  • Page 27

    21 To conf igure the Gatek eeper to use the loca l database of c redentials during authentica tion issue the follo wing commands xConfiguration Authentication Mode: On xConfiguration Authentication Database: LocalDatabase Each credential in the local database has a username and a password. To m anage the credentials in the local database use the f [...]

  • Page 28

    TANDBERG Gatek eeper User Manual 22 xConfiguration LDAP UserDN: "Your user DN" xConfiguration LDAP Password: "password" The status of the connection betwee n the Gatekeeper and the LDAP server can b e verified using the comm and xstatus LDAP The details of the LDAP server can also be configured via th e web interface on the Gate[...]

  • Page 29

    23 Figure 16 Config uring the Gatekeeper to authenticate w ith an LDAP server u sing TLS encryption 3.9 URI Dialing If an alias is not located in the Gatek eeper ’ s list of registrations, it m ay attempt to find an authoritative Gatek eeper through the DNS s ystem. URI dialing m akes it easier for endpoints reg istered with diff erent Gatekeeper[...]

  • Page 30

    TANDBERG Gatek eeper User Manual 24 Figure 17 IP Conf iguration Screen 3.9.1 URI Dialing and firewall traversal If URI dialing is be ing used in conju nction with firewall t raversal, DNSResolut ionMode should only be enable d on the Border Control ler. The DNS records should be updated wi th the address of the Bord er Controller as the authoritati[...]

  • Page 31

    25 To conf igure the Gatek eeper for f irew all traversa l, use the Web or console interface (see Figure 18 for th is configuration screen on the web interf ace). You will need to set t he IP address of the Bord er Controller xConfiguration Traversal Server Address: <ip_address> You will need to enter the nam e of your Gatekeeper on to the Bo[...]

  • Page 32

    TANDBERG Gatek eeper User Manual 26 xConfiguration Gatekeeper Policy Mode <On/Off> Policy interacts with authentication (sec tion 3.7.2, Authentica tion). If authentication is enabled on the local Gatek eeper and a call rece ived from a rem ote, unauthenticated Gat ekeeper, the call ’ s source a lia ses w ill be re m oved from the call requ[...]

  • Page 33

    27 “ display ” Not defined for a ny alias types address The address c onstruct is used within an a ddress-switch to spec ify addresses to match. Please note that al l address com parisons ignore uppe r/lower case differenc es so <address is= “ Fred ” > will matc h “ fred ” , “ freD ” etc . is=<string> Selected field an d[...]

  • Page 34

    TANDBERG Gatek eeper User Manual 28 an E.164 num ber. proxy On executing a prox y node the Gatek eeper will attem pt to forward the cal l to the locations specified in the curr ent location set. If multiple entries ar e in the location set then t hey are treated as dif ferent aliases f or the same destination and are a ll placed in the destinati on[...]

  • Page 35

    29 User "fred" will n ot accept calls from anyone at "annoying.com ", or from any unauthenticate d users. All other users will allow an y calls. <cpl> <incoming > <addres s-switch fie ld="destinat ion"> <addr ess is="fred "> <ad dress-switch field="orig in" subfield ="[...]

  • Page 36

    TANDBERG Gatek eeper User Manual 30 4 Sof tware Upgrade Software upgra de can be done in one of two ways:  Using a web bro wser (HTTP/HTT PS).  Using secure cop y (SCP). NOTE To upgrade the G atekeeper, a valid Rel ease key and sof tware file is required. Co ntact your TANDBERG repr esentative for m ore information. NOTE Configuration is rest[...]

  • Page 37

    31 4. Enter the releas e key and press Install Sof tware. You will get a new screen where you can upload the sof tware image: 5. Browse to the f ile containing the sof tware and press Install. You should see a pag e indicating that up load is in progress: 6. W hen the upload is com pleted you should se e the following: 7. Press Restart. You should [...]

  • Page 38

    TANDBERG Gatek eeper User Manual 32 NOTE Make sure y ou transfer the release key file bef ore transferr ing th e soft w are im age. Also make sure you nam e the files exactly as desc ribed below. NOTE The release k ey file should contain j ust the 16 character release key. To upgrade usin g SCP, do the following: 1. Connect the supp lied null-m ode[...]

  • Page 39

    33 5 Configuring the Gatekeeper This chapter lists the basic usage of each command. The com mands also support more advanced usag e, which is outside th e scope of this do cument. 5.1 Status The status root com mand, xstatus, returns s tatus inform ation from the Gatekeeper. To list all xstatus com mands t y pe xstatus ? To list all status inf orma[...]

  • Page 40

    TANDBERG Gatek eeper User Manual 34 Command Usage Description ResourceUsage xstatus Res ourceUsage Reports usage of system resour ces. Registratio ns : Number of curr ently registered endpoints. MaxRegistra tions : Max imum number of registered endpoints since system start. PortRegistr ations : Total nu mber of currently registered endpoint s and s[...]

  • Page 41

    35 xconfigurat ion ? To list all configur ation data, t y pe xconfigurat ion To show a specif ic configuration value, type xconfigurat ion <name> To show usage information f or a specific configuration value, type xconfigurat ion <name> ? To set a conf iguration element type xconfigurat ion <name> < param1>: val ue1 <para[...]

  • Page 42

    TANDBERG Gatek eeper User Manual 36 Configuration com mands Description xConfigurat ion Gatekeep er Alternate GK [1..5]: <IP Addr> List of Alternate Ga tekeepers ’ IP addresses . xConfigurat ion Gatekeep er AutoDiscove ry: <On/Off> Specifies if the Gate keeper suppo rts automatic regi stration of endpoints. The default is On . xConfig[...]

  • Page 43

    37 Configuration com mands Description xConfigurat ion HTTPS Mo de: <On/Off> Enables/disables H TTPS support. Note that HTTP must also be enabled. You must restart the system for changes to take e ffect. xConfigurat ion IP Addre ss: <IPAddr> Specify the IP addre ss of the sys tem. You must restart the system for changes to take e ffect.[...]

  • Page 44

    TANDBERG Gatek eeper User Manual 38 Configuration com mands Description xConfigurat ion Pipes Pi pe [1..100] Bandwidth T otal Limit: <1..10000000 0> Bandw idth associated w ith a pipe, keye d by index . xConfigurat ion Pipes Pi pe [1..100] Bandwidth T otal Mode: <None/Limit ed/Unlimited > Whether or not a giv en pipe is enf orcing total[...]

  • Page 45

    39 Configuration com mands Description xConfigurat ion SubZones TraversalSu bZone Bandwi dth Total Mo de: <None/Limit ed/Unlimited > Whether or not the traversal subz one is enforcing to tal bandw idth restrictions. None corre sponds to no bandw idth available. xConfigurat ion SubZones SubZone [1..100] Ba ndwidth PerC all Limit: <1..100000[...]

  • Page 46

    TANDBERG Gatek eeper User Manual 40 Configuration com mands Description xConfigurat ion Zones Zo ne [1..100] Gatekeeper IP Port: <1. .65534> Specifies the IP port of the neighb or gatekeeper xConfigurat ion Zones Zo ne [1..100] Gatekeeper HopCount: <1 ..255> Max imum hop count to u se when issuing LRQs to Gatekeeper s in this zone. The [...]

  • Page 47

    41 Comma nd Usage Description DenyListAdd xCommand DenyLis tAdd <denied_ali as> Add an entry to the deny list, used by the registratio n restriction policy . DenyListDelete xCommand De nyListDelete <index> Removes the pattern from the den y list at the speci fied index . DisconnectCall xCommand Di sconnectCall <callid> Disconnects[...]

  • Page 48

    TANDBERG Gatek eeper User Manual 42 Comma nd Usage Description SubZoneDelete xCommand Su bZoneDelete: <index> Deletes the index ed subzone. ZoneAdd xCommand Zo neAdd <name> <address> < prefix> Adds a new z one with the specifie d name, zon e prefix and IP address. E.g. xCommand Zo neAdd B 65 1 0.0.0.30 Note: the p arameter o[...]

  • Page 49

    43 xfeedback l ist To register a feed back expression, t y pe xfeedback r egister <exp ression> To deregister the f eedback expres sion with index <n>, type xfeedback d eregister <n > To deregister al l feedback express ions, type xfeedback d eregister 0 Feedback commands Description xFeedback R egister Stat us/<Calls/Re gistra[...]

  • Page 50

    TANDBERG Gatek eeper User Manual 44 Comma nd Usage Description relkey Relkey Displays the relea se key that this softwar e has been installed with. syslog syslog <lev el> [ipaddr] [ipaddr] .. . Enables tracing. <level> - is the log level, 0-3, 3 giv es most logging . ipaddr – specify up to 10 IP addr esses to log infor mation for, all[...]

  • Page 51

    45 6 Appendix: Configuring DNS Servers In the exam ples below, we set up an SRV record to handle H.323 U RIs of the for m user@exam ple.com. These are handled by the Gatekeeper with t he fully qualified dom ain name of Gatekeeper1.exam ple.com which is listening on port 1719, the defau lt registration port. It is assum ed that an A record alread y [...]

  • Page 52

    TANDBERG Gatek eeper User Manual 46 then instruct nam ed to reload the f ile s kill – s SIGHUP pid 4. Check the log f iles for any discrepanc ies tail /var/log/messages For m ore detail s of how to configure BIND ser vers and the DNS s ystem in general see the book “ DNS and BIND ” 6 . 6.3 Verifying the SRV record There are a range of tools a[...]

  • Page 53

    47 7 Appendix: Configuring LDAP Servers 7.1 Microsoft Active Directory 7.1.1 Prerequisites These com prehensive step by step instructions assume tha t Active Director y is in stalled. For details on installi ng Active Directory please c onsult your W indows documentation . The following instruct ions are for W indow s Ser ver 2003 Enterprise Editio[...]

  • Page 54

    TANDBERG Gatek eeper User Manual 48 commUniqueId: comm1 h323Identityh323-ID: MeetingRoom1 h323IdentitydialedDigits: 626262 h235IdentityEndpointID: meetingroom1 h235IdentityPassword: mypassword Add the ldif f ile to the server using the com mand: ldifde -i -c DC=X <ldap_base> -f filename.ldf This will add a si ngle H.323 endpoint with an H.323[...]

  • Page 55

    49  H.350.2 – Director y service s architecture for H.235 - An LDAP schem a to represent H.235 elem ents. The schem as can be downloaded i n ldif format fr om the web interface on the Ga tekeeper. To do this, navigate t o the Gatekeeper Conf iguration > Files pag e and click on the li nks for the schemas. Copy the downloa ded schem a s to t[...]

  • Page 56

    TANDBERG Gatek eeper User Manual 50 commUniqueId: comm1 h323Identityh323-ID: MeetingRoom1 h323IdentitydialedDigits: 626262 h235IdentityEndpointID: meetingroom1 h235IdentityPassword: mypassword Add the ldif f ile to the server using the com mand: slapadd -l <ldif _file> This will add a si ngle H.323 endpoint with an H.323 Id alias of “ Meet [...]

  • Page 57

    51 8 Approvals The product has been approved b y various international a pproval agencies, am ong others: UL and Nem ko. According to their Fo llow-Up Inspection Schem e, these agenci es also perform pr oduction inspections at a regu lar basis, for all product ion of TANDBERG ’ s equipment. The test reports an d certificates issue d for the produ[...]

  • Page 58

    TANDBERG Gatek eeper User Manual 52 9 T echnical S pec ifications System Capacit y 100-1000 register ed endpoints 25-200 concurrent calls 0-100 traversal ca lls 100 zones (The s y stem ’ s capacit y depends on the s ystem ’ s option k ey ) Ethernet Interfac es 3 x LAN/Ethernet ( RJ-45) 10/100 Base- TX (2 disabled) System consol e port 2 x COM p[...]

  • Page 59

    53 10 Index AllowList, 19, 36, 40 Alternate, 9, 24, 36 Authentication LDAP, 35 local database, 35 Bandwidth Contro l, 37 CPL, 25, 36 examples, 28 unsupported elem ents, 28 Credentials, 21 DenyList, 19, 36, 41 DNS, 23, 24, 36 BIND, 45 Microsoft DNS Ser ver, 45 Down-speed, 15 Ethernet, 2 speed, 35 Firewall travers al, 24 media direct, 16, 19 URI dial[...]