TANDBERG D13691.03 User manual

TANDBERG Border Controller
User Manual
Software version Q3.0
D13691.03
This document is not to be reproduced in whole or in part without permission in writing from:

TANDBERG Border Controller User Manual
Trademarks and copyright
Copyright 1993-2006 TANDBERG ASA. All rights reserved.
This document contains information that is proprietary to TANDBERG ASA. No part of this
publication may be reproduced, stored in a retrieval system, or transmitted, in any form, or
by any means, electronically, mechanically, by photocopying, or otherwise, without the prior
written permission of TANDBERG ASA. Nationally and internationally recognized trademarks
and tradenames are the property of their respective holders and are hereby acknowledged.
Portions of this software are licensed under 3rd party licenses. See the CD accompanying this
product for details.
Disclaimer
The information in this document is furnished for informational purposes only, is subject to change
without prior notice, and should not be construed as a commitment by TANDBERG ASA.
The information in this document is believed to be accurate and reliable, however TANDBERG
ASA assumes no responsibility or liability for any errors or inaccuracies that may appear in this
document, nor for any infringements of patents or other rights of third parties resulting from its
use. No license is granted under any patents or patent rights of TANDBERG ASA.
COPYRIGHT c 2006, TANDBERG ASA
i

TANDBERG Border Controller User Manual
Environmental Issues
Thank you for buying a product which contributes to a reduction in pollution, and thereby helps
save the environment. Our products reduce the need for travel and transport and thereby reduce
pollution. Our products have either none or few consumable parts (chemicals, toner, gas, paper).
Our products are low energy consuming products.
TANDBERG’s Environmental Policy
•TANDBERG’s Research and Development is continuously improving TANDBERG’s prod-
ucts towards less use of environmentally hazardous components and substances as well
as to make the products easier to recycle.
•TANDBERG’s products are Communication Solutions. The idea of these solutions is to
reduce the need for expensive, time demanding and polluting transport of people. Through
people’s use of TANDBERG’s products, the environment will benefit from less use of
polluting transport.
•TANDBERG’s wide use of the concepts of outsourcing makes the company itself a company
with a low rate of emissions and effects on the environment.
•TANDBERG’s policy is to make sure our partners produce our products with minimal
influence on the environment and to demand and audit their compatibility according to
applicable agreements and laws (national and international).
Environmental Considerations
Like other electronic equipment, the TANDBERG Border Controller contains components that
may have a detrimental effect on the environment. TANDBERG works continuously towards
eliminating these substances in our products.
•Printed-wiring boards made of plastic, with flame-retardants like Chloride or Bromide.
•Component soldering that contains lead.
•Smaller components containing substances with possible environmental effect.
After the product’s end of life cycle, it should be returned to authorized waste handling and should
be treated according to National and International Regulations for waste of electronic equipment.
ii

TANDBERG Border Controller User Manual
Operator Safety Summary
For your protection, please read these safety instructions completely before operating the
equipment and keep this manual for future reference. The information in this summary is
intended for operators. Carefully observe all warnings, precautions and instructions both on the
apparatus and in the operating instructions.
Warnings
•Water and moisture - Do not operate the equipment under or near water - for example near
a bathtub, kitchen sink, or laundry tub, in a wet basement, or near a swimming pool or in
areas with high humidity.
•Cleaning - Unplug the apparatus from the wall outlet before cleaning or polishing. Do not
use liquid cleaners or aerosol cleaners. Use a lint-free cloth lightly moistened with water for
cleaning the exterior of the apparatus.
•Ventilation - Do not block any of the ventilation openings of the apparatus. Install in
accordance with the installation instructions. Never cover the slots and openings with a
cloth or other material. Never install the apparatus near heat sources such as radiators,
heat registers, stoves, or other apparatus (including amplifiers) that produce heat.
•Grounding or Polarization - Do not defeat the safety purpose of the polarized or grounding-
type plug. A polarized plug has two blades with one wider than the other. A grounding type
plug has two blades and a third grounding prong. The wide blade or third prong is provided
for your safety. If the provided plug does not fit into your outlet, consult an electrician.
•Power-Cord Protection - Route the power cord so as to avoid it being walked on or pinched
by items placed upon or against it, paying particular attention to the plugs, receptacles, and
the point where the cord exits from the apparatus.
•Attachments - Only use attachments as recommended by the manufacturer.
•Accessories - Use only with a cart, stand, tripod, bracket, or table specified by the manu-
facturer, or sold with the apparatus. When a cart is used, use caution when moving the
cart/apparatus combination to avoid injury from tip-over.
•Lightning - Unplug this apparatus during lightning storms or when unused for long periods
of time.
•Servicing - Do not attempt to service the apparatus yourself as opening or removing covers
may expose you to dangerous voltages or other hazards, and will void the warranty. Refer
all servicing to qualified service personnel.
•Damaged Equipment - Unplug the apparatus from the outlet and refer servicing to qualified
personnel under the following conditions:
–When the power cord or plug is damaged or frayed
–If liquid has been spilled or objects have fallen into the apparatus
–If the apparatus has been exposed to rain or moisture
iii

TANDBERG Border Controller User Manual
–If the apparatus has been subjected to excessive shock by being dropped, or the
cabinet has been damaged
–If the apparatus fails to operate in accordance with the operating instructions.
iv

TANDBERG Border Controller User Manual
Contents
1 Introduction 1
1.1 TANDBERG Border Controller Overview . . . . . . . . . . . . . . . . . . . . . . . 2
2 Installation 3
2.1 Precautions....................................... 3
2.2 Unpacking........................................ 3
2.3 Mounting ........................................ 4
2.4 ConnectingCables................................... 4
2.5 SwitchingontheSystem................................ 4
2.6 Border Controller Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . 5
3 Getting started 7
3.1 SystemAdministration................................. 7
3.2 Registration....................................... 8
3.3 NeighborGatekeepers................................. 8
3.4 Alternate Border Controllers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
3.5 CallControl....................................... 11
3.6 FirewallTraversal.................................... 13
4 Bandwidth Control 14
4.1 Bandwidth Control and Firewall Traversal . . . . . . . . . . . . . . . . . . . . . . 16
4.2 Bandwidth Control Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
5 Registration Control 20
5.1 Registration Restriction Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
5.2 Authentication...................................... 21
6 URI Dialing 23
6.1 Creating DNS SRV records . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
7 Example Traversal deployments 25
7.1 Simple Enterprise deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
7.2 EnterpriseGatekeepers ................................ 26
7.3 Dialing Public IP addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
7.4 Neighboredenterprises ................................ 27
7.5 URI dialing from within the enterprise . . . . . . . . . . . . . . . . . . . . . . . . 27
8 Call Policy 29
8.1 Making Decisions Based on Addresses . . . . . . . . . . . . . . . . . . . . . . . 29
8.2 CPLScriptActions................................... 31
8.3 Unsupported CPL Elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
8.4 CPLExamples ..................................... 32
9 Logging 34
9.1 Controlling what is logged . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
9.2 Eventlogformat .................................... 34
9.3 EventLevels ...................................... 35
v

TANDBERG Border Controller User Manual
9.4 LoggedEvents ..................................... 35
9.5 RemoteLogging .................................... 39
10 Software Upgrade 40
10.1 Upgrading Using HTTP(S) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
10.2UpgradingUsingSCP ................................. 41
11 Command Reference 43
11.1Status.......................................... 43
11.2Configuration ...................................... 46
11.3Command........................................ 56
11.4History.......................................... 61
11.5Feedback ........................................ 62
11.6Othercommands.................................... 63
A Appendix: Configuring DNS Servers 65
A.1 MicrosoftDNSServer ................................. 65
A.2 VerifyingtheSRVrecord................................ 65
B Appendix: Configuring LDAP Servers 67
B.1 Microsoft Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
B.2 OpenLDAP ....................................... 68
C Approvals 71
D Technical Specifications 72
E Glossary 75
vi

TANDBERG Border Controller User Manual
1 Introduction
This User Manual is provided to help you make the best use of your TANDBERG Border
Controller.
A Border Controller is a key component of TANDBERG’s ExpresswayTMfirewall traversal solution.
Used in conjunction with a TANDBERG Gatekeeper or TANDBERG traversal enabled endpoints
it allows calls to be made into and out of a secured private network.
The main features of the TANDBERG Border Controller are:
•IPv4 and IPv6 support
•Registration of traversal enabled endpoints.
•Supports up to 500 registered TANDBERG traversal endpoints.
•Secure firewall traversal of any firewall or NAT.
•Up to 100 traversal calls.
•Supports up to 100 neighboring zones.
•Flexible zone configuration with prefix and suffix support.
•URI dialing with DNS enabling global connectivity.
•Can function as a standalone Border Controller or be neighbored with other Border Con-
trollers and Gatekeepers.
•Can be used to control the amount of bandwidth used both within the Border Controller
zone and to neighboring Border Controllers and Gatekeepers.
•Can limit total bandwidth usage and set maximum per call bandwidth usage with automatic
down-speeding if call exceeds per-call maximum.
•Can be managed with TANDBERG Management Suite 11.0 or newer, or as a standalone
system with RS-232, Telnet, SSH, HTTP and HTTPS.
•Embedded setup wizard on serial port for initial configuration.
Note that features may vary depending on software package.
1

TANDBERG Border Controller User Manual
1.1 TANDBERG Border Controller Overview
On the front of the Border Controller there are three LAN interfaces, a serial port (Data 1) and
an LED showing the power status of the system. The LAN 1 interface is used for connecting
the system to your network, LAN interface 2 and 3 are disabled. The serial port (Data 1) is for
connection to a PC, and power on is indicated by the Light Emitting Diode (Power) being lit.
The back of the Border Controller has a power connector, a power switch, and a serial port (Data
2) for connecting to a PC.
2

TANDBERG Border Controller User Manual
2 Installation
2.1 Precautions
•Never install communication equipment during a lightning storm.
•Never install jacks for communication cables in wet locations unless the jack is specifically
designed for wet locations.
•Never touch uninstalled communication wires or terminals unless the communication line
has been disconnected at the network interface.
•Use caution when installing or modifying communication lines.
•Avoid using communication equipment (other than a cordless type) during an electrical
storm.
•There may be a remote risk of electrical shock from lightning.
•Do not use communication equipment to report a gas leak in the vicinity of the leak.
•The socket outlet shall be installed near to the equipment and shall be easily accessible.
•Never install cables without first switching the power OFF.
•This product complies with directives: LVD 73/23/EC and EMC 89/366/EEC.
•Power must be switched off before power supplies can be removed from or installed into
the unit.
2.2 Unpacking
The TANDBERG Border Controller is delivered in a special shipping box which should contain
the following components:
•Border Controller unit
•Installation sheet
•User manual and other documentation on CD
•Rack-ears and screws
•Kit with 4 rubber feet
•Cables:
–Power cables
–One Ethernet cable
–One null-modem RS-232 cable
3