Poly VBP 4555 Series Configuration Guide

Category
Networking
Type
Configuration Guide
Polycom® VBPSystem
Configuration Guide
11.2.3 | June 2011 | 3725-78301-001C
VBP Series Configuration Guide
2
Trademark Information
Polycom ®, the Polycom logo design, [and others that appear in your document] are registered trademarks of Polycom, Inc.™ are trademarks of Polycom, Inc. in
the United States and various other countries. All other trademarks are the property of their respective owners.
© 2011 Polycom, Inc. All rights reserved.
Polycom Inc.
4750 Willow Road
Pleasanton, CA 94588-2708
USA
No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written
permission of Polycom, Inc. Under the law, reproducing includes translating into another language or format.
A
s between the parties, Polycom, Inc. retains title to, and ownership of, all proprietary rights with respect to the software contained within its products. The software
is protected by United States copyright laws and international treaty provision. Therefore, you must treat the software like any other copyrighted material (e.g. a book
or sound recording).
Every effort has been made to ensure that the information in this manual is accurate. Polycom, Inc. is not responsible for printing or clerical errors. Information in this
document is subject to change without notice.
Export Notice
This product, software and related technology is subject to U.S. export control and may be subject to export or import regulations in other countries. Purchaser must
strictly comply with all such laws and regulations. A license to export or re-export may be required by the U.S. Department of Commerce.
Regulatory Compliance
This product was tested to comply with FCC standards for home and office use. It also meets the applicable Industry Canada Terminal Equipment Technical
Specifications an VCCI standards.
Licensing
Use of this product is subject to Edgewater Networks Software License Agreement. Portions of this product include software sponsored by the Free Software
Foundation and are covered by the GNU GENERAL PUBLIC LICENSE.
Release Date:
June 10, 2011
VBP Series Configuration Guide
3
Feature Summary....................................................................................................................................................................................................... 10
System Configuration................................................................................................................................................................................................ 13
Configuring VBP-E Network Settings.................................................................................................................................................................. 14
Configure WAN settings ................................................................................................................................................................................... 14
Configure WAN ADSL-PPPoE .......................................................................................................................................................................... 14
Configure WAN DHCP....................................................................................................................................................................................... 15
Configure WAN Static IP Address ................................................................................................................................................................... 16
Configuring VBP-ST Network Settings................................................................................................................................................................ 17
Configure Subscriber and Provider settings.................................................................................................................................................. 17
Subscriber Interface Settings .......................................................................................................................................................................... 17
Provider Interface Settings............................................................................................................................................................................... 18
Configuring LAN Settings..................................................................................................................................................................................... 19
Configure LAN network settings without VLANs........................................................................................................................................... 19
Configure LAN network settings with VLANs ................................................................................................................................................ 19
Configuring VLANs................................................................................................................................................................................................ 19
Set up VLANs on the 4350................................................................................................................................................................................ 20
Set up VLANs on the 5300-E and 6400-E series............................................................................................................................................. 20
Delete a VLAN .................................................................................................................................................................................................... 20
Configuring Ethernet Interface Link Settings................................................................................................................................................. 20
SNMP Overview ..................................................................................................................................................................................................... 21
Configure SNMP ................................................................................................................................................................................................ 22
Disable SNMP .................................................................................................................................................................................................... 23
Delete an SNMP trap ......................................................................................................................................................................................... 23
Configuring DHCP Services ................................................................................................................................................................................. 23
DHCP Relay........................................................................................................................................................................................................ 23
DHCP Server ...................................................................................................................................................................................................... 24
Configuring DHCP Server................................................................................................................................................................................. 25
Configuring DHCP With VLANs ....................................................................................................................................................................... 26
DHCP Leases ..................................................................................................................................................................................................... 27
Configuring DNS for ANNEX O support .................................................................................................................................................................. 28
Diagnose your DNS settings ............................................................................................................................................................................ 31
Firewall rules for securing the network ................................................................................................................................................................... 32
VBP Firewall Basics .............................................................................................................................................................................................. 32
Configure the VBP-E Whitelist/Blacklist ......................................................................................................................................................... 33
VBP-E or VBP-S and ST blocking management ports................................................................................................................................... 34
VBP-E management ports ................................................................................................................................................................................ 34
Trusted Management Addresses..................................................................................................................................................................... 35
VBP-S or ST management ports ...................................................................................................................................................................... 36
CERT Advisory CA-2004-01.................................................................................................................................................................................. 38
Implementing Polycom VBP with a Third-Party Firewall ....................................................................................................................................... 39
Describing the Issue Between H.323 Communications and NAT..................................................................................................................... 39
VBP Series Configuration Guide
4
Resolving the Issue Without VBP ........................................................................................................................................................................ 39
Using a 1-1 NAT ..................................................................................................................................................................................................... 39
Using an H.323-Compliant Firewall...................................................................................................................................................................... 40
Resolving the Issue with VBP .............................................................................................................................................................................. 40
Implementing a VBP with a Third-Party Firewall ................................................................................................................................................ 41
Implementing a DMZ with a Public IP Space ...................................................................................................................................................... 41
Implementing a DMZ with a Private IP Space ..................................................................................................................................................... 42
Required Ports ....................................................................................................................................................................................................... 42
VBP-E DMZ required ports to and from the WAN interface .......................................................................................................................... 45
VBP-E DMZ required ports inbound to the LAN interface............................................................................................................................. 46
VBP-E DMZ required ports outbound from the LAN interface ..................................................................................................................... 47
VBP-ST DMZ required ports inbound from the Internet to the VBP (H.460 support) ................................................................................. 48
VBP-ST DMZ required ports outbound from the VBP to the Internet (H.460 support)............................................................................... 49
VBP-ST DMZ required ports inbound from the Internet to the VBP (H.460 and Access Proxy) ............................................................... 50
VBP-ST DMZ required ports outbound from the VBP to the Internet (H.460 and Access Proxy)............................................................. 52
VBP-ST DMZ required ports inbound from the LAN gatekeeper (H.323 and Access Proxy) .................................................................... 53
VBP-ST DMZ required ports outbound to the LAN gatekeeper (H.323 and Access Proxy)....................................................................... 55
VBP Topologies.......................................................................................................................................................................................................... 56
Overview ................................................................................................................................................................................................................. 56
Centralized Gatekeeper Diagram ......................................................................................................................................................................... 57
Distributed Gatekeeper Diagram - 1 ................................................................................................................................................................ 58
Distributed Gatekeeper Diagram - 2 ................................................................................................................................................................ 59
Configuring the VBP E-Series Appliance for LAN-side Gatekeeper Mode...................................................................................................... 60
Alias Manipulation............................................................................................................................................................................................. 63
Configuring the VBP E-Series Appliance for Embedded Gatekeeper Mode ................................................................................................... 64
Example for prefix routing to simplify dialing using the DST E.164 as a prefix ......................................................................................... 67
Peering Proxy Overview........................................................................................................................................................................................ 69
How Peering Proxy Works................................................................................................................................................................................ 69
Configuring the VBP E-Series Appliance for Peering-Proxy Mode.............................................................................................................. 72
Regular Expressions......................................................................................................................................................................................... 74
Centralized Gatekeeper Configuration............................................................................................................................................................ 76
Centralized Gatekeeper DiagramConfiguring the VBP S and ST-Series Appliance for Provider-side gatekeeper mode...................... 77
Configuring the VBP S and ST-Series Appliance for Provider-side gatekeeper mode.............................................................................. 78
Configuring the VBP E-Series Appliance for WAN-side Gatekeeper Mode ................................................................................................ 80
Access Proxy Summary and Configuration........................................................................................................................................................ 81
Access Proxy Diagram ..................................................................................................................................................................................... 82
NAT routers tested ............................................................................................................................................................................................ 83
Software requirements for Interoperability .................................................................................................................................................... 83
Prerequisites...................................................................................................................................................................................................... 84
Configuration steps for the CMA server ......................................................................................................................................................... 85
CMA Setup for Sites.......................................................................................................................................................................................... 88
Configuring the VBP-ST for Access Proxy..................................................................................................................................................... 90
VBP Series Configuration Guide
5
Configure the VBP-ST VoIP ALG H.323 settings............................................................................................................................................ 91
Configure the VBP-ST Access Proxy protocols............................................................................................................................................. 93
Configuring the VBP-E for Access Proxy ....................................................................................................................................................... 94
Configure the VBP-E VoIP ALG H.323 settings.............................................................................................................................................. 95
Configure the VBP-E Access Proxy protocols............................................................................................................................................... 97
CMA Desktop Configuration for VBP-ST Access Proxy access .................................................................................................................. 98
CMA Desktop Configuration for VBP-E Access Proxy access..................................................................................................................... 99
HDX Configuration for VBP-ST Access Proxy access ................................................................................................................................ 101
HDX Configuration for VBP-E Access Proxy access................................................................................................................................... 103
Troubleshooting Access Proxy.......................................................................................................................................................................... 105
VVX 1500 D Configuration for Premise SIP Voice and H.323 Video ................................................................................................................... 113
Configuring the VBP-ST Headquarters H.323 Video Settings .................................................................................................................... 115
Configuring the VBP-ST Headquarters SIP Voice Settings ........................................................................................................................ 116
Configuring the VBP SoHo-2 H.323 Video Settings..................................................................................................................................... 117
Configuring the VBP SoHo-2 SIP Voice Settings......................................................................................................................................... 118
Configuring the VVX 1500 D for H.323 Video and SIP Voice Services........................................................................................................... 119
Sample SIP Voice and H.323 Video Signaling Flows................................................................................................................................... 127
Sample H.323 Video Call and RTP Flows...................................................................................................................................................... 128
Sample SIP Voice Call and RTP Flows.......................................................................................................................................................... 129
Optional VBP-E at the Headquarters Location ................................................................................................................................................. 130
Configuring the VBP H.323 Video Settings .................................................................................................................................................. 130
Configuring the VBP SIP Voice Settings....................................................................................................................................................... 131
Optional VBP-E at the Headquarters Location - CMA Settings ...................................................................................................................... 133
Sample H.323 Video Inbound Call and RTP Flows ...................................................................................................................................... 136
Sample SIP Voice Inbound Call and RTP Flows .......................................................................................................................................... 137
Troubleshooting the VBP and VVX 1500 D for SIP and H.323 ........................................................................................................................ 138
TLS VoIP Traversal Overview and Configuration ................................................................................................................................................. 143
Why use VBP TLS Traversal? ........................................................................................................................................................................ 143
What is VBP TLS Traversal? .......................................................................................................................................................................... 144
VBP TLS Traversal Prerequisites .................................................................................................................................................................. 147
Diagram ............................................................................................................................................................................................................ 148
VBP-E TLS Traversal B2B Configuration .......................................................................................................................................................... 149
Configuring the VBP-E External TLS Traversal Server ............................................................................................................................... 150
Configure the VBP-E TLS Traversal Server Security parameters .............................................................................................................. 151
Configure the VBP-E TLS Traversal Server Network Parameters.............................................................................................................. 152
Configure the VBP-E TLS VoIP Traversal External Server parameters..................................................................................................... 153
Configure the VBP-E TLS TLS Traversal Static Key Parameter ................................................................................................................. 154
Configure the VBP-E TLS Traversal Routes................................................................................................................................................. 155
Configure the VBP-E TLS Traversal Server with the ALG .......................................................................................................................... 156
Configure the VBP-E TLS Traversal Server ALG H.323 Settings ............................................................................................................... 157
Configuring the VBP-E Internal TLS Traversal Client to VBP-E External TLS Traversal Server ............................................................ 158
Configure the VBP-E Internal TLS Traversal Client Security Parameters................................................................................................. 159
VBP Series Configuration Guide
6
Configure the VBP-E Internal TLS Traversal Client network parameters.................................................................................................. 160
Configure the VBP-E Internal TLS Traversal Client VoIP Traversal parameters ...................................................................................... 161
Configure the VBP-E Internal TLS Traversal Client Static Key parameter................................................................................................ 162
Configure the VBP-E Internal TLS Traversal Client VoIP Traversal Firewall (Optional) .......................................................................... 163
Configuring the CMA Server to use the VBP-E External TLS Traversal Server for B2B Calling ............................................................ 164
VBP-ST TLS Traversal Configuration ................................................................................................................................................................ 167
Configuring the VBP-ST External TLS Traversal Server............................................................................................................................. 168
Configure the VBP-ST External TLS Traversal Server Security Parameters ............................................................................................ 169
Configure the VBP-ST External TLS Traversal Server Network parameters ............................................................................................ 170
Configure the VBP-ST External TLS Traversal Server Security TLS Certificates (Optional) .................................................................. 171
Creating the TLS Traversal CA Certificate.................................................................................................................................................... 174
Creating the TLS Traversal Server Certificate.............................................................................................................................................. 175
Creating the TLS Traversal Client Certificate............................................................................................................................................... 176
Configure the VBP-ST External TLS VoIP Traversal Server Parameters................................................................................................... 177
Configure the VBP-ST External TLS Traversal Server Authentication Parameters ................................................................................. 179
Configure the VBP-ST External TLS Traversal Server Static Key parameter ........................................................................................... 182
Configure the VBP-ST External TLS Traversal Server Routes ................................................................................................................... 183
Configure the VBP-ST External TLS Traversal Server Firewall (Optional)................................................................................................ 184
Viewing the Active VBP-ST External TLS Traversal Server Clients........................................................................................................... 185
Configure the VBP-ST External TLS Traversal Server with the ALG ......................................................................................................... 186
Configure the VBP-ST External TLS Traversal Server ALG H.323 Settings.............................................................................................. 187
Configuring the VBP-E Internal TLS Traversal Client to VBP-ST External TLS Traversal Server .......................................................... 188
Configure the VBP-E Internal TLS Traversal Client Security Parameters................................................................................................. 189
Configure the VBP-E Internal TLS Traversal Client network Parameters ................................................................................................. 190
Configure the VBP-E Internal TLS Traversal Client VoIP Traversal Parameters ...................................................................................... 191
Configure the VBP-E Internal TLS Traversal Client Static Key Parameter................................................................................................ 192
Configure the VBP-E Internal TLS Traversal Client VoIP Traversal Firewall (Optional) .......................................................................... 193
VBP-E Remote TLS Traversal Configuration .................................................................................................................................................... 194
Configuring the VBP-E Remote TLS Traversal Client to VBP-ST External TLS Traversal Server .......................................................... 195
Configure the VBP-E Remote TLS Traversal Client Security Parameters................................................................................................. 196
Configure the VBP-E Remote TLS Traversal Client Network Parameters................................................................................................. 197
Installing the VBP-E Remote TLS Traversal Client Certificates ................................................................................................................. 198
Configure the VBP-E Remote TLS Traversal Client VoIP Traversal Parameters...................................................................................... 200
Troubleshooting VoIP Traversal............................................................................................................................................................................. 202
TLS Traversal Virtual Interface Diagram....................................................................................................................................................... 203
User and Session Management.............................................................................................................................................................................. 211
User Management............................................................................................................................................................................................ 212
System Audit ............................................................................................................................................................................................................ 217
Stateful Failover ....................................................................................................................................................................................................... 219
Traffic Shaper Configuration .................................................................................................................................................................................. 221
Configuring the Traffic Shaper ...................................................................................................................................................................... 221
Diagnostics and Troubleshooting.......................................................................................................................................................................... 223
VBP Series Configuration Guide
7
Viewing Version, Hardware Platform and LAN MAC Address.................................................................................................................... 223
Viewing the ALG Registration Code.............................................................................................................................................................. 223
Entering the Registration Code ..................................................................................................................................................................... 223
Viewing Networking Information ................................................................................................................................................................... 224
Link Status ....................................................................................................................................................................................................... 224
Interface Information....................................................................................................................................................................................... 224
Using Troubleshooting Tools............................................................................................................................................................................. 225
Ping and Traceroute Tests ............................................................................................................................................................................. 225
Networking Restart.......................................................................................................................................................................................... 226
Rebooting the System .................................................................................................................................................................................... 226
Reboot the system .......................................................................................................................................................................................... 226
Using T1 Diagnostics .......................................................................................................................................................................................... 227
Perform T1 diagnostics .................................................................................................................................................................................. 227
View T1 Statistics ............................................................................................................................................................................................ 227
View advanced T1 diagnostics ...................................................................................................................................................................... 227
Device Configuration Management........................................................................................................................................................................ 228
Overview ............................................................................................................................................................................................................... 228
Using the configuration backup command .................................................................................................................................................. 229
Creating a backup file and save to local flash ............................................................................................................................................. 229
Copy a backup file to a remote TFTP server ................................................................................................................................................ 229
Download a backup file from a remote TFTP server ................................................................................................................................... 229
List available backup files .............................................................................................................................................................................. 230
Delete a backup file......................................................................................................................................................................................... 230
Loading a backup file to become the running configuration ..................................................................................................................... 230
Regulatory Notices .................................................................................................................................................................................................. 231
END-USER LICENSE AGREEMENT FOR POLYCOM® SOFTWARE ................................................................................................................... 232
Appendix A Compliance and Compatibility for the VBP 200EW Converged Network Appliance ................................................................... 239
WIRELESS ............................................................................................................................................................................................................ 239
Appendix B Compliance and Compatibility for the VBP 200E Converged Network Appliance....................................................................... 240
USA AND CANADIAN NOTICES ......................................................................................................................................................................... 240
Part 15 FCC Rules - Class A Digital Device or Peripheral........................................................................................................................... 240
Industry Canada (IC) ....................................................................................................................................................................................... 241
EEA Regulatory Notices...................................................................................................................................................................................... 241
CE Mark R & TTE Directive............................................................................................................................................................................. 241
Appendix C Compliance and Compatibility for the VBP 4350 Converged Network Appliance ....................................................................... 242
USA AND CANADIAN NOTICES ......................................................................................................................................................................... 242
Part 15 FCC Rules - Class A Digital Device or Peripheral........................................................................................................................... 242
Part 68 FCC Rules ........................................................................................................................................................................................... 243
Industry Canada (IC) ....................................................................................................................................................................................... 244
EEA Regulatory Notices...................................................................................................................................................................................... 245
CE Mark R & TTE Directive............................................................................................................................................................................. 245
Declaration of Conformity: ............................................................................................................................................................................. 245
VBP Series Configuration Guide
8
CLASS A STATEMENTS...................................................................................................................................................................................... 248
Japan ................................................................................................................................................................................................................ 248
Korea ................................................................................................................................................................................................................ 248
Appendix D Compliance and Compatibility for the VBP 4350W Converged Network Appliance.................................................................... 249
WIRELESS ............................................................................................................................................................................................................ 249
INDUSTRY CANADA (IC) NOTICE ...................................................................................................................................................................... 249
Appendix E Compliance and Compatibility for the VBP 4555 Converged Network Appliance ....................................................................... 250
USA AND CANADIAN NOTICES ......................................................................................................................................................................... 250
Part 15 FCC Rules - Class A Digital Device or Peripheral........................................................................................................................... 250
Part 68 FCC Rules ........................................................................................................................................................................................... 250
Industry Canada (IC) ....................................................................................................................................................................................... 252
EEA Regulatory Notices...................................................................................................................................................................................... 253
CE Mark R & TTE Directive............................................................................................................................................................................. 253
Declaration of Conformity: ............................................................................................................................................................................. 253
CLASS A STATEMENTS...................................................................................................................................................................................... 256
Japan ................................................................................................................................................................................................................ 256
Korea ................................................................................................................................................................................................................ 256
Appendix F Compliance and Compatibility for the VBP 5300-E or ST Converged Network Appliance.......................................................... 257
Part 15 FCC Rules - Class A Digital Device or Peripheral........................................................................................................................... 257
Industry Canada (IC) ....................................................................................................................................................................................... 257
CE Mark R & TTE Directive............................................................................................................................................................................. 258
CLASS A STATEMENTS...................................................................................................................................................................................... 259
Japan ................................................................................................................................................................................................................ 259
Korea ................................................................................................................................................................................................................ 259
China................................................................................................................................................................................................................. 259
Appendix G Compliance and Compatibility for the VBP 5300LF-E or ST Converged Network Appliance .................................................... 260
Part 15 FCC Rules - Class A Digital Device or Peripheral........................................................................................................................... 260
Industry Canada (IC) ....................................................................................................................................................................................... 260
CE Mark R & TTE Directive............................................................................................................................................................................. 261
CLASS A STATEMENTS...................................................................................................................................................................................... 262
Japan ................................................................................................................................................................................................................ 262
Korea ................................................................................................................................................................................................................ 262
China................................................................................................................................................................................................................. 262
Appendix H Compliance and Compatibility for the VBP 5300LF2 Converged Network Appliance................................................................. 263
USA AND CANADIAN NOTICES ......................................................................................................................................................................... 263
FCC Notice ....................................................................................................................................................................................................... 263
Part 15 FCC Rules - Class A Digital Device or Peripheral........................................................................................................................... 263
Industry Canada (IC) ....................................................................................................................................................................................... 264
EEA Regulatory Notices...................................................................................................................................................................................... 265
CE Mark R & TTE Directive............................................................................................................................................................................. 265
Declaration of Conformity: ............................................................................................................................................................................. 265
CLASS A STATEMENTS...................................................................................................................................................................................... 268
VBP Series Configuration Guide
9
Japan ................................................................................................................................................................................................................ 268
Korea ................................................................................................................................................................................................................ 268
China................................................................................................................................................................................................................. 268
Appendix I Compliance and Compatibility for the VBP 6400-E or ST Converged Network Appliance........................................................... 269
Part 15 FCC Rules - Class A Digital Device or Peripheral........................................................................................................................... 269
Industry Canada (IC) ....................................................................................................................................................................................... 269
CE Mark R & TTE Directive............................................................................................................................................................................. 270
CLASS A STATEMENTS...................................................................................................................................................................................... 270
Japan ................................................................................................................................................................................................................ 270
Korea ................................................................................................................................................................................................................ 271
China................................................................................................................................................................................................................. 271
Taiwan .............................................................................................................................................................................................................. 271
General Information ................................................................................................................................................................................................. 272
Hardware Warranty.............................................................................................................................................................................................. 272
Restriction of Hazardous Substances Directive (RoHS) ................................................................................................................................. 272
End of Life Products............................................................................................................................................................................................ 272
VBP Series Configuration Guide
10
Feature Summary
The Video Border Proxy (VBP) Series features intelligent, all-in-one networking solutions for enterprises and service providers. These solutions
reduce costs by simplifying the deployment, management, and security of converged voice, video, and data networks. The following table lists the
important functions provided by each model of the VBP Series:
Function 200 EW
4300, 4350, 4350EW,
4555
5300-E 5300-S & ST 6400-E 6400-S & ST
Resolves NAT/firewall traversal
problems by providing an
application layer gateway (ALG)
that supports voice and H.323
protocols
X X X X X X
Protects the enterprise LAN
using a stateful packet
inspection (SPI) firewall for both
H.323 and data traffic
X X X X
Protects the enterprise LAN
using a stateful packet
inspection (SPI) firewall for
H.323 traffic
X X
Application-aware firewall
dynamically provisions and
closes UDP ports used for
H.323 calls
X X X X X X
Provides NAT and PAT for data
that hides enterprise LAN
topology
X X X X
Provides NAT and PAT for
H323 that hides enterprise LAN
topology
X X X X X X
Provides integrated tools to
facilitate problem isolation
X X X X X X
Uses a simple web-based GUI
for configuration
X X X X X X
Site-to-site networking using
IPSec: 3DES, SHA-1
X X
Performs static IP routing
X X X X X X
VBP Series Configuration Guide
11
Supports logging to external
syslog servers
X X X X X X
Function 200 EW
4300, 4350, 4350EW,
4555
5300-E 5300-S & ST 6400-E 6400-S & ST
Provides a DHCP server for
enterprise PCs and video
devices
X X X X
Supports Access Proxy –
requires H.460 traversal “ST” -
S systems will need to be
upgraded
X X
Provides H.460-based traversal
support (1)
X X
Supports up to 1 Mbps of H.323
traffic - or up to 35 Mbps data
traffic
X
Supports up to 3 Mbps of H.323
traffic - or up to line rate for data
traffic
X
Supports up to 10 Mbps of
H.323 traffic - or up to line rate
for data traffic
X
Supports up to 25 Mbps of
H.323 traffic - or up to line rate
for data traffic
X
Supports up to 25 Mbps of
H.323 traffic (2)
X
Supports up to 85 Mbps of
H.323 traffic - or up to line rate
for data traffic
X
Supports up to 200 Mbps of
H.323 traffic (2)
X
Supports up to 85 Mbps of
H.323 traffic (2)
X
Supports up to 200 Mbps of
H.323 traffic (2)
X
Supports VoIP Traversal TLS
External server functionality
X X X X
Supports VoIP Traversal TLS
X X X X
VBP Series Configuration Guide
12
Internal client functionality
Supports VoIP Traversal TLS
Remote client functionality
X X X X X X
Supports T1 and Ethernet WAN
types
X
Supports Ethernet WAN types
X X X X X X
Supports WAN protocols,
DHCP, ADSL-PPPoE, Static IP
X X
Supports WAN protocols,
DHCP, Static IP
X X X X
Supports up to 16 VLAN’s
X X X X
(1) ST models only
(2) ST models do not support data NAT related features
VBP Series Configuration Guide
13
System Configuration
You can configure the Video Border Proxy (VBP) series appliance to support a wide range of network services and you can enable or disable
specific services based on the requirements of your network.
This chapter explains how to configure the VBP series appliance to function in your IP network. You will configure the Ethernet interfaces, network
addresses, DNS settings, default gateway, SNMP settings, DHCP services, firewall settings, and change the administrative password.
VBP Series Configuration Guide
14
Configuring VBP-E Network Settings
Note: Ask your ISP to assign an IP address for the VBP series appliance, an IP address for the gateway, and a
preferred and secondary IP address for the DNS server.
Configure WAN settings
1. Choose Network from the Configuration Menu.
2. Select an Internet connection method.
3. When you select a connection method, the page displays the appropriate settings in the WAN Interface Settings area.
a. ADSL-PPPoE—Enter the user name and password assigned by the network provider, and indicate whether to monitor the
connection using keepalive ping messages.
b. DHCP—No additional configuration required.
c. Static IP Address—Enter the IP address and subnet mask.
d. T1—Enter the IP address and subnet mask. Click the underlined T1 link to open the T1 Configuration page and set additional T1
parameters.
4. Click Submit.
A message indicates that service will be temporarily interrupted.
5. Click OK to confirm.
Configure WAN ADSL-PPPoE
ADSL-PPPoE (1)
Select to display these options. When selected, the
WAN Ethernet port will perform a PPP negotiation to
obtain an IP address. This IP will be assigned to the
ppp0 interface viewable in the “Network Information
page”. A link to this page is provided. The default
gateway and DNS servers are also sent to the system
in the DHCP reply.
User Name (2)
Enter the user name your ISP has assigned to your
DSL account.
Password (3)
Enter the password for your user name your ISP has
assigned to your DSL account
VBP Series Configuration Guide
15
Keepalive Ping (4)
Selected by default to send an LCP-echo request, this is called a link control protocol “ping” and is not to be confused with
an ICMP-based ping. The PPP LCP “ping” interval is every 60 seconds; if three requests are not responded to (180
seconds) the system will re-establish the PPP connection. When this happens you may receive a different IP address. For
this reason you should setup a “Dynamic DNS” account, which allows remote locations to enter a DNS name to dial your
location. (see the Dynamic DNS page under “System”) see RFC 1661 for PPP related information.
Primary DNS Server (5)
Entering static DNS information for a dynamic WAN type will override what is received during PPP negotiation
Secondary DNS Server (6)
Entering static DNS information for a dynamic WAN type will override what is received during PPP negotiation
Configure WAN DHCP
DHCP (1)
Select to choose this option. When selected the WAN Ethernet port will perform a DHCP negotiation to obtain and IP
address, this IP will be assigned to the eth1 interface viewable in the “Network Information page” a link to this page is
provided. The default gateway and DNS servers are also sent to the system in the DHCP reply.
Primary DNS Server (2)
Entering static DNS information for a dynamic WAN type will override what is received during DHCP negotiation
Secondary DNS Server (3)
Entering static DNS information for a dynamic WAN
type will override what is received during DHCP
negotiation
VBP Series Configuration Guide
16
Configure WAN Static IP Address
Static IP Address (1)
Select to display these options
IP Address (2)
Enter IPv4 IP address
Subnet Mask (3)
Enter subnet mask as appropriate, default gateway
must be in this subnet
Default Gateway (4)
Enter IP address of the upstream (WAN) router
Primary DNS Server (5)
Enter primary DNS server IP
Secondary DNS Server (6)
Enter Secondary DNS server IP
Note: The VBP WAN interface must be assigned a publicly routable IP address. Assigning a RFC1918
address to the WAN interface is not supported
VBP Series Configuration Guide
17
Configuring VBP-ST Network Settings
Configure Subscriber and Provider settings
1. Choose Network from the Configuration Menu.
2. Configure all parameters indicated, double check that you have the correct IP’s for the interfaces as defined
3. Click Submit.
A message indicates that service will be temporarily interrupted.
4. Click OK to confirm.
Subscriber Interface Settings
IP Address (1)
Enter the IPv4 IP address, while this interface is call “Subscriber”
its commonly placed on the Internet or WAN side of the network.
The default IP address is 192.168.1.1 while this IP is associated
to the LAN, it is used by default on the Subscriber interface. The
reason for this is for configuring the system for the first time for
documentation procedures of attaching your PC to “port 1” to
reach 192.168.1.1, when you reconfigure the Public IP on the
Subscriber interface, and the firewall is enabled, you will place
this interface on the public network
Subnet Mask (2)
Enter subnet mask as appropriate, default gateway must be in
this subnet
Default Gateway (6)
Enter IP address of the upstream (WAN) router
Primary DNS Server (7)
Enter primary DNS server IP
Secondary DNS Server (8)
Enter Secondary DNS server IP
VBP Series Configuration Guide
18
Provider Interface Settings
Static IP Address (3)
Select to display these options, while DHCP is an option on
the Provider interface, it is not commonly used due to the
nature of H.323, and the dependencies that other H.323
network equipment have on the Provider or LAN network.
There are typically multiple devices that require entering this
IP statically as part of installing and configuring these other
H.323 devices, e.g. gatekeeper, MCU, other routers that
provide route entries to the VBP-ST. It is highly recommended
that you do not use DHCP on the Provider interface.
IP Address (4)
Enter IPv4 IP address, while this interface is called “Provider”
In most deployments this interface will be placed in the private
or LAN side of the network
Subnet Mask (5)
Enter subnet mask as appropriate, when creating “Route”
entries the gateways for the route entry must be within this
subnet.
VBP Series Configuration Guide
19
Configuring LAN Settings
This section describes how to set up LAN parameters with and without VLANs. The VLAN configuration feature allows you to connect the
appliance to an Ethernet switch that has been configured to use VLANs. VBP-S and ST platforms do not support VLAN’s
Note: The VBP appliance is shipped with LAN IP address 192.168.1.1 and subnet mask 255.255.255.0
Configure LAN network settings without VLANs
1. Choose Network from the Configuration Menu.
2. The LAN Interface Settings area of the Network page shows the LAN IP address (192.168.1.1) and subnet mask (255.255.255.0).
3. Clear the Enable VLANs checkbox.
4. Click Submit.
A message indicates that service will be interrupted while the new interface is added.
5. Click OK to confirm.
Configure LAN network settings with VLANs
1. Choose Network from the Configuration Menu.
2. Select Enable VLANs.
3. Click Submit.
A message indicates that service will be interrupted while the new interface is added.
4. Click OK to confirm.
5. Click VLAN Settings to open the VLAN page.
6. Configure settings as appropriate for your VBP model.
Configuring VLANs
The VBP series appliance supports tagged and untagged VLANs. As specified in the IEEE 802.1q standard, tagged VLANs incorporate the VLAN
ID and priority in the packet header. Untagged VLAN packets do not include the VLAN ID or priority.
Most VBP series appliances (200EW, 4300T, 4350, 4350EW and the 5300/6400 series) provide support for multiple tagged VLANs. The 5300-E
and 6400-E series each support a single untagged VLAN; while the 200EW, 4300T, 4350, 4350EW support up to four untagged VLANs. VBP-S
and ST platforms do not support VLAN’s
All VBP-E series appliances support up to 16 VLANS.
VBP Series Configuration Guide
20
Set up VLANs on the 4350
1. Choose System > VLAN Configuration from the Configuration Menu.
2. Choose 802.1 or 802.1q from the LAN Port Membership pull-down list. Click Modify. If 802.1 is selected, radio buttons are presented to
permit selection of a single VLAN. If 802.1q is selected, checkboxes are presented to permit selection of multiple tagged VLANs.
3. To add and configure a new VLAN, enter the new VLAN ID, IP address, and network mask. Click Add. A new VLAN entry is added to the
VLAN configuration. The mode of the physical port determines the rules for VLAN assignment:
a. 802.1 mode: Assign the port to a single VLAN.
b. 802.1q mode: Assign the port to multiple VLANs
4. Repeat steps 3 for each VLAN you wish to create.
Set up VLANs on the 5300-E and 6400-E series
1. Choose System > VLAN Configuration.
2. The screen displays the IP address and subnet mask of the default untagged VLAN. The LAN Ethernet port on the 5300 and 6400 can
have both a single untagged and multiple tagged VLANs. Each new VLAN that you add will be tagged only, the untagged VLAN is
represented as “eth0”, if changes to this VLAN are necessary go to the “Network” page and modify the “LAN Interface Settings”.
3. To add a tagged VLAN, enter the VLAN ID, IP address, and network mask, and click Submit.
A message indicates that service will be interrupted while the new interface is added.
4. Click OK to confirm.
5. Repeat steps 3 for each VLAN you want to create.
Delete a VLAN
1. Choose System > VLAN Configuration from the Configuration Menu.
2. Click the “trash can” icon to the right of the VLAN entry. It is not necessary to click Submit after deleting a VLAN.
Configuring Ethernet Interface Link Settings
You can modify the Ethernet interface link settings for the appliance, since “Auto-negotiate” interoperability can be problematic for real time
protocols, it is recommended to statically configure both VBP Ethernet ports and the switch ports the VBP’s interfaces are connected to.
Depending on the WAN link it may be necessary to adjust the WAN MTU size, this issue is typically seen on connections under T1 rates or, DSL
links and that depends on the DSL devices ability to set the MTU or MSS size.
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29
  • Page 30 30
  • Page 31 31
  • Page 32 32
  • Page 33 33
  • Page 34 34
  • Page 35 35
  • Page 36 36
  • Page 37 37
  • Page 38 38
  • Page 39 39
  • Page 40 40
  • Page 41 41
  • Page 42 42
  • Page 43 43
  • Page 44 44
  • Page 45 45
  • Page 46 46
  • Page 47 47
  • Page 48 48
  • Page 49 49
  • Page 50 50
  • Page 51 51
  • Page 52 52
  • Page 53 53
  • Page 54 54
  • Page 55 55
  • Page 56 56
  • Page 57 57
  • Page 58 58
  • Page 59 59
  • Page 60 60
  • Page 61 61
  • Page 62 62
  • Page 63 63
  • Page 64 64
  • Page 65 65
  • Page 66 66
  • Page 67 67
  • Page 68 68
  • Page 69 69
  • Page 70 70
  • Page 71 71
  • Page 72 72
  • Page 73 73
  • Page 74 74
  • Page 75 75
  • Page 76 76
  • Page 77 77
  • Page 78 78
  • Page 79 79
  • Page 80 80
  • Page 81 81
  • Page 82 82
  • Page 83 83
  • Page 84 84
  • Page 85 85
  • Page 86 86
  • Page 87 87
  • Page 88 88
  • Page 89 89
  • Page 90 90
  • Page 91 91
  • Page 92 92
  • Page 93 93
  • Page 94 94
  • Page 95 95
  • Page 96 96
  • Page 97 97
  • Page 98 98
  • Page 99 99
  • Page 100 100
  • Page 101 101
  • Page 102 102
  • Page 103 103
  • Page 104 104
  • Page 105 105
  • Page 106 106
  • Page 107 107
  • Page 108 108
  • Page 109 109
  • Page 110 110
  • Page 111 111
  • Page 112 112
  • Page 113 113
  • Page 114 114
  • Page 115 115
  • Page 116 116
  • Page 117 117
  • Page 118 118
  • Page 119 119
  • Page 120 120
  • Page 121 121
  • Page 122 122
  • Page 123 123
  • Page 124 124
  • Page 125 125
  • Page 126 126
  • Page 127 127
  • Page 128 128
  • Page 129 129
  • Page 130 130
  • Page 131 131
  • Page 132 132
  • Page 133 133
  • Page 134 134
  • Page 135 135
  • Page 136 136
  • Page 137 137
  • Page 138 138
  • Page 139 139
  • Page 140 140
  • Page 141 141
  • Page 142 142
  • Page 143 143
  • Page 144 144
  • Page 145 145
  • Page 146 146
  • Page 147 147
  • Page 148 148
  • Page 149 149
  • Page 150 150
  • Page 151 151
  • Page 152 152
  • Page 153 153
  • Page 154 154
  • Page 155 155
  • Page 156 156
  • Page 157 157
  • Page 158 158
  • Page 159 159
  • Page 160 160
  • Page 161 161
  • Page 162 162
  • Page 163 163
  • Page 164 164
  • Page 165 165
  • Page 166 166
  • Page 167 167
  • Page 168 168
  • Page 169 169
  • Page 170 170
  • Page 171 171
  • Page 172 172
  • Page 173 173
  • Page 174 174
  • Page 175 175
  • Page 176 176
  • Page 177 177
  • Page 178 178
  • Page 179 179
  • Page 180 180
  • Page 181 181
  • Page 182 182
  • Page 183 183
  • Page 184 184
  • Page 185 185
  • Page 186 186
  • Page 187 187
  • Page 188 188
  • Page 189 189
  • Page 190 190
  • Page 191 191
  • Page 192 192
  • Page 193 193
  • Page 194 194
  • Page 195 195
  • Page 196 196
  • Page 197 197
  • Page 198 198
  • Page 199 199
  • Page 200 200
  • Page 201 201
  • Page 202 202
  • Page 203 203
  • Page 204 204
  • Page 205 205
  • Page 206 206
  • Page 207 207
  • Page 208 208
  • Page 209 209
  • Page 210 210
  • Page 211 211
  • Page 212 212
  • Page 213 213
  • Page 214 214
  • Page 215 215
  • Page 216 216
  • Page 217 217
  • Page 218 218
  • Page 219 219
  • Page 220 220
  • Page 221 221
  • Page 222 222
  • Page 223 223
  • Page 224 224
  • Page 225 225
  • Page 226 226
  • Page 227 227
  • Page 228 228
  • Page 229 229
  • Page 230 230
  • Page 231 231
  • Page 232 232
  • Page 233 233
  • Page 234 234
  • Page 235 235
  • Page 236 236
  • Page 237 237
  • Page 238 238
  • Page 239 239
  • Page 240 240
  • Page 241 241
  • Page 242 242
  • Page 243 243
  • Page 244 244
  • Page 245 245
  • Page 246 246
  • Page 247 247
  • Page 248 248
  • Page 249 249
  • Page 250 250
  • Page 251 251
  • Page 252 252
  • Page 253 253
  • Page 254 254
  • Page 255 255
  • Page 256 256
  • Page 257 257
  • Page 258 258
  • Page 259 259
  • Page 260 260
  • Page 261 261
  • Page 262 262
  • Page 263 263
  • Page 264 264
  • Page 265 265
  • Page 266 266
  • Page 267 267
  • Page 268 268
  • Page 269 269
  • Page 270 270
  • Page 271 271
  • Page 272 272

Poly VBP 4555 Series Configuration Guide

Category
Networking
Type
Configuration Guide

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI