User manual

144
D14049.03
MAY 2008
Grey Headline (continued)
TANDBERG VIDEO COMMUNICATIONS SERVER
ADMINISTRATOR GUIDE
Introduction Getting Started
Overview and
Status
System
Conguration
VCS
Conguration
Zones and
Neighbors
Call
Processing
Bandwidth
Control
Firewall
Traversal
Maintenance Appendices
Bandwidth Control Examples
Example With a Firewall
If we modify the previous example deployment to include
rewalls between the ofces, we can use TANDBERG’s
Expressway™ rewall traversal solution to maintain connectivity.
We do this by adding a VCS Expressway outside the rewall on
the public internet, which will work in conjunction with the VCS
Control and Home and Branch ofce endpoints to traverse the
rewalls.
In this example, the endpoints in the Head Ofce register with
the VCS Control, whilst those in the Branch and Home ofces
register with the VCS Expressway.
The introduction of the rewalls means that there is no longer
any direct connectivity between the Branch and Home ofces.
All trafc must be routed through the VCS Expressway. This is
shown by the absence of a link between the Home and Branch
subzones.
VCS Expressway Subzone Conguration
The VCS Expressway has subzones congured for the Home
Ofce and Branch Ofce. These are linked to the VCS
Expressway’s Traversal Subzone, with pipes placed on each link.
All calls from the VCS Expressway to the VCS Control must go
through the Traversal Subzone and will consume bandwidth from
this Subzone. Note also that calls from the Home Ofce to the
Branch Ofce must also go through the Traversal Subzone, and
will also consume bandwidth from this Subzone as well as the
Home and Branch subzones and Home Ofce, Branch ofce and
Head Ofce pipes.
In this example we have assumed that there is no bottleneck
on the link between the VCS Expressway and the Head Ofce
network, so have not placed a pipe on this link. If you want to
limit the amount of trafc owing through your rewall, you could
provision a pipe on this link.
VCS Control Subzone Conguration
Because the VCS Control is only managing endpoints on the
Head Ofce LAN, its conguration is simpler. All of the endpoints
in the Head Ofce are assigned to the Default Subzone. This is
linked to the Traversal Subzone, through which all calls leaving
the Head Ofce must pass.
HOME OFFICE
BRANCH OFFICE
Branch Office
Subzone
Traversal
Subzone
Traversal
Subzone
Traversal
Client
Zone
Traversal
Server
Zone
Pipe A
Pipe B
Home Office
Subzone
INTERNET
VCS EXPRESSWAY
VCS CONTROL
Pipe C
HEAD OFFICE
Default
Subzone