3g gateway [gw-p25/m sp] - dekom · an ims-ready sip stack, supporting the up-to-date ietf and 3gpp...

3G Gateway [gw-P25/M SP]Version 3.1�

User Guide

NOTICE

© 2007 RADVISION Ltd. All intellectual property rights in this publication are owned by RADVISION Ltd. and are protected by United States copyright laws, other applicable copyright laws and international treaty provisions. RADVISION Ltd. retains all rights not expressly granted. This publication is RADVISION confidential. No part of this publication may be reproduced in any form whatsoever or used to make any derivative work without prior written approval by RADVISION Ltd. No representation of warranties for fitness for any purpose other than what is specifically mentioned in this guide is made either by RADVISION Ltd. or its agents. RADVISION Ltd. reserves the right to revise this publication and make changes without obligation to notify any person of such revisions or changes. RADVISION Ltd. may make improvements or changes in the product(s) and/or the program(s) described in this documentation at any time. If there is any software on removable media described in this publication, it is furnished under a license agreement included with the product as a separate document. If you are unable to locate a copy, please contact RADVISION Ltd. and a copy will be provided to you. Unless otherwise indicated, RADVISION registered trademarks are registered in the United States and other territories. All registered trademarks recognized.GoAhead WebServer is used by permission from GoAhead Software, Inc. GoAhead WebServer is used by permission from GoAhead Software, Inc. Copyright © 2006 GoAhead Software, Inc. All Rights Reserved.For further information contact RADVISION or your local distributor or reseller.

Gateway [gw-P25/M SP] version 3.1, September 2007Publication 7http://www.radvision.com

www.radvision.comwww.radvision.com

Contents iii

Related Documentation viiConventions Used in this Manual viiFeedback vii

1 Gateway FunctionalityThe 3G Gateway Features 2The 3G Gateway Feature Specifications 6The 3G Gateway Applications and Topologies 8

Streaming 8Video Mail 8Point-to-Point Conferencing 9Multipoint Conferencing 9

The 3G Gateway and Network Connections 11IP Network Connections 11Circuit-Switched Network Connections 11

About Gatekeeper Supported Features 14Redundancy 15

About Gateway Security Support 15About Access Control List (ACL) 15ACL Traps 15About Secure Communications (HTTPS) 16About Virtual Local Area Networks (VLANs) 17

SIP Heart-beat Mechanism 19Overview of the SIP Heart-beat Mechanism 19SIP Server to Video Gateway 20Video Gateway to SIP Server 21SIP Server Down 21SIP Server Recovered 22

CONTENTS

iv Gateway [gw-P25/M SP] User Guide

Configuration 22

2 Installing the 3G GatewayWhat’s in this Chapter 23Physical Description 24

Physical Description of the 3G Gateway 24Physical Description of the MVP/M II SP Module 26

Preparing for Installation 28On the SCOPIA 400 Platform 28SCOPIA 1000 Platform Requirements 29

Verifying the Package Contents 31Mounting the SCOPIA 400 Chassis in a 19-inch Rack 32Mounting the SCOPIA 1000 Chassis in a 19-inch Rack 33Installing the 3G Gateway and MVP/M II SP Module 35

Installing the 3G Gateway 35Installing the MVP/M II SP Module 39Connecting Gateway to a Power Source 40

Removing the 3G Gateway and MVP/M II SP Module 41Removing the 3G Gateway 41Removing the MVP/M II SP Module 43

Initial Gateway Configuration 44Setting the IP Address 44Connecting to the IP Network 47Connecting to the ISDN Network 47Changing the Configuration Tool Login Password 47Configuring the Gateway 48

Initial Configuration of the MVP/M II SP Module 52Accessing of Main Menu the MVP/M II SP Module 53Setting the IP Address 53Changing the Configuration Software Password 54Changing the Security Level 55Registering MVP/M II SP Module to Controlling Gateway 56Enabling or Disabling RS232 Console 56Enabling or Disabling Strong Password Configuration 57Changing Advanced Configuration Settings 57

Contents v

Saving Network Configuration Settings 59Connecting the MVP/M II SP Module to the LAN 59

Registering the Online Help 60Netscape Navigator Users 60Upgrading Gateway Software 61

3 Configuring and Monitoring the 3G GatewayAbout the Gateway Administrator Interface 63

System 64Board 64Gateway 64

Performing Basic Configuration 66Configuring Gateway Address Settings 67Configuring Gateway Security Settings 71Configuring Web Settings 73Defining Users Accounts 80Configuring IP Network Settings 82Configuring Circuit Network Settings 90Configuring Date, Time, and NTP Settings 96Configuring SCOPIA 400 Chassis Parameters 97

Monitoring Gateway 98Viewing LED Information 98Viewing General Information About the Gateway 98Viewing Software Version Details 100Viewing Address Settings 100Viewing the Status Tab 102Viewing Call Information 104Viewing Gateway Alarm Events 110Viewing Media Processors Information 111Viewing Gateway Statistics 112

Viewing SCOPIA 400 Chassis Status 113Configuring Gateway Services 115

Viewing Existing Services 115Adding or Editing Services 116Deleting Services 123

Performing Gateway Advanced Configuration 124Configuring Dialing Options for IP-to-Mobile Services 124

vi Gateway [gw-P25/M SP] User Guide

Configuring Dialing Options for Mobile-to-IP Services 126Configuring Gateway Settings 127Using Advanced Command Interface 146Configuring Advanced H.323 Settings 151Configuring Advanced SIP Proxy Settings 153Configuring Advanced ISUP Settings 154

About Gateway Maintenance Mode 155Entering or Exiting the Maintenance Mode 156

Saving Configuration Settings 156Importing Configuration Files 157

4 Using the 3G GatewayDialing Between IP and 3G CS Cellular Networks 159

Dialing Out to the 3G CS Cellular Network Throughthe Gateway 160

Dialing into the IP Network through the Gateway 161Intranetwork Dialing 162

Dialing Point-to-Point on the IP Network 162

5 TroubleshootingAccessing Telnet 165Connection Problems 166LED Problems 169Incoming Call Failure 170Outgoing Call Failure 171

About This Manual vii

ABOUT THIS MANUAL

The Gateway [gw-P25/M SP] User Guide describes how to install, configure and monitor the RADVISION 3G Gateway.

RELATED DOCUMENTATION

The 3G Gateway documentation set is available on the RADVISION Utilities and Documentation CD and includes manuals and online helps. The manuals are available in PDF format.

Note You require Adobe Acrobat Reader version 4.0 or later to open the PDF files. You can download Acrobat Reader free of charge from www.adobe.com.

Note For hardware-specific information relating to the Gateway, see the appropriate Platform Guide for the platform on which your Gateway is operating.

CONVENTIONS USED IN THIS MANUAL

The RADVISION 3G Gateway is sometimes referred to as “the Gateway” throughout this manual.

FEEDBACK The team at RADVISION constantly endeavors to provide accurate and informative documentation. If you have comments or suggestions regarding improvements to future publications, we would value your feedback.Please send your comments to [email protected] thank you for your contribution.

mailto:[email protected]?subject=Query: SCOPIA Gateway [gw-P25/M SP] v3.1

Gateway Functionality 1

1GATEWAY FUNCTIONALITY

This section introduces the RADVISION 3G Gateway and includes the following topics:

The 3G Gateway Features on page 2The 3G Gateway Feature Specifications on page 6The 3G Gateway Applications and Topologies on page 8The 3G Gateway and Network Connections on page 11About Gatekeeper Supported Features on page 14About Gateway Security Support on page 15SIP Heart-beat Mechanism on page 19

2 Gateway [gw-P25/M SP] User Guide

The 3G Gateway Features

THE 3G GATEWAY FEATURES

Table 1-1 lists the major features of the RADVISION 3G Gateway.

Table 1-1 Gateway Feature Summary

Feature Description

Advanced media processing capabilities

The Gateway with the optional MVP/M II SP blade provides enhanced “any-to-any” transcoding, transrating and transcoding of video, supporting the following video codecs: H.264, H.263, and MPEG4 and providing interoperability between mobile handsets and video devices and applications residing on an IP network.

Multiple application profiling The Gateway enables the profiling of different attributes for each application. Features such as lip synchronization, transcoding usage and specific video or audio codec usage can be configured according to the service needs.

Advanced SIP IMS Support The Gateway enables SIP/IMS migration by introducing an IMS-ready SIP stack, supporting the up-to-date IETF and 3GPP RFCs implementations, including carrier grade SIP high availability and SIP Server keep-alive mechanisms, custom ISUP field mapping with NSS/Q.1980.1. The Gateway also supports sending INVITE messages with SDP, as well as receiving INVITE messages with no SDP.

Lip Synchronization The Gateway is not responsible for lip synchronization, which normally is the responsibility of the remote side. However, the Gateway initiates H.245 skew indication messages, including a calculated lip synchronization value which represents the delta between the audio and video streams. H.323 endpoints must support RTCP to perform lip synchronization calculations. In case the remote side does not support lip synchronization, the Gateway can be configured to perform lip synchronization per Gateway service.



DTMF Signaling The Gateway supports translation between the following signalling: in-band Dual Tone Multi-Frequency (DTMF) signals and out-of-band H.245 messages (on the ISDN side) to:

out-of-band H.245 messages (on the H.323 side)in-band DTMF (RFC2833) or INFO signals (on the SIP side)

DTMF translation occurs for voice and video calls.

Broad SIP, H.323, RTSP, and H.320 connectivity

The Gateway provides enhanced video services for 3G cellular networks by enabling 3G-324M endpoints to connect to any network: SIP/IMS, SIP, H.323, RTSP and H.320 for streaming, video mail, point-to-point and multi-party conferencing, and video telephony. RTSP streaming is performed via the RADVISION Multimedia Streaming Proxy (MSP SP). The MSP SP is an optional add-on module to the Gateway. For more information, see the RADVISION Multimedia Streaming Proxy User Guide on the utilities CD. The H.320 connectivity is performed via the RADVISION P20 Gateway. The P20 Gateway is an optional add-on module to the gateway. For more information, refer to P20 Gateway documentation.

High interoperability Because the 3G Gateway system is based on RADVISION protocol stacks, it is fully compliant with the 3GPP, 3G-324M, H.323 and SIP/RTSP standards. The Gateway provides a high degree of interoperability with other H.323 compliant Gateways, gatekeepers, terminals, proxies and MCU products. The Gateway is compatible with all RADVISION videoconferencing products and with H.323, SIP and 324M compliant entities.

Table 1-1 Gateway Feature Summary (continued)

Feature Description



Carrier-grade scalability The Gateway is scalable and you can easily adapt it to your network needs. For example, in a single SCOPIA 400 platform you can start with a single Gateway board that provides two E1/T1/PRI ports or install up to four Gateway boards for a virtual number of unlimited ports. You can migrate to the carrier grade SCOPIA 1000 platform which supports up to 18 boards and then use the same cards from the SCOPIA 400 platform.

Centralized web-based management

The RADVISION Administrator is a web interface used to configure and monitor the Gateway. All aspects of the Gateway configuration can be viewed and modified from a remote location using a Java-enabled web browser. The iVIEW Network Manager provides a single point of access to RADVISION systems, including links to other applications installed on the system and an online help library for each application.

Enhanced error resiliency algorithms

Mobile video communications can be adversely influenced by air interface reliability. The Gateway achieves high video quality using multiple error resiliency algorithms that overcome noisy network environments, including QualiVision™ Image Refresh and Multi-NSRP methods.

SNMP management All aspects of monitoring, diagnostics, configuration and trapping are supported by SNMP.

Diagnostics The Gateway features front and rear panel LED indicators that display status for the unit. You can also access remote diagnostics of the unit through the Gateway interface, Telnet, SNMP, or a serial port.

Network load balancing The Gateway supports load balancing on the network by communicating with a gatekeeper through H.323 RAI/RAC messages or by communicating with a SIP Proxy through SIP OPTIONS messages.


Feature Description



Quality of Service (QoS) The Gateway features configurable coding of media packets to achieve QoS routing priority on the IP network. The Type of Service (ToS) bits of the IP datagram header can be configured for priority level.

IP-to-3G-324M Dial Plan The Gateway supports a simplified Dial Plan for IP-oriented dialing using a single universal prefix.

3G-324M-to-IP Dial Plan The mobile-to-IP Dial Plan supports the following dialing and call routing facilities:

Direct Inward Dialing (DID) including Multiple Subscriber Number (MSN), Q.931 sub-addressing Information Element and e-mail dialing.Default extension

Upgrades Software upgrades can be uploaded to the Gateway using the RADVISION Upgrade Utility from any PC on the network.

Access control The Gateway features password-controlled access to the Gateway interface. Up to ten different administrator access profiles can be defined for the Gateway.

Circuit Connection Failure On D-channel or ISUP connection failure events, the Gateway unregisters from its gatekeeper or SIP Proxy. The gatekeeper or SIP Proxy is forced to send new IP-to-mobile calls via a different gateway, thus ensuring high call-completion rates. The Gateway reregisters to the gatekeeper or SIP Proxy when the circuit switch connection is restored.


Feature Description


The 3G Gateway Feature Specifications

THE 3G GATEWAY FEATURE SPECIFICATIONS

Table 1-2 presents a list of Gateway feature specifications.

Security Enhancements The Gateway supports the following security enhancements:

Access Control List (ACL)—Defines a set of IP ranges with permission to access the Gateway Administrator interface. HTTPS—Ensures that the transfer of information over the web is secure.VLAN—Each VLAN can only communicate directly with devices in the same VLAN.Strong password enforcement for web accessOld passwords trackingSession inactivity timeout


Feature Description

Table 1-2 The RADVISION 3G Gateway v3.1 Feature Specifications

Feature Specification

Supported E1/T1 ports 2 ports

Supported protocols 3G-324M, H.323, and SIP

Supported audio codecs1 Basic and advanced audio coding supported codecs: G.711, G.723, G.729, GSM-AMR (all 8 bitrates)

Audio Transcoding GSM-AMR pass-through or GSM-AMR (3G-324M) to G.711/G.723/G.729 (IP) for video calls; G.711 pass-through or G.711 to G.723/G.729 for voice calls.

Supported video protocols H.264, H.263, and MPEG-4

Video Transcoding* The following codecs are supported in both mobile-to-IP and IP-to-mobile direction: H.264, H.263, MPEG4.

Supported video resolutions*

QCIF, CIF size matching


The 3G Gateway Feature Specifications

Supported bandwidths on the IP side (Kbps)

52kbps to 384kbps* (rate matching to mobile rate performed)

Call handling capabilities Support for 30 video or voice calls.

Line quality Supports line echo cancellation for voice calls and DTMF detection.

IP network connection 10/100Base-T Ethernet IP UTP connection (on the front panel). The second connection is for future use.

Serial port connection RS-232 DTE 9-pin D-type connection on front panel for connection to a PC terminal or an external modem.

ISUP Supports international as well as local protocols in variants including ANSI, ITU, ETSI, UK, France and more.

ISDN switched protocols (only relevant in PRI mode)

5ESS, 4ESS, DMS100, National ISDN, Euro-ISDN, VN6 (France), NTT (Japan), and support for Hong Kong and Taiwan PRI systems.

PRI interface E1/T1 network interface.Support for fractional E1/T1 channel selection.Configurable as terminal side (TE) or network side (NT) device.Configurable Long Haul PRI module (supported in Japan only).

Switch information Configurable Numbering Plan Identifier (NPI) and Type of Number (TON) information elements.

1. The term audio transcoded video calls refers to the process whereby an audio stream in a video call can be transcoded from one codec type to another.2. The asterisk symbol (*) appears next to features that require the MVP/M II SP module to be used.

Table 1-2 The RADVISION 3G Gateway v3.1 Feature Specifications

Feature Specification


The 3G Gateway Applications and Topologies

THE 3G GATEWAY APPLICATIONS AND TOPOLOGIES

The following are examples of 3G multimedia conferencing applications include:

Streaming services—The Gateway can connect to an external streaming server to supply online news, movies and video on demand.Video and voice mailMobile-only point-to-point and multipoint business video telephony conferencingMobile-to-IP point-to-point and multipoint business video telephony conferencingLocation-based services—Travel and navigation information, restaurant guides and images of points of local interestDistance learning.Telemedicine.Video-enabled call centers

STREAMING The RADVISION Multimedia Streaming Proxy (MSP SP) enables H.324M endpoints to connect to streaming servers via the Gateway for viewing streaming content such as news, video on demand, films or webcam streams.The MSP SP is intended for 3G operators, as well as service providers who want to provide multimedia streaming in addition to existing video-telephony or packet-based streaming services, or as an independent service.

VIDEO MAIL Video mail is used in IP endpoint and 3G mobile calling. When a destination is busy or no answer is received, the video call service picks up the call and broadcasts a pre-recorded message stating that the owner of the destination 3G mobile is unavailable. The incoming video call is recorded.The owner of the destination 3G mobile receives notification that a video message is waiting in the system. To view the message, the owner calls the video mail service.



POINT-TO-POINT CONFERENCING

The Gateway enables direct video and voice communication between 3G-324M terminals, H.323, and SIP (IP) terminals at a bandwidth of 64 Kbps (between the 3G circuit-switched cellular network and the Gateway).

Figure 1-1 Point-to-Point Conferencing Via the Gateway

MULTIPOINT CONFERENCING

Together with the RADVISION MCU, the Gateway enables 3G-324M and voice terminals to take part in a multipoint multimedia conference with IP network endpoints.A terminal can dial into a conference or be invited by one of the participating IP endpoints. In either case, the Gateway connects the 3G-324M terminal to the RADVISION MCU, enabling it to participate in the multipoint conference.

Figure 1-2 Mixed 3G-324M-IP Multipoint Multimedia Conference

IP network

RADVISION 3GGateway System

3G circuit switchedcellular network

H.323 andSIP

terminal

3G-324Mvideo phone

H.323 terminal

IP phone

T1/E1 PRI

RADVISION chassis

Gateway 3G with a system connecting unit

ISDNnetworkIP network

phone

3G-324Mvideo phone

3G circuit switched cellularnetwork

or ISUP

SIP



CONNECTING LEGACY H.320 ENDPOINTS

The Gateway enables legacy H.320 endpoints to connect to the 3G network via the IP infrastructure, as shown in Figure 1-3.

Figure 1-3 Connecting H.320 Legacy Endpoints to 3G network

IP network H.323/SIP

ISDNnetwork

3G circuit switched cellular network

3G Gateway [gw-P25/M] or [gw-P20/M] with H.320 Gateway [gw-P20]

T1/E1 PRI

T1/E1 PRI or ISUP

IP phone

H.323 EP

3G-H.324M videophone

H.320 EP

H.320


The 3G Gateway and Network Connections

HOSTING CORPORATE SERVICES ON A 3G NETWORK

The Gateway can provide connectivity between mobile users and the enterprise IP network as shown in Figure 1-4.

Figure 1-4 Connecting Enterprises to the 3G Network.

THE 3G GATEWAY AND NETWORK CONNECTIONS

This section describes the 3G Gateway connections to IP and circuit-switched networks including:

IP Network Connections on page 11Circuit-Switched Network Connections on page 11

IP NETWORK CONNECTIONS

The Gateway has one 10/100Base-T Ethernet IP port (on the front panel) and connects to an IP segment via a direct connection to a network hub. The Ethernet ports on the rear panel are for future use.

T1/E1 PRI or ISUP

3G circuit switched cellular network

Enterprise IP network

H.323/SIP EPs

IP

3G Gateway [gw-P25/M] or [gw-P20/M] Optional: RADVISION MCU and

RADVISION ECS for conferencing

3G-H.324M videophone

IP phone



CIRCUIT-SWITCHED NETWORK CONNECTIONS

The Gateway has circuit switched connections which refer to PRI/ISDN or ISUP SS7 connections. The following sections describe the circuit-switched connections:

ISUP Connections on page 12PRI Network Connections on page 13

ISUP CONNECTIONS The Gateway supports ISDN User Part of SS7 (ISUP) connections which are important for Carriers and Telecom Operators. The Gateway connection consists of two modes: Single Mode and Dual Resilient Mode.

SIU The Single Interface Unit (SIU) utilizes a signal that connects to the Gateway and is fully redundant and highly scalable.

SINGLE MODEIn single mode, the Gateway receives E1/T1 trunks, voice data circuits only. The SIU receives E1/T1 trunks, with SS7 signaling channels. The SIU can support up to 64 Gateway blades. Each Gateway can be connected to 2 E1/T1 trunks.

Figure 1-5 Single Mode



DUAL RESILIENT MODEEach SIU receives a signaling link over E1/T1. Each Gateway can register to both SIUs providing redundancy, protection and load sharing.

Figure 1-6 Dual Resilient Mode

PRI NETWORK CONNECTIONS

The Gateway provides up to two configurable PRI connections and supports up to 30 calls per blade, depending on the model and platform. You configure the Gateway PRI port to work with an E1/T1 interface. In addition, you can choose to activate only specific channels by using fractional channel selection. The Gateway can be connected directly to a PRI line provided by a local ISDN provider that also supplies the mobile connection or to a local PBX that provides the PRI connection, as illustrated in Figure 1-7 and Figure 1-8.

Signaling

Interface

Unit -

SIU520

Signaling

Interface

Unit -

SIU520

Signaling

Interface

Unit -

SIU520

Signaling

Interface

Unit -

SIU520

N+1 of

gw-PXX/M

gateway

blades

IP Network (RSI)

ISUP over E1/T1/V.35

H.324M over E1/T1

MSC

WWireless Network

Mobile User

Equipment


About Gatekeeper Supported Features

Figure 1-7 Direct Gateway to Central Office Switch Connection

Figure 1-8 Direct Gateway to a PBX with PRI Line Connection

ABOUT GATEKEEPER SUPPORTED FEATURES

The 3G Gateway can work with all H.323-compliant gatekeepers. The following features are available to a Gateway working with a gatekeeper:

Call Detail Record (CDR) data. For more information, see the RADVISION Enhanced Communication Server (ECS) documentation.RAI/RAC load balancing. For more information, see Configuring IP Network Settings on page 82.

If you are using the RADVISION Enhanced Communication Server (ECS), the Gateway provides additional functionality.

PRI T1/E1

Central Office Switch

Private Public

H.323 terminal

RADVISION chassis

RADVISION 3G GatewaySystem

IP phone

IP network

3G Mobile Set

PRI T1/E1

Central Office SwitchPBX

Private Public

Phone

H.323 terminal

Phone PhoneIP phone

RADVISION Gateway

RADVISION chassis

IP network

3G Mobile Set


About Gateway Security Support

REDUNDANCY The Gateway supports an N+1 redundancy system configuration. This protection scheme enables maximum utilization of all gatekeepers, so that if one Gateway stops functioning or goes offline, the gatekeeper reroutes the calls.RAI/RAC (H.323 messages for load balancing) and service hunting mechanisms allow the gatekeeper to route Gateway calls to an available Gateway which has enough resources to handle the calls. When a Gateway is offline and cannot provide the required service, the gatekeeper hunts for an alternative Gateway and routes the calls through this Gateway.When using this functionality in a distributed network architecture, the system enables high availability of the service and high resiliency to failures.

ABOUT GATEWAY SECURITY SUPPORT

The Gateway supports the following enhanced security features: Access Control List (ACL)Secure Communications (HTTPS)Virtual Local Area Network (VLAN)

ABOUT ACCESS CONTROL LIST (ACL)

The Access Control List (ACL) allows the administrator to specify which IP ranges can have access to the following interfaces:

Gateway Administrator web interface (HTTP/S)SNMP interfaceTelnet interfaceFTP interfaceICMP (Ping) protocol

If you try to access the Gateway from a blocked IP, the Gateway will not respond. The Gateway will operate in Stealth mode.

Note The ACL feature does not block outbound traffic from the Gateway such as traps to an IP address in a blocked range.

For more information, see Configuring Security Access Modes (ACL) on page 71.

ACL TRAPS An ACL trap reports or measures the following:The five most recent sources of attack on the Gateway in the last y seconds (default 300). The total number of attacks on the Gateway in X seconds.



If up to y attacks are detected in any x seconds period, a warning is be reported.If more than y attacks are detected in any five-minute period, an error is reported.Two separate traps are required for warnings and errors.A hidden advanced command defines the value for y which represents the point at which a warning becomes an error.

Note The default value for y is a 1000 attacks.

ABOUT SECURE COMMUNICATIONS (HTTPS)

HTTPS encrypts and decrypts the page requests and page information between the client browser and the web server. HTTPS uses port 443 instead of the HTTP port 80 and uses a key, usually 40/128 bit in the mainstream encryption algorithm from the client to the server. The server usually contains an X.509 digital certificate so a user can authenticate the server as part of the HTTPS protocol. For more information, see Enabling and Disabling HTTPS on page 74.

GATEWAY MANAGEMENT OF DIGITAL CERTIFICATES

In order to support Secure Socket Layers (SSL) and HTTPS, a web server must use a digital certificate. A digital certificate is a cryptographic data element that is used to authenticate the server and generate encryption keys used within the SSL process.The Gateway Certificate Management Wizard enables administrators to generate certificate requests. A certificate request can either be sent to a Certification Authority (CA) for validation and processing or sent as a request for a self-signed certificate.The properties of the self signed certificate will be determined automatically by the Gateway upon its creation and will not be configurable by the administrator. For more information, see Managing Digital Certificates on page 75.



Table 1-3 details certificate management states, which are determined by whether there is an installed certificate and/or whether there is a pending certificate request. The table also shows whether Secure Socket Layer (SSL) is supported at any given state and whether the process available at every state.

Note SSL is supported only when there is an active certificate installed.

ABOUT VIRTUAL LOCAL AREA NETWORKS (VLANS)

Virtual local area networks (VLANs) are viewed as a group of devices on different physical LAN segments which then can communicate with each other as if they were all on the same physical LAN segment. VLANs provide extra security because devices within each VLAN can only communicate directly with devices in the same VLAN.On a VLAN a LAN membership is defined by the network manager rather than by physical limitations.

Figure 1-9 VLAN in the Open Systems Interconnect (OSI) Model - Data Link layer (Layer 2)

Table 1-3 Certificate Management States

Certificate Installed

Pending Request

SSL Supported

Available Processes

× × × Generates a certificate request.

× × Loads a certificate and deletes pending request.

× Removes a certificate and creates a new certificate request, keeping the existing certificate active.

Loads a new certificate, replaces the old certificate, and deletes pending request.



Figure 1-10 The New VLAN in the Open Systems Interconnect (OSI) Model - Data Link layer (Layer 2)

The benefits of VLANs are:They are far more flexible than traditional networks.They ease the change and movement of devices on IP networks.They provide extra security. Devices within each VLAN can only communicate directly with devices in the same VLAN.They help to control broadcast traffic. Each VLAN can be set up to contain only those devices that need to communicate with each other.

For more information, see Enabling VLAN Tagging on page 73.

ABOUT THE VLAN IN THE GATEWAY

The VLAN provides the ability to separate the Media and Management Networks. Each type of traffic connects to a different network.

Figure 1-11 VLAN in the Gateway


SIP Heart-beat Mechanism

It is possible to specify tagging for the following traffic types:Media and Call Signaling—Audio and video packets, H.323 control packets, SIP control packets and proprietary inter-device call signaling communication devices such as Gateway-MVP/M II SP modules.Management—Web HTTP, SNMP, control and all other traffic types.

ABOUT VLAN TRAPS A VLAN trap reports or measures the following:The five most recent sources of incorrect VLAN tag access attempts on the Gateway in the last five minutes. The total number of the attempts in the last x seconds (default 300 seconds).If up to y attempts are detected in any x seconds period, a warning will be reported.If more than y attacks are detected in any five-minute period, an error will be reported.Two separate traps are required for warnings and errors.A hidden Advanced Command will define the value for which represents the point at which a warning becomes an error.The default value for y is 1000 attacks.

SIP HEART-BEAT MECHANISM

This section describes the following topics:Overview of the SIP Heart-beat MechanismSIP Server to Video GatewayVideo Gateway to SIP ServerSIP Server Down

OVERVIEW OF THE SIP HEART-BEAT MECHANISM

This section describes the SIP heart-beat mechanism between the 3G Gateway and a SIP server. This mechanism allows each side to monitor the availability of the other side’s components to provide improved load balancing, resource division, and an increased success rate for call-establishment.The heart-beat mechanism utilizes the SIP OPTIONS method for discovering the status of the server and of the Gateway.



SIP SERVER TO VIDEO GATEWAY

The SIP server uses a round-robin mechanism to select a video Gateway from a pool, and then to direct calls to that video Gateway. The SIP server periodically sends a SIP OPTIONS request to the 3G Gateway and if the Gateway is “alive” the SIP server responds with a 200 OK response to indicate its status. After a retry, if there is no 200 OK response, this indicates that the Gateway is “dead”. In this case, the SIP server removes the Gateway from its selection list and the Gateway is not selected for any subsequent calls. When the “dead” Gateway is recovered, it responds to subsequent OPTIONS requests with a 200 OK response, and then the SIP server once again includes the Gateway in the list of selectable Gateways.The Gateway responds to OPTIONS requests according to the following guidelines:

If the Gateway is “alive” and is able to take incoming calls, the Gateway response is “200 OK”.If the Gateway is “alive” but is at full capacity at the moment it receives an OPTIONS request, the Gateway responds with full call capacity at the moment of receiving the OPTIONS request. The Gateway response is “486 busy here”.If a 200 OK response is sent by the Gateway, the Gateway adds it to the following headers when available (as indicated in RFC 3261): Allow, Accept, Accept Encoding, Accept-Language, and Supported.



Figure 1-12 SIP Server to Video Gateway

VIDEO GATEWAY TO SIP SERVER

The Gateway monitors the status of the SIP server by sending an OPTIONS request to the softswitch and then waiting for a 200 OK response. In order to avoid false alarms, the Gateway has a configurable threshold value for determining how many failed OPTIONS retries indicate that the SIP server is “dead”. The time interval between OPTIONS retries (polling) by the Gateway is configurable.

SIP SERVER DOWN If the SIP server fails to respond to an OPTIONS request from the Gateway, the Gateway counts the number of missing responses until the pre-configured heart-beat missing threshold is reached. If the Gateway determines that the SIP server is down, the Gateway behaves in the following ways:

1 Sends an SNMP trap to indicate that the SIP server resource is not available.

2 Blocks the circuit network to prevent any new calls coming from the CS side, if the Disable circuit port on SIP heart beat failure option is chosen. For more information, see Configuring Availability Settings on page 127.



Figure 1-13 SIP Server Down

SIP SERVER RECOVERED

The Gateway continuously sends a heart-beat to the SIP server. When the SIP server is recovered, it responds to the heart-beat OPTIONS with 200 OK. The Gateway uses the counter and recovery threshold mechanism to avoid fluctuation due to switch over. When the pre-configured threshold is reached, the Gateway determines that the SIP server is “alive” and behaves in the following ways:

1 Sends the SNMP trap “SIP Proxy connection down/up”. 2 Unblocks the circuit network to resume normal handling of

incoming calls from the circuit network.

CONFIGURATION The Gateway allows configuration of the following parameters:Mechanism enable/disableThreshold that indicates the SIP server is down Threshold that indicates the SIP server is upTime interval for polling the SIP server with OPTIONS (in addition to normal internal stack retransmission of the original message)

Installing the 3G Gateway 23

2INSTALLING THE 3G GATEWAY

WHAT’S IN THIS CHAPTER

The Gateway has two components that you must install in the chassis: the Gateway module and the corresponding Rear Transition Module (RTM).The Gateway module installs in the front of the chassis and provides ISDN functionality. The RTM installs in the rear of the chassis and provides the physical interface for the ISDN line. You must install these modules in corresponding slots in the chassis. For example, if you insert the Gateway module in the slot 1 in the front of the chassis, you must insert the RTM in the slot 1 in the rear of the chassis.The MVP/M II SP module is an optional component providing video codec transcoding, bit rate and size matching for the Gateway. The MVP/M II SP module is installed at the front of the chassis.This section provides information on installing, setting up and configuring the 3G Gateway and MVP/M II SPmodule in the SCOPIA 400 chassis and the SCOPIA 1000 chassis, and includes the following topics:

Physical Description on page 24Preparing for Installation on page 28Verifying the Package Contents on page 31Mounting the SCOPIA 400 Chassis in a 19-inch Rack on page 32Mounting the SCOPIA 1000 Chassis in a 19-inch Rack on page 33Installing the 3G Gateway and MVP/M II SP Module on page 35Removing the 3G Gateway and MVP/M II SP Module on page 41Initial Gateway Configuration on page 44Registering the Online Help on page 60


Physical Description

PHYSICAL DESCRIPTION

This section provides a physical description of the 3G Gateway and MVP/M II SP modules.

PHYSICAL DESCRIPTION OF THE 3G GATEWAY

This section provides a physical description of the Gateway module and its corresponding RTM.

GATEWAY MODULE The Gateway module has a 10/100BaseT Ethernet port on the front panel that uses an RJ-45 connector to connect to the network. There is an asynchronous, 9-pin serial port that you can use with a hyperterminal program to configure and monitor the module. Figure 2-1 shows the front panel components of the Gateway module. Table 2-3 describes these components.

Figure 2-1 Gateway Front Panel



GATEWAY RTM The RTM provides the PRI line connections for the Gateway [gw-P25/M SP].Figure 2-2 shows the RTM panel components of the Gateway [gw-P25/M SP] module. Table 2-2 describes these components.

Table 2-1 Front Panel Components

Component Description

ETHERNET connector An RJ-45 connector that provides the primary Ethernet connection for the IP network port.

SERIAL connector A DB-9 connector that allows you to connect a PC terminal for local configuration.

RST button Allows you to reset the Gateway manually.

GK LED Light is green when the Gateway is registered with a gatekeeper.

CD LED Light is green when at least one Gateway port connection is online.

ACT LED Light is green to indicate that there are active calls in the Gateway.

ALRM LED Light is green to indicate that an error has occurred and the Gateway requires resetting.

ETHERNET LEDs The top part of the Ethernet connector contains two LED indicators. The left-hand LED light is green when the local IP network link is active. The right-hand LED light is green if the connection speed is 100 Mbps, and is off when the connection speed is 10 Mbps.

SWAP RDY LED Hot Swap indication. Light is blue when the latches of a board are unlocked and it is safe to remove the board from the chassis. Turns off when the board is completely detached.



Figure 2-2 Gateway: Rear Transition Module

PHYSICAL DESCRIPTION OF THE MVP/M II SP MODULE

Figure 2-3 shows the front panel of the MVP/M II SP module. Table 2-3 describes the components of the front panel.

Figure 2-3 Front Panel of the MVP/M II SP Module

Table 2-2 Gateway Rear Transition Module Components


ALRM LEDs Displays alarm events for the PRI line. REMOTE—Light is yellow when there is a loss of frame alignment at the remote side. LOS/LOF—Light is orange when there is a loss of frame alignment in the Gateway.

PRI LINE connectors RJ-45 connectors that provide the PRI line connections for the specified Gateway ISDN PRI port.

CD1 or CD2 LEDs Light is green to indicate that the PRI line is enabled and a carrier signal is detected.



Table 2-3 Front Panel Components


ETHERNET connector An RJ-45 connector that provides the primary Ethernet connection for the IP network port.

SERIAL connector A DB-9 connector that allows you to connect a PC terminal for local configuration.

RST button Allows you to reset the board manually.

MC LED Light is green when the MVP/M II SP module is registered with the 3G Gateway.

LOAD LED Light is green when more than 50% of the MVP/M II SP module resources are in use.

ACT LED Light is green to indicate that there is at least one currently active call on the MVP/M II SP module.

ALRM LED Light is green to indicate that an error has occurred and the MVP/M II SP module requires resetting.

ETHERNET LEDs The top part of the Ethernet connector contains two LED indicators. The left-hand LED light is green when the local IP network link is active. The right-hand LED light is green if the connection speed is 100 Mbps, and turns off when the connection speed is 10 Mbps.

SWAP RDY LED Hot Swap indication. Light is blue when the latches of a board are unlocked and it is safe to remove the board from the chassis. Turns off when the board is completely detached.


Preparing for Installation

PREPARING FOR INSTALLATION

This section describes the requirements for installing the RADVISION 3G Gateway on the SCOPIA 400 platform and on the SCOPIA 1000 platform.

ON THE SCOPIA 400 PLATFORM

This section describes the requirements for installing the 3G Gateway and the MVP/M II SP module in a SCOPIA 400 chassis. For more information, see the SCOPIA 400 Platform Guide.

Warning Danger of electric shock. During this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly touch the backplane with your hand or any metal tool.

The requirements are as follows:SCOPIA 400 chassisProper clearance at the sides of the unit to allow adequate ventilation, and at least 20 cm clearance at the back of the chassis to allow access to the boards and cable connectionsA PC with a serial port and terminal emulation software to assign the 3G Gateway and MVP/M II SP module an IP addressTwo dedicated IP addresses—One for the 3G Gateway and one for the MVP/M II SP module The IP address of the default Gateway or router that the 3G Gateway and MVP/M II SP module use to communicate across the networkThe IP address of the SIP server with which you want the 3G Gateway to registerThe IP address of the H.323 Gatekeeper with which you want the 3G Gateway to registerAvailable IP network ports on the switch for the 3G Gateway and MVP/M II SP moduleA grounded AC power outletA 10BaseT or 100BaseT LAN cableAmbient room temperature range of 32o to 122oF (0o to 50oC)Non-condensing relative humidity range of 5% to 85%



SCOPIA 1000 PLATFORM REQUIREMENTS

This section describes the requirements for installing the 3G Gateway and the MVP/M II SP module in a SCOPIA 1000 chassis. For more information, see the SCOPIA 1000 Platform Guide. The requirements are as follows:

Warning Danger of electric shock. This system contains board-level components that must be protected from static discharge and physical shock. Wear a wrist strap grounded through one of the system ESD ground jacks when handling system components. Do not directly touch the backplane with your hand or any metal tool.

SCOPIA 1000 chassisMake sure that all cover panels are in placeMake sure that all component slots are filled with either components or an air management blade (front), or covered with a blank filler panel (rear)

Warning Failure to fill open slots can cause overheating of power supplies, boards, or other components, and can damage the system.

Proper clearance at the sides of the unit to allow adequate ventilation and at least 20 cm clearance at the back of the chassis to allow access to the boards and cable connectionsPC with a serial port and terminal emulation software to assign the 3G Gateway and MVP/M II SP module an IP addressDedicated IP address for the 3G Gateway and MVP/M II SP moduleIP address of the Gateway that the 3G Gateway and MVP/M II SP module use to communicate across the networkThe IP address of the SIP server with which you want the 3G Gateway to registerThe IP address of the H.323 Gatekeeper with which you want the 3G Gateway to registerAvailable IP network ports on the switch for the SCOPIA 1000 chassisA grounded AC power outlet10BaseT or 100BaseT LAN cable



Ambient room temperature range of 41o F to 104o F (5o C to 40o C)

Note The hottest ambient temperature supported by RADVISION for the SCOPIA 1000 platform is 104o F (40° C). Any ambient temperature above 104o F (40° C) is considered a failure condition. Up to 104o F (40° C), the SCOPIA 1000 platform supports a single feed failure (leaving four power supplies operational), where the total chassis load (including the fans and positronic cable losses) does not exceed 1300W.

Non-condensing relative humidity range of 5% to 85% (to 90% for 96 hours)

Note The SCOPIA 1000 platform also supports a severe conditions ambient temperature above 40° C, up to 55° C, with all eight power supplies operational, for 96 hours. Storage temperature -40° C to 70° C.


Verifying the Package Contents

VERIFYING THE PACKAGE CONTENTS

Inspect the contents of the box for shipping damage. Report any damage or missing items to your distributor or reseller. Table 2-4 lists the package contents for the 3G Gateway and MVP/M II SP module.

Table 2-4 Package Contents with 3G Gateway and MVP/M II SP module

Product Contents

SCOPIA 400 chassis with the 3G Gateway and MVP/M II SP module

The 3G Gateway moduleThe MVP/M II SP module2 power cables (the cable specification depends on customer location)Terminal cable2 LAN cables—One for the 3G Gateway and one for the MVP/M II SP moduleRack mounting kit (two brackets and six screws)Four rubber feet3G Gateway User Guide (in PDF format)SCOPIA 400/1000 Quick StartSCOPIA 400 Platform Guide (in PDF format)SCOPIA 3G Gateway Release NotesSCOPIA 400 Chassis Release NotesUtilities and Documentation CD-ROM containing product documentation, utilities and online help files


Mounting the SCOPIA 400 Chassis in a 19-inch Rack

MOUNTING THE SCOPIA 400 CHASSIS IN A 19-INCH RACK

You can optionally mount the SCOPIA 400 chassis in a standard 19-inch rack. Two mounting brackets and a set of screws are included in the SCOPIA 400 chassis shipping box.

Procedure1 Disconnect all cables including the power cables.2 Place the SCOPIA 400 chassis right-side up on a hard, flat

surface, with the front panel facing you.3 Position a mounting bracket over the mounting holes on each

side of the SCOPIA 400 chassis, as shown in Figure 2-4.4 Pass the screws through the brackets and tighten them into the

screw holes on each side of the SCOPIA 400 chassis using a suitable screwdriver.

SCOPIA 1000 chassis with the 3G Gateway and MVP/M II SP module

Fully assembled 21-slot SCOPIA 1000 chassis with 18 air management blades including the 3G Gateway and MVP/M II SP module, 18 rear filler panels, 2 Ethernet switches, 2 Intelligent Shelf Managers (ISMs) and 2 ISM RTM4820 Rear Transition ModulesTerminal cableTerminal adapter cable (for the ISMs)2 switch terminal cables6 LAN cables (4 for switches, 2 for the ISMs) 3G Gateway User Guide (in PDF format)SCOPIA 400/1000 Quick StartSCOPIA 1000 Platform Guide (in PDF format)SCOPIA 3G Gateway Release NotesSCOPIA 1000 Chassis Release NotesUtilities and Documentation CD-ROM containing product documentation, utilities and online help files

Table 2-4 Package Contents with 3G Gateway and MVP/M II SP module

Product Contents



Figure 2-4 Fitting a Bracket for Rack Mounting

5 Insert the SCOPIA 400 chassis into the 19-inch rack.6 Fasten the brackets to the side rails of the rack.7 Make sure that the air vents at the sides of the SCOPIA 400

chassis are not blocked.

MOUNTING THE SCOPIA 1000 CHASSIS IN A 19-INCH RACK

This SCOPIA 1000 platform is intended for stationary mounting in a rack designed according to physical strength specifications in the NEBS GR-63-CORE and NEBS GR 487 guidelines. Be sure to mount the system in a way that ensures even weight distribution in the rack.

Warning Uneven mechanical loading can result in a hazardous condition.



Secure all mounting bolts when installing the enclosure to the rack. For more information, see the SCOPIA1000 Platform Guide.

Note The SCOPIA 1000 chassis fits standard 19 inch Electronics Industries Associations (EIA) racks. Mounting flanges are attached to the front of the enclosure to facilitate front mounting. The flanges can be repositioned for center-mounting the enclosure.

Warning It takes more than one person to safely lift the SCOPIA 1000 chassis. Get assistance and use proper lifting techniques when moving the system. To prevent damage to the components, never use component handles or cables to lift or move the entire system.

Procedure1 Disconnect all power sources, external connections, and

cables.2 Select a position in the rack that does not interfere with other

equipment and that provides safe weight distribution.3 For efficient cooling, the area around the SCOPIA 1000

chassis intake and exhaust vents should be clear of obstructions. The intake should not be close to other system exhausts. For more information, see the Cooling Subsystem chapter of the SCOPIA1000 Platform Guide.

4 Secure the mounting flanges to the front or middle of the enclosure.

5 Place the enclosure in its intended location and line up the mounting holes on the SCOPIA 1000 chassis flanges with the rack mounting holes.

6 Bolt the enclosure to the rack

Note The rack hardware is not included.


Installing the 3G Gateway and MVP/M II SP Module

INSTALLING THE 3G GATEWAY AND MVP/M II SP MODULE

This section describes how to insert the 3G Gateway and the MVP/M II SP module into the SCOPIA 400 chassis and into the SCOPIA 1000 chassis.

Caution Only trained and qualified personnel should be allowed to install, replace, or service this equipment.

WarningDanger of electric shock. During this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly touch the backplane with your hand or any metal tool.

Before working on a system that has an on/off switch, turn OFF the power and unplug the power cord.

Before opening the chassis, disconnect the telephone network cables to avoid contact with telephone network voltages.

To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network voltage (TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some LAN and WAN ports both use RJ-45 connectors. Use caution when connecting cables.

The telecommunications lines must be disconnected before unplugging the main power connector and/or while the housing is open.

INSTALLING THE 3G GATEWAY

This section describes how to install the 3G Gateway components: the Rear Transition Module (RTM) and the 3G Gateway board.

Caution You must install the RTM before you install the Gateway module. Inserting an RTM in the rear of the chassis when a Gateway module is already installed in the same position at the front of the chassis may damage the chassis.



INSTALLING THE RTM MODULE

This section describes how to install the RTM in the SCOPIA 400 chassis and in the SCOPIA 1000 chassis. The RTM provides the ISDN line connections for the Gateway.

Note The SCOPIA 1000 chassis has 18 payload slots. You can install the 3G Gateway and the MVP/M II SP module in any of slots 3-20.

Procedure1 In the back of the chassis, loosen the screws of the blank panel

covering the slot into which the RTM is to be installed.2 Remove the blank panel.3 Remove the new RTM from the anti-static bag.4 Press the red buttons and open the handles of the RTM.5 Align the edges of the RTM with the chassis guide rails.

Note For the SCOPIA 400 chassis the Gateway Administrator interface displays the status and identification information in the System section. To be able to view this information insert the RTM into the upper slot of the SCOPIA 400 chassis and connect the system indication flat cable to the RTM.

6 Slide the RTM into the chassis until it stops (see Figure 2-5 for the SCOPIA 400 chassis).



Figure 2-5 Inserting the RTM in the SCOPIA 400 Chassis

7 Use even pressure to push the module further into the slot.

Caution Do not force the connection. Forcing the connection can bend or damage the pins in the connector inside the chassis.

8 Snap the handles forward to secure the RTM in the slot.9 Secure the RTM screws.

Warning Blank faceplates and cover panels serve three important functions: they prevent exposure to hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other equipment; they direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place.

INSTALLING THE 3G GATEWAY BOARD

This section describes how to install the 3G Gateway board in the SCOPIA 400 chassis and in the SCOPIA 1000 chassis.

Caution You must install the RTM before you install the Gateway board. Inserting an RTM in the rear of the chassis when a Gateway board is already installed in the same position at the front of the chassis may damage the chassis.



Procedure1 On the front of the chassis, loosen the screws of the blank

panel covering the slot into which the Gateway board is to be installed.

2 Remove the blank panel.3 Remove the new Gateway board from the anti-static bag.4 Press the red buttons and open the handles of the Gateway

board.5 Align the edges of the Gateway board with the chassis guide

rails.6 Slide the Gateway board into the chassis until it stops (see

Figure 2-5 for the SCOPIA 400 chassis).

Note If you install the Gateway into the SCOPIA 400 chassis, insert the Gateway in the top slot at the front of the chassis to view status and identification information via the System web user interface.


Caution Do not force the connection. Forcing the connection can bend or damage the pins in the connector inside the chassis.

Note If you are installing the Gateway board and the power to the chassis is on, the SWAP RDY LED on the module front panel turns blue when you slide the module into the chassis as far as it will go. This means that you can secure the module safely. The LED turns off when the handles are closed.



8 Snap the handles forward to secure the Gateway board in the slot.

9 Secure the Gateway board screws.

Warning Blank faceplates and cover panels serve three important functions: they prevent exposure to hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place.

INSTALLING THE MVP/M II SP MODULE

This section describes how to install the MVP/M II SP module.

Caution Install the MVP/M II SP module into a slot below the Gateway module.

Note This section is relevant only when the 3G Gateway works with the MVP/M II SP module.

Note The SCOPIA 1000 chassis has 18 payload slots. You can install the 3G Gateway and the MVP/M II SP module in any of slots 3-20.

Procedure1 On the front of the chassis, loosen the screws of the blank

panel covering the required slot.2 Remove the blank panel.3 Remove the new MVP/M II SP module from the antistatic bag.4 Press the red buttons and open the handles of the MVP/M II SP

module.5 Align the edges of MVP/M II SP module with the chassis

guide rails.



6 Slide the MVP/M II SP module into the chassis until it stops (see Figure 2-5 for the SCOPIA 400 chassis).


Warning Do not force the connection. Forcing the connection can bend or damage the pins in the connector inside the chassis.

Note If you are installing the MVP/M II SP module and the power to the chassis is on, the SWAP RDY LED on the module front panel turns blue when you slide the module into the chassis as far as it will go. This means that you can secure the module safely. The LED turns off when the handles are closed.

8 Snap the handles forward to secure the MVP/M II SP module in the slot.

9 Secure the MVP/M II SP module screws.

Note Blank faceplates and cover panels serve the following important functions: prevent exposure to hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates, front covers and rear covers are in place.

CONNECTING GATEWAY TO A POWER SOURCE

This section describes how to supply power to the Gateway. The Gateway is equipped with an autoswitching power supply that supports 100-240 VAC at 50/60 Hz.


Removing the 3G Gateway and MVP/M II SP Module

Procedure1 Plug a power cord into the power socket on the rear panel of

the Gateway. 2 Connect the power cable to a grounded AC outlet.3 Turn the power on.

REMOVING THE 3G GATEWAY AND MVP/M II SP MODULE

This section describes how to remove the 3G Gateway or the MVP/M II SP module from the SCOPIA 400 chassis and from the SCOPIA 1000 chassis.

REMOVING THE 3G GATEWAY

This section describes how to remove the 3G Gateway: the Gateway module and the RTM.

Warning You must remove the Gateway module from the slot at the front of the chassis before removing the corresponding RTM module from the same slot position at the rear of the chassis.


Procedure1 Verify that all cards, faceplates, front covers, and rear covers

are in place.2 Loosen the Gateway screws.3 Press the red buttons and open the handles of the Gateway

module (see Figure 2-6 for the SCOPIA 400 chassis).



Figure 2-6 Removing a Module from the SCOPIA 400 Chassis

4 Wait for the blue SWAP RDY LED to light up. The SWAP RDY LED indicates that it is safe to remove the module.

Note It may take up to one minute for the LED to light up while the Microsoft Windows operating system is shutting down.

The light turns off when the board is completely detached from the backplane.

5 Remove the module completely.6 Insert a blank cover panel provided by RADVISION.7 Secure the blank cover panel screws.8 Repeat the entire procedure for the RTM module.



REMOVING THE MVP/M II SP MODULE

This section describes how to remove the MVP/M II SP module from the SCOPIA 400 chassis or the SCOPIA 1000 chassis.


Procedure1 Verify that all cards, faceplates, front covers, and rear covers

are in place.2 Loosen the screws in the MVP/M II SP module.3 Press the red buttons and open the handles of the MVP/M II SP

module (see Figure 2-6 on page 42 for the SCOPIA 400 chassis).

4 Wait for the blue SWAP RDY LED to light up. The SWAP RDY LED indicates that it is safe to remove the module.

Note It may take up to one minute for the LED to light up while the Windows operating system is shutting down.

The light goes out when the board is completely detached from the backplane.

5 Remove the MVP/M II SP module completely.6 Insert a blank cover panel provided by RADVISION.7 Secure the blank cover panel screws.


Initial Gateway Configuration

INITIAL GATEWAY CONFIGURATION

Initial monitoring and administration of the Gateway are performed from a remote PC via a serial connection. This allows you to access the boot configuration menu of the Gateway. At power-up, the Gateway goes through the following boot phases:

Auto-boot—The embedded operating system initializes and displays basic information.Configuration menu—A 6-second countdown allows you to enter the configuration menu.Initialization—The Gateway completes its boot sequence and is ready for operation.

Note You can perform serial port configuration of the Gateway only at startup during a short period indicated by a 6-second countdown. Once the initialization phase is complete, the only way to access the configuration menu is by restarting the Gateway.

SETTING THE IP ADDRESS

This section describes how to use the serial port to configure the unit with an IP address and other address information. The serial port on the Gateway front panel is used to assign a new IP address to your Gateway. You must assign the IP address before you connect the Gateway to the network.

Before You Begin

The following items are required to assign an IP address to the Gateway:Dedicated IP address for the GatewayDefault Router IP address that the Gateway uses to communicate over the networkPC with available serial port and terminal emulator software installedRS-232 terminal cable (shipped with the unit)

Procedure 1 Connect the supplied terminal cable to the PC terminal.2 Connect the power cable.3 Start the terminal emulation application on the PC.



4 Set the communication settings in the terminal emulation application on the PC as follows:

Baud rate: 9600Data bits: 8Parity: NoneStop bits: 1Flow control: None

5 Turn on the power to the Gateway.6 After the terminal emulator session starts, press the RST

button on the Gateway front panel to reset the module.7 A log of the auto-boot events and a VxWorks banner scrolls

across the computer monitor.

Note When the Gateway is started for the first time, two VxWorks banners appear. The configuration option appears after the second banner.

8 When the message “Press any key to start configuration” appears on the screen, press any key within 6 seconds. The Main menu is displayed:Main menuN: Configure network port values

P: Change the configuration software password

S: Configure network security modeA: Advanced configuration menu

Q: Quit

Warning If you do not press a key before the countdown ends, the device continues its initialization and you can only configure the device by pressing the RST button on the front panel.



9 At the prompt, enter N to configure default network port values, and then press Enter. The Network configuration menu is displayed:Configure network port values

1: Configure default network port value

2: Configure network port 2 value

R: Reset network configuration

Q: Back to main menu

10 At the “Enter IP address for default interface” prompt, enter the IP address you want to assign to the Gateway, and then press Enter.

Note Do not use leading zeros in the IP address.

11 At the “Enter Default Router IP Address” prompt, enter the IP address of the router that is associated with the segment in which the unit will be installed, and then press Enter.

Note Do not use leading zeros in the IP address.

12 At the “Enter IP Mask for default device” prompt, enter the subnet mask IP address using the following method:

Convert the subnet mask IP address to a hexadecimal notation, enter the hexadecimal number at the prompt, and then press Enter. For example, for the subnet mask 255.255.255.0. the hexadecimal value is FFFFFF00.

Note You can use the computer’s desktop calculator to convert the subnet mask ID to a hexadecimal notation.

If a subnet mask is not used, press Enter.



13 Press Q to finalize the new settings and return to the main menu.

14 The Gateway automatically resets itself.15 Allow the unit to complete the reboot process. A new emulator

session begins.16 Close the terminal emulator session.

CONNECTING TO THE IP NETWORK

Use a straight-through Ethernet cable to connect the Ethernet IP network port on the Gateway RTM module to a 10/100Base-T IP network connection on your network switch.

CONNECTING TO THE ISDN NETWORK

Use the appropriate cables to connect the PRI Line 1 and PRI Line 2 ISDN ports to your switch or direct PRI line connection.In ISUP mode connect the circuit switch lines (E1/T1) to the Gateway and the Mobile Switching Center (MSC) and the signaling links to the SIU and the MSC.

CHANGING THE CONFIGURATION TOOL LOGIN PASSWORD

You can use the terminal emulator to change the default password of the default login user before others can use the Gateway Administrator interface.

Procedure1 Start a terminal emulator session for the Gateway.2 Press the RST button on the front panel of the Gateway.

After 60 seconds, a new terminal emulator session begins on the computer monitor.

3 After the second VxWorks banner scrolls across the screen, the following message appears: “Press any Key to start the configuration.”

4 Press any key and then press Enter.The default network properties screen appears.

5 At the prompt, enter P and press Enter to choose “change the configuration software password.”The Enter user name prompt appears.



6 Enter the user login name for which you want to change the password, and then press Enter. The default user name is admin. This is the user name that allows you to access the Gateway Administrator interface.The Enter new password prompt appears.

7 Enter the password you want the user to use to log in to the Gateway Administrator interface, and then press Enter.There is no default password.

8 The configuration menu re-appears.9 Enter Q, and then press Enter to exit.

CONFIGURING THE GATEWAY

Once you have assigned an IP address to the Gateway, you can use the Administrator web interface to configure and monitor the Gateway. For more information about configuration, see the interface configuration chapters in the Gateway [gw-P25/M SP] User Guide.

ACCESSING THE GATEWAY ADMINISTRATOR INTERFACE

The Gateway Administrator is a web interface that allows you to view and configure the Gateway hardware and application parameters. You can use the Gateway Administrator interface to perform the following tasks:

Set administrative parameters to define access to the GatewaySet Gateway application parameters that specify how the Gateway processes incoming and outgoing callsSet chassis operating parameters for SCOPIA 400 modules installed in the top slot of a SCOPIA 400 chassis

Before You Begin

The following requirements are necessary to access the Gateway Administrator web interface:

A Java-compliant browser. Microsoft Internet Explorer version 5.5 or later is recommended.The Gateway IP address or a web link to the Gateway



Administrator level-accessThe required user name and password

Note For first-time installation, you must assign an IP address to the Gateway using a serial port connection before you can access the web interface. For more information, see Changing the Configuration Tool Login Password on page 47.

Procedure1 In your web browser, enter the IP address or device name of

the Gateway. For example: http://125.221.23.44Press Enter to display the Login screen.

2 Enter your username and password, and then click OK to proceed to the configuration page. The default user name is admin and there is no password by default.The Administrator configuration interface appears.

Note If you try to sign in as an Administrator while another Administrator is currently signed in, the Gateway automatically signs you in as a Read Only user. The title bar of the Administrator interface displays the Read Only text next to the title. Read Only users cannot edit Gateway settings.

CHECKING THE NETWORK ADDRESS SETTINGS

Use the Administrator to check that the network addresses you set in the previous step were properly recorded by the Gateway.

Procedure1 In the Administrator sidebar, click the Board button to

display the Board configuration tabs.2 Choose the settings in the Addressing tab to make sure that the

network addressing parameters you entered earlier (see Changing the Configuration Tool Login Password on page 47) were properly recorded in the Gateway.



SETTING THE GATEKEEPER ADDRESS

In case the H.323 protocol is used, you must set a gatekeeper IP address with which the Gateway registers before you work with the Gateway.

Procedure1 In the Administrator interface sidebar, click Gateway.2 Click the IP Network tab.3 Click H.323.4 In the Gatekeeper Settings section, enter the gatekeeper IP

address in the Gatekeeper Address field.5 Click Upload in the toolbar.

SETTING THE SIP PROXY SERVER ADDRESS

In case the SIP protocol is used, you must set a SIP Proxy server IP address with which the Gateway registers before you work with the Gateway.

Procedure1 In the Administrator interface sidebar, click Gateway.2 Click the IP Network tab.3 Click SIP.4 Enter the SIP Proxy server IP address in the Specify Address

field.5 Click Upload.



SETTING GATEWAY SERVICES

The Gateway is pre-programmed with a number of default service prefixes necessary for using the Gateway. You can modify the existing prefixes to suit your network environment or define new services and add them to the list. In each direction there is one default service which can be changed only partly. Table 2-5 presents default services and their description.

Before setting an IP-to-mobile service, make sure that the service prefix numbers are not identical to the first digits of any of your IP network endpoint phone numbers or aliases. See the Gateway [gw-P25/M SP] User Guide for information about adding and modifying Gateway services.

SETTING PRI PORT PARAMETERS

If you are connecting both Gateway PRI ports, configure a single port first. When the first port is configured, you can use the Same as Port checkbox to duplicate settings from one PRI port to the other.

Procedure1 In the Administrator Gateway interface, click Gateway.2 Click the Circuit Network tab.3 Click Physical Trunk Settings.4 On the Physical Trunk Settings subtab, define the settings

you want for this port. Follow your checklist to help organize the settings.

5 In the Port 2 section, choose Port enabled to enable the second PRI port.

Table 2-5 Service Description

Service Call Type Destination Number Prefix

IP-to-Mobile ServicesIP to Mobile default service Video Any number (*)

AnyIP to 324M Auto Video 70

Mobile-to-IP ServicesMobile to IP default service Voice or Video Any number (*)

AnyTdm to H.323 Auto Voice or Video 71

AnyTdm to SIP Auto Voice or Video 72


Initial Configuration of the MVP/M II SP Module

6 Choose Same as port to duplicate the settings from the first PRI port.

7 Click Upload in the toolbar and wait until the Gateway resets itself.

8 Click Logout in the sidebar to logout of the Administrator account.

Note To review the settings, log in to the Administrator account again.

INITIAL CONFIGURATION OF THE MVP/M II SP MODULE

When you are working with a MVP/M II SP module, you must perform network configuration of the MVP/M II SP module.

Note It is recommended to modify the configuration software password of the MVP/M II SP module after initial installation to make sure maximum system security.

Initial monitoring and administration of the MVP/M II SP module are performed from a remote PC using a terminal emulation application such as HyperTerminal. To make the serial connection, connect a PC terminal to the front panel serial port of the MVP/M II SP module as described in Setting the IP Address on page 44. The serial configuration utility runs as a target configuration service. You can use the serial configuration utility to perform the following actions:

Configure default network port values.Modify the configuration software password.Modify the 3G Gateway IP address.Modify advanced configuration settings such as the web server port and LAN port, and to restore the factory configuration.

Warning To enable the MVP/M II SP module to function properly, you must configure the MVP/M II SP module with an IP address that is different than the 3G Gateway IP address.



ACCESSING OF MAIN MENU THE MVP/M II SP MODULE

You access the MVP/M II SP Main configuration menu in the same way as you access the 3G Gateway network configuration Main menu. For details, see procedure in Setting the IP Address on page 44.The MVP/M II SP Main configuration menu appears as follows:

Main menu

N: Configure default network port values

P: Change the configuration software passwordS: Configure network security level

M: Change Media Controller (MC) ip address

R: Enable/Disable RS232 ConsoleC: Enable/Disable Strong Password

A: Advanced configuration menu

Q: Quit

Select:

SETTING THE IP ADDRESS

This section describes how to use the serial port to configure the unit with an IP address and other address information. The serial port on the MVP/M II SP front panel is used to assign an IP address to a new MVP/M II SP module. You can assign the IP address before or after you connect the hardware to the network.

Procedure1 At the prompt, enter N to configure default network port

values, and then press Enter. The default network properties screen appears as follows:Enter IP Address for default Interface Without leading zeros

Enter Default Router IP Address for default Interface

Without leading zeros :

2 At the Enter IP address for default interface prompt, enter the IP address you want to assign to the MVP/M II SP module, and then press Enter.

3 At the Enter Default Router IP Address prompt, enter the IP address of the default Gateway that you want the MVP/M II SP module to use, and then press Enter.



4 At the Enter IP Mask (Hex) for default Interface prompt, enter the IP mask of the default Gateway that you want the MVP/M II SP module to use, and then press Enter.

Note You must enter the subnet mask in the hexadecimal format. For example, FFFFFE00 for 255.255.254.0.

Allow the unit to complete the reboot process. A new emulator session begins.

5 When the Main menu appears, perform one of the following actions:

Enter the letter which represents a set of parameters that you want to configure.Enter Q to save your changes and allow the device to complete the boot process.

Caution Configuration of any of the parameters other than to configure default network port values may alter the function of the device and should not be performed by an unauthorized person.

CHANGING THE CONFIGURATION SOFTWARE PASSWORD

You can use the serial port to change the configuration software password.

Procedure1 At the prompt, enter P to change the configuration software

password, and then press Enter.The user profile screen appears as follows:Enter user name:

Enter new password:



2 At the Enter user name prompt, enter the new user name, and then press Enter.

3 At the Enter user password prompt, enter the new password, and then press any key to return to the MVP/M II SP Main menu.

CHANGING THE SECURITY LEVEL

You can use the serial port to change the security level. The following is a list of security levels and their permissions:

0 (low)—Allows SNMP, Telnet, HTTP, FTP, and ICMP to access the MVP/M II SP module.1 (medium)—Allows access to the MVP/M II SP module only through SNMP, HTTP and ICMP.2 (high)—Allows only HTTP to access the MVP/M II SP module.

Procedure1 At the prompt, enter S to configure the network security level,

and then press Enter.The security level screen appears as follows:The current security level is [0 low].Enter a new security level (0-low, 1-medium. 2-high):

2 Enter the new security level required, and then press Enter.The updated security level screen appears as follows:The current security level is [0 low].Enter a new security level (0-low, 1-medium. 2-high):

2

Board security level changing to [2 high]:Set icmpRequestBlock to 2

The new security level is [2 high].

3 The MVP/M II SP Main menu appears.



REGISTERING MVP/M II SP MODULE TO CONTROLLING GATEWAY

You can use the serial port to point the MVP/M II SP module to the IP address of the controlling Gateway.

Procedure1 At the prompt, enter M to change the Gateway IP address, and

then press Enter.The Gateway IP address screen appears as follows:Enter MC ip address Without leading zeros :

2 Enter the IP address of the Gateway, and then press any key to return to the MVP/M II SP Main menu.

ENABLING OR DISABLING RS232 CONSOLE

You can use the serial port to enable or disable the RS232 Console.

Procedure1 At the prompt, enter R.

The MC IP address screen appears as follows:Select: R

RS232 Console is currently [enabled].Enter 0/1 to disable/enable RS232 Console:

2 Enter 0 to disable and 1 to enable the RS 232 console.If you enter 1, the following message appears:The new RS232 Console mode is enabled.



ENABLING OR DISABLING STRONG PASSWORD CONFIGURATION

You can use the serial port to enable or disable the strong password configuration.

Procedure1 At the prompt, enter C to change the Gateway IP address, and

then press Enter.The MC IP address screen appears as follows:Select: CStrong Password configuration is currently [disabled].Enter 0/1 to disable/enable Strong Password configuration: 0

2 Enter 0 to disable and 1 to enable the strong password configuration.If you enter 0, the following message appears:The new Strong Password configuration is disabled.

CHANGING ADVANCED CONFIGURATION SETTINGS

You can use the serial port to change the following advanced configuration settings:

Web server port (for future use)Restore factory configuration (for future use)LAN port settingsDisable DSP reset—Only qualified technical personnel should modify the DSP reset function settings.



Procedure1 At the prompt, enter A to access the Advanced Configuration

menu.The Advanced Configuration menu appears as follows:Advanced configuration menu

Q: Quit

1: Configure web server port2: Restore factory configuration

3: Change Lan port Settings

4: Disable DSP reset

Select:

2 At the prompt, enter 1 to configure the web server port.The current web port server setting appears.

3 At the prompt, enter 2 to restore the factory configuration settings.You are asked to confirm your choice as follows:Select: 2

Are you sure you want to restore factory configuration? [y, n]:

4 Enter y or n.5 At the prompt, enter 3 to change Ethernet speed and duplex

parameters.The network interface card settings screen appears as follows:Choose : 1 - 10Mbps Half Duplex : 2 - 100Mbps Half Duplex

: 3 - 10Mbps Full Duplex

: 4 - 100Mbps Full Duplex : 5 - Auto

other - Quit

Enter either a number between 0 and 5 inclusive, representing the required option.



6 Press any other key to quit without changing the network working mode.

7 At the prompt, enter 4 to disable the DSP reset facility.

Note After choosing options Q and 1-3, press any key to return to the MVP/M II SP Main menu. After choosing option 4, the MVP/M II SP Main menu appears automatically.

SAVING NETWORK CONFIGURATION SETTINGS

Modified network configuration settings are automatically saved when you exit the MVP/M II SP Main menu.

Procedure1 Make sure you have completed your configuration.2 At the prompt, enter Q to exit the video processing module

Main menu.The video processing module Main menu closes and your machine automatically reboots.

CONNECTING THE MVP/M II SP MODULE TO THE LAN

This section describes how to connect the MVP/M II SP module to the Local Area Network (LAN).

Procedure1 Connect the supplied LAN cable from your network switch to

the 10/100BaseT Ethernet port on the front panel of the MVP/M II SP module. The 10/100BaseT port accepts an RJ-45 connector.

2 Turn on the power for the MVP/M II SP module.


Registering the Online Help

REGISTERING THE ONLINE HELP

The online help files for the Gateway Administrator interface are available on the RADVISION Utilities and Documentation CD-ROM. To use the online help, you must install the help files for the Gateway in a shared directory on your network, and then register the directory location in the Gateway Administrator interface.

Procedure1 Make sure that you have installed the online help library from

the RADVISION Utilities and Documentation CD-ROM on your PC.

2 Access the Gateway Administrator web interface using a Java-compliant web browser. The Administrator login page appears.

3 In the Name field, enter your user name.4 In the Password field, enter your password.5 Click Go.6 On the sidebar, click Board. 7 Click the Web tab.8 In the Online Help URL field, enter the path to the directory

where the Gateway online help files are stored: If the directory is located on a file server, enter:file://.../shared_directory_name /program_folderIf the directory is located on a web server, enter:http://.../shared_directory_name /program_folder

9 On the toolbar, click Upload.

NETSCAPE NAVIGATOR USERS

Online help files located on the local network and accessed using Netscape Navigator 4.x must be located on a mapped network drive.


Registering the Online Help

UPGRADING GATEWAY SOFTWARE

Software upgrades for the Gateway include the software components that are upgraded for the new version and a utility to upload the software to the unit. This section describes how to upgrade the software.

Note If you need to perform an upgrade from version 2.x to version 3.x please see the Release Notes of the Gateway [gw-P25/M SP] version 3.1 for the relevant procedure.

Procedure1 Download the upgrade software to a host that can access the

Gateway.2 Unzip the upgrade file.3 Double-click the upgrade.exe file.

The RADVISION Software Upgrade Utility appears. 4 In the Target IP field, enter the IP address of the Gateway for

which you want to upload the software.5 In the User Name field, enter the software user name.

This is a global login name that the upload, upgrade, and Telnet utilities use to log in to the Gateway software. It can also be used to access the Gateway Administrator interface. The default user name is admin.

6 In the Password field, enter the software password.The default value is null.

Note To view the software components designed for an upgrade, click Customize. The Customize dialog box appears. If you do not want to upgrade a component, deselect t

3g gateway [gw-p25/m sp] - dekom · an ims-ready sip stack, supporting the up-to-date ietf and 3gpp...

Documents