acano server & vm release r1.9 h.323 gateway deployment guide ·...

36
Acano solution Acano Server & VM Release R1.9 H.323 Gateway Deployment Guide July 2016 76-1056-03-C

Upload: others

Post on 25-Jan-2020

20 views

Category:

Documents


0 download

TRANSCRIPT

Ac a n o s o lu t io n

A ca no S e rv e r & VM R e le a s e R 1 .9H . 3 2 3 G a te w a y De p l oym e nt G u i d e

Ju ly 2 01 6

7 6- 1 056- 03 - C

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 2

Conte nts

1 In t ro du c t i o n 4

1. 1 H o w t o Use t h i s Gu i de 5

1. 1. 1 Co mman ds 6

2 H . 323 Gat ew ay Co n fi gu rat i o n 7

2. 1 Ov erv i ew 7

2. 1. 1 P rerequ i si t es 8

2. 2 H . 323 Gat ew ay c o n fi gu rat i o n 10

2. 3 Cal l Bri dge o u t bo u n d di al pl an ru l e c o n fi gu rat i o n 12

2. 4 Co n fi gu ri n g IP di al i n g 14

3 Cal l T est i n g 15

3. 1 In bo u n d c al l fro m an H . 323 en dpo i n t regi st ered t o an H . 323 Gat ew ay 15

3. 2 In bo u n d c al l fro m an u n regi st ered H . 323 en dpo i n t by di al i n g an IP address 17

3. 3 In bo u n d c al l fro m an u n regi st ered H . 323 en dpo i n t by di al i n g < spac e_u ri > @IP address 19

3. 4 Ou t bo u n d c al l t o a regi st ered H . 323 en dpo i n t 20

3. 5 Ou t bo u n d c al l t o an u n regi st ered H 323 en dpo i n t by di al i n g an IP address( c al l ro u t ed w i t h H . 323 Gat ek eeper) 22

3. 6 Ou t bo u n d c al l t o an u n regi st ered H 323 en dpo i n t by di al i n g an IP address( c al l ro u t ed w i t h o u t H . 323 Gat ek eeper) 24

3. 7 Cal l i n g n o n Ac an o u sers fro m H . 323 en dpo i n t 26

4 T ro u bl esh o o t i n g T i ps 29

Appen di x A S IP Cal l Co n t ro l Co n fi gu rat i o n 30

Appen di x B Assi gn i n g a c ert i fi c at e/pri v at e k ey pai r t o t h e H . 323 Gat ew ay 31

Appen di x C H . 323 Gat ew ay address h an dl i n g fo r o l der gat ek eepers 32

Appen di x D H . 323 Gat ew ay M M P c o mman ds 34

Fi g ur es:

Fi gu re 1: E x ampl e si n gl e c o mbi n ed Ac an o serv er depl o y men t w i t h H . 323 Gat ew ay . 4

Fi gu re 2: Ov erv i ew o f gu i des c o v eri n g t h e Ac an o S o l u t i o n 6

Fi gu re 3: In c o mi n g an d o u t go i n g H . 323 c al l s w i t h H . 323 Gat ew ay 7

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 3

Fi gu re 4: H . 323 Gat ew ay w i t h H . 323 Gat ek eeper 8

Fi gu re 5: Co n fi gu rat i o n fo r H . 323 Gat ew ay w i t h H . 323 Gat ek eeper 10

Fi gu re 6: Ou t pu t fro m h 323_ gat ew ay c o mman d 12

Fi gu re 7: Web Admi n In t erfac e sh o w i n g Ou t bo u n d di al pl an w i t h mat c h al ldo mai n s 13

Fi gu re 8: Web Admi n In t erfac e sh o w i n g Ou t bo u n d di al pl an w i t h mat c h do mai n@h 323. c o m 13

Fi gu re 9: Cal l Fl o w fo r In bo u n d Cal l fro m R egi st ered H . 323 E n dpo i n t 16

Fi gu re 10: Web Admi n In t erfac e sh o w i n g ac t i v e c al l 16

Fi gu re 11: Ci sc o VCS sh o w i n g c al l st at u s 17

Fi gu re 12: Cal l fl o w fo r i n bo u n d c al l fro m u n regi st ered H . 323 en dpo i n t 18

Fi gu re 13: Web Admi n In t erfac e sh o w i n g ac t i v e c al l 18

Fi gu re 14: Creat i n g a Cal l mat c h i n g ru l e 19

Fi gu re 15: Web Admi n In t erfac e sh o w i n g ac t i v e c al l 20

Fi gu re 16: Cal l fl o w fo r o u t bo u n d c al l t o a regi st ered H . 323 en dpo i n t 20

Fi gu re 17: Web Admi n In t erfac e sh o w i n g ac t i v e c al l 21

Fi gu re 18: Ci sc o VCS sh o w i n g c al l st at u s 21

Fi gu re 19: Ci sc o VCS D i al pl an c o n fi gu rat i o n page 22

Fi gu re 20: Cal l fl o w fo r o u t bo u n d c al l t o an u n regi st ered H . 323 en dpo i n t by di al i n gan IP address 23

Fi gu re 21: Web Admi n In t erfac e sh o w i n g ac t i v e c al l 24

Fi gu re 22: Ci sc o VCS sh o w i n g c al l st at u s 24

Fi gu re 23: Cal l Fl o w fo r Ou t bo u n d Cal l t o a Un regi st ered H . 323 E n dpo i n t 25

Fi gu re 24: Web Admi n In t erfac e sh o w i n g ac t i v e c al l 26

Fi gu re 25: Cal l fl o w fro m H . 323 en dpo i n t t o n o n Ac an o u ser 27

Fi gu re 26: Web Admi n In t erfac e sh o w i n g ac t i v e c al l 27

Fi gu re 27: Ci sc o VCS sh o w i n g Cal l S t at u s 28

Fi gu re 28: Addi n g t h e do mai n t o t h e so u rc e address 32

Fi gu re 29: R emo v i n g t h e do mai n fo r c al l bac k 33

1   Intr oduction

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 4

1 I ntrod u c ti on

N o t e: c o S pac e h as been ren amed spac e. T h i s do c u men t h as been c h an ged t o u si n gspac e, ex c ept w h ere i t refers t o c o S pac e AP I o bj ec t s.

Fro m R 1. 7, t h e Ac an o serv er i n c l u des a n ew H . 323 Gat ew ay . T h i s gat ew ay i s desi gn edt o be u sed o n l y w i t h t h e Ac an o Cal l Bri dge, as sh o w n bel o w . On c e t h e c al l reac h es t h eCal l Bri dge i t i s pro c essed ac c o rdi n g t o t h e n o rmal di al pl an ru l es. Ou t go i n g c al l s fro mt h e Cal l Bri dge dev i c es c an al so be made t o H . 323 dev i c es. If t h e c al l i s i n t o an Ac an ospac e t h en i t st o ps at t h e Cal l Bri dge.

F igu r e 1 : E x am ple s ingle c om bined Ac ano s er v er deploym ent with H.323 G ateway .

T h i s gu i de c o v ers o n e o f t h e rec o mmen ded depl o y men t s ( a si n gl e c o mbi n ed serv er w i t ht h e Ac an o H . 323 Gat ew ay en abl ed o n t h e same Ac an o serv er as t h e Cal l Bri dge) – assh o w n abo v e.

T h e Ac an o serv er c an be an Ac an o X3, X2 o r X1 serv er, o r be h o st ed o n v i rt u al mac h i n es( VM ) ; t h e t erm “Ac an o serv er” i n t h i s do c u men t c o v ers bo t h .

In a spl i t depl o y men t w e rec o mmen d depl o y i n g t h e H . 323 Gat ew ay as a Co rec o mpo n en t , t o en su re t h ere i s n o fi rew al l bet w een t h e H . 323 Gat ew ay an d t h e Cal lBri dge. T y pi c al l y , t h e H . 323 Gat ew ay w i l l be depl o y ed o n t h e same Ac an o serv er as t h eCal l Bri dge. H o w ev er, t h e H . 323 Gat ew ay may be depl o y ed o n a separat e c o re serv er t ot h e Cal l Bri dge, w h i c h i s u sefu l fo r t est pu rpo ses.  

In a sc al abl e & resi l i en t depl o y men t y o u c o u l d en abl e o n e H . 323 Gat ew ay per Cal lBri dge, agai n ei t h er o n t h e same o r separat e Ac an o serv ers.

T h e c o mman ds t o c o n fi gu re an d en abl e an Ac an o H . 323 Gat ew ay are t h e same i n al ldepl o y men t s. Fro m R 1. 8, t h e IP address fo r t h e H . 323 Gat ew ay t o c o n n ec t , di ffers i f

1   Intr oduction

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 5

t h e Cal l Bri dge an d t h e H . 323 Gat ew ay are o n t h e same h o st , c o mpared t o t h em bei n go n di fferen t h o st s, see sec t i o n 2. 2, st ep 6.

N o t e: Fro m R 1. 8, a c ert i fi c at e i s requ i red o n eac h H . 323 Gat ew ay . T h e c ert i fi c at e c anbe si gn ed by an i n t ern al CA. Fo l l o w t h e st eps i n Appen di x B t o assi gn ac ert i fi c at e/pri v at e k ey pai r t o t h e H . 323 Gat ew ay .

1 . 1 H ow to Use thi s Gui d e

T h i s gu i de fo l l o w s o n fro m t h e appro pri at e D epl o y men t Gu i de ( see Fi gu re 2 ) . Itassu mes t h at y o u h av e al ready c o mpl et ed t h e i n st ru c t i o n s w i t h i n t h e depl o y men tgu i de. On l y u se t h i s gu i de i f y o u w an t t h e Ac an o so l u t i o n t o ac c ept c al l s fro m H . 323en dpo i n t s an d be abl e t o c al l o u t t o t h em.

T h i s H . 323 Gat ew ay depl o y men t gu i de i s i n t en ded t o be read an d ac t ed u po n i n t h eo rder pro v i ded. A fu l l l i st o f H . 323 c o mman ds i s pro v i ded i n t h e M M P Co mman dR eferen c e gu i de.

In addi t i o n t o t h i s depl o y men t gu i de, t h e referen c e mat eri al sh o w n i n t h e fi gu re bel o wc an be fo u n d at t h e Ac an o S u ppo rt D o c u men t at i o n page. If y o u n eed an y t ec h n i c alassi st an c e w i t h t h e c o n fi gu rat i o n , o r y o u w an t t o repo rt a su spec t ed bu g, emai lsu ppo rt @ac an o . c o m.

1   Intr oduction

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 6

F igu r e 2: Ov er v iew of gu ides c ov er ing the Ac ano S olu tion

1 .1 .1 Co mma n d s

In t h i s do c u men t , c o mman ds are sh o w n i n black an d mu st be en t ered as gi v en —repl ac i n g an y paramet ers i n < > brac k et s w i t h y o u r appro pri at e v al u es. E x ampl es aresh o w n i n blue an d mu st be adapt ed t o y o u r depl o y men t .

2   H.3 2 3 G ate way Configur ation

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 7

2 H . 3 2 3 G a te w a y Conf i gu ra ti on

2. 1 O v er v i ew

T h e H . 323 Gat ew ay i s a Co re c o mpo n en t an d t h e rec o mmen ded depl o y men t i s t odepl o y i t o n t h e same serv er as t h e Cal l Bri dge. H o w ev er, t h e H . 323 Gat ew ay c an been abl ed o n a separat e Co re serv er.

T h e H . 323 Gat ew ay l i st en s o n a mi n i mu m o f t w o po rt s:

l Fo r H . 323 i n c o mi n g c al l s t o be i n t erw o rk ed t o S IP fo r fo rw ardi n g t o t h e Cal lBri dge

l Fo r S IP i n c o mi n g c al l s fro m t h e Cal l Bri dge t o be i n t erw o rk ed t o H . 323 befo rebei n g fo rw arded

We rec o mmen d t h at t h e H . 323 Gat ew ay l i st en s o n t h e same i n t erfac e as t h e Cal lBri dge ( bu t o n di fferen t po rt n u mbers) an d i s u sed t o l i st en fo r bo t h S IP an d H . 323c al l s, see Fi gu re 3

F igu r e 3: I nc om ing and ou tgoing H.323 c alls with H.323 G ateway

Fo r ex t ern al o u t go i n g c al l s fro m t h e gat ew ay , w e rec o mmen d t h at t h e H . 323 c al l s arefo rw arded t o a H . 323 Gat ek eeper ( see Fi gu re 4) t h at deal s w i t h ro u t i n g e. g. u si n g di alpl an ru l es.

N o t e: t h e H . 323 Gat ew ay su ppo rt s a si n gl e n ex t h o p. Use t h e H . 323 Gat ek eeper’ sn ei gh bo ri n g feat u re t o al l o w t h e H . 323 Gat ew ay t o reac h mu l t i pl e gat ek eepers.

2   H.3 2 3 G ate way Configur ation

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 8

F igu r e 4 : H.323 G ateway with H.323 G atekeeper

In o rder t o ac c ept c al l s fro m H . 323 en dpo i n t s an d mak e c al l s t o t h em, t h e Cal l Bri dgemu st be c o n fi gu red t o u se t h e H . 323 Gat ew ay as t h e dest i n at i o n fo r o u t go i n g c al l s v i at h e Ou t bo u n d di al pl an , an d t h e H . 323 Gat ew ay mu st be c o n fi gu red t o fo rw ard S IPc al l s t o a Cal l Bri dge.

T h i s sec t i o n pro v i des ex ampl e c o n fi gu rat i o n s fo r t h e rec o mmen ded depl o y men t t h atmu st be adapt ed t o y o u r t o po l o gy .

N o t e: Fro m R 1. 8 t h ere are i mpro v emen t s i n t h e w ay t h at t h e H . 323 Gat ew ay h an dl eso u t go i n g an d i n c o mi n g di al pl an s fo r l egac y gat ek eepers an d en dpo i n t s.

S o me o l d H . 323 gat ek eepers do n o t pro v i de t h e do mai n i n dest i n at i o n addresses fo ro u t go i n g c al l s, an d c an n o t h an dl e a do mai n fo r i n c o mi n g c al l s. T h ese gat ek eeperssu ppl y an d requ i re an E . 164 address o r H . 323 i d fo r t h e address. Fro m R 1. 8 t h ere aren ew c o mman ds t o su ppo rt t h ese dev i c es, see Appen di x C fo r mo re det ai l s.

2 .1 .1 P r e r e q u is ite s

T h e i n st ru c t i o n s i n t h i s sec t i o n assu me t h at t h e o t h er c o mpo n en t s o f t h e Ac an oso l u t i o n h av e been set an d are ru n n i n g.

2   H.3 2 3 G ate way Configur ation

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 9

n T h e po rt s i n T abl e 1 are requ i red by t h e H . 323 Gat ew ay ( see Fi gu re 5) .

Table 1 : P or ts r equ ir ed by H.323 G ateway

Compone ntConne ctingto

D e s tinationpor t toope n Tr affic type

Tr afficdir e ctionwith r e s pe cttocompone nt

Links hown inF igur e 5

A dditionalinfor mation

Call Br idge H.3 2 3G ate way

6 0 6 1 TCP ( SIP ) Outgoing 6 P or tconfigur ablethr ough MMP

H.3 2 3G ate way

H.3 2 3G ate ke e pe r

17 2 0 TCP( H.2 2 5 )

Incoming 2 P or t notconfigur able

por t onH.3 2 3G ate ke e pe rfor ne xthop

TCP( H.2 2 5 )

Outgoing 3

H.3 2 3G ate way

H.3 2 3G ate ke e pe r

10 2 4 -6 5 5 3 5( note 1)

TCP( H.2 4 5 )

Incoming 2 P or t notconfigur able

por t onH.3 2 3G ate ke e pe rfor ne xthop

TCP( H.2 4 5 )

Outgoing 3

H.3 2 3G ate way

H.3 2 3r e gis te r e de ndpoint

3 2 7 6 8 -6 5 5 3 5( note 2 )

UD P me dia Incoming andoutgoing

1

n T h e H . 323 Gat ew ay pro v i des n o fi rew al l t rav ersal fu n c t i o n al i t y .

l T h e H . 323 c al l c o n t ro l dev i c e t h at an y o f y o u r H . 323 en dpo i n t s are regi st eredt o , mu st pro v i de fi rew al l t rav ersal fu n c t i o n al i t y , an d be c o n fi gu red t ofo rw ard c al l s t o t h e H . 323 Gat ew ay . S ee t h e appen di x fo r an ex ampl e u si n gt h e Ci sc o VCS .

l Un regi st ered H . 323 en dpo i n t s mu st u se IP di al i n g t o reac h t h e H . 323Gat ew ay . S ee sec t i o n " H . 323 Gat ew ay Co n fi gu rat i o n " o n page 7.

2   H.3 2 3 G ate way Configur ation

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 1 0

2. 2 H . 323 Ga tew a y c onfi g ur a ti on

F igu r e 5 : Conf igu r ation f or H.323 G ateway with H.323 G atekeeper

Fo l l o w t h ese st eps t o c o n fi gu re an d en abl e t h e H . 323 Gat ew ay c o mpo n en t o n t h eappro pri at e Ac an o serv er. If y o u r depl o y men t do es n o t u se an H . 323 Gat ek eeper, o mi tst ep 5.

1. S S H i n t o t h e M M P an d l o g i n .

2. Co n fi gu re t h e i n t erfac es t h at t h e H . 323 Gat ew ay l i st en s o n fo r i n c o mi n g H . 323c al l s ( c al l fl o w n u mber 2 i n Fi gu re 5) .

T h e c o mman d h323_gateway h323_interfaces <interface whitelist>al l o w s y o u t o c o n fi gu re t h e i n t erfac es t h at t h e H . 323 Gat ew ay l i st en s fo r H . 323t raffi c o n ( c h o sen fro m A, B, C o r D ) . By defau l t t h e H . 323 Gat ew ay l i st en s o n n oi n t erfac es. Fo r ex ampl e, c o n fi gu re t h e h 323_ i n t erfac es t o l i st en o n i n t erfac e A,en t er:

h323_gateway h323_interfaces a

3. Co n fi gu re t h e i n t erfac es t h at t h e gat ew ay l i st en s o n fo r i n c o mi n g S IP c al l s fro mt h e Cal l Bri dge ( c al l fl o w n u mber 6 i n Fi gu re 5) .

T h e c o mman d h323_gateway sip_interfaces <interface whitelist>al l o w s y o u t o c o n fi gu re t h e l i st en i n g i n t erfac es ( fo r 1. 7. 0 t h i s i s i n t erfac e A) . Bydefau l t t h e si p_ i n t erfac es l i st en s o n n o i n t erfac es.

Fo r ex ampl e, c o n fi gu re t h e si p i n t erfac e t o l i st en o n i n t erfac e A

h323_gateway sip_interfaces a

2   H.3 2 3 G ate way Configur ation

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 1 1

4. Co n fi gu re t h e po rt s fo r t h e S IP i n t erfac e t o l i st en o n ( c al l fl o w n u mber 6 i n Fi gu re5) . By defau l t t h e H . 323 Gat ew ay u ses 6061.

h323_gateway sip_port 6061

N o t e: i f y o u w i sh t o c h an ge t h e defau l t po rt fro m 6061, an d i f t h e H . 323 Gat ew ayan d Cal l Bri dge are o n t h e same serv er, mak e su re y o u av o i d po rt 5061 w h i c h i su sed by t h e Cal l Bri dge.

5. Co n fi gu re t h e H . 323 Gat ek eeper’ s ( c al l c o n t ro l ’ s) h o st n ame o r IP address ( c al lfl o w n u mber 3 i n Fi gu re 5) .

T h e H . 323 Gat ew ay w i l l c o n n ec t t o t h i s IP address fo r al l o u t go i n g H . 323 c al l s an dl et t h e c al l c o n t ro l dev i c e h an dl e t h e ro u t i n g.

Fo r ex ampl e, i f t h e gat ek eeper i n t h e fi gu re abo v e i s at IP address 192. 168. 1. 110

h323_gateway h323_nexthop 192.168.1.110

N o t e: o mi t t h i s st ep, i f y o u r depl o y men t do es n o t u se an H . 323 Gat ek eeper.

6. Co n fi gu re t h e Cal l Bri dge IP address ( c al l fl o w n u mber 5 i n Fi gu re 5) .

7. T h e H . 323 Gat ew ay w i l l c o n n ec t t o t h i s IP address fo r al l o u t go i n g S IP c al l s an dl et t h e Cal l Bri dge h an dl e t h e ro u t i n g v i a i t s di al pl an . Fro m R 1. 8, i f t h e Cal l Bri dgean d t h e H . 323 Gat ew ay are o n t h e same h o st t h en y o u mu st u se IP address127. 0. 0. 1.

l If Cal l Bri dge an d H . 323 Gat ew ay o n t h e same h o st , u se:

h323_gateway sip_proxy 127.0.0.1

l If t h e Cal l Bri dge an d H . 323 Gat ew ay are o n t h e di fferen t h o st s t h en set t h eIP address t o be t h e address o f t h e Cal l Bri dge, w h i c h mu st be reac h abl efro m t h e H . 323 Gat ew ay .

E x ampl e o f Cal l Bri dge an d H . 323 Gat ew ay o n t h e di fferen t h o st s, t h e IPaddress o f t h e Cal l Bri dge bei n g 192. 168. 6. 25

h323_gateway sip_proxy 192.168.6.25

8. E n abl e t h e H . 323 Gat ew ay c o mpo n en t .

h323_gateway enable

Use t h e c o mman d h323_gateway t o c h ec k t h e c o n fi gu rat i o n . A t y pi c al o u t pu t i ssh o w n i n Fi gu re 6.

2   H.3 2 3 G ate way Configur ation

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 1 2

F igu r e 6 : Ou tpu t f r om h323_gateway c om m and

Fro m R 1. 8, a c ert i fi c at e i s requ i red o n eac h H . 323 Gat ew ay . T h e c ert i fi c at e c an besi gn ed by an i n t ern al CA. Fo l l o w t h e st eps i n Appen di x B t o gen erat e t h e pri v at e k eyan d si gn ed c ert i fi c at e, t h en u pl o ad t o eac h H . 323 Gat ew ay .

2. 3 Ca l l Br i d g e outb ound d i a l p l a n r ul e c onfi g ur a ti on

Fo l l o w t h ese st eps t o di v ert al l o u t bo u n d c al l s t h ro u gh t h e H . 323 Gat ew ay . Yo u n eedt o c reat e an Ou t bo u n d di al pl an ru l e fo r t h e Cal l Bri dge.

1. S i gn i n t o t h e Ac an o serv er’ s Web Admi n In t erfac e.

2. Co mpl et e t h e fo l l o w i n g fi el ds:

Domain: M at c h al l do mai n s i . e. l eav e empt y ( see bel o w ) .

SIP Proxy to Use: The SIP interface of the H.323 Gateway

N o t e: i f t h e H . 323 Gat ew ay an d Cal l Bri dge are o n t h e same h o st t h en u se IPaddress 127. 0. 0. 1: 6061. If t h ey are o n di fferen t h o st s, t h en u se o n e o f t h e ex t ern ali n t erfac es t h at t h e Cal l Bri dge i s l i st en i n g o n .

N o t e: T h e Ac an o Ou t bo u n d di al pl an ru l e defau l t s t o u si n g po rt 5061, i f n o tspec i fi ed. Yo u n eed t o c h an ge t h i s t o mat c h t h e po rt u sed by t h e S IP i n t erfac e o ft h e H . 323 Gat ew ay , w h i c h defau l t s t o 6061.

Encryption: E n c ry pt ed

2   H.3 2 3 G ate way Configur ation

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 1 3

F igu r e 7: W eb Adm in I nter f ac e s howing Ou tbou nd dial plan with m atc h all dom ains

T o di v ert c al l s w i t h a spec i fi c dest i n at i o n do mai n t h ro u gh t h e H . 323 Gat ew ay , c reat ean Ou t bo u n d di al pl an ru l e fo r t h e Cal l Bri dge as fo l l o w s:

1. S i gn i n t o t h e Ac an o serv er’ s Web Admi n In t erfac e .

2. S el ec t Co n fi gu rat i o n > Ou t bo u n d c al l s.

3. Co mpl et e t h e fo l l o w i n g fi el ds:

l D o mai n : T h e dest i n at i o n do mai n . In t h e ex ampl e bel o w , t h e do mai n i s@h 323. c o m. Al l c al l s t o < an y t h i n g> @h 323. c o m w i l l be di v ert ed t h ro u gh t h eH . 323 Gat ew ay .

l S IP P ro x y t o Use: S pec i fy t h e S IP i n t erfac e o f t h e H . 323 Gat ew ay .   If t h e H . 323Gat ew ay an d Cal l Bri dge are o n t h e same h o st t h en u se IP address127. 0. 0. 1: 6061. If t h ey are o n di fferen t h o st s, t h en u se o n e o f t h e ex t ern ali n t erfac es t h at t h e Cal l Bri dge i s l i st en i n g o n .

N o t e: T h e Ac an o Ou t bo u n d di al pl an ru l e defau l t s t o u si n g po rt 5061, i f n o tspec i fi ed. Yo u n eed t o c h an ge t h i s t o mat c h t h e po rt u sed by t h e S IP i n t erfac eo f t h e H . 323 Gat ew ay , w h i c h defau l t s t o 6061.

l E n c ry pt i o n : E n c ry pt ed

F igu r e 8: W eb Adm in I nter f ac e s howing Ou tbou nd dial plan with m atc h dom ain @h323.c om

N o t e: t h e H . 323 Gat ew ay c an n o t mo di fy t h e di al ed address. If y o u requ i re di al edaddresses t o be mo di fi ed, t h en y o u w i l l n eed t o u se an H . 323 Gat ek eeper i n y o u rdepl o y men t t h at i s c apabl e o f mo di fy i n g di al ed addresses.

2   H.3 2 3 G ate way Configur ation

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 1 4

2. 4 Confi g ur i ng IP d i a l i ng

IP di al i n g i s requ i red w h en t h ere i s n o H . 323 Gat ek eeper i . e. H . 323 en dpo i n t s are n o tregi st ered t o a c al l c o n t ro l so l u t i o n , an d c al l s are made by IP address.

Fo r IP di al i n g t o w o rk fo r c al l s fro m bo t h i n t ern al an d ex t ern al H . 323 en dpo i n t s, u set h e H . 323 Gat ew ay as a Co re c o mpo n en t as abo v e bu t add a sec o n d l i st en i n g i n t erfac efo r t h e ex t ern al c al l s e. g. o n i n t erfac e B.

Fo r IP di al i n g, w e assu me t h at i n c o mi n g c al l s are i n o n e o f t h e fo l l o w i n g fo rmat s:

n IP address – w h i c h n eeds t o be mapped o n t o a UR I by t h e H . 323 Gat ew ay .T h erefo re c o n fi gu re t h e defau l t UR I fo r i n c o mi n g H . 323 c al l s w i t h o u t a dest i n at i o n .T h i s c al l c an be di v ert ed t o a spac e, an Ac an o u ser o r an Ac an o IVR .

Fo r ex ampl e, i n t h e M M P , set t h e defau l t UR I t o an IVR :

h323_gateway default_uri [email protected]

n u ser@IP address – w h i c h i s pro c essed by t h e Cal l Bri dge In c o mi n g di al pl an ru l es;c an be a spac e, Ac an o u ser o r ev en an ex t ern al u ser. N o t e t h at t h e In c o mi n g di alpl an ru l es mat c h t o t h e UR I n o t t o a c al l ID .

u ser@do mai n – w h i c h i s pro c essed by t h e Cal l Bri dge In c o mi n g di al pl an ru l es; c anbe a spac e, Ac an o u ser o r ev en an ex t ern al u ser. .

N o t e: set c al l mat c h i n g fo r < IP address> o r t h e < do mai n > o n t h e Web Admi nIn t erfac e.

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 1 5

3 Ca l l Te sti ngD epen di n g o n t h e t y pe o f c al l ( s) o r meet i n gs y o u i n t en d t o h av e, read an d fo l l o w t h eex ampl e( s) i n t h e appro pri at e sec t i o n ( s) .

l " In bo u n d c al l fro m an H . 323 en dpo i n t regi st ered t o an H . 323 Gat ew ay " bel o w

l " In bo u n d c al l fro m an u n regi st ered H . 323 en dpo i n t by di al i n g an IP address" o npage 17

l " In bo u n d c al l fro m an u n regi st ered H . 323 en dpo i n t by di al i n g < spac e_ u ri > @IPaddress" o n page 19

l " Ou t bo u n d c al l t o a regi st ered H . 323 en dpo i n t " o n page 20

l " Ou t bo u n d c al l t o an u n regi st ered H 323 en dpo i n t by di al i n g an IP address ( c al lro u t ed w i t h H . 323 Gat ek eeper)" o n page 22

l " Ou t bo u n d c al l t o an u n regi st ered H 323 en dpo i n t by di al i n g an IP address ( c al lro u t ed w i t h o u t H . 323 Gat ek eeper)" o n page 24

l " Cal l i n g n o n Ac an o u sers fro m H . 323 en dpo i n t " o n page 26

N o t e: as H . 323 si gn al i n g i s u n en c ry pt ed, y o u c an u se pc ap t o o bt ai n an H . 323 t rac e. Inaddi t i o n , t h e M M P c o mman d h323_gateway trace_level <level> pro v i desaddi t i o n al l o ggi n g t o ai d t ro u bl esh o o t i n g by Ac an o su ppo rt . Yo u may be ask ed t opro v i de t rac es fo r l ev el s 0, 1 o r 2.

Fro m R 1. 8 t h ere are i mpro v emen t s i n t h e w ay t h at t h e H . 323 Gat ew ay h an dl eso u t go i n g an d i n c o mi n g di al pl an s fo r l egac y gat ek eepers an d en dpo i n t s.

S o me o l d H . 323 gat ek eepers do n o t pro v i de t h e do mai n i n dest i n at i o n addresses fo ro u t go i n g c al l s, an d c an n o t h an dl e a do mai n fo r i n c o mi n g c al l s. T h ese gat ek eeperssu ppl y an d requ i re an E . 164 address o r H . 323 i d fo r t h e address. Fro m R 1. 8 t h ere aren ew c o mman ds t o su ppo rt t h ese dev i c es, see " H . 323 Gat ew ay address h an dl i n g fo ro l der gat ek eepers " o n page 32 fo r mo re det ai l s.

3. 1 Inb ound c a l l fr om a n H . 323 end p oi nt r eg i ster ed to a n H . 323Ga tew a y

E x ampl e set u p:

n Cal l i n g part y ’ s H . 323 en dpo i n t al i as: h 323@h 323. c o m

n D i al i n g spac e UR I: ex ampl e. c o spac e@ex ampl e. c o m

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 1 6

F igu r e 9 : Call F low f or I nbou nd Call f r om Regis ter ed H.323 E ndpoint

Wh ere:

( 1) i s an H . 323 c al l t o ex ampl e. c o spac e@ex ampl e. c o m

( 2) i s an H . 323 c al l t o ex ampl e. c o spac e@ex ampl e. c o m

( 3) i s a S IP c al l t o ex ampl e. c o spac e@ex ampl e. c o m

N o t e: Fro m t h e Cal l Bri dge's po i n t o f v i ew , t h i s i s an i n c o mi n g S IP c al l fro m t h e H . 323Gat ew ay .

Aft er t h e c al l h as c o n n ec t ed, c h ec k t h e c al l st at u s i n t h e Web Admi n In t erfac e ( seeFi gu re 10)

F igu r e 1 0: W eb Adm in I nter f ac e s howing ac tiv e c all

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 1 7

T h e c al l st at u s o n t h e H . 323 Gat ek eeper, w h i c h i n t h i s ex ampl e i s a Ci sc o VCS , sh o w s i tas a H . 323 c al l ( see Fi gu re 11) . T h e Ac an o H . 323 Gat ew ay perfo rms t h e i n t erw o rk i n g.

F igu r e 1 1 : Cis c o VCS s howing c all s tatu s

3. 2 Inb ound c a l l fr om a n unr eg i ster ed H . 323 end p oi nt b y d i a l i ng a nIP a d d r ess

P rerequ i si t e:

n S et u p an IVR

n S et u p spac e w i t h c al l ID “123456”

N o t e: By c h an gi n g t h e defau l t UR I t o an Ac an o IVR UR I, aft er t h e i n c o mi n g c al l i sc o n n ec t ed, u sers c an en t er a spac e’ s Cal l ID t o j o i n a spec i fi c spac e.

n Fo r IP di al i n g t o w o rk fo r c al l s fro m bo t h i n t ern al an d ex t ern al H . 323 en dpo i n t s, u set h e H . 323 Gat ew ay as a Co re c o mpo n en t bu t add a sec o n d l i st en i n g i n t erfac e fo rt h e ex t ern al c al l s e. g. o n i n t erfac e B.

h323_gateway h323_interfaces a b

N o t e: t h e H . 323 Gat ew ay c an n o t t rav erse N AT o r fi rew al l s. T h e sec o n d l i st en i n gi n t erfac e fo r ex t ern al c al l s mu st be i n t ern et fac i n g w i t h a pu bl i c IP address.

E x ampl e set u p:

n Cal l i n g part y ’ s u n regi st ered H . 323 en dpo i n t n ame: Bri an . ex 60

n D i al i n g: 192. 168. 1. 91

w h ere 192. 168. 1. 91 i s t h e c al l ed part y ’ s H . 323 Gat ew ay l i st en i n g i n t erfac e

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 1 8

F igu r e 1 2: Call f low f or inbou nd c all f r om u nr egis ter ed H.323 endpoint

Wh ere:

( 1) 3 c al l t o 192. 168. 1. 91

( 2) i s a S IP c al l t o h 323i v r@ex ampl e. c o m

( 3) i s a D T M F en t ry o f ID “123456”

Aft er t h e c al l h as c o n n ec t ed, c h ec k t h e c al l st at u s i n t h e Web Admi n In t erfac e ( seeFi gu re 13) .

F igu r e 1 3: W eb Adm in I nter f ac e s howing ac tiv e c all

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 1 9

3. 3 Inb ound c a l l fr om a n unr eg i ster ed H . 323 end p oi nt b y d i a l i ng<sp a c e_ ur i >@IP a d d r ess

P rerequ i si t e:

n Creat e a c al l mat c h i n g ru l e t o mat c h t h e do mai n “192. 168. 1. 91”.

F igu r e 1 4 : Cr eating a Call m atc hing r u le

n Fo r IP di al i n g t o w o rk fo r c al l s fro m bo t h i n t ern al an d ex t ern al H . 323 en dpo i n t s,u se t h e H . 323 Gat ew ay as a Co re c o mpo n en t bu t add a sec o n d l i st en i n g i n t erfac efo r t h e ex t ern al c al l s e. g. o n i n t erfac e B

h323_gateway h323_interfaces a b

N o t e: t h e H . 323 Gat ew ay c an n o t t rav erse N AT o r fi rew al l s. T h e sec o n d l i st en i n gi n t erfac e fo r ex t ern al c al l s mu st be i n t ern et fac i n g w i t h a pu bl i c IP address.

E x ampl e set u p:

n Cal l i n g part y ’ s u n regi st ered H . 323 en dpo i n t n ame: ex ampl e. M XP

n D i al i n g: ex ampl e. c o spac e@192. 168. 1. 91

w h ere 192. 168. 1. 91 i s t h e c al l ed part y ’ s H . 323 Gat ew ay l i st en i n g i n t erfac e.

Aft er t h e c al l h as c o n n ec t ed, c h ec k t h e c al l st at u s i n t h e Web Admi n In t erfac e ( seeFi gu re 15) .

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 20

F igu r e 1 5 : W eb Adm in I nter f ac e s howing ac tiv e c all

3. 4 O utb ound c a l l to a r eg i ster ed H . 323 end p oi nt

P rerequ i si t e:

n Creat e a di al pl an ru l e

E x ampl e set u p:

n Cal l i n g part y ’ s Ac an o u ser UR I: ac an o u ser1@ex ampl e. c o m

n D i al i n g: h 323@h 323. c o m

w h ere h 323@h 323. c o m i s t h e c al l ed part y ’ s H . 323 en dpo i n t .

F igu r e 1 6 : Call f low f or ou tbou nd c all to a r egis ter ed H.323 endpoint

Wh ere:

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 21

( 1) i s an Ac an o c al l t o h 323@h 323. c o m

( 2) i s a S IP c al l

( 3) i s an H 323 c al l

( 4) i s an H 323 c al l

Aft er t h e c al l h as c o n n ec t ed c h ec k t h e st at u s i n t h e Web Admi n In t erfac e ( see Fi gu re17) .

F igu r e 1 7: W eb Adm in I nter f ac e s howing ac tiv e c all

T h e c al l st at u s o n t h e H . 323 Gat ek eeper, i n t h i s ex ampl e i t ’ s a Ci sc o VCS , sh o w s i t asan H . 323 c al l ( see Fi gu re 18) . T h e Ac an o H . 323 Gat ew ay perfo rms t h e i n t erw o rk i n g.

F igu r e 1 8: Cis c o VCS s howing c all s tatu s

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 22

3. 5 O utb ound c a l l to a n unr eg i ster ed H 323 end p oi nt b y d i a l i ng a n IPa d d r ess ( c a l l r outed w i th H . 323 Ga tek eep er )

N o t e: i n t h i s sc en ari o , t h e H . 323 en dpo i n t i s u n regi st ered, bu t an H . 323 Gat ek eeperro u t es t h e c al l .

P rerequ i si t e:

n D ec i de o n w h i c h di al pl an ru l e t o u se, defau l t ru l e o r a c u st o m ru l e

n On t h e H . 323 Gat ek eeper ( i n t h i s ex ampl e t h i s i s a Ci sc o VCS ) , i n t h e D i al pl anc o n fi gu rat i o n set t h e ‘ Cal l s t o Un k n o w n IP Addresses’ t o D i rec t ( see Fi gu re 19)an d en su re t h at t h e H . 323 Gat ek eeper c an reac h t h e en dpo i n t t h at y o u aredi al i n g.

F igu r e 1 9 : Cis c o VCS D ial plan c onf igu r ation page

n Fo r IP di al i n g t o w o rk fo r c al l s fro m bo t h i n t ern al an d ex t ern al H . 323 en dpo i n t s,u se t h e H . 323 Gat ew ay as a Co re c o mpo n en t bu t add a sec o n d l i st en i n g i n t erfac efo r t h e ex t ern al c al l s e. g. o n i n t erfac e B

h323_gateway h323_interfaces a b

E x ampl e set u p:

n Cal l i n g part y ’ s Ac an o u ser UR I: ac an o u ser1@ex ampl e. c o m

n D i al i n g: 192. 168. 1. 219

w h ere 19. 168. 1. 219 i s t h e c al l ed part y ’ s H . 323 en dpo i n t IP address

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 23

F igu r e 20: Call f low f or ou tbou nd c all to an u nr egis ter ed H.323 endpoint by dialing an I P addr es s

Wh ere:

( 1) Ac an o c al l t o 192. 168. 1. 219

( 2) S IP c al l

( 3) H 323 c al l

( 4) H 323 c al l

Wh en t h e c al l h as c o n n ec t ed, c h ec k t h e st at u s i n t h e Web Admi n In t erfac e ( see Fi gu re21)

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 24

F igu r e 21 : W eb Adm in I nter f ac e s howing ac tiv e c all

On t h e Ci sc o VCS , t h e c al l w i l l l o o k si mi l ar t o w h at i s seen i n Fi gu re 22.

F igu r e 22: Cis c o VCS s howing c all s tatu s

3. 6 O utb ound c a l l to a n unr eg i ster ed H 323 end p oi nt b y d i a l i ng a n IPa d d r ess ( c a l l r outed w i thout H . 323 Ga tek eep er )

N o t e: i n t h i s sc en ari o , t h e H . 323 en dpo i n t i s u n regi st ered, an d t h ere i s n o H . 323Gat ek eeper t o ro u t e t h e c al l s.

P rerequ i si t e:

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 25

n T h e h 323_ gat ew ay h 323_ n ex t h o p c o n fi gu rat i o n mu st be remo v ed i f prev i o u sl y set .Fo r ex ampl e:

a. S S H i n t o t h e M M P an d l o g i n .

b. R emo v e t h e h 323_ gat ew ay h 323_ n ex t h o p c o n fi gu rat i o n

h323_gateway del h323_nexthop

n Fo r IP di al i n g t o w o rk fo r c al l s fro m bo t h i n t ern al an d ex t ern al H . 323 en dpo i n t s,u se t h e H . 323 Gat ew ay as a Co re c o mpo n en t bu t add a sec o n d l i st en i n g i n t erfac efo r t h e ex t ern al c al l s e. g. o n i n t erfac e B

h323_gateway h323_interfaces a b

N o t e: t h e H . 323 Gat ew ay c an n o t t rav erse N AT o r fi rew al l s. T h e sec o n d l i st en i n gi n t erfac e fo r ex t ern al c al l s mu st be i n t ern et fac i n g w i t h a pu bl i c IP address.

E x ampl e set u p:

n Cal l i n g part y ’ s Ac an o u ser UR I: ac an o u ser1@ex ampl e. c o m

n D i al i n g: 192. 168. 1. 201

w h ere 192. 168. 1. 201 i s t h e IP address o f t h e c al l ed part y ’ s H . 323 en dpo i n t .

F igu r e 23: Call F low f or Ou tbou nd Call to a Unr egis ter ed H.323 E ndpoint

Wh ere:

( 1) i s an Ac an o c al l t o ex ampl e@ex ampl e. c o m

( 2) i s a S IP c al l

( 3) i s an H 323 c al l

Wh en t h e c al l h as c o n n ec t ed, c h ec k t h e st at u s i n t h e Web Admi n In t erfac e ( see " Cal lT est i n g" o n page 15) .

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 26

F igu r e 24 : W eb Adm in I nter f ac e s howing ac tiv e c all

3. 7 Ca l l i ng non Ac a no user s fr om H . 323 end p oi nt

It i s po ssi bl e t o c o n fi gu re t h e Cal l Bri dge di al pl an t o be abl e t o c al l L y n c o r S IP u sers.T h ese c al l s are t ran sc o ded by t h e Cal l Bri dge.

In t h i s ex ampl e bo t h t h e H . 323 Gat ew ay an d Cal l Bri dge ac t as a gat ew ay . It i sassu med t h at t h e Cal l Bri dge di al pl an al ready al l o w s fo rw ardi n g o f S IP c al l s t o L y n c .T h e H . 323 c al l i s i n t erw o rk ed i n t o a S IP c al l t o t h e Cal l Bri dge w h i c h t h en fo rw ards t h ec al l t o L y n c . In t h i s c ase t h e Cal l Bri dge h an dl es al l t ran sc o di n g o f medi a.

E x ampl e set u p:

n Cal l i n g part y ’ s regi st ered H 323 en dpo i n t al i as: h 323@h 323. c o m

n D i al i n g: l y n c u ser1. l y n c @ac an o . demo

w h ere l y n c u ser1. l y n c @ac an o . demo i s t h e L y n c address fo r t h e c al l ed

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 27

F igu r e 25 : Call f low f r om H.323 endpoint to non Ac ano u s er

Wh ere:

( 1) i s an H 323 c al l

( 2) i s an H 323 c al l

( 3) i s a S IP c al l

( 4) i s a L y n c c al l

Wh en t h e c al l h as c o n n ec t ed c h ec k t h e st at u s i n t h e Web Admi n In t erfac e ( see " Cal lT est i n g" o n page 15) .

F igu r e 26 : W eb Adm in I nter f ac e s howing ac tiv e c all

3   Call Te s ting

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 28

On t h e H . 323 Gat ek eeper, i n t h i s ex ampl e i t ’ s a Ci sc o VCS , t h e c al l w i l l l o o k si mi l ar t o" Cal l T est i n g" o n page 15.

F igu r e 27: Cis c o VCS s howing Call S tatu s

4   Tr ouble s hooting Tips

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 29

4 Trou b l e shooti ng Ti p sn Aft er c h an gi n g t h e c o n fi gu rat i o n o f t h e H . 323 Gat ew ay , t h e gat ew ay may n o t

w o rk as ex pec t ed. R ebo o t t h e Ac an o serv er t o so l v e t h e i ssu e.

n T h e Ac an o Ou t bo u n d di al pl an ru l e defau l t s t o u si n g po rt 5061, i f n o t spec i fi ed.Yo u n eed t o c h an ge t h i s t o mat c h t h e po rt u sed by t h e S IP i n t erfac e o f t h e H . 323Gat ew ay , w h i c h defau l t s t o 6061.

n T h ere i s a bu g i n t h e Ci sc o VCS so ft w are. S o met i mes t h e set t i n gs i n Z o n e >Cu st o m aren 't sav ed. Yo u may n eed t o del et e t h e z o n e an d st art agai n -remember t o u pdat e t h e di al pl an searc h ru l es t o mat c h .

n T h e M M P c o mman d h323_gateway trace_level <level> pro v i des addi t i o n all o ggi n g t o ai d t ro u bl esh o o t i n g by Ac an o su ppo rt . Yo u may be ask ed t o pro v i det rac es fo r l ev el s 0, 1 o r 2.

A ppe ndix A   SIP Call Contr ol Configur ation

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 30

A p p e nd i x A S I P Ca l l Control Conf i gu ra ti onIn t h i s appen di x t h e Ci sc o VCS i s u sed as t h e ex ampl e H . 323 Gat ek eeper/c al l c o n t ro ldev i c e.

A VCS Z o n e mu st be c reat ed an d c o n fi gu red:

1. In VCS go t o t h e Z o n es page ( see t h e t w o fi gu res bel o w ) .

2. E n abl e H 323 an d t h en di sabl e S IP ( i f bo t h are en abl ed t h e VCS w i l l u se S IP ) .

3. In L o c at i o n , set t h e P eer 1 address t o t h e IP address o f i n t erfac e t h at Ac an o H . 323Gat ew ay i s l i st en i n g o n .

4. In Adv an c ed:

l Ch an ge t h e Z o n e pro fi l e t o Cu st o m.

l T u rn o ff M o n i t o r peer S t at u s.

l T u rn o n Au t o mat i c al l y respo n d t o H . 323 searc h es.

A ppe ndix B   A s s igning a ce r tificate / pr ivate ke y pair to the H.3 2 3 G ate way

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 31

A p p e nd i x B A ssi gni ng a c e rti f i c a te /p ri v a te ke yp a i r to the H . 3 2 3 G a te w a yFro m R 1. 8, a c ert i fi c at e i s requ i red o n eac h H . 323 Gat ew ay . T h e c ert i fi c at e c an besi gn ed by an i n t ern al CA. Fo l l o w t h ese st eps:

1. Gen erat e a pri v at e k ey an d t h e Cert i fi c at e S i gn i n g R equ est ( . c sr) fi l e fo r t h eAc an o H . 323 Gat ew ay appl i c at i o n . Fo r i n fo rmat i o n o n h o w t o gen erat e a pri v at ek ey an d . c sr fi l e, refer t o o n e o f t h e Cert i fi c at e Gu i del i n es o nh t t p: //ac an o . c o m/su ppo rt /do c u men t at i o n /.

N o t e: t h e pu bl i c k ey i s c reat ed an d h el d w i t h i n t h e . c sr fi l e.

2. S u bmi t t h e . c sr fi l e t o t h e CA ( pu bl i c CA o r i n t ern al CA) fo r si gn i n g

Yo u c an u se t h e pk i c o mman d o n t h e Ac an o serv er t o gen erat e t h e pri v at e k eyan d . c sr fi l e, an d su bmi t t h e pai r t o an i n t ern al CA su c h as an Ac t i v e D i rec t o ryserv er w i t h t h e Ac t i v e D i rec t o ry Cert i fi c at e S erv i c es R o l e i n st al l ed.

3. S S H i n t o t h e M M P

4. Upl o ad t h e si gn ed c ert i fi c at e an d i n t ermedi at e CA bu n dl e ( i f an y ) t o t h e Ac an oserv er u si n g S FT P .

5. Ch ec k t h at t h e c ert i fi c at e ( an d c ert i fi c at e bu n dl e) an d t h e pri v at e k ey mat c h

pki verify <certicate> <cert bundle/CA cert> [<CA cert>]

6. Assi gn t h e c ert i fi c at e ( an d c ert i fi c at e bu n dl e) an d pri v at e k ey pai r t o t h e H . 323Gat ew ay .

h323_gateway certs <keyfile> <certificatefile> [<cert-bundle>]

7. R est art t h e H . 323 Gat ew ay

h323_gateway restart

N o t e: i f y o u perfo rm T L S c ert i fi c at e v eri fi c at i o n by u si n g t h e c o mman d:tls SIP verify enable

t h en c ert i fi c at e v eri fi c at i o n w i l l be u n dert ak en agai n st t h e T L S S IP t ru st st o re o n t h eCal l Bri dge an d t h e S IP serv i c e o n t h e H . 323 Gat ew ay . Use t h e tls SIP trust <crtbundle> c o mman d t o set u p t h e T L S S IP t ru st st o re.

A ppe ndix C   H.3 2 3 G ate way addr e s s handling for olde r gate ke e pe r s

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 32

A p p e nd i x C H . 3 2 3 G a te w a y a d d re ss ha nd l i ngf or ol d e r ga te ke e p e rsFro m R 1. 8 t h ere are i mpro v emen t s i n t h e w ay t h at t h e H . 323 Gat ew ay h an dl eso u t go i n g an d i n c o mi n g di al pl an s fo r l egac y gat ek eepers an d en dpo i n t s.

S o me o l d H . 323 gat ek eepers do n o t pro v i de t h e do mai n i n t h e dest i n at i o n addressesfo r o u t go i n g c al l s, an d c an n o t h an dl e a do mai n fo r i n c o mi n g c al l s. T h ese gat ek eeperssu ppl y an d requ i re an E . 164 address o r H . 323 i d fo r t h e address. Fro m R 1. 8 t h ere aren ew c o mman ds t o su ppo rt t h ese dev i c es, see fo r t h e sy n t ax o f al l M M P c o mman ds fo rt h e H . 323 Gat ew ay .  

" H . 323 Gat ew ay address h an dl i n g fo r o l der gat ek eepers " abo v e i l l u st rat es h o w t h edest i n at i o n address fo r c al l s fro m l egac y gat ek eepers c an be ac c ept ed by appen di n g ado mai n t o t h e dest i n at i o n address u si n g M M P c o mman d h323_gateway sip_domain<sip_domain_uri>. T h e so u rc e address c an al so h av e a do mai n added w h i c h c an ai ddi al -bac k o f t h at u ser. Usi n g c o mman d h323_gateway h323_domain <h323_domain_uri>, appen ds a do mai n w h i c h en abl es t h e Cal l Bri dge t o i den t i fy w h ere t h ec al l o ri gi n at es, an d h en c e su ppo rt c al l bac k .

F igu r e 28: Adding the dom ain to the s ou r c e addr es s

" H . 323 Gat ew ay address h an dl i n g fo r o l der gat ek eepers " abo v e i l l u st rat es h o w c al lbac k c an be made t o w o rk fo r c al l s o ri gi n at i n g fro m l egac y H . 323 gat ek eepers. Usi n gc o mman d h323_gateway h323_domain_strip yes remo v es t h e do mai n fro m t h edest i n at i o n i f i t mat c h es h323_domain an d u si n g c o mman d h323_gateway sip_domain_strip yes remo v es t h e do mai n fro m t h e so u rc e address i f i t mat c h es sip_domain, w h en mak i n g a c al l t o t h e l egac y gat ek eeper.

A ppe ndix C   H.3 2 3 G ate way addr e s s handling for olde r gate ke e pe r s

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 33

F igu r e 29 : Rem ov ing the dom ain f or c all bac k

N o t e: di al i n g an IP address do es n o t requ i re remo v al o f t h e do mai n , as t h e Cal l Bri dgerec o gn i z es t h at i t i s an IP address an d do es n o t appen d t h e do mai n .

A ppe ndix D   H.3 2 3 G ate way MMP commands

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 34

A p p e nd i x D H . 3 2 3 G a te w a y M M P c om m a nd sT h i s appen di x l i st s t h e M M P c o mman ds t o c o n fi gu re t h e Ac an o H . 323 Gat ew ay , t h eyare al so pro v i ded i n t h e M M P Co mman d R eferen c e Gu i de.

Command/ Example s D e s cr iption/ Note s

A vailableinr e le as e

h323_gatewayenable/disable/restart

The gate way will not s tar t unle s s it is configur e d pr ope r ly. R1.7

h323_gateway certs<keyfile> <certificatefile> [<cert-bundle>]

h323_gateway certsnone

D e fine s the name of the pr ivate ke y file and .cr t file for the

H.3 2 3 G ate way application and, optionally, a CA ce r tificate bundleas pr ovide d by your CA . ( Se e "A s s igning a ce r tificate / pr ivate ke ypair to the H.3 2 3 G ate way" on page 3 1.)

Re move s ce r tificate configur ation

R1.8

h323_gateway h323_nexthop <host/ip>h323_gateway del h323_nexthop

Conne ct to this IP addr e s s for all outgoing H.3 2 3 calls and le t thede vice at this IP addr e s s handle the r outing. If this addr e s s is nots e t, only IP dialing wor ks .

Typically this IP addr e s s is a Cis co VCS/ P olycom D MA , and anH.3 2 3 tr unk is e s tablis he d be twe e n the A cano H.3 2 3 G ate way andthe thir d par ty de vice ( H.3 2 3 G ate ke e pe r ) .

The H.3 2 3 G ate way doe s not r e gis te r with the de vice , jus tfor war ds calls to the m – the de vice will ne e d to be configur e dappr opr iate ly to acce pt the s e calls .

R1.7

h323_gateway default_uri <uri>

h323_gateway deldefault_uri

Optional. If an incoming H.3 2 3 call has no de s tination ( nor mallyonly the cas e whe n the H.3 2 3 G ate way has be e n diale d by an IPaddr e s s ) the SIP call is made to whate ve r de fault_ ur i is s e t. Thede fault_ ur i may point to an IVR, or dir e ctly into a s pace . If it is nots e t, the call is r e je cte d.

R1.7

h323_gateway sip_domain <sip_domain >

h323_gateway del sip_domain

Optional. If an incoming H.3 2 3 call is made to the gate way withouta domain in the de s tination addr e s s , @ <s ip_ domain> will beappe nde d to the de s tination addr e s s be for e the SIP call to the CallBr idge is made .

R1.8

h323_gateway sip_domain_strip <yes/no>

If s e t to "ye s " and "h3 2 3 _ gate way s ip_ domain" is s e t, whe n a SIPcall is made to the gate way the @ <s ip_ domain> will be s tr ippe dfr om the s our ce addr e s s ( if pr e s e nt) be for e making the H.3 2 3 call.

R1.8

A ppe ndix D   H.3 2 3 G ate way MMP commands

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 35

Command/ Example s D e s cr iption/ Note s

A vailableinr e le as e

h323_gateway h323_domain <h323_domain>

h323_gateway del h323_domain

Optional. If an H.3 2 3 call is made to the gate way without includinga domain in the s our ce addr e s s , @ <h3 2 3 _ domain> will beappe nde d to the s our ce addr e s s be for e the SIP call is made .

R1.8

h323_gateway h323_domain_strip <yes/no>

If s e t to "ye s " and "h3 2 3 _ gate way h3 2 3 _ domain" is s e t, whe n aSIP call is made to the gate way the <h3 2 3 _ domain> will bes tr ippe d fr om the de s tination addr e s s ( if pr e s e nt) be for e makingthe H.3 2 3 call.

R1.8

h323_gateway h323_interfaces <interfacelist>

h323_gateway sip_interfaces <interfacelist>

Mus t be configur e d in or de r for the gate way to s tar t, but theactual s e tting is cur r e ntly ignor e d.

R1.7

R1.7

h323_gateway sip_port<port>

P or ts for the SIP s ide to lis te n on. The de fault is 6 0 6 1.

Note : if you wis h to change the de fault por t fr om 6 0 6 1, and if theH.3 2 3 G ate way and Call Br idge ar e on the s ame s e r ve r , make s ur eyou avoid por t 5 0 6 1 which is us e d by the Call Br idge . Change s donot take place until the gate way is r e s tar te d.

The H.3 2 3 G ate way always e xpe cts TLS conne ctions ; the r e for e ,"Encr ypte d" s hould be s e le cte d on outbound dial plan r ule s on theCall Br idge

R1.7

h323_gateway sip_proxy<uri>

Se t this to the IP addr e s s of the Call Br idge , or for multiple CallBr idge s us e the domain name ( thr ough D NS) . A ll incoming H.3 2 3calls will be dir e cte d to this ur i

R1.7

h323_gateway restrict_codecs <yes/no>

If s e t to ye s , the H.3 2 3 G ate way is limite d to a s afe s e t of code csthat ar e le s s like ly to caus e inte r ope r ability pr oble ms . Cur r e ntlythis s e t is G .7 11/ G .7 2 2 / G .7 2 8 / H.2 6 1/ H.2 6 3 / H.2 6 3 +/ H.2 6 4 .

Code cs dis able d by this fe atur e ar e G .7 2 2 .1 and A A C.

R1.7

h323_gateway disable_content <yes/no>

If s e t to ye s , H.2 3 9 conte nt is dis able d. R1.7

h323_gateway trace_level <level>

P r ovide s additional logging to aid tr ouble s hooting by A canos uppor t. Y ou may be as ke d to pr ovide tr ace s for le ve ls 0 , 1, 2 or 3 .

R1.7

A ppe ndix D   H.3 2 3 G ate way MMP commands

76 - 1 05 6 - 03- C: Ac ano H.323 G ateway D eploym ent G u ide 36

© 2 0 16 Ci sco Sy st e ms, Inc. A l l ri g ht s re se rv e d .Thi s d ocume nt i s p rov i d e d f or i nf orma t i on p urp ose s onl y a nd i t s cont e nt s a re sub j e ct t o cha ng e wi t hout not i ce . Thi sd ocume nt ma y not b e re p rod uce d or t ra nsmi t t e d i n a ny f orm or b y a ny me a ns, f or a ny p urp ose ot he r t ha n t he re ci p i e nt ’ sp e rsona l use , wi t hout our p ri or wri t t e n p e rmi ssi on.

A ca no i s now p a rt of Ci sco, a nd a t ra d e ma rk of Ci sco. Ot he r na me s ma y b e t ra d e ma rk s of t he i r re sp e ct i v e owne rs.