Samsung VC240 Reference Guide

Samsung VC240 Manual

Samsung VC240 manual content summary:

  • Samsung VC240 | Reference Guide - Page 1
    RADVISION Port Security Reference Guide Version 7.6
  • Samsung VC240 | Reference Guide - Page 2
    territories. All registered trademarks recognized. For further information contact RADVISION or your local distributor or reseller. Reference Guide for RADVISION Port Security Version 7.6, March 2011 http://www.radvision.com RADVISION | Reference Guide for RADVISION Port Security Version 7.6 | 2
  • Samsung VC240 | Reference Guide - Page 3
    Gateway page 34 • SCOPIA MCU page 36 This document does not include details of ports required by additional servers such as LDAP, SQL, or Oracle servers. Always check which ports your back-end servers require and open only these ports. RADVISION |Reference Guide forRADVISION Port Security Version
  • Samsung VC240 | Reference Guide - Page 4
    the SCOPIA Elite 5200 Series MCU uses 180 ports. To configure, use the MCU Advanced Commands section. Enter the command h245baseport to set the lower port value, and h245portrange to specify the number of ports above the base port to be used. RADVISION | RADVISION Port Security Reference Guide
  • Samsung VC240 | Reference Guide - Page 5
    addition to the ports listed in Table 1-1, the SCOPIA Elite MCU offers configurable security access levels enabling and disabling Telnet, FTP, SNMP and ICMP (ping) services. The security Active Inactive ICMP (ping) Active Active Inactive RADVISION | RADVISION Port Security Reference Guide | 5
  • Samsung VC240 | Reference Guide - Page 6
    . Ports supported by SCOPIA Elite 5200 Series MCU Protocol SSH (TCP) Functionality MCU Direction In Result of Blocking Port on Firewall Cannot view logs in real time (logs are collected on the compact flash card) Description SSH Client RADVISION | RADVISION Port Security Reference Guide | 6
  • Samsung VC240 | Reference Guide - Page 7
    required by a factor of 1.5. At full capacity, the SCOPIA Elite 5200 Series MCU uses 360 ports for video. To configure the audio base port, use the MCU Advanced Commands section. Enter the command setmprtpbaseport to set the lower port value. RADVISION | RADVISION Port Security Reference Guide | 7
  • Samsung VC240 | Reference Guide - Page 8
    1-5 lists the ports supported by SCOPIA Video Gateway for Microsoft Lync. Table 1-5 Ports supported by SCOPIA Video Gateway for Microsoft Lync Port Protocol/Use Functionality Direction 21 FTP (TCP) Audio stream recording In 22 SSH (TCP) Logs for the SCOPIA In Video Gateway for Microsoft
  • Samsung VC240 | Reference Guide - Page 9
    interface Both Cannot view ECS web user interface Configuration Both and status Cannot configure or check the status of the ECS Description FTP client/CDR server Web client terminal iVIEW Network Manager, or any other SNMP manager station RADVISION | RADVISION Port Security Reference Guide | 9
  • Samsung VC240 | Reference Guide - Page 10
    HKEY_LOCAL_MACHINE\ SYSTEM\CurrentControlSet\Services\ Tcpip\Parameters\MaxUserPort registry key. If this key is not defined, its default value is 5000. Any H.323 entity using RAS signaling Any H.323 entity using Q.931 signaling XML server RADVISION | RADVISION Port Security Reference Guide | 10
  • Samsung VC240 | Reference Guide - Page 11
    call 162 SNMP (UDP) SNMP Trap events (configurable) Direction Out Out Result of Blocking Port on Firewall No control over endpoints DNS disabled Out No traps are sent 1719 RAS (UDP any other SNMP manager station Neighbor Gatekeepers RADVISION | RADVISION Port Security Reference Guide | 11
  • Samsung VC240 | Reference Guide - Page 12
    Suite web interface. iVIEW Management Suite cannot operate the SNMP service with devices, and forward trap events do not function. iVIEW Management Suite cannot operate the SNMP service with devices, and forward trap events do not function. RADVISION | RADVISION Port Security Reference Guide | 12
  • Samsung VC240 | Reference Guide - Page 13
    3339 3340 3341 3344 4444, 4445 5060 5061 Ports supported by iVIEW Management Suite (continued) Protocol TCP TCP cannot authenticate users from XMPP/SCOPIA Desktop Contact List Cannot remotely manage the SCOPIA Video Gateway for available. RADVISION | RADVISION Port Security Reference Guide | 13
  • Samsung VC240 | Reference Guide - Page 14
    /11099 HTTP (TCP) XML (TCP) TCP iVIEW Management Suite web In user interface. When installing the standalone version, this port defaults to 80. SCOPIA PathFinder Server XML Out API port for connecting to SCOPIA PathFinder Server v7.0 and later. Optional. Required by the JBoss Both application
  • Samsung VC240 | Reference Guide - Page 15
    the SCOPIA PathFinder Client. An H.323 endpoint in the public domain can also directly dial the SCOPIA PathFinder Server using direct port access (ports 4000-5000 in the tables below). Figure 1-1 H.323 connections to SCOPIA PathFinder Server RADVISION | RADVISION Port Security Reference Guide | 15
  • Samsung VC240 | Reference Guide - Page 16
    H.460.19 cannot function when using multiplexing. SCOPIA PathFinder Client cannot connect to SCOPIA PathFinder Server. Legacy H.323 endpoints behind the SCOPIA PathFinder Client cannot call external endpoints. SCOPIA PathFinder Client RADVISION | RADVISION Port Security Reference Guide | 16
  • Samsung VC240 | Reference Guide - Page 17
    , higher for calls with dual video. We recommend using 10 as an approximation. To configure the port range on the SCOPIA PathFinder Server: 1. Select Settings > General. 2. Enable H.323 Direct Access. 3. Enter the Port Range numbers. RADVISION | RADVISION Port Security Reference Guide | 17
  • Samsung VC240 | Reference Guide - Page 18
    external SCOPIA PathFinder Server Any H.323 entity using a Q.931 signaling in DPA mode Neighbor server SCOPIA signaling and media PathFinder connection Server to another Server Cannot connect to neighbor PathFinder Server server. RADVISION | RADVISION Port Security Reference Guide | 18
  • Samsung VC240 | Reference Guide - Page 19
    1-1 on page 15). If there is a firewall, you must open all the high ports in both directions (1025-65535). Table 1-11 lists the outbound ports supported by SCOPIA PathFinder Client, when the client connects to the SCOPIA PathFinder Server. RADVISION | RADVISION Port Security Reference Guide | 19
  • Samsung VC240 | Reference Guide - Page 20
    ). We therefore recommend no firewall between the endpoint and the SCOPIA PathFinder Client. Table 1-11 Outbound ports supported by SCOPIA PathFinder Client Port Range 3089 3478 Protocol Functionality TCP and UDP PathFinder tunneling service STUN (UDP) STUN Binding Request Direction Result of
  • Samsung VC240 | Reference Guide - Page 21
    to do auto discovery and authentication. From SCOPIA Desktop to Active Directory in order to do auto discovery and authentication. Control connection between the SCOPIA Desktop Client and the SCOPIA Desktop Server. SCOPIA ECS Gatekeeper RADVISION | RADVISION Port Security Reference Guide | 21
  • Samsung VC240 | Reference Guide - Page 22
    - Conference Server service. Media connection between the SCOPIA Desktop Server and the SCOPIA Desktop streaming server, if separated. To avoid opening these ports, place the SCOPIA Desktop Server in the same zone as the streaming server. RADVISION | RADVISION Port Security Reference Guide | 22
  • Samsung VC240 | Reference Guide - Page 23
    In addtion, add extra ports if your deployment includes: • Add 6 ports per recording in your deployment. • Add an extra 6 ports per conference which activates streaming. Optional The streaming server listens on this port for tunneled RTSP. RADVISION | RADVISION Port Security Reference Guide | 23
  • Samsung VC240 | Reference Guide - Page 24
    . Result of Blocking in Application Users would not be able to log into XMPP Server. Users would not be able to log into XMPP Server. The SCOPIA Desktop Client tries to use port 443 for tunnelled connection to the SCOPIA Desktop Server. RADVISION | RADVISION Port Security Reference Guide | 24
  • Samsung VC240 | Reference Guide - Page 25
    TCP port for HTTP tunneling. This is configured in the streaming server by default as long as you specify the port as part of the streaming server virtual address in the Streaming section of the SCOPIA Desktop Server Administration section. RADVISION | RADVISION Port Security Reference Guide | 25
  • Samsung VC240 | Reference Guide - Page 26
    17 lists ports that need to be open on SCOPIA XT Desktop Server. Table 1-17 Ports supported by SCOPIA Desktop XT Server and Internal Network Port Range port 443. Control connection between the SCOPIA Desktop Client and SCOPIA Desktop XT Server. RADVISION | RADVISION Port Security Reference Guide
  • Samsung VC240 | Reference Guide - Page 27
    not be optimal. At full capacity, the SCOPIA XT1009 requires 76 ports. Limit the range of the of the multimedia ports in the SCOPIA Desktop XT Server Administrator web interface by naviagting to Client > Settings tab > Multimedia Ports. RADVISION | RADVISION Port Security Reference Guide | 27
  • Samsung VC240 | Reference Guide - Page 28
    endpoint uses the services of a gatekeeper Common H.323 service port. Ephemeral TCP ports used to connect simultaneous H.323 and SIP calls. The range can be modified by selecting Administrator Settings > Network > Preferences >Dynamic Ports RADVISION | RADVISION Port Security Reference Guide | 28
  • Samsung VC240 | Reference Guide - Page 29
    SIP service port. No SIP content video available. Common BFCP service port (used by SIP). Cannot send/receive commands Cannot upgrade software No Telnet access iVIEW Network Manager iVIEW Network Manager/Landownload Remote management RADVISION | RADVISION Port Security Reference Guide | 29
  • Samsung VC240 | Reference Guide - Page 30
    that need to be opened between SCOPIA VC240 and network devices. Table 1-20 Ports supported by SCOPIA VC240 Port Protocol/Use 22 TCP (SSH) Configure these ports on the SCOPIA VC240 by navigating to Setup > Network > Port Configuration. RADVISION | RADVISION Port Security Reference Guide | 30
  • Samsung VC240 | Reference Guide - Page 31
    Table 1-20 Ports supported by SCOPIA VC240 (continued) Port 1719 1720 4000 Protocol/Use Functionality UDP (RAS) SIP media enabled entity. Configure these ports on the SCOPIA VC240 by navigating to Setup > Network > Port Configuration. RADVISION | RADVISION Port Security Reference Guide | 31
  • Samsung VC240 | Reference Guide - Page 32
    and Table 1-22 list the ports supported by the SCOPIA Gateway. Table 1-21 SCOPIA Gateway-supported ports-Incoming connections Port Range 21 Protocol FTP ( open video H.323 entity Cannot open video H.323 entity Cannot open media H.323 entity RADVISION | RADVISION Port Security Reference Guide
  • Samsung VC240 | Reference Guide - Page 33
    (ping) services, as shown in Table 1-23. Table 1-23 SCOPIA Gateway Security Modes Security Mode Low Medium High Telnet Active Inactive Inactive FTP Active Inactive Inactive SNMP Active Active Inactive ICMP (ping) Active Active Inactive RADVISION | RADVISION Port Security Reference Guide | 33
  • Samsung VC240 | Reference Guide - Page 34
    Control web user interface. Conference Control web client terminal, iVIEW Management Suite or third-party controlling applications 5060 SIP (TCP/UDP); SIP signaling (configurable) in use Both Cannot connect SIP calls Any SIP entities RADVISION | RADVISION Port Security Reference Guide | 34
  • Samsung VC240 | Reference Guide - Page 35
    /M II SP (Media Video Processor) Table 1-25 lists the ports supported by the MVP/M II SP. Table 1-25 MVP/M II-supported Ports Port Range 21 23 161 ) Software upgrade and Both video stream recording Cannot upgrade version Upgrade Utility RADVISION | RADVISION Port Security Reference Guide | 35
  • Samsung VC240 | Reference Guide - Page 36
    MCU Blade Table 1-26 lists the ports supported by the SCOPIA MCU. Table 1-26 Ports Supported by SCOPIA MCU Port Protocol/Use 21 FTP (TCP) Administrator and Both Conference Control web user interfaces Configuration and status Both SNMP RADVISION | RADVISION Port Security Reference Guide | 36
  • Samsung VC240 | Reference Guide - Page 37
    SNMP Active Active Inactive ICMP (ping) Active Active Inactive Media Video Processor for SCOPIA MCU Table 1-28 Port 21 23 161 (for future use) 2946 Table 1-28 lists the ports supported by the MVP. MVP-supported Ports Protocol/Use Functionality Direction FTP (TCP) Telnet (TCP) SNMP (UDP
  • Samsung VC240 | Reference Guide - Page 38
    extended font files from the MCU. RTP/RTCP media Both Both Result of Blocking Port on Firewall Cannot work with different fonts Description Font client software Cannot transmit/receive media stream Any RTP/RTCP media enabled entity RADVISION | RADVISION Port Security Reference Guide | 38
  • Samsung VC240 | Reference Guide - Page 39
    data and wireless - for high definition video conferencing systems, innovative converged mobile services, and highly scalable video-enabled desktop platforms on IP, 3G and emerging next generation networks. For more information about RADVISION, visit www.radvision.com USA/Americas T +1 201 689 6300
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39

RADVISION Port Security
Reference Guide
Version 7.6