HP 3Com Telecommuting Module Administrator's Guide

3Com® Telecommuting Module

User Manual

Version 4.6.5

3Com® Telecommuting Module User Manual: Version 4.6.5

Part Number BETA Published April 2009

3Com Corporation, 350 Campus Drive, Marlborough MA 01752-3064

Copyright © 2005, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation. 3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notiﬁcation of such revision or change. 3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or expressed, including, but not limited to, the implied warranties, terms, or conditions of merchantability, satisfactory quality, and ﬁtness for a particular purpose. 3Com may make improvements or changes in the product(s) and/or the program(s) described in this documentation at any time. If there is any software on removable media described in this documentation, it is furnished under a license agreement included with the product as a separate document, in the hardcopy documentation, or on the removable media in a directory ﬁle named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you.

UNITED STATES GOVERNMENT LEGEND

If you are a United States government agency, then this documentation and the software described herein are

provided to you subject to the following:

All technical data and computer software are commercial in nature and developed solely at private expense. Software is delivered as "Commercial Computer Software" as deﬁned in DFARS 252.227-7014 (June 1995) or as a "commercial item" as deﬁned in FAR 2.101(a) and as such is provided with only such rights as are provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in, or delivered to you in conjunction with, this guide. Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not be registered in other countries. 3Com, the 3Com logo, NBX, and SuperStack are registered trademarks of 3Com Corporation. NBX NetSet, pcXset, and VCX are trademarks of 3Com Corporation. Adobe is a trademark and Adobe Acrobat is a registered trademark of Adobe Systems Incorporated. Microsoft, Windows, Windows 2000, Windows NT, and Microsoft Word are registered trademarks of Microsoft Corporation. All other company and product names may be trademarks of the respective companies with which they are associated.

Part I. Introduction to 3Com VCX IP Telecommuting Module .......................................i

1. Introduction to 3Com VCX IP Telecommuting Module ...........................................1

2. Installing 3Com VCX IP Telecommuting Module ....................................................7

3. Conﬁguring 3Com VCX IP Telecommuting Module..............................................17

Part II. How To...................................................................................................................27

4. How To Conﬁgure SIP .............................................................................................29

5. How To Conﬁgure Advanced SIP............................................................................55

Part III. Description of 3Com VCX IP Telecommuting Module Settings ....................73

6. Basic Conﬁguration .................................................................................................75

7. Administration ....................................................................................................... 103

8. Network Conﬁguration ..........................................................................................119

9. Logging.................................................................................................................. 137

10. SIP Services .........................................................................................................159

11. SIP Trafﬁc ............................................................................................................185

12. Tools.....................................................................................................................217

13. Firewall and Client Conﬁguration........................................................................223

Part IV. 3Com VCX IP Telecommuting Module Serial Console................................. 227

14. Basic Administration ...........................................................................................229

15. Command Line Reference ...................................................................................237

Part V. Appendices ..........................................................................................................319

A. More About SIP ....................................................................................................321

B. Troubleshooting.....................................................................................................329

C. Lists of Reserved Ports, ICMP Types and Codes, and Internet Protocols ............335

D. Deﬁnitions of terms...............................................................................................347

E. License Conditions ................................................................................................359

F. Obtaining Support for Your 3Com Products .........................................................431

Index.................................................................................................................................. 435

Part I. Introduction to 3Com

VCX IP Telecommuting Module

Chapter 1. Introduction to 3Com VCX IP Telecommuting Module

Some of the functions of 3Com VCX IP Telecommuting Module are:

• SIP proxy: Forwarding of SIP requests.

• SIP registrar: Registration of SIP users.

• Protection against such attacks as address spooﬁng.

• Logging/alarm locally on the Telecommuting Module, via email and/or via syslog.

• Managing several logical/directly-connected networks and several network connec-

tions/physical networks.

• Administration of the Telecommuting Module through a web browser using http or https.

• QoS - bandwidth limitation and trafﬁc prioritizing (using the QoS module).

• Failover - connect two Telecommuting Modules in parallel; one handles trafﬁc and the

other acts as a hot standby.

• STUN server and Remote SIP Connectivity for SIP clients behind NAT boxes which are

not SIP aware (using the Remote SIP Connectivity module).

Note that some of the functions mentioned here are only available if the corresponding extension module has been installed.

What is a Telecommuting Module?

A Telecommuting Module is a device which processes trafﬁc under the SIP protocol (see RFC 3261). The Telecommuting Module receives SIP requests, processes them according to the rules you have set up, and forwards them to the receiver.

The Telecommuting Module connects to an existing enterprise ﬁrewall through a DMZ port, enabling the transmission of SIP-based communications without affecting ﬁrewall security. SIP messages are then routed through the ﬁrewall to the private IP addresses of authorized users on the internal network.

The Telecommuting Module can also be used as an extra gateway to the internal network without connecting to the ﬁrewall, transmitting only SIP-based communications.

Conﬁguration alternatives

The 3Com VCX IP Telecommuting Module can be connected to your network in three different ways, depending on your needs.

Note that if the Standalone type is used, the interface which should receive trafﬁc from the outside must have a public IP address (no NAT).

Chapter 1. Introduction to 3Com VCX IP Telecommuting Module

For a DMZ or DMZ/LAN type which uses a private IP address on the interface connected to the DMZ of the ﬁrewall, its corresponding public IP address must be entered on the Interoperability page.

DMZ Conﬁguration

Using this conﬁguration, the Telecommuting Module is located on the DMZ of your ﬁrewall, and connected to it with only one interface. The SIP trafﬁc ﬁnds its way to the Telecommuting Module using DNS or by setting the Telecommuting Module as an outbound proxy on the clients.

This is the most secure conﬁguration, since all trafﬁc goes through both your ﬁrewall and your Telecommuting Module. It is also the most ﬂexible, since all networks connected to any of your ﬁrewall’s interfaces can be SIP-enabled.

The drawback is that the SIP trafﬁc will pass the ﬁrewall twice, which can decrease performance.

Fig 1. Telecommuting Module in DMZ conﬁguration.

DMZ/LAN Conﬁguration

Using this conﬁguration, the Telecommuting Module is located on the DMZ of your ﬁrewall, and connected to it with one of the interfaces. The other interfaces are connected to your internal networks. The Telecommuting Module can handle several networks on the internal interface even if they are hidden behind routers.

This conﬁguration is used to enhance the data throughput, since the trafﬁc only needs to pass your ﬁrewall once.

Fig 2. Telecommuting Module in DMZ/LAN conﬁguration.

Chapter 1. Introduction to 3Com VCX IP Telecommuting Module

Standalone Conﬁguration

Using this conﬁguration, the Telecommuting Module is connected to the outside on one interface and your internal networks on the others.

Use this conﬁguration only if your ﬁrewall lacks a DMZ interface, or for some other reason cannot be conﬁgured for the DMZ or DMZ/LAN alternatives.

Fig 3. Telecommuting Module in Standalone conﬁguration.

Quick guide to 3Com VCX IP Telecommuting Module installation

3Com VCX IP Telecommuting Module is easy to install:

• Select an IP address for the Telecommuting Module on your network.

• The network interfaces are marked with 1 and 2. These numbers correspond to the physi-

cal interfaces eth0 and eth1 respectively, the latter which should be use in the installation program.

• Plug in the power cord and turn on the Telecommuting Module.

• Wait while the Telecommuting Module boots up.

• Connect the network cables to the network interfaces.

• Connect a monitor and a keyboard to the Telecommuting Module.

• Log in as admin. No password is needed the ﬁrst time you log in.

• Run the installation script, where you assign IP address, conﬁguration computers and

password.

• Direct your web browser to the IP address of the Telecommuting Module.

• Now you can see the main page of 3Com VCX IP Telecommuting Module. Click on the

Telecommuting Module Type link and select the conﬁguration for your Telecommuting Module. The types are described on the corresponding help page.

• Go to the Basic Conﬁguration page and enter a DNS server. See also the Basic Conﬁg-

uration section.

• Go to the Access Control page and make settings for the conﬁguration of the Telecom-

muting Module. See also the Access Control section.

Chapter 1. Introduction to 3Com VCX IP Telecommuting Module

• Go to the Network Interface 1 page under Network Conﬁguration and enter the neces-

sary conﬁguration. See also the Interface section. Note that the Telecommuting Module must have at least one IP address which can be reached from the Internet.

• If one of the Telecommuting Module Types DMZ/LAN or Standalone was chosen, move

on to the Network Interface 2 page and give the Telecommuting Module at least one IP address on this interface and state the networks connected to the interface. See also the Interface section.

• Go to the Default Gateway page and enter a Default gateway. See also the Default

Gateway section.

• Go to the Networks and Computers page. Deﬁne the networks that will send and receive

SIP trafﬁc using the Telecommuting Module. Usually, you need at least one network per interface of the ﬁrewall connected to the Telecommuting Module (or, for the Standalone type, per interface of the Telecommuting Module). Some computers should be handled separately, and they therefore need their own networks. See also the Networks and Computers section.

• Go to the Surroundings page (for the DMZ Telecommuting Module Type) and state the

networks connected to the ﬁrewall. See also the Surroundings section in the chapter titled Network Conﬁguration.

• Go to Basic Settings under SIP Services and switch the SIP module on. Enter the port

range to be used by the Telecommuting Module for the media streams. See also the Basic Settings section.

• Go to the Filtering page under SIP Trafﬁc to create Proxy rules for the SIP trafﬁc from

different networks and allow the content types which should be allowed in the SIP media streams. See also the Filtering section.

• Go to the Interoperability page. Set URI Encoding to "Keep username in URIs".

• Go to the Save/Load Conﬁguration page under Administration. Select Apply conﬁgu-

ration. Now you can test your new conﬁguration and save it permanently if you are satisﬁed with it. If the conﬁguration is not satisfactory, select Revert or restart the Telecommuting Module. The old conﬁguration will remain.

• When the conﬁguration has been applied, you should save a backup to ﬁle. Press Save to

local ﬁle to save the conﬁguration.

When the Telecommuting Module is conﬁgured, the ﬁrewall connected to it must also be reconﬁgured (for the DMZ and DMZ/LAN Telecommuting Module Types).

• Allow UDP and TCP trafﬁc in the port interval used for media streams by the Telecom-

muting Module, and port 5060. This trafﬁc must be allowed to all networks which should be reached by SIP trafﬁc.

See also the chapter titled Firewall and Client Conﬁguration, for information on conﬁguring the ﬁrewall and the SIP clients.

Chapter 1. Introduction to 3Com VCX IP Telecommuting Module

About settings in 3Com VCX IP Telecommuting Module

3Com VCX IP Telecommuting Module uses two sets of Telecommuting Module conﬁgurations: preliminary and permanent conﬁguration. The permanent conﬁguration is what is used in the active Telecommuting Module. The preliminary conﬁguration is where you change and set the conﬁguration. See chapter 3, Conﬁguring 3Com VCX IP Telecommuting Module, for instructions.

The changes you make in the preliminary conﬁguration are not stored in the permanent conﬁguration until you click on Apply conﬁguration on the Save/Load Conﬁguration page under Administration.

The password conﬁguration and time setting are the exceptions to this rule; they are saved immediately. Change the administrator passwords and create more administrator users on the User Administration page under Administration.

3Com VCX IP Telecommuting Module displays serious errors in red, e.g., if mandatory information is not entered. Blank ﬁelds are shown in red. Fields that you correct remain red until you select Save, Add new rows or update the page in some other way.

If you have a web connection with the Telecommuting Module that is inactive for 10 minutes, it will ask for a password again.

Always log out from the Telecommuting Module administration interface when you are not using it. Press the Log out button on the left to log out.

The terms used in the book are explained in appendix D, Deﬁnitions of Terms. For a general description of how to conﬁgure and administer the Telecommuting Module,

see chapter 3, Conﬁguring 3Com VCX IP Telecommuting Module.

Chapter 1. Introduction to 3Com VCX IP Telecommuting Module

Chapter 2. Installing 3Com VCX IP Telecommuting Module

Installation

There are three ways to install an 3Com VCX IP Telecommuting Module: using a serial cable, using a diskette or perform a magic ping.

Installation with a serial cable or a diskette requires being at the same place as the Telecommuting Module, but will give more options for the start conﬁguration.

Installation with magic ping does not require being on the same place as the Telecommuting Module (but the computer has to be connected to the same logical network as the Telecommuting Module), but restricts the start conﬁguration.

Installation with magic ping

You can use the magic ping to set an IP address for the Telecommuting Module. This is how to perform a magic ping:

• Plug in the power cord and turn the Telecommuting Module on.

• Wait while the Telecommuting Module boots up.

• Connect the network cables to the network interfaces.

• Find out the MAC address of the Telecommuting Module (printed on the Telecommuting

Module label). This is the MAC address of Network Interface 1.

• Add a static entry in your local ARP table consisting of the Telecommuting Module’s

MAC address and the IP address it should have on eth0. This is how to add a static ARP entry if you use a Windows computer: Run the command command (or cmd). In the Command window, enter the command arp -s ipaddress macaddress where ipad-

dress is the new IP address for the eth0 interface, and macaddress is the MAC address printed on the Telecommuting Module, but with all colons (:) replaced with dashes (-).

• Ping this IP address to give the Telecommuting Module its new IP address. You should

receive a ping reply if the address distribution was successful.

• Conﬁgure the rest through a web browser.

The magic ping will not set any password. Set a password immediately via the web user interface. Before any conﬁguration has been made, only the computer which performed the magic ping will be able to conﬁgure the 3Com VCX IP Telecommuting Module.

Installation with a serial cable

These steps are performed when installing with a serial cable:

Chapter 2. Installing 3Com VCX IP Telecommuting Module

• Connect the Telecommuting Module to your workstation with the enclosed serial cable.

• Plug in the power cord and turn the Telecommuting Module on.

• Wait while the Telecommuting Module boots up.

• Log on from your workstation.

• Run the installation program (see following instructions).

• Connect the network cables to the network interfaces.

• Conﬁgure the rest through a web browser.

Connect the Telecommuting Module to your workstation with the enclosed serial cable, plug in the power cord and turn the Telecommuting Module on. You will have to wait a few minutes while it boots up.

• If you use a Windows workstation, connect like this: Start Hyperterm. A Location dia-

logue will show, asking for your telephone number and area. Click Cancel followed by Yes. Then you will be asked to make a new connection. Type a name for this connection, select an icon and click OK. The Location dialogue will show again, so click Cancel followed by Yes.

Now you can select Connect using COM1 and click OK. A Port settings dialogue will show, where you select 19200 as Bits per second. Use the default conﬁguration for all other settings. Click OK and wait for a login prompt. (In some cases you have to press Return to get the login prompt.)

• If you use a Linux workstation, connect like this: Make sure that there is a symbolic

link named /dev/modem which points to the serial port you connected the Telecommuting Module to. Connect using minicom with the bit rate 19200 bits/s, and wait for a login prompt.

Log on as the user admin. The ﬁrst time you log on, no password is required. You set the password when you run the installation script, which starts automatically when you have logged on.

Each network interface is marked with a name (1 and 2), which corresponds to a tab under Network Conﬁguration. All eth interfaces belong to ethernet cards and should only be connected using ethernet cables.

Decide which computer(s) are allowed to conﬁgure 3Com VCX IP Telecommuting Module and enter the name of the network interface to which they are connected, for example, eth0. You must use the physical device name (eth0 and eth1).

Enter the IP address of the Telecommuting Module on this interface and the network mask for the network.

A network mask can be written in two ways in 3Com VCX IP Telecommuting Module:

• The ﬁrst looks just like an IP address, for example 255.255.192.0 or 255.255.254.0.

Chapter 2. Installing 3Com VCX IP Telecommuting Module

• The other way is as a number between 0 and 32. An IP address has 32 bits, where the

number of the network mask indicates how many bits are used in the network’s addresses. The rest of the bits identiﬁes the computer on the network.

Now, you can select to deactivate any network interfaces. Select y to deactivate all interfaces but the one you just conﬁgured. The remaining network interfaces can be activated later when you complete the conﬁguration via the web interface from your work station. This only applies to interfaces which was previously active; you can’t activate interfaces with this setting.

Now enter the computer or computers from which the Telecommuting Module may be conﬁgured (the conﬁguration computers).

Then enter a password for the Telecommuting Module. This is the password you use in your web browser to access and change the Telecommuting Module’s conﬁguration. Finally, you can reset all other conﬁguration if you want to.

Following is a sample run of the installation program.

3Com VCX IP Telecommuting Module Administration

1. Basic conﬁguration

2. Save/Load conﬁguration

5. Wipe email logs

6. Set password

7. Command line interface a. About q. Exit admin ==>

Select 1 to install your 3Com VCX IP Telecommuting Module.

Basic unit installation program version 4.6.5

Press return to keep the default value

Network conﬁguration inside:

Physical device name[eth0]: IP address [0.0.0.0]: 10.47.2.242 Netmask/bits [255.255.255.0]: 255.255.0.0 Deactivate other interfaces? (y/n) [n]

Computers from which conﬁguration is allowed:

You can select either a single computer or a network.

Conﬁgure from a single computer? (y/n) [y]

Chapter 2. Installing 3Com VCX IP Telecommuting Module

If you choose to allow only one computer to conﬁgure the Telecommuting Module, you are asked for the IP address (the mask is set automatically).

IP address [0.0.0.0]: 10.47.2.240

If this IP address is not on the same network as the IP address of the Telecommuting Module, you are asked for the router. Enter the IP address of the router on the network where the Telecommuting Module is connected. Then enter the network address and mask of the network containing the conﬁguring computer.

Static routing: The computer allowed to conﬁgure from is not on a network local to this unit. You must conﬁgure a static route to it. Give the IP address of the router on the network the unit is on.

The IP address of the router [0.0.0.0]: 10.47.3.1 Network address [10.47.0.0]: 10.10.0.0 Netmask [255.255.255.0]:

You can choose to allow several computers to conﬁgure the Telecommuting Module, by answering no to the question:

Conﬁgure from a single computer? (y/n) [y] n

The installation program then asks for the network number. The conﬁguration computers must be entered as a complete subnet, i. e. a range which can be written as a network number and a netmask (like 10.47.2.128 with netmask 255.255.255.128, which means the computers

10.47.2.128-10.47.2.255). All computers on this subnet will be allowed to conﬁgure the Telecommuting Module. For more information about network numbers and netmasks, see chapter 3, Conﬁguring 3Com VCX IP Telecommuting Module.

Network number [0.0.0.0]: 10.47.2.0 Netmask/bits [255.255.255.0]: 255.255.255.0

If the network or partial network is not directly connected to the Telecommuting Module, you must enter the IP address of the router leading to that network. Then enter the network’s address and mask.

Static routing: The network allowed to conﬁgure from is not on a network local to this unit. You must conﬁgure a static route to it. Give the IP address of the router on the network this unit is on.

The IP address of the router [0.0.0.0]: 10.47.3.1 Network address [10.47.0.0]: 10.10.0.0 Netmask [255.255.255.0]:

Then enter a password.

Chapter 2. Installing 3Com VCX IP Telecommuting Module

Password []:

Finally, you are asked if you want to reset other conﬁguration.

Other conﬁguration Do you want to reset the rest of the conﬁguration? (y/n) [n]

If you answer n, nothing is removed. If you answer y, you have three alternatives to select from:

1. Clear as little as possible. This is the alternative that is used if you answer n to the question above. Both the preliminary and the permanent conﬁgurations will be updated with the conﬁguration speciﬁed above.

2. Revert to the factory conﬁguration and then apply the conﬁguration speciﬁed above. This will affect the permanent but not the preliminary conﬁguration.

3. Revert to the factory conﬁguration and empty all logs and then apply the conﬁguration speciﬁed above. Both the preliminary and the permanent conﬁgurations will be affected.

Select the update mode, which is what you want to remove.

Update mode (1-3) [1]:

All conﬁguration is now complete. The installation program shows the conﬁguration and asks if it is correct.

yes saves the conﬁguration. no runs the installation program over again. abort ends the installation program without saving.

You have now entered the following conﬁguration

Network conﬁguration inside:

Physical device name: eth0 IP address: 192.168.150.2 Netmask: 255.255.255.0 Deactivate other interfaces: no

Computer allowed to conﬁgure from:

IP address: 192.168.128.3

Password: eeyore

The rest of the conﬁguration is kept.

Is this conﬁguration correct (yes/no/abort)? yes

Chapter 2. Installing 3Com VCX IP Telecommuting Module

Now, ﬁnish conﬁguration of the Telecommuting Module from the computer/computers speciﬁed in the installation program.

Installation with a diskette

These steps are performed when installing with a diskette:

• Select an IP address and store it on the installation diskette as described below.

• Insert the installation diskette into the Telecommuting Module’s ﬂoppy drive.

• Plug in the power cord and turn the Telecommuting Module on.

• Connect the network cables to the network interfaces.

• Wait while the Telecommuting Module boots up.

• Conﬁgure the rest through a web browser.

You must ﬁrst insert the diskette into your PC. If the PC is running Windows, open a Command window and run the ﬁnst-en script from the diskette. If the PC is running Linux, mount the diskette, change directory to the mounted one, and run the ﬁnst-en script.

Enter the IP address of the Telecommuting Module on this interface and the network mask for the network.

A network mask can be written in two ways in 3Com VCX IP Telecommuting Module:

• The ﬁrst looks just like an IP address, for example 255.255.192.0 or 255.255.254.0.

• The other way is as a number between 0 and 32. An IP address has 32 bits, where the

number of the network mask indicates how many bits are used in the network’s addresses. The rest of the bits identiﬁes the computer on the network.

Now enter the computer or computers from which the Telecommuting Module may be conﬁgured (the conﬁguration computers).

Following is a sample run of the installation program on the diskette.

Chapter 2. Installing 3Com VCX IP Telecommuting Module

Basic unit installation program version 4.6.5

Press return to keep the default value

Network conﬁguration inside:

Physical device name[eth0]: IP address [0.0.0.0]: 10.47.2.242 Netmask/bits [255.255.255.0]: 255.255.0.0 Deactivate other interfaces? (y/n) [n]

Computers from which conﬁguration is allowed:

You can select either a single computer or a network.

Conﬁgure from a single computer? (y/n) [y]

If you choose to allow only one computer to conﬁgure the Telecommuting Module, you are asked for the IP address (the netmask is set automatically).

IP address [0.0.0.0]: 10.47.2.240

If this IP address is not on the same network as the inside of the Telecommuting Module, you are asked for the router. Enter the IP address of the router on the network where the Telecommuting Module is connected. Now enter the network address and mask of the network containing the conﬁguring computer.

The IP address of the router [0.0.0.0]: 10.47.3.1 Network address [10.47.0.0]: 10.10.0.0 Netmask [255.255.255.0]:

You can choose to allow several computers to conﬁgure the Telecommuting Module, by answering no to the question:

Conﬁgure from a single computer? (y/n) [y] n

The installation program then asks for the network number. The network number is the lowest IP address in the series of numbers that includes the conﬁguration computers (see chapter 3, Conﬁguring 3Com VCX IP Telecommuting Module). The network mask determines the number of computers that can act as conﬁguration computers.

Network number [0.0.0.0]: 10.47.2.0 Netmask/bits [255.255.255.0]: 255.255.255.0

Chapter 2. Installing 3Com VCX IP Telecommuting Module

The IP address of the router [0.0.0.0]: 10.47.3.1 Network address [10.47.0.0]: 10.10.0.0 Netmask [255.255.255.0]:

Then enter a password.

Password []:

Finally, you are asked if you want to reset other conﬁguration.

Other conﬁguration Do you want to reset the rest of the conﬁguration? (y/n) [n]

If you answer n, nothing is removed. If you answer y, you have three alternatives to select from:

2. Revert to the factory conﬁguration and then apply the conﬁguration speciﬁed above. This will affect the permanent but not the preliminary conﬁguration.

3. Revert to the factory conﬁguration and empty all logs and then apply the conﬁguration speciﬁed above. Both the preliminary and the permanent conﬁgurations will be affected.

Select the update mode, which is what you want to remove.

Update mode (1-3) [1]:

All conﬁguration is now complete. The installation program shows the conﬁguration and asks if it is correct.

yes saves the conﬁguration. no runs the installation program over again. abort ends the installation program without saving. Now, eject the diskette from your PC and insert it into the Telecommuting Module’s ﬂoppy

drive. Then power up the Telecommuting Module and wait for it to boot. Then, ﬁnish conﬁguration of the Telecommuting Module from the computer/computers speciﬁed in the installation program.

Chapter 2. Installing 3Com VCX IP Telecommuting Module

Note that the diskette contains a command to erase certain parts of the conﬁguration during boot when the diskette is inserted. Make sure to eject it once the Telecommuting Module has booted up to avoid future loss of data.

If you happen to forget the administrator password for the Telecommuting Module, you can insert the diskette into the Telecommuting Module again and boot it. Note that if you selected anything but 1 as the update mode, you will lose conﬁguration when doing this.

Turning off a Telecommuting Module

Backup the Telecommuting Module conﬁguration (just in case something should happen). You do this on the Save/Load Conﬁguration page under Administration. Once this is done, just turn the computer off. The computer that runs 3Com VCX IP Telecommuting Module is specially designed so that you can switch it off without causing any problems in the ﬁle structure.

Remember to lock up the Telecommuting Module

The Telecommuting Module is a computer with special software, and must be protected from unauthorized physical access just as other computers performing critical tasks. A locked up Telecommuting Module protects against:

• connecting to the console

• connecting a keyboard and monitor

• changing the administrator password using the installation diskette.

• changing BIOS conﬁguration to allow the Telecommuting Module to be booted from a

diskette

For more information about the necessary conﬁguration, see chapter 3, Conﬁguring 3Com VCX IP Telecommuting Module.

Chapter 2. Installing 3Com VCX IP Telecommuting Module

Chapter 3. Conﬁguring 3Com VCX IP Telecommuting Module

You connect to your 3Com VCX IP Telecommuting Module by entering its name or IP address in the Location box of your web browser.

Logging on

Before you can conﬁgure the Telecommuting Module, you must enter your administrator username and password or RADIUS username and password. The admin user is predeﬁned with complete administration privileges.

Log on again

If you have a web connection for Telecommuting Module conﬁguration that is inactive for more than 10 minutes, you must enter the password again and click on one of the buttons Keep changes below and Abandon changes below.

On all pages where changes have been made, the two buttons Keep changes below and Abandon changes below will be shown when you log on again. Keep changes below connects you to the Telecommuting Module and stores the preliminary conﬁguration you have changed. Abandon changes below connects you to the Telecommuting Module and discards the changes you have made on this page.

On pages where nothing has been changed, the Log in again button is displayed. Enter the password and click on the button to re-connect to the Telecommuting Module.

The Telecommuting Module’s encryption key is changed every 24 hours. If you have a web connection for Telecommuting Module conﬁguration when this happens, you must enter the password again. This works in the same way as when your connection has been inactive for more than 10 minutes (see above).

Chapter 3. Conﬁguring 3Com VCX IP Telecommuting Module

Log out

When you have ﬁnished looking at or adding settings, you should log out from the Telecommuting Module. Below the menu there is a Log out button which will end your session.

Note: You will not be logged out automatically just by directing your web browser to a different web address. You should log out using the button to make the browser forget your username and password.

Navigation

There is a menu for quick navigation to all conﬁguration pages. On top of the page, you also see the name of the Telecommuting Module.

Site Map

The Site Map is the ﬁrst page displayed when you have logged on the Telecommuting Module. From this page, you can access Basic Conﬁguration, Administration, Network

Conﬁguration, Logging, SIP Services, SIP Trafﬁc, Failover, Virtual Private Networks, Quality of Service, and Tools. You can also access a special page by the text links below

each category name.

Chapter 3. Conﬁguring 3Com VCX IP Telecommuting Module

Basic Conﬁguration

Under Basic Conﬁguration, select Telecommuting Module Type and the name of the Telecommuting Module. You also enter IP addresses for DNS servers. Here you also conﬁgure if the Telecommuting Module should interact with a RADIUS, a DynDNS or an SNMP server.

Administration

Under Administration, you store or load a conﬁguration. You can also test your conﬁguration to see if it works the way you planned, upgrade or reboot your Telecommuting Module, set date and time, and conﬁgure administration users and passwords.

Network Conﬁguration

Under Network Conﬁguration, you enter the Telecommuting Module’s IP address, the routing for the different networks, and deﬁne groups of IP addresses which are used in various settings of the Telecommuting Module.

Logging

Under Logging, you specify the type of trafﬁc you want to log/alarm and how it should be logged. You can also view the logs and the trafﬁc load here.

SIP Services

Under SIP Services, you conﬁgure SIP encryption, interoperability settings, Remote SIP Connectivity and VoIP Survival.

SIP Trafﬁc

Under SIP Trafﬁc, you conﬁgure the SIP trafﬁc and the SIP registrar in the Telecommuting Module. You can also view current user registrations and SIP sessions.

Chapter 3. Conﬁguring 3Com VCX IP Telecommuting Module

Failover

Under Failover, you conﬁgure the failover team and its dedicated network. You can also view the status of the other team member.

Virtual Private Networks

Under Virtual Private Networks, you conﬁgure the encrypted trafﬁc between your Telecommuting Module and other VPN gateways and clients. VPN connections can be made using IPSec or PPTP.

Quality of Service

The Quality of Service module enables bandwidth limitation and prioritizing for different kinds of trafﬁc through the Telecommuting Module. For each interface you can state a guaranteed and a maximum bandwidth for classes of trafﬁc.

You can also set bandwidth limits for SIP calls and ensure that when there is not enough bandwidth for call media, the call will not be set up at all.

Tools

Under Tools, you ﬁnd tools for troubleshooting the Telecommuting Module and the network.

Overview of conﬁguration

Start by installing the Telecommuting Module as described in chapter 2, Installing 3Com VCX IP Telecommuting Module.

Select the Telecommuting Module Type. The Telecommuting Module must have at least one IP address for each network card to

work. A routing, or path, for each network must also be set on the interface pages under Network Conﬁguration. Go to the Networks and Computers page and enter the networks which are using the Telecommuting Module. For a DMZ Telecommuting Module, also state the Telecommuting Module’s Surroundings.

Go to SIP Services and switch the SIP module on. Then move on to SIP Trafﬁc and conﬁgure the Telecommuting Module to state how SIP

requests should be processed. Use logging to analyze the trafﬁc that passes through the Telecommuting Module. Choose

to log locally on the Telecommuting Module, send logs to a syslog server or send them by email to an email address. Specify the type of logging wanted under Logging. This is also where the logs of trafﬁc through the Telecommuting Module are viewed.

When the conﬁguration is complete, apply it. Go to Save/Load Conﬁguration under Ad- ministration. Select Apply conﬁguration. Now the new conﬁguration is tested. Save it permanently if it works satisfactorily. If the conﬁguration is not satisfactory, select Revert or restart the Telecommuting Module. The old conﬁguration will remain.

Chapter 3. Conﬁguring 3Com VCX IP Telecommuting Module

When the conﬁguration has been applied, you should save a backup to ﬁle. Press Save to local ﬁle to save the conﬁguration.

Preliminary and permanent conﬁguration

3Com VCX IP Telecommuting Module has two kindsof settings: preliminary and permanent conﬁguration. When the Telecommuting Module is running, the permanent conﬁguration controls the Telecommuting Module functions.

When you conﬁgure your Telecommuting Module, you are working with the preliminary conﬁguration. As you change the preliminary conﬁguration, the permanent conﬁguration continues to control the Telecommuting Module functions.

When you are done with the preliminary conﬁguration, you can test it by selecting Apply conﬁguration on the Save/Load Conﬁguration page. Now the preliminary conﬁguration controls the Telecommuting Module functions.

When you are satisﬁed with the preliminary conﬁguration, you can apply it permanently, which copies the preliminary conﬁguration to the permanent conﬁguration. Now the new conﬁguration controls the Telecommuting Module functions.

You can also copy the permanent conﬁguration to the preliminary conﬁguration. This does not affect the permanent conﬁguration or the Telecommuting Module functions, which are

Chapter 3. Conﬁguring 3Com VCX IP Telecommuting Module

still being run by the permanent conﬁguration. You do this by selecting Abort all edits on the Save/Load Conﬁguration page under Administration. This will discard all changes made in the preliminary conﬁguration since last time you applied a conﬁguration by pressing Save conﬁguration.

You can save the preliminary conﬁguration to a ﬁle on your work station (the computer that is running your web browser). Select Save to local ﬁle or Save conﬁg to CLI ﬁle on the Save/Load Conﬁguration page.

A saved conﬁguration can be loaded to the preliminary conﬁguration. Use Browse to search your local computer or enter path and ﬁle name in the box. When you have chosen the ﬁle you want to load, select Load from local ﬁle or Load CLI ﬁle on the Save/Load Conﬁgu- ration page.

You can save the preliminary conﬁguration to a diskette. Insert a formatted diskette in the Telecommuting Module’s ﬂoppy drive and press Save to diskette on the Save/Load Con- ﬁguration page.

You can load a saved conﬁguration to the preliminary conﬁguration. Insert a diskette containing the saved conﬁguration in the Telecommuting Module’s ﬂoppy drive and press Load from diskette on the Save/Load Conﬁguration page.

+ 416 hidden pages

HP 3Com Telecommuting Module Administrator's Guide

Table of Contents

Chapter 1. Introduction to 3Com VCX IP Telecommuting Module

What is a Telecommuting Module?

Quick guide to 3Com VCX IP Telecommuting Module installation

About settings in 3Com VCX IP Telecommuting Module

Chapter 2. Installing 3Com VCX IP Telecommuting Module

Installation

Installation with magic ping

Installation with a serial cable

Installation with a diskette

Turning off a Telecommuting Module

Remember to lock up the Telecommuting Module

Logging on

Log on again

Log out

Navigation

Site Map

Administration

Logging

SIP Services

Failover

Virtual Private Networks

Quality of Service

Tools