Snom 4s User Manual

snom 4S NAT Filter Admin Manualsnom 4SNAT Filter Version 2.11

10 • Architecture[ S N O M 4 S N A T F I L T E R ]to register and needs the support of the SBC, the SBC will set up a local data structure r

snom technology AG • 11[ S N O M 4 S N A T F I L T E R ]2.2.1 How does NAT work?NAT is essentially a translation table that maps public IP

12 • Architecture[ S N O M 4 S N A T F I L T E R ]In SIP it is legal to send from a different port than the receiving port. When this is be

snom technology AG • 13[ S N O M 4 S N A T F I L T E R ]devices that have been designed without having NAT in mind. These devices can regi

14 • Architecture[ S N O M 4 S N A T F I L T E R ]When the NAT Filter sees a message that contains information about sending media (

snom technology AG • 15[ S N O M 4 S N A T F I L T E R ]2.3 SBC Behaviour2.3.1 RegisteringWhen a user agent registers, it puts its

16 • Architecture[ S N O M 4 S N A T F I L T E R ]0637ced821ef40a3;ua=c9b140ab598290e5bb491e9c3aaca440 Via: SIP/2.0/UDP 203.145.183.113:1297

snom technology AG • 17[ S N O M 4 S N A T F I L T E R ]simply not programmed to allocate an address properly or because it is behind symm

18 • Architecture[ S N O M 4 S N A T F I L T E R ]a=rtpmap:0 pcmu/8000 a=rtpmap:8 pcma/8000 a=rtpmap:3 gsm/8000 a=rtpmap:18 g729/8000 a=rtpm

snom technology AG • 19[ S N O M 4 S N A T F I L T E R ]The distribution of user agents to a server is performed using DNS SRV (

snom 4S NAT Filter Version 2.11© 2004-2005 snom technology Aktiengesellschaft. All Rights Reserved.This document is supplied by snom technology AG for

20 • Architecture[ S N O M 4 S N A T F I L T E R ]The snom 4S NAT Filter includes a STUN server that operates on the SIP UDP port. User agen

snom technology AG • 21[ S N O M 4 S N A T F I L T E R ]2.7 Defining the Maximum Session TimeThere are a couple of timeout-related setting

22 • Architecture[ S N O M 4 S N A T F I L T E R ]2.

snom technology AG • 233 InstallationIf you want to install the product on your own, this chapter will provide you with the necessary information.3

24 • Installation[ S N O M 4 S N A T F I L T E R ]netstat command to check which ports are being used on that machine. You can change the po

snom technology AG • 25[ S N O M 4 S N A T F I L T E R ]If you agree to the license agreement, the next screen will ask you to enter the l

26 • Installation[ S N O M 4 S N A T F I L T E R ]forget the port number, you need to look it up later, using the netstat comma

snom technology AG • 27[ S N O M 4 S N A T F I L T E R ]may manually start the application using the services manager. The last InstallShi

28 • Installation[ S N O M 4 S N A T F I L T E R ]3.2 LinuxAfter you downloaded the RPM from our web site you can either install it via the

snom technology AG • 29[ S N O M 4 S N A T F I L T E R ]this is the first installation of the snom 4S proxy on this host from a RPM package

snom technology AG • 3Table of Contents1 Overview ...51.1 Applications ...

30 • Installation[ S N O M 4 S N A T F I L T E R ]3.

snom technology AG • 314 Configuration4.1 Logging InFirst of all, you need to log in to the server (see figure 2). The default login name is “admin”

32 • Confi guration[ S N O M 4 S N A T F I L T E R ]For http and https, you need to know the port numbers when you want to log in. We recomme

snom technology AG • 33[ S N O M 4 S N A T F I L T E R ]4.3 System Settings4.3.1 LoggingThe Log Level defines the granularity with

34 • Confi guration[ S N O M 4 S N A T F I L T E R ]messages are written, a log level of 9 means that all possible log mes-sages are written.

snom technology AG • 35[ S N O M 4 S N A T F I L T E R ]NAT Filter. Because the NAT Filter itself can be operated in a server farm, you ca

36 • Confi guration[ S N O M 4 S N A T F I L T E R ]The Hide Routing flag will replace route sets with a unique route index when requests o

snom technology AG • 37[ S N O M 4 S N A T F I L T E R ]Unfortunately, only a small percentage of existing user agents deal proper

38 • Confi guration[ S N O M 4 S N A T F I L T E R ]If you set this variable, the NAT filter will attempt to compress the message until it fits

snom technology AG • 39[ S N O M 4 S N A T F I L T E R ]packet. This setting does not only help you in making the packets shorter, it can

4 • Contents[ S N O M 4 S N A T F I L T E R ]4.3.4 Media Ports ...

40 • Confi guration[ S N O M 4 S N A T F I L T E R ]4.4 Timeout SettingsIn contrast to previous versions, the time related settings

snom technology AG • 41[ S N O M 4 S N A T F I L T E R ]4.4.2 Call TimeoutsUnfortunately, in SIP little attention has been given to the pr

42 • Confi guration[ S N O M 4 S N A T F I L T E R ]is not answered after a certain timeout, the filter assumes that the call is over and will

snom technology AG • 43[ S N O M 4 S N A T F I L T E R ]To restrict the login, you should set a username („admin“ is the default) and a pa

44 • Confi guration[ S N O M 4 S N A T F I L T E R ]4.6 Outbound Proxy ListIn addition to the previously mentioned outbound proxy you may sp

snom technology AG • 45[ S N O M 4 S N A T F I L T E R ]The algorithm for searching the outbound proxy is simple. The filter first g

46 • Confi guration[ S N O M 4 S N A T F I L T E R ]4.9 TraceThe NAT Filter keeps a list of the last trace entries in memory. You may view t

snom technology AG • 47[ S N O M 4 S N A T F I L T E R ]The Source/Destination indicates the IP address where the packet was sent

48 • Confi guration[ S N O M 4 S N A T F I L T E R ]was terminated because the maximum session time has been reached. This time is in

snom technology AG • 49[ S N O M 4 S N A T F I L T E R ]4.12 Currently Handled UAThis table shows the currently handled UA with their SIP

snom technology AG • 51 OverviewNetwork address translation (NAT) is a reality today. There have been many discussions about the evil and the good

50 • Confi guration[ S N O M 4 S N A T F I L T E R ]4.

snom technology AG • 515. Web Server IntegrationThe SBC can use a web server as application server. This way you can use PHP, ASP and a

52 • Web Server Integration[ S N O M 4 S N A T F I L T E R ]5.1 Interface to the Web ServerThe interface to the web server is built upon ht

snom technology AG • 53[ S N O M 4 S N A T F I L T E R ]• If the packet was already authenticated or internally generated, the further pr

54 • Web Server Integration[ S N O M 4 S N A T F I L T E R ]correctly. The web requests that the SBC sends to the application server has t

snom technology AG • 55[ S N O M 4 S N A T F I L T E R ]is authenticated. • If realm, username and password are set, the request is regul

56 • Web Server Integration[ S N O M 4 S N A T F I L T E R ]• The parameter “explanation” contains the explaining text that is adde

snom technology AG • 57[ S N O M 4 S N A T F I L T E R ]• The parameter “to_ua” is set to “true” if the SBC believes that the call will g

58 • Web Server Integration[ S N O M 4 S N A T F I L T E R ]ter, the From-header will be set to the value that you pass here.Please note t

snom technology AG • 59[ S N O M 4 S N A T F I L T E R ]Currently, the following reasons are available:• “BYE” means that the call w

6 • Overview[ S N O M 4 S N A T F I L T E R ]1.1 ApplicationsThe filter can be used in the following scenarios:• Corporations. Corporati

60 • Web Server Integration[ S N O M 4 S N A T F I L T E R ]5.

snom technology AG • 616. SNMPThe simple network management protocol (SNMP) is a widely used protocol for checking what’s going on in your

62 • SNMP[ S N O M 4 S N A T F I L T E R ]space etc.), the setup is a little bit more difficult that the setup of a stan-dard sensor.A readab

snom technology AG • 63[ S N O M 4 S N A T F I L T E R ]For the SIP packets, the SBC measure only the received packets. It measures the nu

64 • SNMP[ S N O M 4 S N A T F I L T E R ]6.

snom technology AG • 657 Checklist for InstallationWhen snom or one of their partners perform the installation for you, the following information i

66 • Checklist for Installation[ S N O M 4 S N A T F I L T E R ]tion tool.• Please tell us the login address (host and port), user

Reader‘s Feedbacksnom technology AG welcomes your evaluation of this manual and any sugges-tions you may have. These help us to improve the quality an

© 2004-2005 snom technology AGAll rights reserved.snom technology AktiengesellschaftGradestr. 46, 12347 Berlin, GermanyPhone: +49 (30) 39833-0mailto:i

snom technology AG • 7[ S N O M 4 S N A T F I L T E R ]• Both http and https as web interface for simple access from any-where on th

8 • Overview[ S N O M 4 S N A T F I L T E R ]• The first exception is a REGISTER request. When a user agent tries to register and needs th

snom technology AG • 92 Architecture2.1 The NAT Filter and SIPIn the SIP architecture, the SBC acts as the first proxy that is contacted